last executing test programs: 45.395720357s ago: executing program 3 (id=1236): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) io_uring_setup$auto(0x59, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x4000000000000000, 0x9, 0x3, 0x8012, 0x3, 0x8000) 44.815384165s ago: executing program 3 (id=1237): r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PW_TYPE={0xfffffffffffffe9b, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7e}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf6c174208aed616c}, 0x4000000) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 42.723727314s ago: executing program 3 (id=1242): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) io_uring_setup$auto(0x59, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0xa923000000000000, 0x9, 0x3, 0x8012, 0x3, 0x8000) 42.009842464s ago: executing program 3 (id=1246): recvmmsg$auto(0xffffffffffffffff, 0x0, 0x803, 0x1, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x20000881) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, r1, 0xfffffffa) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x10000, 0x4000000000df, 0x20000000040eb1, 0x401, 0x300000000000) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x0, 0x8, 0x1, 0x1]}, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video67\x00', 0x81400, 0x0) readv$auto(r2, &(0x7f0000000040)={&(0x7f0000000100)}, 0x8) 40.886745193s ago: executing program 3 (id=1251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) open(0x0, 0x161342, 0x100) socket(0x26, 0x80805, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7ff, 0x2) open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) mmap$auto(0x0, 0xfb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a232", 0xffffffff}, 0x6, 0x0) r2 = epoll_create$auto(0x20009) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 40.653051125s ago: executing program 3 (id=1252): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0xfe, 0x8, 0x0, 0x6, 0x0}) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x20000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="51f7ffffffffffff00", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e6673640000000008000300850000000800010002000000"], 0x30}}, 0x4000) io_uring_register$auto(r1, 0x18, 0x0, 0x9) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) mmap$auto(0x200, 0x100000004, 0x804000000000df, 0x40eb1, r5, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET2(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004050) getsockopt$auto_SO_RCVTIMEO_NEW(r5, 0xc, 0x42, &(0x7f0000000000)='Z\xa6\f', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) 24.797850001s ago: executing program 32 (id=1252): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0xfe, 0x8, 0x0, 0x6, 0x0}) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x20000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="51f7ffffffffffff00", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e6673640000000008000300850000000800010002000000"], 0x30}}, 0x4000) io_uring_register$auto(r1, 0x18, 0x0, 0x9) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) mmap$auto(0x200, 0x100000004, 0x804000000000df, 0x40eb1, r5, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET2(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004050) getsockopt$auto_SO_RCVTIMEO_NEW(r5, 0xc, 0x42, &(0x7f0000000000)='Z\xa6\f', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) 14.010156208s ago: executing program 2 (id=1305): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) landlock_restrict_self$auto(0xffffffffffffffff, 0x56) sendmsg$auto_NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x4001) msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x0, 0xffffffffffffffff, 0xffffff98, 0x4000000f, 0x2, 0x2}, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x9, 0x4, 0xff, 0x9, @raw}) connect$auto(0xffffffffffffffff, 0x0, 0x1) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffb, 0x10000004020009, 0xdb, 0xeb2, 0xffffffffffffffff, 0x8002) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000440)={0xf, 0x3ff, "9136a9be8e677f546c9d59e672d01f"}, 0x4295) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r1, 0x50009405, 0x0) mmap$auto(0x8a, 0x100000002020007, 0x3, 0x2000000000000eb4, 0xffffffffffffffff, 0x8004) socket(0x2a, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x6f2d, 0x2000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x81, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x9, 0x50a7, 0x20000006d3f, 0xc, 0x0, 0xfffffffffffffffe]}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 10.041557054s ago: executing program 2 (id=1316): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VF\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xa2\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000180)="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") mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff003) vmsplice$auto(0x2, 0x0, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x2, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) close_range$auto(0x0, 0x5, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x3e) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 8.045915172s ago: executing program 2 (id=1324): socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x450481, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x0e\xfb\xff\x05OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7ff}, 0x4) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x400) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4112, 0x1010) r3 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/trap_flow_action_cookie\x00', 0x440, 0x0) setsockopt$auto_SO_RXQ_OVFL(r3, 0x491, 0x28, &(0x7f0000000080)='/dev/ttyS2\x00', 0x7fff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000001080), 0x147200, 0x0) r5 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/netdevsim/netdevsim7/psample/out_tc_occ_max\x00', 0x200, 0x0) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)=@link_create={@map_fd=r4, @target_fd=r5, 0x1ff, 0x8, @tracing={0x401, 0xfffffffffffffffd}}, 0x8) ioctl$auto(0xffffffffffffffff, 0x560a, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xa6, &(0x7f0000000100)={&(0x7f0000000840)={0x14, 0x0, 0x305, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040008) 6.768795483s ago: executing program 4 (id=1325): r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0xc, 0x0) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PW_TYPE={0xfffffffffffffe9b, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7e}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf6c174208aed616c}, 0x4000000) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 6.254245668s ago: executing program 0 (id=1326): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VF\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xa2\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000180)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff003) vmsplice$auto(0x2, 0x0, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x2, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x3e) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 6.219137448s ago: executing program 2 (id=1327): r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0xc, 0x0) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PW_TYPE={0xfffffffffffffe9b, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7e}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf6c174208aed616c}, 0x4000000) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 5.782020647s ago: executing program 1 (id=1328): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0500, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x5, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x7783, 0x9, 0x7c], {0x913, 0x7, 0x3036, 0xe, 0xd, 0x5, 0x6, 0xfffffff9, 0x2000000f08a2b6}, {0x4000, 0xfc, 0xd, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/self/pagemap\x00', 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) close_range$auto(0x2, 0x8000, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/loginuid\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.67023377s ago: executing program 0 (id=1329): mmap$auto(0x0, 0x400009, 0xc, 0x9b72, 0x8000000000000003, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x80000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) setsockopt$auto(r0, 0x1, 0x3c, 0x0, 0x9) read$auto(r1, 0x0, 0x39b8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/admmidi2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x1000000000009b72, 0x2, 0x800008000) setsockopt$auto_SO_ATTACH_FILTER(r1, 0x6, 0x1a, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x1) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb4, 0xffffffffffffffff, 0x8000) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x9, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) ioctl$auto_USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0xffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x84) epoll_create1$auto(0xa413) mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="6e0d496984baaf8efe21def205079b16d8e4773c9b3dbd677702e8f7eb78892978bbf3cd1f92a801d23b6a24971bd0755fd7a445333bd5f5854eaba29dad54b54e62ba9138977ff2be6b39505a76545ba4a519", @ANYRESHEX=r4, @ANYBLOB="00012abd7000ffff00001c000000080003009b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0x7f71b202e905607e, 0x0) 4.669717057s ago: executing program 4 (id=1330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r1, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000000100)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0xa}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x16, 0x2b, 0x0, 0x1, [@generic="f3a85bbe87f587398a79", @typed={0x8, 0x123, 0x0, 0x0, @u32=0x2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x850) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x40, 0x0, 0x800008a) sync_file_range$auto(0xffffffffffffffff, 0x7, 0x3d, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001240), 0x800, 0x0) ioctl$auto(r4, 0x9004b70b, 0xffffffffffffffff) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000180)=""/95, 0x5f) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, r5, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x200204, 0x15) 4.20364725s ago: executing program 4 (id=1332): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) r1 = io_uring_setup$auto(0x7c, 0x0) close_range$auto(0x2, r1, 0x0) open(0x0, 0x22240, 0x55) fanotify_init$auto(0x8, 0x1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x844640, 0x0) ioctl$auto(0x3, 0x800c6f40, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto(0x0, 0x4, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x880, 0x3, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x108000) r4 = socket(0xa, 0x801, 0x106) setsockopt$auto(r4, 0x6, 0x24, 0x0, 0x9) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) 4.099671624s ago: executing program 2 (id=1333): mmap$auto(0x0, 0x400009, 0xc, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto(r0, 0x0, 0x39b8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) getsockopt$auto_SO_WIFI_STATUS(r0, 0x40, 0x29, &(0x7f00000001c0)='/dev/snd/timer\x00', &(0x7f0000000200)=0xfffffff9) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) r3 = pidfd_open$auto(0x1, 0x0) r4 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_score_adj\x00', 0x8000, 0x0) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)=@prog_bind_map={r3, r4}, 0xc) move_mount$auto(0xffffffffffffffff, 0x0, r3, 0x0, 0x273) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r5, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 3.462374497s ago: executing program 0 (id=1334): r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0xa8602, 0x0) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0xffffffffffffffff, 0x0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) r2 = socket(0x10, 0x2, 0x0) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000001400)={{0x8000000000000001, 0xdd23}, {0xfff, 0x2000000000000}}) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) exit$auto(0x7) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) setsockopt$auto_SO_PROTOCOL(r0, 0x1ff, 0x26, &(0x7f0000000080)='/proc/thread-self/loginuid\x00', 0x6) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/SecurityFlags\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x37a, 0x3d7e, 0xe6d, 0x1, 0x10000}}, 0x92) read$auto(r4, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r6) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="fffaffff", @ANYRES16=r8, @ANYBLOB="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"], 0x10a4}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) close_range$auto(r7, 0xfffffffffffff000, 0x2) 3.109098108s ago: executing program 4 (id=1335): r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0xc, 0x0) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PW_TYPE={0xfffffffffffffe9b, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7e}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf6c174208aed616c}, 0x4000000) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 2.844761711s ago: executing program 1 (id=1336): mmap$auto(0x0, 0x5, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x40006, 0x22, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x8, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10007, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0x0, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x43, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESOCT], 0x1ac}, 0x1, 0x0, 0x0, 0x448c4}, 0x24040801) socket(0x1, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.813092797s ago: executing program 0 (id=1337): r0 = socket(0x2b, 0x800, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r2, 0x402, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x80dc, 0xeb1, 0x401, 0x8006) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="e2003600", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) socket(0x25, 0x5, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_setup$auto(0x946, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x4) 2.504303496s ago: executing program 1 (id=1338): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) utime$auto(&(0x7f0000000040)='./file0\x00', 0x0) lremovexattr$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='nl802154\x00') r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0xf8, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe1, 0x3, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b6cdd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014", @nested={0x10, 0x5, 0x0, 0x1, [@typed={0xc, 0xc5, 0x0, 0x0, @u64=0x3}]}, @generic="21aadf3f78e2cd52d7f733c38da99fe8ec1ead"]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 1.651819184s ago: executing program 4 (id=1339): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={r2, &(0x7f00000000c0)="cc6a7d2ff2757d85ec6fd7d9fc816dc4bc4826d7caf6c0a0cf", 0x5, &(0x7f00000001c0)="a9a7ccce144cfeb36b08b4648bf1cd11f9b15f5904fbb8d90c6504a48fba150f8c19c07afeaddec419e3d49ccff41cd2679b11a8188af1117cc0989a3104da3c920c22eff1e6a5954e590a5a0d525f4f29b1abba75293e6500cb4936d759b6882590e76bf9cbebea5449ef94283269939ea6705c85329e08749fbfd26a477d885e8da92dfe8fd6c726d059773dbb01f3cd06eeeb9124063b3fe9b480a353f7ea8383732d6dae78887639e734d4142409de66a6d617779e57ccf75b642871", 0x677ce87a, &(0x7f0000000300)="c0f822a4d9de7632aac0e183bc203e4de642e98ea68f7ab5734d11546e14c2348bddba11701aa892c9193a85f328c5d17c3d4a77db54dc02eb86342976563d288e7ee0e3dd5b3739c2ad8d9e6864fc1933f71fc124f6f03989ef39cb515039af0e73b7ccb66096a6f0ede774e5287a713e5cdaaae5dbd55ccb6aef1d09066cb0b029e066fd33412eb58c47c8e58808a52de45363b883", &(0x7f0000000100)=0x7}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x11c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9d}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x10000}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xeb, 0x84, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r0}, @generic="c5a7dfa3273e6a254bd79a5ce4aaef2f31714da6e533855c7ad2538c8f", @generic="54ee4b943cd0b42d3b0af21fab54ee252f212748fd38177e9678d0beba3d29162161f112e5e55ee7abd1f41641f42871cf732b2bd669b769182bd4990528196180fc0a154ec260aa94919056", @typed={0x4, 0xbd}, @generic="ad33b4a666499a191391c6e7ffc60d803cf3b8de45f2ebd6825b5c14e33b74aee148df558694d7e08505c0a3ee849237aaab0e88c4529065a9a46537e0d8ba785a3a29079fadfe2e367e8b2ff339b84d42d55cc30de6f249a5d08622f1f4", @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x2}, @nested={0x8, 0x12a, 0x0, 0x1, [@typed={0x4, 0xed}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4010}, 0x44094) close_range$auto(0x2, 0x8, 0x0) 1.503747487s ago: executing program 1 (id=1340): r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0xc, 0x0) fdatasync$auto(r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PW_TYPE={0xfffffffffffffe9b, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7e}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf6c174208aed616c}, 0x4000000) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) 1.259378201s ago: executing program 4 (id=1341): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VF\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xa2\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000180)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff003) vmsplice$auto(0x2, 0x0, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x2, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x3e) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 985.863746ms ago: executing program 1 (id=1342): r0 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x200480, 0x0) mmap$auto(0x8000000000000001, 0x400008, 0xdf, 0x9b74, r0, 0x8000) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x80002, 