last executing test programs: 5m36.793032101s ago: executing program 0 (id=2096): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x405, 0x200000008000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x8081, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000100)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) 5m35.089475017s ago: executing program 0 (id=2099): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r0, &(0x7f0000000300)="01008000d8070000a7e9ce67feffffff00"/32, 0xfffffff9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 5m33.037708328s ago: executing program 0 (id=2105): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x80281, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x9, 0x5) 5m31.469214944s ago: executing program 0 (id=2110): mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 5m28.744013845s ago: executing program 0 (id=2124): unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f00000000c0)='1', 0x1) select$auto(0x402010, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000200)={0x8, 0x9}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5m26.020099323s ago: executing program 0 (id=2120): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) 5m10.906247393s ago: executing program 32 (id=2120): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) 2m39.22424033s ago: executing program 2 (id=2553): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x10000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 2m37.100812625s ago: executing program 2 (id=2559): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x100) pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) splice$auto(r1, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m35.510379283s ago: executing program 2 (id=2563): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = socket(0x18, 0xa, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2m33.682447328s ago: executing program 2 (id=2567): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x261c2, 0xb2) fallocate$auto(0x8000000000000003, 0x0, 0xd252, 0xcbd5d) lseek$auto(0x3, 0x8, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) 2m31.221544641s ago: executing program 2 (id=2573): ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x2000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2m30.676246515s ago: executing program 2 (id=2575): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/amidi2\x00', 0x81, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xaea2, 0x0) 2m15.171626626s ago: executing program 33 (id=2575): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/amidi2\x00', 0x81, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xaea2, 0x0) 2m6.864591197s ago: executing program 3 (id=2622): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r0 = socket(0x10, 0x80002, 0x8) close_range$auto(r0, r0, 0x0) pipe$auto(0x0) splice$auto(r0, 0x0, 0x2, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) 2m5.905870476s ago: executing program 3 (id=2626): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 2m4.402906495s ago: executing program 3 (id=2629): bind$auto(0xffffffffffffffff, 0x0, 0x6a) unshare$auto(0xffffffffffffffff) unshare$auto(0x40000080) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x18800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x8000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x6, 0x10, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b3ce63f000000001000", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4, 0x63f8}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r0, 0x3, 0x85, @uprobe_multi={0x200000000003, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 2m3.334157744s ago: executing program 3 (id=2631): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x100) pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) splice$auto(r1, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m1.692366833s ago: executing program 3 (id=2634): ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x2000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2m1.038851169s ago: executing program 3 (id=2635): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18b941, 0x0) write$auto(r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 1m45.591673392s ago: executing program 34 (id=2635): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18b941, 0x0) write$auto(r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 11.145327136s ago: executing program 6 (id=2939): socket(0x2b, 0x1, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x400006, 0x2000df, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0xa, 0x300) socket(0x2, 0x5, 0x0) setns(0xc9, 0x0) socket(0x1a, 0x1, 0xff7ffff9) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x0, r1, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000100), 0x10, 0x0, 0x1f, 0x0, 0x24, 0xb}, 0xfff}, 0x5dc, 0x311) 11.142371409s ago: executing program 1 (id=2947): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x104000000000010e, 0xb, 0x0, 0x400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 11.038104544s ago: executing program 4 (id=2940): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0xe000000000000000, 0xe2, 0x2000000009b72, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x3, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = getpid() syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r0], 0x1}, 0x58) 10.962139073s ago: executing program 1 (id=2941): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f0000000040)={"24df202c52ce582a0a73bfa704878a246fc33219c75577639801c6106a8e786529a4668e21e8a9b2817530ce1fb4fc2d102c736b89a415c7a183eb07f8030b22835fbd9fdb3fa90ce8da218a0e3e3eb7c4233804196028f833e45ebe85d7e729aa777a271084f6dd7ddc988b016d23da37264de075c0e1abe160d263351db601", "b0b113fa57b34e83551e4e9ee15f25d3144ec0e65d8dcc1e2aa67241fb6ae0ef2da86d63d66eb3398b5d01e0249a4035ac4dfd5b1e904ba0ae329e383366547cee54863a0452c02f7f1fb7a55c8571826b00d951406d96a8338c4a923faa5cbc96e223acd4487267b584deff7d8f2bbc21d84674d5640d74c05686d77aa439f1", 0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 10.261421085s ago: executing program 6 (id=2942): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) gettid() r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) ftruncate$auto(r0, 0x100000001) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 8.545507601s ago: executing program 1 (id=2943): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf250200000008004300"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.410405847s ago: executing program 6 (id=2946): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', 0xaa902, 0x0) write$auto(r1, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 8.328694789s ago: executing program 4 (id=2949): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = mq_open$auto(0x0, 0x62, 0xfffc, 0x0) mq_timedreceive$auto(r1, 0x0, 0x1, 0x0, &(0x7f00000001c0)={0xe, 0xd}) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x80000000) 5.086540805s ago: executing program 1 (id=2950): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x4}, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 5.038654654s ago: executing program 5 (id=2951): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c0") openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x9) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r1, 0x0, 0x4000002) 4.975684495s ago: executing program 4 (id=2952): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0xd, 0x0, 0x221) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x10000, 0x7, 0x8000000000000000, 0x0) open(0x0, 0x20342, 0x55) socket(0x2, 0x3, 0xa) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) tgkill$auto_SIGCONT(r0, r0, 0x12) 4.959924524s ago: executing program 6 (id=2953): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb39\xdc\xe0f\f\xfb\xbeg\xe1\x99h\xc9W&\x88\xac\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) socket(0x1f, 0x4, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 3.995681493s ago: executing program 4 (id=2954): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_7={@map_id=0x10, 0x930, 0x281}, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.994575516s ago: executing program 5 (id=2962): r0 = socket(0x2, 0x804, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pselect6$auto(0x8eb, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) 2.315145961s ago: executing program 6 (id=2955): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x4, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3ffffe, 0x7, 0x11, 0xdd, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x0) 2.10611603s ago: executing program 4 (id=2956): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f0000000040)={"24df202c52ce582a0a73bfa704878a246fc33219c75577639801c6106a8e786529a4668e21e8a9b2817530ce1fb4fc2d102c736b89a415c7a183eb07f8030b22835fbd9fdb3fa90ce8da218a0e3e3eb7c4233804196028f833e45ebe85d7e729aa777a271084f6dd7ddc988b016d23da37264de075c0e1abe160d263351db601", "b0b113fa57b34e83551e4e9ee15f25d3144ec0e65d8dcc1e2aa67241fb6ae0ef2da86d63d66eb3398b5d01e0249a4035ac4dfd5b1e904ba0ae329e383366547cee54863a0452c02f7f1fb7a55c8571826b00d951406d96a8338c4a923faa5cbc96e223acd4487267b584deff7d8f2bbc21d84674d5640d74c05686d77aa439f1", 0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.106032086s ago: executing program 1 (id=2957): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) gettid() r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) ftruncate$auto(r0, 0x100000001) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 1.942143487s ago: executing program 5 (id=2958): personality$auto(0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper\x00', 0x80302, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) 1.709884736s ago: executing program 5 (id=2959): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x141e83, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC_MASK={0x6a, 0xd7, "dad3bde5c8184c8ca9568b585b6e2c0dff43df6b435dcb348f45b0d14a77ba327d4abfc5b8d971d5d5ead02d5759e67a6afc0f0d4cd9cc6080c9c93542fd08e591011bc62f398a4426617281b6b8bfb3bb841c0dbd182c9bbdcf33c8a8f414af5cba85c63f43"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0xef0}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 200.606338ms ago: executing program 1 (id=2960): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create$auto(0x87ffffd) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x1, 0x0, 0xd, 0x5, r0, 0x6, 0x7fff}, 0x3b) 200.47774ms ago: executing program 5 (id=2961): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 157.408876ms ago: executing program 6 (id=2963): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x73) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 137.687238ms ago: executing program 4 (id=2964): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ustat$auto(0x10005, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) 0s ago: executing program 5 (id=2965): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ram2\x00', 0x0, 0x0) ioctl$auto_BLKCRYPTOGENERATEKEY(r1, 0xc030128a, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) kernel console output (not intermixed with test programs): 17.554968][T13440] ? __lock_acquire+0x5c0/0x1f40 [ 517.554991][T13440] ? aa_sk_perm+0x389/0xab0 [ 517.555040][T13440] ? __pfx_woken_wake_function+0x10/0x10 [ 517.555066][T13440] ? lock_acquire+0x1d1/0x380 [ 517.555094][T13440] ? __local_bh_enable_ip+0xa5/0x120 [ 517.555120][T13440] tipc_sendmsg+0x4f/0x70 [ 517.555142][T13440] sock_write_iter+0x53a/0x5b0 [ 517.555186][T13440] ? __pfx_tipc_sendmsg+0x10/0x10 [ 517.555206][T13440] ? __pfx_sock_write_iter+0x10/0x10 [ 517.555233][T13440] do_iter_readv_writev+0x6f7/0x930 [ 517.555283][T13440] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 517.555305][T13440] ? common_file_perm+0x266/0x500 [ 517.555344][T13440] ? bpf_lsm_file_permission+0x9/0x10 [ 517.555414][T13440] ? security_file_permission+0x76/0x210 [ 517.555430][T13440] ? rw_verify_area+0xce/0x6d0 [ 517.555446][T13440] vfs_writev+0x360/0xdd0 [ 517.555463][T13440] ? __lock_acquire+0x5c0/0x1f40 [ 517.555486][T13440] ? __pfx_vfs_writev+0x10/0x10 [ 517.555505][T13440] ? lock_acquire+0x1d1/0x380 [ 517.555523][T13440] ? __fget_files+0x34/0x3d0 [ 517.555547][T13440] ? __fget_files+0x21f/0x3d0 [ 517.555568][T13440] ? do_writev+0x28a/0x340 [ 517.555581][T13440] do_writev+0x28a/0x340 [ 517.555596][T13440] ? __pfx_do_writev+0x10/0x10 [ 517.555616][T13440] do_syscall_64+0x121/0x770 [ 517.555636][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.555652][T13440] RIP: 0033:0x7f2a8859e159 [ 517.555666][T13440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.555679][T13440] RSP: 002b:00007f2a8939c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 517.555694][T13440] RAX: ffffffffffffffda RBX: 00007f2a88825fa0 RCX: 00007f2a8859e159 [ 517.555704][T13440] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 517.555712][T13440] RBP: 00007f2a8863506b R08: 0000000000000000 R09: 0000000000000000 [ 517.555721][T13440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.555730][T13440] R13: 00007f2a88826038 R14: 00007f2a88825fa0 R15: 00007ffcba01c768 [ 517.555749][T13440] [ 519.464627][T13473] netlink: 'syz.2.1594': attribute type 16 has an invalid length. [ 520.436391][T13489] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1599'. [ 522.583839][T13522] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1604'. [ 531.159016][T13660] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1628'. [ 536.192431][ T4933] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 536.863895][T13742] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1639'. [ 537.118106][T13722] Process accounting paused [ 541.139509][T13815] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1651'. [ 545.276590][T13871] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1659'. [ 547.758126][T13919] snd_dummy snd_dummy.0: control 61678:131081:1:y:6 is already present [ 549.252052][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 549.283717][T13928] unsupported nlmsg_type 40 [ 550.469375][T13960] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1677'. [ 551.602411][T13978] binder: 13972:13978 unknown command 1933 [ 551.602428][T13978] binder: 13972:13978 ioctl c0306201 200000000000 returned -22 [ 559.677891][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 559.701971][T14106] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1710'. [ 560.046549][T14119] snd_dummy snd_dummy.0: control 61678:131081:1:y:6 is already present [ 562.614777][T14155] netlink: 266 bytes leftover after parsing attributes in process `syz.3.1708'. [ 562.614809][T14155] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.782945][T14166] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1711'. [ 563.075381][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.075421][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.066428][T14226] netlink: 'syz.1.1723': attribute type 16 has an invalid length. [ 566.066447][T14226] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1723'. [ 566.610699][ T4933] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 566.905732][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 566.906839][T14237] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1725'. [ 567.516435][T14241] Process accounting resumed [ 568.172866][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1728'. [ 573.158471][T14317] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1748'. [ 573.377296][T14326] FAULT_INJECTION: forcing a failure. [ 573.377296][T14326] name failslab, interval 1, probability 0, space 0, times 0 [ 573.377325][T14326] CPU: 0 UID: 0 PID: 14326 Comm: syz.1.1743 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.377346][T14326] Tainted: [L]=SOFTLOCKUP [ 573.377352][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.377361][T14326] Call Trace: [ 573.377366][T14326] [ 573.377373][T14326] dump_stack_lvl+0x100/0x190 [ 573.377398][T14326] should_fail_ex.cold+0x5/0xa [ 573.377419][T14326] should_failslab+0xc2/0x120 [ 573.377441][T14326] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 573.377460][T14326] ? __kasan_kmalloc+0xaa/0xb0 [ 573.377479][T14326] ? apply_subsystem_event_filter+0x44d/0x17a0 [ 573.377536][T14326] kstrdup+0x51/0xe0 [ 573.377612][T14326] apply_subsystem_event_filter+0x44d/0x17a0 [ 573.377641][T14326] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 573.377667][T14326] ? _copy_from_user+0x59/0xd0 [ 573.377750][T14326] subsystem_filter_write+0x95/0x120 [ 573.377774][T14326] vfs_write+0x2aa/0x1050 [ 573.377792][T14326] ? __pfx_subsystem_filter_write+0x10/0x10 [ 573.377813][T14326] ? lock_acquire+0x1d1/0x380 [ 573.377832][T14326] ? __fget_files+0x34/0x3d0 [ 573.377849][T14326] ? __pfx_vfs_write+0x10/0x10 [ 573.377863][T14326] ? find_held_lock+0x2b/0x80 [ 573.377879][T14326] ? __fget_files+0x215/0x3d0 [ 