last executing test programs: 1m47.251187263s ago: executing program 0 (id=1660): r0 = fsopen$auto(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r2, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) r3 = socket(0xa, 0x801, 0x84) r4 = socket(0xa, 0x1, 0x0) setsockopt$auto(r4, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x9c) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop6/rqos/wbt/id\x00', 0x101a00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96", 0x8}, 0x7, 0x0, 0x7, 0xb5) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) r5 = socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r5, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba441b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r6, 0x80085502, &(0x7f0000000140)=ANY=[@ANYBLOB="1000006e061e0ec3b417bee1e649c8b817d7a922cb9526d474f20699f1ab6bd6953f82874c6cd0230cb5bf"]) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x20100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) 1m46.769507534s ago: executing program 0 (id=1663): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x48980, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)={0x1, 0x3, "9f35e80f65bf2106f286ecb4e41345a4f8b5ba0ed21e33fbe7d9441c59ad860111249c401a12495546774f18f6503db646e3ef16a926c5304a41de33fdf44d63", "42629de39c5e4a487062ffeacc166c9f2ac2679016600521e571f7f32eaa12330c98ad5471377b273aa505b46ab2e5cd3b34ac1e15d71a6ea95b488b011f64b2bd92088a00", 0x3ff, 0x71c, "a981b013ff76722191f572f75a96919ba94ed0d5b055136e00f2b25a7d5c888673087cd2a906f0a5083757ebf3232affa950c6360936420798f452d387bcc6ee"}) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x107501, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xdbb3b890005640c6, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou$W&^kjO\tK\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\b\x00\x00\x00\x00\x00\x00\x00I\xcb\x16f\xc0\x8e|8x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5FD\x15f\x90\xa2\x84', 0x16051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xa0e42, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x8, 0x810002, 0x8, 0x8000000008011, 0x3, 0x2) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/batadv_slave_0/mldv1_unsolicited_report_interval\x00', 0x2, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2080, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 1m44.590722232s ago: executing program 0 (id=1673): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x30db80, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7fffffff, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x2) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) fchmodat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x61ed, 0x4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data_ptr=0x0, "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) setsockopt$auto(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x8) setrlimit$auto(0x5, &(0x7f0000000000)={0x3, 0x4}) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mlock$auto(0x7c88, 0x7fff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x5}}, 0x100003, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0xeda5, 0xc86) close_range$auto(0x2, 0x8, 0x3) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x7, 0x0, [{0x40000001, 0x2, 0x1}]}) getcpu$auto(&(0x7f00000000c0)=0xa51e, &(0x7f0000000140)=0x4800000, &(0x7f0000000180)={[0x5035, 0x2, 0x1, 0x4, 0x9, 0x8001, 0x9, 0x6, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7, 0x4, 0xffffffff]}) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m43.379208884s ago: executing program 0 (id=1677): ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@enable_stats={0x7f}, 0xa6) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20008800) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a/sun\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x5, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x13) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) socket(0x2, 0x801, 0x106) 1m42.619925418s ago: executing program 0 (id=1686): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x4008884) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfc}, 0x14}}, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket(0x2, 0xa, 0x1) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x426a2, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r4, 0x10000}, 0x10) 1m41.753470948s ago: executing program 0 (id=1679): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) process_vm_readv$auto(0x0, &(0x7f0000000140)={&(0x7f0000000080)="e9fdbea1442542376cebb5dc66b731ced35bdb1f06adc43903ba986f303bd92f2022e112a1783fcc1d65275d08eb54983ce1ef65e32921db1d03f2389782437b75b13f5a5a476be07c1254daf0ca41f3007b55fd62e8605a3e2a5f3bb7640a20ee723443db"}, 0x8, &(0x7f0000000400)={&(0x7f0000000380)="7c62bf750222a7bd300e3267a49c48cef855cb1a24808d37d7482eef0a2d5350f81492c1b7e178d92a235476695c6576c65dd22e4b7ab1c79c2791f3d21aad46a50afcea237e20a27a6a43ce1348c1cac09b98d2fcef949381f4", 0x2}, 0xc8, 0x0) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x80000000, 0x7, 0x6, 0xfffffffffffffffe, 0x9, 0x3, 0x4000006, 0x4, 0xb2, 0x8000, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0xaa0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x400000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) acct$auto(0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0xf0, 0x400009, 0xdf, 0x9b72, r1, 0x8000) socket(0xa, 0x5, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x109802, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x400000b5, 0x2, 0x6}]}) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/tracing/options/annotate\x00', 0x4000, 0x0) msync$auto(0x7, 0x8, 0x400000004) open(0x0, 0x163340, 0x2c) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x83, 0x1000, 0x6, 0x1, 0xffffffff, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x0, 0x8998d60, 0x8000100, 0x7fff, 0x8000105, 0x0, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x47302, 0x3d, 0x8, 0x7, 0x8001}}) 1m41.390004315s ago: executing program 32 (id=1679): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) process_vm_readv$auto(0x0, &(0x7f0000000140)={&(0x7f0000000080)="e9fdbea1442542376cebb5dc66b731ced35bdb1f06adc43903ba986f303bd92f2022e112a1783fcc1d65275d08eb54983ce1ef65e32921db1d03f2389782437b75b13f5a5a476be07c1254daf0ca41f3007b55fd62e8605a3e2a5f3bb7640a20ee723443db"}, 0x8, &(0x7f0000000400)={&(0x7f0000000380)="7c62bf750222a7bd300e3267a49c48cef855cb1a24808d37d7482eef0a2d5350f81492c1b7e178d92a235476695c6576c65dd22e4b7ab1c79c2791f3d21aad46a50afcea237e20a27a6a43ce1348c1cac09b98d2fcef949381f4", 0x2}, 0xc8, 0x0) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x80000000, 0x7, 0x6, 0xfffffffffffffffe, 0x9, 0x3, 0x4000006, 0x4, 0xb2, 0x8000, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0xaa0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x400000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) acct$auto(0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0xf0, 0x400009, 0xdf, 0x9b72, r1, 0x8000) socket(0xa, 0x5, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x109802, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x400000b5, 0x2, 0x6}]}) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/tracing/options/annotate\x00', 0x4000, 0x0) msync$auto(0x7, 0x8, 0x400000004) open(0x0, 0x163340, 0x2c) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x83, 0x1000, 0x6, 0x1, 0xffffffff, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x0, 0x8998d60, 0x8000100, 0x7fff, 0x8000105, 0x0, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x47302, 0x3d, 0x8, 0x7, 0x8001}}) 5.168996786s ago: executing program 2 (id=2144): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) waitid$auto_P_PID(0x1, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) (async) waitid$auto_P_PID(0x1, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) socket(0x2c, 0x3, 0x0) (async) r2 = socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bind$auto(r2, &(0x7f0000000100)=@xdp={0x2c, 0xc, r4, 0x1e}, 0x6b) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x40, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x1d, 0x14, '/proc/sys/dev/cdrom/info\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24008001) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 4.202648161s ago: executing program 1 (id=2148): mmap$auto(0x169, 0x20009, 0x4, 0x12, 0x401, 0x40000000000004) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x1) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0x40800, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/103, 0x67) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/module/parameters/sig_enforce\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sg/parameters/scatter_elem_sz\x00', 0x22001, 0x0) write$auto(r3, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92\xfc\xf3\x1a/\x99dcA\xf4B\xf3\xba\x17\xea', 0xe) r4 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x80, 0x0) read$auto_proc_auxv_operations_base(r4, 0x0, 0x0) write$auto(r4, &(0x7f0000000100)='\x00', 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) connect$auto(r1, &(0x7f0000000080)=@nfc={0x27, r5, 0xffffffffffffffff, 0x6}, 0x803) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r6 = prctl$auto(0x2, 0x1, 0x0, 0x1, 0x2) pwrite64$auto(r1, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x8000000000000003) uname$auto(0x0) r7 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r7, 0x29, 0x30, 0x0, 0x0) lgetxattr$auto(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='\xda--\x00', 0x0, 0x100) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x9, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x6, @rand_addr=0x64010100}, 0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) mmap$auto(0xfffffffffffffffd, 0x400008, 0xfffffffffffffff2, 0x9b74, 0xffffffffffffffff, 0x8002) r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0) 4.131823247s ago: executing program 2 (id=2149): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48980, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)={0x1, 0x3, "9f35e80f65bf2106f286ecb4e41345a4f8b5ba0ed21e33fbe7d9441c59ad860111249c401a12495546774f18f6503db646e3ef16a926c5304a41de33fdf44d63", "42629de39c5e4a487062ffeacc166c9f2ac2679016600521e571f7f32eaa12330c98ad5471377b273aa505b46ab2e5cd3b34ac1e15d71a6ea95b488b011f64b2bd92088a00", 0x3ff, 0x71c, "a981b013ff76722191f572f75a96919ba94ed0d5b055136e00f2b25a7d5c888673087cd2a906f0a5083757ebf3232affa950c6360936420798f452d387bcc6ee"}) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x107501, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xdbb3b890005640c6, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou$W&^kjO\tK\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\b\x00\x00\x00\x00\x00\x00\x00I\xcb\x16f\xc0\x8e|8x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5FD\x15f\x90\xa2\x84', 0x16051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xa0e42, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x8, 0x810002, 0x8, 0x8000000008011, 0x3, 0x2) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/batadv_slave_0/mldv1_unsolicited_report_interval\x00', 0x2, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 3.647211953s ago: executing program 1 (id=2151): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48500, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(r0, 0x0, 0x8080) (async) sendmsg$auto_BATADV_CMD_TP_METER(r0, 0x0, 0x8080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) r1 = mq_open$auto(0x0, 0xfe, 0x9, 0x0) socket(0x18, 0x80000, 0x2) (async) socket(0x18, 0x80000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r2, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_KSMBD_EVENT_SHUTTING_DOWN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r4) (async) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r5, 0x77bed28568c43d3b, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) (async) sendmsg$auto_BATADV_CMD_TP_METER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r5, 0x77bed28568c43d3b, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) socket(0x28, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) 3.205667953s ago: executing program 2 (id=2154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) r2 = socket(0x11, 0x80003, 0x200300) setsockopt$auto(r2, 0x107, 0x18, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3b3d2abd7000fddbdf250304000008000300", @ANYRES32=r6], 0x28}}, 0x80) fstat$auto(r3, &(0x7f0000000340)={0x80000001, 0x0, 0xed52, 0x4, 0xee00, 0xee01, 0x0, 0x5, 0x7fff, 0x0, 0x4, 0x3, 0x5, 0x7, 0x9, 0xfffffffffffffffc, 0x5}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x12b, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x78, 0x3, 0x0, 0x1, [@nested={0x74, 0x3, 0x0, 0x1, [@nested={0x0, 0x8c, 0x0, 0x1, [@nested={0x0, 0x72, 0x0, 0x1, [@generic="2e14476dec9046786521c57319ac9616fd7cf51cf743ad89449876c7c0607b28c8172bdd62ea012be24b1790e40e414cec12eaea6c6fda1a55835662583a1c57bc4a0f6f29ccf0577db9611988ed14f5920883328b6fd195f34d604d028b"]}, @typed={0x0, 0xde, 0x0, 0x0, @uid=r7}, @generic, @generic="a7f1e130c8bcc7c366885a458370fc86a12dec0c1c00999abe454f1156485fa3207e5591b82f3747eeb017c42ee069ef7d2456a0b96450142ed0331743498b020c0631527e101cd9f2cf97d71444407d364774493bce9ce4f7e5ed65a9c28e9ec92f81ad46e09179edcc6441391918af7ec4290a904da3af9967f1168a7233ac798fc5466894170ce425ff55207ae291ef406ebc69ec6e8e478683d5455bed39f762bdfdc1008b8199c13ef6e664d07f570595462869e5bda41dd195bbfcc20276"]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfa03}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xed0}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x10c}}, 0xc881) 3.111014852s ago: executing program 4 (id=2155): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x305c00, 0x0) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d8", 0xb9) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) close_range$auto(0x2, 0xa, 0x0) madvise$auto(0x0, 0x200007, 0x8) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x810) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0xf34) madvise$auto(0x0, 0x2003f0, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') setns(r3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141002, 0x0) mmap$auto(0x19, 0x0, 0x7, 0x10, r2, 0x7867) fsconfig$auto(r2, 0x200001, &(0x7f00000000c0)='\x98\a\x84\x88f8\xe6Gd0\x84@t\x8d%T\x99\xe0\a^\x12\x12\xe6\xce\x81\xd1\xcd\xcfb\xd1*\xdbY\xd6\x14\xb2\xed\x02\xae\'p\xe9\x106\x98\xaa9\xa4P,\xee\xbfQ\xa2\xa0S\xfa', &(0x7f0000000280), 0x0) lremovexattr$auto(&(0x7f0000000440)='}[,&*}\x00', &(0x7f0000000480)='/de~/bus/usb/001/001\x00') close_range$auto(0xffffffffffffffff, r3, 0x1b60) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r4, r0, 0x8) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x402000d, 0xa, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="060000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8a0) 2.967240506s ago: executing program 1 (id=2156): socket(0x26, 0x80003, 0x854) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) 2.921593148s ago: executing program 2 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) 2.905705023s ago: executing program 1 (id=2158): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x149) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x98842, 0x0) ioctl$auto_PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy17/aqm\x00', 0x6180, 0x0) read$auto(0x3, 0x0, 0x8080) 2.818201103s ago: executing program 2 (id=2159): openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) pread64$auto(r0, &(0x7f0000000100)='\x00', 0xa7, 0x5) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x801, 0x84) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000280)="8618c61e", 0x40000000001243}, 0xa, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x6, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x40008000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/209, 0xd1) socket(0x200000000000011, 0x2, 0x1) 2.620924308s ago: executing program 3 (id=2161): mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000280)={0x982, 0x6, 0x4}, 0x7f) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012a000b000900000005002800d4000000060010006a05001d004000"/46], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) socket(0x1e, 0x80000, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r4 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10) write$auto_dev_fops_plock(r4, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5) sendfile$auto(r5, r3, 0x0, 0x1fff5) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x4, 0x0) io_uring_setup$auto(0x1, &(0x7f00000004c0)={0x7, 0x400, 0x3, 0x8, 0x9, 0x7, r6, [0xe, 0x80, 0x101], {0x1ff, 0x800, 0x5, 0x3, 0x4, 0x2, 0x0, 0x0, 0x9}, {0x1ead, 0x10, 0x5, 0x5, 0x5, 0x7, 0xa2f, 0x42e646f9, 0x1}}) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) io_uring_setup$auto(0x4bf15e08, 0x0) bpf$auto(0x12, &(0x7f0000000040)=@enable_stats={0x1}, 0x26) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) unshare$auto(0x40000080) 2.555101558s ago: executing program 4 (id=2162): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x168040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) dup2$auto(r1, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc18260, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x4044000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0x26, 0x800, 0x8) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) sysfs$auto(0x2, 0x4000007, 0xfffffffffffffffc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$auto(0xca, 0x0, 0x83) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x27ffe) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x208000, 0x0) 2.439988424s ago: executing program 1 (id=2163): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mbind$auto(0x0, 0x8000000000000001, 0x6, &(0x7f00000000c0)=0xffffffff, 0x7, 0x3) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/fs/cifs/DebugData\x00', 0x2000, 0x0) pread64$auto(r1, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x10001, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) prctl$auto(0x3e, 0x801, 0x0, 0x1, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x1102, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) 1.580388929s ago: executing program 3 (id=2164): unshare$auto(0x40000080) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = prctl$auto_PR_SET_MM_ARG_START(0x0, 0x8, 0x0, 0xacb, 0xfffffffffffffe01) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0xa6fe, 0x0, r0}) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004983}, 0x20000040) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) write$auto(0x3, 0x0, 0x7fffffff) io_uring_register$auto(r4, 0x9, &(0x7f00000001c0)="c36736685c38b88292237ee11f7a94d988b9b0d4ef73b9765aa881edbd0301d50b67502ee2a9243e5e2db48d15c22ced4fb53def384399f9de63bc7cc7800169e12f7f6a54982e5c3987d8f044edb7abc42eda929e496f783fb572edac35025ba22aa46ede59f3eb236a481cbc6ed26372315f7ff7b1d173ea8ac334380ada4447d2918637e5359302db30603bfb9456e50f2c67bd982c16d208d9c0de1c354135b398ea88bee6e55110e84870bbe598856e765961a13a3d7bcecfbd381ab62752edbb09ac19af7b5f27f2fed7dd1966da821d2cfd1795c4db38c890a9aa1fa1610bdade665c194218d58eae4af9357015e8", 0x3) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) read$auto(0x3, 0x0, 0x7fffffff) 1.18462611s ago: executing program 3 (id=2165): r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x141000, 0x0) pread64$auto(r0, 0x0, 0x2, 0x7a) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 1.017571968s ago: executing program 3 (id=2166): openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x1c0860847fa6048a, 0x0) (async) r0 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x1c0860847fa6048a, 0x0) write$auto(r0, &(0x7f0000000080)=',}#-#-}}\x00', 0xe6) openat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2, 0x4) (async) r1 = openat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2, 0x4) ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0xfffffffd, 0x4b, 0x0, 0x8, 0xfffffff9, 0x3, 0x9, 0x1000, 0xfffffe00}) setsockopt$auto(r0, 0x6, 0x5, &(0x7f0000000140)='].!