0x73) sendmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000000), 0x3ff, 0x0, 0x9, 0x0, 0x4, 0x24000000}, 0x5}, 0x2, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub5/sw_params\x00', 0x400000, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x200480, 0x0) (async) mmap$auto(0x8000000000000001, 0x400008, 0xdf, 0x9b74, r0, 0x8000) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) (async) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x80002, 0x73) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000000), 0x3ff, 0x0, 0x9, 0x0, 0x4, 0x24000000}, 0x5}, 0x2, 0x2) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub5/sw_params\x00', 0x400000, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) (async) 907.762652ms ago: executing program 0 (id=1343): mmap$auto(0x8000000000, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) close_range$auto(r0, 0x8, 0x80) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) mmap$auto(0x0, 0x9aad, 0xdf, 0xeb1, r1, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty42\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(r2, 0x2, 0x3a, 0x0, 0x7) ioctl$auto(0x3, 0x541b, 0x74) 819.649873ms ago: executing program 2 (id=1344): r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0xc, 0x0) fdatasync$auto(r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PW_TYPE={0xfffffffffffffe9b, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7e}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf6c174208aed616c}, 0x4000000) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) 691.985185ms ago: executing program 0 (id=1345): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0500, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x5, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x7783, 0x9, 0x7c], {0x913, 0x7, 0x3036, 0xe, 0xd, 0x5, 0x6, 0xfffffff9, 0x2000000f08a2b6}, {0x4000, 0xfc, 0xd, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/self/pagemap\x00', 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) close_range$auto(0x2, 0x8000, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/loginuid\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=1346): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x81}, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r1) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) kernel console output (not intermixed with test programs): 73.938055][T11064] CPU: 0 UID: 0 PID: 11064 Comm: syz.3.808 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 373.938087][T11064] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 373.938095][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.938104][T11064] Call Trace: [ 373.938110][T11064] [ 373.938117][T11064] dump_stack_lvl+0x16c/0x1f0 [ 373.938143][T11064] should_fail_ex+0x512/0x640 [ 373.938159][T11064] ? kmem_cache_alloc_noprof+0x62/0x770 [ 373.938179][T11064] should_failslab+0xc2/0x120 [ 373.938199][T11064] kmem_cache_alloc_noprof+0x83/0x770 [ 373.938216][T11064] ? __anon_vma_prepare+0x344/0x5e0 [ 373.938234][T11064] ? __anon_vma_prepare+0x344/0x5e0 [ 373.938247][T11064] __anon_vma_prepare+0x344/0x5e0 [ 373.938264][T11064] __vmf_anon_prepare+0x11c/0x240 [ 373.938285][T11064] do_wp_page+0x10a7/0x5010 [ 373.938309][T11064] ? __pfx_do_wp_page+0x10/0x10 [ 373.938330][T11064] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.938351][T11064] __handle_mm_fault+0x1bd2/0x2bb0 [ 373.938370][T11064] ? __pfx___handle_mm_fault+0x10/0x10 [ 373.938391][T11064] ? __pte_offset_map_lock+0x174/0x310 [ 373.938420][T11064] ? vm_normal_page+0x1c4/0x320 [ 373.938448][T11064] ? find_held_lock+0x2b/0x80 [ 373.938483][T11064] ? follow_page_pte+0x5cf/0x1390 [ 373.938527][T11064] handle_mm_fault+0x3fe/0xad0 [ 373.938558][T11064] __get_user_pages+0x54e/0x3590 [ 373.938596][T11064] ? __pfx___get_user_pages+0x10/0x10 [ 373.938622][T11064] populate_vma_page_range+0x267/0x3f0 [ 373.938646][T11064] ? __pfx_populate_vma_page_range+0x10/0x10 [ 373.938666][T11064] ? __pfx_find_vma_intersection+0x10/0x10 [ 373.938686][T11064] ? do_mmap+0x69c/0x1210 [ 373.938707][T11064] __mm_populate+0x1d8/0x380 [ 373.938727][T11064] ? __pfx___mm_populate+0x10/0x10 [ 373.938748][T11064] ? up_write+0x282/0x4e0 [ 373.938764][T11064] vm_mmap_pgoff+0x37f/0x470 [ 373.938785][T11064] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 373.938806][T11064] ? __fget_files+0x20e/0x3c0 [ 373.938828][T11064] ksys_mmap_pgoff+0x32c/0x5c0 [ 373.938850][T11064] ? __pfx_ksys_write+0x10/0x10 [ 373.938871][T11064] __x64_sys_mmap+0x125/0x190 [ 373.938887][T11064] do_syscall_64+0xcd/0xf80 [ 373.938902][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.938916][T11064] RIP: 0033:0x7fabb1d8f7c9 [ 373.938927][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.938941][T11064] RSP: 002b:00007fabb2c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 373.938954][T11064] RAX: ffffffffffffffda RBX: 00007fabb1fe5fa0 RCX: 00007fabb1d8f7c9 [ 373.938963][T11064] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 373.938971][T11064] RBP: 00007fabb1e13f91 R08: 0000000000000003 R09: 0000000000008000 [ 373.938980][T11064] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 373.938988][T11064] R13: 00007fabb1fe6038 R14: 00007fabb1fe5fa0 R15: 00007ffeee2aef68 [ 373.939007][T11064] [ 374.706889][T11070] FAULT_INJECTION: forcing a failure. [ 374.706889][T11070] name failslab, interval 1, probability 0, space 0, times 0 [ 374.723249][T11070] CPU: 1 UID: 0 PID: 11070 Comm: syz.3.810 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 374.723299][T11070] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 374.723311][T11070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.723324][T11070] Call Trace: [ 374.723332][T11070] [ 374.723341][T11070] dump_stack_lvl+0x16c/0x1f0 [ 374.723381][T11070] should_fail_ex+0x512/0x640 [ 374.723413][T11070] should_failslab+0xc2/0x120 [ 374.723448][T11070] kmem_cache_alloc_node_noprof+0x86/0x800 [ 374.723482][T11070] ? __alloc_skb+0x156/0x410 [ 374.723517][T11070] ? __alloc_skb+0x156/0x410 [ 374.723541][T11070] __alloc_skb+0x156/0x410 [ 374.723565][T11070] ? __alloc_skb+0x35d/0x410 [ 374.723591][T11070] ? __pfx___alloc_skb+0x10/0x10 [ 374.723616][T11070] ? mark_held_locks+0x49/0x80 [ 374.723637][T11070] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.723670][T11070] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.723692][T11070] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 374.723730][T11070] sctp_ulpevent_make_assoc_change+0x75a/0x9c0 [ 374.723762][T11070] sctp_do_sm+0x1f7e/0x5e00 [ 374.723805][T11070] ? __pfx_sctp_do_sm+0x10/0x10 [ 374.723834][T11070] ? sctp_ulpevent_notify_peer_addr_change+0xf1/0xc00 [ 374.723897][T11070] ? ktime_get+0x200/0x310 [ 374.723918][T11070] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.723945][T11070] sctp_assoc_bh_rcv+0x392/0x6f0 [ 374.723982][T11070] sctp_inq_push+0x1db/0x270 [ 374.724010][T11070] sctp_backlog_rcv+0x169/0x590 [ 374.724045][T11070] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 374.724079][T11070] __release_sock+0x3a9/0x450 [ 374.724119][T11070] ? __pfx_sctp_inet_connect+0x10/0x10 [ 374.724145][T11070] release_sock+0x5a/0x220 [ 374.724176][T11070] sctp_inet_connect+0x16e/0x230 [ 374.724206][T11070] __sys_connect_file+0x141/0x1a0 [ 374.724236][T11070] __sys_connect+0x13b/0x160 [ 374.724262][T11070] ? __pfx___sys_connect+0x10/0x10 [ 374.724301][T11070] ? __pfx_ksys_write+0x10/0x10 [ 374.724341][T11070] __x64_sys_connect+0x72/0xb0 [ 374.724366][T11070] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.724388][T11070] do_syscall_64+0xcd/0xf80 [ 374.724413][T11070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.724437][T11070] RIP: 0033:0x7fabb1d8f7c9 [ 374.724456][T11070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.724484][T11070] RSP: 002b:00007fabb2c1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 374.724507][T11070] RAX: ffffffffffffffda RBX: 00007fabb1fe5fa0 RCX: 00007fabb1d8f7c9 [ 374.724523][T11070] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 374.724538][T11070] RBP: 00007fabb2c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 374.724552][T11070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.724565][T11070] R13: 00007fabb1fe6038 R14: 00007fabb1fe5fa0 R15: 00007ffeee2aef68 [ 374.724600][T11070] [ 375.069594][T11077] cifs: Unknown parameter 'Ź;B5èiÊrDðÖ°²p' [ 375.075798][T11077] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 375.156650][T11077] CIFS mount error: No usable UNC path provided in device string! [ 375.156650][T11077] [ 375.248466][T11077] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 375.341322][T11077] FAULT_INJECTION: forcing a failure. [ 375.341322][T11077] name failslab, interval 1, probability 0, space 0, times 0 [ 375.376981][T11077] CPU: 0 UID: 0 PID: 11077 Comm: syz.1.813 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 375.377024][T11077] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 375.377031][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.377039][T11077] Call Trace: [ 375.377044][T11077] [ 375.377050][T11077] dump_stack_lvl+0x16c/0x1f0 [ 375.377077][T11077] should_fail_ex+0x512/0x640 [ 375.377093][T11077] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 375.377112][T11077] should_failslab+0xc2/0x120 [ 375.377133][T11077] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 375.377150][T11077] ? __d_alloc+0x35/0xa80 [ 375.377166][T11077] ? __d_alloc+0x35/0xa80 [ 375.377176][T11077] __d_alloc+0x35/0xa80 [ 375.377191][T11077] d_alloc_pseudo+0x1c/0xc0 [ 375.377206][T11077] alloc_file_pseudo+0xcf/0x230 [ 375.377222][T11077] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 375.377237][T11077] ? alloc_fd+0x471/0x7d0 [ 375.377258][T11077] sock_alloc_file+0x50/0x210 [ 375.377278][T11077] __sys_socket+0x1c0/0x260 [ 375.377291][T11077] ? fput+0x70/0xf0 [ 375.377302][T11077] ? __pfx___sys_socket+0x10/0x10 [ 375.377316][T11077] ? xfd_validate_state+0x61/0x180 [ 375.377328][T11077] ? __pfx_ksys_write+0x10/0x10 [ 375.377350][T11077] __x64_sys_socket+0x72/0xb0 [ 375.377363][T11077] ? lockdep_hardirqs_on+0x7c/0x110 [ 375.377376][T11077] do_syscall_64+0xcd/0xf80 [ 375.377397][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.377421][T11077] RIP: 0033:0x7ff39fd8f7c9 [ 375.377440][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.377461][T11077] RSP: 002b:00007ff3a0cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 375.377475][T11077] RAX: ffffffffffffffda RBX: 00007ff39ffe5fa0 RCX: 00007ff39fd8f7c9 [ 375.377484][T11077] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 375.377492][T11077] RBP: 00007ff39fe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.377501][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.377509][T11077] R13: 00007ff39ffe6038 R14: 00007ff39ffe5fa0 R15: 00007fff40ce0048 [ 375.377528][T11077] [ 376.135033][T11102] FAULT_INJECTION: forcing a failure. [ 376.135033][T11102] name failslab, interval 1, probability 0, space 0, times 0 [ 376.177651][T11098] zswap: compressor not available [ 376.187807][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.2.815 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 376.187846][T11102] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 376.187853][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.187862][T11102] Call Trace: [ 376.187867][T11102] [ 376.187873][T11102] dump_stack_lvl+0x16c/0x1f0 [ 376.187899][T11102] should_fail_ex+0x512/0x640 [ 376.187915][T11102] ? fs_reclaim_acquire+0xae/0x150 [ 376.187937][T11102] should_failslab+0xc2/0x120 [ 376.187958][T11102] kmem_cache_alloc_noprof+0x83/0x770 [ 376.187973][T11102] ? __pfx_map_id_range_down+0x10/0x10 [ 376.187992][T11102] ? security_inode_alloc+0x3b/0x2b0 [ 376.188009][T11102] ? security_inode_alloc+0x3b/0x2b0 [ 376.188023][T11102] security_inode_alloc+0x3b/0x2b0 [ 376.188038][T11102] inode_init_always_gfp+0xced/0x1040 [ 376.188060][T11102] alloc_inode+0x86/0x240 [ 376.188075][T11102] path_from_stashed+0x25b/0x750 [ 376.188094][T11102] ? do_raw_spin_unlock+0x172/0x230 [ 376.188113][T11102] ns_get_path+0x60/0x80 [ 376.188132][T11102] proc_ns_get_link+0x121/0x230 [ 376.188147][T11102] ? __pfx_proc_ns_get_link+0x10/0x10 [ 376.188163][T11102] ? atime_needs_update+0x8b/0x710 [ 376.188181][T11102] pick_link+0xc96/0x13b0 [ 376.188197][T11102] ? __pfx_proc_ns_get_link+0x10/0x10 [ 376.188214][T11102] step_into_slowpath+0x6c6/0xf50 [ 376.188234][T11102] ? __pfx_step_into_slowpath+0x10/0x10 [ 376.188251][T11102] ? find_held_lock+0x2b/0x80 [ 376.188273][T11102] path_openat+0x10db/0x3140 [ 376.188298][T11102] ? __pfx_path_openat+0x10/0x10 [ 376.188323][T11102] do_filp_open+0x20b/0x470 [ 376.188343][T11102] ? __pfx_do_filp_open+0x10/0x10 [ 376.188382][T11102] ? alloc_fd+0x471/0x7d0 [ 376.188407][T11102] do_sys_openat2+0x121/0x290 [ 376.188423][T11102] ? __pfx_do_sys_openat2+0x10/0x10 [ 376.188445][T11102] __x64_sys_openat+0x174/0x210 [ 376.188461][T11102] ? __pfx___x64_sys_openat+0x10/0x10 [ 376.188484][T11102] do_syscall_64+0xcd/0xf80 [ 376.188498][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.188511][T11102] RIP: 0033:0x7f3b3f98e010 [ 376.188524][T11102] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 376.188537][T11102] RSP: 002b:00007f3b408c0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 376.188550][T11102] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3b3f98e010 [ 376.188559][T11102] RDX: 0000000000000002 RSI: 00007f3b408c0fa0 RDI: 00000000ffffff9c [ 376.188567][T11102] RBP: 00007f3b408c0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 376.188575][T11102] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 376.188583][T11102] R13: 00007f3b3fbe6038 R14: 00007f3b3fbe5fa0 R15: 00007ffd94ca04f8 [ 376.188602][T11102] [ 376.189098][T11103] FAULT_INJECTION: forcing a failure. [ 376.189098][T11103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.491939][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.1.816 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 376.491986][T11103] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 376.491997][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.492010][T11103] Call Trace: [ 376.492018][T11103] [ 376.492025][T11103] dump_stack_lvl+0x16c/0x1f0 [ 376.492063][T11103] should_fail_ex+0x512/0x640 [ 376.492093][T11103] _copy_from_user+0x2e/0xd0 [ 376.492120][T11103] kstrtouint_from_user+0xd6/0x1d0 [ 376.492152][T11103] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 376.492182][T11103] ? __lock_acquire+0x436/0x2890 [ 376.492208][T11103] ? lock_acquire+0x179/0x330 [ 376.492234][T11103] proc_fail_nth_write+0x83/0x220 [ 376.492256][T11103] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 376.492285][T11103] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 376.492304][T11103] vfs_write+0x2a0/0x11d0 [ 376.492335][T11103] ? __pfx___mutex_lock+0x10/0x10 [ 376.492359][T11103] ? __pfx_vfs_write+0x10/0x10 [ 376.492398][T11103] ? __fget_files+0x20e/0x3c0 [ 376.492436][T11103] ksys_write+0x12a/0x250 [ 376.492465][T11103] ? __pfx_ksys_write+0x10/0x10 [ 376.492507][T11103] do_syscall_64+0xcd/0xf80 [ 376.492532][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.492556][T11103] RIP: 0033:0x7ff39fd8e27f [ 376.492573][T11103] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 376.492600][T11103] RSP: 002b:00007ff3a0ccd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 376.492619][T11103] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff39fd8e27f [ 376.492632][T11103] RDX: 0000000000000001 RSI: 00007ff3a0ccd0a0 RDI: 0000000000000005 [ 376.492645][T11103] RBP: 00007ff3a0ccd090 R08: 0000000000000000 R09: 0000000000000000 [ 376.492657][T11103] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 376.492668][T11103] R13: 00007ff39ffe6128 R14: 00007ff39ffe6090 R15: 00007fff40ce0048 [ 376.492699][T11103] [ 377.002559][T11118] FAULT_INJECTION: forcing a failure. [ 377.002559][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 377.015666][T11118] CPU: 0 UID: 0 PID: 11118 Comm: syz.1.819 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 377.015722][T11118] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 377.015736][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.015751][T11118] Call Trace: [ 377.015759][T11118] [ 377.015769][T11118] dump_stack_lvl+0x16c/0x1f0 [ 377.015814][T11118] should_fail_ex+0x512/0x640 [ 377.015842][T11118] ? kmem_cache_alloc_noprof+0x62/0x770 [ 377.015876][T11118] should_failslab+0xc2/0x120 [ 377.015911][T11118] kmem_cache_alloc_noprof+0x83/0x770 [ 377.015939][T11118] ? __anon_vma_prepare+0xae/0x5e0 [ 377.015973][T11118] ? __anon_vma_prepare+0xae/0x5e0 [ 377.015996][T11118] __anon_vma_prepare+0xae/0x5e0 [ 377.016028][T11118] __vmf_anon_prepare+0x11c/0x240 [ 377.016065][T11118] do_wp_page+0x10a7/0x5010 [ 377.016109][T11118] ? __pfx_do_wp_page+0x10/0x10 [ 377.016148][T11118] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 377.016185][T11118] __handle_mm_fault+0x1bd2/0x2bb0 [ 377.016221][T11118] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.016249][T11118] ? __pte_offset_map_lock+0x174/0x310 [ 377.016280][T11118] ? vm_normal_page+0x1c4/0x320 [ 377.016311][T11118] ? find_held_lock+0x2b/0x80 [ 377.016353][T11118] ? follow_page_pte+0x5cf/0x1390 [ 377.016396][T11118] handle_mm_fault+0x3fe/0xad0 [ 377.016429][T11118] __get_user_pages+0x54e/0x3590 [ 377.016478][T11118] ? __pfx___get_user_pages+0x10/0x10 [ 377.016523][T11118] populate_vma_page_range+0x267/0x3f0 [ 377.016572][T11118] ? __pfx_populate_vma_page_range+0x10/0x10 [ 377.016610][T11118] ? __pfx_find_vma_intersection+0x10/0x10 [ 377.016648][T11118] ? do_mmap+0x69c/0x1210 [ 377.016690][T11118] __mm_populate+0x1d8/0x380 [ 377.016725][T11118] ? __pfx___mm_populate+0x10/0x10 [ 377.016759][T11118] ? up_write+0x282/0x4e0 [ 377.016784][T11118] vm_mmap_pgoff+0x37f/0x470 [ 377.016815][T11118] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 