573.377902][T14326] ? __fget_files+0x21f/0x3d0 [ 573.377924][T14326] ksys_write+0x12a/0x250 [ 573.377940][T14326] ? __pfx_ksys_write+0x10/0x10 [ 573.377962][T14326] do_syscall_64+0x121/0x770 [ 573.377981][T14326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.377997][T14326] RIP: 0033:0x7fc9d0d9e159 [ 573.378010][T14326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.378024][T14326] RSP: 002b:00007fc9d1c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 573.378039][T14326] RAX: ffffffffffffffda RBX: 00007fc9d1025fa0 RCX: 00007fc9d0d9e159 [ 573.378049][T14326] RDX: 0000000000000078 RSI: 0000200000000040 RDI: 0000000000000006 [ 573.378058][T14326] RBP: 00007fc9d0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 573.378067][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.378076][T14326] R13: 00007fc9d1026038 R14: 00007fc9d1025fa0 R15: 00007ffc6cb53ef8 [ 573.378096][T14326] [ 573.894533][T14337] snd_dummy snd_dummy.0: control 61678:131081:1:y:6 is already present [ 575.307476][T14353] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 577.961610][T14414] snd_dummy snd_dummy.0: control 61678:131081:1:y:6 is already present [ 578.276411][T14417] netlink: 'syz.0.1759': attribute type 5 has an invalid length. [ 578.276429][T14417] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1759'. [ 580.884613][T14451] FAULT_INJECTION: forcing a failure. [ 580.884613][T14451] name failslab, interval 1, probability 0, space 0, times 0 [ 580.884644][T14451] CPU: 0 UID: 0 PID: 14451 Comm: syz.0.1766 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.884666][T14451] Tainted: [L]=SOFTLOCKUP [ 580.884672][T14451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.884681][T14451] Call Trace: [ 580.884688][T14451] [ 580.884694][T14451] dump_stack_lvl+0x100/0x190 [ 580.884723][T14451] should_fail_ex.cold+0x5/0xa [ 580.884752][T14451] should_failslab+0xc2/0x120 [ 580.884774][T14451] __kmalloc_noprof+0xfc/0x840 [ 580.884791][T14451] ? iter_file_splice_write+0x5fd/0x10b0 [ 580.884903][T14451] ? iter_file_splice_write+0x1d8/0x10b0 [ 580.884927][T14451] iter_file_splice_write+0x1d8/0x10b0 [ 580.884957][T14451] ? __pfx_iter_file_splice_write+0x10/0x10 [ 580.884977][T14451] ? __lock_acquire+0x5c0/0x1f40 [ 580.884998][T14451] ? shmem_file_splice_read+0x724/0xd80 [ 580.885025][T14451] ? __pfx_iter_file_splice_write+0x10/0x10 [ 580.885046][T14451] direct_splice_actor+0x192/0x690 [ 580.885067][T14451] splice_direct_to_actor+0x345/0xa30 [ 580.885087][T14451] ? __pfx_direct_splice_actor+0x10/0x10 [ 580.885108][T14451] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 580.885129][T14451] ? lock_acquire+0x1d1/0x380 [ 580.885150][T14451] do_splice_direct+0x174/0x240 [ 580.885169][T14451] ? __pfx_do_splice_direct+0x10/0x10 [ 580.885188][T14451] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 580.885209][T14451] ? rw_verify_area+0xce/0x6d0 [ 580.885225][T14451] do_sendfile+0xadc/0xe20 [ 580.885244][T14451] ? __pfx_do_sendfile+0x10/0x10 [ 580.885266][T14451] __x64_sys_sendfile64+0x154/0x220 [ 580.885285][T14451] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 580.885309][T14451] do_syscall_64+0x121/0x770 [ 580.885329][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.885344][T14451] RIP: 0033:0x7f2a8859e159 [ 580.885358][T14451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.885372][T14451] RSP: 002b:00007f2a8939c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.885387][T14451] RAX: ffffffffffffffda RBX: 00007f2a88825fa0 RCX: 00007f2a8859e159 [ 580.885398][T14451] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 580.885408][T14451] RBP: 00007f2a8863506b R08: 0000000000000000 R09: 0000000000000000 [ 580.885417][T14451] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000 [ 580.885426][T14451] R13: 00007f2a88826038 R14: 00007f2a88825fa0 R15: 00007ffcba01c768 [ 580.885446][T14451] [ 582.290244][T14473] snd_dummy snd_dummy.0: control 61678:131081:1:y:6 is already present [ 584.168879][T14508] FAULT_INJECTION: forcing a failure. [ 584.168879][T14508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 584.168907][T14508] CPU: 0 UID: 0 PID: 14508 Comm: syz.2.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.168928][T14508] Tainted: [L]=SOFTLOCKUP [ 584.168934][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.168943][T14508] Call Trace: [ 584.168948][T14508] [ 584.168955][T14508] dump_stack_lvl+0x100/0x190 [ 584.168980][T14508] should_fail_ex.cold+0x5/0xa [ 584.169000][T14508] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 584.169105][T14508] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 584.169126][T14508] ? shmem_write_begin+0x1ba/0x420 [ 584.169142][T14508] ? __pfx_shmem_write_begin+0x10/0x10 [ 584.169157][T14508] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 584.169213][T14508] generic_perform_write+0x4cb/0xa40 [ 584.169329][T14508] ? __pfx_generic_perform_write+0x10/0x10 [ 584.169350][T14508] ? mnt_put_write_access_file+0x4e/0x100 [ 584.169397][T14508] ? file_update_time_flags+0x38c/0x520 [ 584.169422][T14508] shmem_file_write_iter+0x10e/0x140 [ 584.169442][T14508] vfs_write+0x6af/0x1050 [ 584.169460][T14508] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 584.169478][T14508] ? __pfx_vfs_write+0x10/0x10 [ 584.169493][T14508] ? find_held_lock+0x2b/0x80 [ 584.169524][T14508] ksys_write+0x12a/0x250 [ 584.169540][T14508] ? __pfx_ksys_write+0x10/0x10 [ 584.169561][T14508] do_syscall_64+0x121/0x770 [ 584.169581][T14508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.169596][T14508] RIP: 0033:0x7f5f4539e159 [ 584.169609][T14508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.169627][T14508] RSP: 002b:00007f5f46228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 584.169642][T14508] RAX: ffffffffffffffda RBX: 00007f5f45625fa0 RCX: 00007f5f4539e159 [ 584.169654][T14508] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 584.169663][T14508] RBP: 00007f5f4543506b R08: 0000000000000000 R09: 0000000000000000 [ 584.169672][T14508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.169680][T14508] R13: 00007f5f45626038 R14: 00007f5f45625fa0 R15: 00007ffe7a3a39d8 [ 584.169701][T14508] [ 594.506661][T14673] FAULT_INJECTION: forcing a failure. [ 594.506661][T14673] name failslab, interval 1, probability 0, space 0, times 0 [ 594.506693][T14673] CPU: 0 UID: 0 PID: 14673 Comm: syz.1.1808 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.506724][T14673] Tainted: [L]=SOFTLOCKUP [ 594.506730][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.506739][T14673] Call Trace: [ 594.506745][T14673] [ 594.506751][T14673] dump_stack_lvl+0x100/0x190 [ 594.506778][T14673] should_fail_ex.cold+0x5/0xa [ 594.506799][T14673] should_failslab+0xc2/0x120 [ 594.506820][T14673] __kmalloc_cache_noprof+0x91/0x6d0 [ 594.506836][T14673] ? __request_module+0x2b7/0x6a0 [ 594.506855][T14673] __request_module+0x2b7/0x6a0 [ 594.506870][T14673] ? __pfx___request_module+0x10/0x10 [ 594.506887][T14673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 594.506991][T14673] xt_request_find_table_lock+0x9f/0xf0 [ 594.507053][T14673] get_info+0x144/0x480 [ 594.507107][T14673] ? __pfx_get_info+0x10/0x10 [ 594.507131][T14673] ? rcu_is_watching+0x13/0xc0 [ 594.507152][T14673] ? bpf_lsm_capable+0x9/0x10 [ 594.507166][T14673] ? security_capable+0x80/0x260 [ 594.507189][T14673] do_arpt_get_ctl+0x545/0xfc0 [ 594.507208][T14673] ? __lock_acquire+0x5c0/0x1f40 [ 594.507228][T14673] ? find_held_lock+0x2b/0x80 [ 594.507243][T14673] ? nf_sockopt_find.isra.0+0x222/0x290 [ 594.507314][T14673] ? nf_sockopt_find.isra.0+0x222/0x290 [ 594.507341][T14673] ? __mutex_unlock_slowpath+0x35d/0x930 [ 594.507360][T14673] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 594.507381][T14673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 594.507401][T14673] ? lock_acquire+0x1d1/0x380 [ 594.507425][T14673] ? nf_sockopt_find.isra.0+0x222/0x290 [ 594.507451][T14673] nf_getsockopt+0x7c/0xe0 [ 594.507474][T14673] ip_getsockopt+0x192/0x1e0 [ 594.507546][T14673] ? __pfx_ip_getsockopt+0x10/0x10 [ 594.507570][T14673] tcp_getsockopt+0xa1/0x110 [ 594.507617][T14673] smc_getsockopt+0x165/0x390 [ 594.507685][T14673] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 594.507711][T14673] ? __pfx_smc_getsockopt+0x10/0x10 [ 594.507732][T14673] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 594.507754][T14673] ? __pfx_smc_getsockopt+0x10/0x10 [ 594.507776][T14673] do_sock_getsockopt+0x50a/0x6e0 [ 594.507797][T14673] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 594.507818][T14673] ? __fget_files+0x34/0x3d0 [ 594.507835][T14673] ? find_held_lock+0x2b/0x80 [ 594.507856][T14673] ? __fget_files+0x21f/0x3d0 [ 594.507877][T14673] __sys_getsockopt+0x133/0x1d0 [ 594.507904][T14673] ? __x64_sys_getsockopt+0xbd/0x160 [ 594.507925][T14673] __x64_sys_getsockopt+0xbd/0x160 [ 594.507944][T14673] ? do_syscall_64+0xae/0x770 [ 594.507960][T14673] ? lockdep_hardirqs_on+0x7d/0x110 [ 594.507975][T14673] do_syscall_64+0x121/0x770 [ 594.507992][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.508009][T14673] RIP: 0033:0x7fc9d0d9e159 [ 594.508023][T14673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.508037][T14673] RSP: 002b:00007fc9d1c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 594.508052][T14673] RAX: ffffffffffffffda RBX: 00007fc9d1025fa0 RCX: 00007fc9d0d9e159 [ 594.508063][T14673] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 594.508073][T14673] RBP: 00007fc9d0e3506b R08: 00002000000000c0 R09: 0000000000000000 [ 594.508083][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.508092][T14673] R13: 00007fc9d1026038 R14: 00007fc9d1025fa0 R15: 00007ffc6cb53ef8 [ 594.508111][T14673] [ 599.175526][T14722] Process accounting paused [ 624.518372][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.518416][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.415019][T15217] Process accounting resumed [ 629.806061][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 634.066551][T15298] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 634.066611][T15298] CIFS mount error: No usable UNC path provided in device string! [ 634.066611][T15298] [ 634.066764][T15298] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 638.426704][T15363] FAULT_INJECTION: forcing a failure. [ 638.426704][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 638.426733][T15363] CPU: 0 UID: 0 PID: 15363 Comm: syz.1.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.426754][T15363] Tainted: [L]=SOFTLOCKUP [ 638.426761][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.426770][T15363] Call Trace: [ 638.426776][T15363] [ 638.426782][T15363] dump_stack_lvl+0x100/0x190 [ 638.426811][T15363] should_fail_ex.cold+0x5/0xa [ 638.426832][T15363] should_failslab+0xc2/0x120 [ 638.426855][T15363] __kmalloc_cache_noprof+0x91/0x6d0 [ 638.426870][T15363] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.426893][T15363] ? proc_do_submiturb+0x722/0x3820 [ 638.427029][T15363] proc_do_submiturb+0x722/0x3820 [ 638.427062][T15363] usbdev_ioctl+0x2ae7/0x3a90 [ 638.427086][T15363] ? __pfx_usbdev_ioctl+0x10/0x10 [ 638.427110][T15363] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.427132][T15363] ? do_vfs_ioctl+0x226/0x13e0 [ 638.427149][T15363] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 638.427167][T15363] ? __fget_files+0x34/0x3d0 [ 638.427193][T15363] ? find_held_lock+0x2b/0x80 [ 638.427211][T15363] ? hook_file_ioctl_common+0x140/0x440 [ 638.427272][T15363] ? __pfx_usbdev_ioctl+0x10/0x10 [ 638.427293][T15363] __x64_sys_ioctl+0x18e/0x210 [ 638.427310][T15363] do_syscall_64+0x121/0x770 [ 638.427330][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.427347][T15363] RIP: 0033:0x7fc9d0d9e159 [ 638.427361][T15363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.427375][T15363] RSP: 002b:00007fc9d1c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.427389][T15363] RAX: ffffffffffffffda RBX: 00007fc9d1025fa0 RCX: 00007fc9d0d9e159 [ 638.427399][T15363] RDX: 0000200000000100 RSI: 000000008038550a RDI: 0000000000000005 [ 638.427409][T15363] RBP: 00007fc9d0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 638.427418][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.427427][T15363] R13: 00007fc9d1026038 R14: 00007fc9d1025fa0 R15: 00007ffc6cb53ef8 [ 638.427447][T15363] [ 643.485278][T15438] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1935'. [ 643.485613][T15439] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1935'. [ 643.563183][T15438] netlink: 170 bytes leftover after parsing attributes in process `syz.0.1935'. [ 646.804302][T15493] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 646.804343][T15493] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 646.804355][T15493] memcg:ffff88802cb033c1 [ 646.804362][T15493] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 646.804428][T15493] page_type: f5(slab) [ 646.804447][T15493] raw: 00fff00000000040 ffff88801c038500 dead000000000100 dead000000000122 [ 646.804465][T15493] raw: 0000000000000000 0000000200040004 00000000f5000000 ffff88802cb033c1 [ 646.804479][T15493] head: 00fff00000000040 ffff88801c038500 dead000000000100 dead000000000122 [ 646.804492][T15493] head: 0000000000000000 0000000200040004 00000000f5000000 ffff88802cb033c1 [ 646.804505][T15493] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 646.804518][T15493] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 646.804526][T15493] page dumped because: unmovable page [ 646.804540][T15493] page_owner tracks the page as allocated [ 646.804545][T15493] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4983, tgid 4983 (udevd), ts 31456114632 [ 646.804591][T15493] post_alloc_hook+0xfd/0x120 [ 646.804640][T15493] get_page_from_freelist+0x110d/0x35d0 [ 646.804656][T15493] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 646.804671][T15493] new_slab+0xa9/0x6e0 [ 646.804684][T15493] refill_objects+0xe3/0x410 [ 646.804698][T15493] __pcs_replace_empty_main+0x35e/0x650 [ 646.804711][T15493] __kvmalloc_node_noprof+0x7bb/0x9b0 [ 646.804727][T15493] seq_read_iter+0x819/0x1270 [ 646.804743][T15493] kernfs_fop_read_iter+0x46c/0x610 [ 646.804759][T15493] vfs_read+0x82e/0xb40 [ 646.804773][T15493] ksys_read+0x12a/0x250 [ 646.804787][T15493] do_syscall_64+0x121/0x770 [ 646.804803][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.804817][T15493] page last free pid 1 tgid 1 ts 24103213458 stack trace: [ 646.804827][T15493] free_pages_prepare+0x586/0xe00 [ 646.804872][T15493] __free_contig_range_common+0x14f/0x250 [ 646.804894][T15493] destroy_args+0xa8/0x7a0 [ 646.805066][T15493] debug_vm_pgtable+0x1d69/0x3490 [ 646.805083][T15493] do_one_initcall+0x11c/0x6f0 [ 646.808475][T15493] kernel_init_freeable+0x6ea/0x7b0 [ 646.808578][T15493] kernel_init+0x21/0x1e0 [ 646.808599][T15493] ret_from_fork+0x730/0xd60 [ 646.808624][T15493] ret_from_fork_asm+0x1a/0x30 [ 647.143663][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 647.285929][T15493] ovs_: entered promiscuous mode [ 648.002389][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 651.995789][T15578] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1960'. [ 654.623170][T15630] CIFS mount error: No usable UNC path provided in device string! [ 654.623170][T15630] [ 654.623188][T15630] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 657.638365][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1974'. [ 659.437902][T15696] Process accounting paused [ 662.835184][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1995'. [ 664.676500][T15768] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 668.785306][T15848] kvm [15847]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x10 [ 671.501286][T15868] kexec: Could not allocate control_code_buffer [ 671.545442][T15894] FAULT_INJECTION: forcing a failure. [ 671.545442][T15894] name failslab, interval 1, probability 0, space 0, times 0 [ 671.545471][T15894] CPU: 0 UID: 0 PID: 15894 Comm: syz.0.