last executing test programs: 5m27.532208402s ago: executing program 2 (id=95): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x222100, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r0, 0x80047c05, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socketpair$auto(0x22, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x2, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x5, 0x8000200000000006]}, 0x0) 5m27.067604819s ago: executing program 2 (id=97): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) nanosleep$auto(0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x0, 0x7fff, r0, 0x5, 0x2000000006) fallocate$auto(0xffffffffffffffff, 0x5, 0x7, 0x4cbd61) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r2, 0xc0045627, r1) 5m26.266256588s ago: executing program 2 (id=103): mmap$auto(0x0, 0x402200d, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010329bd700002dcdf25050000000c00010000000100000000000c00010005"], 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x81) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) 5m26.071789855s ago: executing program 2 (id=104): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 5m25.492513166s ago: executing program 2 (id=109): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x189880, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) 5m24.992265941s ago: executing program 2 (id=111): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x103342, 0x0) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_FIONREAD(r1, 0x541b, 0x5) 5m24.474441726s ago: executing program 32 (id=111): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x103342, 0x0) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_FIONREAD(r1, 0x541b, 0x5) 1m59.297436276s ago: executing program 4 (id=1344): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x80047456, r0) 1m59.14084481s ago: executing program 4 (id=1345): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x7, 0x10001, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1004, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x6, 0x200, 0x1000004, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe85, &(0x7f0000000200)={0x0, 0xffe7}}, 0x881) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m58.960939337s ago: executing program 1 (id=1346): socket(0xa, 0x801, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r2, 0x454f, 0x5f, 0x0, 0x0, r2, 0x80000001}, 0x6d4) 1m58.640846482s ago: executing program 4 (id=1347): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, r0) 1m58.640181889s ago: executing program 1 (id=1349): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) io_uring_setup$auto(0x5a, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r0 = epoll_create$auto(0x1) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) 1m58.155152992s ago: executing program 1 (id=1354): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x26f, 0x1, 0x8003}]}) 1m57.609005498s ago: executing program 1 (id=1355): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 1m56.941841317s ago: executing program 1 (id=1366): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) 1m56.941083853s ago: executing program 4 (id=1367): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 1m56.766863616s ago: executing program 1 (id=1359): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x80047456, r0) 1m56.337258344s ago: executing program 33 (id=1359): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x80047456, r0) 1m56.307599248s ago: executing program 4 (id=1370): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r0 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x109002, 0x0) write$auto_ctl_device_fops_user(r0, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) write$auto(r2, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) close_range$auto(0x2, 0x8000, 0x0) 1m56.270076865s ago: executing program 3 (id=1362): mmap$auto(0x0, 0x402200d, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010329bd700002dcdf25050000000c00010000000100000000000c00010005"], 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x81) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) 1m56.01243324s ago: executing program 3 (id=1363): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x7, 0x10001, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1004, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x6, 0x200, 0x1000004, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe85, &(0x7f0000000200)={0x0, 0xffe7}}, 0x881) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m55.899631208s ago: executing program 4 (id=1364): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x26f, 0x1, 0x8003}]}) 1m55.125496674s ago: executing program 34 (id=1364): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x26f, 0x1, 0x8003}]}) 1m46.704867208s ago: executing program 3 (id=1376): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000000)={0x0, 0x80000000}, 0x5, 0x0, 0x2, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0x4, 0x0) 1m45.183152836s ago: executing program 3 (id=1371): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 1m44.547817925s ago: executing program 3 (id=1377): setreuid$auto(0x7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff07, 0x0) 1m43.989503481s ago: executing program 3 (id=1381): mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) 1m43.564121342s ago: executing program 35 (id=1381): mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) 5.118992508s ago: executing program 6 (id=1894): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, 0x0) 4.800849085s ago: executing program 6 (id=1896): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) 3.213139804s ago: executing program 0 (id=1907): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0xaaf, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffa}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b8702, 0x2072c2, 0xc, 0xc80c}}) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3, 0xefff}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 3.106352895s ago: executing program 0 (id=1908): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x40, 0x0) connect$auto(0x3, 0x0, 0x54) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r0, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2.838558699s ago: executing program 6 (id=1910): r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r1, 0x0, 0xe) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0xe5) 2.527650365s ago: executing program 6 (id=1911): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) socket(0xa, 0x801, 0x84) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf250400"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c8c8}, 0x4048000) 2.431864365s ago: executing program 5 (id=1912): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x5453, 0x0) ioctl$auto(0x3, 0x5415, r0) 2.219253127s ago: executing program 0 (id=1913): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0x9) 1.755474649s ago: executing program 0 (id=1914): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=@raw_tracepoint={0x8, 0xffffffffffffffff, 0x0, 0x7}, 0x6) sendfile$auto(r0, r0, 0x0, 0x1) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x68002, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000180)={0x227c, 0x6, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0xa, 0x276, 0x100, 0x5, 0x2, 0x2, 0x9, 0x8000000000000001, 0x6, 0xffffffffffffffff}) 1.638106124s ago: executing program 5 (id=1915): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x3, r1, 0x0) 1.511420387s ago: executing program 5 (id=1916): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) open(0x0, 0x2a4c0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) 1.384501916s ago: executing program 6 (id=1918): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) 1.139986435s ago: executing program 7 (id=1919): setpriority$auto(0x2, 0x8, 0x8) sendmsg$auto_NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x40000) read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5523, r0) acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00') bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, 0x0, 0xc12) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x10080, 0x0) 1.073302853s ago: executing program 5 (id=1920): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) bpf$auto(0x0, 0x0, 0x6f4) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xfffffffffffffff7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0xe4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19) 875.239712ms ago: executing program 7 (id=1921): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = socket(0x15, 0x801, 0x0) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, &(0x7f0000000700)='!dev_vhc&\x00', 0x9) r3 = socket(0x2, 0x3, 0x2) setsockopt$auto(r3, 0x0, 0xc8, 0xfffffffffffffffc, 0xc5) getsockopt$auto(r1, 0x11c, 0x1, 0x0, 0x0) 815.139276ms ago: executing program 5 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x2000c840) 757.224052ms ago: executing program 7 (id=1923): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x100007, 0x200, 0xa, 0x40000407, 0x7, 0xc, 0x3, 0x19, 0x20000000009, 0x8}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001"], 0x6c}}, 0x1004c440) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 648.577524ms ago: executing program 7 (id=1924): mmap$auto(0x0, 