\\*%\x00', 0x200) (async) setsockopt$auto(r0, 0x6, 0x5, &(0x7f0000000140)='].!\\*%\x00', 0x200) clock_nanosleep$auto(0x3, 0x0, &(0x7f0000000180), &(0x7f00000001c0)={0x7, 0x75}) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) pselect6$auto(0x7f, &(0x7f0000000240)={[0x9bb, 0x9, 0x2da3, 0x5, 0x80000001, 0x8, 0x4, 0x7f, 0x2, 0x61, 0x948, 0x6, 0x0, 0x8, 0x80, 0xffffffff]}, &(0x7f00000002c0)={[0xffffffffffffffff, 0xfffffffffffff5e9, 0x1000, 0xffff, 0xfffffffffffffffe, 0x200, 0x8000000000000000, 0x0, 0x6, 0x4, 0x2, 0x0, 0x6, 0x0, 0x17d9ec6d, 0x25b6]}, &(0x7f0000000340)={[0x4, 0xaa, 0x8, 0x4, 0x6, 0x80000000, 0x1, 0x0, 0x8, 0xfc, 0x2, 0x2, 0x1, 0x101, 0x0, 0x7]}, &(0x7f00000003c0)={0x9, 0xffffffffffffff42}, &(0x7f0000000400)="70bbc9eb0bf0c11539c987617cf2d4be5550703972db7a11cd25afacd1f687461bd4bf3452e7d76662a191301d7b003e5cbc13809abd6b56432d5e3bb66950b5d83767caf6d0003987f2784033244b4ab49ed17f17c53adb357ac4186dbe4fc53a0fd13404a9dd364c16373f4f89e051798f53780aba296d3c40fbf4499c4ef95a781498") syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000004c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) nanosleep$auto(&(0x7f0000000500)={0x8, 0x3}, &(0x7f0000000540)={0x10001, 0x5}) mq_timedsend$auto(r2, &(0x7f0000000580)='nfsd\x00', 0x4, 0x9, &(0x7f00000005c0)={0x9d, 0x10000}) io_pgetevents$auto(0xb, 0x7, 0x8, &(0x7f0000000600)={0x3, 0xfffffffffffffff9, 0x7, 0x9}, &(0x7f0000000640)={0x1, 0x41}, &(0x7f00000006c0)={&(0x7f0000000680)={0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r1, 0x40305824, &(0x7f0000000740)={0x1c3, 0x1, 0x1, 0x4, 0xd, 0x0}) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x8001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x6}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x8001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x6}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b80)={'rose0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b80)={'rose0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000e80)={&(0x7f0000000840), 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x244, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf9d}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3f5cc39}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_FEATURES_HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x841}, 0x4000) 927.662451ms ago: executing program 4 (id=2167): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r0, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d7) (async) r1 = mq_open$auto(&(0x7f0000000000)='\'\x00', 0x1, 0x8, &(0x7f0000000040)={0x5, 0xff, 0x80, 0x1}) io_submit$auto(0x8, 0x5, &(0x7f00000000c0)=&(0x7f0000000080)={0x6100000, 0x7, 0xc, 0x0, 0x9, r0, 0xffffffffffffff00, 0xfffffffffffffb13, 0x4, 0x0, 0x4, r1}) 798.745213ms ago: executing program 3 (id=2168): io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc8600, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 729.553347ms ago: executing program 4 (id=2169): r0 = socket(0xa, 0x80003, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="99cb9d0ac5e7ca3d"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000100)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)={0x1320, r1, 0x4, 0x70bd2c, 0x10000, {}, [@OVS_FLOW_ATTR_MASK={0x12fe, 0x7, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}, @generic="c30fd0c4f7597fbfb0395890c0bc9741a0af52d26458c9fa9584426c5c5a5a0bf0a4aeb8185d1c4ec803949f5da3d3f5ec37c1144169df1312bf11f928e3f955e65e7c1df1dbe18dd602320e4bd1b2636ddefef6a4ef0e01f7b4ec9ba409b419fcda6a76d02d56d5211100409932ec6c23d7fe823b3fd9a73e56c2bdbe6b0c9de91794349ff4f592b6a66916c6e8463fcde18f195e1b677234d8dca114ad56f53978648df5505d30260365d3edcca96749e87cc7fb7702030b2d0a9e906b07a22da839f1", @generic="d68df5687673c9f7015038865f1e65da7b087cd198617491ee3b595b65cca24c40f7e28afc45b5ebc9d4bfa432b7f2f562865ee5e973886bfe3bdf20ec4ceefcd4c0c2ec7d62e64e545fe6e810712ebf963e4038", @typed={0x8, 0x6d, 0x0, 0x0, @fd=r0}, @generic="5741e1a026549d8bc5d2fd54cc5e4a4eeaec664c2c15fd6b6acd4bc09c6ba77439885bb2b7f24fb594c407fbc157116664fd", @nested={0x1004, 0xe1, 0x0, 0x1, [@generic="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"]}, @typed={0x21, 0xcd, 0x0, 0x0, @binary="97d66ef5a595a441c8dac4777b6e6e9019adcac1585bb1e23e119ef3a0"}, @nested={0x28, 0x5e, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r3}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0xaa, 0x0, 0x0, @uid=r6}]}, @nested={0x132, 0x12b, 0x0, 0x1, [@nested={0x4, 0xdf}, @nested={0x4, 0x2f}, @generic="bc4b4d5122093fc8589a83ffb70b87a3df35ce3adda27b048ee4bd6c3f626d6c0120f1099c6c78c53fba6cb52a4b2da7a09d9d65f7400aafed1d07b935f59fba718d75e58277ecc08418447a63430abdb2559a584a4411735275d99c5d70b2d5228de1cafb6adbe7701b3cc0b80f83697d826beef2b8a32f71", @nested={0x4, 0x15b}, @typed={0x8, 0x67, 0x0, 0x0, @pid=r7}, @generic="2811b97ae107f64ff90affe4c07eb3de778da1afd546a709b97e13c0b16c5ff4526a35b55e79b76844e9ae845a45858abe1d9eb735d626f5c09f465ea0a5908afb61373cd2fa7ee48b6b3a2a2c2ce895fd5e497dd7795380863c5b0e12572004f2837cec92a295ca72729e1a9cf03865031e0f5cab5f098dc2467275fb2f762ef11acac495074e5eb4cbd6b1945e71bee9df3744c74b3cda17b981784ef624c291"]}, @nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xcc}, @typed={0x8, 0xe3, 0x0, 0x0, @ipv4=@multicast2}]}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1320}}, 0x0) 487.916575ms ago: executing program 3 (id=2170): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x44}}, 0x4044000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(0xffffffffffffffff, 0x0, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8946, 0x24) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x5, 0x4b, 0x4}, 0x8) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, r3, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70007fc) write$auto(r0, 0x0, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card2/id\x00', 0x200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001280)=""/23, 0xfdfc) sendfile$auto(r4, r4, 0x0, 0x3) 209.793347ms ago: executing program 2 (id=2171): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48980, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)={0x1, 0x3, "9f35e80f65bf2106f286ecb4e41345a4f8b5ba0ed21e33fbe7d9441c59ad860111249c401a12495546774f18f6503db646e3ef16a926c5304a41de33fdf44d63", "42629de39c5e4a487062ffeacc166c9f2ac2679016600521e571f7f32eaa12330c98ad5471377b273aa505b46ab2e5cd3b34ac1e15d71a6ea95b488b011f64b2bd92088a00", 0x3ff, 0x71c, "a981b013ff76722191f572f75a96919ba94ed0d5b055136e00f2b25a7d5c888673087cd2a906f0a5083757ebf3232affa950c6360936420798f452d387bcc6ee"}) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x107501, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xdbb3b890005640c6, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou$W&^kjO\tK\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\b\x00\x00\x00\x00\x00\x00\x00I\xcb\x16f\xc0\x8e|8x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5FD\x15f\x90\xa2\x84', 0x16051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xa0e42, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x8, 0x810002, 0x8, 0x8000000008011, 0x3, 0x2) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/batadv_slave_0/mldv1_unsolicited_report_interval\x00', 0x2, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x301040, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2080, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 209.098639ms ago: executing program 4 (id=2179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x2000000, 0x0, 0x10}, 0x4000084) 93.648644ms ago: executing program 4 (id=2172): r0 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x7fff) process_madvise$auto_MADV_NORMAL(r0, &(0x7f0000000300)={&(0x7f0000000200)="ccd633f622b16d141dc5234f74f81b7281bace881aaa0629ce09b0619ffbb177104c9a332a9f55867ae1b00d07b0590066d4733a9abda686df377d2a6427b7c6b18b681a250daa27018bc50b1c1bbb36a8d171e015eefbc04b32ded80583b09499f3200dbf14020ab289c8356531e6a401ba7ddf1af6e417cbda2986446a0d229e58a94346e66fb4a2cd8cff513250672ef4a42ef75fb49359d47089f27fd924ee3eefa0569750bba292a3dac569ed7b5334a6aaad80ecda7da16917d79446e28216f97ea2c5a0a05be5", 0x2}, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0x4000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0x5, 0x0) (async, rerun: 32) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r2 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x11, 0x0, 0x8000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/039/001\x00', 0x300382, 0x0) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) (async) write$auto_sg_fops_sg(r3, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) ioctl$auto_VHOST_SET_VRING_ADDR2(r1, 0x4028af11, &(0x7f0000000040)={0x0, 0x2, 0x5ae9, 0xffffffffffffffff, 0x80, 0x4}) socket(0x27, 0xa, 0x5) 0s ago: executing program 1 (id=2173): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) kernel console output (not intermixed with test programs): 2950] ? kfree+0x1f6/0x6b0 [ 515.775310][T12950] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 515.775357][T12950] ? __kasan_kmalloc+0xaa/0xb0 [ 515.775384][T12950] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 515.775424][T12950] ? snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 515.775465][T12950] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 515.775529][T12950] snd_pcm_hw_refine+0x7e7/0xad0 [ 515.775583][T12950] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 515.775646][T12950] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 515.775693][T12950] snd_pcm_hw_param_near.constprop.0+0x5d0/0x850 [ 515.775752][T12950] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 515.775798][T12950] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 515.775842][T12950] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 515.775896][T12950] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 515.775958][T12950] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 515.776000][T12950] ? get_pid_task+0xfc/0x250 [ 515.776038][T12950] ? get_pid_task+0xfc/0x250 [ 515.776095][T12950] ? __pfx___might_resched+0x10/0x10 [ 515.776151][T12950] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 515.776198][T12950] snd_pcm_oss_write+0x4bb/0xa30 [ 515.776242][T12950] ? bpf_lsm_file_permission+0x9/0x10 [ 515.776272][T12950] ? security_file_permission+0x76/0x210 [ 515.776325][T12950] vfs_write+0x2aa/0x1070 [ 515.776359][T12950] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 515.776405][T12950] ? __pfx_vfs_write+0x10/0x10 [ 515.776433][T12950] ? find_held_lock+0x2b/0x80 [ 515.776463][T12950] ? __fget_files+0x215/0x3d0 [ 515.776494][T12950] ? __fget_files+0x215/0x3d0 [ 515.776534][T12950] ? __fget_files+0x21f/0x3d0 [ 515.776578][T12950] ksys_write+0x12a/0x250 [ 515.776611][T12950] ? __pfx_ksys_write+0x10/0x10 [ 515.776656][T12950] do_syscall_64+0x106/0xf80 [ 515.776687][T12950] ? clear_bhb_loop+0x40/0x90 [ 515.776735][T12950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.776766][T12950] RIP: 0033:0x7f3b44d9c819 [ 515.776792][T12950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.776822][T12950] RSP: 002b:00007f3b45d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 515.776854][T12950] RAX: ffffffffffffffda RBX: 00007f3b45015fa0 RCX: 00007f3b44d9c819 [ 515.776874][T12950] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 515.776892][T12950] RBP: 00007f3b44e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 515.776908][T12950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.776925][T12950] R13: 00007f3b45016038 R14: 00007f3b45015fa0 R15: 00007ffe7348db38 [ 515.776964][T12950] [ 517.046943][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1569'. [ 517.950276][T12989] FAULT_INJECTION: forcing a failure. [ 517.950276][T12989] name failslab, interval 1, probability 0, space 0, times 0 [ 517.991136][T12989] CPU: 1 UID: 0 PID: 12989 Comm: syz.1.1573 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.991188][T12989] Tainted: [L]=SOFTLOCKUP [ 517.991199][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 517.991217][T12989] Call Trace: [ 517.991227][T12989] [ 517.991239][T12989] dump_stack_lvl+0x100/0x190 [ 517.991291][T12989] should_fail_ex.cold+0x5/0xa [ 517.991330][T12989] should_failslab+0xc2/0x120 [ 517.991365][T12989] __kmalloc_cache_noprof+0x7a/0x6f0 [ 517.991406][T12989] ? append_filter_err+0xb8/0x620 [ 517.991451][T12989] ? process_preds+0x93d/0x1d90 [ 517.991502][T12989] append_filter_err+0xb8/0x620 [ 517.991549][T12989] ? create_filter_start.constprop.0+0x134/0x310 [ 517.991603][T12989] create_filter+0x1a6/0x210 [ 517.991652][T12989] ? __pfx_create_filter+0x10/0x10 [ 517.991713][T12989] ? find_held_lock+0x2b/0x80 [ 517.991749][T12989] apply_event_filter+0x220/0x500 [ 517.991801][T12989] ? __pfx_apply_event_filter+0x10/0x10 [ 517.991865][T12989] event_filter_write+0x16d/0x290 [ 517.991907][T12989] vfs_write+0x2aa/0x1070 [ 517.991938][T12989] ? __pfx_event_filter_write+0x10/0x10 [ 517.991980][T12989] ? __pfx_vfs_write+0x10/0x10 [ 517.992008][T12989] ? __fget_files+0x215/0x3d0 [ 517.992049][T12989] ? __fget_files+0x21f/0x3d0 [ 517.992091][T12989] ksys_write+0x12a/0x250 [ 517.992122][T12989] ? __pfx_ksys_write+0x10/0x10 [ 517.992165][T12989] do_syscall_64+0x106/0xf80 [ 517.992196][T12989] ? clear_bhb_loop+0x40/0x90 [ 517.992234][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.992266][T12989] RIP: 0033:0x7f99f4b9c819 [ 517.992292][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.992321][T12989] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 517.992349][T12989] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 517.992368][T12989] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 517.992385][T12989] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 517.992403][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.992420][T12989] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 517.992462][T12989] [ 519.406181][T13000] random: crng reseeded on system resumption [ 520.153854][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1584'. [ 521.642460][T13048] FAULT_INJECTION: forcing a failure. [ 521.642460][T13048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.664941][T13048] CPU: 1 UID: 0 PID: 13048 Comm: syz.3.1588 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.664996][T13048] Tainted: [L]=SOFTLOCKUP [ 521.665008][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.665025][T13048] Call Trace: [ 521.665036][T13048] [ 521.665048][T13048] dump_stack_lvl+0x100/0x190 [ 521.665099][T13048] should_fail_ex.cold+0x5/0xa [ 521.665130][T13048] ? prepare_alloc_pages+0x16d/0x5f0 [ 521.665171][T13048] should_fail_alloc_page+0xeb/0x140 [ 521.665208][T13048] prepare_alloc_pages+0x1f0/0x5f0 [ 521.665249][T13048] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 521.665299][T13048] ? rcu_is_watching+0x12/0xc0 [ 521.665339][T13048] ? trace_mm_page_alloc+0x17a/0x1d0 [ 521.665376][T13048] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 521.665431][T13048] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 521.665486][T13048] ? find_held_lock+0x2b/0x80 [ 521.665516][T13048] ? is_bpf_text_address+0x8a/0x1a0 [ 521.665562][T13048] ? is_bpf_text_address+0x8a/0x1a0 [ 521.665610][T13048] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 521.665644][T13048] ? is_bpf_text_address+0x94/0x1a0 [ 521.665692][T13048] ? kernel_text_address+0x8d/0x100 [ 521.665734][T13048] ? __kernel_text_address+0xd/0x30 [ 521.665779][T13048] ? unwind_get_return_address+0x59/0xa0 [ 521.665823][T13048] alloc_pages_bulk_noprof+0x782/0x1490 [ 521.665888][T13048] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 521.665946][T13048] ? kasan_save_stack+0x30/0x50 [ 521.665993][T13048] ? alloc_pages_noprof+0x238/0x390 [ 521.666033][T13048] __kasan_populate_vmalloc+0xf0/0x210 [ 521.666090][T13048] alloc_vmap_area+0x95d/0x2bd0 [ 521.666143][T13048] ? __pfx_alloc_vmap_area+0x10/0x10 [ 521.666190][T13048] __get_vm_area_node+0x1ca/0x330 [ 521.666231][T13048] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 521.666270][T13048] get_vm_area_caller+0x71/0xa0 [ 521.666307][T13048] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 521.666347][T13048] vmap+0x131/0x2f0 [ 521.666382][T13048] ? __pfx_vmap+0x10/0x10 [ 521.666428][T13048] ringbuf_map_alloc+0x3a1/0x8b0 [ 521.666475][T13048] ? __pfx_ringbuf_map_mem_usage+0x10/0x10 [ 521.666514][T13048] map_create+0x84e/0x2ba0 [ 521.666543][T13048] ? futex_unqueue+0x13d/0x2c0 [ 521.666581][T13048] ? __futex_wait+0x256/0x300 [ 521.666637][T13048] ? __pfx_map_create+0x10/0x10 [ 521.666666][T13048] ? __might_fault+0xc5/0x140 [ 521.666709][T13048] ? __might_fault+0xc5/0x140 [ 521.666768][T13048] __sys_bpf+0x2091/0x4b90 [ 521.666810][T13048] ? __pfx___sys_bpf+0x10/0x10 [ 521.666846][T13048] ? __pfx_futex_wait+0x10/0x10 [ 521.666901][T13048] ? putname+0xb1/0x110 [ 521.666933][T13048] ? kmem_cache_free+0x124/0x6a0 [ 521.666991][T13048] ? do_futex+0x192/0x350 [ 521.667051][T13048] ? __x64_sys_openat+0x12d/0x210 [ 521.667094][T13048] ? xfd_validate_state+0x129/0x190 [ 521.667149][T13048] __x64_sys_bpf+0x7b/0xc0 [ 521.667185][T13048] ? lockdep_hardirqs_on+0x78/0x100 [ 521.667217][T13048] do_syscall_64+0x106/0xf80 [ 521.667245][T13048] ? clear_bhb_loop+0x40/0x90 [ 521.667284][T13048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.667315][T13048] RIP: 0033:0x7fabda19c819 [ 521.667341][T13048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.667370][T13048] RSP: 002b:00007fabdafaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.667400][T13048] RAX: ffffffffffffffda RBX: 00007fabda415fa0 RCX: 00007fabda19c819 [ 521.667419][T13048] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 521.667437][T13048] RBP: 00007fabda232c91 R08: 0000000000000000 R09: 0000000000000000 [ 521.667455][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.667473][T13048] R13: 00007fabda416038 R14: 00007fabda415fa0 R15: 00007ffc457b8268 [ 521.667514][T13048] [ 522.719671][T12253] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 522.730503][T12253] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 523.110454][T12253] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 523.110498][T12253] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 523.126349][T12253] Bluetooth: hci0: Dropping invalid advertising data [ 523.134700][T12253] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 523.134744][T12253] Bluetooth: hci0: Dropping invalid advertising data [ 523.150081][T12253] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 523.150136][T12253] Bluetooth: hci0: Malformed LE Event: 0x02 [ 523.754744][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1597'. [ 523.942685][T13077] [U] ^@ [ 524.652257][T13109] block2mtd: illegal erase size [ 524.872019][T13115] FAULT_INJECTION: forcing a failure. [ 524.872019][T13115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.020324][T13115] CPU: 0 UID: 0 PID: 13115 Comm: syz.1.1603 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.020373][T13115] Tainted: [L]=SOFTLOCKUP [ 525.020381][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.020391][T13115] Call Trace: [ 525.020398][T13115] [ 525.020405][T13115] dump_stack_lvl+0x100/0x190 [ 525.020437][T13115] should_fail_ex.cold+0x5/0xa [ 525.020460][T13115] _copy_from_user+0x2e/0xd0 [ 525.020484][T13115] __sys_bpf+0x243/0x4b90 [ 525.020510][T13115] ? __pfx___sys_bpf+0x10/0x10 [ 525.020530][T13115] ? proc_fail_nth_write+0x9f/0x220 [ 525.020553][T13115] ? find_held_lock+0x2b/0x80 [ 525.020577][T13115] ? find_held_lock+0x2b/0x80 [ 525.020594][T13115] ? ksys_write+0x190/0x250 [ 525.020617][T13115] ? __mutex_unlock_slowpath+0x15c/0x790 [ 525.020638][T13115] ? __fget_files+0x215/0x3d0 [ 525.020668][T13115] ? fput+0x79/0x100 [ 525.020689][T13115] ? ksys_write+0x1ac/0x250 [ 525.020707][T13115] ? __pfx_ksys_write+0x10/0x10 [ 525.020735][T13115] __x64_sys_bpf+0x7b/0xc0 [ 525.020758][T13115] ? lockdep_hardirqs_on+0x78/0x100 [ 525.020776][T13115] do_syscall_64+0x106/0xf80 [ 525.020793][T13115] ? clear_bhb_loop+0x40/0x90 [ 525.020816][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.020835][T13115] RIP: 0033:0x7f99f4b9c819 [ 525.020851][T13115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.020868][T13115] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.020886][T13115] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 525.020897][T13115] RDX: 00000000000006f4 RSI: 0000200000000380 RDI: 0000000000000000 [ 525.020908][T13115] RBP: 00007f99f5ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 525.020918][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.020929][T13115] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 525.020952][T13115] [ 526.800732][T13144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1609'. [ 528.112304][T13158] FAULT_INJECTION: forcing a failure. [ 528.112304][T13158] name failslab, interval 1, probability 0, space 0, times 0 [ 528.194575][T13158] CPU: 0 UID: 0 PID: 13158 Comm: syz.1.1613 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.194608][T13158] Tainted: [L]=SOFTLOCKUP [ 528.194615][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 528.194625][T13158] Call Trace: [ 528.194632][T13158] [ 528.194640][T13158] dump_stack_lvl+0x100/0x190 [ 528.194672][T13158] should_fail_ex.cold+0x5/0xa [ 528.194697][T13158] should_failslab+0xc2/0x120 [ 528.194718][T13158] __kmalloc_cache_noprof+0x7a/0x6f0 [ 528.194743][T13158] ? append_filter_err+0xb8/0x620 [ 528.194770][T13158] ? process_preds+0x93d/0x1d90 [ 528.194801][T13158] append_filter_err+0xb8/0x620 [ 528.194828][T13158] ? create_filter_start.constprop.0+0x134/0x310 [ 528.194860][T13158] create_filter+0x1a6/0x210 [ 528.194889][T13158] ? __pfx_create_filter+0x10/0x10 [ 528.194923][T13158] ? find_held_lock+0x2b/0x80 [ 528.194951][T13158] apply_event_filter+0x220/0x500 [ 528.194982][T13158] ? __pfx_apply_event_filter+0x10/0x10 [ 528.195017][T13158] event_filter_write+0x16d/0x290 [ 528.195042][T13158] vfs_write+0x2aa/0x1070 [ 528.195060][T13158] ? __pfx_event_filter_write+0x10/0x10 [ 528.195086][T13158] ? __pfx_vfs_write+0x10/0x10 [ 528.195104][T13158] ? __fget_files+0x215/0x3d0 [ 528.195128][T13158] ? __fget_files+0x21f/0x3d0 [ 528.195158][T13158] ksys_write+0x12a/0x250 [ 528.195177][T13158] ? __pfx_ksys_write+0x10/0x10 [ 528.195202][T13158] do_syscall_64+0x106/0xf80 [ 528.195220][T13158] ? clear_bhb_loop+0x40/0x90 [ 528.195242][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.195261][T13158] RIP: 0033:0x7f99f4b9c819 [ 528.195277][T13158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.195294][T13158] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.195312][T13158] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 528.195323][T13158] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 528.195333][T13158] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 528.195343][T13158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.195353][T13158] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 528.195378][T13158] [ 529.066330][T13172] FAULT_INJECTION: forcing a failure. [ 529.066330][T13172] name failslab, interval 1, probability 0, space 0, times 0 [ 529.112786][T13172] CPU: 1 UID: 0 PID: 13172 Comm: syz.0.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.112829][T13172] Tainted: [L]=SOFTLOCKUP [ 529.112839][T13172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.112856][T13172] Call Trace: [ 529.112865][T13172] [ 529.112875][T13172] dump_stack_lvl+0x100/0x190 [ 529.112923][T13172] should_fail_ex.cold+0x5/0xa [ 529.112956][T13172] ? do_sys_poll+0x273/0xeb0 [ 529.112982][T13172] should_failslab+0xc2/0x120 [ 529.113015][T13172] __kmalloc_noprof+0xe0/0x850 [ 529.113066][T13172] do_sys_poll+0x273/0xeb0 [ 529.113092][T13172] ? lockdep_hardirqs_on+0x78/0x100 [ 529.113128][T13172] ? trace_sched_exit_tp+0x13a/0x180 [ 529.113166][T13172] ? __pfx_do_sys_poll+0x10/0x10 [ 529.113194][T13172] ? __lock_acquire+0x4a5/0x2630 [ 529.113263][T13172] ? futex_unqueue+0x13d/0x2c0 [ 529.113368][T13172] ? find_held_lock+0x2b/0x80 [ 529.113396][T13172] ? timespec64_add_safe+0x192/0x220 [ 529.113430][T13172] ? __pfx_timespec64_add_safe+0x10/0x10 [ 529.113463][T13172] ? set_user_sigmask+0x1e1/0x270 [ 529.113491][T13172] ? __pfx_set_user_sigmask+0x10/0x10 [ 529.113520][T13172] ? read_tsc+0x9/0x20 [ 529.113552][T13172] ? ktime_get_ts64+0x256/0x3f0 [ 529.113588][T13172] __x64_sys_ppoll+0x2b5/0x350 [ 529.113623][T13172] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 529.113675][T13172] do_syscall_64+0x106/0xf80 [ 529.113702][T13172] ? clear_bhb_loop+0x40/0x90 [ 529.113738][T13172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.113766][T13172] RIP: 0033:0x7f503eb9c819 [ 529.113790][T13172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.113830][T13172] RSP: 002b:00007f503fac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 529.113858][T13172] RAX: ffffffffffffffda RBX: 00007f503ee15fa0 RCX: 00007f503eb9c819 [ 529.113876][T13172] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 529.113893][T13172] RBP: 00007f503ec32c91 R08: 0000000000000008 R09: 0000000000000000 [ 529.113908][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.113923][T13172] R13: 00007f503ee16038 R14: 00007f503ee15fa0 R15: 00007ffc2a3e4648 [ 529.113960][T13172] [ 530.055344][T13189] FAULT_INJECTION: forcing a failure. [ 530.055344][T13189] name failslab, interval 1, probability 0, space 0, times 0 [ 530.105234][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.0.1619 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.105286][T13189] Tainted: [L]=SOFTLOCKUP [ 530.105298][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.105315][T13189] Call Trace: [ 530.105325][T13189] [ 530.105337][T13189] dump_stack_lvl+0x100/0x190 [ 530.105389][T13189] should_fail_ex.cold+0x5/0xa [ 530.105426][T13189] should_failslab+0xc2/0x120 [ 530.105454][T13189] __kmalloc_cache_noprof+0x7a/0x6f0 [ 530.105492][T13189] ? append_filter_err+0xb8/0x620 [ 530.105528][T13189] ? process_preds+0x93d/0x1d90 [ 530.105569][T13189] append_filter_err+0xb8/0x620 [ 530.105604][T13189] ? create_filter_start.constprop.0+0x134/0x310 [ 530.105645][T13189] create_filter+0x1a6/0x210 [ 530.105696][T13189] ? __pfx_create_filter+0x10/0x10 [ 530.105735][T13189] ? find_held_lock+0x2b/0x80 [ 530.105763][T13189] apply_event_filter+0x220/0x500 [ 530.105802][T13189] ? __pfx_apply_event_filter+0x10/0x10 [ 530.105850][T13189] event_filter_write+0x16d/0x290 [ 530.105882][T13189] vfs_write+0x2aa/0x1070 [ 530.105908][T13189] ? __pfx_event_filter_write+0x10/0x10 [ 530.105940][T13189] ? __pfx_vfs_write+0x10/0x10 [ 530.105962][T13189] ? __fget_files+0x215/0x3d0 [ 530.105993][T13189] ? __fget_files+0x21f/0x3d0 [ 530.106025][T13189] ksys_write+0x12a/0x250 [ 530.106048][T13189] ? __pfx_ksys_write+0x10/0x10 [ 530.106080][T13189] do_syscall_64+0x106/0xf80 [ 530.106103][T13189] ? clear_bhb_loop+0x40/0x90 [ 530.106133][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.106158][T13189] RIP: 0033:0x7f503eb9c819 [ 530.106179][T13189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.106202][T13189] RSP: 002b:00007f503fac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.106225][T13189] RAX: ffffffffffffffda RBX: 00007f503ee15fa0 RCX: 00007f503eb9c819 [ 530.106241][T13189] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 530.106254][T13189] RBP: 00007f503ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 530.106268][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.106282][T13189] R13: 00007f503ee16038 R14: 00007f503ee15fa0 R15: 00007ffc2a3e4648 [ 530.106315][T13189] [ 531.687629][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1624'. [ 532.658404][T13230] FAULT_INJECTION: forcing a failure. [ 532.658404][T13230] name failslab, interval 1, probability 0, space 0, times 0 [ 532.799570][T13230] CPU: 1 UID: 0 PID: 13230 Comm: syz.0.1628 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.799619][T13230] Tainted: [L]=SOFTLOCKUP [ 532.799629][T13230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.799643][T13230] Call Trace: [ 532.799653][T13230] [ 532.799662][T13230] dump_stack_lvl+0x100/0x190 [ 532.799710][T13230] should_fail_ex.cold+0x5/0xa [ 532.799746][T13230] should_failslab+0xc2/0x120 [ 532.799779][T13230] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 532.799824][T13230] ? create_new_namespaces+0x30/0xac0 [ 532.799856][T13230] ? rcu_is_watching+0x12/0xc0 [ 532.799971][T13230] create_new_namespaces+0x30/0xac0 [ 532.800006][T13230] ? bpf_lsm_capable+0x9/0x10 [ 532.800036][T13230] ? security_capable+0x80/0x260 [ 532.800070][T13230] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 532.800116][T13230] ksys_unshare+0x473/0xad0 [ 532.800154][T13230] ? __pfx_ksys_unshare+0x10/0x10 [ 532.800190][T13230] ? ksys_write+0x1ac/0x250 [ 532.800228][T13230] __x64_sys_unshare+0x31/0x40 [ 532.800264][T13230] do_syscall_64+0x106/0xf80 [ 532.800291][T13230] ? clear_bhb_loop+0x40/0x90 [ 532.800325][T13230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.800354][T13230] RIP: 0033:0x7f503eb9c819 [ 532.800378][T13230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.800404][T13230] RSP: 002b:00007f503fac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 532.800433][T13230] RAX: ffffffffffffffda RBX: 00007f503ee15fa0 RCX: 00007f503eb9c819 [ 532.800451][T13230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 532.800468][T13230] RBP: 00007f503fac4090 R08: 0000000000000000 R09: 0000000000000000 [ 532.800485][T13230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.800502][T13230] R13: 00007f503ee16038 R14: 00007f503ee15fa0 R15: 00007ffc2a3e4648 [ 532.800539][T13230] [ 535.641939][T12253] block nbd13: Receive control failed (result -32) [ 535.994007][T13267] [U] ^@ [ 536.676738][T13290] FAULT_INJECTION: forcing a failure. [ 536.676738][T13290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 536.708658][T13290] CPU: 1 UID: 0 PID: 13290 Comm: syz.1.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.708712][T13290] Tainted: [L]=SOFTLOCKUP [ 536.708723][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 536.708741][T13290] Call Trace: [ 536.708752][T13290] [ 536.708764][T13290] dump_stack_lvl+0x100/0x190 [ 536.708816][T13290] should_fail_ex.cold+0x5/0xa [ 536.708850][T13290] ? prepare_alloc_pages+0x16d/0x5f0 [ 536.708906][T13290] should_fail_alloc_page+0xeb/0x140 [ 536.708944][T13290] prepare_alloc_pages+0x1f0/0x5f0 [ 536.708990][T13290] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 536.709046][T13290] ? rcu_is_watching+0x12/0xc0 [ 536.709095][T13290] ? trace_mm_page_alloc+0x17a/0x1d0 [ 536.709134][T13290] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 536.709190][T13290] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 536.709246][T13290] ? find_held_lock+0x2b/0x80 [ 536.709278][T13290] ? is_bpf_text_address+0x8a/0x1a0 [ 536.709324][T13290] ? is_bpf_text_address+0x8a/0x1a0 [ 536.709374][T13290] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.709411][T13290] ? is_bpf_text_address+0x94/0x1a0 [ 536.709459][T13290] ? kernel_text_address+0x8d/0x100 [ 536.709505][T13290] ? __kernel_text_address+0xd/0x30 [ 536.709550][T13290] ? unwind_get_return_address+0x59/0xa0 [ 536.709594][T13290] alloc_pages_bulk_noprof+0x782/0x1490 [ 536.709652][T13290] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 536.709706][T13290] ? kasan_save_stack+0x30/0x50 [ 536.709745][T13290] ? alloc_pages_noprof+0x238/0x390 [ 536.709786][T13290] __kasan_populate_vmalloc+0xf0/0x210 [ 536.709841][T13290] alloc_vmap_area+0x95d/0x2bd0 [ 536.709901][T13290] ? __pfx_alloc_vmap_area+0x10/0x10 [ 536.709947][T13290] __get_vm_area_node+0x1ca/0x330 [ 536.709990][T13290] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 536.710032][T13290] get_vm_area_caller+0x71/0xa0 [ 536.710069][T13290] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 536.710110][T13290] vmap+0x131/0x2f0 [ 536.710147][T13290] ? __pfx_vmap+0x10/0x10 [ 536.710193][T13290] ringbuf_map_alloc+0x3a1/0x8b0 [ 536.710241][T13290] ? __pfx_ringbuf_map_mem_usage+0x10/0x10 [ 536.710279][T13290] map_create+0x84e/0x2ba0 [ 536.710309][T13290] ? futex_unqueue+0x13d/0x2c0 [ 536.710350][T13290] ? __futex_wait+0x256/0x300 [ 536.710405][T13290] ? __pfx_map_create+0x10/0x10 [ 536.710434][T13290] ? __might_fault+0xc5/0x140 [ 536.710478][T13290] ? __might_fault+0xc5/0x140 [ 536.710539][T13290] __sys_bpf+0x2091/0x4b90 [ 536.710582][T13290] ? __pfx___sys_bpf+0x10/0x10 [ 536.710618][T13290] ? __pfx_futex_wait+0x10/0x10 [ 536.710675][T13290] ? putname+0xb1/0x110 [ 536.710708][T13290] ? kmem_cache_free+0x124/0x6a0 [ 536.710759][T13290] ? do_futex+0x192/0x350 [ 536.710821][T13290] ? __x64_sys_openat+0x12d/0x210 [ 536.710874][T13290] ? xfd_validate_state+0x129/0x190 [ 536.710931][T13290] __x64_sys_bpf+0x7b/0xc0 [ 536.710968][T13290] ? lockdep_hardirqs_on+0x78/0x100 [ 536.711002][T13290] do_syscall_64+0x106/0xf80 [ 536.711032][T13290] ? clear_bhb_loop+0x40/0x90 [ 536.711071][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.711103][T13290] RIP: 0033:0x7f99f4b9c819 [ 536.711131][T13290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.711160][T13290] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.711192][T13290] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 536.711212][T13290] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 536.711231][T13290] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 536.711249][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.711268][T13290] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 536.711309][T13290] [ 537.607187][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'. [ 539.291991][T13331] FAULT_INJECTION: forcing a failure. [ 539.291991][T13331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.306366][T13331] CPU: 0 UID: 0 PID: 13331 Comm: syz.1.1654 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.306415][T13331] Tainted: [L]=SOFTLOCKUP [ 539.306426][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 539.306444][T13331] Call Trace: [ 539.306454][T13331] [ 539.306464][T13331] dump_stack_lvl+0x100/0x190 [ 539.306513][T13331] should_fail_ex.cold+0x5/0xa [ 539.306544][T13331] ? prepare_alloc_pages+0x16d/0x5f0 [ 539.306584][T13331] should_fail_alloc_page+0xeb/0x140 [ 539.306621][T13331] prepare_alloc_pages+0x1f0/0x5f0 [ 539.306663][T13331] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 539.306715][T13331] ? rcu_is_watching+0x12/0xc0 [ 539.306762][T13331] ? trace_mm_page_alloc+0x17a/0x1d0 [ 539.306799][T13331] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 539.306854][T13331] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.306917][T13331] ? find_held_lock+0x2b/0x80 [ 539.306948][T13331] ? is_bpf_text_address+0x8a/0x1a0 [ 539.306996][T13331] ? is_bpf_text_address+0x8a/0x1a0 [ 539.307047][T13331] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 539.307081][T13331] ? is_bpf_text_address+0x94/0x1a0 [ 539.307128][T13331] ? kernel_text_address+0x8d/0x100 [ 539.307172][T13331] ? __kernel_text_address+0xd/0x30 [ 539.307213][T13331] ? unwind_get_return_address+0x59/0xa0 [ 539.307260][T13331] alloc_pages_bulk_noprof+0x782/0x1490 [ 539.307326][T13331] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 539.307379][T13331] ? kasan_save_stack+0x30/0x50 [ 539.307418][T13331] ? alloc_pages_noprof+0x238/0x390 [ 539.307457][T13331] __kasan_populate_vmalloc+0xf0/0x210 [ 539.307515][T13331] alloc_vmap_area+0x95d/0x2bd0 [ 539.307566][T13331] ? __pfx_alloc_vmap_area+0x10/0x10 [ 539.307612][T13331] __get_vm_area_node+0x1ca/0x330 [ 539.307654][T13331] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 539.307693][T13331] get_vm_area_caller+0x71/0xa0 [ 539.307730][T13331] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 539.307770][T13331] vmap+0x131/0x2f0 [ 539.307805][T13331] ? __pfx_vmap+0x10/0x10 [ 539.307852][T13331] ringbuf_map_alloc+0x3a1/0x8b0 [ 539.307906][T13331] ? __pfx_ringbuf_map_mem_usage+0x10/0x10 [ 539.307945][T13331] map_create+0x84e/0x2ba0 [ 539.307989][T13331] ? preempt_schedule_thunk+0x16/0x30 [ 539.308040][T13331] ? __pfx_map_create+0x10/0x10 [ 539.308070][T13331] ? __might_fault+0xc5/0x140 [ 539.308108][T13331] ? __might_fault+0xc5/0x140 [ 539.308166][T13331] __sys_bpf+0x2091/0x4b90 [ 539.308200][T13331] ? futex_private_hash_put+0x107/0x1c0 [ 539.308241][T13331] ? __pfx___sys_bpf+0x10/0x10 [ 539.308282][T13331] ? __pfx_futex_wake+0x10/0x10 [ 539.308335][T13331] ? putname+0xb1/0x110 [ 539.308368][T13331] ? kmem_cache_free+0x124/0x6a0 [ 539.308420][T13331] ? do_futex+0x192/0x350 [ 539.308481][T13331] ? __x64_sys_openat+0x12d/0x210 [ 539.308525][T13331] ? xfd_validate_state+0x129/0x190 [ 539.308581][T13331] __x64_sys_bpf+0x7b/0xc0 [ 539.308618][T13331] ? lockdep_hardirqs_on+0x78/0x100 [ 539.308649][T13331] do_syscall_64+0x106/0xf80 [ 539.308678][T13331] ? clear_bhb_loop+0x40/0x90 [ 539.308716][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.308748][T13331] RIP: 0033:0x7f99f4b9c819 [ 539.308776][T13331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.308806][T13331] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.308835][T13331] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 539.308856][T13331] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 539.308875][T13331] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 539.308902][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.308920][T13331] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 539.308962][T13331] [ 539.887156][T13340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1657'. [ 541.925423][T13373] FAULT_INJECTION: forcing a failure. [ 541.925423][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 541.945937][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.1.1667 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.945989][T13373] Tainted: [L]=SOFTLOCKUP [ 541.946000][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 541.946018][T13373] Call Trace: [ 541.946029][T13373] [ 541.946041][T13373] dump_stack_lvl+0x100/0x190 [ 541.946095][T13373] should_fail_ex.cold+0x5/0xa [ 541.946134][T13373] should_failslab+0xc2/0x120 [ 541.946169][T13373] __kmalloc_cache_noprof+0x7a/0x6f0 [ 541.946211][T13373] ? append_filter_err+0xb8/0x620 [ 541.946255][T13373] ? process_preds+0x93d/0x1d90 [ 541.946309][T13373] append_filter_err+0xb8/0x620 [ 541.946352][T13373] ? create_filter_start.constprop.0+0x134/0x310 [ 541.946402][T13373] create_filter+0x1a6/0x210 [ 541.946449][T13373] ? __pfx_create_filter+0x10/0x10 [ 541.946498][T13373] ? find_held_lock+0x2b/0x80 [ 541.946534][T13373] apply_event_filter+0x220/0x500 [ 541.946579][T13373] ? __pfx_apply_event_filter+0x10/0x10 [ 541.946649][T13373] event_filter_write+0x16d/0x290 [ 541.946691][T13373] vfs_write+0x2aa/0x1070 [ 541.946724][T13373] ? __pfx_event_filter_write+0x10/0x10 [ 541.946765][T13373] ? __pfx_vfs_write+0x10/0x10 [ 541.946795][T13373] ? __fget_files+0x215/0x3d0 [ 541.946836][T13373] ? __fget_files+0x21f/0x3d0 [ 541.946878][T13373] ksys_write+0x12a/0x250 [ 541.946909][T13373] ? __pfx_ksys_write+0x10/0x10 [ 541.946952][T13373] do_syscall_64+0x106/0xf80 [ 541.946981][T13373] ? clear_bhb_loop+0x40/0x90 [ 541.947020][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.947052][T13373] RIP: 0033:0x7f99f4b9c819 [ 541.947078][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.947108][T13373] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.947136][T13373] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 541.947155][T13373] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 541.947174][T13373] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 541.947191][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.947209][T13373] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 541.947252][T13373] [ 542.191757][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1668'. [ 543.700239][T13416] aoe: invalid device specification [ 544.004116][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 545.911812][T12253] block nbd14: Receive control failed (result -32) [ 546.252081][T12594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.274590][T12594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.286067][T12594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.295082][T12594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.302860][T12594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.465193][T13437] FAULT_INJECTION: forcing a failure. [ 546.465193][T13437] name failslab, interval 1, probability 0, space 0, times 0 [ 546.506163][T13437] CPU: 1 UID: 0 PID: 13437 Comm: syz.3.1683 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.506216][T13437] Tainted: [L]=SOFTLOCKUP [ 546.506229][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 546.506247][T13437] Call Trace: [ 546.506257][T13437] [ 546.506271][T13437] dump_stack_lvl+0x100/0x190 [ 546.506324][T13437] should_fail_ex.cold+0x5/0xa [ 546.506363][T13437] should_failslab+0xc2/0x120 [ 546.506400][T13437] __kmalloc_cache_noprof+0x7a/0x6f0 [ 546.506444][T13437] ? append_filter_err+0xb8/0x620 [ 546.506491][T13437] ? process_preds+0x93d/0x1d90 [ 546.506546][T13437] append_filter_err+0xb8/0x620 [ 546.506594][T13437] ? create_filter_start.constprop.0+0x134/0x310 [ 546.506649][T13437] create_filter+0x1a6/0x210 [ 546.506700][T13437] ? __pfx_create_filter+0x10/0x10 [ 546.506753][T13437] ? find_held_lock+0x2b/0x80 [ 546.506791][T13437] apply_event_filter+0x220/0x500 [ 546.506843][T13437] ? __pfx_apply_event_filter+0x10/0x10 [ 546.506915][T13437] event_filter_write+0x16d/0x290 [ 546.506956][T13437] vfs_write+0x2aa/0x1070 [ 546.506991][T13437] ? __pfx_event_filter_write+0x10/0x10 [ 546.507030][T13437] ? __pfx_vfs_write+0x10/0x10 [ 546.507059][T13437] ? __fget_files+0x215/0x3d0 [ 546.507100][T13437] ? __fget_files+0x21f/0x3d0 [ 546.507143][T13437] ksys_write+0x12a/0x250 [ 546.507173][T13437] ? __pfx_ksys_write+0x10/0x10 [ 546.507217][T13437] do_syscall_64+0x106/0xf80 [ 546.507248][T13437] ? clear_bhb_loop+0x40/0x90 [ 546.507288][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.507320][T13437] RIP: 0033:0x7fabda19c819 [ 546.507349][T13437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.507379][T13437] RSP: 002b:00007fabdafaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.507409][T13437] RAX: ffffffffffffffda RBX: 00007fabda415fa0 RCX: 00007fabda19c819 [ 546.507430][T13437] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 546.507447][T13437] RBP: 00007fabda232c91 R08: 0000000000000000 R09: 0000000000000000 [ 546.507463][T13437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.507481][T13437] R13: 00007fabda416038 R14: 00007fabda415fa0 R15: 00007ffc457b8268 [ 546.507523][T13437] [ 547.245806][T13441] chnl_net:caif_netlink_parms(): no params data found [ 547.591179][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.607530][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.622849][T13441] bridge_slave_0: entered allmulticast mode [ 547.646839][T13441] bridge_slave_0: entered promiscuous mode [ 547.700677][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.712263][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.720234][T13441] bridge_slave_1: entered allmulticast mode [ 547.751530][T13441] bridge_slave_1: entered promiscuous mode [ 547.906557][T13441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.929255][T13441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.936991][T12594] block nbd15: Receive control failed (result -32) [ 548.049163][T13441] team0: Port device team_slave_0 added [ 548.110216][T13441] team0: Port device team_slave_1 added [ 548.313172][T13441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.334653][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.374669][T12594] Bluetooth: hci2: command tx timeout [ 548.376530][T13441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.433576][T13441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.450927][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.537991][T13441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.759410][T13441] hsr_slave_0: entered promiscuous mode [ 548.767734][T13441] hsr_slave_1: entered promiscuous mode [ 548.774181][T13441] debugfs: 'hsr0' already exists in 'hsr' [ 548.794590][T13441] Cannot create hsr debugfs directory [ 549.196101][T13441] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 549.232190][T13441] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 549.263142][T13441] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 549.287153][T13441] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 549.480276][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.509252][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.530427][T12250] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.537735][T12250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.558950][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.566170][T12250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.323220][T13441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.458466][T12594] Bluetooth: hci2: command tx timeout [ 551.333409][T13441] veth0_vlan: entered promiscuous mode [ 551.370458][T13441] veth1_vlan: entered promiscuous mode [ 551.442081][T13441] veth0_macvtap: entered promiscuous mode [ 551.462273][T13441] veth1_macvtap: entered promiscuous mode [ 551.487014][T13441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.502890][T13441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.527899][T12285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.537426][T12285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.553442][T12285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.574597][T12285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.682319][T12250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.699369][T12250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.750611][T12250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.767406][T12250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.547018][T12594] Bluetooth: hci2: command tx timeout [ 554.417797][T12594] block nbd16: Receive control failed (result -32) [ 554.628715][T12594] Bluetooth: hci2: command tx timeout [ 555.534349][T13631] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 556.011623][T12285] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.179423][T12285] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.341241][T12285] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.491593][T12285] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.545674][T12253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 556.558973][T12253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 556.573603][T12253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 556.582071][T12253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 556.590466][T12253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 557.103225][T12285] bridge_slave_1: left allmulticast mode [ 557.133233][T12285] bridge_slave_1: left promiscuous mode [ 557.157218][T12285] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.187830][T12285] bridge_slave_0: left allmulticast mode [ 557.195504][T12285] bridge_slave_0: left promiscuous mode [ 557.204353][T12285] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.455402][T12285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.467326][T12285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.477409][T12285] bond0 (unregistering): Released all slaves [ 557.714445][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 557.939395][T13643] chnl_net:caif_netlink_parms(): no params data found [ 558.076295][T12253] block nbd17: Receive control failed (result -32) [ 558.240133][T13673] FAULT_INJECTION: forcing a failure. [ 558.240133][T13673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.267376][T12285] hsr_slave_0: left promiscuous mode [ 558.279526][T13673] CPU: 1 UID: 0 PID: 13673 Comm: syz.1.1738 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.279573][T13673] Tainted: [L]=SOFTLOCKUP [ 558.279584][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 558.279601][T13673] Call Trace: [ 558.279611][T13673] [ 558.279621][T13673] dump_stack_lvl+0x100/0x190 [ 558.279672][T13673] should_fail_ex.cold+0x5/0xa [ 558.279708][T13673] _copy_to_user+0x32/0xd0 [ 558.279750][T13673] io_uring_setup.cold+0x1560/0x1d79 [ 558.279804][T13673] ? __pfx_io_uring_setup+0x10/0x10 [ 558.279864][T13673] ? __pfx_do_futex+0x10/0x10 [ 558.279925][T13673] ? xfd_validate_state+0x129/0x190 [ 558.279982][T13673] __x64_sys_io_uring_setup+0xc2/0x170 [ 558.280027][T13673] do_syscall_64+0x106/0xf80 [ 558.280057][T13673] ? clear_bhb_loop+0x40/0x90 [ 558.280095][T13673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.280126][T13673] RIP: 0033:0x7f99f4b9c819 [ 558.280151][T13673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.280178][T13673] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 558.280209][T13673] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 558.280229][T13673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001d48 [ 558.280246][T13673] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 558.280263][T13673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.280279][T13673] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 558.280319][T13673] [ 558.519592][T12285] hsr_slave_1: left promiscuous mode [ 558.536314][T12285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.569694][T12285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.606775][T12285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.624972][T13673] FAULT_INJECTION: forcing a failure. [ 558.624972][T13673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.660074][T12285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.719654][T13673] CPU: 0 UID: 0 PID: 13673 Comm: syz.1.1738 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.719704][T13673] Tainted: [L]=SOFTLOCKUP [ 558.719716][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 558.719734][T13673] Call Trace: [ 558.719745][T13673] [ 558.719757][T13673] dump_stack_lvl+0x100/0x190 [ 558.719821][T13673] should_fail_ex.cold+0x5/0xa [ 558.719853][T13673] ? prepare_alloc_pages+0x16d/0x5f0 [ 558.719896][T13673] should_fail_alloc_page+0xeb/0x140 [ 558.719934][T13673] prepare_alloc_pages+0x1f0/0x5f0 [ 558.719979][T13673] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 558.720032][T13673] ? __pfx_stack_trace_save+0x10/0x10 [ 558.720065][T13673] ? stack_depot_save_flags+0x27/0x9d0 [ 558.720108][T13673] ? kasan_save_stack+0x3f/0x50 [ 558.720135][T13673] ? kasan_save_stack+0x30/0x50 [ 558.720162][T13673] ? kasan_save_track+0x14/0x30 [ 558.720195][T13673] ? kasan_save_stack+0x3f/0x50 [ 558.720222][T13673] ? kasan_save_stack+0x30/0x50 [ 558.720248][T13673] ? kasan_save_track+0x14/0x30 [ 558.720275][T13673] ? __kasan_slab_alloc+0x89/0x90 [ 558.720304][T13673] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 558.720355][T13673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.720409][T13673] ? __x64_sys_mmap+0x125/0x190 [ 558.720454][T13673] ? do_syscall_64+0x106/0xf80 [ 558.720484][T13673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.720516][T13673] ? look_up_lock_class+0x55/0x120 [ 558.720558][T13673] ? lock_acquire+0x1cf/0x380 [ 558.720610][T13673] ? find_held_lock+0x2b/0x80 [ 558.720639][T13673] ? page_table_check_set+0x49a/0xa10 [ 558.720670][T13673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.720706][T13673] ? policy_nodemask+0xed/0x4f0 [ 558.720744][T13673] alloc_pages_mpol+0x1fb/0x550 [ 558.720782][T13673] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.720827][T13673] folio_alloc_mpol_noprof+0x36/0x340 [ 558.720871][T13673] vma_alloc_folio_noprof+0xed/0x1d0 [ 558.720911][T13673] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 558.720964][T13673] do_anonymous_page+0xb3a/0x1fb0 [ 558.721022][T13673] __handle_mm_fault+0x1d48/0x2b60 [ 558.721078][T13673] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.721125][T13673] ? pte_offset_map_lock+0x174/0x320 [ 558.721159][T13673] ? find_held_lock+0x2b/0x80 [ 558.721202][T13673] ? follow_page_pte+0x5b3/0x1400 [ 558.721247][T13673] handle_mm_fault+0x36d/0xa20 [ 558.721299][T13673] __get_user_pages+0xf9c/0x34d0 [ 558.721352][T13673] ? __pfx___get_user_pages+0x10/0x10 [ 558.721402][T13673] populate_vma_page_range+0x267/0x3f0 [ 558.721445][T13673] ? __pfx_populate_vma_page_range+0x10/0x10 [ 558.721482][T13673] ? __pfx_find_vma_intersection+0x10/0x10 [ 558.721521][T13673] ? do_mmap+0x93f/0x12f0 [ 558.721562][T13673] __mm_populate+0x107/0x3a0 [ 558.721611][T13673] ? __pfx___mm_populate+0x10/0x10 [ 558.721652][T13673] ? up_write+0x290/0x4f0 [ 558.721702][T13673] vm_mmap_pgoff+0x37f/0x470 [ 558.721744][T13673] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 558.721784][T13673] ? do_futex+0x192/0x350 [ 558.721824][T13673] ? __pfx_do_futex+0x10/0x10 [ 558.721871][T13673] ksys_mmap_pgoff+0xe1/0x650 [ 558.721906][T13673] ? __x64_sys_futex+0x34f/0x4d0 [ 558.721942][T13673] ? __x64_sys_futex+0x358/0x4d0 [ 558.721983][T13673] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 558.722019][T13673] ? xfd_validate_state+0x129/0x190 [ 558.722067][T13673] __x64_sys_mmap+0x125/0x190 [ 558.722117][T13673] do_syscall_64+0x106/0xf80 [ 558.722144][T13673] ? clear_bhb_loop+0x40/0x90 [ 558.722180][T13673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.722210][T13673] RIP: 0033:0x7f99f4b9c819 [ 558.722236][T13673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.722263][T13673] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 558.722292][T13673] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 558.722312][T13673] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 558.722330][T13673] RBP: 00007f99f4c32c91 R08: ffffffffffffffff R09: 0000000000000000 [ 558.722348][T13673] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 558.722365][T13673] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 558.722403][T13673] [ 558.812443][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 558.825995][T12253] Bluetooth: hci2: command tx timeout [ 559.189322][T12285] veth1_macvtap: left promiscuous mode [ 559.196682][T12285] veth0_macvtap: left promiscuous mode [ 559.202751][T12285] veth1_vlan: left promiscuous mode [ 559.208203][T12285] veth0_vlan: left promiscuous mode [ 559.854407][T12285] team0 (unregistering): Port device team_slave_1 removed [ 559.879128][T12285] team0 (unregistering): Port device team_slave_0 removed [ 560.230798][T13674] FAULT_INJECTION: forcing a failure. [ 560.230798][T13674] name failslab, interval 1, probability 0, space 0, times 0 [ 560.251437][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.1.1738 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.251485][T13674] Tainted: [L]=SOFTLOCKUP [ 560.251496][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.251513][T13674] Call Trace: [ 560.251523][T13674] [ 560.251535][T13674] dump_stack_lvl+0x100/0x190 [ 560.251593][T13674] should_fail_ex.cold+0x5/0xa [ 560.251630][T13674] ? ops_init+0x77/0x5f0 [ 560.251658][T13674] should_failslab+0xc2/0x120 [ 560.251695][T13674] __kmalloc_noprof+0xe0/0x850 [ 