377.016849][T11118] ? __fget_files+0x20e/0x3c0 [ 377.016885][T11118] ksys_mmap_pgoff+0x32c/0x5c0 [ 377.016915][T11118] ? __pfx_ksys_write+0x10/0x10 [ 377.016946][T11118] __x64_sys_mmap+0x125/0x190 [ 377.016971][T11118] do_syscall_64+0xcd/0xf80 [ 377.016993][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.017014][T11118] RIP: 0033:0x7ff39fd8f7c9 [ 377.017033][T11118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.017053][T11118] RSP: 002b:00007ff3a0cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 377.017072][T11118] RAX: ffffffffffffffda RBX: 00007ff39ffe5fa0 RCX: 00007ff39fd8f7c9 [ 377.017087][T11118] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 377.017100][T11118] RBP: 00007ff39fe13f91 R08: 0000000000000003 R09: 0000000000008000 [ 377.017113][T11118] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 377.017126][T11118] R13: 00007ff39ffe6038 R14: 00007ff39ffe5fa0 R15: 00007fff40ce0048 [ 377.017157][T11118] [ 382.487415][T11193] FAULT_INJECTION: forcing a failure. [ 382.487415][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 382.524203][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.2.832 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 382.524254][T11193] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 382.524266][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.524277][T11193] Call Trace: [ 382.524284][T11193] [ 382.524293][T11193] dump_stack_lvl+0x16c/0x1f0 [ 382.524337][T11193] should_fail_ex+0x512/0x640 [ 382.524364][T11193] ? kmem_cache_alloc_noprof+0x62/0x770 [ 382.524396][T11193] should_failslab+0xc2/0x120 [ 382.524433][T11193] kmem_cache_alloc_noprof+0x83/0x770 [ 382.524458][T11193] ? __anon_vma_prepare+0xae/0x5e0 [ 382.524489][T11193] ? __anon_vma_prepare+0xae/0x5e0 [ 382.524511][T11193] __anon_vma_prepare+0xae/0x5e0 [ 382.524540][T11193] __vmf_anon_prepare+0x11c/0x240 [ 382.524571][T11193] do_wp_page+0x10a7/0x5010 [ 382.524612][T11193] ? __pfx_do_wp_page+0x10/0x10 [ 382.524649][T11193] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 382.524687][T11193] __handle_mm_fault+0x1bd2/0x2bb0 [ 382.524721][T11193] ? __pfx___handle_mm_fault+0x10/0x10 [ 382.524750][T11193] ? __pte_offset_map_lock+0x174/0x310 [ 382.524780][T11193] ? vm_normal_page+0x1c4/0x320 [ 382.524812][T11193] ? find_held_lock+0x2b/0x80 [ 382.524853][T11193] ? follow_page_pte+0x5cf/0x1390 [ 382.524896][T11193] handle_mm_fault+0x3fe/0xad0 [ 382.524930][T11193] __get_user_pages+0x54e/0x3590 [ 382.524987][T11193] ? __pfx___get_user_pages+0x10/0x10 [ 382.525035][T11193] populate_vma_page_range+0x267/0x3f0 [ 382.525072][T11193] ? __pfx_populate_vma_page_range+0x10/0x10 [ 382.525108][T11193] ? __pfx_find_vma_intersection+0x10/0x10 [ 382.525145][T11193] ? do_mmap+0x69c/0x1210 [ 382.525183][T11193] __mm_populate+0x1d8/0x380 [ 382.525221][T11193] ? __pfx___mm_populate+0x10/0x10 [ 382.525261][T11193] ? up_write+0x282/0x4e0 [ 382.525291][T11193] vm_mmap_pgoff+0x37f/0x470 [ 382.525325][T11193] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 382.525365][T11193] ? __fget_files+0x20e/0x3c0 [ 382.525405][T11193] ksys_mmap_pgoff+0x32c/0x5c0 [ 382.525437][T11193] ? __pfx_ksys_write+0x10/0x10 [ 382.525475][T11193] __x64_sys_mmap+0x125/0x190 [ 382.525505][T11193] do_syscall_64+0xcd/0xf80 [ 382.525532][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.525557][T11193] RIP: 0033:0x7f3b3f98f7c9 [ 382.525578][T11193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.525602][T11193] RSP: 002b:00007f3b408c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 382.525625][T11193] RAX: ffffffffffffffda RBX: 00007f3b3fbe5fa0 RCX: 00007f3b3f98f7c9 [ 382.525643][T11193] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 382.525658][T11193] RBP: 00007f3b3fa13f91 R08: 0000000000000003 R09: 0000000000008000 [ 382.525674][T11193] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 382.525689][T11193] R13: 00007f3b3fbe6038 R14: 00007f3b3fbe5fa0 R15: 00007ffd94ca04f8 [ 382.525723][T11193] [ 383.728096][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.735428][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.801079][T11493] zswap: compressor not available [ 407.742014][T11528] hub 1-0:1.0: USB hub found [ 407.752236][T11528] hub 1-0:1.0: 1 port detected [ 410.639831][T11572] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 411.898921][T11588] zswap: compressor not available [ 412.022710][T11595] FAULT_INJECTION: forcing a failure. [ 412.022710][T11595] name fail_futex, interval 1, probability 0, space 0, times 0 [ 412.037267][T11595] CPU: 1 UID: 0 PID: 11595 Comm: syz.3.907 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 412.037318][T11595] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 412.037331][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.037344][T11595] Call Trace: [ 412.037352][T11595] [ 412.037361][T11595] dump_stack_lvl+0x16c/0x1f0 [ 412.037402][T11595] should_fail_ex+0x512/0x640 [ 412.037435][T11595] get_futex_key+0x293/0x15f0 [ 412.037465][T11595] ? __pfx_get_futex_key+0x10/0x10 [ 412.037502][T11595] futex_wake+0xea/0x530 [ 412.037536][T11595] ? __pfx_futex_wake+0x10/0x10 [ 412.037581][T11595] do_futex+0x1e3/0x350 [ 412.037608][T11595] ? __pfx_do_futex+0x10/0x10 [ 412.037632][T11595] ? __might_fault+0xe3/0x190 [ 412.037667][T11595] mm_release+0x24e/0x300 [ 412.037699][T11595] do_exit+0x69e/0x2bd0 [ 412.037728][T11595] ? __pfx_do_exit+0x10/0x10 [ 412.037750][T11595] ? do_raw_spin_lock+0x12c/0x2b0 [ 412.037776][T11595] ? find_held_lock+0x2b/0x80 [ 412.037810][T11595] do_group_exit+0xd3/0x2a0 [ 412.037835][T11595] get_signal+0x2671/0x26d0 [ 412.037878][T11595] ? __pfx_get_signal+0x10/0x10 [ 412.037911][T11595] ? do_futex+0x122/0x350 [ 412.037938][T11595] arch_do_signal_or_restart+0x8f/0x7a0 [ 412.037972][T11595] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.038013][T11595] ? fput+0x70/0xf0 [ 412.038035][T11595] ? __pfx___x64_sys_futex+0x10/0x10 [ 412.038063][T11595] exit_to_user_mode_loop+0x8c/0x540 [ 412.038092][T11595] do_syscall_64+0x4ee/0xf80 [ 412.038114][T11595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.038136][T11595] RIP: 0033:0x7fabb1d8f7c9 [ 412.038156][T11595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.038177][T11595] RSP: 002b:00007fabb2c1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.038206][T11595] RAX: fffffffffffffe00 RBX: 00007fabb1fe5fa8 RCX: 00007fabb1d8f7c9 [ 412.038222][T11595] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabb1fe5fa8 [ 412.038236][T11595] RBP: 00007fabb1fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 412.038250][T11595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.038263][T11595] R13: 00007fabb1fe6038 R14: 00007ffeee2aee80 R15: 00007ffeee2aef68 [ 412.038297][T11595] [ 412.735346][T11606] netlink: zone id is out of range [ 413.215635][T11609] NFSD: Failed to start, no listeners configured. [ 415.252850][T11650] warning: `syz.3.916' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 415.634926][T11654] zswap: compressor not available [ 422.239899][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 422.557822][T11775] netlink: 342 bytes leftover after parsing attributes in process `syz.2.941'. [ 422.891562][T11778] zswap: compressor not available [ 425.716399][T11829] netlink: zone id is out of range [ 426.157300][T11829] NFSD: Failed to start, no listeners configured. [ 426.195022][T11834] FAULT_INJECTION: forcing a failure. [ 426.195022][T11834] name fail_futex, interval 1, probability 0, space 0, times 0 [ 426.208217][T11834] CPU: 1 UID: 0 PID: 11834 Comm: syz.2.949 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 426.208268][T11834] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 426.208281][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.208294][T11834] Call Trace: [ 426.208302][T11834] [ 426.208311][T11834] dump_stack_lvl+0x16c/0x1f0 [ 426.208352][T11834] should_fail_ex+0x512/0x640 [ 426.208384][T11834] get_futex_key+0x293/0x15f0 [ 426.208414][T11834] ? __pfx_get_futex_key+0x10/0x10 [ 426.208451][T11834] futex_wake+0xea/0x530 [ 426.208485][T11834] ? __pfx_futex_wake+0x10/0x10 [ 426.208538][T11834] do_futex+0x1e3/0x350 [ 426.208565][T11834] ? __pfx_do_futex+0x10/0x10 [ 426.208588][T11834] ? __might_fault+0xe3/0x190 [ 426.208624][T11834] mm_release+0x24e/0x300 [ 426.208656][T11834] do_exit+0x69e/0x2bd0 [ 426.208685][T11834] ? __pfx_do_exit+0x10/0x10 [ 426.208706][T11834] ? do_raw_spin_lock+0x12c/0x2b0 [ 426.208732][T11834] ? find_held_lock+0x2b/0x80 [ 426.208764][T11834] do_group_exit+0xd3/0x2a0 [ 426.208788][T11834] get_signal+0x2671/0x26d0 [ 426.208831][T11834] ? __pfx_get_signal+0x10/0x10 [ 426.208862][T11834] ? do_futex+0x122/0x350 [ 426.208889][T11834] arch_do_signal_or_restart+0x8f/0x7a0 [ 426.208923][T11834] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 426.208963][T11834] ? fput+0x70/0xf0 [ 426.208985][T11834] ? __pfx___x64_sys_futex+0x10/0x10 [ 426.209017][T11834] exit_to_user_mode_loop+0x8c/0x540 [ 426.209049][T11834] do_syscall_64+0x4ee/0xf80 [ 426.209074][T11834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.209097][T11834] RIP: 0033:0x7f3b3f98f7c9 [ 426.209115][T11834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.209136][T11834] RSP: 002b:00007f3b408c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 426.209157][T11834] RAX: fffffffffffffe00 RBX: 00007f3b3fbe5fa8 RCX: 00007f3b3f98f7c9 [ 426.209171][T11834] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b3fbe5fa8 [ 426.209185][T11834] RBP: 00007f3b3fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 426.209199][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.209212][T11834] R13: 00007f3b3fbe6038 R14: 00007ffd94ca0410 R15: 00007ffd94ca04f8 [ 426.209247][T11834] [ 426.860580][T11837] zswap: compressor not available [ 429.026829][T11877] zswap: compressor not available [ 429.358655][T11880] zswap: compressor 3 not available [ 429.656463][T11893] FAULT_INJECTION: forcing a failure. [ 429.656463][T11893] name failslab, interval 1, probability 0, space 0, times 0 [ 429.679632][T11893] CPU: 1 UID: 0 PID: 11893 Comm: syz.0.961 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 429.679696][T11893] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 429.679710][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.679725][T11893] Call Trace: [ 429.679733][T11893] [ 429.679743][T11893] dump_stack_lvl+0x16c/0x1f0 [ 429.679792][T11893] should_fail_ex+0x512/0x640 [ 429.679824][T11893] ? kmem_cache_alloc_noprof+0x62/0x770 [ 429.679858][T11893] should_failslab+0xc2/0x120 [ 429.679901][T11893] kmem_cache_alloc_noprof+0x83/0x770 [ 429.679930][T11893] ? __kernfs_new_node+0xd2/0x9b0 [ 429.679969][T11893] ? __kernfs_new_node+0xd2/0x9b0 [ 429.679994][T11893] __kernfs_new_node+0xd2/0x9b0 [ 429.680031][T11893] ? __pfx___kernfs_new_node+0x10/0x10 [ 429.680069][T11893] ? find_held_lock+0x2b/0x80 [ 429.680105][T11893] ? kernfs_root+0xee/0x2a0 [ 429.680140][T11893] kernfs_new_node+0x13c/0x1e0 [ 429.680181][T11893] __kernfs_create_file+0x53/0x350 [ 429.680222][T11893] sysfs_add_file_mode_ns+0x207/0x3c0 [ 429.680262][T11893] internal_create_group+0x597/0xf70 [ 429.680305][T11893] ? __pfx_internal_create_group+0x10/0x10 [ 429.680345][T11893] ? kernfs_create_link+0x1bd/0x240 [ 429.680375][T11893] internal_create_groups+0x9d/0x150 [ 429.680419][T11893] device_add+0xf56/0x1980 [ 429.680461][T11893] ? __pfx_device_add+0x10/0x10 [ 429.680492][T11893] ? lockdep_init_map_type+0x5c/0x270 [ 429.680515][T11893] ? __init_waitqueue_head+0xca/0x150 [ 429.680548][T11893] netdev_register_kobject+0x1a9/0x3d0 [ 429.680576][T11893] register_netdevice+0x13c1/0x21e0 [ 429.680619][T11893] ? __pfx_register_netdevice+0x10/0x10 [ 429.680667][T11893] register_netdev+0x34/0x50 [ 429.680702][T11893] mkiss_open+0x4cd/0x9a0 [ 429.680734][T11893] ? __pfx_mkiss_open+0x10/0x10 [ 429.680764][T11893] tty_ldisc_open+0x9f/0x120 [ 429.680798][T11893] tty_set_ldisc+0x32b/0x780 [ 429.680838][T11893] tty_ioctl+0xc2d/0x1650 [ 429.680874][T11893] ? __pfx_tty_ioctl+0x10/0x10 [ 429.680925][T11893] ? do_raw_spin_unlock+0x172/0x230 [ 429.680956][T11893] ? hook_file_ioctl_common+0x144/0x410 [ 429.680994][T11893] ? __x64_sys_openat+0x174/0x210 [ 429.681032][T11893] ? __pfx_tty_ioctl+0x10/0x10 [ 429.681081][T11893] __x64_sys_ioctl+0x18e/0x210 [ 429.681114][T11893] do_syscall_64+0xcd/0xf80 [ 429.681143][T11893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.681167][T11893] RIP: 0033:0x7f545278f7c9 [ 429.681188][T11893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.681218][T11893] RSP: 002b:00007f5453601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.681242][T11893] RAX: ffffffffffffffda RBX: 00007f54529e6090 RCX: 00007f545278f7c9 [ 429.681259][T11893] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000005 [ 429.681279][T11893] RBP: 00007f5452813f91 R08: 0000000000000000 R09: 0000000000000000 [ 429.681295][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.681309][T11893] R13: 00007f54529e6128 R14: 00007f54529e6090 R15: 00007fff4b224a08 [ 429.681351][T11893] [ 430.810311][T11903] zswap: compressor not available [ 432.773380][T11941] zswap: compressor not available [ 435.236148][T11988] lo: entered allmulticast mode [ 435.348485][T11991] lo: left allmulticast mode [ 437.560841][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 437.589220][T12018] FAULT_INJECTION: forcing a failure. [ 437.589220][T12018] name failslab, interval 1, probability 0, space 0, times 0 [ 437.722799][T12018] CPU: 1 UID: 0 PID: 12018 Comm: syz.1.982 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 437.722833][T12018] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 437.722841][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.722849][T12018] Call Trace: [ 437.722854][T12018] [ 437.722860][T12018] dump_stack_lvl+0x16c/0x1f0 [ 437.722887][T12018] should_fail_ex+0x512/0x640 [ 437.722903][T12018] ? __kmalloc_cache_noprof+0x5f/0x800 [ 437.722921][T12018] should_failslab+0xc2/0x120 [ 437.722941][T12018] __kmalloc_cache_noprof+0x80/0x800 [ 437.722956][T12018] ? rcu_is_watching+0x12/0xc0 [ 437.722974][T12018] ? call_usermodehelper_setup+0xaf/0x360 [ 437.722991][T12018] ? __pfx_free_modprobe_argv+0x10/0x10 [ 437.723008][T12018] ? call_usermodehelper_setup+0xaf/0x360 [ 437.723023][T12018] call_usermodehelper_setup+0xaf/0x360 [ 437.723041][T12018] __request_module+0x3bd/0x660 [ 437.723058][T12018] ? __pfx___request_module+0x10/0x10 [ 437.723083][T12018] ? find_held_lock+0x2b/0x80 [ 437.723104][T12018] inet_create+0xd21/0x1040 [ 437.723122][T12018] ? inet_create+0x93/0x1040 [ 437.723140][T12018] __sock_create+0x339/0x8a0 [ 437.723158][T12018] __sys_socket+0x14d/0x260 [ 437.723173][T12018] ? __pfx___sys_socket+0x10/0x10 [ 437.723188][T12018] ? xfd_validate_state+0x61/0x180 [ 437.723200][T12018] ? __pfx_ksys_write+0x10/0x10 [ 437.723222][T12018] __x64_sys_socket+0x72/0xb0 [ 437.723235][T12018] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.723247][T12018] do_syscall_64+0xcd/0xf80 [ 437.723261][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.723275][T12018] RIP: 0033:0x7ff39fd8f7c9 [ 437.723287][T12018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.723300][T12018] RSP: 002b:00007ff3a0cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 437.723313][T12018] RAX: ffffffffffffffda RBX: 00007ff39ffe5fa0 RCX: 00007ff39fd8f7c9 [ 437.723322][T12018] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 437.723329][T12018] RBP: 00007ff39fe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.723338][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.723345][T12018] R13: 00007ff39ffe6038 R14: 00007ff39ffe5fa0 R15: 00007fff40ce0048 [ 437.723364][T12018] [ 437.986234][T12022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 438.253737][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 438.433766][T12037] FAULT_INJECTION: forcing a failure. [ 438.433766][T12037] name fail_futex, interval 1, probability 0, space 0, times 0 [ 438.464485][T12037] CPU: 1 UID: 0 PID: 12037 Comm: syz.2.985 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 438.464538][T12037] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 438.464557][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.464571][T12037] Call Trace: [ 438.464579][T12037] [ 438.464588][T12037] dump_stack_lvl+0x16c/0x1f0 [ 438.464629][T12037] should_fail_ex+0x512/0x640 [ 438.464662][T12037] get_futex_key+0x293/0x15f0 [ 438.464691][T12037] ? __pfx_get_futex_key+0x10/0x10 [ 438.464728][T12037] futex_wake+0xea/0x530 [ 438.464761][T12037] ? __pfx_futex_wake+0x10/0x10 [ 438.464805][T12037] do_futex+0x1e3/0x350 [ 438.464833][T12037] ? __pfx_do_futex+0x10/0x10 [ 438.464856][T12037] ? __might_fault+0xe3/0x190 [ 438.464892][T12037] mm_release+0x24e/0x300 [ 438.464924][T12037] do_exit+0x69e/0x2bd0 [ 438.464951][T12037] ? __pfx_do_exit+0x10/0x10 [ 438.464973][T12037] ? do_raw_spin_lock+0x12c/0x2b0 [ 438.464999][T12037] ? find_held_lock+0x2b/0x80 [ 438.465033][T12037] do_group_exit+0xd3/0x2a0 [ 438.465059][T12037] get_signal+0x2671/0x26d0 [ 438.465102][T12037] ? __pfx_get_signal+0x10/0x10 [ 438.465135][T12037] ? do_futex+0x122/0x350 [ 438.465164][T12037] arch_do_signal_or_restart+0x8f/0x7a0 [ 438.465197][T12037] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 438.465238][T12037] ? fput+0x70/0xf0 [ 438.465260][T12037] ? __pfx___x64_sys_futex+0x10/0x10 [ 438.465292][T12037] exit_to_user_mode_loop+0x8c/0x540 [ 438.465323][T12037] do_syscall_64+0x4ee/0xf80 [ 438.465347][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.465370][T12037] RIP: 0033:0x7f3b3f98f7c9 [ 438.465389][T12037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.465411][T12037] RSP: 002b:00007f3b408c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.465433][T12037] RAX: fffffffffffffe00 RBX: 00007f3b3fbe5fa8 RCX: 00007f3b3f98f7c9 [ 438.465449][T12037] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b3fbe5fa8 [ 