last executing test programs: 2m38.617230983s ago: executing program 2 (id=2820): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x2, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x5, 0x402) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) 2m38.090740307s ago: executing program 2 (id=2824): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) readv$auto(r1, &(0x7f0000000100)={0x0, 0x2}, 0x7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/afs/addr_prefs\x00', 0x4000, 0x0) mkdir$auto(0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r2, 0x9fe, 0x40000000000, 0x2008000}) 2m35.334060682s ago: executing program 2 (id=2837): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) readv$auto(r1, &(0x7f0000000100)={0x0, 0x2}, 0x7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/afs/addr_prefs\x00', 0x4000, 0x0) mkdir$auto(0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x1, 0x84) bind$auto(r4, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r2, 0x9fe, 0x40000000000, 0x2008000}) 2m35.003956646s ago: executing program 2 (id=2838): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000001280)={r0, &(0x7f00000001c0)="a80feaca43c44b76d734ffed27429513f7e69c720ca31fea854f38c63a8825c806cf85e1d94f4987dde46622f06319f11d86c71604d3b54bc28702ae5ff4c996654e1f08e1ac992e2724236841e1fad4513c5f23f59efab8551560f9d7bb1fd3ca1a42f62266c19fffa5f0f94a99d3ca8e73bec3e36a4d2323489004dbb100242730a617b9f4f467f2408b97ef0d1cbdab2ea367dc3e5a9f3d3f227ad649fdb16c4169a45b552c6770dc3974e6b5d76d9dccf31649a74ba6dec74e", 0x7, &(0x7f0000000280)="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", 0x1, &(0x7f00000000c0)="720a0d7643cf9248ba42af7c2fe5bd71009c4c508e71c5c68987ecfeb3d89ae226919e", &(0x7f0000000140)=0x4000008}) io_uring_setup$auto(0x5, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [0x2, 0xc99], {0x4, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0x10000, 0x6, 0x8000000000000001}, {0x100, 0x7, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x2}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r2, 0xe600}, 0xf) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0x1000}, 0x1, &(0x7f0000000080)={&(0x7f0000000100)='y%', 0x8000}, 0x4, 0x2) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x0, 0x2}, 0xc) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r7, &(0x7f0000000040), 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0x200eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0xc085) setfsuid$auto(0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x4000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) semctl$auto(0x1, 0x2, 0x13, 0x8) r8 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r8, 0x29, 0x20, 0x0, 0x20) 2m34.486933143s ago: executing program 2 (id=2841): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000040)={0x3, 0x1, 0x7db9, 0x70, 0x9}) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x407ffff000) 2m34.168171246s ago: executing program 2 (id=2843): mmap$auto(0x0, 0x1000000000000003, 0x4000000000dd, 0x40eb1, 0x401, 0x300000000000) (async) socket(0x22, 0x3, 0x6ee9) (async) io_getevents$auto(0x1, 0x401, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x200000000000001, 0x6}) (async) connect$auto(0x3, &(0x7f0000000000)=@isdn={0x22, 0x4, 0xfc, 0x81, 0xff}, 0x58) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) listxattrat$auto(r0, 0x0, 0x1000, 0x0, 0x2) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x15, 0x5, 0x106) (async, rerun: 64) socket(0x2, 0x3, 0xa) (async, rerun: 64) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x46000, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) setsockopt$auto(0x4, 0x4, 0x3, &(0x7f0000000000)='!1\xa5\x01\xbb\x94\x92Q', 0x800000e) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r1, &(0x7f0000000040)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="b81844f3450d1fc226ba8c58697e8be085af1022623d479b5c192bb087620b0ebfae7004fdae60eab0c902b9f88ce64f58251df71bbad14cc991bbd9580cd96d347cdb905673bec412f116b6eb2881abc4cc5b53c6b19cd84d700067217edc82d32138c1acf080a93db66c68a047d896a9b4", @ANYRES32=r2], 0x44}}, 0x80) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) (async, rerun: 64) socket(0x1d, 0x2, 0x2) (async) connect$auto(0x3, 0x0, 0x55) r3 = socket(0x10, 0x3, 0x6) close_range$auto(r3, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) fanotify_init$auto(0x65, 0x2) (rerun: 32) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) (async) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) 2m18.886870068s ago: executing program 32 (id=2843): mmap$auto(0x0, 0x1000000000000003, 0x4000000000dd, 0x40eb1, 0x401, 0x300000000000) (async) socket(0x22, 0x3, 0x6ee9) (async) io_getevents$auto(0x1, 0x401, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x200000000000001, 0x6}) (async) connect$auto(0x3, &(0x7f0000000000)=@isdn={0x22, 0x4, 0xfc, 0x81, 0xff}, 0x58) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) listxattrat$auto(r0, 0x0, 0x1000, 0x0, 0x2) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x15, 0x5, 0x106) (async, rerun: 64) socket(0x2, 0x3, 0xa) (async, rerun: 64) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x46000, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) setsockopt$auto(0x4, 0x4, 0x3, &(0x7f0000000000)='!1\xa5\x01\xbb\x94\x92Q', 0x800000e) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r1, &(0x7f0000000040)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="b81844f3450d1fc226ba8c58697e8be085af1022623d479b5c192bb087620b0ebfae7004fdae60eab0c902b9f88ce64f58251df71bbad14cc991bbd9580cd96d347cdb905673bec412f116b6eb2881abc4cc5b53c6b19cd84d700067217edc82d32138c1acf080a93db66c68a047d896a9b4", @ANYRES32=r2], 0x44}}, 0x80) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) (async, rerun: 64) socket(0x1d, 0x2, 0x2) (async) connect$auto(0x3, 0x0, 0x55) r3 = socket(0x10, 0x3, 0x6) close_range$auto(r3, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) fanotify_init$auto(0x65, 0x2) (rerun: 32) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) (async) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) 11.524187409s ago: executing program 1 (id=3286): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x2, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x6, 0x3d, 0x8, 0x7, 0x100000000}}) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x9, 0x0, [{0x40000021, 0x400, 0x2}]}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r4, 0x0, 0xa8) fcntl$auto(r0, 0x400, 0x1) shmctl$auto_SHM_LOCK(0xfffffffa, 0xb, &(0x7f0000000200)={{0x8, 0xee01, 0xee01, 0x80000000, 0x20000, 0x2, 0x2b30}, 0x93f, 0x5, 0xfffffffffffffffc, 0xa359, @raw=0x1000000, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000840)="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", &(0x7f00000001c0)="18b9bf331e29e8a5ca32f2e8f7c974a40684409e3ac7e6775acc461b6cb389dcae529e5ed48dd07b5a1003a97296185d"}) fsconfig$auto(r4, 0x80000000, &(0x7f0000000140)='\x00', &(0x7f0000000180), r5) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r6) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) execve$auto(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 10.702277954s ago: executing program 1 (id=3289): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001090a9f8e1e57cb62c54e376ed3f7c1d7dc17334646b881b9edfa576a8cedf6cea173cefef78e7925cc1e44b1e26f9bd878fa9fd586b87a3a4db0e9354a50200058d7320a508326133ae6f6ecab7f2ed392ec3ab0a95b73274a0dd38d6b917654f071fc4316416fcdde8ba81543b46c3fbba75a48517a5", @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980080001808847338012000100898771f1c19f17790485908288a8000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/afs/addr_prefs\x00', 0x4000, 0x0) mkdir$auto(0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r4, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0xa, 0x1, 0x84) bind$auto(r5, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r3, 0x9fe, 0x40000000000, 0x2008000}) 7.24517996s ago: executing program 0 (id=3301): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0xffffffbffffffffd, 0x4000000000df, 0x1c, r1, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) unshare$auto(0x2000000000000003) 6.983804524s ago: executing program 1 (id=3304): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000003c00), 0x40402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x2) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) r2 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001200)='/proc/thread-self/mounts\x00', 0x28000, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r2, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9cdfc6bbfa000000", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf250100000005001801000000000800ef000400000030004e01e67e84369c59843e44be82210d6d65aeae0e2a1528a21f7c10b9bfbb1c29882b5ad9c6c90ea75321e690ef2c0400ec0006009800fdff0000360048014d95cbb8d07003710ce2da38f3cc03bd882c579fd3e272a2e5bc1f2552528f1ee8f736391ffba9de0de6b33e57405335be21000004006700"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = socket(0xa, 0x3, 0x73) setsockopt$auto(r5, 0x29, 0x1, 0x0, 0x3) landlock_restrict_self$auto(r2, 0x6) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0xa) write$auto(0x3, 0x0, 0x100085) 5.756201752s ago: executing program 1 (id=3307): clock_getres$auto(0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setfsuid$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) open(0x0, 0x22240, 0x155) (async, rerun: 32) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000003c0)={{0x1, 0xfffffffe, 0x10001, 0x3}, 0x101, 0x4, 0x8001, "1b2be85a6b6d7d3340b7aa99dad2fe2d68f658f3bf0b9c0500"}) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) (async) write$auto(0x3, 0x0, 0xffd8) 4.614035888s ago: executing program 4 (id=3312): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0xffffffffffffffff, 0x20005, 0x1, 0x40000000000ebd, r0, 0x9) r1 = prctl$auto(0x41, 0x5, 0x0, 0x1, 0x2000000) mmap$auto(0x9, 0x8, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x4000000) socket(0x9, 0x1, 0xf0d) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0x0, 0x0, 0x0, 0x7) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r2, 0x0, 0x101) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r1, 0x0, 0x5, 0x7, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_MAX_PACING_RATE(r3, 0x1, 0x2f, &(0x7f0000000000)=':-\x00', 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 4.532350185s ago: executing program 1 (id=3313): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) readv$auto(r0, &(0x7f0000000100)={0x0, 0x2}, 0x7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/afs/addr_prefs\x00', 0x4000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x69) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x9fe, 0x40000000000, 0x2008000}) 4.364268751s ago: executing program 3 (id=3314): r0 = open(&(0x7f0000000300)='./bus\x00', 0x12d441, 0x41) fcntl$auto(r0, 0x0, 0xa8) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r0) mmap$auto(0x0, 0x8, 0xdf, 0x200009b72, 0x7, 0x28000) (async) r1 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x2, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x26241, 0x20) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) socket(0x2, 0x1, 0x106) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r4) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xd0, r5, 0x504, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x0, 0x1, 0xd}, @CTRL_ATTR_FAMILY_NAME={0x0, 0x2, 'nlctrl\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24050803}, 0xc000) (async) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nullb0/hctx1/state\x00', 0x101000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) listen$auto(0x3, 0x81) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x8a880, 0x0) 4.250179851s ago: executing program 4 (id=3315): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) poll$auto(&(0x7f0000000280)={r0, 0xfffa, 0x6}, 0x40000001, 0x80000001) getsockopt$auto_SO_PRIORITY(r0, 0x216, 0xc, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x4, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/pci0000:00/0000:00:01.1/dma_mask_bits\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) readv$auto(r1, &(0x7f0000000040)={&(0x7f0000000100)}, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x9, 0x9, 0x101) sysfs$auto(0x2, 0x100000000000036, 0x0) r2 = fsopen$auto(0x0, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400080, 0x0) epoll_create$auto(0x1) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/softirqs\x00', 0x682, 0x0) preadv$auto(r4, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c63f0bd4bd4890b490124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f174ce961d6a33c481d540e5282df56757d5", 0x5}) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, r2, 0x0) 3.547379042s ago: executing program 0 (id=3316): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) poll$auto(&(0x7f0000000280)={r0, 0xfffa, 0x6}, 0x40000001, 0x80000001) getsockopt$auto_SO_PRIORITY(r0, 0x216, 0xc, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/pci0000:00/0000:00:01.1/dma_mask_bits\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) readv$auto(r1, &(0x7f0000000040)={&(0x7f0000000100)}, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x9, 0x9, 0x101) sysfs$auto(0x2, 0x100000000000036, 0x0) r2 = fsopen$auto(0x0, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400080, 0x0) epoll_create$auto(0x1) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/softirqs\x00', 0x682, 0x0) preadv$auto(r4, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c63f0bd4bd4890b490124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f174ce961d6a33c481d540e5282df56757d5", 0x5}) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, r2, 0x0) 3.497724199s ago: executing program 4 (id=3317): mmap$auto(0x0, 0x400008, 0x0, 0x1009b72, 0x2, 0x7ffe) fcntl$auto_F_CREATED_QUERY(0xffffffffffffffff, 0x404, 0x6) mmap$auto(0x0, 0x2020009, 0x100004, 0x32, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x80002, 0x7ffd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) r0 = memfd_secret$auto(0x0) r1 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="c8040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x4c8}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c03, 0x0) r3 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) pread64$auto(r3, 0x0, 0x1, 0x401) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x5, 0x2020009, 0x4, 0xeb1, r0, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x591101, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x5, 0xf14, 0x7fffffffefff, 0xffffffffffffffff, 0xffffffbfffffffff, 0x8, 0xb8a, 0x8002c, 0x2c, 0x5, 0x2}) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r4, 0x80044dfd, &(0x7f00000014c0)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) 3.400065366s ago: executing program 3 (id=3318): r0 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x5, 0x0, 0x7) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = getsockopt$auto(r0, 0x11c, 0x2, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) r3 = socket(0x2, 0x3, 0xa) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x6f53) close_range$auto(0x2, 0xa, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x2, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x181881, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x11, 0xa, 0x9) bind$auto(r7, &(0x7f0000000140), 0x10) sendmsg$auto_NETDEV_CMD_NAPI_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000dcdf250e000000080002000900020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20008084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x389}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}, @NETDEV_A_QUEUE_ID={0x8}]}, 0x3c}}, 0x40) close_range$auto(0x2, 0xa, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) 3.104914693s ago: executing program 0 (id=3319): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) writev$auto(0xffffffffffffffff, 0x0, 0x3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b47, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) 3.073425692s ago: executing program 4 (id=3320): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x0, 0x400005, 0xde, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40000, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000011, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000010c0), 0x84d5d9752a57f12, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40000403c6f2b, 0x0) socket(0x5, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x1, 0x4) socket(0xa, 0x5, 0x84) bpf$auto(0x12, 0x0, 0xcf) execve$auto(&(0x7f0000001080)=':,\x00', 0x0, &(0x7f0000001140)=&(0x7f00000012c0)='\x01\x98\x8c~\x02\x0e\xd0^\xff!\f\xaf\x91\x19\x01\xa1,|H\xecf8\x8c\x9a\xd9h9>_H\xc8\x93\x9f9\x9b\x1d\x13\xf3\xae\x88)\a\xe3>B~\x95\x12\xf1I\xf2\xa2\x8eD\x03\xe48=\xa8\x10\xf0\x87\xf2\x1dC\x9c\x8a\x05\x00\x00\x004\xf5p4\xc7yv\x15\xf4w\xb9+\xd3?)\x1b\x94\xe8\x1b\xaa\xa1\xf5(\t6\xc1c\xb8\x91\xd8\xa1\a\xe1U\b\xf41\xc8;\x19\b\xc3w\xb9\x14\xd9\xc5TdZJ\xcf\xd6\xecQDa\xf4\x00\x00\x00\x00\x00\x00\xadv\xfc\xa4\x00\'e4S\x7f{\xd4k\x8f\xb5\xc4^\xf65\xd7\xbc\x12\xa6+^\x1a\xbb~\x0e\xd0j\x0f>\x9f\xce\x0e\xff\xd4\x0e\xe6\xe8[{\x8a<\x15i\x12U\x80\xf0\x85\xe2\x81\x8a2]=&\xcb\xc7M\xb2\xae\xc2\xc9.\x8eTy\x02\x18\xbeK]\x03!+#\xcb|\xe8\xd0\xe3\xa3\v\xa5r\xb8\xbb,\xd0\x9c4\xbd\xe1j\xac\x8a<\x1dS\x83\xff\xb2\x8c\xa5\x85=Q\x97\xe4\xd3\xf9\xde\x96\xae\x042Y\xae\xd7EW\x0f\xf0\xb9\xb7+\xab\x925\xa3\xb2~%z\x9f9\xda@\x1f\xc7\xcfy\x1a\xa2\xe2\xa8\x04\xc1f\xd4e\xe8\t\xbd\xd59\x93\x8c\xc6u\xf7(\x1e\x1f\x01b\xe5\x9fB\xa8\x00'/326) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) write$auto(r2, 0x0, 0x10007c) clone3$auto(&(0x7f0000000380)={0xf, 0x8, 0x6, 0xfffc, 0x100000001, 0x9, 0x4, 0x7f, 0x10, 0xffffffff, 0x188}, 0x5) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000400)={0xe, 0x2, 0x6, 0x9, 0x3ff}) 2.867760769s ago: executing program 3 (id=3321): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0x840, 0x0) lseek$auto(r0, 0x48f, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x2}, 0x2) sysfs$auto(0x2, 0x1f, 0x0) r2 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0) 2.500801055s ago: executing program 0 (id=3322): io_setup$auto(0x1, &(0x7f00000000c0)=0xf) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') statmount$auto(&(0x7f0000000000)={0x2, @inferred=r0, 0x400000080000029, 0x100000001, 0x8}, 0x0, 0x800005, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) ioctl$auto(0x3, 0xc0305602, 0x38) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000340)={{r0, 0x0, 0x80000001, 0x0, 0x2, 0x0, &(0x7f0000000180)=0x1ff}, 0x2, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 2.484138934s ago: executing program 3 (id=3323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=0x425792c7) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "386ea25c05200a8c522883de50158eec17952e4c04417e2b5ed7097a9515b757"}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8104) sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1802", @ANYRES16=r2], 0x218}, 0x1, 0x0, 0x0, 0x4080}, 0x4000040) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000009c760700000000000000f39c07535bd9041bad70fcf69b983549db66098244095a9f38b23e242fa125bbce7a99abd0", @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf25000000000500130002000000050007000900000006001d00070000000c0010000200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) getsockopt$auto(0x100000006, 0x0, 0x21, 0xfffffffffffffffe, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.716166433s ago: executing program 0 (id=3324): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000003c00), 0x40402, 0x0) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x2) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) r2 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001200)='/proc/thread-self/mounts\x00', 0x28000, 0x0) epoll_create$auto(0x3e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9cdfc6bbfa000000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fddbdf250100000005001801000000000800ef000400000030004e01e67e84369c59843e44be82210d6d65aeae0e2a1528a21f7c10b9bfbb1c29882b5ad9c6c90ea75321e690ef2c0400ec0006009800fdff0000360048014d95cbb8d07003710ce2da38f3cc03bd882c579fd3e272a2e5bc1f2552528f1ee8f736391ffba9de0de6b33e57405335be21000004006700"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/lapb2/statistics/tx_packets\x00', 0xa00, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x3, 0x73) setsockopt$auto(r4, 0x29, 0x1, 0x0, 0x3) landlock_restrict_self$auto(r2, 0x6) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0xa) write$auto(0x3, 0x0, 0x100085) 1.383062989s ago: executing program 4 (id=3325): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0x82502, 0x0) write$auto(r0, 0x0, 0xa) read$auto(r0, &(0x7f0000000040)='&-)[[{)\xc5\x12.