560.251742][T13674] ? __raw_spin_lock_init+0x3a/0x110 [ 560.251796][T13674] ops_init+0x77/0x5f0 [ 560.251831][T13674] setup_net+0x118/0x3a0 [ 560.251861][T13674] ? __pfx_setup_net+0x10/0x10 [ 560.251890][T13674] ? lockdep_init_map_type+0x5c/0x250 [ 560.251933][T13674] ? mutex_init_lockep+0x110/0x150 [ 560.251982][T13674] copy_net_ns+0x46f/0x7c0 [ 560.252019][T13674] create_new_namespaces+0x3ea/0xac0 [ 560.252063][T13674] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 560.252102][T13674] ksys_unshare+0x473/0xad0 [ 560.252145][T13674] ? __pfx_ksys_unshare+0x10/0x10 [ 560.252201][T13674] __x64_sys_unshare+0x31/0x40 [ 560.252239][T13674] do_syscall_64+0x106/0xf80 [ 560.252270][T13674] ? clear_bhb_loop+0x40/0x90 [ 560.252308][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.252339][T13674] RIP: 0033:0x7f99f4b9c819 [ 560.252365][T13674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.252395][T13674] RSP: 002b:00007f99f5ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 560.252426][T13674] RAX: ffffffffffffffda RBX: 00007f99f4e16090 RCX: 00007f99f4b9c819 [ 560.252447][T13674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 560.252465][T13674] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 560.252484][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.252503][T13674] R13: 00007f99f4e16128 R14: 00007f99f4e16090 R15: 00007ffdd54af148 [ 560.252580][T13674] [ 560.658827][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.678564][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.721573][T13643] bridge_slave_0: entered allmulticast mode [ 560.737245][T13643] bridge_slave_0: entered promiscuous mode [ 560.783679][T13643] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.803257][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.828681][T13643] bridge_slave_1: entered allmulticast mode [ 560.871137][T13643] bridge_slave_1: entered promiscuous mode [ 561.028163][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.071855][T13733] FAULT_INJECTION: forcing a failure. [ 561.071855][T13733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.085574][T13733] CPU: 0 UID: 0 PID: 13733 Comm: syz.1.1746 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.085619][T13733] Tainted: [L]=SOFTLOCKUP [ 561.085630][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 561.085647][T13733] Call Trace: [ 561.085657][T13733] [ 561.085668][T13733] dump_stack_lvl+0x100/0x190 [ 561.085719][T13733] should_fail_ex.cold+0x5/0xa [ 561.085755][T13733] _copy_to_user+0x32/0xd0 [ 561.085797][T13733] simple_read_from_buffer+0xcb/0x170 [ 561.085854][T13733] event_filter_read+0x32c/0x470 [ 561.085892][T13733] ? __pfx_event_filter_read+0x10/0x10 [ 561.085929][T13733] vfs_read+0x1e4/0xb30 [ 561.085963][T13733] ? __pfx_vfs_read+0x10/0x10 [ 561.085989][T13733] ? __fget_files+0x215/0x3d0 [ 561.086027][T13733] ? __fget_files+0x21f/0x3d0 [ 561.086066][T13733] ksys_read+0x12a/0x250 [ 561.086095][T13733] ? __pfx_ksys_read+0x10/0x10 [ 561.086135][T13733] do_syscall_64+0x106/0xf80 [ 561.086162][T13733] ? clear_bhb_loop+0x40/0x90 [ 561.086198][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.086227][T13733] RIP: 0033:0x7f99f4b9c819 [ 561.086252][T13733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.086279][T13733] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.086306][T13733] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 561.086324][T13733] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003 [ 561.086340][T13733] RBP: 00007f99f5ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 561.086356][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.086372][T13733] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 561.086411][T13733] [ 561.277841][T12253] Bluetooth: hci2: command tx timeout [ 561.296343][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.343520][T13643] team0: Port device team_slave_0 added [ 561.353749][T13643] team0: Port device team_slave_1 added [ 561.478448][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.486634][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.517373][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.538534][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.547600][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.574273][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.857179][T13643] hsr_slave_0: entered promiscuous mode [ 561.876713][T13643] hsr_slave_1: entered promiscuous mode [ 561.888553][T13643] debugfs: 'hsr0' already exists in 'hsr' [ 561.902158][T13643] Cannot create hsr debugfs directory [ 563.346287][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.348117][T12253] Bluetooth: hci2: command tx timeout [ 563.352855][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.128059][T13643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 564.168701][T13643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 564.204407][T13643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 564.234952][T13792] FAULT_INJECTION: forcing a failure. [ 564.234952][T13792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.251878][T13643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 564.279407][T13792] CPU: 1 UID: 0 PID: 13792 Comm: syz.1.1755 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.279454][T13792] Tainted: [L]=SOFTLOCKUP [ 564.279463][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 564.279478][T13792] Call Trace: [ 564.279488][T13792] [ 564.279497][T13792] dump_stack_lvl+0x100/0x190 [ 564.279546][T13792] should_fail_ex.cold+0x5/0xa [ 564.279581][T13792] _copy_to_user+0x32/0xd0 [ 564.279618][T13792] simple_read_from_buffer+0xcb/0x170 [ 564.279666][T13792] proc_fail_nth_read+0x1af/0x230 [ 564.279704][T13792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.279746][T13792] ? rw_verify_area+0xce/0x6d0 [ 564.279786][T13792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.279824][T13792] vfs_read+0x1e4/0xb30 [ 564.279857][T13792] ? __pfx_vfs_read+0x10/0x10 [ 564.279892][T13792] ? __fget_files+0x215/0x3d0 [ 564.279932][T13792] ? __fget_files+0x21f/0x3d0 [ 564.279971][T13792] ksys_read+0x12a/0x250 [ 564.279998][T13792] ? __pfx_ksys_read+0x10/0x10 [ 564.280038][T13792] do_syscall_64+0x106/0xf80 [ 564.280065][T13792] ? clear_bhb_loop+0x40/0x90 [ 564.280099][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.280126][T13792] RIP: 0033:0x7f99f4b5d04e [ 564.280149][T13792] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.280174][T13792] RSP: 002b:00007f99f5ae2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.280202][T13792] RAX: ffffffffffffffda RBX: 00007f99f5ae36c0 RCX: 00007f99f4b5d04e [ 564.280220][T13792] RDX: 000000000000000f RSI: 00007f99f5ae30a0 RDI: 0000000000000004 [ 564.280236][T13792] RBP: 00007f99f5ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 564.280251][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.280266][T13792] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 564.280305][T13792] [ 564.766336][T13643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.919556][T13643] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.039764][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.046967][T12701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.241191][T13700] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.248400][T13700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.429200][T12253] Bluetooth: hci2: command tx timeout [ 566.458654][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.330579][T12253] block nbd18: Receive control failed (result -32) [ 567.507500][T13643] veth0_vlan: entered promiscuous mode [ 567.784833][T13643] veth1_vlan: entered promiscuous mode [ 567.908752][T13643] veth0_macvtap: entered promiscuous mode [ 567.966005][T13643] veth1_macvtap: entered promiscuous mode [ 568.108107][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.149388][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.241952][T12250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.287700][T12250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.306297][T12250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.338913][T12250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.794301][T13700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.823984][T13700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.976534][T12250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.994748][T12250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.464618][T13918] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 569.792684][T13914] FAULT_INJECTION: forcing a failure. [ 569.792684][T13914] name failslab, interval 1, probability 0, space 0, times 0 [ 569.820570][T13914] CPU: 1 UID: 0 PID: 13914 Comm: syz.3.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.820621][T13914] Tainted: [L]=SOFTLOCKUP [ 569.820632][T13914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 569.820650][T13914] Call Trace: [ 569.820660][T13914] [ 569.820672][T13914] dump_stack_lvl+0x100/0x190 [ 569.820725][T13914] should_fail_ex.cold+0x5/0xa [ 569.820763][T13914] should_failslab+0xc2/0x120 [ 569.820798][T13914] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 569.820844][T13914] ? __kernfs_new_node+0xd2/0x960 [ 569.820898][T13914] __kernfs_new_node+0xd2/0x960 [ 569.820949][T13914] ? __pfx___kernfs_new_node+0x10/0x10 [ 569.821005][T13914] ? find_held_lock+0x2b/0x80 [ 569.821035][T13914] ? kernfs_root+0xee/0x2a0 [ 569.821076][T13914] ? kernfs_root+0xee/0x2a0 [ 569.821130][T13914] kernfs_new_node+0x11b/0x1a0 [ 569.821167][T13914] __kernfs_create_file+0x53/0x350 [ 569.821210][T13914] sysfs_add_file_mode_ns+0x207/0x3c0 [ 569.821263][T13914] internal_create_group+0x593/0xf40 [ 569.821319][T13914] ? __pfx_internal_create_group+0x10/0x10 [ 569.821372][T13914] ? kernfs_create_link+0x1bd/0x240 [ 569.821416][T13914] internal_create_groups+0x9d/0x150 [ 569.821467][T13914] device_add+0xf5b/0x1950 [ 569.821512][T13914] ? __pfx_device_add+0x10/0x10 [ 569.821552][T13914] ? lockdep_init_map_type+0x5c/0x250 [ 569.821608][T13914] ? __init_waitqueue_head+0xca/0x150 [ 569.821665][T13914] netdev_register_kobject+0x1a9/0x3d0 [ 569.821706][T13914] register_netdevice+0x12e0/0x2210 [ 569.821747][T13914] ? __pfx_register_netdevice+0x10/0x10 [ 569.821789][T13914] ? __pfx_loopback_net_init+0x10/0x10 [ 569.821824][T13914] register_netdev+0x34/0x50 [ 569.821854][T13914] loopback_net_init+0x7a/0x170 [ 569.821892][T13914] ? __pfx_loopback_net_init+0x10/0x10 [ 569.821925][T13914] ops_init+0x1e2/0x5f0 [ 569.821960][T13914] setup_net+0x118/0x3a0 [ 569.821991][T13914] ? __pfx_setup_net+0x10/0x10 [ 569.822019][T13914] ? lockdep_init_map_type+0x5c/0x250 [ 569.822060][T13914] ? mutex_init_lockep+0x110/0x150 [ 569.822109][T13914] copy_net_ns+0x46f/0x7c0 [ 569.822148][T13914] create_new_namespaces+0x3ea/0xac0 [ 569.822192][T13914] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 569.822230][T13914] ksys_unshare+0x473/0xad0 [ 569.822272][T13914] ? __pfx_ksys_unshare+0x10/0x10 [ 569.822328][T13914] __x64_sys_unshare+0x31/0x40 [ 569.822367][T13914] do_syscall_64+0x106/0xf80 [ 569.822396][T13914] ? clear_bhb_loop+0x40/0x90 [ 569.822435][T13914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.822466][T13914] RIP: 0033:0x7fabda19c819 [ 569.822491][T13914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.822520][T13914] RSP: 002b:00007fabdafaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 569.822551][T13914] RAX: ffffffffffffffda RBX: 00007fabda415fa0 RCX: 00007fabda19c819 [ 569.822578][T13914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 569.822597][T13914] RBP: 00007fabda232c91 R08: 0000000000000000 R09: 0000000000000000 [ 569.822616][T13914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.822635][T13914] R13: 00007fabda416038 R14: 00007fabda415fa0 R15: 00007ffc457b8268 [ 569.822677][T13914] [ 570.211427][T13893] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(11) [ 570.601196][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 572.616340][T13977] FAULT_INJECTION: forcing a failure. [ 572.616340][T13977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.664378][T13977] CPU: 1 UID: 0 PID: 13977 Comm: syz.1.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.664424][T13977] Tainted: [L]=SOFTLOCKUP [ 572.664434][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.664450][T13977] Call Trace: [ 572.664460][T13977] [ 572.664472][T13977] dump_stack_lvl+0x100/0x190 [ 572.664519][T13977] should_fail_ex.cold+0x5/0xa [ 572.664553][T13977] _copy_to_user+0x32/0xd0 [ 572.664594][T13977] simple_read_from_buffer+0xcb/0x170 [ 572.664643][T13977] proc_fail_nth_read+0x1af/0x230 [ 572.664683][T13977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.664723][T13977] ? rw_verify_area+0xce/0x6d0 [ 572.664764][T13977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.664809][T13977] vfs_read+0x1e4/0xb30 [ 572.664843][T13977] ? __pfx_vfs_read+0x10/0x10 [ 572.664870][T13977] ? __fget_files+0x215/0x3d0 [ 572.664906][T13977] ? __fget_files+0x21f/0x3d0 [ 572.664949][T13977] ksys_read+0x12a/0x250 [ 572.664975][T13977] ? __pfx_ksys_read+0x10/0x10 [ 572.665012][T13977] do_syscall_64+0x106/0xf80 [ 572.665040][T13977] ? clear_bhb_loop+0x40/0x90 [ 572.665076][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.665105][T13977] RIP: 0033:0x7f99f4b5d04e [ 572.665128][T13977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 572.665156][T13977] RSP: 002b:00007f99f5ae2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.665183][T13977] RAX: ffffffffffffffda RBX: 00007f99f5ae36c0 RCX: 00007f99f4b5d04e [ 572.665201][T13977] RDX: 000000000000000f RSI: 00007f99f5ae30a0 RDI: 0000000000000004 [ 572.665217][T13977] RBP: 00007f99f5ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 572.665233][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.665249][T13977] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 572.665287][T13977] [ 573.005874][T13975] FAULT_INJECTION: forcing a failure. [ 573.005874][T13975] name failslab, interval 1, probability 0, space 0, times 0 [ 573.018600][T13975] CPU: 1 UID: 0 PID: 13975 Comm: syz.2.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.018633][T13975] Tainted: [L]=SOFTLOCKUP [ 573.018640][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 573.018650][T13975] Call Trace: [ 573.018656][T13975] [ 573.018663][T13975] dump_stack_lvl+0x100/0x190 [ 573.018696][T13975] should_fail_ex.cold+0x5/0xa [ 573.018718][T13975] should_failslab+0xc2/0x120 [ 573.018739][T13975] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 573.018768][T13975] ? security_inode_alloc+0x3b/0x2c0 [ 573.018789][T13975] ? lockdep_init_map_type+0x5c/0x250 [ 573.018826][T13975] security_inode_alloc+0x3b/0x2c0 [ 573.018848][T13975] inode_init_always_gfp+0xced/0x1040 [ 573.018871][T13975] alloc_inode+0x8e/0x250 [ 573.018896][T13975] new_inode+0x22/0x1c0 [ 573.018923][T13975] shmem_get_inode+0x212/0x1040 [ 573.018952][T13975] ? __pfx_shmem_get_inode+0x10/0x10 [ 573.018977][T13975] ? rcu_is_watching+0x12/0xc0 [ 573.019004][T13975] ? percpu_counter_add_batch+0xb9/0x230 [ 573.019033][T13975] __shmem_file_setup+0x3ac/0x490 [ 573.019060][T13975] ? __pfx___shmem_file_setup+0x10/0x10 [ 573.019090][T13975] ? vm_area_alloc+0x1f/0x160 [ 573.019118][T13975] shmem_zero_setup+0x96/0x1b0 [ 573.019136][T13975] __mmap_region+0x2198/0x29e0 [ 573.019168][T13975] ? __pfx___mmap_region+0x10/0x10 [ 573.019193][T13975] ? process_measurement+0x1f4/0x2350 [ 573.019224][T13975] ? __lock_acquire+0x4a5/0x2630 [ 573.019258][T13975] ? find_held_lock+0x2b/0x80 [ 573.019275][T13975] ? finish_task_switch.isra.0+0x200/0xb80 [ 573.019296][T13975] ? finish_task_switch.isra.0+0x200/0xb80 [ 573.019324][T13975] ? trace_sched_exit_tp+0x13a/0x180 [ 573.019347][T13975] ? __schedule+0x1000/0x6120 [ 573.019402][T13975] ? rcu_is_watching+0x12/0xc0 [ 573.019430][T13975] ? cap_capable+0x107/0x460 [ 573.019452][T13975] mmap_region+0x180/0x3e0 [ 573.019484][T13975] do_mmap+0xc63/0x12f0 [ 573.019509][T13975] ? __pfx_do_mmap+0x10/0x10 [ 573.019530][T13975] ? __pfx_down_write_killable+0x10/0x10 [ 573.019558][T13975] vm_mmap_pgoff+0x29e/0x470 [ 573.019584][T13975] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 573.019608][T13975] ? do_futex+0x192/0x350 [ 573.019633][T13975] ? __pfx_do_futex+0x10/0x10 [ 573.019662][T13975] ksys_mmap_pgoff+0xe1/0x650 [ 573.019683][T13975] ? __x64_sys_futex+0x34f/0x4d0 [ 573.019706][T13975] ? __x64_sys_futex+0x358/0x4d0 [ 573.019731][T13975] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 573.019752][T13975] ? xfd_validate_state+0x129/0x190 [ 573.019782][T13975] __x64_sys_mmap+0x125/0x190 [ 573.019818][T13975] do_syscall_64+0x106/0xf80 [ 573.019836][T13975] ? clear_bhb_loop+0x40/0x90 [ 573.019858][T13975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.019877][T13975] RIP: 0033:0x7f3b44d9c819 [ 573.019894][T13975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.019913][T13975] RSP: 002b:00007f3b45d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 573.019931][T13975] RAX: ffffffffffffffda RBX: 00007f3b45015fa0 RCX: 00007f3b44d9c819 [ 573.019943][T13975] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 573.019953][T13975] RBP: 00007f3b44e32c91 R08: fffffffffffffffa R09: 0000000000008000 [ 573.019964][T13975] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 573.019975][T13975] R13: 00007f3b45016038 R14: 00007f3b45015fa0 R15: 00007ffe7348db38 [ 573.019997][T13975] [ 574.526728][T13997] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 579.314082][T14080] loop6: detected capacity change from 0 to 8192 [ 579.568272][T14076] FAULT_INJECTION: forcing a failure. [ 579.568272][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 579.595875][T14076] CPU: 0 UID: 0 PID: 14076 Comm: syz.1.1813 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.595926][T14076] Tainted: [L]=SOFTLOCKUP [ 579.595937][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.595955][T14076] Call Trace: [ 579.595965][T14076] [ 579.595976][T14076] dump_stack_lvl+0x100/0x190 [ 579.596028][T14076] should_fail_ex.cold+0x5/0xa [ 579.596067][T14076] should_failslab+0xc2/0x120 [ 579.596102][T14076] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 579.596150][T14076] ? __kernfs_new_node+0xd2/0x960 [ 579.596206][T14076] __kernfs_new_node+0xd2/0x960 [ 579.596258][T14076] ? __pfx___kernfs_new_node+0x10/0x10 [ 579.596315][T14076] ? find_held_lock+0x2b/0x80 [ 579.596346][T14076] ? kernfs_root+0xee/0x2a0 [ 579.596388][T14076] ? kernfs_root+0xee/0x2a0 [ 579.596442][T14076] kernfs_new_node+0x11b/0x1a0 [ 579.596481][T14076] __kernfs_create_file+0x53/0x350 [ 579.596533][T14076] sysfs_add_file_mode_ns+0x207/0x3c0 [ 579.596588][T14076] internal_create_group+0x593/0xf40 [ 579.596646][T14076] ? __pfx_internal_create_group+0x10/0x10 [ 579.596699][T14076] ? kernfs_create_link+0x1bd/0x240 [ 579.596744][T14076] internal_create_groups+0x9d/0x150 [ 579.596793][T14076] device_add+0x71a/0x1950 [ 579.596836][T14076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.596869][T14076] ? __pfx_device_add+0x10/0x10 [ 579.596910][T14076] ? lockdep_init_map_type+0x5c/0x250 [ 579.596955][T14076] ? __init_waitqueue_head+0xca/0x150 [ 579.597012][T14076] netdev_register_kobject+0x1a9/0x3d0 [ 579.597053][T14076] register_netdevice+0x12e0/0x2210 [ 579.597093][T14076] ? __pfx_register_netdevice+0x10/0x10 [ 579.597135][T14076] ? __pfx_loopback_net_init+0x10/0x10 [ 579.597173][T14076] register_netdev+0x34/0x50 [ 579.597203][T14076] loopback_net_init+0x7a/0x170 [ 579.597242][T14076] ? __pfx_loopback_net_init+0x10/0x10 [ 579.597276][T14076] ops_init+0x1e2/0x5f0 [ 579.597310][T14076] setup_net+0x118/0x3a0 [ 579.597342][T14076] ? __pfx_setup_net+0x10/0x10 [ 579.597369][T14076] ? lockdep_init_map_type+0x5c/0x250 [ 579.597412][T14076] ? mutex_init_lockep+0x110/0x150 [ 579.597462][T14076] copy_net_ns+0x46f/0x7c0 [ 579.597501][T14076] create_new_namespaces+0x3ea/0xac0 [ 579.597552][T14076] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 579.597591][T14076] ksys_unshare+0x473/0xad0 [ 579.597635][T14076] ? __pfx_ksys_unshare+0x10/0x10 [ 579.597693][T14076] __x64_sys_unshare+0x31/0x40 [ 579.597732][T14076] do_syscall_64+0x106/0xf80 [ 579.597762][T14076] ? clear_bhb_loop+0x40/0x90 [ 579.597800][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.597832][T14076] RIP: 0033:0x7f99f4b9c819 [ 579.597858][T14076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.597887][T14076] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 579.597917][T14076] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 579.597936][T14076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 579.597954][T14076] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 579.597972][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.597989][T14076] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 579.598032][T14076] [ 581.396847][T14111] FAULT_INJECTION: forcing a failure. [ 581.396847][T14111] name failslab, interval 1, probability 0, space 0, times 0 [ 581.461005][T14111] CPU: 0 UID: 0 PID: 14111 Comm: syz.2.