0xa, 0x2d3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 596.340803ms ago: executing program 6 (id=1925): r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/smaps\x00', 0x100, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwritev$auto(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffff274, 0x6) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) 588.081766ms ago: executing program 0 (id=1926): socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dri/card0\x00', 0x60200, 0x0) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/name\x00', 0x20440, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, &(0x7f00000001c0)=""/155, 0x9b) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xa}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) 542.218489ms ago: executing program 5 (id=1927): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) socket(0x10, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, 0x0) 434.317523ms ago: executing program 7 (id=1928): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, 0x0, 0x2, 0x800000d) open(0x0, 0x101300, 0x147) readv$auto(0x3, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x0, 0x8000, 0x403000}, 0x4) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) 338.232612ms ago: executing program 0 (id=1929): close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) listen$auto(0x3, 0x81) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x7, 0x1}, 0x3}, 0x4, 0x20000000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) 0s ago: executing program 7 (id=1930): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="8b05"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): T8287] vma_alloc_folio_noprof+0xed/0x1d0 [ 219.874756][ T8287] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 219.874796][ T8287] ? rcu_read_unlock+0x2d/0xb0 [ 219.874825][ T8287] ? rcu_read_unlock+0x2d/0xb0 [ 219.874863][ T8287] do_wp_page+0x1ee1/0x4380 [ 219.874916][ T8287] ? __pfx_do_wp_page+0x10/0x10 [ 219.874961][ T8287] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.875010][ T8287] __handle_mm_fault+0x1ab6/0x2a00 [ 219.875066][ T8287] ? reacquire_held_locks+0xce/0x1e0 [ 219.875106][ T8287] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.875160][ T8287] ? lock_vma_under_rcu+0x17c/0x590 [ 219.875237][ T8287] handle_mm_fault+0x36d/0xa20 [ 219.875294][ T8287] do_user_addr_fault+0x5a3/0x12f0 [ 219.875344][ T8287] exc_page_fault+0x6f/0xd0 [ 219.875393][ T8287] asm_exc_page_fault+0x26/0x30 [ 219.875422][ T8287] RIP: 0033:0x7f95dd55cc45 [ 219.875448][ T8287] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 219.875475][ T8287] RSP: 002b:00007f95de4dbde0 EFLAGS: 00010293 [ 219.875501][ T8287] RAX: 0000000000000008 RBX: 00007f95de347e20 RCX: 0000000000000000 [ 219.875520][ T8287] RDX: 0000000000000000 RSI: 00007f95dd6305b0 RDI: 00007f95de347e20 [ 219.875538][ T8287] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 219.875556][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f95dd64fd4d [ 219.875573][ T8287] R13: ffffffffffffffe8 R14: 000000000000006b R15: 00007f95dd6305b0 [ 219.875612][ T8287] [ 219.878384][ T8287] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 221.482505][ T8322] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 223.278968][ T8362] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 229.357391][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 229.804827][ T8499] block nbd2: not configured, cannot reconfigure [ 230.876798][ T8525] netlink: 'syz.4.881': attribute type 27 has an invalid length. [ 230.893673][ T8525] netlink: 334 bytes leftover after parsing attributes in process `syz.4.881'. [ 230.901076][ T8527] block nbd2: not configured, cannot reconfigure [ 232.581890][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 237.510870][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 240.106246][ T8698] FAULT_INJECTION: forcing a failure. [ 240.106246][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 240.138359][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.1.934 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.138408][ T8698] Tainted: [L]=SOFTLOCKUP [ 240.138419][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.138436][ T8698] Call Trace: [ 240.138446][ T8698] [ 240.138457][ T8698] dump_stack_lvl+0x100/0x190 [ 240.138497][ T8698] should_fail_ex.cold+0x5/0xa [ 240.138537][ T8698] should_failslab+0xc2/0x120 [ 240.138573][ T8698] __kmalloc_cache_noprof+0x7a/0x6f0 [ 240.138618][ T8698] ? resv_map_alloc+0x46/0x400 [ 240.138648][ T8698] ? __lock_acquire+0x4a5/0x2630 [ 240.138684][ T8698] resv_map_alloc+0x46/0x400 [ 240.138718][ T8698] hugetlbfs_get_inode+0x385/0x700 [ 240.138763][ T8698] ? do_raw_spin_lock+0x128/0x260 [ 240.138806][ T8698] hugetlb_file_setup+0x15b/0x5b0 [ 240.138852][ T8698] memfd_alloc_file+0xc2/0x610 [ 240.138879][ T8698] ? _raw_spin_unlock+0x28/0x50 [ 240.138923][ T8698] ? __pfx_memfd_alloc_file+0x10/0x10 [ 240.138974][ T8698] __do_sys_memfd_create+0x236/0x3d0 [ 240.139009][ T8698] do_syscall_64+0x10b/0x830 [ 240.139038][ T8698] ? clear_bhb_loop+0x40/0x90 [ 240.139076][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.139107][ T8698] RIP: 0033:0x7f95dd59ce59 [ 240.139132][ T8698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.139161][ T8698] RSP: 002b:00007f95de4dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 240.139190][ T8698] RAX: ffffffffffffffda RBX: 00007f95dd816090 RCX: 00007f95dd59ce59 [ 240.139209][ T8698] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 240.139226][ T8698] RBP: 00007f95dd632d6f R08: 0000000000000000 R09: 0000000000000000 [ 240.139243][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.139260][ T8698] R13: 00007f95dd816128 R14: 00007f95dd816090 R15: 00007ffffce7fa08 [ 240.139298][ T8698] [ 241.041976][ T30] audit: type=1800 audit(1779745436.706:3): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.938" name="file0" dev="tmpfs" ino=1081 res=0 errno=0 [ 241.048525][ T8710] [U] 0 [ 241.074839][ T8709] [U] QUI [ 242.411102][ T8749] FAULT_INJECTION: forcing a failure. [ 242.411102][ T8749] name failslab, interval 1, probability 0, space 0, times 0 [ 242.448319][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.4.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.448370][ T8749] Tainted: [L]=SOFTLOCKUP [ 242.448382][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.448402][ T8749] Call Trace: [ 242.448412][ T8749] [ 242.448424][ T8749] dump_stack_lvl+0x100/0x190 [ 242.448466][ T8749] should_fail_ex.cold+0x5/0xa [ 242.448507][ T8749] should_failslab+0xc2/0x120 [ 242.448546][ T8749] __kmalloc_cache_noprof+0x7a/0x6f0 [ 242.448597][ T8749] ? resv_map_alloc+0x7e/0x400 [ 242.448638][ T8749] resv_map_alloc+0x7e/0x400 [ 242.448673][ T8749] hugetlbfs_get_inode+0x385/0x700 [ 242.448715][ T8749] ? do_raw_spin_lock+0x128/0x260 [ 242.448754][ T8749] hugetlb_file_setup+0x15b/0x5b0 [ 242.448801][ T8749] memfd_alloc_file+0xc2/0x610 [ 242.448826][ T8749] ? _raw_spin_unlock+0x28/0x50 [ 242.448866][ T8749] ? __pfx_memfd_alloc_file+0x10/0x10 [ 242.448904][ T8749] __do_sys_memfd_create+0x236/0x3d0 [ 242.448945][ T8749] do_syscall_64+0x10b/0x830 [ 242.448972][ T8749] ? clear_bhb_loop+0x40/0x90 [ 242.449006][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.449037][ T8749] RIP: 0033:0x7ff0d919ce59 [ 242.449064][ T8749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.449092][ T8749] RSP: 002b:00007ff0da0b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 242.449123][ T8749] RAX: ffffffffffffffda RBX: 00007ff0d9416090 RCX: 00007ff0d919ce59 [ 242.449141][ T8749] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 242.449159][ T8749] RBP: 00007ff0d9232d6f R08: 0000000000000000 R09: 0000000000000000 [ 242.449178][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.449193][ T8749] R13: 00007ff0d9416128 R14: 00007ff0d9416090 R15: 00007fff6fef5c48 [ 242.449232][ T8749] [ 243.787992][ T30] audit: type=1800 audit(1779745439.455:4): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.956" name="file0" dev="tmpfs" ino=1210 res=0 errno=0 [ 247.488242][ T30] audit: type=1800 audit(1779745443.153:5): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.968" name="file0" dev="tmpfs" ino=1221 res=0 errno=0 [ 249.739480][ T30] audit: type=1800 audit(1779745445.402:6): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.981" name="file0" dev="tmpfs" ino=1280 res=0 errno=0 [ 253.120589][ T8907] netlink: 342 bytes leftover after parsing attributes in process `syz.4.993'. [ 254.019022][ T8918] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1004'. [ 255.920677][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.928426][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.585963][ T8956] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1009'. [ 270.846847][ T9203] FAULT_INJECTION: forcing a failure. [ 270.846847][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 270.902500][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.3.1074 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.902552][ T9203] Tainted: [L]=SOFTLOCKUP [ 270.902572][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.902589][ T9203] Call Trace: [ 270.902600][ T9203] [ 270.902611][ T9203] dump_stack_lvl+0x100/0x190 [ 270.902654][ T9203] should_fail_ex.cold+0x5/0xa [ 270.902695][ T9203] should_failslab+0xc2/0x120 [ 270.902734][ T9203] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 270.902763][ T9203] ? __anon_vma_prepare+0xae/0x5e0 [ 270.902818][ T9203] __anon_vma_prepare+0xae/0x5e0 [ 270.902862][ T9203] ? __pfx___pte_alloc+0x10/0x10 [ 270.902910][ T9203] __vmf_anon_prepare+0x11f/0x250 [ 270.902955][ T9203] do_anonymous_page+0x536/0x2050 [ 270.903005][ T9203] ? __pfx_pgd_none+0x10/0x10 [ 270.903061][ T9203] __handle_mm_fault+0x1d2c/0x2a00 [ 270.903117][ T9203] ? mt_find+0x45e/0x8e0 [ 270.903153][ T9203] ? __pfx___handle_mm_fault+0x10/0x10 [ 270.903197][ T9203] ? __pfx_mt_find+0x10/0x10 [ 270.903264][ T9203] handle_mm_fault+0x36d/0xa20 [ 270.903340][ T9203] __get_user_pages+0x1178/0x32a0 [ 270.903396][ T9203] ? __pfx___get_user_pages+0x10/0x10 [ 270.903448][ T9203] populate_vma_page_range+0x267/0x3f0 [ 270.903492][ T9203] ? __pfx_populate_vma_page_range+0x10/0x10 [ 270.903533][ T9203] ? __pfx_find_vma_intersection+0x10/0x10 [ 270.903581][ T9203] ? do_mmap+0x93f/0x12f0 [ 270.903626][ T9203] __mm_populate+0x107/0x3a0 [ 270.903670][ T9203] ? __pfx___mm_populate+0x10/0x10 [ 270.903715][ T9203] ? up_write+0x28c/0x4f0 [ 270.903756][ T9203] vm_mmap_pgoff+0x37f/0x470 [ 270.903802][ T9203] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 270.903848][ T9203] ? do_futex+0x192/0x350 [ 270.903885][ T9203] ? __pfx_do_futex+0x10/0x10 [ 270.903929][ T9203] ksys_mmap_pgoff+0xe4/0x610 [ 270.903969][ T9203] ? __x64_sys_futex+0x358/0x4d0 [ 270.904006][ T9203] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 270.904042][ T9203] ? fput+0x79/0x100 [ 270.904085][ T9203] ? __pfx___x64_sys_futex+0x10/0x10 [ 270.904119][ T9203] ? ksys_write+0x1ac/0x250 [ 270.904153][ T9203] ? __pfx_ksys_write+0x10/0x10 [ 270.904188][ T9203] __x64_sys_mmap+0x125/0x190 [ 270.904223][ T9203] do_syscall_64+0x10b/0x830 [ 270.904249][ T9203] ? clear_bhb_loop+0x40/0x90 [ 270.904285][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.904315][ T9203] RIP: 0033:0x7f8ab1f9ce59 [ 270.904342][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.904370][ T9203] RSP: 002b:00007f8ab2dd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 270.904402][ T9203] RAX: ffffffffffffffda RBX: 00007f8ab2216090 RCX: 00007f8ab1f9ce59 [ 270.904423][ T9203] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000401000 [ 270.904442][ T9203] RBP: 00007f8ab2032d6f R08: 0000000000000002 R09: 0000000000008000 [ 270.904462][ T9203] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 270.904481][ T9203] R13: 00007f8ab2216128 R14: 00007f8ab2216090 R15: 00007fff9ab189d8 [ 270.904524][ T9203] [ 273.104406][ T9242] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 273.120247][ T9242] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 273.221239][ T9247] FAULT_INJECTION: forcing a failure. [ 273.221239][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 273.253593][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.1.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.253647][ T9247] Tainted: [L]=SOFTLOCKUP [ 273.253658][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.253676][ T9247] Call Trace: [ 273.253686][ T9247] [ 273.253699][ T9247] dump_stack_lvl+0x100/0x190 [ 273.253740][ T9247] should_fail_ex.cold+0x5/0xa [ 273.253779][ T9247] should_failslab+0xc2/0x120 [ 273.253818][ T9247] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 273.253849][ T9247] ? __anon_vma_prepare+0xae/0x5e0 [ 273.253905][ T9247] __anon_vma_prepare+0xae/0x5e0 [ 273.253948][ T9247] ? __pfx___pte_alloc+0x10/0x10 [ 273.253989][ T9247] __vmf_anon_prepare+0x11f/0x250 [ 273.254029][ T9247] do_anonymous_page+0x536/0x2050 [ 273.254075][ T9247] ? __pfx_pgd_none+0x10/0x10 [ 273.254129][ T9247] __handle_mm_fault+0x1d2c/0x2a00 [ 273.254183][ T9247] ? mt_find+0x45e/0x8e0 [ 273.254217][ T9247] ? __pfx___handle_mm_fault+0x10/0x10 [ 273.254260][ T9247] ? __pfx_mt_find+0x10/0x10 [ 273.254332][ T9247] handle_mm_fault+0x36d/0xa20 [ 273.254390][ T9247] __get_user_pages+0x1178/0x32a0 [ 273.254445][ T9247] ? __pfx___get_user_pages+0x10/0x10 [ 273.254497][ T9247] populate_vma_page_range+0x267/0x3f0 [ 273.254550][ T9247] ? __pfx_populate_vma_page_range+0x10/0x10 [ 273.254591][ T9247] ? __pfx_find_vma_intersection+0x10/0x10 [ 273.254631][ T9247] ? do_mmap+0x93f/0x12f0 [ 273.254675][ T9247] __mm_populate+0x107/0x3a0 [ 273.254719][ T9247] ? __pfx___mm_populate+0x10/0x10 [ 273.254765][ T9247] ? up_write+0x28c/0x4f0 [ 273.254804][ T9247] vm_mmap_pgoff+0x37f/0x470 [ 273.254851][ T9247] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 273.254895][ T9247] ? do_futex+0x192/0x350 [ 273.254931][ T9247] ? __pfx_do_futex+0x10/0x10 [ 273.254974][ T9247] ksys_mmap_pgoff+0xe4/0x610 [ 273.255014][ T9247] ? __x64_sys_futex+0x358/0x4d0 [ 273.255050][ T9247] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 273.255085][ T9247] ? xfd_validate_state+0x129/0x190 [ 273.255113][ T9247] ? ksys_write+0x1ac/0x250 [ 273.255155][ T9247] __x64_sys_mmap+0x125/0x190 [ 273.255195][ T9247] do_syscall_64+0x10b/0x830 [ 273.255223][ T9247] ? clear_bhb_loop+0x40/0x90 [ 273.255263][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.255293][ T9247] RIP: 0033:0x7f95dd59ce59 [ 273.255319][ T9247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.255344][ T9247] RSP: 002b:00007f95de4dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 273.255373][ T9247] RAX: ffffffffffffffda RBX: 00007f95dd816090 RCX: 00007f95dd59ce59 [ 273.255393][ T9247] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000401000 [ 273.255411][ T9247] RBP: 00007f95dd632d6f R08: 0000000000000002 R09: 0000000000008000 [ 273.255429][ T9247] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 273.255447][ T9247] R13: 00007f95dd816128 R14: 00007f95dd816090 R15: 00007ffffce7fa08 [ 273.255489][ T9247] [ 274.657675][ T9267] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1093'. [ 279.927994][ T9341] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1114'. [ 285.829423][ T9420] FAULT_INJECTION: forcing a failure. [ 285.829423][ T9420] name failslab, interval 1, probability 0, space 0, times 0 [ 285.863417][ T9420] CPU: 0 UID: 0 PID: 9420 Comm: syz.4.1139 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.863468][ T9420] Tainted: [L]=SOFTLOCKUP [ 285.863480][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.863498][ T9420] Call Trace: [ 285.863508][ T9420] [ 285.863519][ T9420] dump_stack_lvl+0x100/0x190 [ 285.863559][ T9420] should_fail_ex.cold+0x5/0xa [ 285.863599][ T9420] should_failslab+0xc2/0x120 [ 285.863637][ T9420] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 285.863666][ T9420] ? do_epoll_ctl+0xc6c/0x36a0 [ 285.863704][ T9420] ? percpu_counter_add_batch+0xb9/0x230 [ 285.863752][ T9420] do_epoll_ctl+0xc6c/0x36a0 [ 285.863795][ T9420] ? irqentry_exit+0x24d/0x7e0 [ 285.863839][ T9420] ? __pfx_do_epoll_ctl+0x10/0x10 [ 285.863892][ T9420] ? rep_movs_alternative+0x30/0x90 [ 285.863936][ T9420] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 285.863978][ T9420] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 285.864024][ T9420] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 285.864071][ T9420] ? rcu_is_watching+0x12/0xc0 [ 285.864125][ T9420] do_syscall_64+0x10b/0x830 [ 285.864152][ T9420] ? clear_bhb_loop+0x40/0x90 [ 285.864190][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.864221][ T9420] RIP: 0033:0x7ff0d919ce59 [ 285.864247][ T9420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.864276][ T9420] RSP: 002b:00007ff0da0d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 285.864306][ T9420] RAX: ffffffffffffffda RBX: 00007ff0d9415fa0 RCX: 00007ff0d919ce59 [ 285.864326][ T9420] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 285.864344][ T9420] RBP: 00007ff0d9232d6f R08: 0000000000000000 R09: 0000000000000000 [ 285.864360][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.864376][ T9420] R13: 00007ff0d9416038 R14: 00007ff0d9415fa0 R15: 00007fff6fef5c48 [ 285.864416][ T9420] [ 286.620143][ T5625] Bluetooth: hci3: unexpected event 0x06 length: 6 > 3 [ 287.436152][ T9456] FAULT_INJECTION: forcing a failure. [ 287.436152][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 287.436231][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.1.1152 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.436270][ T9456] Tainted: [L]=SOFTLOCKUP [ 287.436280][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.436295][ T9456] Call Trace: [ 287.436305][ T9456] [ 287.436316][ T9456] dump_stack_lvl+0x100/0x190 [ 287.436354][ T9456] should_fail_ex.cold+0x5/0xa [ 287.436390][ T9456] should_failslab+0xc2/0x120 [ 287.436424][ T9456] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 287.436450][ T9456] ? do_epoll_ctl+0xc6c/0x36a0 [ 287.436487][ T9456] ? percpu_counter_add_batch+0xb9/0x230 [ 287.436527][ T9456] do_epoll_ctl+0xc6c/0x36a0 [ 287.436568][ T9456] ? irqentry_exit+0x24d/0x7e0 [ 287.436611][ T9456] ? __pfx_do_epoll_ctl+0x10/0x10 [ 287.436667][ T9456] ? rep_movs_alternative+0x30/0x90 [ 287.436712][ T9456] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 287.436754][ T9456] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 287.436800][ T9456] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 287.436848][ T9456] ? rcu_is_watching+0x12/0xc0 [ 287.436892][ T9456] do_syscall_64+0x10b/0x830 [ 287.436920][ T9456] ? clear_bhb_loop+0x40/0x90 [ 287.436958][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.436990][ T9456] RIP: 0033:0x7f95dd59ce59 [ 287.437016][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.437046][ T9456] RSP: 002b:00007f95de4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 287.437077][ T9456] RAX: ffffffffffffffda RBX: 00007f95dd815fa0 RCX: 00007f95dd59ce59 [ 287.437097][ T9456] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 287.437115][ T9456] RBP: 00007f95dd632d6f R08: 0000000000000000 R09: 0000000000000000 [ 287.437134][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.437152][ T9456] R13: 00007f95dd816038 R14: 00007f95dd815fa0 R15: 00007ffffce7fa08 [ 287.437202][ T9456] [ 288.184541][ T5625] Bluetooth: hci2: unexpected event 0x06 length: 6 > 3 [ 290.931677][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 294.003038][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 295.977105][ T9598] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1200'. [ 296.818528][ T9607] netlink: 'syz.4.1203': attribute type 4 has an invalid length. [ 296.837263][ T9607] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1203'. [ 297.832698][ T9624] FAULT_INJECTION: forcing a failure. [ 297.832698][ T9624] name fail_futex, interval 1, probability 0, space 0, times 0 [ 297.845829][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.3.