\x00', 0xaafa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x8000000000000eb1, 0x401, 0x7fff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xaa801, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x28c83, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto(0xf, r2, 0x1, 0x4053) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000080)={{@inferred, 0x0, 0x7, 0x9, "86362c746689ae16423d49e2a5fac50222481f59df3b96ecafc32c611fb62b6a5bf25912cc9eef3b7eecb84e", @inferred=r2}, 0xfffffff8, 0x0, 0x8, @inferred, @enumerated={0x0, 0xe, "063c3f8c31bd55e86cf2db8ad963f8acde068a5d66b9161c0c0e45a531cfd4466ec74dca749cb5dbee3aa6411af4226fea81fed17eb5c3fa4a3fdfef2115a1cc", 0x7, 0x3}, "64308865bdb8fe205493f2f3569408bb7d10494bf8fc846ceedb75db3060a310a150948a4f3363f2b46b45d914b5f8bb0ef5f2140011508bb0bc88e4d72c9001"}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x200008d0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x100) read$auto(0xffffffffffffffff, &(0x7f0000000980)='-$+!{!$!/&-]\x00', 0x7fff) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r3) sendmsg$auto_IEEE802154_DEL_IFACE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6f88ffacf733957e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0xdc}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0xfffffffffffffffe}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) syz_clone(0x22087100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.251650406s ago: executing program 3 (id=3326): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) (async) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f00000003c0)=0x8) (async) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) (async) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) (async) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0) mmap$auto(0x0, 0x420009, 0x1, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x15, 0x5, 0x0) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async, rerun: 64) write$auto(0x3, 0x0, 0x70) (async, rerun: 64) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0xbc) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0) read$auto_stats_fops_(r3, 0x0, 0x0) (async, rerun: 32) unshare$auto(0x3) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x6, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 891.331551ms ago: executing program 1 (id=3327): socket(0x2, 0x3, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4a, 0x9) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x3000000000000, 0x4004044}, 0x8000) 631.518737ms ago: executing program 4 (id=3328): stat$auto(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000004c0)={0x10, 0x51, 0xe44e, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x8, 0x8, 0x8000000000000000, 0x4, 0x3, 0x1, 0x6d, 0xb89}) socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x54) r0 = socket(0xa, 0x3, 0x3a) ioctl$auto(r0, 0x890c, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200204, 0x15) semctl$auto_IPC_STAT(0x1, 0x6, 0x2, 0x3) 380.717146ms ago: executing program 0 (id=3329): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x2) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) r2 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001200)='/proc/thread-self/mounts\x00', 0x28000, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r2, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9cdfc6bbfa000000", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf250100000005001801000000000800ef000400000030004e01e67e84369c59843e44be82210d6d65aeae0e2a1528a21f7c10b9bfbb1c29882b5ad9c6c90ea75321e690ef2c0400ec0006009800fdff0000360048014d95cbb8d07003710ce2da38f3cc03bd882c579fd3e272a2e5bc1f2552528f1ee8f736391ffba9de0de6b33e57405335be21000004006700"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = socket(0xa, 0x3, 0x73) setsockopt$auto(r5, 0x29, 0x1, 0x0, 0x3) landlock_restrict_self$auto(r2, 0x6) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0xa) write$auto(0x3, 0x0, 0x100085) 0s ago: executing program 3 (id=3330): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000001280)={r0, &(0x7f00000001c0)="a80feaca43c44b76d734ffed27429513f7e69c720ca31fea854f38c63a8825c806cf85e1d94f4987dde46622f06319f11d86c71604d3b54bc28702ae5ff4c996654e1f08e1ac992e2724236841e1fad4513c5f23f59efab8551560f9d7bb1fd3ca1a42f62266c19fffa5f0f94a99d3ca8e73bec3e36a4d2323489004dbb100242730a617b9f4f467f2408b97ef0d1cbdab2ea367dc3e5a9f3d3f227ad649fdb16c4169a45b552c6770dc3974e6b5d76d9dccf31649a74ba6dec74e", 0x7, &(0x7f0000000280)="3388e3ab99bce9f20440c8832f303877d6a726402934851889217b04d8cd87959c4e15cd3fa593e9fc940dc2c1be77351ae02acc149e521ec5111d8dea8bf1c9a1cb4730ba33d25c40851e03453bb89d4eab3fc7d85f00e8e89b879051fe6736b54e1d44d64861ab81baafa4b77d98dc1dc7663c348fd7b7f2479fde784b929de776473b132ebf10f6d2cd8550b8e7c39f0630f1b5a53d342ea1174c584cb87729d5cf03a243b14794639e339767b2532744783c265a1fed0205bb6b29b78196c90149c02e3dc5e2a1383508f109b815b546e64c59ccf46ce57ce8b99ff347a42b53e26d276a042239a9ea2bdf0870efa3dc5be9c3a09d91db3370dcde5f86a1314366913598a80a58b7651a5e27b0c98840485dbab51262c8028f3c41fa16ef774d3b7f5bde23a60332e01193508a2403af692fb5ce51c0a27637ce181b00333c925051689f9068db61faab09a369625541842b910ddad3cd06f26cc6a8eb2e91af11d8c28fa6cbd503e3391424d2f10193aaf469fae9cba2455b1b6cdcb26955eb9a7bf5f9bc9219a811a5e98ea843597874d7d82f70f714188e75953a832b88ea7d0726b4936476c3b50f33f4bfc41a49bf5452db0aecd0ba2ca4021d488ca370cb55218c7c0f511bf7d8f1f1ce866a7e4c0b4831eb24d76bcf9a56101199c14e750d717c35364ee0503af5ff173c43260b38838764dcde587db54622ff9356647b5a8fb39ae82aaffdfe4f9c226a0b7f6789dac59c84bb58dc8c4b053f6abe7ca73b9d464c016fe4c03a6ae561f22dd1ed78be7d59faf000e34c53fcf4e57a3017da0bef43377579e3d59a0c314adb87392f18b6e81c733f94b732d58d9dea38ed1ee87b00df14958a219cff1fc2d5b7ef3a0c48a72fec5008bb079cba6f401761ea99fce3e65fb0071cdae411cd4a80b7ae1a471782a33736fb30da58490ea0a82f0baa8cb07d331bd3b14ed7d1d6c7b25567269d7b00fe53070d9a2b7413388d969db3868ba77f5ee3219bf9665309adffe4f9436e57f0fa6f24848eb5fdb2b95f3a0741e2f7a4f01f533ed3b1a0f1402ab3aeb063d8652da887ad7640121229ae7b35cff93f7d8c141cf87626d7cea1a1b5aea19cede61a27b6d133eb6b554096c69fa83ebcf161cd95031af5b0a4c9010792b2327d589d5f2eb1898c460f3f14e2c3a093a3db2cc355c3eb97c1d51ada7aa8811f6ae656c13421ad638e41186ec7c1c141d4d95af2dfe39e16dd3396a7d3faddc9e1a3d1cb1bb3ee970f11364a1930efab62cc629b0b91c0be1faa4617b8ebbd855c977e2038db174d609ad11f4eabb0f2e49de33f9e9a3cad8b93cb3a3de57e59b7709fe27c9c7c6980e89f75e40ef2737fe337682be08c2d08bd2df690877e28d1039acabfd4044f51ee85a3f9a18b5d176896e3fdcdc8e72e7189928faaff56fa851a855ad66a5b9b1ef966de461227278e75609d46729189d1677b8985229fb36c218f3165841997a324c22e32bef2b8e5be0c1884589d69b86088c7b1c380a98c8bb7dda79ddc4425b13b7d3dc90013ce93935f45eeccb35248c29c479f7eec209072e5545641fb3d30aa8e1590accf68e4a65d578bb8e2f6cbf33464457d9ab065a5f81f4d5c92856f33ed20fc4dada1de3cb17da61b69fc89f5c7722adfab4619b69800773bee36845206fc2232ff3f6c192c6925f2d499c9ead637c72432785515142c3727e678b1b4b53ec492ef41923ce19b5f52207022acbd8c3ddfc4879e3f04e650cd446aa7c6f2736dddd8d91f75aed1a24ecf099ca0eb10232f944d63c7bd5616d788d7a1943d1c5b7d891559cbd432a741234e74618d7cc212257b9583fbc8bb86c91667042e0f11ca1e1150432a2bcbd82344a309bb72a115e3b254e391a73a554f23189b900994bb249aacdef6b1583ece844f65e92ea0a16640761a41d58500dfdc00c3f76b40dffb7835ac6a5b7a2e109cdfe65830b17e92e9909b789143f70d238c9292dca3026efb7dfaa91214fe005c8677c6a05379a64b010cee3a09ec2ba8116cb86705cdbad7096f7a849739110811fffa881b8d195501a13ad9cdb434ed0791ab97799cfd8c6b34f9b342155b7d2085ae9207a636c10dadefcf336f6357bb3cdcac38a0ab2623aad0c5a46f778b8160b1aff9ca7557f95750c51e02e9a129eb4b9c0208cc778d0161fa04a26a5411de7abb7512ed29f7d568509b2829c3c3596f7fef41f65de3c16487f6c443f60df88bad38e3cdb9dc0f182e7a1cc6a9e89caa47cfb87d799552b0598f68c7d8b6a84690608e403f1f06b4600df45cc7eb2eabfc56c72fdca01361b4670ed246578a49190bf44c1d076611ef7512d1345f0d181723696351f6a81fd02eadaf6eab5444565c4c8ef9b35ba247ee5823b29804b48fa1674739df6051dd07bc3e736badb358e6f1ee4a4aefc3d1c6937642b29f148b34eaf6fdfb5ff9c691b0aaffe03cf6f015134c62326353460fd59acab00ea6aae0b54714febe2a96eb9c6cec4c83ae078ce3e6c5ddbcaa470192a6fcdd875cd4e2f80ae27025c176b8f39bb28bff2313c03480228da22e9922eb1a1c08c61d3e4e65537f66d971c7a2bc994c6f80e5ac5eb3c9949de7a7b4543a2eebbdff6cf98b11bcec2f8be1ba7d4a26634ad4acce766406e14153a8c7301740686df3c4a10deaa49a0af3395ca23042d02979ab6d0f7c42c55f9bdc1d3a31253a4b86995be32a069c603192ddc79857743d1b7fb92c061cb83487505a257dd1c8093c5ed81181e63ad7a90cfb85bcdd73178232553108a7be542036d6dee7993f376219f438e26a23f7b54b3effd62f55280bcfc60ac7d4869974f03cbd9fd33691731999f3830eca5ddc7568451032204277aefa2487014920edf9348217457d5905ebb4d447bbf03457404281129bb7fbd8107762fb4e0b84abff8f2bece0a34436979cafbdc1eb56865570ae7d683ba2b65924e48427612d56a8a437051355884c2d1d4d0adaec3f6dad4b24ccc5af4c6faf65c40068b5448050ffbc67eb4f4f9570afd643dc93e3a24ead699b6b5147e7af3ab3fb139c6f7344d585cbf3052998f99aae05da2686c323d2e17e283232d733d23eb1e4e3ac79600df98e423f11e7624f72aa80b20be5e0dfc3ed5687704fcdbe6651c006418c0a19efe184c9a2c37e891c61e448d2b6d49de5b02df1c9817c25e984ff718a08a4c050d10a8f634022f32f6e18ca2fb9441eea6d0d7f8bd5c975e6817cc125002364c169c3ca24f60750616cc0e0a971ca01f1c18bb02a0c5dd2a6c29106e0f82806d5f8554e561063456158f94a6a7d72903fd5ebc1df3a27acb0fc20f34eaacd654548481949496039d92c99252058ec9441a3f25fd83653ba0133d0b7a8eab5aedecac8a237a844925ecfe2d9db06f709f35719774f72a930e357656936113c709884b873176426fe9f077b7975e03be6911e1763860f45574e789a770e2e78780d1069e5329ed1bee3fa9e136e8d33de581ff18c13bdb6d9b3788cc105b3ad11f60355c47b34f0daa80aebcbfa7ae8ac4a32b2ad424d308e055f2644e4aed30fce0bea797763dc604fef2160a31ce56c59a74547aae3fa4ff94c274d517f136a9cbc3617bce9addaf7ccbc546b32fba9219edcda4c574b3858082a1501e048a8e88b01c313440196b410e588bb2b3627dc054d7d5a26d66e0c36df92be5bba3030130b7d34f8d31b30bec67ecfc413127577698a90f84385c0db76b913198d6eac86204b64c4eb2801bd24040ee92c37c17a81c47a4720a68eacdb6685da9522f5d4fa5daee70f58eea442bcf08b81eaee00c05a2971890b82c668a9cf1e8572eca473a0afb42d92622864d9e5bb7a9d44d2c0b555e10496bf4cb0e294be8def45436f4022846c8d1d900c6f64536116ac62549dab2b6ea4d6bba75b3e3e4f6d783d38db463be7df94e085ad080781b58df63d1d50ab361a1134d2cdd90429dffb9be7562f0d336cfa7afe3233325fd657f243a66689a7142bb8d3fde1754cea8ba6687f9dcbe068993d50fccbd67d2e59167ccb448f69eb1bb3826f9160ec87f9e794b1be7c1906dc25000e4c0379a49e3e939753fd6eb99cad80ec7ef328d47b38418d819749a5f181bb202bdd1b7f3037374b58c29692eb92c304fd37ef012f16c8d8d4de8c82ff88f746e4f76bd5f7e195da98d594bf550f989167bef1c733361909a38aab63371cec8801bbb3c715de044cd7036e2ec633e00dc49b6959670c75f75e99746265a2268ce88bc880475fbabfb3cbb450e482f94281a1c3f99b64d56c02d1290eac52351c3c7925e18c90a0bfeb8b9336572f5794db807f8ec6f6dc6fbb226a1915af48405b0ce282ffec28fb14e6e6e7e4863c03e6e04455d9adb6bfdb57644f1f1783ce78ca22961d3d53aaccce59e6c8c08134ab9fe54c39438ff32e20f0b9da3c14268c77cc452f3e2e3e95b8cc13520473528e5f6d1561d4554f8001d765865802eb1e799c4a7358138de5cdcfa1ae1b97bc007486030a31fa4a8f5a584aa2d11b7e30345fcc077c9323ffaa4c99b8de1bb6a19e289be9035ecad26bf0c47e1b8d67567ad0673e9dc1a902e70f6b3eaed5ffa28f2a5f4e362a6910c22b70ecea38eff7f0d22bd3e9d1f03f7f40020f4008ac677eadbd5442bd68a6c224a3f5273feace028bb1f95bbfffdd8bdcacd514fb053bc2eb128500305073181df65ebc083d4f551dc46186ac3151c0b82966c692dcffe8fc27c56f2d4a7f81730377f1f6a15747f7f0b72e4b62ea4afc3a0bc673c10cc8389ad4551999e6b4adeec64e6d893c2d5572437761e09e643b01eead0aed2ab657c8e117955e4cc824c68e5036a685ed36c508a47bbcd92815031d5956e3616b6427f0dbd7b159c53569dfff1863927ea2e01986fc3fdaf94574fe2541addf1cbb58b39b2e51a019b129beb8ec67b91a43c6da7c9ab2c840258d71ff070c5a7f4f4ca0802a42414b8d00edf9ce00ddbd0e5b968581822ba6541603b0ef3526e6f201419cc1a5cfcb013f8a0787eda4d254a49ee91c553e3a8279b28db9a7a8bfcabfe81365638a88ee14c8c19dfdc1ee8901f18a4c0754e247e4293ec9ccd8b9ae85d1d67e0bcbc6221dcb8d537b67c7684387802ee01534d15786703377421b4093558d9b4d341358a88c41e3b03a32a9c42a7514042579ea041d1ee2480abcbb1b691fe61c02087e51b136ee65fa0d3857b40912aa4432af094dca541c87c9421073bf6456133d77341ba127cead830281644486a480b2acfd296034c40277cadb23a9792b5fcab320b0124ccd25ac62eb97e2dac30a6c2d032e310b7bc62630a49a2fcc1bb3a0a6abe674eb2685f7c9c2a4b30e100f11ed3b1c84b6ce7464c1188d91cf11dd84f0f7e71e2f1f6985b2f97ed4bfc1501c65b91da5bd288bcc6e3da7fdb4eec02fff019440f50f217826095caabd674b99f42cc39dc1408cec4dd7371bf35cc97f5233ce612dc0bdaae4826ea2c7bd8a0bc9325ed439baf91485bc8544e9d4a339d7c77fc65b027acecd3aee158c78d811bf2ebd88471e7226452fc45ac6881d426f49c0265b319e28811ca2165138dcba32e5184312ee4df635fec6e154912bb73626fb436bab647fbafa3ebe214ea00f7883fb8f623496e51ed6d77edd6c582da1734b96ea70f158ea0e52858a18909bcba1cebb0076837c7443022d40268c2f33bb5464d89068fcec384915eba543c8a3c4053c574c91e91eb99e7c6567d5457acc3a35e8484d1744da9e8ad0a90b22f8ee1d28cc0e3b25dd6694ac", 0x1, &(0x7f00000000c0)="720a0d7643cf9248ba42af7c2fe5bd71009c4c508e71c5c68987ecfeb3d89ae226919e", &(0x7f0000000140)=0x4000008}) io_uring_setup$auto(0x5, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [0x2, 0xc99], {0x4, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0x10000, 0x6, 0x8000000000000001}, {0x100, 0x7, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x2}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r2, 0xe600}, 0xf) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0x1000}, 0x1, &(0x7f0000000080)={&(0x7f0000000100)='y%', 0x8000}, 0x4, 0x2) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r1, 0x0, 0x2}, 0xc) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r7, &(0x7f0000000040), 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0x200eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0xc085) setfsuid$auto(0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44) mmap$auto(0x4000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) semctl$auto(0x1, 0x2, 0x13, 0x8) r9 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r9, 0x29, 0x20, 0x0, 0x20) kernel console output (not intermixed with test programs): Port device team_slave_0 added [ 1111.254789][T15773] team0: Port device team_slave_1 added [ 1111.305937][ T1368] hsr_slave_0: left promiscuous mode [ 1111.366867][ T1368] hsr_slave_1: left promiscuous mode [ 1111.408419][ T1368] veth1_macvtap: left promiscuous mode [ 1111.438448][ T1368] veth0_macvtap: left promiscuous mode [ 1111.464427][ T1368] veth1_vlan: left promiscuous mode [ 1111.469707][ T1368] veth0_vlan: left promiscuous mode [ 1111.738959][T14710] Process accounting resumed [ 1112.486820][ T1368] team0 (unregistering): Port device team_slave_1 removed [ 1112.494675][ T5145] Bluetooth: hci1: command tx timeout [ 1112.556336][ T1368] team0 (unregistering): Port device team_slave_0 removed [ 1112.993728][T15876] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2486'. [ 1113.042067][T15773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.075790][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.175797][T15773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.305754][T15773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.333491][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.431540][T15773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.908536][T15773] hsr_slave_0: entered promiscuous mode [ 1113.926298][T15773] hsr_slave_1: entered promiscuous mode [ 1114.573182][ T5145] Bluetooth: hci1: command tx timeout [ 1116.099170][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.105612][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.183299][T15773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1117.239558][T15773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1117.321626][T15773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1117.466851][T15773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1117.858109][T15773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.969296][T15773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.037553][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.044740][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.123048][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.130223][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.346340][T15773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1119.314100][T15773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.573628][T15773] veth0_vlan: entered promiscuous mode [ 1119.663283][T15773] veth1_vlan: entered promiscuous mode [ 1119.844572][T15773] veth0_macvtap: entered promiscuous mode [ 1119.895173][T15773] veth1_macvtap: entered promiscuous mode [ 1119.996540][T15773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.082488][T15773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.219453][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.256324][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.386463][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.441542][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.704230][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.772493][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.993809][T16008] syz.2.2500 (16008): /proc/16005/oom_adj is deprecated, please use /proc/16005/oom_score_adj instead. [ 1121.108541][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.139672][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.753112][T16053] binder: BINDER_SET_CONTEXT_MGR already set [ 1122.759132][T16053] binder: 16038:16053 ioctl 4018620d 2000000027c0 returned -16 [ 1124.727167][T14583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1124.736949][T14583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1124.747048][T14583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1124.755025][T14583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1124.806070][T14583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1126.748824][T16080] chnl_net:caif_netlink_parms(): no params data found [ 1126.892098][T14583] Bluetooth: hci3: command tx timeout [ 1127.172833][T16120] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.214120][T16120] binder: 16118:16120 ioctl 4018620d 2000000027c0 returned -16 [ 1127.412021][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.456615][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.521716][T16080] bridge_slave_0: entered allmulticast mode [ 1127.578051][T16080] bridge_slave_0: entered promiscuous mode [ 1127.615160][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.669785][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.703068][T16080] bridge_slave_1: entered allmulticast mode [ 1127.744457][T16080] bridge_slave_1: entered promiscuous mode [ 1127.943805][T16080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.048520][T16080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.238187][T16080] team0: Port device team_slave_0 added [ 1128.244132][T16140] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1128.285224][T16080] team0: Port device team_slave_1 added [ 1128.668372][T16080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.713935][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.843901][T16080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.920641][T16080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.965731][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.006281][T14583] Bluetooth: hci3: command tx timeout [ 1129.115523][T16080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.362905][T16080] hsr_slave_0: entered promiscuous mode [ 1129.394952][T16080] hsr_slave_1: entered promiscuous mode [ 1129.440508][T16080] debugfs: 'hsr0' already exists in 'hsr' [ 1129.481915][T16080] Cannot create hsr debugfs directory [ 1130.099000][T16080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.224570][T16162] binder: BINDER_SET_CONTEXT_MGR already set [ 1130.230602][T16162] binder: 16160:16162 ioctl 4018620d 2000000027c0 returned -16 [ 1130.262287][T16080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.434099][T16080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.619491][T16080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.052014][T14583] Bluetooth: hci3: command tx timeout [ 1131.078068][T16080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1131.176715][T16080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1131.230377][T16080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1131.325278][T16080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1131.640810][T16080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.736323][T16080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.782830][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.789991][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.954533][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.961718][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.131971][T14583] Bluetooth: hci3: command tx timeout [ 1133.159916][T16080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.797387][T16080] veth0_vlan: entered promiscuous mode [ 1133.884011][T16080] veth1_vlan: entered promiscuous mode [ 1134.224416][T16080] veth0_macvtap: entered promiscuous mode [ 1134.263476][T16080] veth1_macvtap: entered promiscuous mode [ 1134.337978][T16080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.393760][T16080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.496450][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.522118][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.598935][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.640810][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.877890][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.911709][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.020068][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.047711][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.188089][T16235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1136.282844][T16235] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1136.379942][T16235] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1136.511255][T16235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1136.607199][T16235] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1136.665863][T16235] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1136.748306][T16235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1136.810535][T16235] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1136.910642][T16235] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1137.039128][T16235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1137.090243][T16235] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1137.181372][T16235] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1138.253501][T14583] Bluetooth: hci4: command 0x0c1a tx timeout [ 1138.572517][T14583] Bluetooth: hci2: command 0x0c1a tx timeout [ 1138.813359][T14583] Bluetooth: hci1: command 0x0c1a tx timeout [ 1139.052289][T14583] Bluetooth: hci3: command 0x0c1a tx timeout [ 1140.333483][T14583] Bluetooth: hci4: command 0x0c1a tx timeout [ 1140.535353][T16307] FAULT_INJECTION: forcing a failure. [ 1140.535353][T16307] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.611229][T16307] CPU: 0 UID: 0 PID: 16307 Comm: syz.0.2560 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1140.611272][T16307] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1140.611281][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.611296][T16307] Call Trace: [ 1140.611304][T16307] [ 1140.611313][T16307] dump_stack_lvl+0x100/0x190 [ 1140.611356][T16307] should_fail_ex.cold+0x5/0xa [ 1140.611386][T16307] should_failslab+0xc2/0x120 [ 1140.611417][T16307] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1140.611452][T16307] ? mqueue_init_fs_context+0x4b/0x690 [ 1140.611485][T16307] mqueue_init_fs_context+0x4b/0x690 [ 1140.611512][T16307] alloc_fs_context+0x60c/0xf40 [ 1140.611548][T16307] mq_init_ns+0x16e/0x820 [ 1140.611576][T16307] copy_ipcs+0x3dd/0x7e0 [ 1140.611610][T16307] create_new_namespaces+0x20a/0xac0 [ 1140.611639][T16307] ? security_capable+0x80/0x260 [ 1140.611683][T16307] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1140.611714][T16307] ksys_unshare+0x473/0xad0 [ 1140.611750][T16307] ? __pfx_ksys_unshare+0x10/0x10 [ 1140.611793][T16307] __x64_sys_unshare+0x31/0x40 [ 1140.611838][T16307] do_syscall_64+0x106/0xf80 [ 1140.611876][T16307] ? clear_bhb_loop+0x40/0x90 [ 1140.611905][T16307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.611929][T16307] RIP: 0033:0x7fc8d6b9c799 [ 1140.611949][T16307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.611972][T16307] RSP: 002b:00007fc8d7af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1140.611994][T16307] RAX: ffffffffffffffda RBX: 00007fc8d6e15fa0 RCX: 00007fc8d6b9c799 [ 1140.612010][T16307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1140.612024][T16307] RBP: 00007fc8d6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1140.612039][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.612053][T16307] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1140.612083][T16307] [ 1141.137733][T14583] Bluetooth: hci2: command 0x0c1a tx timeout [ 1141.143898][T14583] Bluetooth: hci1: command 0x0c1a tx timeout [ 1141.149977][T14583] Bluetooth: hci3: command 0x0c1a tx timeout [ 1142.411886][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 1143.213488][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 1143.219547][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 1143.227414][T14583] Bluetooth: hci2: command 0x0c1a tx timeout [ 1143.420685][T16335] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2573'. [ 1144.388500][T16344] random: crng reseeded on system resumption [ 1147.088358][T16373] FAULT_INJECTION: forcing a failure. [ 1147.088358][T16373] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.138224][T16373] CPU: 0 UID: 0 PID: 16373 Comm: syz.0.2575 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1147.138269][T16373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1147.138278][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1147.138293][T16373] Call Trace: [ 1147.138300][T16373] [ 1147.138309][T16373] dump_stack_lvl+0x100/0x190 [ 1147.138353][T16373] should_fail_ex.cold+0x5/0xa [ 1147.138382][T16373] should_failslab+0xc2/0x120 [ 1147.138409][T16373] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1147.138448][T16373] ? __d_alloc+0x34/0xa80 [ 1147.138475][T16373] ? security_inode_alloc+0xcf/0x2c0 [ 1147.138505][T16373] __d_alloc+0x34/0xa80 [ 1147.138531][T16373] ? __ns_ref_active_get+0x9f/0x1b0 [ 1147.138566][T16373] path_from_stashed+0x427/0x750 [ 1147.138593][T16373] ? do_raw_spin_unlock+0x145/0x1e0 [ 1147.138636][T16373] ns_get_path+0x60/0x80 [ 1147.138661][T16373] proc_ns_get_link+0x121/0x230 [ 1147.138696][T16373] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1147.138735][T16373] ? atime_needs_update+0x8b/0x6b0 [ 1147.138774][T16373] pick_link+0xd17/0x13c0 [ 1147.138809][T16373] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1147.138848][T16373] step_into_slowpath+0x9ba/0xf90 [ 1147.138891][T16373] ? __pfx_step_into_slowpath+0x10/0x10 [ 1147.138929][T16373] ? find_held_lock+0x2b/0x80 [ 1147.138967][T16373] path_openat+0xf95/0x31a0 [ 1147.139003][T16373] ? __pfx_path_openat+0x10/0x10 [ 1147.139039][T16373] do_file_open+0x20e/0x430 [ 1147.139068][T16373] ? __pfx_do_file_open+0x10/0x10 [ 1147.139114][T16373] ? alloc_fd+0x476/0x790 [ 1147.139142][T16373] ? do_getname+0x191/0x390 [ 1147.139176][T16373] do_sys_openat2+0x10d/0x1e0 [ 1147.139209][T16373] ? __pfx_do_sys_openat2+0x10/0x10 [ 1147.139245][T16373] ? __fget_files+0x21f/0x3d0 [ 1147.139274][T16373] __x64_sys_openat+0x12d/0x210 [ 1147.139308][T16373] ? __pfx___x64_sys_openat+0x10/0x10 [ 1147.139354][T16373] do_syscall_64+0x106/0xf80 [ 1147.139390][T16373] ? clear_bhb_loop+0x40/0x90 [ 1147.139419][T16373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.139444][T16373] RIP: 0033:0x7fc8d6b5cfce [ 1147.139464][T16373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1147.139487][T16373] RSP: 002b:00007fc8d7af5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1147.139509][T16373] RAX: ffffffffffffffda RBX: 00007fc8d7af66c0 RCX: 00007fc8d6b5cfce [ 1147.139526][T16373] RDX: 0000000000000002 RSI: 00007fc8d7af5f90 RDI: ffffffffffffff9c [ 1147.139541][T16373] RBP: 00007fc8d6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1147.139556][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.139571][T16373] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1147.139601][T16373] [ 1153.132132][T16332] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1156.544358][T16502] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2594'. [ 1159.052176][T16542] FAULT_INJECTION: forcing a failure. [ 1159.052176][T16542] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.103039][T16542] CPU: 0 UID: 0 PID: 16542 Comm: syz.0.2602 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1159.103080][T16542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1159.103090][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1159.103105][T16542] Call Trace: [ 1159.103112][T16542] [ 1159.103121][T16542] dump_stack_lvl+0x100/0x190 [ 1159.103163][T16542] should_fail_ex.cold+0x5/0xa [ 1159.103192][T16542] should_failslab+0xc2/0x120 [ 1159.103219][T16542] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1159.103258][T16542] ? security_inode_alloc+0x3b/0x2c0 [ 1159.103284][T16542] ? lockdep_init_map_type+0x5c/0x250 [ 1159.103321][T16542] security_inode_alloc+0x3b/0x2c0 [ 1159.103348][T16542] inode_init_always_gfp+0xced/0x1040 [ 1159.103378][T16542] alloc_inode+0x8e/0x250 [ 1159.103412][T16542] path_from_stashed+0x25b/0x750 [ 1159.103439][T16542] ? do_raw_spin_unlock+0x145/0x1e0 [ 1159.103481][T16542] ns_get_path+0x60/0x80 [ 1159.103507][T16542] proc_ns_get_link+0x121/0x230 [ 1159.103554][T16542] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1159.103590][T16542] ? atime_needs_update+0x8b/0x6b0 [ 1159.103626][T16542] pick_link+0xd17/0x13c0 [ 1159.103668][T16542] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1159.103704][T16542] step_into_slowpath+0x9ba/0xf90 [ 1159.103745][T16542] ? __pfx_step_into_slowpath+0x10/0x10 [ 1159.103780][T16542] ? find_held_lock+0x2b/0x80 [ 1159.103811][T16542] path_openat+0xf95/0x31a0 [ 1159.103844][T16542] ? __pfx_path_openat+0x10/0x10 [ 1159.103877][T16542] do_file_open+0x20e/0x430 [ 1159.103903][T16542] ? __pfx_do_file_open+0x10/0x10 [ 1159.103946][T16542] ? alloc_fd+0x476/0x790 [ 1159.103972][T16542] ? do_getname+0x191/0x390 [ 1159.104003][T16542] do_sys_openat2+0x10d/0x1e0 [ 1159.104035][T16542] ? __pfx_do_sys_openat2+0x10/0x10 [ 1159.104068][T16542] ? __fget_files+0x21f/0x3d0 [ 1159.104095][T16542] __x64_sys_openat+0x12d/0x210 [ 1159.104127][T16542] ? __pfx___x64_sys_openat+0x10/0x10 [ 1159.104170][T16542] do_syscall_64+0x106/0xf80 [ 1159.104204][T16542] ? clear_bhb_loop+0x40/0x90 [ 1159.104231][T16542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.104255][T16542] RIP: 0033:0x7fc8d6b5cfce [ 1159.104273][T16542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1159.104296][T16542] RSP: 002b:00007fc8d7af5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1159.104316][T16542] RAX: ffffffffffffffda RBX: 00007fc8d7af66c0 RCX: 00007fc8d6b5cfce [ 1159.104331][T16542] RDX: 0000000000000002 RSI: 00007fc8d7af5f90 RDI: ffffffffffffff9c [ 1159.104345][T16542] RBP: 00007fc8d6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1159.104359][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.104372][T16542] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1159.104403][T16542] [ 1163.338237][T16597] openvswitch: netlink: Tunnel attr 8455 out of range max 16 [ 1164.794347][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'. [ 1165.264505][T16642] openvswitch: netlink: Message has 316 unknown bytes. [ 1169.847943][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'. [ 1170.520275][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'. [ 1170.691005][T16714] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input16 [ 1171.717963][T16722] FAULT_INJECTION: forcing a failure. [ 1171.717963][T16722] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.904835][T16722] CPU: 0 UID: 0 PID: 16722 Comm: syz.1.2643 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1171.904874][T16722] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1171.904882][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1171.904896][T16722] Call Trace: [ 1171.904903][T16722] [ 1171.904911][T16722] dump_stack_lvl+0x100/0x190 [ 1171.904954][T16722] should_fail_ex.cold+0x5/0xa [ 1171.904982][T16722] ? sk_prot_alloc+0x10b/0x2a0 [ 1171.905026][T16722] should_failslab+0xc2/0x120 [ 1171.905054][T16722] __kmalloc_noprof+0xe0/0x850 [ 1171.905091][T16722] ? lockdep_init_map_type+0x5c/0x250 [ 1171.905129][T16722] sk_prot_alloc+0x10b/0x2a0 [ 1171.905156][T16722] sk_alloc+0x36/0xe80 [ 1171.905189][T16722] pppoe_create+0x32/0x360 [ 1171.905334][T16722] pppox_create+0x15c/0x2c0 [ 1171.905377][T16722] __sock_create+0x339/0x860 [ 1171.905409][T16722] __sys_socket+0x14d/0x260 [ 1171.905436][T16722] ? __pfx___sys_socket+0x10/0x10 [ 1171.905471][T16722] __x64_sys_socket+0x72/0xb0 [ 1171.905497][T16722] ? lockdep_hardirqs_on+0x78/0x100 [ 1171.905535][T16722] do_syscall_64+0x106/0xf80 [ 1171.905569][T16722] ? clear_bhb_loop+0x40/0x90 [ 1171.905598][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.905621][T16722] RIP: 0033:0x7f7d4b79c799 [ 1171.905639][T16722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.905661][T16722] RSP: 002b:00007f7d4c603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1171.905682][T16722] RAX: ffffffffffffffda RBX: 00007f7d4ba16090 RCX: 00007f7d4b79c799 [ 1171.905697][T16722] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 1171.905710][T16722] RBP: 00007f7d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1171.905724][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.905737][T16722] R13: 00007f7d4ba16128 R14: 00007f7d4ba16090 R15: 00007ffd25fda088 [ 1171.905766][T16722] [ 1174.179840][T16776] : Can't lookup blockdev [ 1176.597305][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 1176.896991][T16822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1176.932818][T16822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1176.986189][T16822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1177.038615][T16822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1177.540782][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.551698][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.894307][T16865] syz.0.2679 (16865): attempted to duplicate a private mapping with mremap. This is not supported. [ 1178.018450][T16865] bridge0: port 3(team0) entered blocking state [ 1178.064540][T16865] bridge0: port 3(team0) entered disabled state [ 1178.070995][T16865] team0: entered allmulticast mode [ 1178.172775][T16865] team_slave_0: entered allmulticast mode [ 1178.178979][T16332] Bluetooth: hci4: command 0x0c1a tx timeout [ 1178.211786][T16865] team_slave_1: entered allmulticast mode [ 1178.265841][T16865] team0: entered promiscuous mode [ 1178.315933][T16865] team_slave_0: entered promiscuous mode [ 1178.336737][T16865] team_slave_1: entered promiscuous mode [ 1178.375566][T16865] bridge0: port 3(team0) entered blocking state [ 1178.381988][T16865] bridge0: port 3(team0) entered forwarding state [ 1178.395138][T16872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2680'. [ 1178.928672][T16888] FAULT_INJECTION: forcing a failure. [ 1178.928672][T16888] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.976538][T16332] Bluetooth: hci2: command 0x0c1a tx timeout [ 1179.037424][T16888] CPU: 0 UID: 0 PID: 16888 Comm: syz.0.2682 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1179.037467][T16888] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1179.037477][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.037492][T16888] Call Trace: [ 1179.037500][T16888] [ 1179.037509][T16888] dump_stack_lvl+0x100/0x190 [ 1179.037554][T16888] should_fail_ex.cold+0x5/0xa [ 1179.037583][T16888] should_failslab+0xc2/0x120 [ 1179.037618][T16888] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1179.037658][T16888] ? security_inode_alloc+0x3b/0x2c0 [ 1179.037688][T16888] ? lockdep_init_map_type+0x5c/0x250 [ 1179.037728][T16888] security_inode_alloc+0x3b/0x2c0 [ 1179.037755][T16888] inode_init_always_gfp+0xced/0x1040 [ 1179.037787][T16888] alloc_inode+0x8e/0x250 [ 1179.037822][T16888] path_from_stashed+0x25b/0x750 [ 1179.037849][T16888] ? do_raw_spin_unlock+0x145/0x1e0 [ 1179.037893][T16888] ns_get_path+0x60/0x80 [ 1179.037920][T16888] proc_ns_get_link+0x121/0x230 [ 1179.037958][T16888] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1179.037998][T16888] ? atime_needs_update+0x8b/0x6b0 [ 1179.038037][T16888] pick_link+0xd17/0x13c0 [ 1179.038075][T16888] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1179.038127][T16888] step_into_slowpath+0x9ba/0xf90 [ 1179.038170][T16888] ? __pfx_step_into_slowpath+0x10/0x10 [ 1179.038208][T16888] ? find_held_lock+0x2b/0x80 [ 1179.038241][T16888] path_openat+0xf95/0x31a0 [ 1179.038276][T16888] ? __pfx_path_openat+0x10/0x10 [ 1179.038312][T16888] do_file_open+0x20e/0x430 [ 1179.038340][T16888] ? __pfx_do_file_open+0x10/0x10 [ 1179.038386][T16888] ? alloc_fd+0x476/0x790 [ 1179.038413][T16888] ? do_getname+0x191/0x390 [ 1179.038447][T16888] do_sys_openat2+0x10d/0x1e0 [ 1179.038480][T16888] ? __pfx_do_sys_openat2+0x10/0x10 [ 1179.038516][T16888] ? __fget_files+0x21f/0x3d0 [ 1179.038545][T16888] __x64_sys_openat+0x12d/0x210 [ 1179.038620][T16888] ? __pfx___x64_sys_openat+0x10/0x10 [ 1179.038668][T16888] do_syscall_64+0x106/0xf80 [ 1179.038706][T16888] ? clear_bhb_loop+0x40/0x90 [ 1179.038737][T16888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.038762][T16888] RIP: 0033:0x7fc8d6b5cfce [ 1179.038782][T16888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1179.038806][T16888] RSP: 002b:00007fc8d7ad4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1179.038831][T16888] RAX: ffffffffffffffda RBX: 00007fc8d7ad56c0 RCX: 00007fc8d6b5cfce [ 1179.038847][T16888] RDX: 0000000000000002 RSI: 00007fc8d7ad4f90 RDI: ffffffffffffff9c [ 1179.038863][T16888] RBP: 00007fc8d6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1179.038878][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.038893][T16888] R13: 00007fc8d6e16128 R14: 00007fc8d6e16090 R15: 00007ffd4ce26258 [ 1179.038925][T16888] [ 1179.711875][T16332] Bluetooth: hci3: command 0x0c1a tx timeout [ 1179.718396][T16332] Bluetooth: hci1: command 0x0c1a tx timeout [ 1180.147823][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1181.181861][T16922] process 'syz.0.2690' launched './file0' with NULL argv: empty string added [ 1181.427745][T16915] zswap: compressor not available [ 1181.472254][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2691'. [ 1182.684779][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 1183.592559][T16969] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1183.846375][T16985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2706'. [ 1184.112257][T16998] Zero length message leads to an empty skb [ 1184.425649][T16997] mmap: syz.1.2705 (16997) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1185.492352][T17018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1185.933851][T17029] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1186.128311][T17033] syz.3.2716 uses obsolete (PF_INET,SOCK_PACKET) [ 1188.210299][T17061] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 