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 671.545492][T15894] Tainted: [L]=SOFTLOCKUP [ 671.545499][T15894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.545508][T15894] Call Trace: [ 671.545514][T15894] [ 671.545520][T15894] dump_stack_lvl+0x100/0x190 [ 671.545546][T15894] should_fail_ex.cold+0x5/0xa [ 671.545568][T15894] should_failslab+0xc2/0x120 [ 671.545589][T15894] __kmalloc_cache_noprof+0x91/0x6d0 [ 671.545604][T15894] ? alloc_tty_struct+0x96/0x8c0 [ 671.545742][T15894] alloc_tty_struct+0x96/0x8c0 [ 671.545764][T15894] ? __kasan_kmalloc+0xaa/0xb0 [ 671.545783][T15894] ? __pfx_alloc_tty_struct+0x10/0x10 [ 671.545805][T15894] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 671.545819][T15894] ? pty_common_install+0x10e/0xb30 [ 671.545870][T15894] pty_common_install+0x1c7/0xb30 [ 671.545908][T15894] ? __pfx_pty_install+0x10/0x10 [ 671.545927][T15894] tty_init_dev.part.0+0x9e/0x470 [ 671.545952][T15894] tty_open+0x953/0xe20 [ 671.545978][T15894] ? __pfx_tty_open+0x10/0x10 [ 671.545999][T15894] ? chrdev_open+0x10b/0x6a0 [ 671.546050][T15894] ? chrdev_open+0x10b/0x6a0 [ 671.546071][T15894] ? __pfx_tty_open+0x10/0x10 [ 671.546093][T15894] chrdev_open+0x234/0x6a0 [ 671.546111][T15894] ? __pfx_apparmor_file_open+0x10/0x10 [ 671.546128][T15894] ? __pfx_chrdev_open+0x10/0x10 [ 671.546147][T15894] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 671.546202][T15894] do_dentry_open+0x6ab/0x14d0 [ 671.546243][T15894] ? __pfx_chrdev_open+0x10/0x10 [ 671.546266][T15894] vfs_open+0x82/0x3f0 [ 671.546290][T15894] path_openat+0x19fa/0x2440 [ 671.546335][T15894] ? __pfx_path_openat+0x10/0x10 [ 671.546360][T15894] do_file_open+0x20e/0x430 [ 671.546388][T15894] ? __pfx_do_file_open+0x10/0x10 [ 671.546421][T15894] ? _raw_spin_unlock+0x28/0x50 [ 671.546445][T15894] ? alloc_fd+0x471/0x7a0 [ 671.546469][T15894] do_sys_openat2+0x10f/0x1e0 [ 671.546491][T15894] ? __pfx_do_sys_openat2+0x10/0x10 [ 671.546513][T15894] ? find_held_lock+0x2b/0x80 [ 671.546535][T15894] __x64_sys_openat+0x12d/0x210 [ 671.546556][T15894] ? __pfx___x64_sys_openat+0x10/0x10 [ 671.546584][T15894] do_syscall_64+0x121/0x770 [ 671.546602][T15894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.546618][T15894] RIP: 0033:0x7f2a8859e159 [ 671.546632][T15894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.546646][T15894] RSP: 002b:00007f2a8939c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 671.546662][T15894] RAX: ffffffffffffffda RBX: 00007f2a88825fa0 RCX: 00007f2a8859e159 [ 671.546672][T15894] RDX: 0000000000080201 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 671.546682][T15894] RBP: 00007f2a8863506b R08: 0000000000000000 R09: 0000000000000000 [ 671.546691][T15894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.546702][T15894] R13: 00007f2a88826038 R14: 00007f2a88825fa0 R15: 00007ffcba01c768 [ 671.546723][T15894] [ 672.070825][T15898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2021'. [ 672.595967][T15906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2023'. [ 672.623312][T15913] FAULT_INJECTION: forcing a failure. [ 672.623312][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 672.623339][T15913] CPU: 0 UID: 5 PID: 15913 Comm: syz.3.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.623360][T15913] Tainted: [L]=SOFTLOCKUP [ 672.623366][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.623375][T15913] Call Trace: [ 672.623381][T15913] [ 672.623387][T15913] dump_stack_lvl+0x100/0x190 [ 672.623412][T15913] should_fail_ex.cold+0x5/0xa [ 672.623433][T15913] should_failslab+0xc2/0x120 [ 672.623454][T15913] __kmalloc_noprof+0xfc/0x840 [ 672.623472][T15913] ? xfrm_hash_alloc+0xcf/0x100 [ 672.623567][T15913] xfrm_hash_alloc+0xcf/0x100 [ 672.623582][T15913] xfrm_state_init+0x15f/0x570 [ 672.623602][T15913] ? __pfx_xfrm_net_init+0x10/0x10 [ 672.623658][T15913] xfrm_net_init+0x20e/0xcf0 [ 672.623680][T15913] ? __pfx_xfrm_net_init+0x10/0x10 [ 672.623695][T15913] ops_init+0x1e2/0x5f0 [ 672.623714][T15913] setup_net+0x118/0x3a0 [ 672.623729][T15913] ? __pfx_setup_net+0x10/0x10 [ 672.623749][T15913] copy_net_ns+0x345/0x7a0 [ 672.623766][T15913] create_new_namespaces+0x3ea/0xac0 [ 672.623794][T15913] unshare_nsproxy_namespaces+0xf2/0x220 [ 672.623817][T15913] ksys_unshare+0x4a2/0xa70 [ 672.623833][T15913] ? __pfx_ksys_unshare+0x10/0x10 [ 672.623855][T15913] __x64_sys_unshare+0x31/0x40 [ 672.623869][T15913] do_syscall_64+0x121/0x770 [ 672.623888][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.623903][T15913] RIP: 0033:0x7f96f799e159 [ 672.623917][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.623930][T15913] RSP: 002b:00007f96f87d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 672.623944][T15913] RAX: ffffffffffffffda RBX: 00007f96f7c25fa0 RCX: 00007f96f799e159 [ 672.623954][T15913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 672.623963][T15913] RBP: 00007f96f7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 672.623972][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.623981][T15913] R13: 00007f96f7c26038 R14: 00007f96f7c25fa0 R15: 00007ffc93789df8 [ 672.624001][T15913] [ 675.706229][T15969] FAULT_INJECTION: forcing a failure. [ 675.706229][T15969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 675.706270][T15969] CPU: 0 UID: 0 PID: 15969 Comm: syz.3.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.706293][T15969] Tainted: [L]=SOFTLOCKUP [ 675.706299][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.706308][T15969] Call Trace: [ 675.706314][T15969] [ 675.706320][T15969] dump_stack_lvl+0x100/0x190 [ 675.706346][T15969] should_fail_ex.cold+0x5/0xa [ 675.706363][T15969] ? prepare_alloc_pages+0x16d/0x5b0 [ 675.706386][T15969] should_fail_alloc_page+0xeb/0x140 [ 675.706418][T15969] prepare_alloc_pages+0x1f0/0x5b0 [ 675.706442][T15969] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 675.706463][T15969] ? __asan_memset+0x23/0x50 [ 675.706483][T15969] ? __lock_acquire+0x5c0/0x1f40 [ 675.706505][T15969] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 675.706523][T15969] ? __css_rstat_updated+0x1ce/0x590 [ 675.706547][T15969] ? lock_acquire+0x1d1/0x380 [ 675.706566][T15969] ? do_raw_spin_lock+0x128/0x260 [ 675.706592][T15969] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 675.706609][T15969] ? find_held_lock+0x2b/0x80 [ 675.706631][T15969] ? __lock_acquire+0x5c0/0x1f40 [ 675.706652][T15969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.706675][T15969] ? policy_nodemask+0xed/0x4f0 [ 675.706773][T15969] alloc_pages_mpol+0x201/0x550 [ 675.706795][T15969] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 675.706821][T15969] folio_alloc_mpol_noprof+0x36/0x260 [ 675.706863][T15969] shmem_alloc_folio+0x135/0x160 [ 675.706886][T15969] shmem_alloc_and_add_folio+0x371/0xd40 [ 675.706914][T15969] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 675.706938][T15969] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 675.706964][T15969] shmem_get_folio_gfp+0x75b/0x1980 [ 675.706991][T15969] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 675.707014][T15969] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 675.707039][T15969] ? lockdep_hardirqs_on+0x7d/0x110 [ 675.707058][T15969] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 675.707076][T15969] shmem_fault+0x1fb/0xa30 [ 675.707099][T15969] ? current_time+0x29f/0x3b0 [ 675.707120][T15969] ? __pfx_shmem_fault+0x10/0x10 [ 675.707144][T15969] ? __lock_acquire+0x5c0/0x1f40 [ 675.707164][T15969] ? __pfx___up_read+0x10/0x10 [ 675.707176][T15969] ? fault_dirty_shared_page+0x496/0x5a0 [ 675.707217][T15969] ? inode_to_bdi+0x9e/0x160 [ 675.707254][T15969] ? fault_dirty_shared_page+0x496/0x5a0 [ 675.707272][T15969] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 675.707292][T15969] __do_fault+0x10b/0x440 [ 675.707311][T15969] do_fault+0x585/0x1830 [ 675.707329][T15969] ? __pfx_filemap_map_pages+0x10/0x10 [ 675.707351][T15969] ? __pfx_do_fault+0x10/0x10 [ 675.707369][T15969] ? rcu_read_unlock+0x2d/0xb0 [ 675.707382][T15969] ? rcu_read_unlock+0x2d/0xb0 [ 675.707402][T15969] ? __pte_offset_map+0x179/0x310 [ 675.707446][T15969] __handle_mm_fault+0x150b/0x2f60 [ 675.707495][T15969] ? __pfx___handle_mm_fault+0x10/0x10 [ 675.707517][T15969] ? pte_offset_map_lock+0x174/0x320 [ 675.707535][T15969] ? find_held_lock+0x2b/0x80 [ 675.707551][T15969] ? find_held_lock+0x2b/0x80 [ 675.707567][T15969] ? follow_page_pte+0x536/0x1050 [ 675.707619][T15969] handle_mm_fault+0x363/0xa20 [ 675.707646][T15969] __get_user_pages+0x8ae/0x2c30 [ 675.707672][T15969] ? __pfx___get_user_pages+0x10/0x10 [ 675.707691][T15969] ? __pfx_down_read_killable+0x10/0x10 [ 675.707716][T15969] faultin_page_range+0x1f1/0x9e0 [ 675.707754][T15969] madvise_do_behavior+0x354/0x510 [ 675.707803][T15969] ? __pfx_madvise_do_behavior+0x10/0x10 [ 675.707826][T15969] ? down_read+0x13b/0x4c0 [ 675.707853][T15969] do_madvise+0x238/0x290 [ 675.707875][T15969] ? __pfx_do_madvise+0x10/0x10 [ 675.707895][T15969] ? do_futex+0x190/0x440 [ 675.707928][T15969] __x64_sys_madvise+0xa9/0x110 [ 675.707949][T15969] ? lockdep_hardirqs_on+0x7d/0x110 [ 675.707965][T15969] do_syscall_64+0x121/0x770 [ 675.707983][T15969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.707999][T15969] RIP: 0033:0x7f96f799e159 [ 675.708014][T15969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.708027][T15969] RSP: 002b:00007f96f87d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 675.708043][T15969] RAX: ffffffffffffffda RBX: 00007f96f7c25fa0 RCX: 00007f96f799e159 [ 675.708053][T15969] RDX: 0000000000000017 RSI: 00000000002003f0 RDI: 0000000000000000 [ 675.708062][T15969] RBP: 00007f96f7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 675.708071][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.708080][T15969] R13: 00007f96f7c26038 R14: 00007f96f7c25fa0 R15: 00007ffc93789df8 [ 675.708101][T15969] [ 676.411823][T15975] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2038'. [ 676.506017][T15975] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2038'. [ 676.894935][T15985] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2041'. [ 678.728900][T15997] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2043'. [ 678.730027][T15997] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2043'. [ 679.336742][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 682.038460][T16058] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2057'. [ 684.122415][T16100] FAULT_INJECTION: forcing a failure. [ 684.122415][T16100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 684.122446][T16100] CPU: 0 UID: 0 PID: 16100 Comm: syz.1.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.122467][T16100] Tainted: [L]=SOFTLOCKUP [ 684.122473][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.122482][T16100] Call Trace: [ 684.122488][T16100] [ 684.122494][T16100] dump_stack_lvl+0x100/0x190 [ 684.122522][T16100] should_fail_ex.cold+0x5/0xa [ 684.122539][T16100] ? prepare_alloc_pages+0x16d/0x5b0 [ 684.122561][T16100] should_fail_alloc_page+0xeb/0x140 [ 684.122583][T16100] prepare_alloc_pages+0x1f0/0x5b0 [ 684.122606][T16100] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 684.122628][T16100] ? rcu_is_watching+0x13/0xc0 [ 684.122647][T16100] ? __lock_acquire+0x5c0/0x1f40 [ 684.122668][T16100] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 684.122686][T16100] ? __css_rstat_updated+0x1ce/0x590 [ 684.122710][T16100] ? lock_acquire+0x1d1/0x380 [ 684.122729][T16100] ? do_raw_spin_lock+0x128/0x260 [ 684.122743][T16100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 684.122760][T16100] ? find_held_lock+0x2b/0x80 [ 684.122781][T16100] ? __lock_acquire+0x5c0/0x1f40 [ 684.122801][T16100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.122823][T16100] ? policy_nodemask+0xed/0x4f0 [ 684.122844][T16100] alloc_pages_mpol+0x201/0x550 [ 684.122866][T16100] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 684.122891][T16100] folio_alloc_mpol_noprof+0x36/0x260 [ 684.122907][T16100] shmem_alloc_folio+0x135/0x160 [ 684.122929][T16100] shmem_alloc_and_add_folio+0x371/0xd40 [ 684.122955][T16100] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 684.122979][T16100] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 684.123006][T16100] shmem_get_folio_gfp+0x75b/0x1980 [ 684.123033][T16100] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 684.123056][T16100] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 684.123071][T16100] ? lockdep_hardirqs_on+0x7d/0x110 [ 684.123087][T16100] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 684.123104][T16100] shmem_fault+0x1fb/0xa30 [ 684.123126][T16100] ? current_time+0x29f/0x3b0 [ 684.123146][T16100] ? __pfx_shmem_fault+0x10/0x10 [ 684.123170][T16100] ? __lock_acquire+0x5c0/0x1f40 [ 684.123190][T16100] ? __pfx___up_read+0x10/0x10 [ 684.123202][T16100] ? fault_dirty_shared_page+0x496/0x5a0 [ 684.123218][T16100] ? inode_to_bdi+0x9e/0x160 [ 684.123232][T16100] ? fault_dirty_shared_page+0x496/0x5a0 [ 684.123248][T16100] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 684.123268][T16100] __do_fault+0x10b/0x440 [ 684.123286][T16100] do_fault+0x585/0x1830 [ 684.123312][T16100] ? __pfx_filemap_map_pages+0x10/0x10 [ 684.123335][T16100] ? __pfx_do_fault+0x10/0x10 [ 684.123353][T16100] ? rcu_read_unlock+0x2d/0xb0 [ 684.123367][T16100] ? rcu_read_unlock+0x2d/0xb0 [ 684.123381][T16100] ? __pte_offset_map+0x179/0x310 [ 684.123401][T16100] __handle_mm_fault+0x150b/0x2f60 [ 684.123427][T16100] ? __pfx___handle_mm_fault+0x10/0x10 [ 684.123449][T16100] ? pte_offset_map_lock+0x174/0x320 [ 684.123467][T16100] ? find_held_lock+0x2b/0x80 [ 684.123482][T16100] ? find_held_lock+0x2b/0x80 [ 684.123497][T16100] ? follow_page_pte+0x536/0x1050 [ 684.123526][T16100] handle_mm_fault+0x363/0xa20 [ 684.123552][T16100] __get_user_pages+0x8ae/0x2c30 [ 684.123577][T16100] ? __pfx___get_user_pages+0x10/0x10 [ 684.123595][T16100] ? __pfx_down_read_killable+0x10/0x10 [ 684.123620][T16100] faultin_page_range+0x1f1/0x9e0 [ 684.123643][T16100] madvise_do_behavior+0x354/0x510 [ 684.123666][T16100] ? __pfx_madvise_do_behavior+0x10/0x10 [ 684.123688][T16100] ? down_read+0x13b/0x4c0 [ 684.123715][T16100] do_madvise+0x238/0x290 [ 684.123735][T16100] ? __pfx_do_madvise+0x10/0x10 [ 684.123755][T16100] ? do_futex+0x190/0x440 [ 684.123788][T16100] __x64_sys_madvise+0xa9/0x110 [ 684.123809][T16100] ? lockdep_hardirqs_on+0x7d/0x110 [ 684.123824][T16100] do_syscall_64+0x121/0x770 [ 684.123842][T16100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.123858][T16100] RIP: 0033:0x7fc9d0d9e159 [ 684.123872][T16100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.123886][T16100] RSP: 002b:00007fc9d1c65028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 684.123902][T16100] RAX: ffffffffffffffda RBX: 00007fc9d1025fa0 RCX: 00007fc9d0d9e159 [ 684.123912][T16100] RDX: 0000000000000017 RSI: 00000000002003f0 RDI: 0000000000000000 [ 684.123921][T16100] RBP: 00007fc9d0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 684.123930][T16100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.123939][T16100] R13: 00007fc9d1026038 R14: 00007fc9d1025fa0 R15: 00007ffc6cb53ef8 [ 684.123959][T16100] [ 685.795118][T16119] process 'syz.2.2069' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 685.952913][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.952952][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.590513][T16218] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2084'. [ 692.894964][T16215] kexec: Could not allocate control_code_buffer [ 697.994539][T16291] kexec: Could not allocate control_code_buffer [ 698.402148][T16319] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2101'. [ 701.795714][T16359] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2118'. [ 706.043367][T16395] kexec: Could not allocate control_code_buffer [ 707.188805][ T4933] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 707.242839][ T4933] Bluetooth: hci3: unexpected event 0x05 length: 8 > 4 [ 709.230459][ T4933] Bluetooth: hci3: command tx timeout [ 709.369354][T16453] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2128'. [ 710.403634][T16474] FAULT_INJECTION: forcing a failure. [ 710.403634][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 710.403661][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.3.