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.461055][T14111] Tainted: [L]=SOFTLOCKUP [ 581.461065][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 581.461080][T14111] Call Trace: [ 581.461089][T14111] [ 581.461101][T14111] dump_stack_lvl+0x100/0x190 [ 581.461146][T14111] should_fail_ex.cold+0x5/0xa [ 581.461170][T14111] should_failslab+0xc2/0x120 [ 581.461191][T14111] __kmalloc_cache_noprof+0x7a/0x6f0 [ 581.461218][T14111] ? append_filter_err+0xb8/0x620 [ 581.461246][T14111] ? process_preds+0x93d/0x1d90 [ 581.461277][T14111] append_filter_err+0xb8/0x620 [ 581.461316][T14111] ? create_filter_start.constprop.0+0x134/0x310 [ 581.461361][T14111] create_filter+0x1a6/0x210 [ 581.461391][T14111] ? __pfx_create_filter+0x10/0x10 [ 581.461422][T14111] ? find_held_lock+0x2b/0x80 [ 581.461444][T14111] apply_event_filter+0x220/0x500 [ 581.461474][T14111] ? __pfx_apply_event_filter+0x10/0x10 [ 581.461511][T14111] event_filter_write+0x16d/0x290 [ 581.461544][T14111] vfs_write+0x2aa/0x1070 [ 581.461565][T14111] ? __pfx_event_filter_write+0x10/0x10 [ 581.461591][T14111] ? __pfx_vfs_write+0x10/0x10 [ 581.461609][T14111] ? __fget_files+0x215/0x3d0 [ 581.461633][T14111] ? __fget_files+0x21f/0x3d0 [ 581.461658][T14111] ksys_write+0x12a/0x250 [ 581.461676][T14111] ? __pfx_ksys_write+0x10/0x10 [ 581.461701][T14111] do_syscall_64+0x106/0xf80 [ 581.461719][T14111] ? clear_bhb_loop+0x40/0x90 [ 581.461743][T14111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.461762][T14111] RIP: 0033:0x7f3b44d9c819 [ 581.461779][T14111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.461798][T14111] RSP: 002b:00007f3b45d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.461817][T14111] RAX: ffffffffffffffda RBX: 00007f3b45015fa0 RCX: 00007f3b44d9c819 [ 581.461829][T14111] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 581.461839][T14111] RBP: 00007f3b44e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 581.461849][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.461860][T14111] R13: 00007f3b45016038 R14: 00007f3b45015fa0 R15: 00007ffe7348db38 [ 581.461884][T14111] [ 583.337641][T14132] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 583.349456][T14132] FAULT_INJECTION: forcing a failure. [ 583.349456][T14132] name failslab, interval 1, probability 0, space 0, times 0 [ 583.370045][T14135] netlink: 'syz.3.1831': attribute type 4 has an invalid length. [ 583.382420][T14132] CPU: 1 UID: 0 PID: 14132 Comm: syz.2.1830 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.382452][T14132] Tainted: [L]=SOFTLOCKUP [ 583.382459][T14132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 583.382470][T14132] Call Trace: [ 583.382477][T14132] [ 583.382484][T14132] dump_stack_lvl+0x100/0x190 [ 583.382516][T14132] should_fail_ex.cold+0x5/0xa [ 583.382539][T14132] should_failslab+0xc2/0x120 [ 583.382570][T14132] __kmalloc_cache_noprof+0x7a/0x6f0 [ 583.382596][T14132] ? append_filter_err+0xb8/0x620 [ 583.382624][T14132] ? process_preds+0x93d/0x1d90 [ 583.382656][T14132] append_filter_err+0xb8/0x620 [ 583.382684][T14132] ? create_filter_start.constprop.0+0x134/0x310 [ 583.382717][T14132] create_filter+0x1a6/0x210 [ 583.382746][T14132] ? __pfx_create_filter+0x10/0x10 [ 583.382777][T14132] ? find_held_lock+0x2b/0x80 [ 583.382799][T14132] apply_event_filter+0x220/0x500 [ 583.382829][T14132] ? __pfx_apply_event_filter+0x10/0x10 [ 583.382865][T14132] event_filter_write+0x16d/0x290 [ 583.382889][T14132] vfs_write+0x2aa/0x1070 [ 583.382908][T14132] ? __pfx_event_filter_write+0x10/0x10 [ 583.382933][T14132] ? __pfx_vfs_write+0x10/0x10 [ 583.382950][T14132] ? __fget_files+0x215/0x3d0 [ 583.382973][T14132] ? __fget_files+0x21f/0x3d0 [ 583.382998][T14132] ksys_write+0x12a/0x250 [ 583.383016][T14132] ? __pfx_ksys_write+0x10/0x10 [ 583.383041][T14132] do_syscall_64+0x106/0xf80 [ 583.383059][T14132] ? clear_bhb_loop+0x40/0x90 [ 583.383081][T14132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.383100][T14132] RIP: 0033:0x7f3b44d9c819 [ 583.383116][T14132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.383132][T14132] RSP: 002b:00007f3b45d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 583.383150][T14132] RAX: ffffffffffffffda RBX: 00007f3b45015fa0 RCX: 00007f3b44d9c819 [ 583.383161][T14132] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 583.383171][T14132] RBP: 00007f3b44e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 583.383181][T14132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.383191][T14132] R13: 00007f3b45016038 R14: 00007f3b45015fa0 R15: 00007ffe7348db38 [ 583.383214][T14132] [ 583.662897][T14135] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 583.759248][T14135] block loop4: the capability attribute has been deprecated. [ 585.024680][T14164] FAULT_INJECTION: forcing a failure. [ 585.024680][T14164] name failslab, interval 1, probability 0, space 0, times 0 [ 585.072005][T14164] CPU: 1 UID: 0 PID: 14164 Comm: syz.4.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.072046][T14164] Tainted: [L]=SOFTLOCKUP [ 585.072054][T14164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 585.072069][T14164] Call Trace: [ 585.072078][T14164] [ 585.072089][T14164] dump_stack_lvl+0x100/0x190 [ 585.072137][T14164] should_fail_ex.cold+0x5/0xa [ 585.072173][T14164] should_failslab+0xc2/0x120 [ 585.072205][T14164] __kmalloc_cache_noprof+0x7a/0x6f0 [ 585.072245][T14164] ? create_filter_start.constprop.0+0x81/0x310 [ 585.072292][T14164] ? rcu_is_watching+0x12/0xc0 [ 585.072343][T14164] create_filter_start.constprop.0+0x81/0x310 [ 585.072395][T14164] create_filter+0xb5/0x210 [ 585.072443][T14164] ? __pfx_create_filter+0x10/0x10 [ 585.072506][T14164] ? find_held_lock+0x2b/0x80 [ 585.072541][T14164] apply_event_filter+0x220/0x500 [ 585.072589][T14164] ? __pfx_apply_event_filter+0x10/0x10 [ 585.072653][T14164] event_filter_write+0x16d/0x290 [ 585.072690][T14164] vfs_write+0x2aa/0x1070 [ 585.072720][T14164] ? __pfx_event_filter_write+0x10/0x10 [ 585.072766][T14164] ? __pfx_vfs_write+0x10/0x10 [ 585.072794][T14164] ? __fget_files+0x215/0x3d0 [ 585.072834][T14164] ? __fget_files+0x21f/0x3d0 [ 585.072876][T14164] ksys_write+0x12a/0x250 [ 585.072904][T14164] ? __pfx_ksys_write+0x10/0x10 [ 585.072946][T14164] do_syscall_64+0x106/0xf80 [ 585.072974][T14164] ? clear_bhb_loop+0x40/0x90 [ 585.073011][T14164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.073039][T14164] RIP: 0033:0x7f38f219c819 [ 585.073066][T14164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.073093][T14164] RSP: 002b:00007f38f2fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 585.073122][T14164] RAX: ffffffffffffffda RBX: 00007f38f2415fa0 RCX: 00007f38f219c819 [ 585.073141][T14164] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 585.073156][T14164] RBP: 00007f38f2fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 585.073170][T14164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.073183][T14164] R13: 00007f38f2416038 R14: 00007f38f2415fa0 R15: 00007ffd64fbe3e8 [ 585.073216][T14164] [ 585.919156][T14179] FAULT_INJECTION: forcing a failure. [ 585.919156][T14179] name failslab, interval 1, probability 0, space 0, times 0 [ 585.977222][T14185] FAULT_INJECTION: forcing a failure. [ 585.977222][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 586.003192][T14179] CPU: 1 UID: 0 PID: 14179 Comm: syz.3.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.003242][T14179] Tainted: [L]=SOFTLOCKUP [ 586.003253][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 586.003269][T14179] Call Trace: [ 586.003279][T14179] [ 586.003291][T14179] dump_stack_lvl+0x100/0x190 [ 586.003340][T14179] should_fail_ex.cold+0x5/0xa [ 586.003376][T14179] should_failslab+0xc2/0x120 [ 586.003409][T14179] __kmalloc_cache_noprof+0x7a/0x6f0 [ 586.003448][T14179] ? sctp_endpoint_new+0xfc/0xb20 [ 586.003479][T14179] ? __debug_object_init+0x2de/0x3d0 [ 586.003516][T14179] sctp_endpoint_new+0xfc/0xb20 [ 586.003550][T14179] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 586.003581][T14179] ? lockdep_init_map_type+0x5c/0x250 [ 586.003623][T14179] ? lockdep_init_map_type+0x5c/0x250 [ 586.003669][T14179] sctp_init_sock+0xe2b/0x1300 [ 586.003697][T14179] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 586.003727][T14179] sctp_v6_init_sock+0x16/0x70 [ 586.003753][T14179] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 586.003782][T14179] inet6_create+0xb21/0x12b0 [ 586.003813][T14179] ? inet6_create+0x7f/0x12b0 [ 586.003853][T14179] __sock_create+0x339/0x860 [ 586.003899][T14179] inet_ctl_sock_create+0x94/0x230 [ 586.003935][T14179] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 586.003971][T14179] ? timer_init_key+0x150/0x340 [ 586.004011][T14179] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 586.004056][T14179] sctp_ctrlsock_init+0x40/0xd0 [ 586.004101][T14179] ops_init+0x1e2/0x5f0 [ 586.004135][T14179] setup_net+0x118/0x3a0 [ 586.004164][T14179] ? __pfx_setup_net+0x10/0x10 [ 586.004190][T14179] ? lockdep_init_map_type+0x5c/0x250 [ 586.004230][T14179] ? mutex_init_lockep+0x110/0x150 [ 586.004278][T14179] copy_net_ns+0x46f/0x7c0 [ 586.004315][T14179] create_new_namespaces+0x3ea/0xac0 [ 586.004358][T14179] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 586.004395][T14179] ksys_unshare+0x473/0xad0 [ 586.004434][T14179] ? __pfx_ksys_unshare+0x10/0x10 [ 586.004485][T14179] __x64_sys_unshare+0x31/0x40 [ 586.004521][T14179] do_syscall_64+0x106/0xf80 [ 586.004550][T14179] ? clear_bhb_loop+0x40/0x90 [ 586.004585][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.004613][T14179] RIP: 0033:0x7fabda19c819 [ 586.004637][T14179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.004663][T14179] RSP: 002b:00007fabd83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 586.004691][T14179] RAX: ffffffffffffffda RBX: 00007fabda416180 RCX: 00007fabda19c819 [ 586.004709][T14179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 586.004725][T14179] RBP: 00007fabda232c91 R08: 0000000000000000 R09: 0000000000000000 [ 586.004741][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.004757][T14179] R13: 00007fabda416218 R14: 00007fabda416180 R15: 00007ffc457b8268 [ 586.004797][T14179] [ 586.031498][T14185] CPU: 0 UID: 0 PID: 14185 Comm: syz.1.1844 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.031542][T14185] Tainted: [L]=SOFTLOCKUP [ 586.031551][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 586.031567][T14185] Call Trace: [ 586.031576][T14185] [ 586.031594][T14185] dump_stack_lvl+0x100/0x190 [ 586.031639][T14185] should_fail_ex.cold+0x5/0xa [ 586.031671][T14185] ? aa_label_asxprint+0x75/0x130 [ 586.031699][T14185] should_failslab+0xc2/0x120 [ 586.031729][T14185] __kmalloc_noprof+0xe0/0x850 [ 586.031769][T14185] ? __pfx_vsnprintf+0x10/0x10 [ 586.031812][T14185] aa_label_asxprint+0x75/0x130 [ 586.031845][T14185] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 586.031885][T14185] security_lsmprop_to_secctx+0x146/0x1a0 [ 586.031933][T14185] audit_log_subj_ctx+0x34f/0x460 [ 586.031971][T14185] ? ktime_get_coarse_real_ts64+0x187/0x1f0 [ 586.032000][T14185] ? map_id_range_up+0x2ce/0x3b0 [ 586.032027][T14185] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 586.032069][T14185] ? audit_log_format+0xe8/0x130 [ 586.032105][T14185] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 586.032142][T14185] audit_log_task_context+0x88/0xb0 [ 586.032180][T14185] ? __pfx_audit_log_task_context+0x10/0x10 [ 586.032226][T14185] integrity_audit_message+0x24d/0x4f0 [ 586.032269][T14185] ? __pfx_integrity_audit_message+0x10/0x10 [ 586.032310][T14185] ? take_dentry_name_snapshot+0x310/0x7c0 [ 586.032352][T14185] integrity_audit_msg+0x41/0x60 [ 586.032395][T14185] ima_collect_measurement+0x72a/0xa40 [ 586.032426][T14185] ? ima_file_mmap+0x1c4/0x1f0 [ 586.032460][T14185] ? __pfx_ima_collect_measurement+0x10/0x10 [ 586.032514][T14185] ? lock_acquire+0x1cf/0x380 [ 586.032569][T14185] ? do_raw_read_unlock+0x3f/0x70 [ 586.032623][T14185] ? vfs_getxattr_alloc+0xec/0x350 [ 586.032658][T14185] ? ima_get_hash_algo+0x22d/0x400 [ 586.032698][T14185] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 586.032745][T14185] ? process_measurement+0xdfe/0x2350 [ 586.032771][T14185] process_measurement+0xdfe/0x2350 [ 586.032810][T14185] ? __pfx_process_measurement+0x10/0x10 [ 586.032838][T14185] ? __lock_acquire+0x4a5/0x2630 [ 586.032877][T14185] ? __resched_curr+0x315/0x3b0 [ 586.032936][T14185] ? __pfx_aa_file_perm+0x10/0x10 [ 586.032984][T14185] ima_file_mmap+0x1c4/0x1f0 [ 586.033012][T14185] ? __pfx_ima_file_mmap+0x10/0x10 [ 586.033049][T14185] security_mmap_file+0x278/0x9b0 [ 586.033085][T14185] vm_mmap_pgoff+0xec/0x470 [ 586.033118][T14185] ? find_held_lock+0x2b/0x80 [ 586.033144][T14185] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 586.033172][T14185] ? __fget_files+0x215/0x3d0 [ 586.033204][T14185] ? __fget_files+0x21f/0x3d0 [ 586.033238][T14185] ksys_mmap_pgoff+0x3c8/0x650 [ 586.033268][T14185] ? __x64_sys_futex+0x34f/0x4d0 [ 586.033300][T14185] ? __x64_sys_futex+0x358/0x4d0 [ 586.033335][T14185] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 586.033364][T14185] ? xfd_validate_state+0x129/0x190 [ 586.033409][T14185] __x64_sys_mmap+0x125/0x190 [ 586.033450][T14185] do_syscall_64+0x106/0xf80 [ 586.033475][T14185] ? clear_bhb_loop+0x40/0x90 [ 586.033508][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.033535][T14185] RIP: 0033:0x7f99f4b9c819 [ 586.033558][T14185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.033589][T14185] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 586.033615][T14185] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 586.033633][T14185] RDX: 0000000000000007 RSI: 0000000000400003 RDI: 0000000000002000 [ 586.033650][T14185] RBP: 00007f99f4c32c91 R08: 0000000000000001 R09: 0000000000000000 [ 586.033665][T14185] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 586.033681][T14185] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 586.033717][T14185] [ 586.034229][T14185] audit: error in audit_log_subj_ctx [ 586.741873][ T30] audit: type=1800 audit(1775205934.021:12): pid=14185 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.1844" name=80 dev="tmpfs" ino=2404 res=0 errno=0 [ 587.063332][T12253] block nbd19: Receive control failed (result -32) [ 587.284240][T14206] FAULT_INJECTION: forcing a failure. [ 587.284240][T14206] name failslab, interval 1, probability 0, space 0, times 0 [ 587.313910][T14206] CPU: 0 UID: 0 PID: 14206 Comm: syz.2.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.313964][T14206] Tainted: [L]=SOFTLOCKUP [ 587.313976][T14206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 587.313994][T14206] Call Trace: [ 587.314005][T14206] [ 587.314017][T14206] dump_stack_lvl+0x100/0x190 [ 587.314068][T14206] should_fail_ex.cold+0x5/0xa [ 587.314106][T14206] should_failslab+0xc2/0x120 [ 587.314141][T14206] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 587.314189][T14206] ? __d_alloc+0x34/0xa80 [ 587.314234][T14206] __d_alloc+0x34/0xa80 [ 587.314274][T14206] d_alloc+0x4a/0x1e0 [ 587.314310][T14206] lookup_one_qstr_excl+0x175/0x250 [ 587.314356][T14206] start_dirop+0x59/0xb0 [ 587.314387][T14206] simple_start_creating+0xf9/0x110 [ 587.314418][T14206] ? __pfx_simple_start_creating+0x10/0x10 [ 587.314449][T14206] ? mntput+0x70/0xa0 [ 587.314484][T14206] ? simple_pin_fs+0xa3/0x190 [ 587.314532][T14206] debugfs_start_creating.part.0+0x82/0x170 [ 587.314570][T14206] __debugfs_create_file+0xb3/0x4f0 [ 587.314612][T14206] debugfs_create_file_full+0x41/0x60 [ 587.314654][T14206] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 587.314699][T14206] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 587.314738][T14206] ? rcu_is_watching+0x12/0xc0 [ 587.314819][T14206] ? lockdep_init_map_type+0x5c/0x250 [ 587.314867][T14206] preinit_net.part.0+0x24e/0x8f0 [ 587.314901][T14206] copy_net_ns+0x339/0x7c0 [ 587.314940][T14206] create_new_namespaces+0x3ea/0xac0 [ 587.314985][T14206] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 587.315023][T14206] ksys_unshare+0x473/0xad0 [ 587.315065][T14206] ? __pfx_ksys_unshare+0x10/0x10 [ 587.315119][T14206] __x64_sys_unshare+0x31/0x40 [ 587.315157][T14206] do_syscall_64+0x106/0xf80 [ 587.315188][T14206] ? clear_bhb_loop+0x40/0x90 [ 587.315225][T14206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.315256][T14206] RIP: 0033:0x7f3b44d9c819 [ 587.315282][T14206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.315310][T14206] RSP: 002b:00007f3b45d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 587.315340][T14206] RAX: ffffffffffffffda RBX: 00007f3b45015fa0 RCX: 00007f3b44d9c819 [ 587.315359][T14206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 587.315377][T14206] RBP: 00007f3b44e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 587.315395][T14206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.315412][T14206] R13: 00007f3b45016038 R14: 00007f3b45015fa0 R15: 00007ffe7348db38 [ 587.315453][T14206] [ 587.777468][T14200] FAULT_INJECTION: forcing a failure. [ 587.777468][T14200] name failslab, interval 1, probability 0, space 0, times 0 [ 587.790839][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.4.