1190.669450][T17091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2732'. [ 1190.756019][T17095] can0: slcan on ttyS2. [ 1190.800054][T17091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.848829][T17091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.885212][T17091] bond0 (unregistering): Released all slaves [ 1190.981793][T17105] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1191.799518][T17092] can0 (unregistered): slcan off ttyS2. [ 1192.179327][T17121] FAULT_INJECTION: forcing a failure. [ 1192.179327][T17121] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.242333][T17121] CPU: 0 UID: 0 PID: 17121 Comm: syz.0.2737 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1192.242374][T17121] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1192.242384][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.242398][T17121] Call Trace: [ 1192.242406][T17121] [ 1192.242415][T17121] dump_stack_lvl+0x100/0x190 [ 1192.242457][T17121] should_fail_ex.cold+0x5/0xa [ 1192.242486][T17121] should_failslab+0xc2/0x120 [ 1192.242513][T17121] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1192.242551][T17121] ? mas_alloc_nodes+0x280/0x390 [ 1192.242590][T17121] mas_alloc_nodes+0x280/0x390 [ 1192.242627][T17121] mas_preallocate+0x39c/0xf10 [ 1192.242687][T17121] ? __pfx_mas_preallocate+0x10/0x10 [ 1192.242731][T17121] ? vm_area_alloc+0x1f/0x160 [ 1192.242765][T17121] ? lockdep_init_map_type+0x5c/0x250 [ 1192.242799][T17121] __mmap_region+0x12b5/0x29e0 [ 1192.242838][T17121] ? __pfx___mmap_region+0x10/0x10 [ 1192.242878][T17121] ? set_next_entity+0x11e/0x9c0 [ 1192.242916][T17121] ? __lock_acquire+0x4a5/0x2630 [ 1192.242945][T17121] ? update_cfs_rq_load_avg+0x51/0x550 [ 1192.242982][T17121] ? find_held_lock+0x2b/0x80 [ 1192.243004][T17121] ? finish_task_switch.isra.0+0x200/0xb80 [ 1192.243029][T17121] ? finish_task_switch.isra.0+0x200/0xb80 [ 1192.243065][T17121] ? trace_sched_exit_tp+0x13a/0x180 [ 1192.243094][T17121] ? __schedule+0x1000/0x6120 [ 1192.243159][T17121] ? rcu_is_watching+0x12/0xc0 [ 1192.243214][T17121] ? cap_capable+0x107/0x460 [ 1192.243279][T17121] mmap_region+0x180/0x3e0 [ 1192.243323][T17121] do_mmap+0xc63/0x12f0 [ 1192.243356][T17121] ? __pfx_do_mmap+0x10/0x10 [ 1192.243384][T17121] ? __pfx_down_write_killable+0x10/0x10 [ 1192.243415][T17121] vm_mmap_pgoff+0x29e/0x470 [ 1192.243448][T17121] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1192.243479][T17121] ? do_futex+0x192/0x350 [ 1192.243512][T17121] ? __pfx_do_futex+0x10/0x10 [ 1192.243549][T17121] ksys_mmap_pgoff+0xe1/0x650 [ 1192.243576][T17121] ? __x64_sys_futex+0x34f/0x4d0 [ 1192.243618][T17121] ? __x64_sys_futex+0x358/0x4d0 [ 1192.243649][T17121] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1192.243675][T17121] ? xfd_validate_state+0x129/0x190 [ 1192.243714][T17121] __x64_sys_mmap+0x125/0x190 [ 1192.243752][T17121] do_syscall_64+0x106/0xf80 [ 1192.243786][T17121] ? clear_bhb_loop+0x40/0x90 [ 1192.243814][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.243838][T17121] RIP: 0033:0x7fc8d6b9c799 [ 1192.243855][T17121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.243877][T17121] RSP: 002b:00007fc8d7af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1192.243898][T17121] RAX: ffffffffffffffda RBX: 00007fc8d6e15fa0 RCX: 00007fc8d6b9c799 [ 1192.243913][T17121] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1192.243927][T17121] RBP: 00007fc8d6c32c99 R08: 0000000000000002 R09: 0000000000008000 [ 1192.243941][T17121] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1192.243955][T17121] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1192.243984][T17121] [ 1195.242729][T17179] netlink: ct_mark mask cannot be 0 [ 1200.627885][T17246] FAULT_INJECTION: forcing a failure. [ 1200.627885][T17246] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.741554][T17246] CPU: 0 UID: 0 PID: 17246 Comm: syz.3.2763 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1200.741596][T17246] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1200.741605][T17246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1200.741619][T17246] Call Trace: [ 1200.741627][T17246] [ 1200.741636][T17246] dump_stack_lvl+0x100/0x190 [ 1200.741678][T17246] should_fail_ex.cold+0x5/0xa [ 1200.741707][T17246] should_failslab+0xc2/0x120 [ 1200.741734][T17246] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1200.741772][T17246] ? security_inode_alloc+0x3b/0x2c0 [ 1200.741799][T17246] ? lockdep_init_map_type+0x5c/0x250 [ 1200.741836][T17246] security_inode_alloc+0x3b/0x2c0 [ 1200.741862][T17246] inode_init_always_gfp+0xced/0x1040 [ 1200.741893][T17246] alloc_inode+0x8e/0x250 [ 1200.741926][T17246] path_from_stashed+0x25b/0x750 [ 1200.741953][T17246] ? do_raw_spin_unlock+0x145/0x1e0 [ 1200.741995][T17246] ns_get_path+0x60/0x80 [ 1200.742020][T17246] proc_ns_get_link+0x121/0x230 [ 1200.742056][T17246] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1200.742094][T17246] ? atime_needs_update+0x8b/0x6b0 [ 1200.742133][T17246] pick_link+0xd17/0x13c0 [ 1200.742168][T17246] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1200.742207][T17246] step_into_slowpath+0x9ba/0xf90 [ 1200.742251][T17246] ? __pfx_step_into_slowpath+0x10/0x10 [ 1200.742288][T17246] ? find_held_lock+0x2b/0x80 [ 1200.742321][T17246] path_openat+0xf95/0x31a0 [ 1200.742365][T17246] ? __pfx_path_openat+0x10/0x10 [ 1200.742401][T17246] do_file_open+0x20e/0x430 [ 1200.742430][T17246] ? __pfx_do_file_open+0x10/0x10 [ 1200.742476][T17246] ? alloc_fd+0x476/0x790 [ 1200.742504][T17246] ? do_getname+0x191/0x390 [ 1200.742538][T17246] do_sys_openat2+0x10d/0x1e0 [ 1200.742572][T17246] ? __pfx_do_sys_openat2+0x10/0x10 [ 1200.742607][T17246] ? __fget_files+0x21f/0x3d0 [ 1200.742636][T17246] __x64_sys_openat+0x12d/0x210 [ 1200.742670][T17246] ? __pfx___x64_sys_openat+0x10/0x10 [ 1200.742715][T17246] do_syscall_64+0x106/0xf80 [ 1200.742753][T17246] ? clear_bhb_loop+0x40/0x90 [ 1200.742782][T17246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.742807][T17246] RIP: 0033:0x7efc50f5cfce [ 1200.742826][T17246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1200.742850][T17246] RSP: 002b:00007efc51dbcec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1200.742872][T17246] RAX: ffffffffffffffda RBX: 00007efc51dbd6c0 RCX: 00007efc50f5cfce [ 1200.742888][T17246] RDX: 0000000000000002 RSI: 00007efc51dbcf90 RDI: ffffffffffffff9c [ 1200.742903][T17246] RBP: 00007efc51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1200.742918][T17246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.742932][T17246] R13: 00007efc51216038 R14: 00007efc51215fa0 R15: 00007ffd6f145e68 [ 1200.742962][T17246] [ 1203.899707][T17314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 1203.937360][T17303] block2mtd: illegal erase size [ 1204.448499][T17320] dlm: non-version read from control device 255 [ 1204.751644][ T30] audit: type=1800 audit(65776.600:10): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2781" name="lu_gp_id" dev="configfs" ino=326476 res=0 errno=0 [ 1205.385480][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1205.471919][T17345] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1205.534008][T17346] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1206.074399][T17354] cougar: G6 mapped to F18 [ 1206.089616][T17350] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 1208.044497][T17382] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1208.094514][T17382] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1208.695925][T17400] netlink: 'syz.0.2798': attribute type 2 has an invalid length. [ 1208.826324][T17383] FAULT_INJECTION: forcing a failure. [ 1208.826324][T17383] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.904610][T17383] CPU: 0 UID: 0 PID: 17383 Comm: syz.1.2791 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1208.904651][T17383] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1208.904660][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.904673][T17383] Call Trace: [ 1208.904681][T17383] [ 1208.904689][T17383] dump_stack_lvl+0x100/0x190 [ 1208.904732][T17383] should_fail_ex.cold+0x5/0xa [ 1208.904760][T17383] should_failslab+0xc2/0x120 [ 1208.904791][T17383] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1208.904830][T17383] ? zswap_store+0xc42/0x29d0 [ 1208.904866][T17383] zswap_store+0xc42/0x29d0 [ 1208.904901][T17383] ? __pfx___up_read+0x10/0x10 [ 1208.904936][T17383] ? rmap_walk_anon+0x561/0x870 [ 1208.904970][T17383] ? __pfx_zswap_store+0x10/0x10 [ 1208.904999][T17383] ? do_raw_spin_lock+0x128/0x260 [ 1208.905035][T17383] ? find_held_lock+0x2b/0x80 [ 1208.905057][T17383] ? folio_free_swap+0x3d9/0xb50 [ 1208.905081][T17383] ? folio_free_swap+0x3d9/0xb50 [ 1208.905108][T17383] ? do_raw_spin_unlock+0x145/0x1e0 [ 1208.905145][T17383] ? _raw_spin_unlock+0x28/0x50 [ 1208.905257][T17383] ? folio_free_swap+0x39/0xb50 [ 1208.905282][T17383] ? __pfx_try_to_unmap+0x10/0x10 [ 1208.905319][T17383] swap_writeout+0x49d/0x12b0 [ 1208.905358][T17383] shrink_folio_list+0x5c4a/0x6000 [ 1208.905406][T17383] ? __pfx_shrink_folio_list+0x10/0x10 [ 1208.905447][T17383] ? __lock_acquire+0x4a5/0x2630 [ 1208.905491][T17383] ? __lock_acquire+0x4a5/0x2630 [ 1208.905552][T17383] ? __folio_batch_add_and_move+0x464/0xc60 [ 1208.905592][T17383] ? __pfx_lru_add+0x10/0x10 [ 1208.905617][T17383] reclaim_folio_list+0xdc/0x600 [ 1208.905655][T17383] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1208.905700][T17383] ? css_rstat_updated+0x1ce/0x5a0 [ 1208.905735][T17383] ? do_raw_spin_lock+0x128/0x260 [ 1208.905770][T17383] ? lru_gen_del_folio+0x382/0x5f0 [ 1208.905805][T17383] reclaim_pages+0x428/0x5e0 [ 1208.905843][T17383] ? __pfx_reclaim_pages+0x10/0x10 [ 1208.905876][T17383] ? find_held_lock+0x2b/0x80 [ 1208.905900][T17383] ? madvise_cold_or_pageout_pte_range+0xb49/0x2720 [ 1208.905937][T17383] madvise_cold_or_pageout_pte_range+0x1635/0x2720 [ 1208.905980][T17383] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1208.906024][T17383] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1208.906056][T17383] walk_pgd_range+0xc04/0x1eb0 [ 1208.906114][T17383] ? __pfx_walk_pgd_range+0x10/0x10 [ 1208.906154][T17383] ? folios_put_refs+0x66d/0x840 [ 1208.906195][T17383] __walk_page_range+0x163/0x820 [ 1208.906260][T17383] walk_page_range_vma_unsafe+0x209/0x8f0 [ 1208.906287][T17383] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1208.906316][T17383] ? find_held_lock+0x2b/0x80 [ 1208.906337][T17383] ? mlock_drain_local+0x254/0x4e0 [ 1208.906371][T17383] ? mlock_drain_local+0x254/0x4e0 [ 1208.906411][T17383] walk_page_range_vma+0x63/0x90 [ 1208.906435][T17383] madvise_pageout+0x259/0x540 [ 1208.906462][T17383] ? __pfx_madvise_pageout+0x10/0x10 [ 1208.906509][T17383] madvise_vma_behavior+0x3e6/0x3050 [ 1208.906542][T17383] ? mt_find+0x687/0x8e0 [ 1208.906562][T17383] ? mt_find+0x687/0x8e0 [ 1208.906581][T17383] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1208.906613][T17383] ? mt_find+0x45e/0x8e0 [ 1208.906655][T17383] ? __pfx_mt_find+0x10/0x10 [ 1208.906683][T17383] ? find_vma_prev+0xd8/0x150 [ 1208.906708][T17383] ? futex_unqueue+0x133/0x2c0 [ 1208.906747][T17383] ? find_vma+0xbf/0x140 [ 1208.906770][T17383] ? __pfx_find_vma+0x10/0x10 [ 1208.906792][T17383] ? __futex_wait+0x256/0x300 [ 1208.906837][T17383] madvise_walk_vmas+0x2fe/0xa90 [ 1208.906871][T17383] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1208.906909][T17383] madvise_do_behavior+0x1ea/0x510 [ 1208.906941][T17383] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1208.906971][T17383] ? down_read+0x13b/0x460 [ 1208.907008][T17383] do_madvise+0x195/0x240 [ 1208.907036][T17383] ? __pfx_do_madvise+0x10/0x10 [ 1208.907064][T17383] ? do_futex+0x192/0x350 [ 1208.907123][T17383] __x64_sys_madvise+0xa9/0x110 [ 1208.907152][T17383] ? lockdep_hardirqs_on+0x78/0x100 [ 1208.907188][T17383] do_syscall_64+0x106/0xf80 [ 1208.907224][T17383] ? clear_bhb_loop+0x40/0x90 [ 1208.907253][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.907278][T17383] RIP: 0033:0x7f7d4b79c799 [ 1208.907296][T17383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.907318][T17383] RSP: 002b:00007f7d4c603028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1208.907341][T17383] RAX: ffffffffffffffda RBX: 00007f7d4ba16090 RCX: 00007f7d4b79c799 [ 1208.907357][T17383] RDX: 0000000000000015 RSI: ff7fffffffff0001 RDI: 0000000000000000 [ 1208.907372][T17383] RBP: 00007f7d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1208.907386][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.907400][T17383] R13: 00007f7d4ba16128 R14: 00007f7d4ba16090 R15: 00007ffd25fda088 [ 1208.907430][T17383] [ 1209.435242][T17406] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2798'. [ 1209.741922][T17411] program syz.2.2797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1210.030232][T17419] FAULT_INJECTION: forcing a failure. [ 1210.030232][T17419] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.087283][T17419] CPU: 0 UID: 0 PID: 17419 Comm: syz.3.2800 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1210.087324][T17419] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1210.087333][T17419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1210.087347][T17419] Call Trace: [ 1210.087354][T17419] [ 1210.087363][T17419] dump_stack_lvl+0x100/0x190 [ 1210.087405][T17419] should_fail_ex.cold+0x5/0xa [ 1210.087436][T17419] should_failslab+0xc2/0x120 [ 1210.087463][T17419] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1210.087507][T17419] ? __alloc_skb+0x140/0x710 [ 1210.087546][T17419] __alloc_skb+0x140/0x710 [ 1210.087578][T17419] ? __alloc_skb+0x5b7/0x710 [ 1210.087610][T17419] ? __pfx___alloc_skb+0x10/0x10 [ 1210.087651][T17419] netlink_alloc_large_skb+0x69/0x150 [ 1210.087694][T17419] netlink_sendmsg+0x680/0xda0 [ 1210.087720][T17419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.087746][T17419] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1210.087862][T17419] ____sys_sendmsg+0x9e1/0xb70 [ 1210.087886][T17419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.087911][T17419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1210.087941][T17419] ? __pfx__kstrtoull+0x10/0x10 [ 1210.087984][T17419] ___sys_sendmsg+0x190/0x1e0 [ 1210.088014][T17419] ? __pfx____sys_sendmsg+0x10/0x10 [ 1210.088056][T17419] ? find_held_lock+0x2b/0x80 [ 1210.088097][T17419] __sys_sendmmsg+0x205/0x430 [ 1210.088138][T17419] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1210.088183][T17419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1210.088234][T17419] ? fput+0x79/0x100 [ 1210.088262][T17419] ? ksys_write+0x1ac/0x250 [ 1210.088284][T17419] ? __pfx_ksys_write+0x10/0x10 [ 1210.088311][T17419] __x64_sys_sendmmsg+0x9c/0x100 [ 1210.088346][T17419] ? lockdep_hardirqs_on+0x78/0x100 [ 1210.088382][T17419] do_syscall_64+0x106/0xf80 [ 1210.088416][T17419] ? clear_bhb_loop+0x40/0x90 [ 1210.088445][T17419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.088473][T17419] RIP: 0033:0x7efc50f9c799 [ 1210.088492][T17419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.088515][T17419] RSP: 002b:00007efc51dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1210.088536][T17419] RAX: ffffffffffffffda RBX: 00007efc51215fa0 RCX: 00007efc50f9c799 [ 1210.088552][T17419] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1210.088567][T17419] RBP: 00007efc51dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.088581][T17419] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1210.088594][T17419] R13: 00007efc51216038 R14: 00007efc51215fa0 R15: 00007ffd6f145e68 [ 1210.088624][T17419] [ 1210.894142][T17436] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2807'. [ 1215.325376][T17534] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1216.696598][T17553] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1216.745703][T17553] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1217.697512][T17576] ubi3: attaching mtd1 [ 1217.716902][T17576] ubi3 error: ubi_attach_mtd_dev: bad VID header (32185) or data offsets (32249) [ 1219.393833][T17609] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2849'. [ 1219.958911][T17616] FAULT_INJECTION: forcing a failure. [ 1219.958911][T17616] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.998617][T17616] CPU: 0 UID: 0 PID: 17616 Comm: syz.3.2848 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1219.998656][T17616] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1219.998665][T17616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.998678][T17616] Call Trace: [ 1219.998685][T17616] [ 1219.998694][T17616] dump_stack_lvl+0x100/0x190 [ 1219.998733][T17616] should_fail_ex.cold+0x5/0xa [ 1219.998761][T17616] should_failslab+0xc2/0x120 [ 1219.998786][T17616] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1219.998822][T17616] ? taskstats_exit+0x650/0xbd0 [ 1219.998849][T17616] taskstats_exit+0x650/0xbd0 [ 1219.998870][T17616] ? __pfx_acct_update_integrals+0x10/0x10 [ 1219.998895][T17616] ? __pfx_taskstats_exit+0x10/0x10 [ 1219.998918][T17616] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1219.998941][T17616] ? exit_signals+0x395/0xaf0 [ 1219.998969][T17616] do_exit+0x659/0x2b60 [ 1219.999005][T17616] ? __pfx_do_exit+0x10/0x10 [ 1219.999035][T17616] ? do_raw_spin_lock+0x128/0x260 [ 1219.999069][T17616] ? find_held_lock+0x2b/0x80 [ 1219.999090][T17616] ? get_signal+0x7e0/0x21e0 [ 1219.999117][T17616] do_group_exit+0xd5/0x2a0 [ 1219.999151][T17616] get_signal+0x1ec7/0x21e0 [ 1219.999185][T17616] ? __pfx_get_signal+0x10/0x10 [ 1219.999211][T17616] ? do_futex+0x192/0x350 [ 1219.999245][T17616] arch_do_signal_or_restart+0x91/0x770 [ 1219.999276][T17616] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1219.999314][T17616] ? __pfx___x64_sys_futex+0x10/0x10 [ 1219.999351][T17616] exit_to_user_mode_loop+0x86/0x4a0 [ 1219.999385][T17616] do_syscall_64+0x668/0xf80 [ 1219.999440][T17616] ? clear_bhb_loop+0x40/0x90 [ 1219.999469][T17616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.999500][T17616] RIP: 0033:0x7efc50f9c799 [ 1219.999518][T17616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.999541][T17616] RSP: 002b:00007efc51d9c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1219.999563][T17616] RAX: fffffffffffffe00 RBX: 00007efc51216098 RCX: 00007efc50f9c799 [ 1219.999578][T17616] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efc51216098 [ 1219.999593][T17616] RBP: 00007efc51216090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.999606][T17616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.999620][T17616] R13: 00007efc51216128 R14: 00007ffd6f145d80 R15: 00007ffd6f145e68 [ 1219.999650][T17616] [ 1221.819361][T17651] FAULT_INJECTION: forcing a failure. [ 1221.819361][T17651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.008517][T17651] CPU: 0 UID: 0 PID: 17651 Comm: syz.0.2857 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1222.008557][T17651] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1222.008566][T17651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1222.008580][T17651] Call Trace: [ 1222.008587][T17651] [ 1222.008596][T17651] dump_stack_lvl+0x100/0x190 [ 1222.008637][T17651] should_fail_ex.cold+0x5/0xa [ 1222.008666][T17651] _copy_from_user+0x2e/0xd0 [ 1222.008697][T17651] copy_msghdr_from_user+0x9f/0x4f0 [ 1222.008727][T17651] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1222.008759][T17651] ? rcu_is_watching+0x12/0xc0 [ 1222.008797][T17651] ? ___sys_sendmsg+0x19d/0x1e0 [ 1222.008822][T17651] ? kfree+0x2ec/0x6b0 [ 1222.008858][T17651] ___sys_sendmsg+0x106/0x1e0 [ 1222.008898][T17651] ? __pfx____sys_sendmsg+0x10/0x10 [ 1222.008950][T17651] ? __pfx___might_resched+0x10/0x10 [ 1222.008990][T17651] __sys_sendmmsg+0x205/0x430 [ 1222.009027][T17651] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1222.009071][T17651] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1222.009121][T17651] ? fput+0x79/0x100 [ 1222.009148][T17651] ? ksys_write+0x1ac/0x250 [ 1222.009176][T17651] ? __pfx_ksys_write+0x10/0x10 [ 