438.465463][T12037] RBP: 00007f3b3fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 438.465478][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.465491][T12037] R13: 00007f3b3fbe6038 R14: 00007ffd94ca0410 R15: 00007ffd94ca04f8 [ 438.465525][T12037] [ 440.648781][T12082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.654968][T12082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.662684][T12082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.668895][T12082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 442.313727][T12113] FAULT_INJECTION: forcing a failure. [ 442.313727][T12113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 442.326689][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.1.999 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 442.326719][T12113] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 442.326727][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.326734][T12113] Call Trace: [ 442.326739][T12113] [ 442.326744][T12113] dump_stack_lvl+0x16c/0x1f0 [ 442.326771][T12113] should_fail_ex+0x512/0x640 [ 442.326791][T12113] get_futex_key+0x293/0x15f0 [ 442.326808][T12113] ? __pfx_get_futex_key+0x10/0x10 [ 442.326828][T12113] futex_wake+0xea/0x530 [ 442.326849][T12113] ? __pfx_futex_wake+0x10/0x10 [ 442.326874][T12113] do_futex+0x1e3/0x350 [ 442.326890][T12113] ? __pfx_do_futex+0x10/0x10 [ 442.326903][T12113] ? __might_fault+0xe3/0x190 [ 442.326924][T12113] mm_release+0x24e/0x300 [ 442.326942][T12113] do_exit+0x69e/0x2bd0 [ 442.326958][T12113] ? __pfx_do_exit+0x10/0x10 [ 442.326971][T12113] ? do_raw_spin_lock+0x12c/0x2b0 [ 442.326986][T12113] ? find_held_lock+0x2b/0x80 [ 442.327012][T12113] do_group_exit+0xd3/0x2a0 [ 442.327026][T12113] get_signal+0x2671/0x26d0 [ 442.327052][T12113] ? __pfx_get_signal+0x10/0x10 [ 442.327071][T12113] ? do_futex+0x122/0x350 [ 442.327087][T12113] arch_do_signal_or_restart+0x8f/0x7a0 [ 442.327108][T12113] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 442.327131][T12113] ? fput+0x70/0xf0 [ 442.327144][T12113] ? __pfx___x64_sys_futex+0x10/0x10 [ 442.327163][T12113] exit_to_user_mode_loop+0x8c/0x540 [ 442.327181][T12113] do_syscall_64+0x4ee/0xf80 [ 442.327196][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.327209][T12113] RIP: 0033:0x7ff39fd8f7c9 [ 442.327221][T12113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.327234][T12113] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 442.327247][T12113] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 442.327256][T12113] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 442.327263][T12113] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 442.327271][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.327279][T12113] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 442.327296][T12113] [ 442.738605][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.739324][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 442.745111][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.760661][T12084] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.862544][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 442.931062][T12117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 442.939104][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 442.966824][T12117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.981332][T12119] FAULT_INJECTION: forcing a failure. [ 442.981332][T12119] name failslab, interval 1, probability 0, space 0, times 0 [ 443.024648][T12117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.045170][T12117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.067548][T12119] CPU: 0 UID: 0 PID: 12119 Comm: syz.0.998 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 443.067604][T12119] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 443.067622][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.067635][T12119] Call Trace: [ 443.067644][T12119] [ 443.067653][T12119] dump_stack_lvl+0x16c/0x1f0 [ 443.067701][T12119] should_fail_ex+0x512/0x640 [ 443.067730][T12119] ? __kmalloc_cache_noprof+0x5f/0x800 [ 443.067750][T12119] should_failslab+0xc2/0x120 [ 443.067771][T12119] __kmalloc_cache_noprof+0x80/0x800 [ 443.067787][T12119] ? rcu_is_watching+0x12/0xc0 [ 443.067805][T12119] ? __request_module+0x2ad/0x660 [ 443.067821][T12119] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.067850][T12119] ? __request_module+0x2ad/0x660 [ 443.067866][T12119] __request_module+0x2ad/0x660 [ 443.067883][T12119] ? __pfx___request_module+0x10/0x10 [ 443.067908][T12119] ? find_held_lock+0x2b/0x80 [ 443.067931][T12119] inet_create+0xa97/0x1040 [ 443.067957][T12119] ? inet_create+0x93/0x1040 [ 443.067987][T12119] __sock_create+0x339/0x8a0 [ 443.068015][T12119] __sys_socket+0x14d/0x260 [ 443.068038][T12119] ? __pfx___sys_socket+0x10/0x10 [ 443.068060][T12119] ? xfd_validate_state+0x61/0x180 [ 443.068074][T12119] ? __pfx_ksys_write+0x10/0x10 [ 443.068096][T12119] __x64_sys_socket+0x72/0xb0 [ 443.068110][T12119] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.068122][T12119] do_syscall_64+0xcd/0xf80 [ 443.068135][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.068149][T12119] RIP: 0033:0x7f545278f7c9 [ 443.068161][T12119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.068174][T12119] RSP: 002b:00007f5453622038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 443.068187][T12119] RAX: ffffffffffffffda RBX: 00007f54529e5fa0 RCX: 00007f545278f7c9 [ 443.068203][T12119] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 443.068211][T12119] RBP: 00007f5452813f91 R08: 0000000000000000 R09: 0000000000000000 [ 443.068219][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.068227][T12119] R13: 00007f54529e6038 R14: 00007f54529e5fa0 R15: 00007fff4b224a08 [ 443.068246][T12119] [ 444.988472][ T5154] Bluetooth: hci0: command 0x0c1a tx timeout [ 444.996894][T12084] Bluetooth: hci2: command 0x0c1a tx timeout [ 445.088755][T12084] Bluetooth: hci3: command 0x0c1a tx timeout [ 445.096879][T12084] Bluetooth: hci1: command 0x0c1a tx timeout [ 445.141965][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.148500][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.248415][T12215] zswap: compressor not available [ 449.346206][T12257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.352581][T12257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.358893][T12257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.365472][T12257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.304817][T12265] Format for adding new port is "id [perm_addr]" (uint MAC). [ 451.107360][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 451.382457][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.382480][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 451.382492][T12123] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.403798][T12084] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.456682][T12325] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.486071][T12325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.512405][T12325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 453.585548][T12325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.464295][T12084] Bluetooth: hci0: command 0x0c1a tx timeout [ 455.545268][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 455.552240][T12084] Bluetooth: hci1: command 0x0c1a tx timeout [ 455.628127][T12084] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.698419][T12382] random: crng reseeded on system resumption [ 457.873668][T12393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 457.881980][T12393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 457.888380][T12393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 457.901841][T12398] FAULT_INJECTION: forcing a failure. [ 457.901841][T12398] name fail_futex, interval 1, probability 0, space 0, times 0 [ 457.945169][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.2.1051 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 457.945212][T12398] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 457.945220][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.945228][T12398] Call Trace: [ 457.945232][T12398] [ 457.945239][T12398] dump_stack_lvl+0x16c/0x1f0 [ 457.945265][T12398] should_fail_ex+0x512/0x640 [ 457.945284][T12398] get_futex_key+0x293/0x15f0 [ 457.945305][T12398] ? __pfx_get_futex_key+0x10/0x10 [ 457.945326][T12398] futex_wake+0xea/0x530 [ 457.945346][T12398] ? __pfx_futex_wake+0x10/0x10 [ 457.945371][T12398] do_futex+0x1e3/0x350 [ 457.945396][T12398] ? __pfx_do_futex+0x10/0x10 [ 457.945423][T12398] ? __might_fault+0xe3/0x190 [ 457.945455][T12398] mm_release+0x24e/0x300 [ 457.945483][T12398] do_exit+0x69e/0x2bd0 [ 457.945510][T12398] ? __pfx_do_exit+0x10/0x10 [ 457.945531][T12398] ? do_raw_spin_lock+0x12c/0x2b0 [ 457.945552][T12398] ? find_held_lock+0x2b/0x80 [ 457.945583][T12398] do_group_exit+0xd3/0x2a0 [ 457.945608][T12398] get_signal+0x2671/0x26d0 [ 457.945650][T12398] ? __pfx_get_signal+0x10/0x10 [ 457.945681][T12398] ? do_futex+0x122/0x350 [ 457.945708][T12398] arch_do_signal_or_restart+0x8f/0x7a0 [ 457.945741][T12398] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 457.945780][T12398] ? fput+0x70/0xf0 [ 457.945799][T12398] ? __pfx___x64_sys_futex+0x10/0x10 [ 457.945830][T12398] exit_to_user_mode_loop+0x8c/0x540 [ 457.945863][T12398] do_syscall_64+0x4ee/0xf80 [ 457.945888][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.945910][T12398] RIP: 0033:0x7f3b3f98f7c9 [ 457.945930][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.945951][T12398] RSP: 002b:00007f3b408c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 457.945973][T12398] RAX: fffffffffffffe00 RBX: 00007f3b3fbe5fa8 RCX: 00007f3b3f98f7c9 [ 457.945989][T12398] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b3fbe5fa8 [ 457.946003][T12398] RBP: 00007f3b3fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 457.946017][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.946031][T12398] R13: 00007f3b3fbe6038 R14: 00007ffd94ca0410 R15: 00007ffd94ca04f8 [ 457.946064][T12398] [ 458.347372][T12393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.239034][T12419] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 459.946593][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 459.946608][ T5154] Bluetooth: hci0: command 0x0c1a tx timeout [ 459.958906][T12084] Bluetooth: hci1: command 0x0c1a tx timeout [ 460.426916][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 462.094647][T12457] FAULT_INJECTION: forcing a failure. [ 462.094647][T12457] name fail_futex, interval 1, probability 0, space 0, times 0 [ 462.108202][T12457] CPU: 1 UID: 0 PID: 12457 Comm: syz.3.1061 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 462.108233][T12457] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 462.108240][T12457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.108248][T12457] Call Trace: [ 462.108253][T12457] [ 462.108258][T12457] dump_stack_lvl+0x16c/0x1f0 [ 462.108285][T12457] should_fail_ex+0x512/0x640 [ 462.108305][T12457] get_futex_key+0x293/0x15f0 [ 462.108322][T12457] ? __pfx_get_futex_key+0x10/0x10 [ 462.108342][T12457] futex_wake+0xea/0x530 [ 462.108362][T12457] ? __pfx_futex_wake+0x10/0x10 [ 462.108387][T12457] do_futex+0x1e3/0x350 [ 462.108403][T12457] ? __pfx_do_futex+0x10/0x10 [ 462.108416][T12457] ? __might_fault+0xe3/0x190 [ 462.108437][T12457] mm_release+0x24e/0x300 [ 462.108455][T12457] do_exit+0x69e/0x2bd0 [ 462.108471][T12457] ? __pfx_do_exit+0x10/0x10 [ 462.108483][T12457] ? do_raw_spin_lock+0x12c/0x2b0 [ 462.108499][T12457] ? find_held_lock+0x2b/0x80 [ 462.108518][T12457] do_group_exit+0xd3/0x2a0 [ 462.108533][T12457] get_signal+0x2671/0x26d0 [ 462.108558][T12457] ? __pfx_get_signal+0x10/0x10 [ 462.108577][T12457] ? do_futex+0x122/0x350 [ 462.108593][T12457] arch_do_signal_or_restart+0x8f/0x7a0 [ 462.108613][T12457] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 462.108637][T12457] ? fput+0x70/0xf0 [ 462.108649][T12457] ? __pfx___x64_sys_futex+0x10/0x10 [ 462.108668][T12457] exit_to_user_mode_loop+0x8c/0x540 [ 462.108686][T12457] do_syscall_64+0x4ee/0xf80 [ 462.108701][T12457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.108714][T12457] RIP: 0033:0x7fabb1d8f7c9 [ 462.108727][T12457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.108740][T12457] RSP: 002b:00007fabb2c1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 462.108754][T12457] RAX: fffffffffffffe00 RBX: 00007fabb1fe5fa8 RCX: 00007fabb1d8f7c9 [ 462.108763][T12457] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabb1fe5fa8 [ 462.108771][T12457] RBP: 00007fabb1fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 462.108780][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.108788][T12457] R13: 00007fabb1fe6038 R14: 00007ffeee2aee80 R15: 00007ffeee2aef68 [ 462.108806][T12457] [ 463.660553][T12478] hub 1-0:1.0: USB hub found [ 463.683412][T12478] hub 1-0:1.0: 1 port detected [ 463.961278][T12478] hub 1-0:1.0: USB hub found [ 463.978546][T12478] hub 1-0:1.0: 1 port detected [ 464.706182][T12483] FAULT_INJECTION: forcing a failure. [ 464.706182][T12483] name failslab, interval 1, probability 0, space 0, times 0 [ 464.719068][T12483] CPU: 0 UID: 0 PID: 12483 Comm: syz.0.1068 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 464.719100][T12483] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 464.719108][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.719116][T12483] Call Trace: [ 464.719123][T12483] [ 464.719130][T12483] dump_stack_lvl+0x16c/0x1f0 [ 464.719157][T12483] should_fail_ex+0x512/0x640 [ 464.719176][T12483] should_failslab+0xc2/0x120 [ 464.719198][T12483] __kmalloc_cache_noprof+0x80/0x800 [ 464.719213][T12483] ? net_generic+0xea/0x2a0 [ 464.719226][T12483] ? tipc_service_create+0xb1/0x350 [ 464.719241][T12483] ? tipc_service_create+0xb1/0x350 [ 464.719254][T12483] tipc_service_create+0xb1/0x350 [ 464.719265][T12483] ? tipc_service_find+0x161/0x1c0 [ 464.719279][T12483] tipc_nametbl_insert_publ+0xf78/0x1740 [ 464.719295][T12483] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 464.719310][T12483] ? net_generic+0xea/0x2a0 [ 464.719326][T12483] tipc_nametbl_publish+0x137/0x280 [ 464.719342][T12483] tipc_sk_publish+0x1d8/0x430 [ 464.719357][T12483] ? __pfx_tipc_sk_publish+0x10/0x10 [ 464.719373][T12483] ? __local_bh_enable_ip+0xa4/0x120 [ 464.719394][T12483] tipc_sk_bind+0x16f/0x380 [ 464.719409][T12483] tipc_bind+0x190/0x2a0 [ 464.719424][T12483] __sys_bind+0x1a7/0x260 [ 464.719440][T12483] ? __pfx___sys_bind+0x10/0x10 [ 464.719460][T12483] ? xfd_validate_state+0x61/0x180 [ 464.719472][T12483] ? __pfx_ksys_write+0x10/0x10 [ 464.719496][T12483] __x64_sys_bind+0x72/0xb0 [ 464.719510][T12483] ? lockdep_hardirqs_on+0x7c/0x110 [ 464.719523][T12483] do_syscall_64+0xcd/0xf80 [ 464.719538][T12483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.719551][T12483] RIP: 0033:0x7f545278f7c9 [ 464.719563][T12483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.719576][T12483] RSP: 002b:00007f5453622038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 464.719589][T12483] RAX: ffffffffffffffda RBX: 00007f54529e5fa0 RCX: 00007f545278f7c9 [ 464.719597][T12483] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000005 [ 464.719606][T12483] RBP: 00007f5452813f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.719614][T12483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.719622][T12483] R13: 00007f54529e6038 R14: 00007f54529e5fa0 R15: 00007fff4b224a08 [ 464.719641][T12483] [ 464.719647][T12483] tipc: Service creation failed, no memory [ 465.749351][T12509] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 466.662611][T12513] random: crng reseeded on system resumption [ 467.115611][T12523] netlink: 302 bytes leftover after parsing attributes in process `syz.2.1074'. [ 467.209472][T12525] block2mtd: too many arguments [ 468.615561][T12533] FAULT_INJECTION: forcing a failure. [ 468.615561][T12533] name failslab, interval 1, probability 0, space 0, times 0 [ 468.628451][T12533] CPU: 0 UID: 0 PID: 12533 Comm: syz.1.1085 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 468.628483][T12533] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 468.628491][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.628501][T12533] Call Trace: [ 468.628506][T12533] [ 468.628514][T12533] dump_stack_lvl+0x16c/0x1f0 [ 468.628542][T12533] should_fail_ex+0x512/0x640 [ 468.628562][T12533] should_failslab+0xc2/0x120 [ 468.628583][T12533] __kmalloc_cache_noprof+0x80/0x800 [ 468.628598][T12533] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 468.628615][T12533] ? tipc_nametbl_insert_publ+0x700/0x1740 [ 468.628632][T12533] ? tipc_nametbl_insert_publ+0x700/0x1740 [ 468.628645][T12533] tipc_nametbl_insert_publ+0x700/0x1740 [ 468.628661][T12533] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 468.628675][T12533] ? net_generic+0xea/0x2a0 [ 468.628691][T12533] tipc_nametbl_publish+0x137/0x280 [ 468.628708][T12533] tipc_sk_publish+0x1d8/0x430 [ 468.628723][T12533] ? __pfx_tipc_sk_publish+0x10/0x10 [ 468.628739][T12533] ? __local_bh_enable_ip+0xa4/0x120 [ 468.628759][T12533] tipc_sk_bind+0x16f/0x380 [ 468.628775][T12533] tipc_bind+0x190/0x2a0 [ 468.628790][T12533] __sys_bind+0x1a7/0x260 [ 468.628806][T12533] ? __pfx___sys_bind+0x10/0x10 [ 468.628826][T12533] ? xfd_validate_state+0x61/0x180 [ 468.628838][T12533] ? __pfx_ksys_write+0x10/0x10 [ 468.628861][T12533] __x64_sys_bind+0x72/0xb0 [ 468.628874][T12533] ? lockdep_hardirqs_on+0x7c/0x110 [ 468.628886][T12533] do_syscall_64+0xcd/0xf80 [ 468.628900][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.628914][T12533] RIP: 0033:0x7ff39fd8f7c9 [ 468.628926][T12533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.628939][T12533] RSP: 002b:00007ff3a0ccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 468.628953][T12533] RAX: ffffffffffffffda