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.790890][T14200] Tainted: [L]=SOFTLOCKUP [ 587.790901][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 587.790919][T14200] Call Trace: [ 587.790929][T14200] [ 587.790941][T14200] dump_stack_lvl+0x100/0x190 [ 587.790996][T14200] should_fail_ex.cold+0x5/0xa [ 587.791036][T14200] should_failslab+0xc2/0x120 [ 587.791073][T14200] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 587.791121][T14200] ? security_inode_alloc+0x3b/0x2c0 [ 587.791158][T14200] ? lockdep_init_map_type+0x5c/0x250 [ 587.791208][T14200] security_inode_alloc+0x3b/0x2c0 [ 587.791246][T14200] inode_init_always_gfp+0xced/0x1040 [ 587.791288][T14200] alloc_inode+0x8e/0x250 [ 587.791332][T14200] new_inode+0x22/0x1c0 [ 587.791380][T14200] shmem_get_inode+0x212/0x1040 [ 587.791429][T14200] ? __pfx_shmem_get_inode+0x10/0x10 [ 587.791488][T14200] ? rcu_is_watching+0x12/0xc0 [ 587.791535][T14200] ? percpu_counter_add_batch+0xb9/0x230 [ 587.791590][T14200] __shmem_file_setup+0x3ac/0x490 [ 587.791638][T14200] ? __pfx___shmem_file_setup+0x10/0x10 [ 587.791692][T14200] ? vm_area_alloc+0x1f/0x160 [ 587.791739][T14200] shmem_zero_setup+0x96/0x1b0 [ 587.791774][T14200] __mmap_region+0x2198/0x29e0 [ 587.791830][T14200] ? __pfx___mmap_region+0x10/0x10 [ 587.791886][T14200] ? set_next_entity+0x11e/0x9c0 [ 587.791940][T14200] ? __lock_acquire+0x4a5/0x2630 [ 587.792001][T14200] ? find_held_lock+0x2b/0x80 [ 587.792031][T14200] ? finish_task_switch.isra.0+0x200/0xb80 [ 587.792067][T14200] ? finish_task_switch.isra.0+0x200/0xb80 [ 587.792120][T14200] ? trace_sched_exit_tp+0x13a/0x180 [ 587.792160][T14200] ? __schedule+0x1000/0x6120 [ 587.792262][T14200] ? rcu_is_watching+0x12/0xc0 [ 587.792311][T14200] ? cap_capable+0x107/0x460 [ 587.792351][T14200] mmap_region+0x180/0x3e0 [ 587.792409][T14200] do_mmap+0xc63/0x12f0 [ 587.792454][T14200] ? __pfx_do_mmap+0x10/0x10 [ 587.792518][T14200] ? __pfx_down_write_killable+0x10/0x10 [ 587.792565][T14200] vm_mmap_pgoff+0x29e/0x470 [ 587.792610][T14200] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 587.792651][T14200] ? do_futex+0x192/0x350 [ 587.792695][T14200] ? __pfx_do_futex+0x10/0x10 [ 587.792744][T14200] ksys_mmap_pgoff+0xe1/0x650 [ 587.792781][T14200] ? __x64_sys_futex+0x34f/0x4d0 [ 587.792821][T14200] ? __x64_sys_futex+0x358/0x4d0 [ 587.792865][T14200] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 587.792900][T14200] ? xfd_validate_state+0x129/0x190 [ 587.792955][T14200] __x64_sys_mmap+0x125/0x190 [ 587.793008][T14200] do_syscall_64+0x106/0xf80 [ 587.793039][T14200] ? clear_bhb_loop+0x40/0x90 [ 587.793078][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.793111][T14200] RIP: 0033:0x7f38f219c819 [ 587.793138][T14200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.793169][T14200] RSP: 002b:00007f38f2fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 587.793201][T14200] RAX: ffffffffffffffda RBX: 00007f38f2415fa0 RCX: 00007f38f219c819 [ 587.793221][T14200] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 587.793239][T14200] RBP: 00007f38f2232c91 R08: fffffffffffffffa R09: 0000000000008000 [ 587.793259][T14200] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 587.793276][T14200] R13: 00007f38f2416038 R14: 00007f38f2415fa0 R15: 00007ffd64fbe3e8 [ 587.793318][T14200] [ 589.498247][T12356] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.173430][T14257] FAULT_INJECTION: forcing a failure. [ 590.173430][T14257] name failslab, interval 1, probability 0, space 0, times 0 [ 590.202511][T14257] CPU: 1 UID: 0 PID: 14257 Comm: syz.3.1863 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.202562][T14257] Tainted: [L]=SOFTLOCKUP [ 590.202572][T14257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 590.202590][T14257] Call Trace: [ 590.202600][T14257] [ 590.202612][T14257] dump_stack_lvl+0x100/0x190 [ 590.202663][T14257] should_fail_ex.cold+0x5/0xa [ 590.202702][T14257] should_failslab+0xc2/0x120 [ 590.202745][T14257] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 590.202795][T14257] ? __d_alloc+0x34/0xa80 [ 590.202838][T14257] __d_alloc+0x34/0xa80 [ 590.202880][T14257] d_alloc+0x4a/0x1e0 [ 590.202919][T14257] lookup_one_qstr_excl+0x175/0x250 [ 590.202967][T14257] start_dirop+0x59/0xb0 [ 590.202999][T14257] simple_start_creating+0xf9/0x110 [ 590.203032][T14257] ? __pfx_simple_start_creating+0x10/0x10 [ 590.203064][T14257] ? mntput+0x70/0xa0 [ 590.203093][T14257] ? simple_pin_fs+0xa3/0x190 [ 590.203141][T14257] debugfs_start_creating.part.0+0x82/0x170 [ 590.203182][T14257] __debugfs_create_file+0xb3/0x4f0 [ 590.203223][T14257] debugfs_create_file_full+0x41/0x60 [ 590.203266][T14257] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 590.203311][T14257] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 590.203353][T14257] ? rcu_is_watching+0x12/0xc0 [ 590.203434][T14257] ? lockdep_init_map_type+0x5c/0x250 [ 590.203480][T14257] preinit_net.part.0+0x24e/0x8f0 [ 590.203510][T14257] copy_net_ns+0x339/0x7c0 [ 590.203545][T14257] create_new_namespaces+0x3ea/0xac0 [ 590.203586][T14257] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 590.203621][T14257] ksys_unshare+0x473/0xad0 [ 590.203662][T14257] ? __pfx_ksys_unshare+0x10/0x10 [ 590.203712][T14257] __x64_sys_unshare+0x31/0x40 [ 590.203754][T14257] do_syscall_64+0x106/0xf80 [ 590.203780][T14257] ? clear_bhb_loop+0x40/0x90 [ 590.203815][T14257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.203845][T14257] RIP: 0033:0x7fabda19c819 [ 590.203871][T14257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.203901][T14257] RSP: 002b:00007fabdafaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 590.203931][T14257] RAX: ffffffffffffffda RBX: 00007fabda415fa0 RCX: 00007fabda19c819 [ 590.203951][T14257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 590.203969][T14257] RBP: 00007fabda232c91 R08: 0000000000000000 R09: 0000000000000000 [ 590.203987][T14257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.204005][T14257] R13: 00007fabda416038 R14: 00007fabda415fa0 R15: 00007ffc457b8268 [ 590.204047][T14257] [ 590.493630][T14259] FAULT_INJECTION: forcing a failure. [ 590.493630][T14259] name failslab, interval 1, probability 0, space 0, times 0 [ 590.506362][T14259] CPU: 1 UID: 0 PID: 14259 Comm: syz.1.1864 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.506408][T14259] Tainted: [L]=SOFTLOCKUP [ 590.506418][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 590.506435][T14259] Call Trace: [ 590.506445][T14259] [ 590.506456][T14259] dump_stack_lvl+0x100/0x190 [ 590.506505][T14259] should_fail_ex.cold+0x5/0xa [ 590.506543][T14259] should_failslab+0xc2/0x120 [ 590.506579][T14259] __kmalloc_cache_noprof+0x7a/0x6f0 [ 590.506619][T14259] ? create_filter_start.constprop.0+0x1c4/0x310 [ 590.506667][T14259] ? __asan_memcpy+0x3c/0x60 [ 590.506717][T14259] create_filter_start.constprop.0+0x1c4/0x310 [ 590.506778][T14259] create_filter+0xb5/0x210 [ 590.506826][T14259] ? __pfx_create_filter+0x10/0x10 [ 590.506876][T14259] ? find_held_lock+0x2b/0x80 [ 590.506912][T14259] apply_event_filter+0x220/0x500 [ 590.506962][T14259] ? __pfx_apply_event_filter+0x10/0x10 [ 590.507022][T14259] event_filter_write+0x16d/0x290 [ 590.507063][T14259] vfs_write+0x2aa/0x1070 [ 590.507095][T14259] ? __pfx_event_filter_write+0x10/0x10 [ 590.507135][T14259] ? __pfx_vfs_write+0x10/0x10 [ 590.507165][T14259] ? __fget_files+0x215/0x3d0 [ 590.507206][T14259] ? __fget_files+0x21f/0x3d0 [ 590.507249][T14259] ksys_write+0x12a/0x250 [ 590.507279][T14259] ? __pfx_ksys_write+0x10/0x10 [ 590.507323][T14259] do_syscall_64+0x106/0xf80 [ 590.507352][T14259] ? clear_bhb_loop+0x40/0x90 [ 590.507391][T14259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.507422][T14259] RIP: 0033:0x7f99f4b9c819 [ 590.507448][T14259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.507478][T14259] RSP: 002b:00007f99f5ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 590.507506][T14259] RAX: ffffffffffffffda RBX: 00007f99f4e16090 RCX: 00007f99f4b9c819 [ 590.507527][T14259] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 590.507545][T14259] RBP: 00007f99f5ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 590.507563][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.507581][T14259] R13: 00007f99f4e16128 R14: 00007f99f4e16090 R15: 00007ffdd54af148 [ 590.507625][T14259] [ 591.292742][T14274] FAULT_INJECTION: forcing a failure. [ 591.292742][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 591.333594][T14274] CPU: 1 UID: 0 PID: 14274 Comm: syz.4.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.333641][T14274] Tainted: [L]=SOFTLOCKUP [ 591.333653][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 591.333670][T14274] Call Trace: [ 591.333680][T14274] [ 591.333692][T14274] dump_stack_lvl+0x100/0x190 [ 591.333742][T14274] should_fail_ex.cold+0x5/0xa [ 591.333779][T14274] should_failslab+0xc2/0x120 [ 591.333814][T14274] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 591.333859][T14274] ? skb_clone+0x190/0x400 [ 591.333912][T14274] skb_clone+0x190/0x400 [ 591.333960][T14274] netlink_deliver_tap+0xaed/0xcc0 [ 591.334018][T14274] netlink_unicast+0x650/0x870 [ 591.334056][T14274] ? __pfx_netlink_unicast+0x10/0x10 [ 591.334102][T14274] netlink_sendmsg+0x8b0/0xda0 [ 591.334140][T14274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.334169][T14274] ? __import_iovec+0x1d2/0x640 [ 591.334213][T14274] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 591.334253][T14274] ____sys_sendmsg+0x9e1/0xb70 [ 591.334287][T14274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.334323][T14274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.334379][T14274] ___sys_sendmsg+0x190/0x1e0 [ 591.334420][T14274] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.334522][T14274] __sys_sendmsg+0x170/0x220 [ 591.334569][T14274] ? __pfx___sys_sendmsg+0x10/0x10 [ 591.334642][T14274] do_syscall_64+0x106/0xf80 [ 591.334671][T14274] ? clear_bhb_loop+0x40/0x90 [ 591.334708][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.334739][T14274] RIP: 0033:0x7f38f219c819 [ 591.334765][T14274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.334794][T14274] RSP: 002b:00007f38f2fd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.334824][T14274] RAX: ffffffffffffffda RBX: 00007f38f2415fa0 RCX: 00007f38f219c819 [ 591.334844][T14274] RDX: 0000000004000084 RSI: 0000200000000240 RDI: 0000000000000003 [ 591.334863][T14274] RBP: 00007f38f2fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 591.334881][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.334899][T14274] R13: 00007f38f2416038 R14: 00007f38f2415fa0 R15: 00007ffd64fbe3e8 [ 591.334940][T14274] [ 592.211938][T14292] FAULT_INJECTION: forcing a failure. [ 592.211938][T14292] name failslab, interval 1, probability 0, space 0, times 0 [ 592.232252][T14292] CPU: 0 UID: 0 PID: 14292 Comm: syz.3.1875 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.232301][T14292] Tainted: [L]=SOFTLOCKUP [ 592.232312][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.232330][T14292] Call Trace: [ 592.232340][T14292] [ 592.232352][T14292] dump_stack_lvl+0x100/0x190 [ 592.232403][T14292] should_fail_ex.cold+0x5/0xa [ 592.232439][T14292] ? process_preds+0x452/0x1d90 [ 592.232500][T14292] should_failslab+0xc2/0x120 [ 592.232534][T14292] __kmalloc_noprof+0xe0/0x850 [ 592.232590][T14292] process_preds+0x452/0x1d90 [ 592.232645][T14292] ? create_filter_start.constprop.0+0x134/0x310 [ 592.232699][T14292] create_filter+0x140/0x210 [ 592.232754][T14292] ? __pfx_create_filter+0x10/0x10 [ 592.232805][T14292] ? find_held_lock+0x2b/0x80 [ 592.232841][T14292] apply_event_filter+0x220/0x500 [ 592.232890][T14292] ? __pfx_apply_event_filter+0x10/0x10 [ 592.232949][T14292] event_filter_write+0x16d/0x290 [ 592.232988][T14292] vfs_write+0x2aa/0x1070 [ 592.233019][T14292] ? __pfx_event_filter_write+0x10/0x10 [ 592.233059][T14292] ? __pfx_vfs_write+0x10/0x10 [ 592.233089][T14292] ? __fget_files+0x215/0x3d0 [ 592.233130][T14292] ? __fget_files+0x21f/0x3d0 [ 592.233171][T14292] ksys_write+0x12a/0x250 [ 592.233201][T14292] ? __pfx_ksys_write+0x10/0x10 [ 592.233243][T14292] do_syscall_64+0x106/0xf80 [ 592.233272][T14292] ? clear_bhb_loop+0x40/0x90 [ 592.233310][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.233340][T14292] RIP: 0033:0x7fabda19c819 [ 592.233367][T14292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.233395][T14292] RSP: 002b:00007fabdafaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.233424][T14292] RAX: ffffffffffffffda RBX: 00007fabda415fa0 RCX: 00007fabda19c819 [ 592.233444][T14292] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 592.233461][T14292] RBP: 00007fabdafaa090 R08: 0000000000000000 R09: 0000000000000000 [ 592.233478][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.233496][T14292] R13: 00007fabda416038 R14: 00007fabda415fa0 R15: 00007ffc457b8268 [ 592.233538][T14292] [ 593.627229][T14320] block nbd20: Unsupported socket: should be TCP or UNIX. [ 594.577453][ T30] audit: type=1800 audit(1775205942.596:13): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1892" name="lu_gp_id" dev="configfs" ino=70159 res=0 errno=0 [ 594.750626][T14364] FAULT_INJECTION: forcing a failure. [ 594.750626][T14364] name failslab, interval 1, probability 0, space 0, times 0 [ 594.786942][T14364] CPU: 0 UID: 0 PID: 14364 Comm: syz.4.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.786990][T14364] Tainted: [L]=SOFTLOCKUP [ 594.787002][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 594.787021][T14364] Call Trace: [ 594.787032][T14364] [ 594.787045][T14364] dump_stack_lvl+0x100/0x190 [ 594.787098][T14364] should_fail_ex.cold+0x5/0xa [ 594.787137][T14364] should_failslab+0xc2/0x120 [ 594.787175][T14364] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 594.787223][T14364] ? audit_log_start+0x29d/0x930 [ 594.787278][T14364] audit_log_start+0x29d/0x930 [ 594.787329][T14364] ? __pfx_audit_log_start+0x10/0x10 [ 594.787396][T14364] integrity_audit_message+0x10c/0x4f0 [ 594.787458][T14364] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 594.787510][T14364] ? __pfx_integrity_audit_message+0x10/0x10 [ 594.787558][T14364] ? take_dentry_name_snapshot+0x310/0x7c0 [ 594.787609][T14364] integrity_audit_msg+0x41/0x60 [ 594.787662][T14364] ima_collect_measurement+0x72a/0xa40 [ 594.787698][T14364] ? ima_file_mmap+0x1c4/0x1f0 [ 594.787738][T14364] ? __pfx_ima_collect_measurement+0x10/0x10 [ 594.787775][T14364] ? lock_acquire+0x1cf/0x380 [ 594.787840][T14364] ? do_raw_read_unlock+0x3f/0x70 [ 594.787896][T14364] ? vfs_getxattr_alloc+0xec/0x350 [ 594.787939][T14364] ? ima_get_hash_algo+0x22d/0x400 [ 594.787984][T14364] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 594.788040][T14364] ? process_measurement+0xdfe/0x2350 [ 594.788072][T14364] process_measurement+0xdfe/0x2350 [ 594.788117][T14364] ? __pfx_process_measurement+0x10/0x10 [ 594.788150][T14364] ? __lock_acquire+0x4a5/0x2630 [ 594.788236][T14364] ? __pfx_aa_file_perm+0x10/0x10 [ 594.788294][T14364] ima_file_mmap+0x1c4/0x1f0 [ 594.788326][T14364] ? __pfx_ima_file_mmap+0x10/0x10 [ 594.788364][T14364] security_mmap_file+0x278/0x9b0 [ 594.788406][T14364] vm_mmap_pgoff+0xec/0x470 [ 594.788455][T14364] ? find_held_lock+0x2b/0x80 [ 594.788482][T14364] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 594.788515][T14364] ? __fget_files+0x215/0x3d0 [ 594.788551][T14364] ? __fget_files+0x21f/0x3d0 [ 594.788585][T14364] ksys_mmap_pgoff+0x3c8/0x650 [ 594.788615][T14364] ? __x64_sys_futex+0x34f/0x4d0 [ 594.788648][T14364] ? __x64_sys_futex+0x358/0x4d0 [ 594.788684][T14364] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 594.788714][T14364] ? xfd_validate_state+0x129/0x190 [ 594.788759][T14364] __x64_sys_mmap+0x125/0x190 [ 594.788807][T14364] do_syscall_64+0x106/0xf80 [ 594.788837][T14364] ? clear_bhb_loop+0x40/0x90 [ 594.788878][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.788911][T14364] RIP: 0033:0x7f38f219c819 [ 594.788939][T14364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.788968][T14364] RSP: 002b:00007f38f2fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 594.788998][T14364] RAX: ffffffffffffffda RBX: 00007f38f2415fa0 RCX: 00007f38f219c819 [ 594.789021][T14364] RDX: 0000000000000007 RSI: 0000000000400003 RDI: 0000000000002000 [ 594.789040][T14364] RBP: 00007f38f2232c91 R08: 0000000000000001 R09: 0000000000000000 [ 594.789058][T14364] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 594.789074][T14364] R13: 00007f38f2416038 R14: 00007f38f2415fa0 R15: 00007ffd64fbe3e8 [ 594.789115][T14364] [ 595.114009][T14364] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 595.122231][T14364] audit: out of memory in audit_log_start [ 595.163974][T12253] block nbd20: Receive control failed (result -32) [ 595.866499][T14390] QAT: Stopping all acceleration devices. [ 602.326168][T14506] block nbd9: NBD_DISCONNECT [ 602.331130][T14506] block nbd9: Send disconnect failed -32 [ 602.338226][T14506] block nbd9: shutting down sockets [ 605.903311][T12253] block nbd9: Receive control failed (result -32) [ 606.150746][T14591] Invalid ELF header magic: != ELF [ 606.431488][T14583] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.452747][T14583] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.464046][T14583] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.481254][T14583] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 606.584597][T14583] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.601179][T14583] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 606.925039][T14583] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 607.256361][T14615] : Can't lookup blockdev [ 608.484759][T12253] Bluetooth: hci3: command 0x0406 tx timeout [ 608.486391][T12594] Bluetooth: hci1: command 0x0406 tx timeout [ 608.498569][T12253] Bluetooth: hci0: command 0x0406 tx timeout [ 608.649295][T12253] Bluetooth: hci2: command 0x0c1a tx timeout [ 609.075064][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.107121][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.117549][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.169272][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.211812][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.319549][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.388925][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.430877][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.531659][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.610073][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 609.635073][T12253] block nbd21: Receive control failed (result -32) [ 610.565638][T12253] Bluetooth: hci3: command 0x0406 tx timeout [ 610.738453][T12253] Bluetooth: hci2: command 0x0c1a tx timeout [ 611.587549][T14709] block nbd9: NBD_DISCONNECT [ 611.592198][T14709] block nbd9: Send disconnect failed -32 [ 611.605571][T14709] block nbd9: shutting down sockets [ 612.552377][T14765] : Can't lookup blockdev [ 612.807867][T12253] Bluetooth: hci2: command 0x0c1a tx timeout [ 613.246256][T12253] block nbd9: Receive control failed (result -32) [ 613.443235][T14788] block nbd9: NBD_DISCONNECT [ 613.470865][T14788] block nbd9: Send disconnect failed -32 [ 613.494507][T14788] block nbd9: shutting down sockets [ 614.161361][T14802] FAULT_INJECTION: forcing a failure. [ 614.161361][T14802] name failslab, interval 1, probability 0, space 0, times 0 [ 614.174113][T14802] CPU: 1 UID: 0 PID: 14802 Comm: syz.4.