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.403682][T16474] Tainted: [L]=SOFTLOCKUP [ 710.403687][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.403696][T16474] Call Trace: [ 710.403702][T16474] [ 710.403709][T16474] dump_stack_lvl+0x100/0x190 [ 710.403735][T16474] should_fail_ex.cold+0x5/0xa [ 710.403756][T16474] should_failslab+0xc2/0x120 [ 710.403777][T16474] kmem_cache_alloc_noprof+0x92/0x6a0 [ 710.403794][T16474] ? __proc_create+0xc1/0x8f0 [ 710.403814][T16474] ? __proc_create+0x247/0x8f0 [ 710.403837][T16474] __proc_create+0x247/0x8f0 [ 710.403858][T16474] ? __pfx___proc_create+0x10/0x10 [ 710.403886][T16474] _proc_mkdir+0xb9/0x210 [ 710.403908][T16474] ? __pfx__proc_mkdir+0x10/0x10 [ 710.403929][T16474] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 710.403947][T16474] ? proc_net_ns_init+0x42/0x420 [ 710.403974][T16474] proc_net_ns_init+0x273/0x420 [ 710.403995][T16474] ? __pfx_proc_net_ns_init+0x10/0x10 [ 710.404015][T16474] ops_init+0x1e2/0x5f0 [ 710.404032][T16474] setup_net+0x118/0x3a0 [ 710.404046][T16474] ? __pfx_setup_net+0x10/0x10 [ 710.404066][T16474] copy_net_ns+0x345/0x7a0 [ 710.404083][T16474] create_new_namespaces+0x3ea/0xac0 [ 710.404109][T16474] unshare_nsproxy_namespaces+0xf2/0x220 [ 710.404132][T16474] ksys_unshare+0x4a2/0xa70 [ 710.404147][T16474] ? __pfx_ksys_unshare+0x10/0x10 [ 710.404169][T16474] __x64_sys_unshare+0x31/0x40 [ 710.404183][T16474] do_syscall_64+0x121/0x770 [ 710.404202][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.404218][T16474] RIP: 0033:0x7f96f799e159 [ 710.404231][T16474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.404244][T16474] RSP: 002b:00007f96f87d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 710.404259][T16474] RAX: ffffffffffffffda RBX: 00007f96f7c25fa0 RCX: 00007f96f799e159 [ 710.404268][T16474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 710.404277][T16474] RBP: 00007f96f7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 710.404286][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.404296][T16474] R13: 00007f96f7c26038 R14: 00007f96f7c25fa0 R15: 00007ffc93789df8 [ 710.404315][T16474] [ 711.310482][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 717.004988][T16566] ERROR: Out of memory at tomoyo_memory_ok. [ 718.621319][T16599] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 722.517257][ T4933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 722.530504][ T4933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 722.531202][ T4933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 722.535461][ T4933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 722.535834][ T4933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 724.081160][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.081276][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.081374][T16619] bridge_slave_0: entered allmulticast mode [ 724.082470][T16619] bridge_slave_0: entered promiscuous mode [ 724.114152][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.114255][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.114345][T16619] bridge_slave_1: entered allmulticast mode [ 724.115396][T16619] bridge_slave_1: entered promiscuous mode [ 724.165283][T16619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.167702][T16619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.209331][T16619] team0: Port device team_slave_0 added [ 724.219238][T16619] team0: Port device team_slave_1 added [ 724.244290][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.244317][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.244335][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.245534][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.245544][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.245561][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.371612][T16619] hsr_slave_0: entered promiscuous mode [ 724.372264][T16619] hsr_slave_1: entered promiscuous mode [ 724.372788][T16619] debugfs: 'hsr0' already exists in 'hsr' [ 724.372805][T16619] Cannot create hsr debugfs directory [ 724.547958][T16619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 724.559743][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.569572][T16619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 724.580818][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.581597][T16619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 724.584962][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.585756][T16619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 724.588142][T16619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.590715][ T4933] Bluetooth: hci4: command tx timeout [ 724.655335][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.655422][T16619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.656055][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.656126][T16619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.736808][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.756299][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.756807][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.776975][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.793083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.793154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.797559][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.797634][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.169126][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.378254][T16619] veth0_vlan: entered promiscuous mode [ 725.391727][T16619] veth1_vlan: entered promiscuous mode [ 725.420834][T16619] veth0_macvtap: entered promiscuous mode [ 725.424095][T16619] veth1_macvtap: entered promiscuous mode [ 725.452185][T16619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.458162][T16619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.510856][ T186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.511206][ T186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.511233][ T186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.511256][ T186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.613509][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.613526][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.666269][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.666286][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.670974][ T4933] Bluetooth: hci4: command tx timeout [ 727.322807][T16718] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 728.751221][ T4933] Bluetooth: hci4: command tx timeout [ 730.487862][T16725] kexec: Could not allocate control_code_buffer [ 730.830496][ T4933] Bluetooth: hci4: command tx timeout [ 735.839593][T16830] FAULT_INJECTION: forcing a failure. [ 735.839593][T16830] name failslab, interval 1, probability 0, space 0, times 0 [ 735.839632][T16830] CPU: 0 UID: 0 PID: 16830 Comm: syz.3.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.839656][T16830] Tainted: [L]=SOFTLOCKUP [ 735.839662][T16830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.839672][T16830] Call Trace: [ 735.839678][T16830] [ 735.839684][T16830] dump_stack_lvl+0x100/0x190 [ 735.839713][T16830] should_fail_ex.cold+0x5/0xa [ 735.839735][T16830] should_failslab+0xc2/0x120 [ 735.839757][T16830] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 735.839779][T16830] ? proc_alloc_inode+0x25/0x200 [ 735.839899][T16830] ? __pfx_proc_alloc_inode+0x10/0x10 [ 735.839920][T16830] proc_alloc_inode+0x25/0x200 [ 735.839940][T16830] alloc_inode+0x68/0x250 [ 735.839964][T16830] new_inode+0x22/0x1c0 [ 735.839978][T16830] proc_pid_make_inode+0x22/0x160 [ 735.839997][T16830] proc_pident_instantiate+0x85/0x310 [ 735.840019][T16830] proc_pident_lookup+0x1e3/0x270 [ 735.840039][T16830] ? __pfx_down_read+0x10/0x10 [ 735.840061][T16830] __lookup_slow+0x155/0x320 [ 735.840085][T16830] lookup_slow+0x50/0x70 [ 735.840107][T16830] link_path_walk+0x1377/0x1cc0 [ 735.840131][T16830] path_openat+0x1ac/0x2440 [ 735.840152][T16830] ? __pfx_path_openat+0x10/0x10 [ 735.840176][T16830] do_file_open+0x20e/0x430 [ 735.840196][T16830] ? __pfx_do_file_open+0x10/0x10 [ 735.840223][T16830] ? __pfx_kfree_link+0x10/0x10 [ 735.840244][T16830] ? _raw_spin_unlock+0x28/0x50 [ 735.840265][T16830] ? alloc_fd+0x471/0x7a0 [ 735.840288][T16830] do_sys_openat2+0x10f/0x1e0 [ 735.840310][T16830] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.840339][T16830] __x64_sys_openat+0x12d/0x210 [ 735.840361][T16830] ? __pfx___x64_sys_openat+0x10/0x10 [ 735.840390][T16830] do_syscall_64+0x121/0x770 [ 735.840408][T16830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.840424][T16830] RIP: 0033:0x7f96f795e98e [ 735.840438][T16830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 735.840452][T16830] RSP: 002b:00007f96f87d3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 735.840467][T16830] RAX: ffffffffffffffda RBX: 00007f96f87d46c0 RCX: 00007f96f795e98e [ 735.840477][T16830] RDX: 0000000000000002 RSI: 00007f96f87d3f90 RDI: ffffffffffffff9c [ 735.840487][T16830] RBP: 00007f96f7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 735.840496][T16830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.840505][T16830] R13: 00007f96f7c26038 R14: 00007f96f7c25fa0 R15: 00007ffc93789df8 [ 735.840524][T16830] [ 737.053817][T16844] syz.3.2185 (16844) used greatest stack depth: 19544 bytes left [ 737.746605][T16863] writing to auto_msgmni has no effect [ 744.114783][T16958] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 744.114906][T16958] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 744.251576][T16958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 744.251952][T16958] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 744.290944][T16958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 744.291014][T16958] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 744.294915][T16958] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 744.294983][T16958] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 744.347499][T16958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 744.347571][T16958] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 744.375367][T16958] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 746.113298][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 746.270454][ T4933] Bluetooth: hci0: command 0x0406 tx timeout [ 746.350545][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 746.350585][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 746.350606][ T4933] Bluetooth: hci1: command 0x0405 tx timeout [ 747.396255][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.396298][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.696419][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 747.752248][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 748.190492][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 748.350322][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 748.430381][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 748.430410][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 748.430481][ T5627] Bluetooth: hci1: command 0x0405 tx timeout [ 750.510327][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 751.314909][T17074] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 752.791460][T17092] FAULT_INJECTION: forcing a failure. [ 752.791460][T17092] name failslab, interval 1, probability 0, space 0, times 0 [ 752.791495][T17092] CPU: 0 UID: 0 PID: 17092 Comm: syz.2.2226 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.791516][T17092] Tainted: [L]=SOFTLOCKUP [ 752.791522][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 752.791531][T17092] Call Trace: [ 752.791536][T17092] [ 752.791543][T17092] dump_stack_lvl+0x100/0x190 [ 752.791568][T17092] should_fail_ex.cold+0x5/0xa [ 752.791589][T17092] should_failslab+0xc2/0x120 [ 752.791610][T17092] kmem_cache_alloc_noprof+0x92/0x6a0 [ 752.791629][T17092] ? posix_lock_inode+0x5b5/0x2760 [ 752.791744][T17092] posix_lock_inode+0x5b5/0x2760 [ 752.791771][T17092] ? __pfx_posix_lock_inode+0x10/0x10 [ 752.791793][T17092] ? common_file_perm+0x266/0x500 [ 752.791812][T17092] vfs_lock_file+0xfb/0x150 [ 752.791832][T17092] fcntl_setlk+0x757/0xe20 [ 752.791854][T17092] ? __pfx_fcntl_setlk+0x10/0x10 [ 752.791874][T17092] ? lock_acquire+0x1d1/0x380 [ 752.791894][T17092] ? __might_fault+0xc5/0x140 [ 752.791909][T17092] ? __might_fault+0xc5/0x140 [ 752.791922][T17092] ? __might_fault+0xc5/0x140 [ 752.791942][T17092] do_fcntl+0xf39/0x1670 [ 752.791964][T17092] ? __pfx_do_fcntl+0x10/0x10 [ 752.791984][T17092] ? __fget_files+0x215/0x3d0 [ 752.792007][T17092] ? tomoyo_file_fcntl+0x6c/0xc0 [ 752.792076][T17092] __x64_sys_fcntl+0x163/0x200 [ 752.792100][T17092] do_syscall_64+0x121/0x770 [ 752.792121][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.792136][T17092] RIP: 0033:0x7f5f4539e159 [ 752.792149][T17092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.792164][T17092] RSP: 002b:00007f5f46207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 752.792178][T17092] RAX: ffffffffffffffda RBX: 00007f5f45626090 RCX: 00007f5f4539e159 [ 752.792188][T17092] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003 [ 752.792196][T17092] RBP: 00007f5f4543506b R08: 0000000000000000 R09: 0000000000000000 [ 752.792205][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.792214][T17092] R13: 00007f5f45626128 R14: 00007f5f45626090 R15: 00007ffe7a3a39d8 [ 752.792233][T17092] [ 761.559261][T17240] FAULT_INJECTION: forcing a failure. [ 761.559261][T17240] name failslab, interval 1, probability 0, space 0, times 0 [ 761.559291][T17240] CPU: 0 UID: 0 PID: 17240 Comm: syz.2.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.559314][T17240] Tainted: [L]=SOFTLOCKUP [ 761.559320][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.559329][T17240] Call Trace: [ 761.559335][T17240] [ 761.559341][T17240] dump_stack_lvl+0x100/0x190 [ 761.559367][T17240] should_fail_ex.cold+0x5/0xa [ 761.559388][T17240] should_failslab+0xc2/0x120 [ 761.559426][T17240] __kmalloc_cache_noprof+0x91/0x6d0 [ 761.559442][T17240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 761.559460][T17240] ? cgroup_file_open+0x90/0x470 [ 761.559484][T17240] cgroup_file_open+0x90/0x470 [ 761.559503][T17240] ? __pfx_cgroup_file_open+0x10/0x10 [ 761.559524][T17240] kernfs_fop_open+0x8bb/0xd50 [ 761.559544][T17240] do_dentry_open+0x6ab/0x14d0 [ 761.559561][T17240] ? __pfx_kernfs_fop_open+0x10/0x10 [ 761.559579][T17240] vfs_open+0x82/0x3f0 [ 761.559602][T17240] path_openat+0x19fa/0x2440 [ 761.559624][T17240] ? __pfx_path_openat+0x10/0x10 [ 761.559649][T17240] do_file_open+0x20e/0x430 [ 761.559669][T17240] ? __pfx_do_file_open+0x10/0x10 [ 761.559700][T17240] ? _raw_spin_unlock+0x28/0x50 [ 761.559727][T17240] ? alloc_fd+0x471/0x7a0 [ 761.559750][T17240] do_sys_openat2+0x10f/0x1e0 [ 761.559772][T17240] ? __pfx_do_sys_openat2+0x10/0x10 [ 761.559794][T17240] ? __fget_files+0x21f/0x3d0 [ 761.559815][T17240] __x64_sys_openat+0x12d/0x210 [ 761.559838][T17240] ? __pfx___x64_sys_openat+0x10/0x10 [ 761.559867][T17240] do_syscall_64+0x121/0x770 [ 761.559885][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.559901][T17240] RIP: 0033:0x7f5f4539e159 [ 761.559914][T17240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.559928][T17240] RSP: 002b:00007f5f46207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 761.559943][T17240] RAX: ffffffffffffffda RBX: 00007f5f45626090 RCX: 00007f5f4539e159 [ 761.559953][T17240] RDX: 0000000000080200 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 761.559962][T17240] RBP: 00007f5f4543506b R08: 0000000000000000 R09: 0000000000000000 [ 761.559971][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.559980][T17240] R13: 00007f5f45626128 R14: 00007f5f45626090 R15: 00007ffe7a3a39d8 [ 761.560001][T17240] [ 761.922095][T17243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.922241][T17243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.922373][T17243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 761.923792][T17243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.923955][T17243] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 763.950679][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 763.950710][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 763.950728][ T5627] Bluetooth: hci1: command 0x0405 tx timeout [ 763.950746][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 763.950762][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 777.746940][T17480] FAULT_INJECTION: forcing a failure. [ 777.746940][T17480] name failslab, interval 1, probability 0, space 0, times 0 [ 777.746970][T17480] CPU: 0 UID: 0 PID: 17480 Comm: syz.1.