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.845879][ T9624] Tainted: [L]=SOFTLOCKUP [ 297.845890][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.845908][ T9624] Call Trace: [ 297.845918][ T9624] [ 297.845929][ T9624] dump_stack_lvl+0x100/0x190 [ 297.845969][ T9624] should_fail_ex.cold+0x5/0xa [ 297.846008][ T9624] should_fail_futex+0x4c/0x60 [ 297.846040][ T9624] lock_pi_update_atomic+0x20/0x130 [ 297.846083][ T9624] futex_lock_pi_atomic+0x3c5/0xaf0 [ 297.846132][ T9624] futex_lock_pi+0x245/0x7a0 [ 297.846189][ T9624] ? __pfx_futex_lock_pi+0x10/0x10 [ 297.846245][ T9624] ? __pfx_try_to_wake_up+0x10/0x10 [ 297.846300][ T9624] ? futex_private_hash_put+0x107/0x1c0 [ 297.846340][ T9624] ? __pfx_futex_wake_mark+0x10/0x10 [ 297.846385][ T9624] ? ksys_write+0x190/0x250 [ 297.846420][ T9624] ? ksys_write+0x190/0x250 [ 297.846465][ T9624] do_futex+0x18a/0x350 [ 297.846501][ T9624] ? __pfx_do_futex+0x10/0x10 [ 297.846547][ T9624] __x64_sys_futex+0x34f/0x4d0 [ 297.846588][ T9624] ? __pfx___x64_sys_futex+0x10/0x10 [ 297.846622][ T9624] ? ksys_write+0x1ac/0x250 [ 297.846665][ T9624] ? rcu_is_watching+0x12/0xc0 [ 297.846708][ T9624] do_syscall_64+0x10b/0x830 [ 297.846736][ T9624] ? clear_bhb_loop+0x40/0x90 [ 297.846774][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.846805][ T9624] RIP: 0033:0x7f8ab1f9ce59 [ 297.846831][ T9624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.846860][ T9624] RSP: 002b:00007f8ab2dd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.846889][ T9624] RAX: ffffffffffffffda RBX: 00007f8ab2216090 RCX: 00007f8ab1f9ce59 [ 297.846909][ T9624] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 297.846924][ T9624] RBP: 00007f8ab2032d6f R08: 0000000000000000 R09: 000000008000fff5 [ 297.846942][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.846959][ T9624] R13: 00007f8ab2216128 R14: 00007f8ab2216090 R15: 00007fff9ab189d8 [ 297.847002][ T9624] [ 298.505190][ T9632] FAULT_INJECTION: forcing a failure. [ 298.505190][ T9632] name fail_futex, interval 1, probability 0, space 0, times 0 [ 298.518210][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.1.1222 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.518260][ T9632] Tainted: [L]=SOFTLOCKUP [ 298.518271][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.518289][ T9632] Call Trace: [ 298.518299][ T9632] [ 298.518311][ T9632] dump_stack_lvl+0x100/0x190 [ 298.518348][ T9632] should_fail_ex.cold+0x5/0xa [ 298.518387][ T9632] should_fail_futex+0x4c/0x60 [ 298.518418][ T9632] futex_lock_pi_atomic+0x12d/0xaf0 [ 298.518457][ T9632] ? futex_hash+0x141/0x370 [ 298.518491][ T9632] futex_lock_pi+0x245/0x7a0 [ 298.518534][ T9632] ? __pfx_futex_lock_pi+0x10/0x10 [ 298.518619][ T9632] ? __pfx_futex_wake_mark+0x10/0x10 [ 298.518663][ T9632] ? ksys_write+0x190/0x250 [ 298.518699][ T9632] ? ksys_write+0x190/0x250 [ 298.518739][ T9632] do_futex+0x18a/0x350 [ 298.518772][ T9632] ? __pfx_do_futex+0x10/0x10 [ 298.518815][ T9632] __x64_sys_futex+0x34f/0x4d0 [ 298.518854][ T9632] ? __pfx___x64_sys_futex+0x10/0x10 [ 298.518885][ T9632] ? ksys_write+0x1ac/0x250 [ 298.518923][ T9632] ? rcu_is_watching+0x12/0xc0 [ 298.518961][ T9632] do_syscall_64+0x10b/0x830 [ 298.518988][ T9632] ? clear_bhb_loop+0x40/0x90 [ 298.519035][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.519066][ T9632] RIP: 0033:0x7f95dd59ce59 [ 298.519093][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.519123][ T9632] RSP: 002b:00007f95de4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 298.519153][ T9632] RAX: ffffffffffffffda RBX: 00007f95dd815fa0 RCX: 00007f95dd59ce59 [ 298.519173][ T9632] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 298.519190][ T9632] RBP: 00007f95dd632d6f R08: 0000000000000000 R09: 000000008000fff5 [ 298.519208][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.519225][ T9632] R13: 00007f95dd816038 R14: 00007f95dd815fa0 R15: 00007ffffce7fa08 [ 298.519264][ T9632] [ 302.378875][ T9703] ima: policy update failed [ 302.392609][ T30] audit: type=1802 audit(1779746521.033:7): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1237" res=0 errno=0 [ 304.552860][ T9764] FAULT_INJECTION: forcing a failure. [ 304.552860][ T9764] name fail_futex, interval 1, probability 0, space 0, times 0 [ 304.566207][ T9764] CPU: 1 UID: 0 PID: 9764 Comm: syz.0.1266 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.566256][ T9764] Tainted: [L]=SOFTLOCKUP [ 304.566268][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.566286][ T9764] Call Trace: [ 304.566296][ T9764] [ 304.566308][ T9764] dump_stack_lvl+0x100/0x190 [ 304.566348][ T9764] should_fail_ex.cold+0x5/0xa [ 304.566387][ T9764] should_fail_futex+0x4c/0x60 [ 304.566417][ T9764] futex_lock_pi_atomic+0x12d/0xaf0 [ 304.566458][ T9764] ? futex_hash+0x141/0x370 [ 304.566493][ T9764] futex_lock_pi+0x245/0x7a0 [ 304.566538][ T9764] ? __pfx_futex_lock_pi+0x10/0x10 [ 304.566581][ T9764] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 304.566664][ T9764] ? __pfx_futex_wake_mark+0x10/0x10 [ 304.566716][ T9764] ? ksys_write+0x190/0x250 [ 304.566749][ T9764] ? ksys_write+0x190/0x250 [ 304.566787][ T9764] do_futex+0x18a/0x350 [ 304.566820][ T9764] ? __pfx_do_futex+0x10/0x10 [ 304.566862][ T9764] __x64_sys_futex+0x34f/0x4d0 [ 304.566900][ T9764] ? __pfx___x64_sys_futex+0x10/0x10 [ 304.566931][ T9764] ? ksys_write+0x1ac/0x250 [ 304.566970][ T9764] ? rcu_is_watching+0x12/0xc0 [ 304.567011][ T9764] do_syscall_64+0x10b/0x830 [ 304.567036][ T9764] ? clear_bhb_loop+0x40/0x90 [ 304.567072][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.567102][ T9764] RIP: 0033:0x7fd6bdf9ce59 [ 304.567127][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.567155][ T9764] RSP: 002b:00007fd6bee9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 304.567183][ T9764] RAX: ffffffffffffffda RBX: 00007fd6be216180 RCX: 00007fd6bdf9ce59 [ 304.567212][ T9764] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 304.567227][ T9764] RBP: 00007fd6be032d6f R08: 0000000000000000 R09: 000000008000fff5 [ 304.567245][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.567263][ T9764] R13: 00007fd6be216218 R14: 00007fd6be216180 R15: 00007ffddd7f5fc8 [ 304.567305][ T9764] [ 305.399534][ T9771] FAULT_INJECTION: forcing a failure. [ 305.399534][ T9771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.428574][ T9771] CPU: 1 UID: 0 PID: 9771 Comm: syz.3.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.428626][ T9771] Tainted: [L]=SOFTLOCKUP [ 305.428637][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.428655][ T9771] Call Trace: [ 305.428665][ T9771] [ 305.428675][ T9771] dump_stack_lvl+0x100/0x190 [ 305.428714][ T9771] should_fail_ex.cold+0x5/0xa [ 305.428744][ T9771] ? prepare_alloc_pages+0x16d/0x5f0 [ 305.428786][ T9771] should_fail_alloc_page+0xeb/0x140 [ 305.428825][ T9771] prepare_alloc_pages+0x1f0/0x5f0 [ 305.428863][ T9771] ? arch_stack_walk+0xa6/0xf0 [ 305.428906][ T9771] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 305.428949][ T9771] ? stack_trace_save+0x8e/0xc0 [ 305.428992][ T9771] ? __pfx_stack_trace_save+0x10/0x10 [ 305.429034][ T9771] ? stack_depot_save_flags+0x27/0x9d0 [ 305.429091][ T9771] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.429123][ T9771] ? kasan_save_stack+0x3f/0x50 [ 305.429152][ T9771] ? kasan_save_stack+0x30/0x50 [ 305.429182][ T9771] ? kasan_save_track+0x14/0x30 [ 305.429213][ T9771] ? kvm_create_lapic+0xa9/0x440 [ 305.429260][ T9771] ? kvm_vm_ioctl+0x756/0x4050 [ 305.429301][ T9771] ? __x64_sys_ioctl+0x18e/0x210 [ 305.429330][ T9771] ? do_syscall_64+0x10b/0x830 [ 305.429359][ T9771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.429412][ T9771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.429460][ T9771] ? policy_nodemask+0xed/0x4f0 [ 305.429502][ T9771] alloc_pages_mpol+0x1fb/0x540 [ 305.429541][ T9771] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 305.429594][ T9771] alloc_pages_noprof+0x1a/0x160 [ 305.429637][ T9771] get_zeroed_page_noprof+0x18/0xb0 [ 305.429677][ T9771] kvm_create_lapic+0x392/0x440 [ 305.429726][ T9771] kvm_arch_vcpu_create+0x286/0xac0 [ 305.429775][ T9771] kvm_vm_ioctl+0x756/0x4050 [ 305.429840][ T9771] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 305.429911][ T9771] ? kasan_quarantine_put+0x104/0x240 [ 305.429943][ T9771] ? lockdep_hardirqs_on+0x78/0x100 [ 305.429976][ T9771] ? find_held_lock+0x2b/0x80 [ 305.430016][ T9771] ? tomoyo_path_number_perm+0x28f/0x580 [ 305.430052][ T9771] ? tomoyo_path_number_perm+0x28f/0x580 [ 305.430102][ T9771] ? tomoyo_path_number_perm+0x188/0x580 [ 305.430142][ T9771] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.430176][ T9771] ? futex_wake+0x1ad/0x530 [ 305.430226][ T9771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.430269][ T9771] ? do_vfs_ioctl+0x226/0x13e0 [ 305.430300][ T9771] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 305.430341][ T9771] ? find_held_lock+0x2b/0x80 [ 305.430380][ T9771] ? __fget_files+0x215/0x3d0 [ 305.430413][ T9771] ? hook_file_ioctl_common+0x149/0x410 [ 305.430456][ T9771] ? __fget_files+0x21f/0x3d0 [ 305.430495][ T9771] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 305.430531][ T9771] __x64_sys_ioctl+0x18e/0x210 [ 305.430561][ T9771] do_syscall_64+0x10b/0x830 [ 305.430586][ T9771] ? clear_bhb_loop+0x40/0x90 [ 305.430619][ T9771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.430648][ T9771] RIP: 0033:0x7f8ab1f9ce59 [ 305.430673][ T9771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.430702][ T9771] RSP: 002b:00007f8ab2df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.430730][ T9771] RAX: ffffffffffffffda RBX: 00007f8ab2215fa0 RCX: 00007f8ab1f9ce59 [ 305.430750][ T9771] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 305.430767][ T9771] RBP: 00007f8ab2032d6f R08: 0000000000000000 R09: 0000000000000000 [ 305.430785][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.430801][ T9771] R13: 00007f8ab2216038 R14: 00007f8ab2215fa0 R15: 00007fff9ab189d8 [ 305.430838][ T9771] [ 305.856224][ T9771] malloc apic regs error for vcpu 4 [ 307.098126][ T9798] netlink: 'syz.4.1273': attribute type 8 has an invalid length. [ 307.286542][ T9803] FAULT_INJECTION: forcing a failure. [ 307.286542][ T9803] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.299536][ T9803] CPU: 0 UID: 0 PID: 9803 Comm: syz.0.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.299591][ T9803] Tainted: [L]=SOFTLOCKUP [ 307.299602][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.299620][ T9803] Call Trace: [ 307.299629][ T9803] [ 307.299641][ T9803] dump_stack_lvl+0x100/0x190 [ 307.299680][ T9803] should_fail_ex.cold+0x5/0xa [ 307.299719][ T9803] should_fail_futex+0x4c/0x60 [ 307.299750][ T9803] futex_lock_pi_atomic+0x12d/0xaf0 [ 307.299788][ T9803] ? futex_hash+0x141/0x370 [ 307.299885][ T9803] futex_lock_pi+0x245/0x7a0 [ 307.299930][ T9803] ? __pfx_futex_lock_pi+0x10/0x10 [ 307.299972][ T9803] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.300053][ T9803] ? __pfx_futex_wake_mark+0x10/0x10 [ 307.300101][ T9803] ? ksys_write+0x190/0x250 [ 307.300135][ T9803] ? ksys_write+0x190/0x250 [ 307.300179][ T9803] do_futex+0x18a/0x350 [ 307.300212][ T9803] ? __pfx_do_futex+0x10/0x10 [ 307.300257][ T9803] __x64_sys_futex+0x34f/0x4d0 [ 307.300297][ T9803] ? __pfx___x64_sys_futex+0x10/0x10 [ 307.300330][ T9803] ? ksys_write+0x1ac/0x250 [ 307.300370][ T9803] ? rcu_is_watching+0x12/0xc0 [ 307.300413][ T9803] do_syscall_64+0x10b/0x830 [ 307.300442][ T9803] ? clear_bhb_loop+0x40/0x90 [ 307.300478][ T9803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.300508][ T9803] RIP: 0033:0x7fd6bdf9ce59 [ 307.300532][ T9803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.300558][ T9803] RSP: 002b:00007fd6beedc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.300588][ T9803] RAX: ffffffffffffffda RBX: 00007fd6be215fa0 RCX: 00007fd6bdf9ce59 [ 307.300607][ T9803] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 307.300625][ T9803] RBP: 00007fd6be032d6f R08: 0000000000000000 R09: 000000008000fff5 [ 307.300643][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.300661][ T9803] R13: 00007fd6be216038 R14: 00007fd6be215fa0 R15: 00007ffddd7f5fc8 [ 307.300703][ T9803] [ 307.674997][ T9813] FAULT_INJECTION: forcing a failure. [ 307.674997][ T9813] name failslab, interval 1, probability 0, space 0, times 0 [ 307.687815][ T9813] CPU: 0 UID: 0 PID: 9813 Comm: syz.4.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.687865][ T9813] Tainted: [L]=SOFTLOCKUP [ 307.687876][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.687893][ T9813] Call Trace: [ 307.687903][ T9813] [ 307.687915][ T9813] dump_stack_lvl+0x100/0x190 [ 307.687953][ T9813] should_fail_ex.cold+0x5/0xa [ 307.687993][ T9813] should_failslab+0xc2/0x120 [ 307.688030][ T9813] __kmalloc_cache_noprof+0x7a/0x6f0 [ 307.688073][ T9813] ? kvm_create_lapic+0xa9/0x440 [ 307.688127][ T9813] kvm_create_lapic+0xa9/0x440 [ 307.688183][ T9813] kvm_arch_vcpu_create+0x286/0xac0 [ 307.688233][ T9813] kvm_vm_ioctl+0x756/0x4050 [ 307.688291][ T9813] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 307.688362][ T9813] ? kasan_quarantine_put+0x104/0x240 [ 307.688394][ T9813] ? lockdep_hardirqs_on+0x78/0x100 [ 307.688425][ T9813] ? find_held_lock+0x2b/0x80 [ 307.688465][ T9813] ? tomoyo_path_number_perm+0x28f/0x580 [ 307.688499][ T9813] ? tomoyo_path_number_perm+0x28f/0x580 [ 307.688540][ T9813] ? tomoyo_path_number_perm+0x188/0x580 [ 307.688576][ T9813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.688609][ T9813] ? futex_wait+0x11e/0x370 [ 307.688662][ T9813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.688710][ T9813] ? do_vfs_ioctl+0x226/0x13e0 [ 307.688742][ T9813] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 307.688785][ T9813] ? find_held_lock+0x2b/0x80 [ 307.688823][ T9813] ? __fget_files+0x215/0x3d0 [ 307.688858][ T9813] ? hook_file_ioctl_common+0x149/0x410 [ 307.688901][ T9813] ? __fget_files+0x21f/0x3d0 [ 307.688944][ T9813] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 307.688988][ T9813] __x64_sys_ioctl+0x18e/0x210 [ 307.689023][ T9813] do_syscall_64+0x10b/0x830 [ 307.689051][ T9813] ? clear_bhb_loop+0x40/0x90 [ 307.689088][ T9813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.689120][ T9813] RIP: 0033:0x7ff0d919ce59 [ 307.689155][ T9813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.689184][ T9813] RSP: 002b:00007ff0da0d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.689213][ T9813] RAX: ffffffffffffffda RBX: 00007ff0d9415fa0 RCX: 00007ff0d919ce59 [ 307.689234][ T9813] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 307.689252][ T9813] RBP: 00007ff0d9232d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.689269][ T9813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.689287][ T9813] R13: 00007ff0d9416038 R14: 00007ff0d9415fa0 R15: 00007fff6fef5c48 [ 307.689328][ T9813] [ 308.156094][ T9819] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1287'. [ 309.601222][ T9852] FAULT_INJECTION: forcing a failure. [ 309.601222][ T9852] name failslab, interval 1, probability 0, space 0, times 0 [ 309.614266][ T9852] CPU: 1 UID: 0 PID: 9852 Comm: syz.1.1292 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.614315][ T9852] Tainted: [L]=SOFTLOCKUP [ 309.614325][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.614343][ T9852] Call Trace: [ 309.614353][ T9852] [ 309.614365][ T9852] dump_stack_lvl+0x100/0x190 [ 309.614404][ T9852] should_fail_ex.cold+0x5/0xa [ 309.614444][ T9852] should_failslab+0xc2/0x120 [ 309.614481][ T9852] __kmalloc_cache_noprof+0x7a/0x6f0 [ 309.614526][ T9852] ? kvm_create_lapic+0xa9/0x440 [ 309.614579][ T9852] kvm_create_lapic+0xa9/0x440 [ 309.614625][ T9852] kvm_arch_vcpu_create+0x286/0xac0 [ 309.614673][ T9852] kvm_vm_ioctl+0x756/0x4050 [ 309.614729][ T9852] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 309.614799][ T9852] ? kasan_quarantine_put+0x104/0x240 [ 309.614828][ T9852] ? lockdep_hardirqs_on+0x78/0x100 [ 309.614858][ T9852] ? find_held_lock+0x2b/0x80 [ 309.614896][ T9852] ? tomoyo_path_number_perm+0x28f/0x580 [ 309.614930][ T9852] ? tomoyo_path_number_perm+0x28f/0x580 [ 309.614968][ T9852] ? tomoyo_path_number_perm+0x188/0x580 [ 309.615005][ T9852] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 309.615035][ T9852] ? futex_wait+0x11e/0x370 [ 309.615083][ T9852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.615129][ T9852] ? do_vfs_ioctl+0x226/0x13e0 [ 309.615173][ T9852] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 309.615219][ T9852] ? find_held_lock+0x2b/0x80 [ 309.615254][ T9852] ? __fget_files+0x215/0x3d0 [ 309.615288][ T9852] ? hook_file_ioctl_common+0x149/0x410 [ 309.615333][ T9852] ? __fget_files+0x21f/0x3d0 [ 309.615375][ T9852] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 309.615416][ T9852] __x64_sys_ioctl+0x18e/0x210 [ 309.615456][ T9852] do_syscall_64+0x10b/0x830 [ 309.615481][ T9852] ? clear_bhb_loop+0x40/0x90 [ 309.615517][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.615548][ T9852] RIP: 0033:0x7f95dd59ce59 [ 309.615574][ T9852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.615601][ T9852] RSP: 002b:00007f95de4fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.615631][ T9852] RAX: ffffffffffffffda RBX: 00007f95dd815fa0 RCX: 00007f95dd59ce59 [ 309.615652][ T9852] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 309.615668][ T9852] RBP: 00007f95dd632d6f R08: 0000000000000000 R09: 0000000000000000 [ 309.615685][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.615701][ T9852] R13: 00007f95dd816038 R14: 00007f95dd815fa0 R15: 00007ffffce7fa08 [ 309.615741][ T9852] [ 310.249819][ T9863] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1298'. [ 310.295067][ T9859] FAULT_INJECTION: forcing a failure. [ 310.295067][ T9859] name fail_futex, interval 1, probability 0, space 0, times 0 [ 310.307963][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.4.