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.174144][T14802] Tainted: [L]=SOFTLOCKUP [ 614.174152][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 614.174163][T14802] Call Trace: [ 614.174171][T14802] [ 614.174178][T14802] dump_stack_lvl+0x100/0x190 [ 614.174212][T14802] should_fail_ex.cold+0x5/0xa [ 614.174233][T14802] ? lsm_blob_alloc+0x68/0x90 [ 614.174260][T14802] should_failslab+0xc2/0x120 [ 614.174282][T14802] __kmalloc_noprof+0xe0/0x850 [ 614.174310][T14802] ? trace_kmalloc+0x101/0x130 [ 614.174334][T14802] lsm_blob_alloc+0x68/0x90 [ 614.174362][T14802] security_sk_alloc+0x2d/0x290 [ 614.174384][T14802] sk_prot_alloc+0x12a/0x2a0 [ 614.174410][T14802] sk_alloc+0x36/0xe80 [ 614.174438][T14802] packet_create+0x127/0x8e0 [ 614.174463][T14802] __sock_create+0x339/0x860 [ 614.174490][T14802] __sys_socket+0x14d/0x260 [ 614.174515][T14802] ? __pfx___sys_socket+0x10/0x10 [ 614.174545][T14802] __x64_sys_socket+0x72/0xb0 [ 614.174568][T14802] ? lockdep_hardirqs_on+0x78/0x100 [ 614.174587][T14802] do_syscall_64+0x106/0xf80 [ 614.174605][T14802] ? clear_bhb_loop+0x40/0x90 [ 614.174628][T14802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.174656][T14802] RIP: 0033:0x7f38f219c819 [ 614.174673][T14802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.174691][T14802] RSP: 002b:00007f38f2fb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 614.174710][T14802] RAX: ffffffffffffffda RBX: 00007f38f2416090 RCX: 00007f38f219c819 [ 614.174723][T14802] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000002 [ 614.174734][T14802] RBP: 00007f38f2232c91 R08: 0000000000000000 R09: 0000000000000000 [ 614.174746][T14802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.174757][T14802] R13: 00007f38f2416128 R14: 00007f38f2416090 R15: 00007ffd64fbe3e8 [ 614.174780][T14802] [ 616.966738][T14851] __nla_validate_parse: 24 callbacks suppressed [ 616.966767][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'. [ 618.127307][T12253] block nbd9: Receive control failed (result -32) [ 618.419801][T14879] FAULT_INJECTION: forcing a failure. [ 618.419801][T14879] name failslab, interval 1, probability 0, space 0, times 0 [ 618.469420][T14879] CPU: 1 UID: 0 PID: 14879 Comm: syz.4.2018 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.469475][T14879] Tainted: [L]=SOFTLOCKUP [ 618.469487][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 618.469506][T14879] Call Trace: [ 618.469518][T14879] [ 618.469530][T14879] dump_stack_lvl+0x100/0x190 [ 618.469578][T14879] should_fail_ex.cold+0x5/0xa [ 618.469615][T14879] should_failslab+0xc2/0x120 [ 618.469650][T14879] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 618.469697][T14879] ? dup_fd+0x4d/0xd10 [ 618.469729][T14879] ? do_futex+0x192/0x350 [ 618.469775][T14879] dup_fd+0x4d/0xd10 [ 618.469805][T14879] ? __sys_sendmsg+0x18f/0x220 [ 618.469867][T14879] __x64_sys_close_range+0x405/0x5d0 [ 618.469907][T14879] ? __pfx___x64_sys_close_range+0x10/0x10 [ 618.469955][T14879] do_syscall_64+0x106/0xf80 [ 618.469986][T14879] ? clear_bhb_loop+0x40/0x90 [ 618.470025][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.470057][T14879] RIP: 0033:0x7f38f219c819 [ 618.470084][T14879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.470112][T14879] RSP: 002b:00007f38f2fd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 618.470144][T14879] RAX: ffffffffffffffda RBX: 00007f38f2415fa0 RCX: 00007f38f219c819 [ 618.470163][T14879] RDX: 0000000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 618.470179][T14879] RBP: 00007f38f2232c91 R08: 0000000000000000 R09: 0000000000000000 [ 618.470199][T14879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.470216][T14879] R13: 00007f38f2416038 R14: 00007f38f2415fa0 R15: 00007ffd64fbe3e8 [ 618.470255][T14879] [ 619.432726][T14899] random: crng reseeded on system resumption [ 620.047772][T14940] block nbd9: NBD_DISCONNECT [ 620.074291][T14940] block nbd9: Send disconnect failed -32 [ 620.080001][T14940] block nbd9: shutting down sockets [ 620.407255][T14949] Process accounting resumed [ 622.027721][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 622.099296][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 623.592006][T15030] bridge0: port 3(dummy0) entered blocking state [ 623.618428][T15030] bridge0: port 3(dummy0) entered disabled state [ 623.630402][T15030] dummy0: entered allmulticast mode [ 623.665437][T15030] dummy0: entered promiscuous mode [ 623.714792][T15030] bridge0: port 3(dummy0) entered blocking state [ 623.721337][T15030] bridge0: port 3(dummy0) entered forwarding state [ 624.374753][T12253] block nbd9: Receive control failed (result -32) [ 624.819955][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.826612][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.602774][T15081] FAULT_INJECTION: forcing a failure. [ 625.602774][T15081] name failslab, interval 1, probability 0, space 0, times 0 [ 625.616297][T15081] CPU: 1 UID: 0 PID: 15081 Comm: syz.1.2066 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.616347][T15081] Tainted: [L]=SOFTLOCKUP [ 625.616358][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 625.616378][T15081] Call Trace: [ 625.616389][T15081] [ 625.616400][T15081] dump_stack_lvl+0x100/0x190 [ 625.616455][T15081] should_fail_ex.cold+0x5/0xa [ 625.616494][T15081] ? __register_sysctl_table+0xbe4/0x1650 [ 625.616526][T15081] should_failslab+0xc2/0x120 [ 625.616563][T15081] __kmalloc_noprof+0xe0/0x850 [ 625.616623][T15081] __register_sysctl_table+0xbe4/0x1650 [ 625.616675][T15081] ? __pfx___register_sysctl_table+0x10/0x10 [ 625.616706][T15081] ? is_module_address+0x69/0xf0 [ 625.616747][T15081] ? register_net_sysctl_sz+0x222/0x430 [ 625.616789][T15081] ? __asan_memcpy+0x3c/0x60 [ 625.616837][T15081] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 625.616869][T15081] nf_lwtunnel_net_init+0x60/0xf0 [ 625.616902][T15081] ops_init+0x1e2/0x5f0 [ 625.616939][T15081] setup_net+0x118/0x3a0 [ 625.616972][T15081] ? __pfx_setup_net+0x10/0x10 [ 625.617002][T15081] ? lockdep_init_map_type+0x5c/0x250 [ 625.617047][T15081] ? mutex_init_lockep+0x110/0x150 [ 625.617097][T15081] copy_net_ns+0x46f/0x7c0 [ 625.617137][T15081] create_new_namespaces+0x3ea/0xac0 [ 625.617183][T15081] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 625.617224][T15081] ksys_unshare+0x473/0xad0 [ 625.617268][T15081] ? __pfx_ksys_unshare+0x10/0x10 [ 625.617324][T15081] __x64_sys_unshare+0x31/0x40 [ 625.617365][T15081] do_syscall_64+0x106/0xf80 [ 625.617394][T15081] ? clear_bhb_loop+0x40/0x90 [ 625.617430][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.617459][T15081] RIP: 0033:0x7f99f4b9c819 [ 625.617486][T15081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.617515][T15081] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 625.617546][T15081] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 625.617567][T15081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 625.617586][T15081] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 625.617606][T15081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.617624][T15081] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 625.617670][T15081] [ 625.618543][T15081] sysctl could not get directory: /net -12 [ 626.345122][T15099] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 627.552238][T15117] NFSD: Failed to start, no listeners configured. [ 628.852978][T15152] block nbd9: NBD_DISCONNECT [ 628.868918][T15152] block nbd9: Send disconnect failed -32 [ 628.925635][T15152] block nbd9: shutting down sockets [ 635.584900][T15277] FAULT_INJECTION: forcing a failure. [ 635.584900][T15277] name failslab, interval 1, probability 0, space 0, times 0 [ 635.625300][T15277] CPU: 1 UID: 0 PID: 15277 Comm: syz.1.2115 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.625352][T15277] Tainted: [L]=SOFTLOCKUP [ 635.625364][T15277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 635.625383][T15277] Call Trace: [ 635.625394][T15277] [ 635.625407][T15277] dump_stack_lvl+0x100/0x190 [ 635.625469][T15277] should_fail_ex.cold+0x5/0xa [ 635.625509][T15277] should_failslab+0xc2/0x120 [ 635.625547][T15277] __kmalloc_cache_noprof+0x7a/0x6f0 [ 635.625590][T15277] ? append_filter_err+0xb8/0x620 [ 635.625637][T15277] ? process_preds+0x93d/0x1d90 [ 635.625691][T15277] append_filter_err+0xb8/0x620 [ 635.625737][T15277] ? create_filter_start.constprop.0+0x134/0x310 [ 635.625791][T15277] create_filter+0x1a6/0x210 [ 635.625839][T15277] ? __pfx_create_filter+0x10/0x10 [ 635.625891][T15277] ? find_held_lock+0x2b/0x80 [ 635.625930][T15277] apply_event_filter+0x220/0x500 [ 635.625981][T15277] ? __pfx_apply_event_filter+0x10/0x10 [ 635.626045][T15277] event_filter_write+0x16d/0x290 [ 635.626085][T15277] vfs_write+0x2aa/0x1070 [ 635.626117][T15277] ? __pfx_event_filter_write+0x10/0x10 [ 635.626161][T15277] ? __pfx_vfs_write+0x10/0x10 [ 635.626192][T15277] ? __fget_files+0x215/0x3d0 [ 635.626232][T15277] ? __fget_files+0x21f/0x3d0 [ 635.626277][T15277] ksys_write+0x12a/0x250 [ 635.626308][T15277] ? __pfx_ksys_write+0x10/0x10 [ 635.626351][T15277] do_syscall_64+0x106/0xf80 [ 635.626382][T15277] ? clear_bhb_loop+0x40/0x90 [ 635.626419][T15277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.626464][T15277] RIP: 0033:0x7f99f4b9c819 [ 635.626493][T15277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.626525][T15277] RSP: 002b:00007f99f5ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.626557][T15277] RAX: ffffffffffffffda RBX: 00007f99f4e15fa0 RCX: 00007f99f4b9c819 [ 635.626578][T15277] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.626598][T15277] RBP: 00007f99f4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 635.626617][T15277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.626635][T15277] R13: 00007f99f4e16038 R14: 00007f99f4e15fa0 R15: 00007ffdd54af148 [ 635.626679][T15277] [ 636.939932][T15313] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 638.310169][T15327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 638.317231][T15327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.323952][T15327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.330617][T15327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.940204][T12253] Bluetooth: hci0: command 0x0406 tx timeout [ 640.341596][T12253] Bluetooth: hci2: command 0x0c1a tx timeout [ 640.347743][T14633] Bluetooth: hci3: command 0x0406 tx timeout [ 640.353806][T12594] Bluetooth: hci1: command 0x0406 tx timeout [ 642.393658][T15398] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 643.738424][T15418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2150'. [ 643.809532][T15418] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 643.816775][T15418] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 644.290580][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 644.693485][T12253] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 646.496464][ T30] audit: type=1800 audit(1775205994.510:14): pid=15485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2167" name="dbroot" dev="configfs" ino=76310 res=0 errno=0 [ 646.519822][T15485] db_root: cannot open: /dev/audio1 [ 646.527397][T15485] db_root: not a directory: /dev/audio1 [ 646.857725][T15495] openvswitch: netlink: IP tunnel dst address not specified [ 647.634633][T15513] ------------[ cut here ]------------ [ 647.651375][T15513] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1898:13 [ 647.751420][T15513] shift exponent 64 is too large for 32-bit type 'int' [ 647.782472][T15513] CPU: 1 UID: 0 PID: 15513 Comm: syz.4.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.782519][T15513] Tainted: [L]=SOFTLOCKUP [ 647.782529][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.782545][T15513] Call Trace: [ 647.782556][T15513] [ 647.782568][T15513] dump_stack_lvl+0x100/0x190 [ 647.782626][T15513] ubsan_epilogue+0xa/0x30 [ 647.782655][T15513] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 647.782709][T15513] sg_build_indirect.cold+0x1b/0x20 [ 647.782753][T15513] ? do_raw_write_lock+0x11e/0x260 [ 647.782810][T15513] sg_build_reserve+0xc8/0x180 [ 647.782838][T15513] ? lockdep_hardirqs_on+0x78/0x100 [ 647.782872][T15513] sg_open+0xd5c/0x1aa0 [ 647.782914][T15513] ? __pfx_sg_open+0x10/0x10 [ 647.782945][T15513] ? kobject_get_unless_zero+0x156/0x200 [ 647.782980][T15513] ? find_held_lock+0x2b/0x80 [ 647.783008][T15513] ? chrdev_open+0x10b/0x6a0 [ 647.783039][T15513] ? chrdev_open+0x10b/0x6a0 [ 647.783077][T15513] ? __pfx_sg_open+0x10/0x10 [ 647.783107][T15513] chrdev_open+0x234/0x6a0 [ 647.783138][T15513] ? __pfx_apparmor_file_open+0x10/0x10 [ 647.783172][T15513] ? __pfx_chrdev_open+0x10/0x10 [ 647.783206][T15513] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 647.783249][T15513] do_dentry_open+0x6d8/0x1660 [ 647.783282][T15513] ? __pfx_chrdev_open+0x10/0x10 [ 647.783322][T15513] vfs_open+0x82/0x3f0 [ 647.783364][T15513] path_openat+0x208c/0x31a0 [ 647.783409][T15513] ? __pfx_path_openat+0x10/0x10 [ 647.783464][T15513] do_file_open+0x20e/0x430 [ 647.783500][T15513] ? __pfx_do_file_open+0x10/0x10 [ 647.783563][T15513] ? alloc_fd+0x476/0x790 [ 647.783607][T15513] ? do_getname+0x191/0x390 [ 647.783649][T15513] do_sys_openat2+0x10d/0x1e0 [ 647.783688][T15513] ? __pfx_do_sys_openat2+0x10/0x10 [ 647.783730][T15513] ? rcu_is_watching+0x12/0xc0 [ 647.783785][T15513] __x64_sys_openat+0x12d/0x210 [ 647.783826][T15513] ? __pfx___x64_sys_openat+0x10/0x10 [ 647.783883][T15513] do_syscall_64+0x106/0xf80 [ 647.783911][T15513] ? clear_bhb_loop+0x40/0x90 [ 647.783947][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.783975][T15513] RIP: 0033:0x7f38f219c819 [ 647.783999][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.784027][T15513] RSP: 002b:00007f38f03f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.784056][T15513] RAX: ffffffffffffffda RBX: 00007f38f2416360 RCX: 00007f38f219c819 [ 647.784074][T15513] RDX: 00000000000c0482 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 647.784092][T15513] RBP: 00007f38f2232c91 R08: 0000000000000000 R09: 0000000000000000 [ 647.784109][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.784126][T15513] R13: 00007f38f24163f8 R14: 00007f38f2416360 R15: 00007ffd64fbe3e8 [ 647.784167][T15513] [ 648.272568][T15513] ---[ end trace ]--- [ 648.287708][T15513] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 648.294974][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.4.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.305939][T15513] Tainted: [L]=SOFTLOCKUP [ 648.310281][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.320360][T15513] Call Trace: [ 648.323651][T15513] [ 648.326598][T15513] dump_stack_lvl+0x100/0x190 [ 648.331310][T15513] vpanic+0x552/0x970 [ 648.335321][T15513] ? __pfx_vpanic+0x10/0x10 [ 648.339854][T15513] ? irqentry_exit+0x180/0x670 [ 648.344633][T15513] ? lockdep_hardirqs_on+0x78/0x100 [ 648.349852][T15513] panic+0xd1/0xe0 [ 648.353592][T15513] ? __pfx_panic+0x10/0x10 [ 648.358119][T15513] ? dump_stack_lvl+0x16c/0x190 [ 648.362995][T15513] ? dump_stack_lvl+0x176/0x190 [ 648.367875][T15513] ? check_panic_on_warn+0x1f/0x90 [ 648.373018][T15513] check_panic_on_warn.cold+0x19/0x34 [ 648.378409][T15513] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 648.384861][T15513] sg_build_indirect.cold+0x1b/0x20 [ 648.390094][T15513] ? do_raw_write_lock+0x11e/0x260 [ 648.395247][T15513] sg_build_reserve+0xc8/0x180 [ 648.400027][T15513] ? lockdep_hardirqs_on+0x78/0x100 [ 648.405244][T15513] sg_open+0xd5c/0x1aa0 [ 648.409430][T15513] ? __pfx_sg_open+0x10/0x10 [ 648.414037][T15513] ? kobject_get_unless_zero+0x156/0x200 [ 648.419695][T15513] ? find_held_lock+0x2b/0x80 [ 648.424394][T15513] ? chrdev_open+0x10b/0x6a0 [ 648.429005][T15513] ? chrdev_open+0x10b/0x6a0 [ 648.433618][T15513] ? __pfx_sg_open+0x10/0x10 [ 648.438226][T15513] chrdev_open+0x234/0x6a0 [ 648.442666][T15513] ? __pfx_apparmor_file_open+0x10/0x10 [ 648.448229][T15513] ? __pfx_chrdev_open+0x10/0x10 [ 648.453188][T15513] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 648.459541][T15513] do_dentry_open+0x6d8/0x1660 [ 648.464327][T15513] ? __pfx_chrdev_open+0x10/0x10 [ 648.469302][T15513] vfs_open+0x82/0x3f0 [ 648.473409][T15513] path_openat+0x208c/0x31a0 [ 648.478033][T15513] ? __pfx_path_openat+0x10/0x10 [ 648.483001][T15513] do_file_open+0x20e/0x430 [ 648.487533][T15513] ? __pfx_do_file_open+0x10/0x10 [ 648.492603][T15513] ? alloc_fd+0x476/0x790 [ 648.496961][T15513] ? do_getname+0x191/0x390 [ 648.501492][T15513] do_sys_openat2+0x10d/0x1e0 [ 648.506197][T15513] ? __pfx_do_sys_openat2+0x10/0x10 [ 648.511423][T15513] ? rcu_is_watching+0x12/0xc0 [ 648.516231][T15513] __x64_sys_openat+0x12d/0x210 [ 648.521110][T15513] ? __pfx___x64_sys_openat+0x10/0x10 [ 648.526523][T15513] do_syscall_64+0x106/0xf80 [ 648.531130][T15513] ? clear_bhb_loop+0x40/0x90 [ 648.535831][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.541828][T15513] RIP: 0033:0x7f38f219c819 [ 648.546264][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.565895][T15513] RSP: 002b:00007f38f03f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 648.574337][T15513] RAX: ffffffffffffffda RBX: 00007f38f2416360 RCX: 00007f38f219c819 [ 648.582336][T15513] RDX: 00000000000c0482 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 648.590325][T15513] RBP: 00007f38f2232c91 R08: 0000000000000000 R09: 0000000000000000 [ 648.598319][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.606310][T15513] R13: 00007f38f24163f8 R14: 00007f38f2416360 R15: 00007ffd64fbe3e8 [ 648.614321][T15513] [ 648.617709][T15513] Kernel Offset: disabled [ 648.622089][T15513] Rebooting in 86400 seconds..