RBX: 00007ff39ffe6090 RCX: 00007ff39fd8f7c9 [ 468.628962][T12533] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000005 [ 468.628970][T12533] RBP: 00007ff39fe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 468.628979][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.628987][T12533] R13: 00007ff39ffe6128 R14: 00007ff39ffe6090 R15: 00007fff40ce0048 [ 468.629006][T12533] [ 468.629013][T12533] tipc: Failed to bind to 64,0,2 [ 469.833977][T12550] zswap: compressor not available [ 473.018665][T12609] block2mtd: too many arguments [ 473.049869][T12607] netlink: 302 bytes leftover after parsing attributes in process `syz.0.1087'. [ 474.315508][T12618] zswap: compressor not available [ 475.053530][T12652] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 475.137846][T12654] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 475.436748][T12648] FAULT_INJECTION: forcing a failure. [ 475.436748][T12648] name failslab, interval 1, probability 0, space 0, times 0 [ 475.449560][T12648] CPU: 0 UID: 0 PID: 12648 Comm: syz.3.1095 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 475.449616][T12648] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 475.449630][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.449645][T12648] Call Trace: [ 475.449655][T12648] [ 475.449665][T12648] dump_stack_lvl+0x16c/0x1f0 [ 475.449711][T12648] should_fail_ex+0x512/0x640 [ 475.449754][T12648] should_failslab+0xc2/0x120 [ 475.449795][T12648] __kmalloc_cache_noprof+0x80/0x800 [ 475.449824][T12648] ? net_generic+0xea/0x2a0 [ 475.449848][T12648] ? tipc_service_create+0xb1/0x350 [ 475.449877][T12648] ? tipc_service_create+0xb1/0x350 [ 475.449901][T12648] tipc_service_create+0xb1/0x350 [ 475.449923][T12648] ? tipc_service_find+0x161/0x1c0 [ 475.449949][T12648] tipc_nametbl_insert_publ+0xf78/0x1740 [ 475.449978][T12648] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 475.450005][T12648] ? net_generic+0xea/0x2a0 [ 475.450036][T12648] tipc_nametbl_publish+0x137/0x280 [ 475.450068][T12648] tipc_sk_publish+0x1d8/0x430 [ 475.450096][T12648] ? __pfx_tipc_sk_publish+0x10/0x10 [ 475.450126][T12648] ? __local_bh_enable_ip+0xa4/0x120 [ 475.450164][T12648] tipc_sk_bind+0x16f/0x380 [ 475.450193][T12648] tipc_bind+0x190/0x2a0 [ 475.450221][T12648] __sys_bind+0x1a7/0x260 [ 475.450251][T12648] ? __pfx___sys_bind+0x10/0x10 [ 475.450290][T12648] ? xfd_validate_state+0x61/0x180 [ 475.450312][T12648] ? __pfx_ksys_write+0x10/0x10 [ 475.450358][T12648] __x64_sys_bind+0x72/0xb0 [ 475.450383][T12648] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.450407][T12648] do_syscall_64+0xcd/0xf80 [ 475.450433][T12648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.450458][T12648] RIP: 0033:0x7fabb1d8f7c9 [ 475.450479][T12648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.450502][T12648] RSP: 002b:00007fabb2bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 475.450526][T12648] RAX: ffffffffffffffda RBX: 00007fabb1fe6090 RCX: 00007fabb1d8f7c9 [ 475.450542][T12648] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000005 [ 475.450558][T12648] RBP: 00007fabb1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 475.450573][T12648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.450588][T12648] R13: 00007fabb1fe6128 R14: 00007fabb1fe6090 R15: 00007ffeee2aef68 [ 475.450624][T12648] [ 475.450634][T12648] tipc: Service creation failed, no memory [ 476.501726][T12672] FAULT_INJECTION: forcing a failure. [ 476.501726][T12672] name fail_futex, interval 1, probability 0, space 0, times 0 [ 476.539610][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.1.1098 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 476.539661][T12672] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 476.539672][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.539684][T12672] Call Trace: [ 476.539692][T12672] [ 476.539701][T12672] dump_stack_lvl+0x16c/0x1f0 [ 476.539738][T12672] should_fail_ex+0x512/0x640 [ 476.539766][T12672] get_futex_key+0x293/0x15f0 [ 476.539792][T12672] ? __pfx_get_futex_key+0x10/0x10 [ 476.539825][T12672] futex_wake+0xea/0x530 [ 476.539854][T12672] ? __pfx_futex_wake+0x10/0x10 [ 476.539901][T12672] do_futex+0x1e3/0x350 [ 476.539924][T12672] ? __pfx_do_futex+0x10/0x10 [ 476.539944][T12672] ? __might_fault+0xe3/0x190 [ 476.539976][T12672] mm_release+0x24e/0x300 [ 476.540003][T12672] do_exit+0x69e/0x2bd0 [ 476.540029][T12672] ? __pfx_do_exit+0x10/0x10 [ 476.540047][T12672] ? do_raw_spin_lock+0x12c/0x2b0 [ 476.540068][T12672] ? find_held_lock+0x2b/0x80 [ 476.540098][T12672] do_group_exit+0xd3/0x2a0 [ 476.540119][T12672] get_signal+0x2671/0x26d0 [ 476.540157][T12672] ? __pfx_get_signal+0x10/0x10 [ 476.540186][T12672] ? do_futex+0x122/0x350 [ 476.540210][T12672] arch_do_signal_or_restart+0x8f/0x7a0 [ 476.540239][T12672] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.540275][T12672] ? fput+0x70/0xf0 [ 476.540294][T12672] ? __pfx___x64_sys_futex+0x10/0x10 [ 476.540322][T12672] exit_to_user_mode_loop+0x8c/0x540 [ 476.540351][T12672] do_syscall_64+0x4ee/0xf80 [ 476.540379][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.540401][T12672] RIP: 0033:0x7ff39fd8f7c9 [ 476.540418][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.540436][T12672] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 476.540457][T12672] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 476.540471][T12672] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 476.540483][T12672] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 476.540495][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.540507][T12672] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 476.540538][T12672] [ 477.212986][T12683] FAULT_INJECTION: forcing a failure. [ 477.212986][T12683] name fail_futex, interval 1, probability 0, space 0, times 0 [ 477.255345][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.1.1108 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 477.255377][T12683] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 477.255384][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.255393][T12683] Call Trace: [ 477.255398][T12683] [ 477.255403][T12683] dump_stack_lvl+0x16c/0x1f0 [ 477.255429][T12683] should_fail_ex+0x512/0x640 [ 477.255448][T12683] get_futex_key+0x293/0x15f0 [ 477.255466][T12683] ? __pfx_get_futex_key+0x10/0x10 [ 477.255486][T12683] futex_wake+0xea/0x530 [ 477.255507][T12683] ? __pfx_futex_wake+0x10/0x10 [ 477.255532][T12683] do_futex+0x1e3/0x350 [ 477.255547][T12683] ? __pfx_do_futex+0x10/0x10 [ 477.255563][T12683] ? __might_fault+0xe3/0x190 [ 477.255584][T12683] mm_release+0x24e/0x300 [ 477.255603][T12683] do_exit+0x69e/0x2bd0 [ 477.255619][T12683] ? __pfx_do_exit+0x10/0x10 [ 477.255632][T12683] ? do_raw_spin_lock+0x12c/0x2b0 [ 477.255647][T12683] ? find_held_lock+0x2b/0x80 [ 477.255673][T12683] do_group_exit+0xd3/0x2a0 [ 477.255692][T12683] get_signal+0x2671/0x26d0 [ 477.255722][T12683] ? __pfx_get_signal+0x10/0x10 [ 477.255741][T12683] ? do_futex+0x122/0x350 [ 477.255757][T12683] arch_do_signal_or_restart+0x8f/0x7a0 [ 477.255777][T12683] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 477.255800][T12683] ? fput+0x70/0xf0 [ 477.255820][T12683] ? __pfx___x64_sys_futex+0x10/0x10 [ 477.255838][T12683] exit_to_user_mode_loop+0x8c/0x540 [ 477.255857][T12683] do_syscall_64+0x4ee/0xf80 [ 477.255872][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.255886][T12683] RIP: 0033:0x7ff39fd8f7c9 [ 477.255897][T12683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.255910][T12683] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 477.255923][T12683] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 477.255932][T12683] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 477.255940][T12683] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 477.255948][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.255955][T12683] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 477.255973][T12683] [ 478.994778][T12703] zswap: compressor not available [ 495.941137][T12980] FAULT_INJECTION: forcing a failure. [ 495.941137][T12980] name fail_futex, interval 1, probability 0, space 0, times 0 [ 496.003370][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.2.1160 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 496.003423][T12980] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 496.003434][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.003448][T12980] Call Trace: [ 496.003455][T12980] [ 496.003464][T12980] dump_stack_lvl+0x16c/0x1f0 [ 496.003511][T12980] should_fail_ex+0x512/0x640 [ 496.003543][T12980] get_futex_key+0x293/0x15f0 [ 496.003573][T12980] ? __pfx_get_futex_key+0x10/0x10 [ 496.003610][T12980] futex_wake+0xea/0x530 [ 496.003644][T12980] ? __pfx_futex_wake+0x10/0x10 [ 496.003689][T12980] do_futex+0x1e3/0x350 [ 496.003715][T12980] ? __pfx_do_futex+0x10/0x10 [ 496.003746][T12980] ? __might_fault+0xe3/0x190 [ 496.003782][T12980] mm_release+0x24e/0x300 [ 496.003813][T12980] do_exit+0x69e/0x2bd0 [ 496.003843][T12980] ? __pfx_do_exit+0x10/0x10 [ 496.003864][T12980] ? do_raw_spin_lock+0x12c/0x2b0 [ 496.003889][T12980] ? find_held_lock+0x2b/0x80 [ 496.003923][T12980] do_group_exit+0xd3/0x2a0 [ 496.003948][T12980] get_signal+0x2671/0x26d0 [ 496.003990][T12980] ? __pfx_get_signal+0x10/0x10 [ 496.004023][T12980] ? do_futex+0x122/0x350 [ 496.004051][T12980] arch_do_signal_or_restart+0x8f/0x7a0 [ 496.004083][T12980] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 496.004124][T12980] ? fput+0x70/0xf0 [ 496.004145][T12980] ? __pfx___x64_sys_futex+0x10/0x10 [ 496.004178][T12980] exit_to_user_mode_loop+0x8c/0x540 [ 496.004211][T12980] do_syscall_64+0x4ee/0xf80 [ 496.004235][T12980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.004259][T12980] RIP: 0033:0x7f3b3f98f7c9 [ 496.004277][T12980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.004299][T12980] RSP: 002b:00007f3b408c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 496.004321][T12980] RAX: fffffffffffffe00 RBX: 00007f3b3fbe5fa8 RCX: 00007f3b3f98f7c9 [ 496.004337][T12980] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b3fbe5fa8 [ 496.004351][T12980] RBP: 00007f3b3fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 496.004365][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.004382][T12980] R13: 00007f3b3fbe6038 R14: 00007ffd94ca0410 R15: 00007ffd94ca04f8 [ 496.004409][T12980] [ 497.221951][T12994] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 497.777138][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 499.641566][T13042] FAULT_INJECTION: forcing a failure. [ 499.641566][T13042] name fail_futex, interval 1, probability 0, space 0, times 0 [ 499.736573][T13042] CPU: 1 UID: 0 PID: 13042 Comm: syz.1.1173 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 499.736605][T13042] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 499.736612][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.736620][T13042] Call Trace: [ 499.736624][T13042] [ 499.736630][T13042] dump_stack_lvl+0x16c/0x1f0 [ 499.736656][T13042] should_fail_ex+0x512/0x640 [ 499.736676][T13042] get_futex_key+0x293/0x15f0 [ 499.736699][T13042] ? __pfx_get_futex_key+0x10/0x10 [ 499.736719][T13042] futex_wake+0xea/0x530 [ 499.736740][T13042] ? __pfx_futex_wake+0x10/0x10 [ 499.736765][T13042] do_futex+0x1e3/0x350 [ 499.736780][T13042] ? __pfx_do_futex+0x10/0x10 [ 499.736794][T13042] ? __might_fault+0xe3/0x190 [ 499.736814][T13042] mm_release+0x24e/0x300 [ 499.736833][T13042] do_exit+0x69e/0x2bd0 [ 499.736849][T13042] ? __pfx_do_exit+0x10/0x10 [ 499.736861][T13042] ? do_raw_spin_lock+0x12c/0x2b0 [ 499.736876][T13042] ? find_held_lock+0x2b/0x80 [ 499.736896][T13042] do_group_exit+0xd3/0x2a0 [ 499.736910][T13042] get_signal+0x2671/0x26d0 [ 499.736941][T13042] ? __pfx_get_signal+0x10/0x10 [ 499.736972][T13042] ? do_futex+0x122/0x350 [ 499.736994][T13042] arch_do_signal_or_restart+0x8f/0x7a0 [ 499.737014][T13042] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 499.737038][T13042] ? fput+0x70/0xf0 [ 499.737050][T13042] ? __pfx___x64_sys_futex+0x10/0x10 [ 499.737069][T13042] exit_to_user_mode_loop+0x8c/0x540 [ 499.737088][T13042] do_syscall_64+0x4ee/0xf80 [ 499.737102][T13042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.737116][T13042] RIP: 0033:0x7ff39fd8f7c9 [ 499.737127][T13042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.737141][T13042] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 499.737154][T13042] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 499.737162][T13042] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 499.737170][T13042] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 499.737178][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.737185][T13042] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 499.737203][T13042] [ 500.489189][T13051] FAULT_INJECTION: forcing a failure. [ 500.489189][T13051] name failslab, interval 1, probability 0, space 0, times 0 [ 500.506873][T13051] CPU: 1 UID: 0 PID: 13051 Comm: syz.2.1175 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 500.506930][T13051] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 500.506943][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.506958][T13051] Call Trace: [ 500.506966][T13051] [ 500.506976][T13051] dump_stack_lvl+0x16c/0x1f0 [ 500.507021][T13051] should_fail_ex+0x512/0x640 [ 500.507056][T13051] should_failslab+0xc2/0x120 [ 500.507092][T13051] __kmalloc_cache_noprof+0x80/0x800 [ 500.507124][T13051] ? sctp_add_bind_addr+0xae/0x3f0 [ 500.507164][T13051] ? sctp_add_bind_addr+0xae/0x3f0 [ 500.507196][T13051] sctp_add_bind_addr+0xae/0x3f0 [ 500.507236][T13051] sctp_copy_local_addr_list+0x349/0x550 [ 500.507265][T13051] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 500.507294][T13051] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 500.507320][T13051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 500.507360][T13051] sctp_bind_addr_copy+0x331/0x530 [ 500.507402][T13051] sctp_connect_new_asoc+0x1c9/0x770 [ 500.507435][T13051] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 500.507471][T13051] ? sctp_get_af_specific+0x62/0x70 [ 500.507494][T13051] ? sctp_sockaddr_af+0x2a3/0x340 [ 500.507532][T13051] __sctp_connect+0x3f3/0xc80 [ 500.507565][T13051] ? do_raw_spin_lock+0x12c/0x2b0 [ 500.507603][T13051] ? __pfx___sctp_connect+0x10/0x10 [ 500.507636][T13051] ? __pfx_sctp_inet_connect+0x10/0x10 [ 500.507662][T13051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 500.507695][T13051] ? __pfx_sctp_inet_connect+0x10/0x10 [ 500.507720][T13051] sctp_inet_connect+0x15f/0x230 [ 500.507749][T13051] __sys_connect_file+0x141/0x1a0 [ 500.507784][T13051] __sys_connect+0x13b/0x160 [ 500.507811][T13051] ? __pfx___sys_connect+0x10/0x10 [ 500.507852][T13051] ? xfd_validate_state+0x61/0x180 [ 500.507884][T13051] __x64_sys_connect+0x72/0xb0 [ 500.507911][T13051] ? lockdep_hardirqs_on+0x7c/0x110 [ 500.507935][T13051] do_syscall_64+0xcd/0xf80 [ 500.507961][T13051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.507986][T13051] RIP: 0033:0x7f3b3f98f7c9 [ 500.508007][T13051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.508030][T13051] RSP: 002b:00007f3b4087f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 500.508055][T13051] RAX: ffffffffffffffda RBX: 00007f3b3fbe6180 RCX: 00007f3b3f98f7c9 [ 500.508072][T13051] RDX: 0000000000000055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 500.508088][T13051] RBP: 00007f3b3fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 500.508103][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.508119][T13051] R13: 00007f3b3fbe6218 R14: 00007f3b3fbe6180 R15: 00007ffd94ca04f8 [ 500.508157][T13051] [ 501.831095][T13077] FAULT_INJECTION: forcing a failure. [ 501.831095][T13077] name failslab, interval 1, probability 0, space 0, times 0 [ 501.929666][T13073] netlink: set zone limit has 8 unknown bytes [ 501.987811][T13077] CPU: 0 UID: 0 PID: 13077 Comm: syz.0.1178 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 501.987845][T13077] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 501.987853][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.987862][T13077] Call Trace: [ 501.987867][T13077] [ 501.987873][T13077] dump_stack_lvl+0x16c/0x1f0 [ 501.987900][T13077] should_fail_ex+0x512/0x640 [ 501.987917][T13077] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 501.987939][T13077] should_failslab+0xc2/0x120 [ 501.987959][T13077] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 501.987978][T13077] ? debug_string_to_mask+0x81/0x550 [ 501.988000][T13077] ? kstrdup+0x53/0x100 [ 501.988014][T13077] kstrdup+0x53/0x100 [ 501.988030][T13077] debug_string_to_mask+0x81/0x550 [ 501.988047][T13077] ? find_held_lock+0x2b/0x80 [ 501.988064][T13077] ? __might_fault+0xe3/0x190 [ 501.988078][T13077] ? __might_fault+0x13b/0x190 [ 501.988095][T13077] ? __pfx_debug_string_to_mask+0x10/0x10 [ 501.988114][T13077] ? _copy_from_user+0x59/0xd0 [ 501.988131][T13077] orangefs_debug_write+0x50a/0x770 [ 501.988149][T13077] ? lock_acquire+0x179/0x330 [ 501.988161][T13077] ? __pfx_orangefs_debug_write+0x10/0x10 [ 501.988186][T13077] ? __debugfs_file_get+0x1fe/0x840 [ 501.988212][T13077] full_proxy_write+0x131/0x1a0 [ 501.988233][T13077] ? __pfx_full_proxy_write+0x10/0x10 [ 501.988250][T13077] vfs_write+0x2a0/0x11d0 [ 501.988274][T13077] ? __pfx___mutex_lock+0x10/0x10 [ 501.988289][T13077] ? __pfx_vfs_write+0x10/0x10 [ 501.988313][T13077] ? __fget_files+0x20e/0x3c0 [ 501.988337][T13077] ksys_write+0x12a/0x250 [ 501.988356][T13077] ? __pfx_ksys_write+0x10/0x10 [ 501.988379][T13077] do_syscall_64+0xcd/0xf80 [ 501.988393][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.988406][T13077] RIP: 0033:0x7f545278f7c9 [ 501.988420][T13077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.988435][T13077] RSP: 002b:00007f5453601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.988449][T13077] RAX: ffffffffffffffda RBX: 00007f54529e6090 RCX: 00007f545278f7c9 [ 501.988458][T13077] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 501.988466][T13077] RBP: 00007f5452813f91 R08: 0000000000000000 R09: 0000000000000000 [ 501.988474][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.988483][T13077] R13: 00007f54529e6128 R14: 00007f54529e6090 R15: 00007fff4b224a08 [ 501.988503][T13077] [ 504.036379][T13117] block2mtd: too many arguments [ 504.413924][T13122] FAULT_INJECTION: forcing a failure. [ 504.413924][T13122] name fail_futex, interval 1, probability 0, space 0, times 0 [ 504.503144][T13122] CPU: 0 UID: 0 PID: 13122 Comm: syz.1.1183 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 504.503176][T13122] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 504.503183][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.503192][T13122] Call Trace: [ 504.503197][T13122] [ 504.503202][T13122] dump_stack_lvl+0x16c/0x1f0 [ 504.503236][T13122] should_fail_ex+0x512/0x640 [ 504.503255][T13122] get_futex_key+0x293/0x15f0 [ 504.503273][T13122] ? __pfx_get_futex_key+0x10/0x10 [ 504.503293][T13122] futex_wake+0xea/0x530 [ 504.503313][T13122] ? __pfx_futex_wake+0x10/0x10 [ 504.503339][T13122] do_futex+0x1e3/0x350 [ 504.503354][T13122] ? __pfx_do_futex+0x10/0x10 [ 504.503367][T13122] ? __might_fault+0xe3/0x190 [ 504.503388][T13122] mm_release+0x24e/0x300 [ 504.503406][T13122] do_exit+0x69e/0x2bd0 [ 504.503423][T13122] ? __pfx_do_exit+0x10/0x10 [ 504.503435][T13122] ? do_raw_spin_lock+0x12c/0x2b0 [ 504.503450][T13122] ? find_held_lock+0x2b/0x80 [ 504.503470][T13122] do_group_exit+0xd3/0x2a0 [ 504.503484][T13122] get_signal+0x2671/0x26d0 [ 504.503509][T13122] ? __pfx_get_signal+0x10/0x10 [ 504.503528][T13122] ? do_futex+0x122/0x350 [ 504.503545][T13122] arch_do_signal_or_restart+0x8f/0x7a0 [ 504.503565][T13122] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 504.503588][T13122] ? fput+0x70/0xf0 [ 504.503601][T13122] ? __pfx___x64_sys_futex+0x10/0x10 [ 504.503619][T13122] exit_to_user_mode_loop+0x8c/0x540 [ 504.503638][T13122] do_syscall_64+0x4ee/0xf80 [ 504.503653][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.503667][T13122] RIP: 0033:0x7ff39fd8f7c9 [ 504.503678][T13122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.503691][T13122] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 504.503704][T13122] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 504.503713][T13122] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 504.503721][T13122] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 504.503728][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.503736][T13122] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 504.503753][T13122] [ 505.053933][T13126] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1184'. [ 505.236910][T13127] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1184'. [ 506.619248][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.652283][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.291141][T13184] zswap: compressor not available [ 511.268350][T13251] FAULT_INJECTION: forcing a failure. [ 511.268350][T13251] name fail_futex, interval 1, probability 0, space 0, times 0 [ 511.295749][T13251] CPU: 0 UID: 0 PID: 13251 Comm: syz.2.1207 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 511.295795][T13251] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 511.295804][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.295812][T13251] Call Trace: [ 511.295817][T13251] [ 511.295822][T13251] dump_stack_lvl+0x16c/0x1f0 [ 511.295848][T13251] should_fail_ex+0x512/0x640 [ 511.295868][T13251] get_futex_key+0x293/0x15f0 [ 511.295885][T13251] ? __pfx_get_futex_key+0x10/0x10 [ 511.295905][T13251] futex_wake+0xea/0x530 [ 511.295925][T13251] ? __pfx_futex_wake+0x10/0x10 [ 511.295950][T13251] do_futex+0x1e3/0x350 [ 511.295966][T13251] ? __pfx_do_futex+0x10/0x10 [ 511.295979][T13251] ? __might_fault+0xe3/0x190 [ 511.295999][T13251] mm_release+0x24e/0x300 [ 511.296018][T13251] do_exit+0x69e/0x2bd0 [ 511.296034][T13251] ? __pfx_do_exit+0x10/0x10 [ 511.296046][T13251] ? do_raw_spin_lock+0x12c/0x2b0 [ 511.296061][T13251] ? find_held_lock+0x2b/0x80 [ 511.296081][T13251] do_group_exit+0xd3/0x2a0 [ 511.296094][T13251] get_signal+0x2671/0x26d0 [ 511.296119][T13251] ? __pfx_get_signal+0x10/0x10 [ 511.296138][T13251] ? do_futex+0x122/0x350 [ 511.296154][T13251] arch_do_signal_or_restart+0x8f/0x7a0 [ 511.296175][T13251] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 511.296198][T13251] ? fput+0x70/0xf0 [ 511.296211][T13251] ? __pfx___x64_sys_futex+0x10/0x10 [ 511.296229][T13251] exit_to_user_mode_loop+0x8c/0x540 [ 511.296258][T13251] do_syscall_64+0x4ee/0xf80 [ 511.296273][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.296287][T13251] RIP: 0033:0x7f3b3f98f7c9 [ 511.296299][T13251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.296312][T13251] RSP: 002b:00007f3b408c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 511.296325][T13251] RAX: fffffffffffffe00 RBX: 00007f3b3fbe5fa8 RCX: 00007f3b3f98f7c9 [ 511.296334][T13251] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b3fbe5fa8 [ 511.296342][T13251] RBP: 00007f3b3fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 511.296350][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.296358][T13251] R13: 00007f3b3fbe6038 R14: 00007ffd94ca0410 R15: 00007ffd94ca04f8 [ 511.296375][T13251] [ 511.621505][T13255] vivid-007: ================= START STATUS ================= [ 511.629641][T13255] vivid-007: Generate PTS: true [ 511.636430][T13255] vivid-007: Generate SCR: true [ 511.642479][T13255] tpg source WxH: 320x240 (Y'CbCr) [ 511.647616][T13255] tpg field: 1 [ 511.650986][T13255] tpg crop: (0,0)/320x240 [ 511.655489][T13255] tpg compose: (0,0)/320x240 [ 511.660156][T13255] tpg colorspace: 8 [ 511.664768][T13255] tpg transfer function: 0/0 [ 511.669480][T13255] tpg Y'CbCr encoding: 0/0 [ 511.674950][T13255] tpg quantization: 0/0 [ 511.679494][T13255] tpg RGB range: 0/2 [ 511.683577][T13255] vivid-007: ================== END STATUS ================== [ 515.987905][T13309] FAULT_INJECTION: forcing a failure. [ 515.987905][T13309] name fail_futex, interval 1, probability 0, space 0, times 0 [ 516.080139][T13309] CPU: 0 UID: 0 PID: 13309 Comm: syz.2.1217 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 516.080171][T13309] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 516.080178][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.080190][T13309] Call Trace: [ 516.080195][T13309] [ 516.080200][T13309] dump_stack_lvl+0x16c/0x1f0 [ 516.080227][T13309] should_fail_ex+0x512/0x640 [ 516.080247][T13309] get_futex_key+0x1085/0x15f0 [ 516.080264][T13309] ? __pfx_get_futex_key+0x10/0x10 [ 516.080285][T13309] futex_wake+0xea/0x530 [ 516.080304][T13309] ? __pfx_futex_wake+0x10/0x10 [ 516.080330][T13309] do_futex+0x1e3/0x350 [ 516.080345][T13309] ? __pfx_do_futex+0x10/0x10 [ 516.080358][T13309] ? __might_fault+0xe3/0x190 [ 516.080379][T13309] mm_release+0x24e/0x300 [ 516.080398][T13309] do_exit+0x69e/0x2bd0 [ 516.080415][T13309] ? __pfx_do_exit+0x10/0x10 [ 516.080427][T13309] ? do_raw_spin_lock+0x12c/0x2b0 [ 516.080442][T13309] ? find_held_lock+0x2b/0x80 [ 516.080462][T13309] do_group_exit+0xd3/0x2a0 [ 516.080476][T13309] get_signal+0x2671/0x26d0 [ 516.080502][T13309] ? __pfx_get_signal+0x10/0x10 [ 516.080521][T13309] ? do_futex+0x122/0x350 [ 516.080547][T13309] arch_do_signal_or_restart+0x8f/0x7a0 [ 516.080567][T13309] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.080590][T13309] ? fput+0x70/0xf0 [ 516.080603][T13309] ? __pfx___x64_sys_futex+0x10/0x10 [ 516.080621][T13309] exit_to_user_mode_loop+0x8c/0x540 [ 516.080640][T13309] do_syscall_64+0x4ee/0xf80 [ 516.080654][T13309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.080668][T13309] RIP: 0033:0x7f3b3f98f7c9 [ 516.080679][T13309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.080692][T13309] RSP: 002b:00007f3b408c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 516.080706][T13309] RAX: fffffffffffffe00 RBX: 00007f3b3fbe5fa8 RCX: 00007f3b3f98f7c9 [ 516.080718][T13309] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b3fbe5fa8 [ 516.080727][T13309] RBP: 00007f3b3fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 516.080734][T13309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.080742][T13309] R13: 00007f3b3fbe6038 R14: 00007ffd94ca0410 R15: 00007ffd94ca04f8 [ 516.080779][T13309] [ 516.672646][T13312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 519.100359][T13361] FAULT_INJECTION: forcing a failure. [ 519.100359][T13361] name fail_futex, interval 1, probability 0, space 0, times 0 [ 519.173582][T13361] CPU: 1 UID: 0 PID: 13361 Comm: syz.1.1228 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 519.173634][T13361] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 519.173646][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.173660][T13361] Call Trace: [ 519.173668][T13361] [ 519.173677][T13361] dump_stack_lvl+0x16c/0x1f0 [ 519.173718][T13361] should_fail_ex+0x512/0x640 [ 519.173751][T13361] get_futex_key+0x1085/0x15f0 [ 519.173782][T13361] ? __pfx_get_futex_key+0x10/0x10 [ 519.173817][T13361] futex_wake+0xea/0x530 [ 519.173851][T13361] ? __pfx_futex_wake+0x10/0x10 [ 519.173897][T13361] do_futex+0x1e3/0x350 [ 519.173924][T13361] ? __pfx_do_futex+0x10/0x10 [ 519.173947][T13361] ? __might_fault+0xe3/0x190 [ 519.173983][T13361] mm_release+0x24e/0x300 [ 519.174014][T13361] do_exit+0x69e/0x2bd0 [ 519.174043][T13361] ? __pfx_do_exit+0x10/0x10 [ 519.174065][T13361] ? do_raw_spin_lock+0x12c/0x2b0 [ 519.174091][T13361] ? find_held_lock+0x2b/0x80 [ 519.174125][T13361] do_group_exit+0xd3/0x2a0 [ 519.174150][T13361] get_signal+0x2671/0x26d0 [ 519.174193][T13361] ? __pfx_get_signal+0x10/0x10 [ 519.174226][T13361] ? do_futex+0x122/0x350 [ 519.174255][T13361] arch_do_signal_or_restart+0x8f/0x7a0 [ 519.174288][T13361] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 519.174328][T13361] ? fput+0x70/0xf0 [ 519.174350][T13361] ? __pfx___x64_sys_futex+0x10/0x10 [ 519.174382][T13361] exit_to_user_mode_loop+0x8c/0x540 [ 519.174419][T13361] do_syscall_64+0x4ee/0xf80 [ 519.174444][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.174468][T13361] RIP: 0033:0x7ff39fd8f7c9 [ 519.174487][T13361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.174508][T13361] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 519.174530][T13361] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 519.174552][T13361] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 519.174566][T13361] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 519.174580][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.174593][T13361] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 519.174626][T13361] [ 519.860437][T13372] vivid-007: ================= START STATUS ================= [ 519.888719][T13372] vivid-007: Generate PTS: true [ 519.893630][T13372] vivid-007: Generate SCR: true [ 519.997075][T13372] tpg source WxH: 320x240 (Y'CbCr) [ 520.031083][T13372] tpg field: 1 [ 520.034485][T13372] tpg crop: (0,0)/320x240 [ 520.068432][T13372] tpg compose: (0,0)/320x240 [ 520.088223][T13372] tpg colorspace: 8 [ 520.115221][T13372] tpg transfer function: 0/0 [ 520.137424][T13372] tpg Y'CbCr encoding: 0/0 [ 520.142099][T13372] tpg quantization: 0/0 [ 520.158316][T13372] tpg RGB range: 0/2 [ 520.162256][T13372] vivid-007: ================== END STATUS ================== [ 522.283315][T13413] FAULT_INJECTION: forcing a failure. [ 522.283315][T13413] name fail_futex, interval 1, probability 0, space 0, times 0 [ 522.327946][T13413] CPU: 0 UID: 0 PID: 13413 Comm: syz.3.1236 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 522.327981][T13413] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 522.327989][T13413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.327997][T13413] Call Trace: [ 522.328001][T13413] [ 522.328007][T13413] dump_stack_lvl+0x16c/0x1f0 [ 522.328033][T13413] should_fail_ex+0x512/0x640 [ 522.328052][T13413] get_futex_key+0x293/0x15f0 [ 522.328069][T13413] ? __pfx_get_futex_key+0x10/0x10 [ 522.328089][T13413] futex_wake+0xea/0x530 [ 522.328109][T13413] ? __pfx_futex_wake+0x10/0x10 [ 522.328135][T13413] do_futex+0x1e3/0x350 [ 522.328150][T13413] ? __pfx_do_futex+0x10/0x10 [ 522.328164][T13413] ? __might_fault+0xe3/0x190 [ 522.328186][T13413] mm_release+0x24e/0x300 [ 522.328207][T13413] do_exit+0x69e/0x2bd0 [ 522.328223][T13413] ? __pfx_do_exit+0x10/0x10 [ 522.328235][T13413] ? do_raw_spin_lock+0x12c/0x2b0 [ 522.328250][T13413] ? find_held_lock+0x2b/0x80 [ 522.328270][T13413] do_group_exit+0xd3/0x2a0 [ 522.328284][T13413] get_signal+0x2671/0x26d0 [ 522.328309][T13413] ? __pfx_get_signal+0x10/0x10 [ 522.328328][T13413] ? do_futex+0x122/0x350 [ 522.328344][T13413] arch_do_signal_or_restart+0x8f/0x7a0 [ 522.328365][T13413] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 522.328388][T13413] ? fput+0x70/0xf0 [ 522.328401][T13413] ? __pfx___x64_sys_futex+0x10/0x10 [ 522.328419][T13413] exit_to_user_mode_loop+0x8c/0x540 [ 522.328445][T13413] do_syscall_64+0x4ee/0xf80 [ 522.328460][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.328473][T13413] RIP: 0033:0x7fabb1d8f7c9 [ 522.328485][T13413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.328498][T13413] RSP: 002b:00007fabb2c1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 522.328511][T13413] RAX: fffffffffffffe00 RBX: 00007fabb1fe5fa8 RCX: 00007fabb1d8f7c9 [ 522.328520][T13413] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabb1fe5fa8 [ 522.328528][T13413] RBP: 00007fabb1fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 522.328535][T13413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.328543][T13413] R13: 00007fabb1fe6038 R14: 00007ffeee2aee80 R15: 00007ffeee2aef68 [ 522.328560][T13413] [ 524.830822][T13452] FAULT_INJECTION: forcing a failure. [ 524.830822][T13452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 524.906552][T13452] CPU: 1 UID: 0 PID: 13452 Comm: syz.3.1242 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 524.906602][T13452] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 524.906615][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 524.906628][T13452] Call Trace: [ 524.906636][T13452] [ 524.906645][T13452] dump_stack_lvl+0x16c/0x1f0 [ 524.906685][T13452] should_fail_ex+0x512/0x640 [ 524.906714][T13452] get_futex_key+0x293/0x15f0 [ 524.906743][T13452] ? __pfx_get_futex_key+0x10/0x10 [ 524.906775][T13452] futex_wake+0xea/0x530 [ 524.906808][T13452] ? __pfx_futex_wake+0x10/0x10 [ 524.906852][T13452] do_futex+0x1e3/0x350 [ 524.906879][T13452] ? __pfx_do_futex+0x10/0x10 [ 524.906902][T13452] ? __might_fault+0xe3/0x190 [ 524.906933][T13452] mm_release+0x24e/0x300 [ 524.906964][T13452] do_exit+0x69e/0x2bd0 [ 524.906990][T13452] ? __pfx_do_exit+0x10/0x10 [ 524.907010][T13452] ? do_raw_spin_lock+0x12c/0x2b0 [ 524.907034][T13452] ? find_held_lock+0x2b/0x80 [ 524.907066][T13452] do_group_exit+0xd3/0x2a0 [ 524.907090][T13452] get_signal+0x2671/0x26d0 [ 524.907132][T13452] ? __pfx_get_signal+0x10/0x10 [ 524.907164][T13452] ? do_futex+0x122/0x350 [ 524.907200][T13452] arch_do_signal_or_restart+0x8f/0x7a0 [ 524.907232][T13452] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 524.907272][T13452] ? fput+0x70/0xf0 [ 524.907294][T13452] ? __pfx___x64_sys_futex+0x10/0x10 [ 524.907325][T13452] exit_to_user_mode_loop+0x8c/0x540 [ 524.907356][T13452] do_syscall_64+0x4ee/0xf80 [ 524.907381][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.907404][T13452] RIP: 0033:0x7fabb1d8f7c9 [ 524.907423][T13452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.907445][T13452] RSP: 002b:00007fabb2c1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 524.907467][T13452] RAX: fffffffffffffe00 RBX: 00007fabb1fe5fa8 RCX: 00007fabb1d8f7c9 [ 524.907483][T13452] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabb1fe5fa8 [ 524.907496][T13452] RBP: 00007fabb1fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 524.907510][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.907524][T13452] R13: 00007fabb1fe6038 R14: 00007ffeee2aee80 R15: 00007ffeee2aef68 [ 524.907556][T13452] [ 526.732392][T13487] capability: warning: `syz.3.1251' uses 32-bit capabilities (legacy support in use) [ 528.497536][T13523] [U] 15 [ 528.500580][T13523] [U] [ 528.503266][T13523] [U] [ 528.505950][T13523] [U] [ 528.508619][T13523] [U] [ 528.601930][T13523] [U] [ 528.604680][T13523] [U] [ 528.607357][T13523] [U] [ 528.610025][T13523] [U] [ 528.746148][T13523] [U] [ 528.748901][T13523] [U] [ 528.751624][T13523] [U] [ 528.754324][T13523] [U] [ 528.812602][T13523] [U] [ 528.815362][T13523] [U] [ 528.818066][T13523] [U] [ 528.820751][T13523] [U] [ 528.868825][T13523] [U] [ 528.871558][T13523] [U] [ 528.874347][T13523] [U] [ 528.877033][T13523] [U] [ 528.951312][T13523] [U] [ 528.954043][T13523] [U] [ 528.956718][T13523] [U] [ 528.959389][T13523] [U] [ 528.977845][T13523] [U] [ 528.980553][T13523] [U] [ 528.983226][T13523] [U] [ 528.985914][T13523] [U] [ 529.051668][T13523] [U] [ 529.054413][T13523] [U] [ 529.057104][T13523] [U] [ 529.059772][T13523] [U] [ 529.128622][T13523] [U] [ 529.393688][T13545] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 531.755737][T13577] vivid-007: ================= START STATUS ================= [ 531.771204][T13577] vivid-007: Enable Output Cropping: true [ 531.808443][T13577] vivid-007: Enable Output Composing: true [ 531.842399][T13577] vivid-007: Enable Output Scaler: true [ 531.853004][T13577] vivid-007: Tx RGB Quantization Range: Automatic [ 531.859442][T13577] vivid-007: Transmit Mode: HDMI [ 531.904717][T13577] vivid-007: Hotplug Present: 0x00000000 [ 531.910424][T13577] vivid-007: RxSense Present: 0x00000000 [ 531.993061][T13577] vivid-007: EDID Present: 0x00000000 [ 532.032635][T13577] vivid-007: ================== END STATUS ================== [ 536.027331][T13632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.441095][T13639] FAULT_INJECTION: forcing a failure. [ 536.441095][T13639] name fail_futex, interval 1, probability 0, space 0, times 0 [ 536.454350][T13639] CPU: 1 UID: 0 PID: 13639 Comm: syz.1.1278 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 536.454401][T13639] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 536.454413][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.454426][T13639] Call Trace: [ 536.454434][T13639] [ 536.454443][T13639] dump_stack_lvl+0x16c/0x1f0 [ 536.454483][T13639] should_fail_ex+0x512/0x640 [ 536.454516][T13639] get_futex_key+0x293/0x15f0 [ 536.454546][T13639] ? __pfx_get_futex_key+0x10/0x10 [ 536.454587][T13639] futex_wake+0xea/0x530 [ 536.454618][T13639] ? __pfx_futex_wake+0x10/0x10 [ 536.454664][T13639] do_futex+0x1e3/0x350 [ 536.454690][T13639] ? __pfx_do_futex+0x10/0x10 [ 536.454714][T13639] ? __might_fault+0xe3/0x190 [ 536.454750][T13639] mm_release+0x24e/0x300 [ 536.454782][T13639] do_exit+0x69e/0x2bd0 [ 536.454811][T13639] ? __pfx_do_exit+0x10/0x10 [ 536.454841][T13639] ? do_raw_spin_lock+0x12c/0x2b0 [ 536.454867][T13639] ? find_held_lock+0x2b/0x80 [ 536.454901][T13639] do_group_exit+0xd3/0x2a0 [ 536.454927][T13639] get_signal+0x2671/0x26d0 [ 536.454971][T13639] ? __pfx_get_signal+0x10/0x10 [ 536.455005][T13639] ? do_futex+0x122/0x350 [ 536.455033][T13639] arch_do_signal_or_restart+0x8f/0x7a0 [ 536.455067][T13639] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.455108][T13639] ? fput+0x70/0xf0 [ 536.455130][T13639] ? __pfx___x64_sys_futex+0x10/0x10 [ 536.455163][T13639] exit_to_user_mode_loop+0x8c/0x540 [ 536.455196][T13639] do_syscall_64+0x4ee/0xf80 [ 536.455221][T13639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.455245][T13639] RIP: 0033:0x7ff39fd8f7c9 [ 536.455264][T13639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.455286][T13639] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 536.455308][T13639] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 536.455324][T13639] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 536.455338][T13639] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 536.455353][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.455366][T13639] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 536.455401][T13639] [ 538.719537][T13655] [U] 15 [ 538.722463][T13655] [U] [ 538.725177][T13655] [U] [ 538.727885][T13655] [U] [ 538.730597][T13655] [U] [ 538.733562][T13655] [U] [ 538.736283][T13655] [U] [ 538.738995][T13655] [U] [ 538.741707][T13655] [U] [ 538.757082][T13655] [U] [ 538.759838][T13655] [U] [ 538.762550][T13655] [U] [ 538.765262][T13655] [U] [ 538.783897][T13655] [U] [ 538.786643][T13655] [U] [ 538.789360][T13655] [U] [ 538.792074][T13655] [U] [ 538.796695][T13655] [U] [ 538.799421][T13655] [U] [ 538.802130][T13655] [U] [ 538.804841][T13655] [U] [ 538.808150][T13655] [U] [ 538.810845][T13655] [U] [ 538.813518][T13655] [U] [ 538.816188][T13655] [U] [ 538.820233][T13655] [U] [ 538.822918][T13655] [U] [ 538.825584][T13655] [U] [ 538.828253][T13655] [U] [ 538.831070][T13655] [U] [ 538.833745][T13655] [U] [ 538.836414][T13655] [U] [ 538.839103][T13655] [U] [ 538.842984][T13655] [U] [ 538.845666][T13655] [U] [ 538.848361][T13655] [U] [ 538.851075][T13655] [U] [ 538.854014][T13655] [U] [ 538.856726][T13655] [U] [ 538.859437][T13655] [U] [ 538.862147][T13655] [U] [ 538.865214][T13655] [U] [ 538.867932][T13655] [U] [ 538.870658][T13655] [U] [ 538.873370][T13655] [U] [ 538.886318][T13655] [U] [ 538.889051][T13655] [U] [ 538.891763][T13655] [U] [ 538.894471][T13655] [U] [ 538.907973][T13655] [U] [ 538.910709][T13655] [U] [ 538.913418][T13655] [U] [ 538.916116][T13655] [U] [ 538.919114][T13655] [U] [ 538.921824][T13655] [U] [ 538.924529][T13655] [U] [ 538.927230][T13655] [U] [ 538.976178][T13655] [U] [ 538.978923][T13655] [U] [ 538.981637][T13655] [U] [ 538.984343][T13655] [U] [ 539.026095][T13655] [U] [ 539.028839][T13655] [U] [ 539.031558][T13655] [U] [ 539.034288][T13655] [U] [ 539.076321][T13655] [U] [ 539.076385][T13655] [U] [ 539.076422][T13655] [U] [ 539.076459][T13655] [U] [ 539.076626][T13655] [U] [ 539.076663][T13655] [U] [ 539.076703][T13655] [U] [ 539.076740][T13655] [U] [ 539.076970][T13655] [U] [ 539.077008][T13655] [U] [ 539.077046][T13655] [U] [ 539.077084][T13655] [U] [ 539.077244][T13655] [U] [ 539.077282][T13655] [U] [ 539.077320][T13655] [U] [ 539.077357][T13655] [U] [ 539.077588][T13655] [U] [ 539.077627][T13655] [U] [ 539.077665][T13655] [U] [ 539.077703][T13655] [U] [ 539.077861][T13655] [U] [ 539.077896][T13655] [U] [ 539.077935][T13655] [U] [ 539.077972][T13655] [U] [ 539.078207][T13655] [U] [ 539.078247][T13655] [U] [ 539.078287][T13655] [U] [ 539.078324][T13655] [U] [ 539.078493][T13655] [U] [ 539.078548][T13655] [U] [ 539.078598][T13655] [U] [ 539.078636][T13655] [U] [ 539.078875][T13655] [U] [ 539.078919][T13655] [U] [ 539.078958][T13655] [U] [ 539.078995][T13655] [U] [ 539.079154][T13655] [U] [ 539.079194][T13655] [U] [ 539.079232][T13655] [U] [ 539.079270][T13655] [U] [ 539.079504][T13655] [U] [ 539.079542][T13655] [U] [ 539.079586][T13655] [U] [ 539.079624][T13655] [U] [ 539.079781][T13655] [U] [ 539.079821][T13655] [U] [ 539.079861][T13655] [U] [ 539.079898][T13655] [U] [ 539.080137][T13655] [U] [ 539.080175][T13655] [U] [ 539.080212][T13655] [U] [ 539.080250][T13655] [U] [ 539.080415][T13655] [U] [ 539.080452][T13655] [U] [ 539.080491][T13655] [U] [ 539.080529][T13655] [U] [ 539.080783][T13655] [U] [ 539.080822][T13655] [U] [ 539.080858][T13655] [U] [ 539.080897][T13655] [U] [ 539.081058][T13655] [U] [ 539.081095][T13655] [U] [ 539.081129][T13655] [U] [ 539.081163][T13655] [U] [ 539.081201][T13655] [U] [ 539.081419][T13655] [U] [ 539.081459][T13655] [U] [ 539.081497][T13655] [U] [ 539.081535][T13655] [U] [ 539.081702][T13655] [U] [ 539.081741][T13655] [U] [ 539.081779][T13655] [U] [ 539.081816][T13655] [U] [ 539.082038][T13655] [U] [ 539.082076][T13655] [U] [ 539.082115][T13655] [U] [ 539.082152][T13655] [U] [ 539.082315][T13655] [U] [ 539.082356][T13655] [U] [ 539.082393][T13655] [U] [ 539.082430][T13655] [U] [ 539.082650][T13655] [U] [ 539.082689][T13655] [U] [ 539.082726][T13655] [U] [ 539.082766][T13655] [U] [ 539.082928][T13655] [U] [ 539.082968][T13655] [U] [ 539.083006][T13655] [U] [ 539.083047][T13655] [U] [ 539.083267][T13655] [U] [ 539.083306][T13655] [U] [ 539.083344][T13655] [U] [ 539.083382][T13655] [U] [ 539.083543][T13655] [U] [ 539.083589][T13655] [U] [ 539.083627][T13655] [U] [ 539.083665][T13655] [U] [ 539.083897][T13655] [U] [ 539.083936][T13655] [U] [ 539.083976][T13655] [U] [ 539.084013][T13655] [U] [ 539.084174][T13655] [U] [ 539.084211][T13655] [U] [ 539.084249][T13655] [U] [ 539.084287][T13655] [U] [ 539.084510][T13655] [U] [ 539.084552][T13655] [U] [ 539.084596][T13655] [U] [ 539.084634][T13655] [U] [ 539.084797][T13655] [U] [ 539.084839][T13655] [U] [ 539.084878][T13655] [U] [ 539.084917][T13655] [U] [ 539.085146][T13655] [U] [ 539.085184][T13655] [U] [ 539.085223][T13655] [U] [ 539.085260][T13655] [U] [ 539.085423][T13655] [U] [ 539.085463][T13655] [U] [ 539.085499][T13655] [U] [ 539.085536][T13655] [U] [ 539.085772][T13655] [U] [ 539.085810][T13655] [U] [ 539.085847][T13655] [U] [ 539.085885][T13655] [U] [ 539.126206][T13655] [U] [ 539.126251][T13655] [U] [ 539.126290][T13655] [U] [ 539.126327][T13655] [U] [ 539.126599][T13655] [U] [ 539.126641][T13655] [U] [ 539.126679][T13655] [U] [ 539.126715][T13655] [U] [ 539.126878][T13655] [U] [ 539.126918][T13655] [U] [ 539.126955][T13655] [U] [ 539.126992][T13655] [U] [ 539.127226][T13655] [U] [ 539.127265][T13655] [U] [ 539.127303][T13655] [U] [ 539.127340][T13655] [U] [ 539.127504][T13655] [U] [ 539.127541][T13655] [U] [ 539.127584][T13655] [U] [ 539.127623][T13655] [U] [ 539.127856][T13655] [U] [ 539.127896][T13655] [U] [ 539.127935][T13655] [U] [ 539.127972][T13655] [U] [ 539.128135][T13655] [U] [ 539.128173][T13655] [U] [ 539.128211][T13655] [U] [ 539.128249][T13655] [U] [ 539.128485][T13655] [U] [ 539.128522][T13655] [U] [ 539.128567][T13655] [U] [ 539.128607][T13655] [U] [ 539.128770][T13655] [U] [ 539.128808][T13655] [U] [ 539.128845][T13655] [U] [ 539.128883][T13655] [U] [ 539.129120][T13655] [U] [ 539.129157][T13655] [U] [ 539.129196][T13655] [U] [ 539.129234][T13655] [U] [ 539.129399][T13655] [U] [ 539.129439][T13655] [U] [ 539.129477][T13655] [U] [ 539.129515][T13655] [U] [ 539.129759][T13655] [U] [ 539.129800][T13655] [U] [ 539.129836][T13655] [U] [ 539.129875][T13655] [U] [ 539.130038][T13655] [U] [ 539.130076][T13655] [U] [ 539.130113][T13655] [U] [ 539.130152][T13655] [U] [ 539.130399][T13655] [U] [ 539.130440][T13655] [U] [ 539.130478][T13655] [U] [ 539.130516][T13655] [U] [ 539.130686][T13655] [U] [ 539.130725][T13655] [U] [ 539.130762][T13655] [U] [ 539.130801][T13655] [U] [ 539.131119][T13655] [U] [ 539.131157][T13655] [U] [ 539.131194][T13655] [U] [ 539.131235][T13655] [U] [ 539.131395][T13655] [U] [ 539.131434][T13655] [U] [ 539.131471][T13655] [U] [ 539.131508][T13655] [U] [ 539.131545][T13655] [U] [ 539.132072][T13655] [U] [ 539.132113][T13655] [U] [ 539.132149][T13655] [U] [ 539.132186][T13655] [U] [ 539.132344][T13655] [U] [ 539.132381][T13655] [U] [ 539.132419][T13655] [U] [ 539.132458][T13655] [U] [ 539.132687][T13655] [U] [ 539.132727][T13655] [U] [ 539.132766][T13655] [U] [ 539.132803][T13655] [U] [ 539.132956][T13655] [U] [ 539.132993][T13655] [U] [ 539.133030][T13655] [U] [ 539.133068][T13655] [U] [ 539.133290][T13655] [U] [ 539.133329][T13655] [U] [ 539.133366][T13655] [U] [ 539.133407][T13655] [U] [ 539.133567][T13655] [U] [ 539.133606][T13655] [U] [ 539.133645][T13655] [U] [ 539.133682][T13655] [U] [ 539.133912][T13655] [U] [ 539.133952][T13655] [U] [ 539.133990][T13655] [U] [ 539.134027][T13655] [U] [ 539.134183][T13655] [U] [ 539.134222][T13655] [U] [ 539.134259][T13655] [U] [ 539.134298][T13655] [U] [ 539.134519][T13655] [U] [ 539.134563][T13655] [U] [ 539.134600][T13655] [U] [ 539.134636][T13655] [U] [ 539.134800][T13655] [U] [ 539.134837][T13655] [U] [ 539.134875][T13655] [U] [ 539.134916][T13655] [U] [ 539.135140][T13655] [U] [ 539.135180][T13655] [U] [ 539.135218][T13655] [U] [ 539.135254][T13655] [U] [ 539.135415][T13655] [U] [ 539.135452][T13655] [U] [ 539.135489][T13655] [U] [ 539.135527][T13655] [U] [ 539.135765][T13655] [U] [ 539.135805][T13655] [U] [ 539.135840][T13655] [U] [ 539.135877][T13655] [U] [ 539.146167][T13655] [U] [ 539.146208][T13655] [U] [ 539.146242][T13655] [U] [ 539.146288][T13655] [U] [ 539.148217][T13655] [U] [ 539.148260][T13655] [U] [ 539.148297][T13655] [U] [ 539.148333][T13655] [U] [ 539.148489][T13655] [U] [ 539.148527][T13655] [U] [ 539.148573][T13655] [U] [ 539.148610][T13655] [U] [ 539.148843][T13655] [U] [ 539.148882][T13655] [U] [ 539.148918][T13655] [U] [ 539.148954][T13655] [U] [ 539.149113][T13655] [U] [ 539.149151][T13655] [U] [ 539.149188][T13655] [U] [ 539.149226][T13655] [U] [ 539.149455][T13655] [U] [ 539.149493][T13655] [U] [ 539.149531][T13655] [U] [ 539.149576][T13655] [U] [ 539.149734][T13655] [U] [ 539.149774][T13655] [U] [ 539.149813][T13655] [U] [ 539.149853][T13655] [U] [ 539.150099][T13655] [U] [ 539.150138][T13655] [U] [ 539.150174][T13655] [U] [ 539.150211][T13655] [U] [ 539.150371][T13655] [U] [ 539.150410][T13655] [U] [ 539.150447][T13655] [U] [ 539.150484][T13655] [U] [ 539.150718][T13655] [U] [ 539.150759][T13655] [U] [ 539.150796][T13655] [U] [ 539.150833][T13655] [U] [ 539.150994][T13655] [U] [ 539.151032][T13655] [U] [ 539.151070][T13655] [U] [ 539.151108][T13655] [U] [ 539.151344][T13655] [U] [ 539.151383][T13655] [U] [ 539.151420][T13655] [U] [ 539.151460][T13655] [U] [ 539.151624][T13655] [U] [ 539.151661][T13655] [U] [ 539.151703][T13655] [U] [ 539.151740][T13655] [U] [ 539.151981][T13655] [U] [ 539.152019][T13655] [U] [ 539.152057][T13655] [U] [ 539.152093][T13655] [U] [ 539.152254][T13655] [U] [ 539.152293][T13655] [U] [ 539.152330][T13655] [U] [ 539.152369][T13655] [U] [ 539.152614][T13655] [U] [ 539.152653][T13655] [U] [ 539.152691][T13655] [U] [ 539.152728][T13655] [U] [ 539.152890][T13655] [U] [ 539.152927][T13655] [U] [ 539.152965][T13655] [U] [ 539.153002][T13655] [U] [ 539.153247][T13655] [U] [ 539.153288][T13655] [U] [ 539.153324][T13655] [U] [ 539.153361][T13655] [U] [ 539.153522][T13655] [U] [ 539.153566][T13655] [U] [ 539.153603][T13655] [U] [ 539.153640][T13655] [U] [ 539.153680][T13655] [U] [ 539.153896][T13655] [U] [ 539.153934][T13655] [U] [ 539.153974][T13655] [U] [ 539.154014][T13655] [U] [ 539.154175][T13655] [U] [ 539.154215][T13655] [U] [ 539.154251][T13655] [U] [ 539.154289][T13655] [U] [ 539.154507][T13655] [U] [ 539.154547][T13655] [U] [ 539.154591][T13655] [U] [ 539.154629][T13655] [U] [ 539.154794][T13655] [U] [ 539.154832][T13655] [U] [ 539.154869][T13655] [U] [ 539.154908][T13655] [U] [ 539.155128][T13655] [U] [ 539.155165][T13655] [U] [ 539.155202][T13655] [U] [ 539.155240][T13655] [U] [ 539.155401][T13655] [U] [ 539.155440][T13655] [U] [ 539.155477][T13655] [U] [ 539.155515][T13655] [U] [ 539.155747][T13655] [U] [ 539.155785][T13655] [U] [ 539.155822][T13655] [U] [ 539.155860][T13655] [U] [ 539.176123][T13655] [U] [ 539.176166][T13655] [U] [ 539.176197][T13655] [U] [ 539.176232][T13655] [U] [ 539.176496][T13655] [U] [ 539.176534][T13655] [U] [ 539.176578][T13655] [U] [ 539.176613][T13655] [U] [ 539.176780][T13655] [U] [ 539.176816][T13655] [U] [ 539.176854][T13655] [U] [ 539.176892][T13655] [U] [ 539.177120][T13655] [U] [ 539.177158][T13655] [U] [ 539.177195][T13655] [U] [ 539.177232][T13655] [U] [ 539.177392][T13655] [U] [ 539.177430][T13655] [U] [ 539.177466][T13655] [U] [ 539.177504][T13655] [U] [ 539.177737][T13655] [U] [ 539.177775][T13655] [U] [ 539.177814][T13655] [U] [ 539.177852][T13655] [U] [ 539.178007][T13655] [U] [ 539.178045][T13655] [U] [ 539.178085][T13655] [U] [ 539.178123][T13655] [U] [ 539.178351][T13655] [U] [ 539.178389][T13655] [U] [ 539.178427][T13655] [U] [ 539.178464][T13655] [U] [ 539.178643][T13655] [U] [ 539.178682][T13655] [U] [ 539.178719][T13655] [U] [ 539.178756][T13655] [U] [ 539.178986][T13655] [U] [ 539.179024][T13655] [U] [ 539.179061][T13655] [U] [ 539.179098][T13655] [U] [ 539.179257][T13655] [U] [ 539.179295][T13655] [U] [ 539.179333][T13655] [U] [ 539.179371][T13655] [U] [ 539.179608][T13655] [U] [ 539.179646][T13655] [U] [ 539.179683][T13655] [U] [ 539.179723][T13655] [U] [ 539.179885][T13655] [U] [ 539.179923][T13655] [U] [ 539.179959][T13655] [U] [ 539.179996][T13655] [U] [ 539.180228][T13655] [U] [ 539.180265][T13655] [U] [ 539.180302][T13655] [U] [ 539.180343][T13655] [U] [ 539.180500][T13655] [U] [ 539.180539][T13655] [U] [ 539.180583][T13655] [U] [ 539.180621][T13655] [U] [ 539.180866][T13655] [U] [ 539.180903][T13655] [U] [ 539.180939][T13655] [U] [ 539.180976][T13655] [U] [ 539.181144][T13655] [U] [ 539.181181][T13655] [U] [ 539.181221][T13655] [U] [ 539.181258][T13655] [U] [ 539.181485][T13655] [U] [ 539.181524][T13655] [U] [ 539.181570][T13655] [U] [ 539.181609][T13655] [U] [ 539.181770][T13655] [U] [ 539.181807][T13655] [U] [ 539.181844][T13655] [U] [ 539.181880][T13655] [U] [ 539.182113][T13655] [U] [ 539.182150][T13655] [U] [ 539.182188][T13655] [U] [ 539.182226][T13655] [U] [ 539.182378][T13655] [U] [ 539.182416][T13655] [U] [ 539.182453][T13655] [U] [ 539.182490][T13655] [U] [ 539.182815][T13655] [U] [ 539.182866][T13655] [U] [ 539.182902][T13655] [U] [ 539.182939][T13655] [U] [ 539.183091][T13655] [U] [ 540.343035][T13655] [U] [ 540.345709][T13655] [U] [ 540.348383][T13655] [U] [ 540.360857][T13655] [U] [ 542.848500][T12084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.856664][T12084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.869253][T12084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.888110][T12084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.896139][T12084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.207453][T13662] chnl_net:caif_netlink_parms(): no params data found [ 543.398447][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.406821][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.418368][T13662] bridge_slave_0: entered allmulticast mode [ 543.439355][T13662] bridge_slave_0: entered promiscuous mode [ 543.447032][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.468287][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.475459][T13662] bridge_slave_1: entered allmulticast mode [ 543.482958][T13662] bridge_slave_1: entered promiscuous mode [ 543.560893][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.638857][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.725409][T13662] team0: Port device team_slave_0 added [ 543.740391][T13662] team0: Port device team_slave_1 added [ 543.826938][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.835676][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.935784][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.994198][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.001548][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.033021][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.443164][T13662] hsr_slave_0: entered promiscuous mode [ 544.453549][T13662] hsr_slave_1: entered promiscuous mode [ 544.465162][T13662] debugfs: 'hsr0' already exists in 'hsr' [ 544.529957][T13662] Cannot create hsr debugfs directory [ 544.949416][ T5849] Bluetooth: hci4: command tx timeout [ 545.366378][T13699] FAULT_INJECTION: forcing a failure. [ 545.366378][T13699] name fail_futex, interval 1, probability 0, space 0, times 0 [ 545.430622][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.1.1288 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 545.430654][T13699] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 545.430662][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.430670][T13699] Call