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.308011][ T9859] Tainted: [L]=SOFTLOCKUP [ 310.308022][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.308040][ T9859] Call Trace: [ 310.308050][ T9859] [ 310.308061][ T9859] dump_stack_lvl+0x100/0x190 [ 310.308101][ T9859] should_fail_ex.cold+0x5/0xa [ 310.308141][ T9859] should_fail_futex+0x4c/0x60 [ 310.308174][ T9859] futex_lock_pi_atomic+0x12d/0xaf0 [ 310.308215][ T9859] ? futex_hash+0x141/0x370 [ 310.308249][ T9859] futex_lock_pi+0x245/0x7a0 [ 310.308293][ T9859] ? __pfx_futex_lock_pi+0x10/0x10 [ 310.308337][ T9859] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 310.308423][ T9859] ? __pfx_futex_wake_mark+0x10/0x10 [ 310.308475][ T9859] ? ksys_write+0x190/0x250 [ 310.308511][ T9859] ? ksys_write+0x190/0x250 [ 310.308554][ T9859] do_futex+0x18a/0x350 [ 310.308591][ T9859] ? __pfx_do_futex+0x10/0x10 [ 310.308637][ T9859] __x64_sys_futex+0x34f/0x4d0 [ 310.308676][ T9859] ? __pfx___x64_sys_futex+0x10/0x10 [ 310.308709][ T9859] ? ksys_write+0x1ac/0x250 [ 310.308751][ T9859] ? rcu_is_watching+0x12/0xc0 [ 310.308804][ T9859] do_syscall_64+0x10b/0x830 [ 310.308832][ T9859] ? clear_bhb_loop+0x40/0x90 [ 310.308871][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.308902][ T9859] RIP: 0033:0x7ff0d919ce59 [ 310.308928][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.308958][ T9859] RSP: 002b:00007ff0da0d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.308988][ T9859] RAX: ffffffffffffffda RBX: 00007ff0d9415fa0 RCX: 00007ff0d919ce59 [ 310.309008][ T9859] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 310.309025][ T9859] RBP: 00007ff0d9232d6f R08: 0000000000000000 R09: 000000008000fff5 [ 310.309043][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.309060][ T9859] R13: 00007ff0d9416038 R14: 00007ff0d9415fa0 R15: 00007fff6fef5c48 [ 310.309102][ T9859] [ 310.719000][ T9867] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 310.904963][ T9869] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1308'. [ 311.775657][ T9893] bonding: no command found in bonding_masters - use +ifname or -ifname [ 312.135250][ T9899] FAULT_INJECTION: forcing a failure. [ 312.135250][ T9899] name fail_futex, interval 1, probability 0, space 0, times 0 [ 312.148190][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.0.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.148239][ T9899] Tainted: [L]=SOFTLOCKUP [ 312.148250][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.148269][ T9899] Call Trace: [ 312.148279][ T9899] [ 312.148291][ T9899] dump_stack_lvl+0x100/0x190 [ 312.148331][ T9899] should_fail_ex.cold+0x5/0xa [ 312.148372][ T9899] should_fail_futex+0x4c/0x60 [ 312.148404][ T9899] futex_lock_pi_atomic+0x12d/0xaf0 [ 312.148441][ T9899] ? futex_hash+0x141/0x370 [ 312.148479][ T9899] futex_lock_pi+0x245/0x7a0 [ 312.148522][ T9899] ? __pfx_futex_lock_pi+0x10/0x10 [ 312.148608][ T9899] ? __pfx_futex_wake_mark+0x10/0x10 [ 312.148658][ T9899] ? ksys_write+0x190/0x250 [ 312.148694][ T9899] ? ksys_write+0x190/0x250 [ 312.148737][ T9899] do_futex+0x18a/0x350 [ 312.148772][ T9899] ? __pfx_do_futex+0x10/0x10 [ 312.148819][ T9899] __x64_sys_futex+0x34f/0x4d0 [ 312.148860][ T9899] ? __pfx___x64_sys_futex+0x10/0x10 [ 312.148892][ T9899] ? ksys_write+0x1ac/0x250 [ 312.148934][ T9899] ? rcu_is_watching+0x12/0xc0 [ 312.148978][ T9899] do_syscall_64+0x10b/0x830 [ 312.149016][ T9899] ? clear_bhb_loop+0x40/0x90 [ 312.149053][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.149086][ T9899] RIP: 0033:0x7fd6bdf9ce59 [ 312.149113][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.149144][ T9899] RSP: 002b:00007fd6beedc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 312.149173][ T9899] RAX: ffffffffffffffda RBX: 00007fd6be215fa0 RCX: 00007fd6bdf9ce59 [ 312.149193][ T9899] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 312.149212][ T9899] RBP: 00007fd6be032d6f R08: 0000000000000000 R09: 000000008000fff5 [ 312.149231][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.149249][ T9899] R13: 00007fd6be216038 R14: 00007fd6be215fa0 R15: 00007ffddd7f5fc8 [ 312.149290][ T9899] [ 313.140923][ T9928] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 313.303713][ T9930] bonding: no command found in bonding_masters - use +ifname or -ifname [ 314.277342][ T9960] FAULT_INJECTION: forcing a failure. [ 314.277342][ T9960] name fail_futex, interval 1, probability 0, space 0, times 0 [ 314.290349][ T9960] CPU: 1 UID: 0 PID: 9960 Comm: syz.0.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.290396][ T9960] Tainted: [L]=SOFTLOCKUP [ 314.290407][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.290425][ T9960] Call Trace: [ 314.290436][ T9960] [ 314.290448][ T9960] dump_stack_lvl+0x100/0x190 [ 314.290487][ T9960] should_fail_ex.cold+0x5/0xa [ 314.290525][ T9960] should_fail_futex+0x4c/0x60 [ 314.290557][ T9960] futex_lock_pi_atomic+0x12d/0xaf0 [ 314.290592][ T9960] ? futex_hash+0x141/0x370 [ 314.290623][ T9960] futex_lock_pi+0x245/0x7a0 [ 314.290667][ T9960] ? __pfx_futex_lock_pi+0x10/0x10 [ 314.290711][ T9960] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 314.290791][ T9960] ? __pfx_futex_wake_mark+0x10/0x10 [ 314.290837][ T9960] ? ksys_write+0x190/0x250 [ 314.290867][ T9960] ? ksys_write+0x190/0x250 [ 314.290907][ T9960] do_futex+0x18a/0x350 [ 314.290939][ T9960] ? __pfx_do_futex+0x10/0x10 [ 314.290981][ T9960] __x64_sys_futex+0x34f/0x4d0 [ 314.291030][ T9960] ? __pfx___x64_sys_futex+0x10/0x10 [ 314.291064][ T9960] ? ksys_write+0x1ac/0x250 [ 314.291108][ T9960] ? rcu_is_watching+0x12/0xc0 [ 314.291153][ T9960] do_syscall_64+0x10b/0x830 [ 314.291183][ T9960] ? clear_bhb_loop+0x40/0x90 [ 314.291223][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.291253][ T9960] RIP: 0033:0x7fd6bdf9ce59 [ 314.291278][ T9960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.291305][ T9960] RSP: 002b:00007fd6bee9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 314.291333][ T9960] RAX: ffffffffffffffda RBX: 00007fd6be216180 RCX: 00007fd6bdf9ce59 [ 314.291352][ T9960] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 314.291368][ T9960] RBP: 00007fd6be032d6f R08: 0000000000000000 R09: 000000008000fff5 [ 314.291385][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.291402][ T9960] R13: 00007fd6be216218 R14: 00007fd6be216180 R15: 00007ffddd7f5fc8 [ 314.291441][ T9960] [ 315.601398][ T9979] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 316.350822][ T9990] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1338'. [ 316.423008][ T9993] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.390232][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.397085][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.937200][T10025] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1350'. [ 318.197928][T10027] FAULT_INJECTION: forcing a failure. [ 318.197928][T10027] name fail_futex, interval 1, probability 0, space 0, times 0 [ 318.211173][T10027] CPU: 1 UID: 0 PID: 10027 Comm: syz.3.1351 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.211223][T10027] Tainted: [L]=SOFTLOCKUP [ 318.211234][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.211253][T10027] Call Trace: [ 318.211263][T10027] [ 318.211275][T10027] dump_stack_lvl+0x100/0x190 [ 318.211317][T10027] should_fail_ex.cold+0x5/0xa [ 318.211355][T10027] should_fail_futex+0x4c/0x60 [ 318.211387][T10027] futex_lock_pi_atomic+0x12d/0xaf0 [ 318.211426][T10027] ? futex_hash+0x141/0x370 [ 318.211459][T10027] futex_lock_pi+0x245/0x7a0 [ 318.211506][T10027] ? __pfx_futex_lock_pi+0x10/0x10 [ 318.211550][T10027] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 318.211627][T10027] ? __pfx_futex_wake_mark+0x10/0x10 [ 318.211677][T10027] ? ksys_write+0x190/0x250 [ 318.211712][T10027] ? ksys_write+0x190/0x250 [ 318.211753][T10027] do_futex+0x18a/0x350 [ 318.211786][T10027] ? __pfx_do_futex+0x10/0x10 [ 318.211831][T10027] __x64_sys_futex+0x34f/0x4d0 [ 318.211873][T10027] ? __pfx___x64_sys_futex+0x10/0x10 [ 318.211905][T10027] ? ksys_write+0x1ac/0x250 [ 318.211945][T10027] ? rcu_is_watching+0x12/0xc0 [ 318.211997][T10027] do_syscall_64+0x10b/0x830 [ 318.212025][T10027] ? clear_bhb_loop+0x40/0x90 [ 318.212064][T10027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.212095][T10027] RIP: 0033:0x7f8ab1f9ce59 [ 318.212120][T10027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.212150][T10027] RSP: 002b:00007f8ab2df4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 318.212181][T10027] RAX: ffffffffffffffda RBX: 00007f8ab2215fa0 RCX: 00007f8ab1f9ce59 [ 318.212202][T10027] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 318.212219][T10027] RBP: 00007f8ab2032d6f R08: 0000000000000000 R09: 000000008000fff5 [ 318.212237][T10027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.212255][T10027] R13: 00007f8ab2216038 R14: 00007f8ab2215fa0 R15: 00007fff9ab189d8 [ 318.212296][T10027] [ 319.009489][T10044] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 