1222.009202][T17651] __x64_sys_sendmmsg+0x9c/0x100 [ 1222.009236][T17651] ? lockdep_hardirqs_on+0x78/0x100 [ 1222.009271][T17651] do_syscall_64+0x106/0xf80 [ 1222.009330][T17651] ? clear_bhb_loop+0x40/0x90 [ 1222.009359][T17651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.009383][T17651] RIP: 0033:0x7fc8d6b9c799 [ 1222.009420][T17651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.009443][T17651] RSP: 002b:00007fc8d7af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1222.009465][T17651] RAX: ffffffffffffffda RBX: 00007fc8d6e15fa0 RCX: 00007fc8d6b9c799 [ 1222.009481][T17651] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1222.009495][T17651] RBP: 00007fc8d7af6090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.009509][T17651] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1222.009523][T17651] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1222.009555][T17651] [ 1223.082534][T17665] FAULT_INJECTION: forcing a failure. [ 1223.082534][T17665] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.123697][T17665] CPU: 0 UID: 0 PID: 17665 Comm: syz.3.2861 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1223.123738][T17665] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1223.123747][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1223.123762][T17665] Call Trace: [ 1223.123769][T17665] [ 1223.123778][T17665] dump_stack_lvl+0x100/0x190 [ 1223.123819][T17665] should_fail_ex.cold+0x5/0xa [ 1223.123849][T17665] should_failslab+0xc2/0x120 [ 1223.123875][T17665] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1223.123914][T17665] ? security_inode_alloc+0x3b/0x2c0 [ 1223.123939][T17665] ? lockdep_init_map_type+0x5c/0x250 [ 1223.123978][T17665] security_inode_alloc+0x3b/0x2c0 [ 1223.124005][T17665] inode_init_always_gfp+0xced/0x1040 [ 1223.124035][T17665] alloc_inode+0x8e/0x250 [ 1223.124069][T17665] path_from_stashed+0x25b/0x750 [ 1223.124102][T17665] ? do_raw_spin_unlock+0x145/0x1e0 [ 1223.124146][T17665] ns_get_path+0x60/0x80 [ 1223.124171][T17665] proc_ns_get_link+0x121/0x230 [ 1223.124207][T17665] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1223.124245][T17665] ? atime_needs_update+0x8b/0x6b0 [ 1223.124284][T17665] pick_link+0xd17/0x13c0 [ 1223.124319][T17665] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1223.124358][T17665] step_into_slowpath+0x9ba/0xf90 [ 1223.124402][T17665] ? __pfx_step_into_slowpath+0x10/0x10 [ 1223.124439][T17665] ? find_held_lock+0x2b/0x80 [ 1223.124472][T17665] path_openat+0xf95/0x31a0 [ 1223.124507][T17665] ? __pfx_path_openat+0x10/0x10 [ 1223.124543][T17665] do_file_open+0x20e/0x430 [ 1223.124571][T17665] ? __pfx_do_file_open+0x10/0x10 [ 1223.124616][T17665] ? alloc_fd+0x476/0x790 [ 1223.124643][T17665] ? do_getname+0x191/0x390 [ 1223.124677][T17665] do_sys_openat2+0x10d/0x1e0 [ 1223.124710][T17665] ? __pfx_do_sys_openat2+0x10/0x10 [ 1223.124745][T17665] ? __fget_files+0x21f/0x3d0 [ 1223.124775][T17665] __x64_sys_openat+0x12d/0x210 [ 1223.124809][T17665] ? __pfx___x64_sys_openat+0x10/0x10 [ 1223.124853][T17665] do_syscall_64+0x106/0xf80 [ 1223.124890][T17665] ? clear_bhb_loop+0x40/0x90 [ 1223.124920][T17665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.124945][T17665] RIP: 0033:0x7efc50f5cfce [ 1223.124965][T17665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1223.124989][T17665] RSP: 002b:00007efc51d9bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1223.125011][T17665] RAX: ffffffffffffffda RBX: 00007efc51d9c6c0 RCX: 00007efc50f5cfce [ 1223.125027][T17665] RDX: 0000000000000002 RSI: 00007efc51d9bf90 RDI: ffffffffffffff9c [ 1223.125042][T17665] RBP: 00007efc51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1223.125056][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.125071][T17665] R13: 00007efc51216128 R14: 00007efc51216090 R15: 00007ffd6f145e68 [ 1223.125107][T17665] [ 1224.647638][T17683] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2865'. [ 1225.047116][T17689] FAULT_INJECTION: forcing a failure. [ 1225.047116][T17689] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.122483][T17689] CPU: 0 UID: 0 PID: 17689 Comm: syz.1.2868 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1225.122524][T17689] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1225.122532][T17689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1225.122547][T17689] Call Trace: [ 1225.122554][T17689] [ 1225.122563][T17689] dump_stack_lvl+0x100/0x190 [ 1225.122604][T17689] should_fail_ex.cold+0x5/0xa [ 1225.122632][T17689] should_failslab+0xc2/0x120 [ 1225.122658][T17689] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1225.122698][T17689] ? __alloc_skb+0x140/0x710 [ 1225.122736][T17689] __alloc_skb+0x140/0x710 [ 1225.122767][T17689] ? __alloc_skb+0x5b7/0x710 [ 1225.122799][T17689] ? __pfx___alloc_skb+0x10/0x10 [ 1225.122838][T17689] ? __pfx___might_resched+0x10/0x10 [ 1225.122874][T17689] ? __lock_acquire+0x4a5/0x2630 [ 1225.122909][T17689] netlink_alloc_large_skb+0x69/0x150 [ 1225.122951][T17689] netlink_sendmsg+0x680/0xda0 [ 1225.122977][T17689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.122998][T17689] ? __import_iovec+0x1d2/0x640 [ 1225.123030][T17689] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1225.123075][T17689] ____sys_sendmsg+0x9e1/0xb70 [ 1225.123099][T17689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.123123][T17689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.123152][T17689] ? rcu_is_watching+0x12/0xc0 [ 1225.123189][T17689] ? ___sys_sendmsg+0x19d/0x1e0 [ 1225.123214][T17689] ? kfree+0x2ec/0x6b0 [ 1225.123250][T17689] ___sys_sendmsg+0x190/0x1e0 [ 1225.123279][T17689] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.123333][T17689] ? __pfx___might_resched+0x10/0x10 [ 1225.123375][T17689] __sys_sendmmsg+0x205/0x430 [ 1225.123413][T17689] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1225.123458][T17689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1225.123513][T17689] ? fput+0x79/0x100 [ 1225.123541][T17689] ? ksys_write+0x1ac/0x250 [ 1225.123576][T17689] ? __pfx_ksys_write+0x10/0x10 [ 1225.123602][T17689] __x64_sys_sendmmsg+0x9c/0x100 [ 1225.123636][T17689] ? lockdep_hardirqs_on+0x78/0x100 [ 1225.123671][T17689] do_syscall_64+0x106/0xf80 [ 1225.123723][T17689] ? clear_bhb_loop+0x40/0x90 [ 1225.123766][T17689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.123789][T17689] RIP: 0033:0x7f7d4b79c799 [ 1225.123807][T17689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.123833][T17689] RSP: 002b:00007f7d4c624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1225.123854][T17689] RAX: ffffffffffffffda RBX: 00007f7d4ba15fa0 RCX: 00007f7d4b79c799 [ 1225.123870][T17689] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1225.123883][T17689] RBP: 00007f7d4c624090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.123897][T17689] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1225.123910][T17689] R13: 00007f7d4ba16038 R14: 00007f7d4ba15fa0 R15: 00007ffd25fda088 [ 1225.123940][T17689] [ 1225.684160][T17705] FAULT_INJECTION: forcing a failure. [ 1225.684160][T17705] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.697468][T17705] CPU: 0 UID: 0 PID: 17705 Comm: syz.0.2872 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1225.697510][T17705] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1225.697519][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1225.697534][T17705] Call Trace: [ 1225.697542][T17705] [ 1225.697551][T17705] dump_stack_lvl+0x100/0x190 [ 1225.697596][T17705] should_fail_ex.cold+0x5/0xa [ 1225.697627][T17705] should_failslab+0xc2/0x120 [ 1225.697654][T17705] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1225.697694][T17705] ? do_getname+0x35/0x390 [ 1225.697732][T17705] do_getname+0x35/0x390 [ 1225.697768][T17705] do_sys_openat2+0xc5/0x1e0 [ 1225.697809][T17705] ? __pfx_do_sys_openat2+0x10/0x10 [ 1225.697846][T17705] ? __sys_sendmsg+0x18f/0x220 [ 1225.697891][T17705] __x64_sys_openat+0x12d/0x210 [ 1225.697926][T17705] ? __pfx___x64_sys_openat+0x10/0x10 [ 1225.697973][T17705] do_syscall_64+0x106/0xf80 [ 1225.698011][T17705] ? clear_bhb_loop+0x40/0x90 [ 1225.698042][T17705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.698067][T17705] RIP: 0033:0x7fc8d6b9c799 [ 1225.698087][T17705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.698124][T17705] RSP: 002b:00007fc8d7af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1225.698146][T17705] RAX: ffffffffffffffda RBX: 00007fc8d6e15fa0 RCX: 00007fc8d6b9c799 [ 1225.698162][T17705] RDX: 000000000034d802 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1225.698177][T17705] RBP: 00007fc8d6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1225.698192][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.698206][T17705] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1225.698236][T17705] [ 1226.021368][T17709] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2872'. [ 1226.438745][T17720] FAULT_INJECTION: forcing a failure. [ 1226.438745][T17720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.603208][T17720] CPU: 0 UID: 0 PID: 17720 Comm: syz.0.2875 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1226.603247][T17720] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1226.603256][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1226.603269][T17720] Call Trace: [ 1226.603277][T17720] [ 1226.603285][T17720] dump_stack_lvl+0x100/0x190 [ 1226.603325][T17720] should_fail_ex.cold+0x5/0xa [ 1226.603352][T17720] _copy_to_user+0x32/0xd0 [ 1226.603382][T17720] cpuid_read+0x1d9/0x360 [ 1226.603416][T17720] ? __pfx_cpuid_read+0x10/0x10 [ 1226.603444][T17720] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 1226.603474][T17720] ? __pfx___might_resched+0x10/0x10 [ 1226.603518][T17720] ? apparmor_file_permission+0x13f/0x1c0 [ 1226.603547][T17720] ? bpf_lsm_file_permission+0x9/0x10 [ 1226.603569][T17720] ? security_file_permission+0x76/0x210 [ 1226.603599][T17720] ? rw_verify_area+0xce/0x6d0 [ 1226.603635][T17720] ? __pfx_cpuid_read+0x10/0x10 [ 1226.603662][T17720] vfs_readv+0x5d8/0x8d0 [ 1226.603708][T17720] ? __pfx_vfs_readv+0x10/0x10 [ 1226.603763][T17720] ? __fget_files+0x21f/0x3d0 [ 1226.603791][T17720] ? do_readv+0x13e/0x340 [ 1226.603824][T17720] do_readv+0x13e/0x340 [ 1226.603859][T17720] ? __pfx_do_readv+0x10/0x10 [ 1226.603902][T17720] do_syscall_64+0x106/0xf80 [ 1226.603936][T17720] ? clear_bhb_loop+0x40/0x90 [ 1226.603964][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.603988][T17720] RIP: 0033:0x7fc8d6b9c799 [ 1226.604006][T17720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.604028][T17720] RSP: 002b:00007fc8d7af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1226.604049][T17720] RAX: ffffffffffffffda RBX: 00007fc8d6e15fa0 RCX: 00007fc8d6b9c799 [ 1226.604065][T17720] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000005 [ 1226.604078][T17720] RBP: 00007fc8d6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1226.604092][T17720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.604106][T17720] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1226.604135][T17720] [ 1227.349639][T17732] bond0: invalid ARP target specified [ 1228.832745][ T49] bridge_slave_1: left allmulticast mode [ 1228.843006][ T49] bridge_slave_1: left promiscuous mode [ 1228.873999][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.013001][ T49] bridge_slave_0: left allmulticast mode [ 1229.018708][ T49] bridge_slave_0: left promiscuous mode [ 1229.081607][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.037420][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.151897][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.200447][ T49] bond0 (unregistering): Released all slaves [ 1230.299802][T17790] FAULT_INJECTION: forcing a failure. [ 1230.299802][T17790] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.398602][T17796] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2894'. [ 1230.479335][T17790] CPU: 0 UID: 0 PID: 17790 Comm: syz.1.2894 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1230.479377][T17790] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1230.479386][T17790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1230.479401][T17790] Call Trace: [ 1230.479409][T17790] [ 1230.479417][T17790] dump_stack_lvl+0x100/0x190 [ 1230.479480][T17790] should_fail_ex.cold+0x5/0xa [ 1230.479510][T17790] should_failslab+0xc2/0x120 [ 1230.479538][T17790] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1230.479578][T17790] ? __kernfs_new_node+0xd2/0x960 [ 1230.479615][T17790] ? kstrdup+0xb3/0xe0 [ 1230.479641][T17790] __kernfs_new_node+0xd2/0x960 [ 1230.479692][T17790] ? __pfx___kernfs_new_node+0x10/0x10 [ 1230.479737][T17790] ? find_held_lock+0x2b/0x80 [ 1230.479762][T17790] ? kernfs_root+0xee/0x2a0 [ 1230.479797][T17790] ? kernfs_root+0xee/0x2a0 [ 1230.479840][T17790] kernfs_new_node+0x11b/0x1a0 [ 1230.479868][T17790] kernfs_create_link+0xcc/0x240 [ 1230.479901][T17790] sysfs_do_create_link_sd+0x90/0x140 [ 1230.479940][T17790] sysfs_create_link+0x61/0xc0 [ 1230.479977][T17790] device_add+0x675/0x1950 [ 1230.480013][T17790] ? __pfx_device_add+0x10/0x10 [ 1230.480044][T17790] ? lockdep_init_map_type+0x5c/0x250 [ 1230.480079][T17790] ? __init_waitqueue_head+0xca/0x150 [ 1230.480126][T17790] rfkill_register+0x1ad/0xb30 [ 1230.480162][T17790] nfc_register_device+0x11f/0x3e0 [ 1230.480203][T17790] nci_register_device+0x7f1/0xb80 [ 1230.480236][T17790] ? __pfx_nci_register_device+0x10/0x10 [ 1230.480271][T17790] ? lockdep_init_map_type+0x5c/0x250 [ 1230.480318][T17790] virtual_ncidev_open+0x141/0x220 [ 1230.480355][T17790] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1230.480391][T17790] misc_open+0x26d/0x450 [ 1230.480423][T17790] ? __pfx_misc_open+0x10/0x10 [ 1230.480453][T17790] chrdev_open+0x234/0x6a0 [ 1230.480479][T17790] ? __pfx_apparmor_file_open+0x10/0x10 [ 1230.480505][T17790] ? __pfx_chrdev_open+0x10/0x10 [ 1230.480533][T17790] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1230.480569][T17790] do_dentry_open+0x6d8/0x1660 [ 1230.480594][T17790] ? __pfx_chrdev_open+0x10/0x10 [ 1230.480628][T17790] vfs_open+0x82/0x3f0 [ 1230.480664][T17790] path_openat+0x208c/0x31a0 [ 1230.480701][T17790] ? __pfx_path_openat+0x10/0x10 [ 1230.480740][T17790] do_file_open+0x20e/0x430 [ 1230.480769][T17790] ? __pfx_do_file_open+0x10/0x10 [ 1230.480819][T17790] ? alloc_fd+0x476/0x790 [ 1230.480861][T17790] ? do_getname+0x191/0x390 [ 1230.480895][T17790] do_sys_openat2+0x10d/0x1e0 [ 1230.480929][T17790] ? __pfx_do_sys_openat2+0x10/0x10 [ 1230.480964][T17790] ? __fget_files+0x21f/0x3d0 [ 1230.480994][T17790] __x64_sys_openat+0x12d/0x210 [ 1230.481029][T17790] ? __pfx___x64_sys_openat+0x10/0x10 [ 1230.481075][T17790] do_syscall_64+0x106/0xf80 [ 1230.481111][T17790] ? clear_bhb_loop+0x40/0x90 [ 1230.481141][T17790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.481166][T17790] RIP: 0033:0x7f7d4b79c799 [ 1230.481185][T17790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.481209][T17790] RSP: 002b:00007f7d4c624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1230.481232][T17790] RAX: ffffffffffffffda RBX: 00007f7d4ba15fa0 RCX: 00007f7d4b79c799 [ 1230.481248][T17790] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1230.481264][T17790] RBP: 00007f7d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1230.481285][T17790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.481300][T17790] R13: 00007f7d4ba16038 R14: 00007f7d4ba15fa0 R15: 00007ffd25fda088 [ 1230.481331][T17790] [ 1231.189642][T17787] sd 0:0:1:0: PR command failed: 1026 [ 1231.195169][T17787] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1231.201926][T17787] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1231.779024][T17804] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2895'. [ 1232.232755][T17808] FAULT_INJECTION: forcing a failure. [ 1232.232755][T17808] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.360989][T17808] CPU: 0 UID: 0 PID: 17808 Comm: syz.3.2897 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1232.361031][T17808] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1232.361040][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1232.361068][T17808] Call Trace: [ 1232.361076][T17808] [ 1232.361086][T17808] dump_stack_lvl+0x100/0x190 [ 1232.361137][T17808] should_fail_ex.cold+0x5/0xa [ 1232.361166][T17808] should_failslab+0xc2/0x120 [ 1232.361193][T17808] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1232.361232][T17808] ? __d_alloc+0x34/0xa80 [ 1232.361272][T17808] ? security_inode_alloc+0xcf/0x2c0 [ 1232.361300][T17808] __d_alloc+0x34/0xa80 [ 1232.361324][T17808] ? __ns_ref_active_get+0x9f/0x1b0 [ 1232.361356][T17808] path_from_stashed+0x427/0x750 [ 1232.361400][T17808] ? do_raw_spin_unlock+0x145/0x1e0 [ 1232.361446][T17808] ns_get_path+0x60/0x80 [ 1232.361472][T17808] proc_ns_get_link+0x121/0x230 [ 1232.361508][T17808] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1232.361547][T17808] ? atime_needs_update+0x8b/0x6b0 [ 1232.361584][T17808] pick_link+0xd17/0x13c0 [ 1232.361619][T17808] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1232.361658][T17808] step_into_slowpath+0x9ba/0xf90 [ 1232.361701][T17808] ? __pfx_step_into_slowpath+0x10/0x10 [ 1232.361739][T17808] ? find_held_lock+0x2b/0x80 [ 1232.361772][T17808] path_openat+0xf95/0x31a0 [ 1232.361807][T17808] ? __pfx_path_openat+0x10/0x10 [ 1232.361844][T17808] do_file_open+0x20e/0x430 [ 1232.361872][T17808] ? __pfx_do_file_open+0x10/0x10 [ 1232.361918][T17808] ? alloc_fd+0x476/0x790 [ 1232.361945][T17808] ? do_getname+0x191/0x390 [ 1232.361979][T17808] do_sys_openat2+0x10d/0x1e0 [ 1232.362013][T17808] ? __pfx_do_sys_openat2+0x10/0x10 [ 1232.362048][T17808] ? __fget_files+0x21f/0x3d0 [ 1232.362077][T17808] __x64_sys_openat+0x12d/0x210 [ 1232.362117][T17808] ? __pfx___x64_sys_openat+0x10/0x10 [ 1232.362163][T17808] do_syscall_64+0x106/0xf80 [ 1232.362200][T17808] ? clear_bhb_loop+0x40/0x90 [ 1232.362230][T17808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.362267][T17808] RIP: 0033:0x7efc50f5cfce [ 1232.362286][T17808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1232.362308][T17808] RSP: 002b:00007efc51dbcec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1232.362329][T17808] RAX: ffffffffffffffda RBX: 00007efc51dbd6c0 RCX: 00007efc50f5cfce [ 1232.362344][T17808] RDX: 0000000000000002 RSI: 00007efc51dbcf90 RDI: ffffffffffffff9c [ 1232.362358][T17808] RBP: 00007efc51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1232.362372][T17808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1232.362385][T17808] R13: 00007efc51216038 R14: 00007efc51215fa0 R15: 00007ffd6f145e68 [ 1232.362414][T17808] [ 1233.519344][T17815] bond0: invalid ARP target specified [ 1233.714291][T16332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1233.735968][T16332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1233.752897][T16332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1233.765387][T16332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1233.804911][T16332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1233.969516][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.991544][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.078165][ T49] veth1_macvtap: left promiscuous mode [ 1234.089868][ T49] veth0_macvtap: left promiscuous mode [ 1234.124364][ T49] veth1_vlan: left promiscuous mode [ 1234.162873][ T49] veth0_vlan: left promiscuous mode [ 1234.621654][T17839] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1235.321954][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1235.391918][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1235.840787][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 1235.852092][T16332] Bluetooth: hci0: command tx timeout [ 1235.992474][T17851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1236.001671][T17851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1236.035479][T17851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1236.082169][T17851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1236.088742][T17851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1236.131900][T17851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1236.178726][T17851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1237.209213][T17870] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1237.487588][T17816] chnl_net:caif_netlink_parms(): no