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.746992][T17480] Tainted: [L]=SOFTLOCKUP [ 777.746998][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.747007][T17480] Call Trace: [ 777.747019][T17480] [ 777.747025][T17480] dump_stack_lvl+0x100/0x190 [ 777.747052][T17480] should_fail_ex.cold+0x5/0xa [ 777.747072][T17480] should_failslab+0xc2/0x120 [ 777.747094][T17480] __kmalloc_noprof+0xfc/0x840 [ 777.747111][T17480] ? rcu_is_watching+0x13/0xc0 [ 777.747127][T17480] ? sk_prot_alloc+0x10b/0x2a0 [ 777.747150][T17480] sk_prot_alloc+0x10b/0x2a0 [ 777.747167][T17480] sk_alloc+0x36/0xe80 [ 777.747188][T17480] pppoe_create+0x32/0x360 [ 777.747333][T17480] pppox_create+0x15c/0x2c0 [ 777.747352][T17480] __sock_create+0x339/0x860 [ 777.747374][T17480] __sys_socket+0x14d/0x260 [ 777.747392][T17480] ? __pfx___sys_socket+0x10/0x10 [ 777.747417][T17480] __x64_sys_socket+0x72/0xb0 [ 777.747444][T17480] ? lockdep_hardirqs_on+0x7d/0x110 [ 777.747462][T17480] do_syscall_64+0x121/0x770 [ 777.747480][T17480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.747496][T17480] RIP: 0033:0x7fc9d0d9e159 [ 777.747509][T17480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.747530][T17480] RSP: 002b:00007fc9d1c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 777.747545][T17480] RAX: ffffffffffffffda RBX: 00007fc9d1025fa0 RCX: 00007fc9d0d9e159 [ 777.747555][T17480] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 777.747564][T17480] RBP: 00007fc9d0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 777.747573][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.747587][T17480] R13: 00007fc9d1026038 R14: 00007fc9d1025fa0 R15: 00007ffc6cb53ef8 [ 777.747606][T17480] [ 781.095020][T17537] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 784.731334][T17595] FAULT_INJECTION: forcing a failure. [ 784.731334][T17595] name failslab, interval 1, probability 0, space 0, times 0 [ 784.731360][T17595] CPU: 0 UID: 0 PID: 17595 Comm: syz.3.2315 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.731381][T17595] Tainted: [L]=SOFTLOCKUP [ 784.731389][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.731399][T17595] Call Trace: [ 784.731405][T17595] [ 784.731411][T17595] dump_stack_lvl+0x100/0x190 [ 784.731437][T17595] should_fail_ex.cold+0x5/0xa [ 784.731458][T17595] should_failslab+0xc2/0x120 [ 784.731479][T17595] kmem_cache_alloc_noprof+0x92/0x6a0 [ 784.731498][T17595] ? inet_bind2_bucket_create+0x36/0x5f0 [ 784.731523][T17595] inet_bind2_bucket_create+0x36/0x5f0 [ 784.731544][T17595] __inet_hash_connect+0x1527/0x2000 [ 784.731570][T17595] ? __pfx___inet_check_established+0x10/0x10 [ 784.731591][T17595] ? __pfx___inet_hash_connect+0x10/0x10 [ 784.731614][T17595] ? inet_init_ehash_secret+0xd/0x60 [ 784.731632][T17595] ? inet_hash_connect+0x9f/0x340 [ 784.731653][T17595] tcp_v4_connect+0xeb3/0x1b40 [ 784.731742][T17595] ? __pfx_tcp_v4_connect+0x10/0x10 [ 784.731760][T17595] ? __lock_acquire+0x5c0/0x1f40 [ 784.731785][T17595] __inet_stream_connect+0x208/0xf90 [ 784.731829][T17595] ? lock_acquire+0x1d1/0x380 [ 784.731850][T17595] ? __pfx___inet_stream_connect+0x10/0x10 [ 784.731867][T17595] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 784.731886][T17595] ? __local_bh_enable_ip+0xa5/0x120 [ 784.731911][T17595] inet_stream_connect+0x57/0xa0 [ 784.731928][T17595] __sys_connect_file+0x146/0x1a0 [ 784.731951][T17595] __sys_connect+0x141/0x170 [ 784.731969][T17595] ? __pfx___sys_connect+0x10/0x10 [ 784.731996][T17595] ? do_raw_spin_unlock+0x145/0x1e0 [ 784.732013][T17595] __x64_sys_connect+0x72/0xb0 [ 784.732032][T17595] ? lockdep_hardirqs_on+0x7d/0x110 [ 784.732048][T17595] do_syscall_64+0x121/0x770 [ 784.732067][T17595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.732082][T17595] RIP: 0033:0x7f96f799e159 [ 784.732095][T17595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.732118][T17595] RSP: 002b:00007f96f87d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 784.732133][T17595] RAX: ffffffffffffffda RBX: 00007f96f7c25fa0 RCX: 00007f96f799e159 [ 784.732144][T17595] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 784.732153][T17595] RBP: 00007f96f7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 784.732162][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.732171][T17595] R13: 00007f96f7c26038 R14: 00007f96f7c25fa0 R15: 00007ffc93789df8 [ 784.732191][T17595] [ 785.615119][T17606] FAULT_INJECTION: forcing a failure. [ 785.615119][T17606] name failslab, interval 1, probability 0, space 0, times 0 [ 785.615149][T17606] CPU: 0 UID: 0 PID: 17606 Comm: syz.3.2319 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.615171][T17606] Tainted: [L]=SOFTLOCKUP [ 785.615177][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.615186][T17606] Call Trace: [ 785.615192][T17606] [ 785.615198][T17606] dump_stack_lvl+0x100/0x190 [ 785.615224][T17606] should_fail_ex.cold+0x5/0xa [ 785.615245][T17606] should_failslab+0xc2/0x120 [ 785.615267][T17606] __kmalloc_cache_noprof+0x91/0x6d0 [ 785.615281][T17606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 785.615301][T17606] ? cgroup_file_open+0x90/0x470 [ 785.615323][T17606] cgroup_file_open+0x90/0x470 [ 785.615341][T17606] ? __pfx_cgroup_file_open+0x10/0x10 [ 785.615361][T17606] kernfs_fop_open+0x8bb/0xd50 [ 785.615381][T17606] do_dentry_open+0x6ab/0x14d0 [ 785.615397][T17606] ? __pfx_kernfs_fop_open+0x10/0x10 [ 785.615415][T17606] vfs_open+0x82/0x3f0 [ 785.615438][T17606] path_openat+0x19fa/0x2440 [ 785.615459][T17606] ? __pfx_path_openat+0x10/0x10 [ 785.615483][T17606] do_file_open+0x20e/0x430 [ 785.615502][T17606] ? __pfx_do_file_open+0x10/0x10 [ 785.615533][T17606] ? _raw_spin_unlock+0x28/0x50 [ 785.615554][T17606] ? alloc_fd+0x471/0x7a0 [ 785.615577][T17606] do_sys_openat2+0x10f/0x1e0 [ 785.615597][T17606] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.615620][T17606] ? __fget_files+0x21f/0x3d0 [ 785.615641][T17606] __x64_sys_openat+0x12d/0x210 [ 785.615662][T17606] ? __pfx___x64_sys_openat+0x10/0x10 [ 785.615691][T17606] do_syscall_64+0x121/0x770 [ 785.615710][T17606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.615725][T17606] RIP: 0033:0x7f96f799e159 [ 785.615738][T17606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.615752][T17606] RSP: 002b:00007f96f87b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 785.615766][T17606] RAX: ffffffffffffffda RBX: 00007f96f7c26090 RCX: 00007f96f799e159 [ 785.615776][T17606] RDX: 0000000000080200 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 785.615785][T17606] RBP: 00007f96f7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 785.615793][T17606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.615802][T17606] R13: 00007f96f7c26128 R14: 00007f96f7c26090 R15: 00007ffc93789df8 [ 785.615821][T17606] [ 789.176964][T17638] ima: policy update failed [ 789.177388][ T31] audit: type=1802 audit(2613893510.437:6): pid=17638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2327" res=0 errno=0 [ 802.067620][T17869] FAULT_INJECTION: forcing a failure. [ 802.067620][T17869] name failslab, interval 1, probability 0, space 0, times 0 [ 802.067648][T17869] CPU: 0 UID: 0 PID: 17869 Comm: syz.1.2373 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.067669][T17869] Tainted: [L]=SOFTLOCKUP [ 802.067674][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.067683][T17869] Call Trace: [ 802.067689][T17869] [ 802.067695][T17869] dump_stack_lvl+0x100/0x190 [ 802.067720][T17869] should_fail_ex.cold+0x5/0xa [ 802.067740][T17869] should_failslab+0xc2/0x120 [ 802.067761][T17869] kmem_cache_alloc_noprof+0x92/0x6a0 [ 802.067779][T17869] ? inet_bind2_bucket_create+0x36/0x5f0 [ 802.067811][T17869] inet_bind2_bucket_create+0x36/0x5f0 [ 802.067833][T17869] __inet_hash_connect+0x1527/0x2000 [ 802.067859][T17869] ? __pfx___inet_check_established+0x10/0x10 [ 802.067881][T17869] ? __pfx___inet_hash_connect+0x10/0x10 [ 802.067904][T17869] ? inet_init_ehash_secret+0xd/0x60 [ 802.067921][T17869] ? inet_hash_connect+0x9f/0x340 [ 802.067943][T17869] tcp_v4_connect+0xeb3/0x1b40 [ 802.067965][T17869] ? __pfx_tcp_v4_connect+0x10/0x10 [ 802.067982][T17869] ? __lock_acquire+0x5c0/0x1f40 [ 802.068009][T17869] __inet_stream_connect+0x208/0xf90 [ 802.068027][T17869] ? lock_acquire+0x1d1/0x380 [ 802.068047][T17869] ? __pfx___inet_stream_connect+0x10/0x10 [ 802.068063][T17869] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.068082][T17869] ? __local_bh_enable_ip+0xa5/0x120 [ 802.068107][T17869] inet_stream_connect+0x57/0xa0 [ 802.068124][T17869] __sys_connect_file+0x146/0x1a0 [ 802.068147][T17869] __sys_connect+0x141/0x170 [ 802.068166][T17869] ? __pfx___sys_connect+0x10/0x10 [ 802.068197][T17869] __x64_sys_connect+0x72/0xb0 [ 802.068217][T17869] ? lockdep_hardirqs_on+0x7d/0x110 [ 802.068233][T17869] do_syscall_64+0x121/0x770 [ 802.068250][T17869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.068265][T17869] RIP: 0033:0x7fc9d0d9e159 [ 802.068279][T17869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.068292][T17869] RSP: 002b:00007fc9d1c65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 802.068306][T17869] RAX: ffffffffffffffda RBX: 00007fc9d1025fa0 RCX: 00007fc9d0d9e159 [ 802.068316][T17869] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 802.068325][T17869] RBP: 00007fc9d0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 802.068333][T17869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.068341][T17869] R13: 00007fc9d1026038 R14: 00007fc9d1025fa0 R15: 00007ffc6cb53ef8 [ 802.068360][T17869] [ 802.642485][T17854] ima: policy update failed [ 802.642595][ T31] audit: type=1802 audit(2613893523.907:7): pid=17854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2372" res=0 errno=0 [ 803.048968][T17876] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2377'. [ 803.066408][T17876] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2377'. [ 805.800717][T17921] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2387'. [ 805.952778][T17921] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 806.036018][T17921] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2387'. [ 807.976121][T17934] ima: policy update failed [ 807.998490][ T31] audit: type=1802 audit(2613893529.237:8): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2391" res=0 errno=0 [ 808.832912][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.832953][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.454128][T17968] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2397'. [ 809.565433][T17968] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 809.584100][T17968] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2397'. [ 816.830081][T18029] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2408'. [ 816.855618][T18029] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 816.992295][T18029] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2408'. [ 817.254928][T18043] FAULT_INJECTION: forcing a failure. [ 817.254928][T18043] name failslab, interval 1, probability 0, space 0, times 0 [ 817.254955][T18043] CPU: 0 UID: 0 PID: 18043 Comm: syz.2.2412 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.254976][T18043] Tainted: [L]=SOFTLOCKUP [ 817.254982][T18043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.254991][T18043] Call Trace: [ 817.254997][T18043] [ 817.255003][T18043] dump_stack_lvl+0x100/0x190 [ 817.255028][T18043] should_fail_ex.cold+0x5/0xa [ 817.255049][T18043] should_failslab+0xc2/0x120 [ 817.255069][T18043] kmem_cache_alloc_noprof+0x92/0x6a0 [ 817.255087][T18043] ? inet_bind2_bucket_create+0x36/0x5f0 [ 817.255110][T18043] inet_bind2_bucket_create+0x36/0x5f0 [ 817.255131][T18043] __inet_hash_connect+0x1527/0x2000 [ 817.255156][T18043] ? __pfx___inet_check_established+0x10/0x10 [ 817.255177][T18043] ? __pfx___inet_hash_connect+0x10/0x10 [ 817.255200][T18043] ? inet_init_ehash_secret+0xd/0x60 [ 817.255217][T18043] ? inet_hash_connect+0x9f/0x340 [ 817.255238][T18043] tcp_v4_connect+0xeb3/0x1b40 [ 817.255261][T18043] ? __pfx_tcp_v4_connect+0x10/0x10 [ 817.255277][T18043] ? __lock_acquire+0x5c0/0x1f40 [ 817.255301][T18043] __inet_stream_connect+0x208/0xf90 [ 817.255320][T18043] ? lock_acquire+0x1d1/0x380 [ 817.255350][T18043] ? __pfx___inet_stream_connect+0x10/0x10 [ 817.255366][T18043] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 817.255386][T18043] ? __local_bh_enable_ip+0xa5/0x120 [ 817.255427][T18043] inet_stream_connect+0x57/0xa0 [ 817.255444][T18043] __sys_connect_file+0x146/0x1a0 [ 817.255467][T18043] __sys_connect+0x141/0x170 [ 817.255486][T18043] ? __pfx___sys_connect+0x10/0x10 [ 817.255518][T18043] __x64_sys_connect+0x72/0xb0 [ 817.255537][T18043] ? lockdep_hardirqs_on+0x7d/0x110 [ 817.255554][T18043] do_syscall_64+0x121/0x770 [ 817.255572][T18043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.255586][T18043] RIP: 0033:0x7f5f4539e159 [ 817.255600][T18043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.255614][T18043] RSP: 002b:00007f5f46228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 817.255628][T18043] RAX: ffffffffffffffda RBX: 00007f5f45625fa0 RCX: 00007f5f4539e159 [ 817.255638][T18043] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 817.255647][T18043] RBP: 00007f5f4543506b R08: 0000000000000000 R09: 0000000000000000 [ 817.255656][T18043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.255664][T18043] R13: 00007f5f45626038 R14: 00007f5f45625fa0 R15: 00007ffe7a3a39d8 [ 817.255684][T18043] [ 819.721896][T18073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2419'. [ 820.215401][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.286886][T18073] bridge_slave_0 (unregistering): left allmulticast mode [ 820.286907][T18073] bridge_slave_0 (unregistering): left promiscuous mode [ 820.324691][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.075585][T18120] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2426'. [ 825.285579][T18148] ecryptfs_miscdev_write: Invalid packet size [3776] [ 830.089183][T18198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2440'. [ 830.109523][T18198] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.129214][T18198] bridge_slave_0 (unregistering): left allmulticast mode [ 830.129235][T18198] bridge_slave_0 (unregistering): left promiscuous mode [ 830.129290][T18198] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.652762][T18269] FAULT_INJECTION: forcing a failure. [ 834.652762][T18269] name failslab, interval 1, probability 0, space 0, times 0 [ 834.652794][T18269] CPU: 0 UID: 0 PID: 18269 Comm: syz.2.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.652816][T18269] Tainted: [L]=SOFTLOCKUP [ 834.652822][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.652832][T18269] Call Trace: [ 834.652837][T18269] [ 834.652844][T18269] dump_stack_lvl+0x100/0x190 [ 834.652870][T18269] should_fail_ex.cold+0x5/0xa [ 834.652891][T18269] should_failslab+0xc2/0x120 [ 834.652914][T18269] __kmalloc_cache_noprof+0x91/0x6d0 [ 834.653024][T18269] ? vidtv_psi_pmt_table_init+0x4c/0x430 [ 834.653160][T18269] vidtv_psi_pmt_table_init+0x4c/0x430 [ 834.653177][T18269] vidtv_psi_pmt_create_sec_for_each_pat_entry+0x293/0x670 [ 834.653200][T18269] vidtv_channel_si_init+0xf2d/0x18f0 [ 834.653225][T18269] vidtv_mux_init+0x522/0xbf0 [ 834.653247][T18269] vidtv_start_feed+0x34e/0x500 [ 834.653267][T18269] ? __pfx_vidtv_start_feed+0x10/0x10 [ 834.653289][T18269] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 834.653317][T18269] ? dmx_section_feed_start_filtering+0xe4/0x660 [ 834.653410][T18269] dmx_section_feed_start_filtering+0x3a8/0x660 [ 834.653447][T18269] dvb_dmxdev_filter_start+0x767/0xdd0 [ 834.653476][T18269] dvb_demux_do_ioctl+0xe64/0x1200 [ 834.653503][T18269] dvb_usercopy+0x167/0x340 [ 834.653522][T18269] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 834.653544][T18269] ? __pfx_dvb_usercopy+0x10/0x10 [ 834.653562][T18269] ? __fget_files+0x34/0x3d0 [ 834.653588][T18269] ? __fget_files+0x21f/0x3d0 [ 834.653611][T18269] dvb_demux_ioctl+0x29/0x40 [ 834.653628][T18269] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 834.653646][T18269] __x64_sys_ioctl+0x18e/0x210 [ 834.653665][T18269] do_syscall_64+0x121/0x770 [ 834.653686][T18269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.653703][T18269] RIP: 0033:0x7f5f4539e159 [ 834.653719][T18269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.653734][T18269] RSP: 002b:00007f5f46228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.653750][T18269] RAX: ffffffffffffffda RBX: 00007f5f45625fa0 RCX: 00007f5f4539e159 [ 834.653761][T18269] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 834.653772][T18269] RBP: 00007f5f4543506b R08: 0000000000000000 R09: 0000000000000000 [ 834.653781][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.653790][T18269] R13: 00007f5f45626038 R14: 00007f5f45625fa0 R15: 00007ffe7a3a39d8 [ 834.653812][T18269] [ 839.657265][T18316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2460'. [ 844.613804][T18397] netlink: zone id is out of range [ 844.614266][T18397] FAULT_INJECTION: forcing a failure. [ 844.614266][T18397] name failslab, interval 1, probability 0, space 0, times 0 [ 844.614290][T18397] CPU: 0 UID: 0 PID: 18397 Comm: syz.3.2476 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.614311][T18397] Tainted: [L]=SOFTLOCKUP [ 844.614316][T18397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.614326][T18397] Call Trace: [ 844.614331][T18397] [ 844.614337][T18397] dump_stack_lvl+0x100/0x190 [ 844.614369][T18397] should_fail_ex.cold+0x5/0xa [ 844.614390][T18397] should_failslab+0xc2/0x120 [ 844.614411][T18397] __kmalloc_cache_noprof+0x91/0x6d0 [ 844.614427][T18397] ? ovs_ct_limit_cmd_set+0x2e4/0xbd0 [ 844.614554][T18397] ovs_ct_limit_cmd_set+0x2e4/0xbd0 [ 844.614577][T18397] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 844.614597][T18397] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 844.614651][T18397] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 844.614679][T18397] genl_family_rcv_msg_doit+0x214/0x300 [ 844.614704][T18397] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 844.614728][T18397] ? genl_get_cmd+0x3e7/0x760 [ 844.614753][T18397] ? bpf_lsm_capable+0x9/0x10 [ 844.614779][T18397] ? security_capable+0x80/0x260 [ 844.614800][T18397] ? ns_capable+0xd2/0xf0 [ 844.614825][T18397] genl_rcv_msg+0x560/0x800 [ 844.614850][T18397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.614870][T18397] ? __lock_acquire+0x5c0/0x1f40 [ 844.614890][T18397] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 844.614916][T18397] netlink_rcv_skb+0x159/0x420 [ 844.614936][T18397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.614958][T18397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 844.614986][T18397] ? netlink_deliver_tap+0x1ae/0xcc0 [ 844.615007][T18397] genl_rcv+0x28/0x40 [ 