Trace: [ 545.430674][T13699] [ 545.430680][T13699] dump_stack_lvl+0x16c/0x1f0 [ 545.430707][T13699] should_fail_ex+0x512/0x640 [ 545.430726][T13699] get_futex_key+0x293/0x15f0 [ 545.430756][T13699] ? __pfx_get_futex_key+0x10/0x10 [ 545.430789][T13699] futex_wake+0xea/0x530 [ 545.430820][T13699] ? __pfx_futex_wake+0x10/0x10 [ 545.430852][T13699] do_futex+0x1e3/0x350 [ 545.430867][T13699] ? __pfx_do_futex+0x10/0x10 [ 545.430881][T13699] ? __might_fault+0xe3/0x190 [ 545.430901][T13699] mm_release+0x24e/0x300 [ 545.430920][T13699] do_exit+0x69e/0x2bd0 [ 545.430942][T13699] ? __pfx_do_exit+0x10/0x10 [ 545.430955][T13699] ? do_raw_spin_lock+0x12c/0x2b0 [ 545.430971][T13699] ? find_held_lock+0x2b/0x80 [ 545.430996][T13699] do_group_exit+0xd3/0x2a0 [ 545.431010][T13699] get_signal+0x2671/0x26d0 [ 545.431035][T13699] ? __pfx_get_signal+0x10/0x10 [ 545.431055][T13699] ? do_futex+0x122/0x350 [ 545.431071][T13699] arch_do_signal_or_restart+0x8f/0x7a0 [ 545.431091][T13699] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 545.431114][T13699] ? fput+0x70/0xf0 [ 545.431127][T13699] ? __pfx___x64_sys_futex+0x10/0x10 [ 545.431146][T13699] exit_to_user_mode_loop+0x8c/0x540 [ 545.431165][T13699] do_syscall_64+0x4ee/0xf80 [ 545.431179][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.431200][T13699] RIP: 0033:0x7ff39fd8f7c9 [ 545.431212][T13699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.431225][T13699] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 545.431239][T13699] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 545.431248][T13699] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 545.431256][T13699] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 545.431264][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.431272][T13699] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 545.431289][T13699] [ 546.449412][T13662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.713822][T13662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.761567][T13662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.833861][T13662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 547.034947][ T5849] Bluetooth: hci4: command tx timeout [ 547.715176][T13662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.784178][T13662] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.818880][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.826040][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.888002][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.895224][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.042143][T13662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 548.115666][T13662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.749763][T13662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.111708][ T5849] Bluetooth: hci4: command tx timeout [ 549.142059][T13754] bond0: option all_slaves_active: invalid value () [ 549.844526][T13662] veth0_vlan: entered promiscuous mode [ 549.943479][T13662] veth1_vlan: entered promiscuous mode [ 550.204098][T13662] veth0_macvtap: entered promiscuous mode [ 550.334394][T13662] veth1_macvtap: entered promiscuous mode [ 550.369904][T13662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.578007][T13662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.639470][T12307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.669989][T12307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.716223][T12307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.789083][T12307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.995761][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.042525][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.076694][T13775] FAULT_INJECTION: forcing a failure. [ 551.076694][T13775] name fail_futex, interval 1, probability 0, space 0, times 0 [ 551.112095][T13775] CPU: 1 UID: 0 PID: 13775 Comm: syz.0.1297 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 551.112146][T13775] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 551.112158][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.112169][T13775] Call Trace: [ 551.112177][T13775] [ 551.112185][T13775] dump_stack_lvl+0x16c/0x1f0 [ 551.112223][T13775] should_fail_ex+0x512/0x640 [ 551.112252][T13775] get_futex_key+0x1085/0x15f0 [ 551.112281][T13775] ? __pfx_get_futex_key+0x10/0x10 [ 551.112313][T13775] futex_wake+0xea/0x530 [ 551.112344][T13775] ? __pfx_futex_wake+0x10/0x10 [ 551.112392][T13775] do_futex+0x1e3/0x350 [ 551.112413][T13775] ? __pfx_do_futex+0x10/0x10 [ 551.112429][T13775] ? __might_fault+0xe3/0x190 [ 551.112459][T13775] mm_release+0x24e/0x300 [ 551.112489][T13775] do_exit+0x69e/0x2bd0 [ 551.112517][T13775] ? __pfx_do_exit+0x10/0x10 [ 551.112536][T13775] ? do_raw_spin_lock+0x12c/0x2b0 [ 551.112559][T13775] ? find_held_lock+0x2b/0x80 [ 551.112590][T13775] do_group_exit+0xd3/0x2a0 [ 551.112615][T13775] get_signal+0x2671/0x26d0 [ 551.112652][T13775] ? __pfx_get_signal+0x10/0x10 [ 551.112682][T13775] ? do_futex+0x122/0x350 [ 551.112709][T13775] arch_do_signal_or_restart+0x8f/0x7a0 [ 551.112779][T13775] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 551.112818][T13775] ? fput+0x70/0xf0 [ 551.112840][T13775] ? __pfx___x64_sys_futex+0x10/0x10 [ 551.112873][T13775] exit_to_user_mode_loop+0x8c/0x540 [ 551.112905][T13775] do_syscall_64+0x4ee/0xf80 [ 551.112930][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.112954][T13775] RIP: 0033:0x7f545278f7c9 [ 551.112974][T13775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.112996][T13775] RSP: 002b:00007f54536220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 551.113018][T13775] RAX: fffffffffffffe00 RBX: 00007f54529e5fa8 RCX: 00007f545278f7c9 [ 551.113034][T13775] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54529e5fa8 [ 551.113049][T13775] RBP: 00007f54529e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 551.113064][T13775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.113077][T13775] R13: 00007f54529e6038 R14: 00007fff4b224920 R15: 00007fff4b224a08 [ 551.113111][T13775] [ 551.371280][ T5849] Bluetooth: hci4: command tx timeout [ 551.656014][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.698776][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.730295][T13840] FAULT_INJECTION: forcing a failure. [ 554.730295][T13840] name fail_futex, interval 1, probability 0, space 0, times 0 [ 554.764528][T13840] CPU: 0 UID: 0 PID: 13840 Comm: syz.1.1308 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 554.764559][T13840] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 554.764567][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.764575][T13840] Call Trace: [ 554.764580][T13840] [ 554.764586][T13840] dump_stack_lvl+0x16c/0x1f0 [ 554.764612][T13840] should_fail_ex+0x512/0x640 [ 554.764632][T13840] get_futex_key+0x293/0x15f0 [ 554.764649][T13840] ? __pfx_get_futex_key+0x10/0x10 [ 554.764669][T13840] futex_wake+0xea/0x530 [ 554.764689][T13840] ? __pfx_futex_wake+0x10/0x10 [ 554.764714][T13840] do_futex+0x1e3/0x350 [ 554.764730][T13840] ? __pfx_do_futex+0x10/0x10 [ 554.764744][T13840] ? __might_fault+0xe3/0x190 [ 554.764764][T13840] mm_release+0x24e/0x300 [ 554.764783][T13840] do_exit+0x69e/0x2bd0 [ 554.764799][T13840] ? __pfx_do_exit+0x10/0x10 [ 554.764812][T13840] ? do_raw_spin_lock+0x12c/0x2b0 [ 554.764827][T13840] ? find_held_lock+0x2b/0x80 [ 554.764847][T13840] do_group_exit+0xd3/0x2a0 [ 554.764861][T13840] get_signal+0x2671/0x26d0 [ 554.764887][T13840] ? __pfx_get_signal+0x10/0x10 [ 554.764906][T13840] ? do_futex+0x122/0x350 [ 554.764922][T13840] arch_do_signal_or_restart+0x8f/0x7a0 [ 554.764942][T13840] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.764965][T13840] ? fput+0x70/0xf0 [ 554.764978][T13840] ? __pfx___x64_sys_futex+0x10/0x10 [ 554.764996][T13840] exit_to_user_mode_loop+0x8c/0x540 [ 554.765016][T13840] do_syscall_64+0x4ee/0xf80 [ 554.765030][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.765044][T13840] RIP: 0033:0x7ff39fd8f7c9 [ 554.765063][T13840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.765076][T13840] RSP: 002b:00007ff3a0cee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.765089][T13840] RAX: fffffffffffffe00 RBX: 00007ff39ffe5fa8 RCX: 00007ff39fd8f7c9 [ 554.765098][T13840] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff39ffe5fa8 [ 554.765106][T13840] RBP: 00007ff39ffe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 554.765114][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.765121][T13840] R13: 00007ff39ffe6038 R14: 00007fff40cdff60 R15: 00007fff40ce0048 [ 554.765139][T13840] [ 555.379913][T13833] usb usb3: usbfs: interface 0 claimed by hub while 'syz.4.1307' sets config #-1 [ 555.495167][T13842] futex_wake_op: syz.1.1309 tries to shift op by -2048; fix this program [ 555.541794][T13842] futex_wake_op: syz.1.1309 tries to shift op by -2048; fix this program [ 555.627095][T13842] 0x000000000001-0x000000020000 : "" [ 555.722472][T13842] ftl_cs: FTL header corrupt! [ 556.295575][ T5849] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 556.295600][ T5849] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15 [ 556.310457][ T5849] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 556.533783][T13862] zram: Added device: zram1 [ 558.925298][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 559.521712][ T5849] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 559.521736][ T5849] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 559.537140][ T5849] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 559.605214][T13921] zram: Added device: zram2 [ 563.932257][T13969] usb usb3: usbfs: interface 0 claimed by hub while 'syz.0.1329' sets config #-1 [ 564.199588][T13984] futex_wake_op: syz.0.1334 tries to shift op by -2048; fix this program [ 564.240039][T13984] futex_wake_op: syz.0.1334 tries to shift op by -2048; fix this program [ 564.289994][T13985] 0x000000000001-0x000000020000 : "" [ 564.324924][T13985] ftl_cs: FTL header corrupt! [ 567.531094][T14041] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[14041] [ 568.095908][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.102391][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.113773][ T1302] ------------[ cut here ]------------ [ 568.119554][ T1302] WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210, CPU#0: aoe_tx0/1302 [ 568.129500][ T1302] Modules linked in: [ 568.133564][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 568.144176][ T1302] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 568.154253][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.164332][ T1302] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 568.169641][ T1302] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 a6 58 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 98 58 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 8a 58 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 568.189285][ T1302] RSP: 0018:ffffc900044cf860 EFLAGS: 00010293 [ 568.195358][ T1302] RAX: 0000000000000000 RBX: ffffc900044cf8e0 RCX: ffffffff8b2efbec [ 568.203327][ T1302] RDX: ffff888028dc5b80 RSI: ffffffff8b2f0568 RDI: 0000000000000003 [ 568.211294][ T1302] RBP: ffffc900044cf9f0 R08: 0000000000000003 R09: 000000000000ffff [ 568.219247][ T1302] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88801e743336 [ 568.227226][ T1302] R13: 000000000000ffff R14: ffff888028938d90 R15: ffff88801e743280 [ 568.235201][ T1302] FS: 0000000000000000(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000 [ 568.244134][ T1302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.250721][ T1302] CR2: 00007fdce0752000 CR3: 00000000261e0000 CR4: 00000000003526f0 [ 568.258782][ T1302] Call Trace: [ 568.262086][ T1302] [ 568.265009][ T1302] ? __pfx_lowpan_xmit+0x10/0x10 [ 568.269941][ T1302] ? lockdep_unlock+0x64/0xd0 [ 568.274652][ T1302] ? __lock_acquire+0x12c2/0x2890 [ 568.279700][ T1302] ? __pfx_netif_skb_features+0x10/0x10 [ 568.285298][ T1302] ? dev_hard_start_xmit+0x97/0x6e0 [ 568.290514][ T1302] dev_hard_start_xmit+0x97/0x6e0 [ 568.295547][ T1302] __dev_queue_xmit+0x6d7/0x46c0 [ 568.300478][ T1302] ? rcu_is_watching+0x12/0xc0 [ 568.305280][ T1302] ? finish_task_switch.isra.0+0x207/0xbd0 [ 568.311091][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 568.316453][ T1302] ? __lock_acquire+0x436/0x2890 [ 568.321390][ T1302] ? ref_tracker_free+0x37c/0x830 [ 568.326403][ T1302] ? do_raw_spin_lock+0x12c/0x2b0 [ 568.331435][ T1302] ? find_held_lock+0x2b/0x80 [ 568.336097][ T1302] ? skb_dequeue+0x126/0x180 [ 568.340684][ T1302] ? find_held_lock+0x2b/0x80 [ 568.345352][ T1302] ? rcu_is_watching+0x12/0xc0 [ 568.350108][ T1302] tx+0xcc/0x190 [ 568.353727][ T1302] ? __pfx_tx+0x10/0x10 [ 568.357865][ T1302] kthread+0x1e4/0x3e0 [ 568.361938][ T1302] ? find_held_lock+0x2b/0x80 [ 568.366605][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.371197][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 568.377077][ T1302] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.382277][ T1302] ? __kthread_parkme+0x19e/0x250 [ 568.387289][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.391878][ T1302] kthread+0x3c5/0x780 [ 568.395934][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.400506][ T1302] ? rcu_is_watching+0x12/0xc0 [ 568.405277][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.409849][ T1302] ret_from_fork+0x983/0xb10 [ 568.414435][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 568.419528][ T1302] ? __switch_to+0x7af/0x10d0 [ 568.424206][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.428798][ T1302] ret_from_fork_asm+0x1a/0x30 [ 568.433582][ T1302] [ 568.436586][ T1302] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.443847][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 568.454424][ T1302] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 568.464459][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.474496][ T1302] Call Trace: [ 568.477758][ T1302] [ 568.480681][ T1302] dump_stack_lvl+0x3d/0x1f0 [ 568.485265][ T1302] vpanic+0x640/0x6f0 [ 568.489231][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 568.493892][ T1302] panic+0xca/0xd0 [ 568.497599][ T1302] ? __pfx_panic+0x10/0x10 [ 568.502004][ T1302] ? check_panic_on_warn+0x1f/0xb0 [ 568.507096][ T1302] check_panic_on_warn+0xab/0xb0 [ 568.512013][ T1302] __warn+0x108/0x3c0 [ 568.515977][ T1302] __report_bug+0x2a0/0x520 [ 568.520466][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 568.525135][ T1302] ? __pfx___report_bug+0x10/0x10 [ 568.530151][ T1302] ? stack_trace_save+0x8e/0xc0 [ 568.534988][ T1302] ? __pfx_stack_trace_save+0x10/0x10 [ 568.540353][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 568.545011][ T1302] report_bug+0xb2/0x220 [ 568.549238][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 568.553900][ T1302] handle_bug+0x127/0x260 [ 568.558220][ T1302] exc_invalid_op+0x17/0x50 [ 568.562707][ T1302] asm_exc_invalid_op+0x1a/0x20 [ 568.567541][ T1302] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 568.572808][ T1302] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 a6 58 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 98 58 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 8a 58 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 568.592400][ T1302] RSP: 0018:ffffc900044cf860 EFLAGS: 00010293 [ 568.598450][ T1302] RAX: 0000000000000000 RBX: ffffc900044cf8e0 RCX: ffffffff8b2efbec [ 568.606403][ T1302] RDX: ffff888028dc5b80 RSI: ffffffff8b2f0568 RDI: 0000000000000003 [ 568.614358][ T1302] RBP: ffffc900044cf9f0 R08: 0000000000000003 R09: 000000000000ffff [ 568.622309][ T1302] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88801e743336 [ 568.630260][ T1302] R13: 000000000000ffff R14: ffff888028938d90 R15: ffff88801e743280 [ 568.638219][ T1302] ? lowpan_xmit+0x52c/0x1210 [ 568.642882][ T1302] ? lowpan_xmit+0xea8/0x1210 [ 568.647895][ T1302] ? __pfx_lowpan_xmit+0x10/0x10 [ 568.652819][ T1302] ? lockdep_unlock+0x64/0xd0 [ 568.657483][ T1302] ? __lock_acquire+0x12c2/0x2890 [ 568.662493][ T1302] ? __pfx_netif_skb_features+0x10/0x10 [ 568.668035][ T1302] ? dev_hard_start_xmit+0x97/0x6e0 [ 568.673223][ T1302] dev_hard_start_xmit+0x97/0x6e0 [ 568.678236][ T1302] __dev_queue_xmit+0x6d7/0x46c0 [ 568.683173][ T1302] ? rcu_is_watching+0x12/0xc0 [ 568.687946][ T1302] ? finish_task_switch.isra.0+0x207/0xbd0 [ 568.693757][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 568.699123][ T1302] ? __lock_acquire+0x436/0x2890 [ 568.704140][ T1302] ? ref_tracker_free+0x37c/0x830 [ 568.709161][ T1302] ? do_raw_spin_lock+0x12c/0x2b0 [ 568.714175][ T1302] ? find_held_lock+0x2b/0x80 [ 568.718840][ T1302] ? skb_dequeue+0x126/0x180 [ 568.723422][ T1302] ? find_held_lock+0x2b/0x80 [ 568.728084][ T1302] ? rcu_is_watching+0x12/0xc0 [ 568.732836][ T1302] tx+0xcc/0x190 [ 568.736366][ T1302] ? __pfx_tx+0x10/0x10 [ 568.740500][ T1302] kthread+0x1e4/0x3e0 [ 568.744564][ T1302] ? find_held_lock+0x2b/0x80 [ 568.749231][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.753811][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 568.759604][ T1302] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.764788][ T1302] ? __kthread_parkme+0x19e/0x250 [ 568.769809][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.774385][ T1302] kthread+0x3c5/0x780 [ 568.778439][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.783012][ T1302] ? rcu_is_watching+0x12/0xc0 [ 568.787766][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.792337][ T1302] ret_from_fork+0x983/0xb10 [ 568.796915][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 568.802096][ T1302] ? __switch_to+0x7af/0x10d0 [ 568.806762][ T1302] ? __pfx_kthread+0x10/0x10 [ 568.811337][ T1302] ret_from_fork_asm+0x1a/0x30 [ 568.816108][ T1302] [ 568.819479][ T1302] Kernel Offset: disabled [ 568.823793][ T1302] Rebooting in 86400 seconds..