params data found [ 1238.021779][T16332] Bluetooth: hci2: command 0x0c1a tx timeout [ 1238.027848][T16332] Bluetooth: hci4: command 0x0c1a tx timeout [ 1238.096930][T16332] Bluetooth: hci0: command 0x040f tx timeout [ 1238.104169][ T5883] Bluetooth: hci3: command 0x0c1a tx timeout [ 1238.110193][ T5883] Bluetooth: hci1: command 0x0c1a tx timeout [ 1238.150659][T17816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.272794][T17816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.280029][T17816] bridge_slave_0: entered allmulticast mode [ 1238.346420][T17816] bridge_slave_0: entered promiscuous mode [ 1238.375464][T17892] futex_wake_op: syz.3.2914 tries to shift op by -2048; fix this program [ 1238.402763][T17816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.409908][T17816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.422382][T17892] futex_wake_op: syz.3.2914 tries to shift op by -2048; fix this program [ 1238.473306][T17892] 0x000000000001-0x000000020000 : "" [ 1238.491763][T17816] bridge_slave_1: entered allmulticast mode [ 1238.521319][T17892] ftl_cs: FTL header corrupt! [ 1238.536696][T17816] bridge_slave_1: entered promiscuous mode [ 1238.927317][T17816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.994443][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.000791][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.070084][T17816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.556132][T17816] team0: Port device team_slave_0 added [ 1239.570870][T17816] team0: Port device team_slave_1 added [ 1239.802961][T17816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.834072][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.944007][T17816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.004366][T17816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.051460][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.176206][ T5883] Bluetooth: hci0: command 0x040f tx timeout [ 1240.236724][T17816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.522652][T17816] hsr_slave_0: entered promiscuous mode [ 1240.544324][T17816] hsr_slave_1: entered promiscuous mode [ 1240.574265][T17816] debugfs: 'hsr0' already exists in 'hsr' [ 1240.580042][T17816] Cannot create hsr debugfs directory [ 1241.911331][T17816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1241.968995][T17816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1242.018842][T17816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1242.077842][T17816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1242.251925][ T5883] Bluetooth: hci0: command 0x040f tx timeout [ 1242.554936][T17816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.657086][T17816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.711922][T16489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.719124][T16489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.824912][T16464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.832131][T16464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.713301][T17816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.331658][ T5883] Bluetooth: hci0: command 0x040f tx timeout [ 1245.128457][T17816] veth0_vlan: entered promiscuous mode [ 1245.206139][T17816] veth1_vlan: entered promiscuous mode [ 1245.330967][T17816] veth0_macvtap: entered promiscuous mode [ 1245.345025][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 1245.384588][T17816] veth1_macvtap: entered promiscuous mode [ 1245.476419][T17816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.555389][T17816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.717310][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.749950][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.873879][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.921489][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.129143][T16475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.173317][T16475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.323943][T16475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.392958][T16475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.416980][ T5883] Bluetooth: hci0: command 0x040f tx timeout [ 1246.602984][T17816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1248.362695][T18043] bond0: invalid ARP target specified [ 1248.633573][T18043] bond0: invalid ARP target specified [ 1249.443513][T18065] synth uevent: /devices/platform/vivid.0/video4linux/swradio11: unknown uevent action string [ 1249.521556][T18065] video4linux swradio11: uevent: failed to send synthetic uevent: -22 [ 1249.940171][T18081] FAULT_INJECTION: forcing a failure. [ 1249.940171][T18081] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1250.019557][T18081] CPU: 0 UID: 0 PID: 18081 Comm: syz.1.2955 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1250.019603][T18081] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1250.019611][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1250.019623][T18081] Call Trace: [ 1250.019629][T18081] [ 1250.019636][T18081] dump_stack_lvl+0x100/0x190 [ 1250.019673][T18081] should_fail_ex.cold+0x5/0xa [ 1250.019693][T18081] ? prepare_alloc_pages+0x16d/0x5f0 [ 1250.019720][T18081] should_fail_alloc_page+0xeb/0x140 [ 1250.019743][T18081] prepare_alloc_pages+0x1f0/0x5f0 [ 1250.019766][T18081] ? unwind_get_return_address+0x59/0xa0 [ 1250.019793][T18081] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1250.019832][T18081] ? stack_trace_save+0x8e/0xc0 [ 1250.019853][T18081] ? __pfx_stack_trace_save+0x10/0x10 [ 1250.019874][T18081] ? stack_depot_save_flags+0x27/0x9d0 [ 1250.019902][T18081] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1250.019924][T18081] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1250.019957][T18081] ? kasan_save_stack+0x30/0x50 [ 1250.019989][T18081] ? __kasan_slab_alloc+0x89/0x90 [ 1250.020007][T18081] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1250.020037][T18081] ? __pmd_alloc+0xbf/0x950 [ 1250.020060][T18081] ? __handle_mm_fault+0xa99/0x2b60 [ 1250.020086][T18081] ? handle_mm_fault+0x36d/0xa20 [ 1250.020112][T18081] ? do_user_addr_fault+0x74c/0x12f0 [ 1250.020130][T18081] ? exc_page_fault+0x6f/0xd0 [ 1250.020158][T18081] ? asm_exc_page_fault+0x26/0x30 [ 1250.020177][T18081] ? rep_movs_alternative+0x4a/0x90 [ 1250.020202][T18081] ? __x64_sys_pread64+0x1eb/0x250 [ 1250.020222][T18081] ? do_syscall_64+0x106/0xf80 [ 1250.020275][T18081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.020302][T18081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1250.020326][T18081] ? policy_nodemask+0xed/0x4f0 [ 1250.020352][T18081] alloc_pages_mpol+0x1fb/0x550 [ 1250.020377][T18081] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1250.020407][T18081] ? __pfx_filemap_map_pages+0x10/0x10 [ 1250.020439][T18081] alloc_pages_noprof+0x131/0x390 [ 1250.020464][T18081] pte_alloc_one+0x1c/0x3d0 [ 1250.020499][T18081] __do_fault+0x359/0x550 [ 1250.020538][T18081] ? __pfx_filemap_map_pages+0x10/0x10 [ 1250.020570][T18081] do_fault+0x2db/0x1990 [ 1250.020594][T18081] ? __pmd_alloc+0x3fb/0x950 [ 1250.020622][T18081] __handle_mm_fault+0x180f/0x2b60 [ 1250.020657][T18081] ? mt_find+0x45e/0x8e0 [ 1250.020677][T18081] ? __pfx___handle_mm_fault+0x10/0x10 [ 1250.020706][T18081] ? __pfx_mt_find+0x10/0x10 [ 1250.020739][T18081] ? find_vma+0xbf/0x140 [ 1250.020760][T18081] ? __pfx_find_vma+0x10/0x10 [ 1250.020785][T18081] handle_mm_fault+0x36d/0xa20 [ 1250.020820][T18081] do_user_addr_fault+0x74c/0x12f0 [ 1250.020849][T18081] exc_page_fault+0x6f/0xd0 [ 1250.020881][T18081] asm_exc_page_fault+0x26/0x30 [ 1250.020901][T18081] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1250.020927][T18081] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1250.020946][T18081] RSP: 0018:ffffc90003cd79b0 EFLAGS: 00050202 [ 1250.020962][T18081] RAX: 0000000000000001 RBX: 00000000000000c3 RCX: 00000000000000c3 [ 1250.020975][T18081] RDX: 0000000000000001 RSI: ffff88804a84c005 RDI: 0000000000000000 [ 1250.020988][T18081] RBP: ffffc90003cd7bc0 R08: 0000000000000000 R09: ffffed1009509818 [ 1250.021001][T18081] R10: ffff88804a84c0c7 R11: 0000000000000000 R12: ffff88804a84c005 [ 1250.021014][T18081] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000000c3 [ 1250.021040][T18081] _copy_to_iter+0x4c5/0x1720 [ 1250.021072][T18081] ? __pfx__copy_to_iter+0x10/0x10 [ 1250.021099][T18081] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 1250.021142][T18081] seq_read_iter+0x691/0x1270 [ 1250.021178][T18081] ? aa_file_perm+0x7f3/0x14d0 [ 1250.021216][T18081] seq_read+0x33b/0x4c0 [ 1250.021249][T18081] ? __pfx_seq_read+0x10/0x10 [ 1250.021304][T18081] ? __pfx_seq_read+0x10/0x10 [ 1250.021337][T18081] proc_reg_read+0x240/0x330 [ 1250.021373][T18081] ? __pfx_proc_reg_read+0x10/0x10 [ 1250.021407][T18081] vfs_read+0x1e4/0xb30 [ 1250.021430][T18081] ? __pfx_vfs_read+0x10/0x10 [ 1250.021447][T18081] ? find_held_lock+0x2b/0x80 [ 1250.021467][T18081] ? __fget_files+0x215/0x3d0 [ 1250.021487][T18081] ? __fget_files+0x215/0x3d0 [ 1250.021512][T18081] ? __fget_files+0x21f/0x3d0 [ 1250.021539][T18081] __x64_sys_pread64+0x1eb/0x250 [ 1250.021562][T18081] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1250.021592][T18081] do_syscall_64+0x106/0xf80 [ 1250.021622][T18081] ? clear_bhb_loop+0x40/0x90 [ 1250.021648][T18081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.021669][T18081] RIP: 0033:0x7f7d4b79c799 [ 1250.021686][T18081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.021705][T18081] RSP: 002b:00007f7d4c624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1250.021723][T18081] RAX: ffffffffffffffda RBX: 00007f7d4ba15fa0 RCX: 00007f7d4b79c799 [ 1250.021737][T18081] RDX: 00000000000007ff RSI: 0000000000000000 RDI: 0000000000000003 [ 1250.021749][T18081] RBP: 00007f7d4c624090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.021762][T18081] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1250.021774][T18081] R13: 00007f7d4ba16038 R14: 00007f7d4ba15fa0 R15: 00007ffd25fda088 [ 1250.021801][T18081] [ 1251.728706][T18093] futex_wake_op: syz.0.2957 tries to shift op by -2048; fix this program [ 1251.786458][T18093] futex_wake_op: syz.0.2957 tries to shift op by -2048; fix this program [ 1251.832821][T18095] 0x000000000001-0x000000020000 : "" [ 1252.111228][T18095] ftl_cs: FTL header corrupt! [ 1253.124719][T18113] futex_wake_op: syz.0.2960 tries to shift op by -2048; fix this program [ 1253.168919][T18113] futex_wake_op: syz.0.2960 tries to shift op by -2048; fix this program [ 1253.309577][T18113] 0x000000000001-0x000000020000 : "" [ 1253.401630][T18113] ftl_cs: FTL header corrupt! [ 1255.594599][T18153] FAULT_INJECTION: forcing a failure. [ 1255.594599][T18153] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.705393][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.3.2968 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1255.705431][T18153] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1255.705439][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1255.705453][T18153] Call Trace: [ 1255.705460][T18153] [ 1255.705468][T18153] dump_stack_lvl+0x100/0x190 [ 1255.705508][T18153] should_fail_ex.cold+0x5/0xa [ 1255.705535][T18153] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1255.705569][T18153] should_failslab+0xc2/0x120 [ 1255.705594][T18153] __kmalloc_noprof+0xe0/0x850 [ 1255.705635][T18153] tomoyo_realpath_from_path+0xb6/0x690 [ 1255.705673][T18153] tomoyo_path_number_perm+0x23c/0x580 [ 1255.705699][T18153] ? tomoyo_path_number_perm+0x22e/0x580 [ 1255.705727][T18153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1255.705785][T18153] ? find_held_lock+0x2b/0x80 [ 1255.705813][T18153] ? __fget_files+0x215/0x3d0 [ 1255.705834][T18153] ? hook_file_ioctl_common+0x146/0x410 [ 1255.705867][T18153] ? __fget_files+0x21f/0x3d0 [ 1255.705893][T18153] security_file_ioctl+0xd3/0x230 [ 1255.705921][T18153] __x64_sys_ioctl+0xb7/0x210 [ 1255.705957][T18153] do_syscall_64+0x106/0xf80 [ 1255.705991][T18153] ? clear_bhb_loop+0x40/0x90 [ 1255.706020][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.706043][T18153] RIP: 0033:0x7efc50f9c799 [ 1255.706061][T18153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.706083][T18153] RSP: 002b:00007efc51dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.706104][T18153] RAX: ffffffffffffffda RBX: 00007efc51215fa0 RCX: 00007efc50f9c799 [ 1255.706120][T18153] RDX: 0000000000000000 RSI: 0000000000004605 RDI: 0000000000000004 [ 1255.706133][T18153] RBP: 00007efc51dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.706147][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.706160][T18153] R13: 00007efc51216038 R14: 00007efc51215fa0 R15: 00007ffd6f145e68 [ 1255.706189][T18153] [ 1255.706219][T18153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1256.349326][T18167] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2971'. [ 1256.433020][T18166] ubi3: attaching mtd1 [ 1256.437245][T18166] ubi3 error: ubi_attach_mtd_dev: bad VID header (32185) or data offsets (32249) [ 1257.158874][T18175] FAULT_INJECTION: forcing a failure. [ 1257.158874][T18175] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.224470][T18175] CPU: 0 UID: 0 PID: 18175 Comm: syz.0.2974 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1257.224512][T18175] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1257.224521][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.224533][T18175] Call Trace: [ 1257.224541][T18175] [ 1257.224549][T18175] dump_stack_lvl+0x100/0x190 [ 1257.224588][T18175] should_fail_ex.cold+0x5/0xa [ 1257.224613][T18175] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1257.224643][T18175] should_failslab+0xc2/0x120 [ 1257.224667][T18175] __kmalloc_noprof+0xe0/0x850 [ 1257.224706][T18175] tomoyo_realpath_from_path+0xb6/0x690 [ 1257.224742][T18175] tomoyo_path_number_perm+0x23c/0x580 [ 1257.224766][T18175] ? tomoyo_path_number_perm+0x22e/0x580 [ 1257.224793][T18175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1257.224843][T18175] ? find_held_lock+0x2b/0x80 [ 1257.224864][T18175] ? __fget_files+0x215/0x3d0 [ 1257.224882][T18175] ? hook_file_ioctl_common+0x146/0x410 [ 1257.224913][T18175] ? __fget_files+0x21f/0x3d0 [ 1257.224937][T18175] security_file_ioctl+0xd3/0x230 [ 1257.224963][T18175] __x64_sys_ioctl+0xb7/0x210 [ 1257.224997][T18175] do_syscall_64+0x106/0xf80 [ 1257.225031][T18175] ? clear_bhb_loop+0x40/0x90 [ 1257.225058][T18175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.225080][T18175] RIP: 0033:0x7fc8d6b9c799 [ 1257.225107][T18175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.225126][T18175] RSP: 002b:00007fc8d7af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.225145][T18175] RAX: ffffffffffffffda RBX: 00007fc8d6e15fa0 RCX: 00007fc8d6b9c799 [ 1257.225158][T18175] RDX: 0000200000000040 RSI: 0000000040186f40 RDI: 0000000000000003 [ 1257.225188][T18175] RBP: 00007fc8d7af6090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.225201][T18175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.225213][T18175] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1257.225240][T18175] [ 1257.225248][T18175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1257.555039][T18177] FAULT_INJECTION: forcing a failure. [ 1257.555039][T18177] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.603197][T18177] CPU: 0 UID: 0 PID: 18177 Comm: syz.3.2975 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1257.603238][T18177] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1257.603248][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.603262][T18177] Call Trace: [ 1257.603271][T18177] [ 1257.603280][T18177] dump_stack_lvl+0x100/0x190 [ 1257.603333][T18177] should_fail_ex.cold+0x5/0xa [ 1257.603361][T18177] should_failslab+0xc2/0x120 [ 1257.603386][T18177] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1257.603423][T18177] ? __d_alloc+0x34/0xa80 [ 1257.603449][T18177] ? security_inode_alloc+0xcf/0x2c0 [ 1257.603502][T18177] __d_alloc+0x34/0xa80 [ 1257.603528][T18177] ? __ns_ref_active_get+0x9f/0x1b0 [ 1257.603563][T18177] path_from_stashed+0x427/0x750 [ 1257.603590][T18177] ? do_raw_spin_unlock+0x145/0x1e0 [ 1257.603633][T18177] ns_get_path+0x60/0x80 [ 1257.603677][T18177] proc_ns_get_link+0x121/0x230 [ 1257.603713][T18177] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1257.603753][T18177] ? atime_needs_update+0x8b/0x6b0 [ 1257.603793][T18177] pick_link+0xd17/0x13c0 [ 1257.603829][T18177] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1257.603883][T18177] step_into_slowpath+0x9ba/0xf90 [ 1257.603926][T18177] ? __pfx_step_into_slowpath+0x10/0x10 [ 1257.603964][T18177] ? find_held_lock+0x2b/0x80 [ 1257.604017][T18177] path_openat+0xf95/0x31a0 [ 1257.604053][T18177] ? __pfx_path_openat+0x10/0x10 [ 1257.604091][T18177] do_file_open+0x20e/0x430 [ 1257.604120][T18177] ? __pfx_do_file_open+0x10/0x10 [ 1257.604168][T18177] ? alloc_fd+0x476/0x790 [ 1257.604196][T18177] ? do_getname+0x191/0x390 [ 1257.604232][T18177] do_sys_openat2+0x10d/0x1e0 [ 1257.604267][T18177] ? __pfx_do_sys_openat2+0x10/0x10 [ 1257.604304][T18177] ? __fget_files+0x21f/0x3d0 [ 1257.604346][T18177] __x64_sys_openat+0x12d/0x210 [ 1257.604381][T18177] ? __pfx___x64_sys_openat+0x10/0x10 [ 1257.604426][T18177] do_syscall_64+0x106/0xf80 [ 1257.604463][T18177] ? clear_bhb_loop+0x40/0x90 [ 1257.604493][T18177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.604523][T18177] RIP: 0033:0x7efc50f5cfce [ 1257.604542][T18177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1257.604566][T18177] RSP: 002b:00007efc51d9bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1257.604589][T18177] RAX: ffffffffffffffda RBX: 00007efc51d9c6c0 RCX: 00007efc50f5cfce [ 1257.604604][T18177] RDX: 0000000000000002 RSI: 00007efc51d9bf90 RDI: ffffffffffffff9c [ 1257.604619][T18177] RBP: 00007efc51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1257.604634][T18177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.604648][T18177] R13: 00007efc51216128 R14: 00007efc51216090 R15: 00007ffd6f145e68 [ 1257.604679][T18177] [ 1258.513846][T18175] ubi3: attaching mtd1 [ 1258.533660][T18175] ubi3 error: ubi_attach_mtd_dev: bad VID header (32185) or data offsets (32249) [ 1258.846204][T18194] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1258.891205][T18194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1259.053926][T18194] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1259.143330][T18194] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1259.227624][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1259.287617][T18194] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1260.895911][ T5883] Bluetooth: hci4: command 0x0c1a tx timeout [ 1260.972371][ T5883] Bluetooth: hci2: command 0x0c1a tx timeout [ 1261.131552][ T5883] Bluetooth: hci1: command 0x0c1a tx timeout [ 1261.211613][ T5883] Bluetooth: hci0: command 0x040f tx timeout [ 1261.217651][ T5883] Bluetooth: hci3: command 0x0c1a tx timeout [ 1261.672237][T18240] futex_wake_op: syz.1.2985 tries to shift op by -2048; fix this program [ 1261.761987][T18240] futex_wake_op: syz.1.2985 tries to shift op by -2048; fix this program [ 1263.021654][T18248] netlink: 'syz.4.2988': attribute type 11 has an invalid length. [ 1263.121267][T18248] netlink: 'syz.4.2988': attribute type 11 has an invalid length. [ 1263.238586][T18248] netlink: 'syz.4.2988': attribute type 11 has an invalid length. [ 1264.271754][T18278] ubi31: attaching mtd1 [ 1264.296596][T18278] ubi31 error: ubi_attach_mtd_dev: bad VID header (32185) or data offsets (32249) [ 1267.993457][T18330] FAULT_INJECTION: forcing a failure. [ 1267.993457][T18330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1268.155402][T18330] CPU: 0 UID: 0 PID: 18330 Comm: syz.4.3008 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1268.155444][T18330] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1268.155453][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1268.155468][T18330] Call Trace: [ 1268.155475][T18330] [ 1268.155484][T18330] dump_stack_lvl+0x100/0x190 [ 1268.155526][T18330] should_fail_ex.cold+0x5/0xa [ 1268.155551][T18330] ? prepare_alloc_pages+0x16d/0x5f0 [ 1268.155582][T18330] should_fail_alloc_page+0xeb/0x140 [ 1268.155611][T18330] prepare_alloc_pages+0x1f0/0x5f0 [ 1268.155645][T18330] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1268.155686][T18330] ? find_held_lock+0x2b/0x80 [ 1268.155716][T18330] ? css_rstat_updated+0x1ce/0x5a0 [ 1268.155743][T18330] ? mark_held_locks+0x40/0x70 [ 1268.155781][T18330] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1268.155825][T18330] ? __pfx_css_rstat_updated+0x10/0x10 [ 1268.155861][T18330] ? lock_acquire+0x1cf/0x380 [ 1268.155923][T18330] ? find_held_lock+0x2b/0x80 [ 1268.155946][T18330] ? page_table_check_set+0x49a/0xa10 [ 1268.155970][T18330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1268.155997][T18330] ? policy_nodemask+0xed/0x4f0 [ 1268.156026][T18330] alloc_pages_mpol+0x1fb/0x550 [ 1268.156054][T18330] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1268.156090][T18330] folio_alloc_mpol_noprof+0x36/0x340 [ 1268.156123][T18330] vma_alloc_folio_noprof+0xed/0x1d0 [ 1268.156153][T18330] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1268.156193][T18330] do_anonymous_page+0xb3a/0x1fb0 [ 1268.156245][T18330] __handle_mm_fault+0x1d42/0x2b60 [ 1268.156286][T18330] ? __pfx___handle_mm_fault+0x10/0x10 [ 1268.156322][T18330] ? pte_offset_map_lock+0x174/0x320 [ 1268.156348][T18330] ? find_held_lock+0x2b/0x80 [ 1268.156385][T18330] ? follow_page_pte+0x5b3/0x1400 [ 1268.156419][T18330] handle_mm_fault+0x36d/0xa20 [ 1268.156458][T18330] __get_user_pages+0xf9c/0x34d0 [ 1268.156499][T18330] ? __pfx___get_user_pages+0x10/0x10 [ 1268.156535][T18330] populate_vma_page_range+0x267/0x3f0 [ 1268.156568][T18330] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1268.156598][T18330] ? __pfx_find_vma_intersection+0x10/0x10 [ 1268.156633][T18330] __mm_populate+0x107/0x3a0 [ 1268.156664][T18330] ? __pfx___mm_populate+0x10/0x10 [ 1268.156695][T18330] ? up_write+0x406/0x4f0 [ 1268.156733][T18330] vm_mmap_pgoff+0x37f/0x470 [ 1268.156764][T18330] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1268.156794][T18330] ? do_futex+0x192/0x350 [ 1268.156826][T18330] ? __pfx_do_futex+0x10/0x10 [ 1268.156856][T18330] ? __pfx_do_sys_openat2+0x10/0x10 [ 1268.156895][T18330] ksys_mmap_pgoff+0xe1/0x650 [ 1268.156921][T18330] ? __x64_sys_futex+0x34f/0x4d0 [ 1268.156952][T18330] ? __x64_sys_futex+0x358/0x4d0 [ 1268.156984][T18330] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1268.157011][T18330] ? xfd_validate_state+0x129/0x190 [ 1268.157052][T18330] __x64_sys_mmap+0x125/0x190 [ 1268.157092][T18330] do_syscall_64+0x106/0xf80 [ 1268.157128][T18330] ? clear_bhb_loop+0x40/0x90 [ 1268.157157][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.157181][T18330] RIP: 0033:0x7f4151b9c799 [ 1268.157200][T18330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.157223][T18330] RSP: 002b:00007f4152b02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1268.157245][T18330] RAX: ffffffffffffffda RBX: 00007f4151e16090 RCX: 00007f4151b9c799 [ 1268.157260][T18330] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1268.157274][T18330] RBP: 00007f4151c32c99 R08: ffffffffffffffff R09: 0000000000000000 [ 1268.157289][T18330] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1268.157302][T18330] R13: 00007f4151e16128 R14: 00007f4151e16090 R15: 00007fffd0a69928 [ 1268.157333][T18330] [ 1270.479577][T18365] futex_wake_op: syz.0.3013 tries to shift op by -2048; fix this program [ 1270.541081][T18365] futex_wake_op: syz.0.3013 tries to shift op by -2048; fix this program [ 1270.586385][T18365] 0x000000000001-0x000000020000 : "" [ 1270.658307][T18365] ftl_cs: FTL header corrupt! [ 1271.035923][T18371] sd 0:0:1:0: PR command failed: 1026 [ 1271.153861][T18371] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1271.231503][T18371] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1274.649195][T18419] FAULT_INJECTION: forcing a failure. [ 1274.649195][T18419] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.662161][T18419] CPU: 0 UID: 0 PID: 18419 Comm: syz.0.3024 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1274.662198][T18419] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1274.662207][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1274.662220][T18419] Call Trace: [ 1274.662227][T18419] [ 1274.662236][T18419] dump_stack_lvl+0x100/0x190 [ 1274.662276][T18419] should_fail_ex.cold+0x5/0xa [ 1274.662316][T18419] ? __reuseport_alloc+0x1d/0x90 [ 1274.662442][T18419] should_failslab+0xc2/0x120 [ 1274.662467][T18419] __kmalloc_noprof+0xe0/0x850 [ 1274.662508][T18419] __reuseport_alloc+0x1d/0x90 [ 1274.662541][T18419] reuseport_alloc+0x1ed/0x420 [ 1274.662576][T18419] sctp_hash_endpoint+0x47d/0x6d0 [ 1274.662641][T18419] ? rcu_is_watching+0x12/0xc0 [ 1274.662677][T18419] ? trace_inet_sock_set_state+0x78/0x250 [ 1274.662709][T18419] sctp_inet_listen+0x58f/0x7f0 [ 1274.662734][T18419] ? __pfx_sctp_inet_listen+0x10/0x10 [ 1274.662780][T18419] ? apparmor_socket_listen+0xf2/0x1a0 [ 1274.662821][T18419] __sys_listen_socket+0x108/0x150 [ 1274.662853][T18419] __sys_listen+0xa7/0x130 [ 1274.662881][T18419] __x64_sys_listen+0x53/0x80 [ 1274.662910][T18419] do_syscall_64+0x106/0xf80 [ 1274.662944][T18419] ? clear_bhb_loop+0x40/0x90 [ 1274.662972][T18419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.662995][T18419] RIP: 0033:0x7fc8d6b9c799 [ 1274.663013][T18419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.663034][T18419] RSP: 002b:00007fc8d7af6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1274.663055][T18419] RAX: ffffffffffffffda RBX: 00007fc8d6e15fa0 RCX: 00007fc8d6b9c799 [ 1274.663070][T18419] RDX: 0000000000000000 RSI: 0000000000000083 RDI: 0000000000000003 [ 1274.663083][T18419] RBP: 00007fc8d7af6090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.663096][T18419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.663109][T18419] R13: 00007fc8d6e16038 R14: 00007fc8d6e15fa0 R15: 00007ffd4ce26258 [ 1274.663138][T18419] [ 1275.812354][T18438] futex_wake_op: syz.1.3030 tries to shift op by -2048; fix this program [ 1275.869468][T18438] futex_wake_op: syz.1.3030 tries to shift op by -2048; fix this program [ 1275.913889][T18438] 0x000000000001-0x000000020000 : "" [ 1275.943569][T18438] ftl_cs: FTL header corrupt! [ 1277.429946][ T30] audit: type=1800 audit(65849.290:11): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3036" name="version" dev="configfs" ino=332539 res=0 errno=0 [ 1277.789777][T18471] FAULT_INJECTION: forcing a failure. [ 1277.789777][T18471] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.976231][T18471] CPU: 0 UID: 0 PID: 18471 Comm: syz.4.3038 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1277.976268][T18471] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1277.976276][T18471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1277.976289][T18471] Call Trace: [ 1277.976296][T18471] [ 1277.976304][T18471] dump_stack_lvl+0x100/0x190 [ 1277.976342][T18471] should_fail_ex.cold+0x5/0xa [ 1277.976373][T18471] should_failslab+0xc2/0x120 [ 1277.976397][T18471] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1277.976427][T18471] ? sctp_add_bind_addr+0xae/0x3e0 [ 1277.976511][T18471] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1277.976549][T18471] sctp_add_bind_addr+0xae/0x3e0 [ 1277.976581][T18471] sctp_do_bind+0x36c/0x760 [ 1277.976608][T18471] sctp_inet_listen+0x69b/0x7f0 [ 1277.976632][T18471] ? __pfx_sctp_inet_listen+0x10/0x10 [ 1277.976659][T18471] ? apparmor_socket_listen+0xf2/0x1a0 [ 1277.976698][T18471] __sys_listen_socket+0x108/0x150 [ 1277.976727][T18471] __sys_listen+0xa7/0x130 [ 1277.976755][T18471] __x64_sys_listen+0x53/0x80 [ 1277.976782][T18471] do_syscall_64+0x106/0xf80 [ 1277.976815][T18471] ? clear_bhb_loop+0x40/0x90 [ 1277.976842][T18471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.976863][T18471] RIP: 0033:0x7f4151b9c799 [ 1277.976880][T18471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.976900][T18471] RSP: 002b:00007f4152b23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1277.976922][T18471] RAX: ffffffffffffffda RBX: 00007f4151e15fa0 RCX: 00007f4151b9c799 [ 1277.976936][T18471] RDX: 0000000000000000 RSI: 0000000000000083 RDI: 0000000000000003 [ 1277.976967][T18471] RBP: 00007f4152b23090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.976981][T18471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.976994][T18471] R13: 00007f4151e16038 R14: 00007f4151e15fa0 R15: 00007fffd0a69928 [ 1277.977025][T18471] [ 1278.979071][T18484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1279.032768][T18484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.098719][T18484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.283131][T18484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.314833][T18484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.905836][T18506] FAULT_INJECTION: forcing a failure. [ 1281.905836][T18506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.993255][T18506] CPU: 0 UID: 0 PID: 18506 Comm: syz.1.3047 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1281.993294][T18506] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1281.993303][T18506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1281.993316][T18506] Call Trace: [ 1281.993324][T18506] [ 1281.993332][T18506] dump_stack_lvl+0x100/0x190 [ 1281.993372][T18506] should_fail_ex.cold+0x5/0xa [ 1281.993399][T18506] _copy_from_user+0x2e/0xd0 [ 1281.993429][T18506] fb_set_user_cmap+0x23f/0x4d0 [ 1281.993552][T18506] ? __pfx_fb_set_user_cmap+0x10/0x10 [ 1281.993579][T18506] ? __might_fault+0xc5/0x140 [ 1281.993612][T18506] ? __might_fault+0xc5/0x140 [ 1281.993656][T18506] do_fb_ioctl+0x2c0/0x7e0 [ 1281.993688][T18506] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1281.993732][T18506] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1281.993789][T18506] ? __fget_files+0x21f/0x3d0 [ 1281.993814][T18506] fb_ioctl+0xe5/0x150 [ 1281.993841][T18506] ? __pfx_fb_ioctl+0x10/0x10 [ 1281.993870][T18506] __x64_sys_ioctl+0x18e/0x210 [ 1281.993905][T18506] do_syscall_64+0x106/0xf80 [ 1281.993938][T18506] ? clear_bhb_loop+0x40/0x90 [ 1281.993969][T18506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.993991][T18506] RIP: 0033:0x7f7d4b79c799 [ 1281.994008][T18506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.994029][T18506] RSP: 002b:00007f7d4c624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.994048][T18506] RAX: ffffffffffffffda RBX: 00007f7d4ba15fa0 RCX: 00007f7d4b79c799 [ 1281.994062][T18506] RDX: 0000000000000000 RSI: 0000000000004605 RDI: 0000000000000004 [ 1281.994075][T18506] RBP: 00007f7d4c624090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.994087][T18506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.994099][T18506] R13: 00007f7d4ba16038 R14: 00007f7d4ba15fa0 R15: 00007ffd25fda088 [ 1281.994126][T18506] [ 1284.662750][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3056'. [ 1284.752604][T18544] FAULT_INJECTION: forcing a failure. [ 1284.752604][T18544] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.790007][T18543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.823369][T18543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.891281][T18544] CPU: 0 UID: 0 PID: 18544 Comm: syz.3.3054 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1284.891323][T18544] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1284.891333][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1284.891351][T18544] Call Trace: [ 1284.891360][T18544] [ 1284.891368][T18544] dump_stack_lvl+0x100/0x190 [ 1284.891412][T18544] should_fail_ex.cold+0x5/0xa [ 1284.891442][T18544] should_failslab+0xc2/0x120 [ 1284.891470][T18544] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1284.891510][T18544] ? security_inode_alloc+0x3b/0x2c0 [ 1284.891537][T18544] ? lockdep_init_map_type+0x5c/0x250 [ 1284.891576][T18544] security_inode_alloc+0x3b/0x2c0 [ 1284.891604][T18544] inode_init_always_gfp+0xced/0x1040 [ 1284.891635][T18544] alloc_inode+0x8e/0x250 [ 1284.891670][T18544] path_from_stashed+0x25b/0x750 [ 1284.891698][T18544] ? do_raw_spin_unlock+0x145/0x1e0 [ 1284.891747][T18544] ns_get_path+0x60/0x80 [ 1284.891774][T18544] proc_ns_get_link+0x121/0x230 [ 1284.891811][T18544] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1284.891851][T18544] ? atime_needs_update+0x8b/0x6b0 [ 1284.891890][T18544] pick_link+0xd17/0x13c0 [ 1284.891927][T18544] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1284.891967][T18544] step_into_slowpath+0x9ba/0xf90 [ 1284.892012][T18544] ? __pfx_step_into_slowpath+0x10/0x10 [ 1284.892051][T18544] ? find_held_lock+0x2b/0x80 [ 1284.892085][T18544] path_openat+0xf95/0x31a0 [ 1284.892121][T18544] ? __pfx_path_openat+0x10/0x10 [ 1284.892158][T18544] do_file_open+0x20e/0x430 [ 1284.892187][T18544] ? __pfx_do_file_open+0x10/0x10 [ 1284.892235][T18544] ? alloc_fd+0x476/0x790 [ 1284.892262][T18544] ? do_getname+0x191/0x390 [ 1284.892298][T18544] do_sys_openat2+0x10d/0x1e0 [ 1284.892332][T18544] ? __pfx_do_sys_openat2+0x10/0x10 [ 1284.892369][T18544] ? __fget_files+0x21f/0x3d0 [ 1284.892399][T18544] __x64_sys_openat+0x12d/0x210 [ 1284.892435][T18544] ? __pfx___x64_sys_openat+0x10/0x10 [ 1284.892481][T18544] do_syscall_64+0x106/0xf80 [ 1284.892520][T18544] ? clear_bhb_loop+0x40/0x90 [ 1284.892550][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.892575][T18544] RIP: 0033:0x7efc50f5cfce [ 1284.892596][T18544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1284.892620][T18544] RSP: 002b:00007efc51d9bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1284.892643][T18544] RAX: ffffffffffffffda RBX: 00007efc51d9c6c0 RCX: 00007efc50f5cfce [ 1284.892660][T18544] RDX: 0000000000000002 RSI: 00007efc51d9bf90 RDI: ffffffffffffff9c [ 1284.892676][T18544] RBP: 00007efc51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1284.892692][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.892707][T18544] R13: 00007efc51216128 R14: 00007efc51216090 R15: 00007ffd6f145e68 [ 1284.892739][T18544] [ 1285.687246][T18543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.723351][T18543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.680676][T18550] bond0: invalid ARP target specified [ 1287.534923][T18576] FAULT_INJECTION: forcing a failure. [ 1287.534923][T18576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.613975][T18576] CPU: 0 UID: 0 PID: 18576 Comm: syz.4.3062 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1287.614014][T18576] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1287.614023][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1287.614036][T18576] Call Trace: [ 1287.614044][T18576] [ 1287.614052][T18576] dump_stack_lvl+0x100/0x190 [ 1287.614093][T18576] should_fail_ex.cold+0x5/0xa [ 1287.614121][T18576] _copy_from_user+0x2e/0xd0 [ 1287.614151][T18576] fb_set_user_cmap+0x29f/0x4d0 [ 1287.614181][T18576] ? __pfx_fb_set_user_cmap+0x10/0x10 [ 1287.614207][T18576] ? __might_fault+0xc5/0x140 [ 1287.614241][T18576] ? __might_fault+0xc5/0x140 [ 1287.614284][T18576] do_fb_ioctl+0x2c0/0x7e0 [ 1287.614317][T18576] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1287.614360][T18576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1287.614408][T18576] ? __fget_files+0x21f/0x3d0 [ 1287.614435][T18576] fb_ioctl+0xe5/0x150 [ 1287.614464][T18576] ? __pfx_fb_ioctl+0x10/0x10 [ 1287.614513][T18576] __x64_sys_ioctl+0x18e/0x210 [ 1287.614551][T18576] do_syscall_64+0x106/0xf80 [ 1287.614586][T18576] ? clear_bhb_loop+0x40/0x90 [ 1287.614614][T18576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.614637][T18576] RIP: 0033:0x7f4151b9c799 [ 1287.614655][T18576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.614677][T18576] RSP: 002b:00007f4152b23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.614698][T18576] RAX: ffffffffffffffda RBX: 00007f4151e15fa0 RCX: 00007f4151b9c799 [ 1287.614713][T18576] RDX: 0000000000000000 RSI: 0000000000004605 RDI: 0000000000000004 [ 1287.614726][T18576] RBP: 00007f4152b23090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.614740][T18576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.614753][T18576] R13: 00007f4151e16038 R14: 00007f4151e15fa0 R15: 00007fffd0a69928 [ 1287.614782][T18576] [ 1288.812396][T18591] FAULT_INJECTION: forcing a failure. [ 1288.812396][T18591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.890577][T18591] CPU: 0 UID: 0 PID: 18591 Comm: syz.3.3068 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1288.890618][T18591] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1288.890627][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1288.890642][T18591] Call Trace: [ 1288.890649][T18591] [ 1288.890658][T18591] dump_stack_lvl+0x100/0x190 [ 1288.890701][T18591] should_fail_ex.cold+0x5/0xa [ 1288.890729][T18591] _copy_from_user+0x2e/0xd0 [ 1288.890759][T18591] __sys_bpf+0x243/0x4b90 [ 1288.890792][T18591] ? __pfx___sys_bpf+0x10/0x10 [ 1288.890817][T18591] ? proc_fail_nth_write+0x9f/0x220 [ 1288.890848][T18591] ? find_held_lock+0x2b/0x80 [ 1288.890877][T18591] ? find_held_lock+0x2b/0x80 [ 1288.890899][T18591] ? ksys_write+0x190/0x250 [ 1288.890928][T18591] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1288.890968][T18591] ? __fget_files+0x215/0x3d0 [ 1288.891005][T18591] ? fput+0x79/0x100 [ 1288.891033][T18591] ? ksys_write+0x1ac/0x250 [ 1288.891054][T18591] ? __pfx_ksys_write+0x10/0x10 [ 1288.891082][T18591] __x64_sys_bpf+0x7b/0xc0 [ 1288.891109][T18591] ? lockdep_hardirqs_on+0x78/0x100 [ 1288.891144][T18591] do_syscall_64+0x106/0xf80 [ 1288.891179][T18591] ? clear_bhb_loop+0x40/0x90 [ 1288.891207][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.891232][T18591] RIP: 0033:0x7efc50f9c799 [ 1288.891250][T18591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.891277][T18591] RSP: 002b:00007efc51dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1288.891299][T18591] RAX: ffffffffffffffda RBX: 00007efc51215fa0 RCX: 00007efc50f9c799 [ 1288.891315][T18591] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1288.891329][T18591] RBP: 00007efc51dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.891344][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.891361][T18591] R13: 00007efc51216038 R14: 00007efc51215fa0 R15: 00007ffd6f145e68 [ 1288.891391][T18591] [ 1289.626340][T18599] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1291.459321][T18622] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3076'. [ 1291.751150][T18626] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 1291.891541][T18626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3077'. [ 1292.053944][T18626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3077'. [ 1292.538309][T18623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.422157][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.428564][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.787896][T18740] ubi3: attaching mtd1 [ 1301.787943][T18740] ubi3 error: ubi_attach_mtd_dev: bad VID header (32185) or data offsets (32249) [ 1303.810740][T18768] bond0: invalid ARP target specified [ 1307.277657][T18824] bond0: invalid ARP target specified [ 1309.773987][T18852] FAULT_INJECTION: forcing a failure. [ 1309.773987][T18852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.841617][T18852] CPU: 0 UID: 0 PID: 18852 Comm: syz.1.3127 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1309.841658][T18852] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1309.841668][T18852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1309.841682][T18852] Call Trace: [ 1309.841689][T18852] [ 1309.841698][T18852] dump_stack_lvl+0x100/0x190 [ 1309.841741][T18852] should_fail_ex.cold+0x5/0xa [ 1309.841772][T18852] _copy_to_user+0x32/0xd0 [ 1309.841804][T18852] simple_read_from_buffer+0xcb/0x170 [ 1309.841847][T18852] proc_fail_nth_read+0x1af/0x230 [ 1309.841879][T18852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1309.841911][T18852] ? rw_verify_area+0xce/0x6d0 [ 1309.841946][T18852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1309.841976][T18852] vfs_read+0x1e4/0xb30 [ 1309.842001][T18852] ? __pfx_vfs_read+0x10/0x10 [ 1309.842022][T18852] ? __fget_files+0x215/0x3d0 [ 1309.842052][T18852] ? __fget_files+0x21f/0x3d0 [ 1309.842082][T18852] ksys_read+0x12a/0x250 [ 1309.842104][T18852] ? __pfx_ksys_read+0x10/0x10 [ 1309.842141][T18852] do_syscall_64+0x106/0xf80 [ 1309.842179][T18852] ? clear_bhb_loop+0x40/0x90 [ 1309.842208][T18852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.842232][T18852] RIP: 0033:0x7f7d4b75cfce [ 1309.842251][T18852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1309.842273][T18852] RSP: 002b:00007f7d4c602fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1309.842295][T18852] RAX: ffffffffffffffda RBX: 00007f7d4c6036c0 RCX: 00007f7d4b75cfce [ 1309.842311][T18852] RDX: 000000000000000f RSI: 00007f7d4c6030a0 RDI: 0000000000000008 [ 1309.842325][T18852] RBP: 00007f7d4c603090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.842339][T18852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.842353][T18852] R13: 00007f7d4ba16128 R14: 00007f7d4ba16090 R15: 00007ffd25fda088 [ 1309.842384][T18852] [ 1310.600112][T18858] FAULT_INJECTION: forcing a failure. [ 1310.600112][T18858] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.684486][T18858] CPU: 0 UID: 0 PID: 18858 Comm: syz.1.3130 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1310.684526][T18858] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1310.684535][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1310.684548][T18858] Call Trace: [ 1310.684555][T18858] [ 1310.684563][T18858] dump_stack_lvl+0x100/0x190 [ 1310.684603][T18858] should_fail_ex.cold+0x5/0xa [ 1310.684630][T18858] ? fib_default_rule_add+0x4f/0x420 [ 1310.684758][T18858] should_failslab+0xc2/0x120 [ 1310.684784][T18858] __kmalloc_noprof+0xe0/0x850 [ 1310.684827][T18858] fib_default_rule_add+0x4f/0x420 [ 1310.684866][T18858] fib4_rules_init+0x52/0x1c0 [ 1310.684938][T18858] fib_net_init+0x1dc/0x3f0 [ 1310.685004][T18858] ? is_module_address+0x69/0xf0 [ 1310.685062][T18858] ? __pfx_fib_net_init+0x10/0x10 [ 1310.685100][T18858] ? timer_init_key+0x150/0x340 [ 1310.685132][T18858] ? devinet_init_net+0x56c/0x8d0 [ 1310.685160][T18858] ? __pfx_fib_net_init+0x10/0x10 [ 1310.685198][T18858] ops_init+0x1e2/0x5f0 [ 1310.685240][T18858] setup_net+0x118/0x3a0 [ 1310.685279][T18858] ? __pfx_setup_net+0x10/0x10 [ 1310.685316][T18858] ? lockdep_init_map_type+0x5c/0x250 [ 1310.685351][T18858] ? mutex_init_lockep+0x110/0x150 [ 1310.685390][T18858] copy_net_ns+0x46f/0x7c0 [ 1310.685417][T18858] create_new_namespaces+0x3ea/0xac0 [ 1310.685453][T18858] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1310.685483][T18858] ksys_unshare+0x473/0xad0 [ 1310.685518][T18858] ? native_tss_update_io_bitmap+0x3d6/0x740 [ 1310.685559][T18858] ? __pfx_ksys_unshare+0x10/0x10 [ 1310.685602][T18858] __x64_sys_unshare+0x31/0x40 [ 1310.685633][T18858] do_syscall_64+0x106/0xf80 [ 1310.685670][T18858] ? clear_bhb_loop+0x40/0x90 [ 1310.685700][T18858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.685725][T18858] RIP: 0033:0x7f7d4b79c799 [ 1310.685745][T18858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.685769][T18858] RSP: 002b:00007f7d4c603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1310.685792][T18858] RAX: ffffffffffffffda RBX: 00007f7d4ba16090 RCX: 00007f7d4b79c799 [ 1310.685807][T18858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1310.685822][T18858] RBP: 00007f7d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1310.685836][T18858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1310.685851][T18858] R13: 00007f7d4ba16128 R14: 00007f7d4ba16090 R15: 00007ffd25fda088 [ 1310.685881][T18858] [ 1312.298127][T18865] ubi3: attaching mtd1 [ 1312.322020][T18865] ubi3 error: ubi_attach_mtd_dev: bad VID header (32185) or data offsets (32249) [ 1312.873925][T18868] futex_wake_op: syz.3.3133 tries to shift op by -2048; fix this program [ 1312.899980][T18868] futex_wake_op: syz.3.3133 tries to shift op by -2048; fix this program [ 1312.940418][T18869] 0x000000000001-0x000000020000 : "" [ 1312.968144][T18869] ftl_cs: FTL header corrupt! [ 1324.233489][T19039] can0: slcan on pty238. [ 1324.369833][T19035] can0 (unregistered): slcan off pty238. [ 1331.537744][T19157] FAULT_INJECTION: forcing a failure. [ 1331.537744][T19157] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.646521][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.1.3193 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1331.646558][T19157] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1331.646566][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1331.646579][T19157] Call Trace: [ 1331.646585][T19157] [ 1331.646593][T19157] dump_stack_lvl+0x100/0x190 [ 1331.646631][T19157] should_fail_ex.cold+0x5/0xa [ 1331.646657][T19157] should_failslab+0xc2/0x120 [ 1331.646681][T19157] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1331.646714][T19157] ? alloc_empty_file+0x55/0x1c0 [ 1331.646741][T19157] ? stack_trace_save+0x8e/0xc0 [ 1331.646767][T19157] alloc_empty_file+0x55/0x1c0 [ 1331.646795][T19157] path_openat+0xe8/0x31a0 [ 1331.646818][T19157] ? kasan_save_stack+0x3f/0x50 [ 1331.646861][T19157] ? kasan_save_stack+0x30/0x50 [ 1331.646913][T19157] ? kasan_save_track+0x14/0x30 [ 1331.646932][T19157] ? __kasan_slab_alloc+0x89/0x90 [ 1331.646953][T19157] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1331.647005][T19157] ? do_getname+0x35/0x390 [ 1331.647036][T19157] ? do_syscall_64+0x106/0xf80 [ 1331.647072][T19157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.647100][T19157] ? __pfx_path_openat+0x10/0x10 [ 1331.647135][T19157] do_file_open+0x20e/0x430 [ 1331.647162][T19157] ? __pfx_do_file_open+0x10/0x10 [ 1331.647208][T19157] ? _raw_spin_unlock+0x28/0x50 [ 1331.647239][T19157] ? alloc_fd+0x476/0x790 [ 1331.647271][T19157] do_sys_openat2+0x10d/0x1e0 [ 1331.647304][T19157] ? __pfx_do_sys_openat2+0x10/0x10 [ 1331.647339][T19157] ? __fget_files+0x21f/0x3d0 [ 1331.647367][T19157] __x64_sys_open+0xfe/0x1d0 [ 1331.647398][T19157] ? __pfx___x64_sys_open+0x10/0x10 [ 1331.647429][T19157] ? ksys_write+0x1ac/0x250 [ 1331.647462][T19157] do_syscall_64+0x106/0xf80 [ 1331.647496][T19157] ? clear_bhb_loop+0x40/0x90 [ 1331.647525][T19157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.647549][T19157] RIP: 0033:0x7f7d4b79c799 [ 1331.647567][T19157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.647589][T19157] RSP: 002b:00007f7d4c603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1331.647611][T19157] RAX: ffffffffffffffda RBX: 00007f7d4ba16090 RCX: 00007f7d4b79c799 [ 1331.647626][T19157] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000200000000800 [ 1331.647641][T19157] RBP: 00007f7d4c603090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.647655][T19157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.647668][T19157] R13: 00007f7d4ba16128 R14: 00007f7d4ba16090 R15: 00007ffd25fda088 [ 1331.647698][T19157] [ 1334.476040][T19192] futex_wake_op: syz.3.3203 tries to shift op by -2048; fix this program [ 1334.882386][T19196] bond0: invalid ARP target specified [ 1335.146295][T19198] random: crng reseeded on system resumption [ 1336.185080][T19211] FAULT_INJECTION: forcing a failure. [ 1336.185080][T19211] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.198124][T19211] CPU: 0 UID: 0 PID: 19211 Comm: syz.1.3207 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1336.198178][T19211] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1336.198188][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1336.198215][T19211] Call Trace: [ 1336.198224][T19211] [ 1336.198233][T19211] dump_stack_lvl+0x100/0x190 [ 1336.198273][T19211] should_fail_ex.cold+0x5/0xa [ 1336.198301][T19211] should_failslab+0xc2/0x120 [ 1336.198327][T19211] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1336.198369][T19211] ? __send_signal_locked+0x155/0x12d0 [ 1336.198431][T19211] __send_signal_locked+0x155/0x12d0 [ 1336.198496][T19211] group_send_sig_info+0x2a4/0x300 [ 1336.198525][T19211] ? __pfx_group_send_sig_info+0x10/0x10 [ 1336.198560][T19211] ? kill_pid_info_type+0x1a/0x290 [ 1336.198585][T19211] kill_pid_info_type+0x92/0x290 [ 1336.198614][T19211] kill_proc_info+0x6f/0x1b0 [ 1336.198642][T19211] kill_something_info+0x2a0/0x310 [ 1336.198673][T19211] __x64_sys_kill+0x1c4/0x250 [ 1336.198702][T19211] ? __pfx___x64_sys_kill+0x10/0x10 [ 1336.198744][T19211] do_syscall_64+0x106/0xf80 [ 1336.198779][T19211] ? clear_bhb_loop+0x40/0x90 [ 1336.198806][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.198829][T19211] RIP: 0033:0x7f7d4b79c799 [ 1336.198848][T19211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.198869][T19211] RSP: 002b:00007f7d4c603028 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 1336.198890][T19211] RAX: ffffffffffffffda RBX: 00007f7d4ba16090 RCX: 00007f7d4b79c799 [ 1336.198905][T19211] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 00000000000003dc [ 1336.198919][T19211] RBP: 00007f7d4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1336.198933][T19211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.198946][T19211] R13: 00007f7d4ba16128 R14: 00007f7d4ba16090 R15: 00007ffd25fda088 [ 1336.198975][T19211] [ 1337.773321][T19236] futex_wake_op: syz.3.3212 tries to shift op by -2048; fix this program [ 1337.815516][T19236] futex_wake_op: syz.3.3212 tries to shift op by -2048; fix this program [ 1337.873230][T19236] 0x000000000001-0x000000020000 : "" [ 1337.912500][T19236] ftl_cs: FTL header corrupt! [ 1339.835720][T19231] Process accounting resumed [ 1341.308981][T19271] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1341.331146][T19271] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1341.362535][T19271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1341.413594][T19271] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1341.472188][T19271] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1341.500525][T19288] block2mtd: illegal erase size [ 1342.811604][ T5883] Bluetooth: hci4: command 0x0c1a tx timeout [ 1343.371456][ T5883] Bluetooth: hci1: command 0x0c1a tx timeout [ 1343.377513][T16332] Bluetooth: hci2: command 0x0c1a tx timeout [ 1343.452317][ T5883] Bluetooth: hci0: command 0x040f tx timeout [ 1343.458665][T16332] Bluetooth: hci3: command 0x0c1a tx timeout [ 1343.632727][T19321] bond0: invalid ARP target specified [ 1343.689887][T19312] bond0: invalid ARP target specified [ 1345.641312][T19345] binder: 19344:19345 ioctl 541a 8 returned -22 [ 1346.051311][T19350] ubi3: attaching mtd1 [ 1346.057536][T19350] ubi3 error: ubi_attach_mtd_dev: bad VID header (32185) or data offsets (32249) [ 1351.259877][T19431] bond0: invalid ARP target specified [ 1353.905386][ T30] audit: type=1804 audit(65925.770:12): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3265" name="/newroot/84/file0" dev="tmpfs" ino=453 res=1 errno=0 [ 1354.265229][T19482] bond0: invalid ARP target specified [ 1355.175973][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 1355.693262][T19506] bond0: invalid ARP target specified [ 1356.387293][T19512] bond0: invalid ARP target specified [ 1359.870690][T19555] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 1360.070700][T19556] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 1361.866069][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.874326][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.234258][T19595] bond0: invalid ARP target specified [ 1364.269705][T19612] bond0: invalid ARP target specified [ 1364.318552][T19614] bond0: invalid ARP target specified [ 1366.117296][T19639] futex_wake_op: syz.3.3305 tries to shift op by -2048; fix this program [ 1366.194470][T19639] futex_wake_op: syz.3.3305 tries to shift op by -2048; fix this program [ 1369.391084][T19708] binder: binder_mmap: 19703 0-811000 bad vm_flags failed -1 [ 1370.540820][T19708] Process accounting paused [ 1372.097623][ T31] INFO: task syz.2.2843:17585 blocked for more than 143 seconds. [ 1372.106542][ T31] Tainted: G U L syzkaller #0 [ 1372.129193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1372.221630][ T31] task:syz.2.2843 state:D stack:28424 pid:17585 tgid:17580 ppid:15496 task_flags:0x400640 flags:0x00080002 [ 1372.304626][ T31] Call Trace: [ 1372.307977][ T31] [ 1372.356035][ T31] __schedule+0xfee/0x6120 [ 1372.360512][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1372.431437][ T31] ? __pfx___schedule+0x10/0x10 [ 1372.462742][ T31] ? find_held_lock+0x2b/0x80 [ 1372.511419][ T31] ? schedule+0x2bf/0x390 [ 1372.536034][ T31] schedule+0xdd/0x390 [ 1372.540155][ T31] schedule_timeout+0x1b2/0x280 [ 1372.610216][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1372.641385][ T31] ? __wait_for_common+0x2da/0x4c0 [ 1372.646560][ T31] ? rcu_is_watching+0x12/0xc0 [ 1372.722100][ T31] __wait_for_common+0x2e7/0x4c0 [ 1372.747396][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1372.769382][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1372.821418][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 1372.826674][ T31] ? vfs_coredump+0x7e0/0x5570 [ 1372.941559][ T31] ? rcu_is_watching+0x12/0xc0 [ 1372.946450][ T31] wait_for_completion_state+0x1c/0x40 [ 1373.031389][ T31] vfs_coredump+0x80d/0x5570 [ 1373.036043][ T31] ? find_held_lock+0x2b/0x80 [ 1373.040759][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 1373.141412][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1373.146451][ T31] ? lock_acquire+0x1cf/0x380 [ 1373.151164][ T31] ? lock_acquire+0x1cf/0x380 [ 1373.218953][ T31] ? find_held_lock+0x2b/0x80 [ 1373.242779][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 1373.248046][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 1373.271510][ T31] ? bpf_ksym_find+0x124/0x1c0 [ 1373.276347][ T31] ? __kernel_text_address+0xd/0x30 [ 1373.311389][ T31] ? unwind_get_return_address+0x59/0xa0 [ 1373.341410][ T31] ? arch_stack_walk+0xa6/0xf0 [ 1373.346333][ T31] ? __sigqueue_free+0xbe/0x2a0 [ 1373.351235][ T31] ? stack_trace_save+0x8e/0xc0 [ 1373.381558][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1373.386994][ T31] ? stack_depot_save_flags+0x27/0x9d0 [ 1373.413744][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1373.441503][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.447802][ T31] ? proc_coredump_connector+0x2d3/0x4f0 [ 1373.481401][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1373.487456][ T31] ? rcu_is_watching+0x12/0xc0 [ 1373.534239][ T31] get_signal+0x1f2a/0x21e0 [ 1373.538810][ T31] ? __pfx_get_signal+0x10/0x10 [ 1373.561582][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1373.567440][ T31] ? force_sig_info_to_task+0x4d2/0x660 [ 1373.591380][ T31] arch_do_signal_or_restart+0x91/0x770 [ 1373.596979][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1373.631428][ T31] ? arch_syscall_is_vdso_sigreturn+0x4e/0x200 [ 1373.637719][ T31] exit_to_user_mode_loop+0x86/0x4a0 [ 1373.671424][ T31] do_syscall_64+0x668/0xf80 [ 1373.676079][ T31] ? clear_bhb_loop+0x40/0x90 [ 1373.680788][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.711427][ T31] RIP: 0033:0x7f205279c799 [ 1373.715882][ T31] RSP: 002b:00007f20509f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1373.741374][ T31] RAX: ffffffffffffffda RBX: 00007f2052a16098 RCX: 00007f205279c799 [ 1373.749405][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2052a1609c [ 1373.772387][ T31] RBP: 00007f2052a16090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.780382][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.811433][ T31] R13: 00007f2052a16128 R14: 00007fff7f3e2a60 R15: 00007fff7f3e2b48 [ 1373.819453][ T31] [ 1373.916875][ T31] [ 1373.916875][ T31] Showing all locks held in the system: [ 1373.973422][ T31] 1 lock held by khungtaskd/31: [ 1373.978410][ T31] #0: ffffffff8e7e7720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1374.081548][ T31] 2 locks held by getty/11468: [ 1374.086354][ T31] #0: ffff88803567e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1374.151406][ T31] #1: ffffc90002fc42f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1374.197595][ T31] 2 locks held by syz-executor/15773: [ 1374.231521][ T31] #0: ffffffff906152a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1374.271561][ T31] #1: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1374.331682][ T31] 3 locks held by kworker/u8:28/16475: [ 1374.339087][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1374.391388][ T31] #1: ffffc90004c17d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1374.442539][ T31] #2: ffffffff905fca50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1374.481397][ T31] 1 lock held by syz.3.2712/17016: [ 1374.486548][ T31] 1 lock held by syz.2.2843/17582: [ 1374.521605][ T31] 1 lock held by syz.1.3327/19734: [ 1374.526753][ T31] #0: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1374.601411][ T31] [ 1374.603776][ T31] ============================================= [ 1374.603776][ T31] [ 1374.691005][ T31] NMI backtrace for cpu 0 [ 1374.691025][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1374.691059][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1374.691067][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1374.691080][ T31] Call Trace: [ 1374.691087][ T31] [ 1374.691095][ T31] dump_stack_lvl+0x100/0x190 [ 1374.691135][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1374.691173][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1374.691209][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1374.691242][ T31] sys_info+0x141/0x190 [ 1374.691265][ T31] watchdog+0xd25/0x1050 [ 1374.691295][ T31] ? __pfx_watchdog+0x10/0x10 [ 1374.691319][ T31] ? __kthread_parkme+0x18c/0x230 [ 1374.691353][ T31] ? kthread+0x13a/0x450 [ 1374.691382][ T31] ? __pfx_watchdog+0x10/0x10 [ 1374.691403][ T31] kthread+0x370/0x450 [ 1374.691440][ T31] ? __pfx_kthread+0x10/0x10 [ 1374.691472][ T31] ret_from_fork+0x754/0xd80 [ 1374.691508][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1374.691545][ T31] ? __switch_to+0x7b4/0x1120 [ 1374.691571][ T31] ? __pfx_kthread+0x10/0x10 [ 1374.691603][ T31] ret_from_fork_asm+0x1a/0x30 [ 1374.691642][ T31] [ 1375.374187][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1375.381086][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1375.391778][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1375.396983][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1375.407046][ T31] Call Trace: [ 1375.410335][ T31] [ 1375.413292][ T31] dump_stack_lvl+0x100/0x190 [ 1375.418000][ T31] vpanic+0x552/0x970 [ 1375.421997][ T31] ? __pfx_vpanic+0x10/0x10 [ 1375.426517][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1375.432688][ T31] panic+0xd1/0xe0 [ 1375.436418][ T31] ? __pfx_panic+0x10/0x10 [ 1375.440849][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1375.447021][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1375.453192][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1375.459370][ T31] ? watchdog.cold+0x198/0x1ca [ 1375.464152][ T31] ? watchdog+0xd35/0x1050 [ 1375.468623][ T31] watchdog.cold+0x1a9/0x1ca [ 1375.473247][ T31] ? __pfx_watchdog+0x10/0x10 [ 1375.477950][ T31] ? __kthread_parkme+0x18c/0x230 [ 1375.483010][ T31] ? kthread+0x13a/0x450 [ 1375.487271][ T31] ? __pfx_watchdog+0x10/0x10 [ 1375.491953][ T31] kthread+0x370/0x450 [ 1375.496060][ T31] ? __pfx_kthread+0x10/0x10 [ 1375.500674][ T31] ret_from_fork+0x754/0xd80 [ 1375.505292][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1375.510432][ T31] ? __switch_to+0x7b4/0x1120 [ 1375.515142][ T31] ? __pfx_kthread+0x10/0x10 [ 1375.519785][ T31] ret_from_fork_asm+0x1a/0x30 [ 1375.524595][ T31] [ 1375.527684][ T31] Kernel Offset: disabled [ 1375.532018][ T31] Rebooting in 86400 seconds..