844.615026][T18397] netlink_unicast+0x585/0x850 [ 844.615049][T18397] ? __pfx_netlink_unicast+0x10/0x10 [ 844.615067][T18397] ? __build_skb_around+0x278/0x390 [ 844.615087][T18397] ? is_vmalloc_addr+0x86/0xa0 [ 844.615105][T18397] netlink_sendmsg+0x8b0/0xda0 [ 844.615127][T18397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.615149][T18397] ? apparmor_socket_sendmsg+0x165/0x280 [ 844.615173][T18397] ____sys_sendmsg+0xa4d/0xbe0 [ 844.615188][T18397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.615210][T18397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.615229][T18397] ? rcu_is_watching+0x13/0xc0 [ 844.615244][T18397] ? ___sys_sendmsg+0x19d/0x1e0 [ 844.615260][T18397] ? kfree+0x1e5/0x6d0 [ 844.615276][T18397] ___sys_sendmsg+0x190/0x1e0 [ 844.615295][T18397] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.615320][T18397] ? __fget_files+0x34/0x3d0 [ 844.615345][T18397] ? __pfx___might_resched+0x10/0x10 [ 844.615380][T18397] __sys_sendmmsg+0x20c/0x440 [ 844.615405][T18397] ? __pfx___sys_sendmmsg+0x10/0x10 [ 844.615427][T18397] ? __fget_files+0x215/0x3d0 [ 844.615450][T18397] ? __pfx_do_futex+0x10/0x10 [ 844.615474][T18397] ? xfd_validate_state+0x129/0x190 [ 844.615502][T18397] __x64_sys_sendmmsg+0x9c/0x100 [ 844.615523][T18397] ? lockdep_hardirqs_on+0x7d/0x110 [ 844.615539][T18397] do_syscall_64+0x121/0x770 [ 844.615559][T18397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.615574][T18397] RIP: 0033:0x7f96f799e159 [ 844.615588][T18397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.615603][T18397] RSP: 002b:00007f96f87d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 844.615618][T18397] RAX: ffffffffffffffda RBX: 00007f96f7c25fa0 RCX: 00007f96f799e159 [ 844.615629][T18397] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 844.615638][T18397] RBP: 00007f96f7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 844.615647][T18397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.615656][T18397] R13: 00007f96f7c26038 R14: 00007f96f7c25fa0 R15: 00007ffc93789df8 [ 844.615676][T18397] [ 846.586401][T13708] Bluetooth: hci2: unexpected event 0x04 length: 47 > 10 [ 846.586423][T13708] Bluetooth: unknown link type 255 [ 846.586491][T13708] Bluetooth: hci2: connection err: -111 [ 847.334356][T18437] vhci_hcd: not connected 4 [ 860.403415][T18619] netlink: 'syz.1.2516': attribute type 21 has an invalid length. [ 860.403433][T18619] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2516'. [ 860.632529][T13708] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 860.638616][T18623] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 868.586274][T18716] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2535'. [ 870.272885][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.272927][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.443400][T18760] syz.3.2541 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 872.535369][T18784] netlink: 74 bytes leftover after parsing attributes in process `syz.1.2545'. [ 876.284201][T13708] Bluetooth: hci2: ISO packet too small [ 877.816484][T18869] kvm: user requested TSC rate below hardware speed [ 883.717603][T18975] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2579'. [ 885.016066][T18996] kvm: user requested TSC rate below hardware speed [ 885.249216][T19002] netlink: 178 bytes leftover after parsing attributes in process `syz.3.2586'. [ 885.262367][T19002] netlink: 178 bytes leftover after parsing attributes in process `syz.3.2586'. [ 895.880368][T16432] NFSD: Failed to start, no listeners configured. [ 898.260802][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 898.262061][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 898.262681][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 898.263859][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 898.264317][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 900.350522][T13708] Bluetooth: hci5: command tx timeout [ 902.250243][T19083] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.250310][T19083] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.250402][T19083] bridge_slave_0: entered allmulticast mode [ 902.251416][T19083] bridge_slave_0: entered promiscuous mode [ 902.284991][T19083] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.285081][T19083] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.285192][T19083] bridge_slave_1: entered allmulticast mode [ 902.287814][T19083] bridge_slave_1: entered promiscuous mode [ 902.430457][T13708] Bluetooth: hci5: command tx timeout [ 902.640489][T19083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.643928][T19083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.926864][T19083] team0: Port device team_slave_0 added [ 902.938702][T19083] team0: Port device team_slave_1 added [ 903.065528][T19083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.065544][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.065562][T19083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.169498][T19083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.169513][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.169537][T19083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.622302][T19083] hsr_slave_0: entered promiscuous mode [ 903.623345][T19083] hsr_slave_1: entered promiscuous mode [ 903.625936][T19083] debugfs: 'hsr0' already exists in 'hsr' [ 903.625955][T19083] Cannot create hsr debugfs directory [ 904.510279][T13708] Bluetooth: hci5: command tx timeout [ 905.648422][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2617'. [ 905.675157][T19188] veth0_macvtap: left promiscuous mode [ 905.677103][T19188] macvtap0: entered promiscuous mode [ 905.677121][T19188] macvtap0: entered allmulticast mode [ 905.927845][T19083] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 905.950839][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.966835][T19083] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 905.994602][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 906.008567][T19083] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 906.032972][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 906.033590][T19083] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 906.069643][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.582986][T19083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.590389][T13708] Bluetooth: hci5: command tx timeout [ 906.839434][T19083] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.890017][T18280] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.890085][T18280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.927886][T18280] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.927955][T18280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.614128][T19230] ovs_: entered promiscuous mode [ 907.823077][T19232] HfR: entered promiscuous mode [ 910.185880][T19083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.723306][T19083] veth0_vlan: entered promiscuous mode [ 912.144921][T19083] veth1_vlan: entered promiscuous mode [ 912.545229][T19083] veth0_macvtap: entered promiscuous mode [ 912.584946][T19083] veth1_macvtap: entered promiscuous mode [ 912.616835][T19083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.619339][T19083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.783098][ T1360] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.783132][ T1360] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.783155][ T1360] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.783179][ T1360] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.960857][ T1360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.960877][ T1360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.059390][T18014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.059408][T18014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.055168][T19342] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2640'. [ 915.059873][T19342] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2640'. [ 915.060040][T19342] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2640'. [ 915.107457][T19342] netlink: 302 bytes leftover after parsing attributes in process `syz.5.2640'. [ 915.444306][T19350] FAULT_INJECTION: forcing a failure. [ 915.444306][T19350] name failslab, interval 1, probability 0, space 0, times 0 [ 915.444335][T19350] CPU: 0 UID: 0 PID: 19350 Comm: syz.5.2642 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.444356][T19350] Tainted: [L]=SOFTLOCKUP [ 915.444361][T19350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 915.444370][T19350] Call Trace: [ 915.444376][T19350] [ 915.444383][T19350] dump_stack_lvl+0x100/0x190 [ 915.444413][T19350] should_fail_ex.cold+0x5/0xa [ 915.444435][T19350] should_failslab+0xc2/0x120 [ 915.444459][T19350] __kvmalloc_node_noprof+0x113/0x9b0 [ 915.444480][T19350] ? seq_read_iter+0x819/0x1270 [ 915.444502][T19350] seq_read_iter+0x819/0x1270 [ 915.444523][T19350] ? __pfx_seq_read_iter+0x10/0x10 [ 915.444540][T19350] vfs_read+0x82e/0xb40 [ 915.444560][T19350] ? __pfx_vfs_read+0x10/0x10 [ 915.444574][T19350] ? find_held_lock+0x2b/0x80 [ 915.444603][T19350] ksys_read+0x12a/0x250 [ 915.444619][T19350] ? __pfx_ksys_read+0x10/0x10 [ 915.444650][T19350] do_syscall_64+0x121/0x770 [ 915.444673][T19350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.444689][T19350] RIP: 0033:0x7f8da899e159 [ 915.444702][T19350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.444716][T19350] RSP: 002b:00007f8da6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 915.444731][T19350] RAX: ffffffffffffffda RBX: 00007f8da8c26090 RCX: 00007f8da899e159 [ 915.444741][T19350] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000003 [ 915.444749][T19350] RBP: 00007f8da8a3506b R08: 0000000000000000 R09: 0000000000000000 [ 915.444758][T19350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.444766][T19350] R13: 00007f8da8c26128 R14: 00007f8da8c26090 R15: 00007fff94e34ea8 [ 915.444786][T19350] [ 915.833631][T19356] random: crng reseeded on system resumption [ 922.195197][T19463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2666'. [ 924.355934][T19498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2672'. [ 924.767169][T19498] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.805390][T19498] bridge_slave_0 (unregistering): left allmulticast mode [ 924.805421][T19498] bridge_slave_0 (unregistering): left promiscuous mode [ 924.805485][T19498] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.094829][T19504] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2673'. [ 927.788299][T19565] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 928.274233][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 928.280717][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 928.281583][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 928.309493][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 928.320988][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 930.351806][ T5627] Bluetooth: hci6: command tx timeout [ 930.805278][T19620] FAULT_INJECTION: forcing a failure. [ 930.805278][T19620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 930.805311][T19620] CPU: 0 UID: 0 PID: 19620 Comm: syz.4.2686 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.805333][T19620] Tainted: [L]=SOFTLOCKUP [ 930.805339][T19620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 930.805348][T19620] Call Trace: [ 930.805354][T19620] [ 930.805361][T19620] dump_stack_lvl+0x100/0x190 [ 930.805386][T19620] should_fail_ex.cold+0x5/0xa [ 930.805405][T19620] ? prepare_alloc_pages+0x16d/0x5b0 [ 930.805427][T19620] should_fail_alloc_page+0xeb/0x140 [ 930.805449][T19620] prepare_alloc_pages+0x1f0/0x5b0 [ 930.805472][T19620] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 930.805489][T19620] ? tun_get_user+0x7d0/0x3cc0 [ 930.805629][T19620] ? tun_chr_write_iter+0xdc/0x200 [ 930.805650][T19620] ? vfs_write+0x6af/0x1050 [ 930.805666][T19620] ? __x64_sys_pwrite64+0x151/0x250 [ 930.805682][T19620] ? do_syscall_64+0x121/0x770 [ 930.805699][T19620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.805721][T19620] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 930.805752][T19620] ? trace_kmalloc+0xeb/0x110 [ 930.805799][T19620] ? __kasan_kmalloc+0xaa/0xb0 [ 930.805819][T19620] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 930.805839][T19620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 930.805863][T19620] ? policy_nodemask+0xed/0x4f0 [ 930.805885][T19620] alloc_pages_mpol+0x201/0x550 [ 930.805906][T19620] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 930.805925][T19620] ? __alloc_skb+0x5b7/0x710 [ 930.805948][T19620] ? __pfx___alloc_skb+0x10/0x10 [ 930.805977][T19620] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 930.806005][T19620] alloc_pages_noprof+0x1a/0x160 [ 930.806021][T19620] alloc_skb_with_frags+0x4e7/0x760 [ 930.806042][T19620] sock_alloc_send_pskb+0x801/0x980 [ 930.806063][T19620] ? __lock_acquire+0x5c0/0x1f40 [ 930.806087][T19620] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 930.806109][T19620] ? lock_acquire+0x1d1/0x380 [ 930.806128][T19620] ? aa_file_perm+0x197/0x14d0 [ 930.806147][T19620] ? find_held_lock+0x2b/0x80 [ 930.806171][T19620] tun_get_user+0x7d0/0x3cc0 [ 930.806206][T19620] ? __lock_acquire+0x5c0/0x1f40 [ 930.806226][T19620] ? __pfx_tun_get_user+0x10/0x10 [ 930.806248][T19620] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 930.806314][T19620] ? find_held_lock+0x2b/0x80 [ 930.806330][T19620] ? tun_get+0x191/0x370 [ 930.806355][T19620] ? tun_get+0x191/0x370 [ 930.806386][T19620] tun_chr_write_iter+0xdc/0x200 [ 930.806409][T19620] vfs_write+0x6af/0x1050 [ 930.806426][T19620] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 930.806449][T19620] ? __pfx_vfs_write+0x10/0x10 [ 930.806463][T19620] ? find_held_lock+0x2b/0x80 [ 930.806491][T19620] __x64_sys_pwrite64+0x1eb/0x250 [ 930.806508][T19620] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 930.806531][T19620] do_syscall_64+0x121/0x770 [ 930.806549][T19620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.806565][T19620] RIP: 0033:0x7f964699e159 [ 930.806579][T19620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.806593][T19620] RSP: 002b:00007f9647881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 930.806609][T19620] RAX: ffffffffffffffda RBX: 00007f9646c26090 RCX: 00007f964699e159 [ 930.806620][T19620] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 930.806629][T19620] RBP: 00007f9646a3506b R08: 0000000000000000 R09: 0000000000000000 [ 930.806638][T19620] R10: 000000000000019f R11: 0000000000000246 R12: 0000000000000000 [ 930.806647][T19620] R13: 00007f9646c26128 R14: 00007f9646c26090 R15: 00007fff071c8448 [ 930.806667][T19620] [ 931.712795][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.712836][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.772130][T19578] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.772200][T19578] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.772308][T19578] bridge_slave_0: entered allmulticast mode [ 931.773317][T19578] bridge_slave_0: entered promiscuous mode [ 931.896876][T19578] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.896943][T19578] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.897059][T19578] bridge_slave_1: entered allmulticast mode [ 931.899963][T19578] bridge_slave_1: entered promiscuous mode [ 932.044453][T19578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.062728][T19578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.091652][T19628] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2688'. [ 932.154625][T19578] team0: Port device team_slave_0 added [ 932.182752][T19578] team0: Port device team_slave_1 added [ 932.288643][T19578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.288657][T19578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.288675][T19578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.343285][T19578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.343299][T19578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.343317][T19578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.408454][T19632] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2690'. [ 932.430935][ T5627] Bluetooth: hci6: command tx timeout [ 932.447942][T19636] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2692'. [ 932.582251][T19578] hsr_slave_0: entered promiscuous mode [ 932.585803][T19578] hsr_slave_1: entered promiscuous mode [ 932.586798][T19578] debugfs: 'hsr0' already exists in 'hsr' [ 932.586815][T19578] Cannot create hsr debugfs directory [ 932.625458][T19640] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2693'. [ 933.274473][T19578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 933.277655][T19578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 933.278215][T19578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 933.301931][T19578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.307394][T19578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 933.334482][T19578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 933.335065][T19578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 933.338171][T19578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 933.524827][T19578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.547967][T19578] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.567811][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.567883][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.589573][ T1360] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.589641][ T1360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.988066][T19578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.197389][T19578] veth0_vlan: entered promiscuous mode [ 934.211189][T19578] veth1_vlan: entered promiscuous mode [ 934.245868][T19578] veth0_macvtap: entered promiscuous mode [ 934.249359][T19578] veth1_macvtap: entered promiscuous mode [ 934.277477][T19578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.296372][T19578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.343834][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.343870][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.343894][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.343917][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.479895][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.479913][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.510793][ T5627] Bluetooth: hci6: command tx timeout [ 934.536472][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.536493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.594556][ T5627] Bluetooth: hci6: command tx timeout [ 939.465803][T19759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2714'. [ 940.915063][ T5627] Bluetooth: hci6: unexpected event 0x3e length: 726 > 255 [ 940.915082][ T5627] Bluetooth: hci6: unexpected subevent 0x0d length: 725 > 260 [ 940.915118][ T5627] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 940.915127][ T5627] Bluetooth: hci6: Unknown advertising packet type: 0x7b [ 940.915136][ T5627] Bluetooth: hci6: Unknown advertising packet type: 0x5a [ 940.915150][ T5627] Bluetooth: hci6: Malformed LE Event: 0x0d [ 941.687215][T19791] openvswitch: netlink: IP tunnel dst address not specified [ 942.107858][T19794] FAULT_INJECTION: forcing a failure. [ 942.107858][T19794] name failslab, interval 1, probability 0, space 0, times 0 [ 942.107888][T19794] CPU: 0 UID: 0 PID: 19794 Comm: syz.4.2723 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.107910][T19794] Tainted: [L]=SOFTLOCKUP [ 942.107916][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.107926][T19794] Call Trace: [ 942.107931][T19794] [ 942.107937][T19794] dump_stack_lvl+0x100/0x190 [ 942.107965][T19794] should_fail_ex.cold+0x5/0xa [ 942.107986][T19794] should_failslab+0xc2/0x120 [ 942.108007][T19794] __kvmalloc_node_noprof+0x113/0x9b0 [ 942.108027][T19794] ? seq_read_iter+0x819/0x1270 [ 942.108048][T19794] seq_read_iter+0x819/0x1270 [ 942.108074][T19794] ? __pfx_seq_read_iter+0x10/0x10 [ 942.108091][T19794] vfs_read+0x82e/0xb40 [ 942.108110][T19794] ? __pfx_vfs_read+0x10/0x10 [ 942.108125][T19794] ? find_held_lock+0x2b/0x80 [ 942.108154][T19794] ksys_read+0x12a/0x250 [ 942.108170][T19794] ? __pfx_ksys_read+0x10/0x10 [ 942.108191][T19794] do_syscall_64+0x121/0x770 [ 942.108211][T19794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.108226][T19794] RIP: 0033:0x7f964699e159 [ 942.108239][T19794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.108252][T19794] RSP: 002b:00007f9647881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 942.108267][T19794] RAX: ffffffffffffffda RBX: 00007f9646c26090 RCX: 00007f964699e159 [ 942.108276][T19794] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000003 [ 942.108285][T19794] RBP: 00007f9646a3506b R08: 0000000000000000 R09: 0000000000000000 [ 942.108293][T19794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.108302][T19794] R13: 00007f9646c26128 R14: 00007f9646c26090 R15: 00007fff071c8448 [ 942.108321][T19794] [ 943.037809][T19810] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2728'. [ 943.215498][T19813] random: crng reseeded on system resumption [ 950.982754][T19929] netlink: 306 bytes leftover after parsing attributes in process `syz.6.2747'. [ 951.598590][T19941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2748'. [ 952.837756][T19947] FAULT_INJECTION: forcing a failure. [ 952.837756][T19947] name failslab, interval 1, probability 0, space 0, times 0 [ 952.837784][T19947] CPU: 0 UID: 8 PID: 19947 Comm: syz.1.2759 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.837807][T19947] Tainted: [L]=SOFTLOCKUP [ 952.837812][T19947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.837822][T19947] Call Trace: [ 952.837835][T19947] [ 952.837842][T19947] dump_stack_lvl+0x100/0x190 [ 952.837868][T19947] should_fail_ex.cold+0x5/0xa [ 952.837890][T19947] should_failslab+0xc2/0x120 [ 952.837921][T19947] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 952.837943][T19947] ? key_alloc+0x423/0x1310 [ 952.838042][T19947] kmemdup_noprof+0x29/0x60 [ 952.838059][T19947] key_alloc+0x423/0x1310 [ 952.838080][T19947] ? __pfx_key_alloc+0x10/0x10 [ 952.838095][T19947] ? __pfx_key_default_cmp+0x10/0x10 [ 952.838112][T19947] ? __pfx_keyring_search_iterator+0x10/0x10 [ 952.838137][T19947] keyring_alloc+0x44/0xc0 [ 952.838155][T19947] look_up_user_keyrings+0x465/0x790 [ 952.838180][T19947] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 952.838204][T19947] ? __pfx_futex_wait+0x10/0x10 [ 952.838229][T19947] lookup_user_key+0xbb1/0x1300 [ 952.838250][T19947] ? lock_acquire+0x1d1/0x380 [ 952.838271][T19947] ? __pfx_lookup_user_key+0x10/0x10 [ 952.838292][T19947] ? do_futex+0x190/0x440 [ 952.838309][T19947] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 952.838335][T19947] ? __x64_sys_futex+0x34f/0x4d0 [ 952.838348][T19947] ? __x64_sys_futex+0x358/0x4d0 [ 952.838366][T19947] keyctl_session_to_parent+0x28/0xae0 [ 952.838391][T19947] __do_sys_keyctl+0x2b1/0x5a0 [ 952.838416][T19947] do_syscall_64+0x121/0x770 [ 952.838435][T19947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.838451][T19947] RIP: 0033:0x7fc9d0d9e159 [ 952.838467][T19947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.838480][T19947] RSP: 002b:00007fc9d1c65028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 952.838495][T19947] RAX: ffffffffffffffda RBX: 00007fc9d1025fa0 RCX: 00007fc9d0d9e159 [ 952.838505][T19947] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 952.838515][T19947] RBP: 00007fc9d0e3506b R08: 0000000000000001 R09: 0000000000000000 [ 952.838524][T19947] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 952.838533][T19947] R13: 00007fc9d1026038 R14: 00007fc9d1025fa0 R15: 00007ffc6cb53ef8 [ 952.838553][T19947] [ 953.013990][T19946] netlink: 'syz.5.2750': attribute type 27 has an invalid length. [ 953.014009][T19946] netlink: 'syz.5.2750': attribute type 28 has an invalid length. [ 953.014018][T19946] netlink: 'syz.5.2750': attribute type 29 has an invalid length. [ 953.014026][T19946] netlink: 'syz.5.2750': attribute type 30 has an invalid length. [ 953.014035][T19946] netlink: 'syz.5.2750': attribute type 31 has an invalid length. [ 953.014044][T19946] netlink: 'syz.5.2750': attribute type 32 has an invalid length. [ 953.014052][T19946] netlink: 'syz.5.2750': attribute type 33 has an invalid length. [ 953.014061][T19946] netlink: 'syz.5.2750': attribute type 35 has an invalid length. [ 953.014070][T19946] netlink: 'syz.5.2750': attribute type 37 has an invalid length. [ 953.014079][T19946] netlink: 18 bytes leftover after parsing attributes in process `syz.5.2750'. [ 957.157620][T20009] netlink: 'syz.1.2763': attribute type 27 has an invalid length. [ 957.157714][T20009] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2763'. [ 957.698115][T20017] FAULT_INJECTION: forcing a failure. [ 957.698115][T20017] name failslab, interval 1, probability 0, space 0, times 0 [ 957.698145][T20017] CPU: 0 UID: 0 PID: 20017 Comm: syz.6.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.698167][T20017] Tainted: [L]=SOFTLOCKUP [ 957.698172][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.698182][T20017] Call Trace: [ 957.698187][T20017] [ 957.698194][T20017] dump_stack_lvl+0x100/0x190 [ 957.698220][T20017] should_fail_ex.cold+0x5/0xa [ 957.698241][T20017] should_failslab+0xc2/0x120 [ 957.698262][T20017] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 957.698282][T20017] ? __d_alloc+0x35/0xa50 [ 957.698306][T20017] __d_alloc+0x35/0xa50 [ 957.698328][T20017] d_alloc+0x4a/0x1e0 [ 957.698348][T20017] lookup_one_qstr_excl+0x171/0x250 [ 957.698372][T20017] start_dirop+0x59/0xb0 [ 957.698389][T20017] simple_start_creating+0xf9/0x110 [ 957.698408][T20017] ? __pfx_simple_start_creating+0x10/0x10 [ 957.698426][T20017] ? mntput+0x70/0xa0 [ 957.698442][T20017] ? simple_pin_fs+0xa3/0x190 [ 957.698458][T20017] debugfs_start_creating.part.0+0x9f/0x180 [ 957.698566][T20017] __debugfs_create_file+0x86/0x4d0 [ 957.698590][T20017] debugfs_create_file_full+0x41/0x60 [ 957.698613][T20017] kvm_dev_ioctl+0x1560/0x1b50 [ 957.698642][T20017] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 957.698664][T20017] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 957.698681][T20017] __x64_sys_ioctl+0x18e/0x210 [ 957.698697][T20017] do_syscall_64+0x121/0x770 [ 957.698716][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.698731][T20017] RIP: 0033:0x7f77f179e159 [ 957.698746][T20017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.698759][T20017] RSP: 002b:00007f77f2663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.698774][T20017] RAX: ffffffffffffffda RBX: 00007f77f1a25fa0 RCX: 00007f77f179e159 [ 957.698783][T20017] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 957.698792][T20017] RBP: 00007f77f183506b R08: 0000000000000000 R09: 0000000000000000 [ 957.698801][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.698809][T20017] R13: 00007f77f1a26038 R14: 00007f77f1a25fa0 R15: 00007ffff87eb608 [ 957.698830][T20017] [ 958.440370][T20026] vhci_hcd vhci_hcd.2: invalid port number 255 [ 958.647160][T20032] validate_nla: 8 callbacks suppressed [ 958.647180][T20032] netlink: 'syz.5.2772': attribute type 1 has an invalid length. [ 958.647189][T20032] netlink: 306 bytes leftover after parsing attributes in process `syz.5.2772'. [ 960.719172][T20063] CIFS mount error: No usable UNC path provided in device string! [ 960.719172][T20063] [ 960.719190][T20063] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 963.806415][T20097] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2791'. [ 964.025665][T20111] FAULT_INJECTION: forcing a failure. [ 964.025665][T20111] name failslab, interval 1, probability 0, space 0, times 0 [ 964.025697][T20111] CPU: 0 UID: 0 PID: 20111 Comm: syz.4.2787 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.025719][T20111] Tainted: [L]=SOFTLOCKUP [ 964.025724][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 964.025733][T20111] Call Trace: [ 964.025739][T20111] [ 964.025746][T20111] dump_stack_lvl+0x100/0x190 [ 964.025771][T20111] should_fail_ex.cold+0x5/0xa [ 964.025792][T20111] should_failslab+0xc2/0x120 [ 964.025812][T20111] kmem_cache_alloc_noprof+0x92/0x6a0 [ 964.025830][T20111] ? __might_fault+0xc5/0x140 [ 964.025844][T20111] ? prepare_creds+0x2c/0x950 [ 964.025866][T20111] prepare_creds+0x2c/0x950 [ 964.025886][T20111] __do_sys_capset+0x270/0x460 [ 964.025910][T20111] ? __pfx___do_sys_capset+0x10/0x10 [ 964.025932][T20111] ? __x64_sys_futex+0x358/0x4d0 [ 964.025948][T20111] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 964.025966][T20111] ? xfd_validate_state+0x129/0x190 [ 964.025995][T20111] do_syscall_64+0x121/0x770 [ 964.026014][T20111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.026029][T20111] RIP: 0033:0x7f964699e159 [ 964.026043][T20111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.026057][T20111] RSP: 002b:00007f96478a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 964.026072][T20111] RAX: ffffffffffffffda RBX: 00007f9646c25fa0 RCX: 00007f964699e159 [ 964.026081][T20111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 964.026089][T20111] RBP: 00007f9646a3506b R08: 0000000000000000 R09: 0000000000000000 [ 964.026098][T20111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.026106][T20111] R13: 00007f9646c26038 R14: 00007f9646c25fa0 R15: 00007fff071c8448 [ 964.026125][T20111] [ 964.631911][T20126] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2789'. [ 969.772150][T20177] FAULT_INJECTION: forcing a failure. [ 969.772150][T20177] name failslab, interval 1, probability 0, space 0, times 0 [ 969.772181][T20177] CPU: 0 UID: 0 PID: 20177 Comm: syz.4.2799 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.772202][T20177] Tainted: [L]=SOFTLOCKUP [ 969.772208][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.772218][T20177] Call Trace: [ 969.772224][T20177] [ 969.772230][T20177] dump_stack_lvl+0x100/0x190 [ 969.772256][T20177] should_fail_ex.cold+0x5/0xa [ 969.772277][T20177] should_failslab+0xc2/0x120 [ 969.772298][T20177] __kmalloc_cache_noprof+0x91/0x6d0 [ 969.772314][T20177] ? kvm_dev_ioctl+0x13ee/0x1b50 [ 969.772334][T20177] kvm_dev_ioctl+0x13ee/0x1b50 [ 969.772356][T20177] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 969.772377][T20177] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 969.772394][T20177] __x64_sys_ioctl+0x18e/0x210 [ 969.772410][T20177] do_syscall_64+0x121/0x770 [ 969.772429][T20177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.772444][T20177] RIP: 0033:0x7f964699e159 [ 969.772457][T20177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.772470][T20177] RSP: 002b:00007f96478a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.772485][T20177] RAX: ffffffffffffffda RBX: 00007f9646c25fa0 RCX: 00007f964699e159 [ 969.772494][T20177] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 969.772502][T20177] RBP: 00007f9646a3506b R08: 0000000000000000 R09: 0000000000000000 [ 969.772511][T20177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.772519][T20177] R13: 00007f9646c26038 R14: 00007f9646c25fa0 R15: 00007fff071c8448 [ 969.772538][T20177] [ 970.905398][T20206] CIFS mount error: No usable UNC path provided in device string! [ 970.905398][T20206] [ 970.905415][T20206] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 977.658118][T20290] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2823'. [ 977.781143][T20290] netlink: 302 bytes leftover after parsing attributes in process `syz.5.2823'. [ 980.118499][T20327] CIFS mount error: No usable UNC path provided in device string! [ 980.118499][T20327] [ 980.118517][T20327] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 985.165357][T20402] CIFS mount error: No usable UNC path provided in device string! [ 985.165357][T20402] [ 985.165375][T20402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 989.543960][T20464] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2854'. [ 991.021827][T20476] netlink: 'syz.5.2857': attribute type 21 has an invalid length. [ 991.021848][T20476] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2857'. [ 993.154292][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.154333][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.493066][T20539] zswap: compressor not available [ 1001.912472][T20633] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2893'. [ 1001.912502][T20633] : renamed from team_slave_1 (while UP) [ 1002.585656][T20641] FAULT_INJECTION: forcing a failure. [ 1002.585656][T20641] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.585689][T20641] CPU: 0 UID: 0 PID: 20641 Comm: syz.5.2888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.585711][T20641] Tainted: [L]=SOFTLOCKUP [ 1002.585716][T20641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.585726][T20641] Call Trace: [ 1002.585732][T20641] [ 1002.585738][T20641] dump_stack_lvl+0x100/0x190 [ 1002.585767][T20641] should_fail_ex.cold+0x5/0xa [ 1002.585789][T20641] should_failslab+0xc2/0x120 [ 1002.585811][T20641] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1002.585829][T20641] ? __pfx_map_id_range_down+0x10/0x10 [ 1002.585851][T20641] ? security_inode_alloc+0x3b/0x2c0 [ 1002.585878][T20641] security_inode_alloc+0x3b/0x2c0 [ 1002.585899][T20641] inode_init_always_gfp+0xc6f/0xfb0 [ 1002.585921][T20641] alloc_inode+0x8e/0x250 [ 1002.585944][T20641] new_inode+0x22/0x1c0 [ 1002.585959][T20641] proc_get_inode+0x1d/0x780 [ 1002.585982][T20641] proc_lookup_de+0x236/0x360 [ 1002.586006][T20641] proc_lookup+0xd8/0x110 [ 1002.586027][T20641] __lookup_slow+0x155/0x320 [ 1002.586051][T20641] lookup_slow+0x50/0x70 [ 1002.586073][T20641] link_path_walk+0x1377/0x1cc0 [ 1002.586095][T20641] path_openat+0x1ac/0x2440 [ 1002.586116][T20641] ? __pfx_path_openat+0x10/0x10 [ 1002.586146][T20641] do_file_open+0x20e/0x430 [ 1002.586167][T20641] ? __pfx_do_file_open+0x10/0x10 [ 1002.586199][T20641] ? _raw_spin_unlock+0x28/0x50 [ 1002.586225][T20641] ? alloc_fd+0x471/0x7a0 [ 1002.586247][T20641] do_sys_openat2+0x10f/0x1e0 [ 1002.586269][T20641] ? __pfx_do_sys_openat2+0x10/0x10 [ 1002.586299][T20641] ? __fget_files+0x21f/0x3d0 [ 1002.586323][T20641] __x64_sys_openat+0x12d/0x210 [ 1002.586346][T20641] ? __pfx___x64_sys_openat+0x10/0x10 [ 1002.586376][T20641] do_syscall_64+0x121/0x770 [ 1002.586395][T20641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.586411][T20641] RIP: 0033:0x7f8da899e159 [ 1002.586425][T20641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.586438][T20641] RSP: 002b:00007f8da977e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1002.586453][T20641] RAX: ffffffffffffffda RBX: 00007f8da8c25fa0 RCX: 00007f8da899e159 [ 1002.586463][T20641] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1002.586472][T20641] RBP: 00007f8da8a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1002.586481][T20641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.586490][T20641] R13: 00007f8da8c26038 R14: 00007f8da8c25fa0 R15: 00007fff94e34ea8 [ 1002.586510][T20641] [ 1007.027836][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2898'. [ 1007.051938][T20705] ovs_?: entered promiscuous mode [ 1008.412184][T20739] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2904'. [ 1010.655886][T20758] zswap: compressor not available [ 1011.159693][ T31] audit: type=1807 audit(2613893732.417:9): UNKNOWN= [ 1011.169894][ T31] audit: type=1802 audit(2613893732.427:10): pid=20775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2910" res=0 errno=0 [ 1011.303116][T20774] ima: policy update failed [ 1011.303243][ T31] audit: type=1802 audit(2613893732.567:11): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2910" res=0 errno=0 [ 1015.184050][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1015.256628][T20832] ovs_?: entered promiscuous mode [ 1017.736077][T20879] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2928'. [ 1017.736406][T20878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1019.358708][T20889] netlink: 266 bytes leftover after parsing attributes in process `syz.4.2933'. [ 1019.358731][T20889] IPv6: NLM_F_CREATE should be specified when creating new route [ 1019.403040][T20888] FAULT_INJECTION: forcing a failure. [ 1019.403040][T20888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1019.403072][T20888] CPU: 0 UID: 0 PID: 20888 Comm: syz.6.2932 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.403142][T20888] Tainted: [L]=SOFTLOCKUP [ 1019.403148][T20888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.403157][T20888] Call Trace: [ 1019.403163][T20888] [ 1019.403169][T20888] dump_stack_lvl+0x100/0x190 [ 1019.403195][T20888] should_fail_ex.cold+0x5/0xa [ 1019.403212][T20888] ? prepare_alloc_pages+0x16d/0x5b0 [ 1019.403235][T20888] should_fail_alloc_page+0xeb/0x140 [ 1019.403256][T20888] prepare_alloc_pages+0x1f0/0x5b0 [ 1019.403280][T20888] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1019.403299][T20888] ? __lock_acquire+0x5c0/0x1f40 [ 1019.403321][T20888] ? do_raw_spin_unlock+0x145/0x1e0 [ 1019.403335][T20888] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1019.403352][T20888] ? rcu_is_watching+0x13/0xc0 [ 1019.403368][T20888] ? trace_hrtimer_start+0x77/0x220 [ 1019.403384][T20888] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1019.403401][T20888] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 1019.403425][T20888] ? find_held_lock+0x2b/0x80 [ 1019.403440][T20888] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1019.403475][T20888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1019.403496][T20888] ? policy_nodemask+0xed/0x4f0 [ 1019.403519][T20888] alloc_pages_mpol+0x201/0x550 [ 1019.403541][T20888] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1019.403563][T20888] ? do_raw_spin_lock+0x128/0x260 [ 1019.403579][T20888] alloc_pages_noprof+0x1a/0x160 [ 1019.403594][T20888] pte_alloc_one+0x1c/0x3d0 [ 1019.403643][T20888] __pte_alloc+0x6d/0x380 [ 1019.403661][T20888] ? __pfx___pte_alloc+0x10/0x10 [ 1019.403678][T20888] ? __pfx___might_resched+0x10/0x10 [ 1019.403696][T20888] ? copy_page_range+0x1c91/0x57c0 [ 1019.403721][T20888] copy_page_range+0x3b36/0x57c0 [ 1019.403765][T20888] ? __pfx_copy_page_range+0x10/0x10 [ 1019.403786][T20888] ? mas_wr_store_entry+0xa4/0x1d50 [ 1019.403888][T20888] ? lock_acquire+0x1d1/0x380 [ 1019.403908][T20888] ? dup_mmap+0xd0a/0x2370 [ 1019.403932][T20888] ? find_held_lock+0x2b/0x80 [ 1019.403948][T20888] ? dup_mmap+0xe66/0x2370 [ 1019.403966][T20888] ? dup_mmap+0xe66/0x2370 [ 1019.403985][T20888] ? down_write+0x146/0x1f0 [ 1019.404004][T20888] ? up_write+0x2dc/0x5b0 [ 1019.404019][T20888] dup_mmap+0x1230/0x2370 [ 1019.404047][T20888] ? __pfx_dup_mmap+0x10/0x10 [ 1019.404065][T20888] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1019.404086][T20888] ? lockdep_hardirqs_on+0x7d/0x110 [ 1019.404103][T20888] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1019.404122][T20888] ? __lock_acquire+0x5c0/0x1f40 [ 1019.404151][T20888] ? lock_acquire+0x1d1/0x380 [ 1019.404170][T20888] ? copy_process+0x4806/0x8370 [ 1019.404193][T20888] copy_process+0x4811/0x8370 [ 1019.404206][T20888] ? futex_unqueue+0x133/0x2c0 [ 1019.404231][T20888] ? __pfx_copy_process+0x10/0x10 [ 1019.404249][T20888] ? _copy_from_user+0x59/0xd0 [ 1019.404274][T20888] kernel_clone+0x176/0x9d0 [ 1019.404290][T20888] ? __pfx_kernel_clone+0x10/0x10 [ 1019.404316][T20888] __do_sys_clone3+0x214/0x290 [ 1019.404331][T20888] ? __pfx___do_sys_clone3+0x10/0x10 [ 1019.404380][T20888] do_syscall_64+0x121/0x770 [ 1019.404399][T20888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.404415][T20888] RIP: 0033:0x7f77f179e159 [ 1019.404430][T20888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.404443][T20888] RSP: 002b:00007f77f2662ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1019.404459][T20888] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f77f179e159 [ 1019.404469][T20888] RDX: 00007f77f2662f10 RSI: 0000000000000058 RDI: 00007f77f2662f10 [ 1019.404479][T20888] RBP: 00007f77f183506b R08: 0000000000000000 R09: 0000000000000058 [ 1019.404488][T20888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.404497][T20888] R13: 00007f77f1a26038 R14: 00007f77f1a25fa0 R15: 00007ffff87eb608 [ 1019.404518][T20888] [ 1020.830375][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 1023.322883][T20943] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1024.645471][T20946] netlink: 'syz.5.2944': attribute type 1 has an invalid length. [ 1024.645490][T20946] netlink: 'syz.5.2944': attribute type 6 has an invalid length. [ 1025.143065][T20970] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2943'. [ 1028.376254][ T31] audit: type=1804 audit(2613893749.637:12): pid=20989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.5.2951" name="ima_policy_written" res=0 errno=-17 [ 1028.486265][T20978] ima: policy update failed [ 1028.486909][ T31] audit: type=1802 audit(2613893749.747:13): pid=20978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2951" res=0 errno=0 [ 1033.470656][ T32] INFO: task syz-executor:5616 blocked for more than 143 seconds. [ 1033.470677][ T32] Tainted: G L syzkaller #0 [ 1033.470686][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1033.470692][ T32] task:syz-executor state:D stack:23400 pid:5616 tgid:5616 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1033.470741][ T32] Call Trace: [ 1033.470746][ T32] [ 1033.470755][ T32] __schedule+0x1259/0x6920 [ 1033.470774][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1033.470800][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1033.470822][ T32] ? lock_acquire+0x1d1/0x380 [ 1033.470843][ T32] ? __pfx___schedule+0x10/0x10 [ 1033.470855][ T32] ? find_held_lock+0x2b/0x80 [ 1033.470871][ T32] ? schedule+0x225/0x2c0 [ 1033.470999][ T32] schedule+0xdd/0x2c0 [ 1033.471014][ T32] schedule_preempt_disabled+0x13/0x30 [ 1033.471028][ T32] __mutex_lock+0xccb/0x1bd0 [ 1033.471045][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1033.471158][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1033.471183][ T32] ? net_generic+0x25/0x2a0 [ 1033.471228][ T32] ? net_generic+0xea/0x2a0 [ 1033.471249][ T32] ? net_generic+0xea/0x2a0 [ 1033.471275][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1033.471289][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 1033.471310][ T32] nfsd_umount+0x3b/0x60 [ 1033.471351][ T32] deactivate_locked_super+0xbd/0x130 [ 1033.471368][ T32] deactivate_super+0xea/0x110 [ 1033.471384][ T32] cleanup_mnt+0x21f/0x450 [ 1033.471403][ T32] task_work_run+0x150/0x240 [ 1033.471423][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1033.471447][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 1033.471471][ T32] ? rcu_is_watching+0x13/0xc0 [ 1033.471488][ T32] do_syscall_64+0x603/0x770 [ 1033.471507][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.471522][ T32] RIP: 0033:0x7f5f4539f397 [ 1033.471535][ T32] RSP: 002b:00007ffe7a3a2c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1033.471550][ T32] RAX: 0000000000000000 RBX: 00007f5f454344bb RCX: 00007f5f4539f397 [ 1033.471559][ T32] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffe7a3a3d90 [ 1033.471568][ T32] RBP: 00007ffe7a3a3d7c R08: 0000000000000000 R09: 0000000000000000 [ 1033.471577][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7a3a3d90 [ 1033.471586][ T32] R13: 00007f5f454344bb R14: 00000000000d766c R15: 00007ffe7a3a3dd0 [ 1033.471605][ T32] [ 1033.471658][ T32] [ 1033.471658][ T32] Showing all locks held in the system: [ 1033.471670][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1033.471738][ T32] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1033.471803][ T32] locks held by getty/5380: 2, on CPU#0: [ 1033.471813][ T32] #0: ffff888032a5c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1033.471853][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1033.471889][ T32] locks held by syz-executor/5616: 2, on CPU#0: [ 1033.471899][ T32] #0: ffff88807c07c0e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1033.471936][ T32] #1: ffffffff8f288940 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1033.471972][ T32] locks held by syz-executor/8199: 2, on CPU#0: [ 1033.471982][ T32] #0: ffff888022faa0e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1033.472019][ T32] #1: ffffffff8f288940 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1033.472053][ T32] locks held by syz.0.2120/16432: 2, on CPU#0: [ 1033.472063][ T32] #0: ffffffff90d872c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1033.472127][ T32] #1: ffffffff8f288940 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1033.472167][ T32] locks held by syz.1.2960/21043: 1, last CPU#0: [ 1033.472177][ T32] #0: ffff88807e2bc378 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x254/0xdd0 [ 1033.472211][ T32] locks held by syz.1.2960/21050: 2, on CPU#0: [ 1033.472221][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472256][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1033.472341][ T32] locks held by syz.1.2960/21053: 2, on CPU#0: [ 1033.472351][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472385][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 1033.472424][ T32] locks held by syz.1.2960/21057: 2, on CPU#0: [ 1033.472434][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472467][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1033.472501][ T32] locks held by syz.6.2963/21049: 2, on CPU#0: [ 1033.472511][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472544][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1033.472577][ T32] locks held by syz.6.2963/21054: 2, on CPU#0: [ 1033.472587][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472621][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 1033.472660][ T32] locks held by syz.6.2963/21061: 2, on CPU#0: [ 1033.472670][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472711][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 1033.472784][ T32] locks held by syz.4.2964/21048: 4, last CPU#0: [ 1033.472795][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472828][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1033.472861][ T32] #2: ffff88801d2c4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0xaa0 [ 1033.472902][ T32] #3: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x23/0x2a0 [ 1033.472938][ T32] locks held by syz.4.2964/21056: 2, on CPU#0: [ 1033.472948][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.472981][ T32] #1: ffff88801d2c4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0xaa0 [ 1033.473021][ T32] locks held by syz.4.2964/21059: 2, on CPU#0: [ 1033.473031][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.473064][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 1033.473104][ T32] locks held by syz.5.2965/21055: 2, last CPU#0: [ 1033.473114][ T32] #0: ffff88807e2ba9f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1033.473151][ T32] #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1033.473187][ T32] locks held by syz.5.2965/21058: 2, last CPU#0: [ 1033.475319][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.475366][ T32] #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1033.475405][ T32] locks held by syz.5.2965/21060: 1, on CPU#0: [ 1033.475416][ T32] #0: ffff88807e2ba9f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x160/0x6f0 [ 1033.475459][ T32] locks held by syz.5.2965/21063: 2, on CPU#0: [ 1033.475469][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.475502][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 1033.475543][ T32] locks held by syz.5.2965/21066: 2, on CPU#0: [ 1033.475552][ T32] #0: ffffffff90cbefc8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1033.475586][ T32] #1: ffffffff90cd7bc0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 1033.475627][ T32] [ 1033.475630][ T32] ============================================= [ 1033.475630][ T32] [ 1033.475650][ T32] NMI backtrace for cpu 0 [ 1033.475661][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.475680][ T32] Tainted: [L]=SOFTLOCKUP [ 1033.475686][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1033.475699][ T32] Call Trace: [ 1033.475705][ T32] [ 1033.475711][ T32] dump_stack_lvl+0x100/0x190 [ 1033.475732][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1033.475753][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1033.475777][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1033.475801][ T32] sys_info+0x141/0x190 [ 1033.475820][ T32] watchdog+0xcb1/0x1030 [ 1033.475844][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1033.475858][ T32] ? __pfx_watchdog+0x10/0x10 [ 1033.475878][ T32] ? __kthread_parkme+0x18f/0x230 [ 1033.475903][ T32] ? kthread+0x13a/0x450 [ 1033.475917][ T32] ? __pfx_watchdog+0x10/0x10 [ 1033.475935][ T32] kthread+0x373/0x450 [ 1033.475953][ T32] ? __pfx_kthread+0x10/0x10 [ 1033.475969][ T32] ret_from_fork+0x730/0xd60 [ 1033.475984][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1033.475998][ T32] ? __switch_to+0x800/0x10f0 [ 1033.476016][ T32] ? __switch_to_asm+0x39/0x70 [ 1033.476029][ T32] ? __pfx_kthread+0x10/0x10 [ 1033.476046][ T32] ret_from_fork_asm+0x1a/0x30 [ 1033.476067][ T32] [ 1033.476112][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1034.359483][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.370438][ T32] Tainted: [L]=SOFTLOCKUP [ 1034.374780][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.384919][ T32] Call Trace: [ 1034.388203][ T32] [ 1034.391120][ T32] dump_stack_lvl+0x100/0x190 [ 1034.395821][ T32] vpanic+0x553/0x970 [ 1034.399827][ T32] ? __pfx_vpanic+0x10/0x10 [ 1034.408192][ T32] panic+0xd1/0xe0 [ 1034.415268][ T32] ? __pfx_panic+0x10/0x10 [ 1034.424512][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 1034.430748][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1034.437484][ T32] ? watchdog.cold+0x1ec/0x234 [ 1034.442535][ T32] watchdog.cold+0x1fd/0x234 [ 1034.447138][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.452959][ T32] ? __pfx_watchdog+0x10/0x10 [ 1034.457668][ T32] ? __kthread_parkme+0x18f/0x230 [ 1034.462726][ T32] ? kthread+0x13a/0x450 [ 1034.467007][ T32] ? __pfx_watchdog+0x10/0x10 [ 1034.471721][ T32] kthread+0x373/0x450 [ 1034.475806][ T32] ? __pfx_kthread+0x10/0x10 [ 1034.480473][ T32] ret_from_fork+0x730/0xd60 [ 1034.485056][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1034.490194][ T32] ? __switch_to+0x800/0x10f0 [ 1034.494883][ T32] ? __switch_to_asm+0x39/0x70 [ 1034.499719][ T32] ? __pfx_kthread+0x10/0x10 [ 1034.504394][ T32] ret_from_fork_asm+0x1a/0x30 [ 1034.509147][ T32] [ 1034.512217][ T32] Kernel Offset: disabled [ 1034.516563][ T32] Rebooting in 86400 seconds..