319.574190][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.697081][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.920799][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.130362][T10058] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1362'. [ 320.207900][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.210632][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.234550][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.245917][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.256834][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.267729][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.791590][ T57] bridge_slave_1: left allmulticast mode [ 320.797369][ T57] bridge_slave_1: left promiscuous mode [ 320.815351][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.861512][ T57] bridge_slave_0: left allmulticast mode [ 320.877507][ T57] bridge_slave_0: left promiscuous mode [ 320.890555][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.438435][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.466431][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.479848][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.503208][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.514729][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.525183][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 321.535250][ T57] bond0 (unregistering): Released all slaves [ 321.541609][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.993045][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 322.350049][ T50] Bluetooth: hci1: command tx timeout [ 322.713563][ T57] hsr_slave_0: left promiscuous mode [ 322.722346][ T57] hsr_slave_1: left promiscuous mode [ 322.736606][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.746952][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.759055][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.769725][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.789704][ T57] veth1_macvtap: left promiscuous mode [ 322.795368][ T57] veth0_macvtap: left promiscuous mode [ 322.801860][ T57] veth1_vlan: left promiscuous mode [ 322.807192][ T57] veth0_vlan: left promiscuous mode [ 323.114849][ T57] team0 (unregistering): Port device team_slave_1 removed [ 323.129828][ T57] team0 (unregistering): Port device team_slave_0 removed [ 323.259865][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 323.441991][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.449314][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.457585][T10059] bridge_slave_0: entered allmulticast mode [ 323.464966][T10059] bridge_slave_0: entered promiscuous mode [ 323.479460][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.487355][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.498420][T10059] bridge_slave_1: entered allmulticast mode [ 323.507016][T10059] bridge_slave_1: entered promiscuous mode [ 323.588608][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.616718][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.638445][ T50] Bluetooth: hci3: command tx timeout [ 323.694287][T10059] team0: Port device team_slave_0 added [ 323.704658][T10059] team0: Port device team_slave_1 added [ 323.792485][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.804763][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.831347][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.884085][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.892545][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.922064][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.013999][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.122224][T10059] hsr_slave_0: entered promiscuous mode [ 324.129109][T10059] hsr_slave_1: entered promiscuous mode [ 324.135774][T10059] debugfs: 'hsr0' already exists in 'hsr' [ 324.142894][T10059] Cannot create hsr debugfs directory [ 324.189903][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.286059][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.293460][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.300814][T10082] bridge_slave_0: entered allmulticast mode [ 324.308512][T10082] bridge_slave_0: entered promiscuous mode [ 324.331890][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.346781][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 324.359651][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.367231][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.374537][T10082] bridge_slave_1: entered allmulticast mode [ 324.382063][T10082] bridge_slave_1: entered promiscuous mode [ 324.433523][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.444895][ T50] Bluetooth: hci1: command tx timeout [ 324.471276][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.488320][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.562274][T10082] team0: Port device team_slave_0 added [ 324.572940][T10082] team0: Port device team_slave_1 added [ 324.655197][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.662503][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.689199][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.739441][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.759411][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.793992][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.000705][T10082] hsr_slave_0: entered promiscuous mode [ 325.007779][T10082] hsr_slave_1: entered promiscuous mode [ 325.016106][T10082] debugfs: 'hsr0' already exists in 'hsr' [ 325.022283][T10082] Cannot create hsr debugfs directory [ 325.077098][ T57] bridge_slave_1: left allmulticast mode [ 325.082966][ T57] bridge_slave_1: left promiscuous mode [ 325.091058][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.104361][ T57] bridge_slave_0: left allmulticast mode [ 325.110101][ T57] bridge_slave_0: left promiscuous mode [ 325.116833][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.427084][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.440311][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.450928][ T57] bond0 (unregistering): Released all slaves [ 325.480091][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 325.632090][T10059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.647537][T10059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.668810][T10059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.685715][T10059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.711920][ T50] Bluetooth: hci3: command tx timeout [ 325.723093][T10059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.733093][T10059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.750920][T10059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.763939][T10059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.177609][T10082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 326.215569][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.257180][T10082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.279961][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.288669][T10082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 326.301269][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.338204][T10082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 326.350431][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.457351][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.512154][ T50] Bluetooth: hci1: command tx timeout [ 326.518662][ T57] hsr_slave_0: left promiscuous mode [ 326.530855][ T57] hsr_slave_1: left promiscuous mode [ 326.538562][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.548113][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.556802][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.567502][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.584913][ T57] veth1_macvtap: left promiscuous mode [ 326.590737][ T57] veth0_macvtap: left promiscuous mode [ 326.597058][ T57] veth1_vlan: left promiscuous mode [ 326.603801][ T57] veth0_vlan: left promiscuous mode [ 326.811854][ T57] team0 (unregistering): Port device team_slave_1 removed [ 326.828095][ T57] team0 (unregistering): Port device team_slave_0 removed [ 326.951715][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 327.009823][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.047918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.055183][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.081083][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.088293][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.267254][T10082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.330009][T10082] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.370309][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.377593][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.413613][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.420884][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.795109][ T50] Bluetooth: hci3: command tx timeout [ 328.119452][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 328.301027][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.563939][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.593623][ T50] Bluetooth: hci1: command tx timeout [ 328.825173][T10059] veth0_vlan: entered promiscuous mode [ 328.868734][T10059] veth1_vlan: entered promiscuous mode [ 328.949477][T10059] veth0_macvtap: entered promiscuous mode [ 328.967480][T10059] veth1_macvtap: entered promiscuous mode [ 329.010932][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.031655][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.055753][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.086108][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.113220][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.140059][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.295378][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.309826][T10082] veth0_vlan: entered promiscuous mode [ 329.324543][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.377123][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 329.384648][T10082] veth1_vlan: entered promiscuous mode [ 329.406501][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.415842][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.497990][T10082] veth0_macvtap: entered promiscuous mode [ 329.524517][T10082] veth1_macvtap: entered promiscuous mode [ 329.597692][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.669085][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.733496][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.762400][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.803720][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.826662][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.873738][ T50] Bluetooth: hci3: command tx timeout [ 330.078305][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.113799][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.207963][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.231768][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.801140][T10274] FAULT_INJECTION: forcing a failure. [ 330.801140][T10274] name failslab, interval 1, probability 0, space 0, times 0 [ 330.830980][T10274] CPU: 1 UID: 0 PID: 10274 Comm: syz.0.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.831029][T10274] Tainted: [L]=SOFTLOCKUP [ 330.831040][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.831058][T10274] Call Trace: [ 330.831067][T10274] [ 330.831078][T10274] dump_stack_lvl+0x100/0x190 [ 330.831116][T10274] should_fail_ex.cold+0x5/0xa [ 330.831153][T10274] should_failslab+0xc2/0x120 [ 330.831191][T10274] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 330.831222][T10274] ? alloc_empty_file+0x5b/0x1c0 [ 330.831269][T10274] alloc_empty_file+0x5b/0x1c0 [ 330.831325][T10274] dentry_open+0x46/0xd0 [ 330.831379][T10274] pidfs_alloc_file+0x18f/0x290 [ 330.831417][T10274] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 330.831488][T10274] pidfd_prepare+0x10c/0x1b0 [ 330.831545][T10274] __x64_sys_pidfd_open+0x105/0x1a0 [ 330.831604][T10274] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 330.831650][T10274] ? rcu_is_watching+0x12/0xc0 [ 330.831706][T10274] do_syscall_64+0x10b/0x830 [ 330.831742][T10274] ? clear_bhb_loop+0x40/0x90 [ 330.831788][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.831819][T10274] RIP: 0033:0x7fd6bdf9ce59 [ 330.831846][T10274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.831875][T10274] RSP: 002b:00007fd6beedc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 330.831906][T10274] RAX: ffffffffffffffda RBX: 00007fd6be215fa0 RCX: 00007fd6bdf9ce59 [ 330.831926][T10274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 330.831943][T10274] RBP: 00007fd6be032d6f R08: 0000000000000000 R09: 0000000000000000 [ 330.831961][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.831979][T10274] R13: 00007fd6be216038 R14: 00007fd6be215fa0 R15: 00007ffddd7f5fc8 [ 330.832018][T10274] [ 331.290140][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 331.917011][T10299] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1374'. [ 332.216384][T10303] kvm: user requested TSC rate below hardware speed [ 332.414042][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.623470][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.818856][T10313] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1384'. [ 332.843200][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.944864][T10316] FAULT_INJECTION: forcing a failure. [ 332.944864][T10316] name failslab, interval 1, probability 0, space 0, times 0 [ 332.965331][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.6.1386 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.965381][T10316] Tainted: [L]=SOFTLOCKUP [ 332.965392][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.965410][T10316] Call Trace: [ 332.965420][T10316] [ 332.965432][T10316] dump_stack_lvl+0x100/0x190 [ 332.965473][T10316] should_fail_ex.cold+0x5/0xa [ 332.965513][T10316] ? lsm_blob_alloc+0x68/0x90 [ 332.965553][T10316] should_failslab+0xc2/0x120 [ 332.965591][T10316] __kmalloc_noprof+0xe0/0x850 [ 332.965621][T10316] ? down_write_nested+0x14f/0x200 [ 332.965667][T10316] lsm_blob_alloc+0x68/0x90 [ 332.965712][T10316] security_sb_alloc+0x25/0x240 [ 332.965740][T10316] alloc_super+0x24c/0xd20 [ 332.965786][T10316] ? __pfx_mqueue_fill_super+0x10/0x10 [ 332.965829][T10316] sget_fc+0x117/0xc70 [ 332.965862][T10316] ? __pfx_set_anon_super_fc+0x10/0x10 [ 332.965895][T10316] ? __pfx_mqueue_fill_super+0x10/0x10 [ 332.965939][T10316] get_tree_nodev+0x28/0x190 [ 332.965977][T10316] mqueue_get_tree+0xf1/0x130 [ 332.966022][T10316] vfs_get_tree+0x92/0x320 [ 332.966054][T10316] fc_mount_longterm+0x1a/0x270 [ 332.966088][T10316] mq_init_ns+0x482/0x820 [ 332.966121][T10316] copy_ipcs+0x3dd/0x7e0 [ 332.966156][T10316] create_new_namespaces+0x20a/0xac0 [ 332.966197][T10316] ? security_capable+0x80/0x260 [ 332.966249][T10316] unshare_nsproxy_namespaces+0xf2/0x220 [ 332.966295][T10316] ksys_unshare+0x438/0xab0 [ 332.966343][T10316] ? __pfx_ksys_unshare+0x10/0x10 [ 332.966386][T10316] ? xfd_validate_state+0x129/0x190 [ 332.966435][T10316] __x64_sys_unshare+0x31/0x40 [ 332.966480][T10316] do_syscall_64+0x10b/0x830 [ 332.966509][T10316] ? clear_bhb_loop+0x40/0x90 [ 332.966545][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.966577][T10316] RIP: 0033:0x7f1ff259ce59 [ 332.966602][T10316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.966637][T10316] RSP: 002b:00007f1ff33a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.966666][T10316] RAX: ffffffffffffffda RBX: 00007f1ff2815fa0 RCX: 00007f1ff259ce59 [ 332.966686][T10316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 332.966704][T10316] RBP: 00007f1ff2632d6f R08: 0000000000000000 R09: 0000000000000000 [ 332.966721][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.966738][T10316] R13: 00007f1ff2816038 R14: 00007f1ff2815fa0 R15: 00007ffc1e3cc018 [ 332.966788][T10316] [ 333.243170][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.277115][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.354703][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.388616][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.400348][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.551391][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.023473][T10334] FAULT_INJECTION: forcing a failure. [ 334.023473][T10334] name failslab, interval 1, probability 0, space 0, times 0 [ 334.062621][T10334] CPU: 0 UID: 0 PID: 10334 Comm: syz.5.1389 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.062672][T10334] Tainted: [L]=SOFTLOCKUP [ 334.062682][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.062700][T10334] Call Trace: [ 334.062710][T10334] [ 334.062721][T10334] dump_stack_lvl+0x100/0x190 [ 334.062761][T10334] should_fail_ex.cold+0x5/0xa [ 334.062798][T10334] ? memcg_list_lru_alloc+0x4ec/0x740 [ 334.062828][T10334] should_failslab+0xc2/0x120 [ 334.062863][T10334] __kmalloc_noprof+0xe0/0x850 [ 334.062893][T10334] ? __lock_acquire+0x4a5/0x2630 [ 334.062928][T10334] memcg_list_lru_alloc+0x4ec/0x740 [ 334.062969][T10334] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 334.063021][T10334] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 334.063073][T10334] ? kasan_save_track+0x14/0x30 [ 334.063108][T10334] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 334.063138][T10334] ? alloc_inode+0x183/0x250 [ 334.063176][T10334] alloc_inode+0x183/0x250 [ 334.063206][T10334] path_from_stashed+0x25b/0x750 [ 334.063257][T10334] pidfs_alloc_file+0xf8/0x290 [ 334.063295][T10334] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 334.063343][T10334] pidfd_prepare+0x10c/0x1b0 [ 334.063390][T10334] __x64_sys_pidfd_open+0x105/0x1a0 [ 334.063422][T10334] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 334.063455][T10334] ? rcu_is_watching+0x12/0xc0 [ 334.063499][T10334] do_syscall_64+0x10b/0x830 [ 334.063534][T10334] ? clear_bhb_loop+0x40/0x90 [ 334.063568][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.063597][T10334] RIP: 0033:0x7f11f159ce59 [ 334.063623][T10334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.063649][T10334] RSP: 002b:00007f11f2422028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 334.063678][T10334] RAX: ffffffffffffffda RBX: 00007f11f1815fa0 RCX: 00007f11f159ce59 [ 334.063697][T10334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 334.063715][T10334] RBP: 00007f11f1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 334.063732][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.063750][T10334] R13: 00007f11f1816038 R14: 00007f11f1815fa0 R15: 00007ffc39b85fc8 [ 334.063788][T10334] [ 334.447239][ T48] bridge_slave_1: left allmulticast mode [ 334.452965][ T48] bridge_slave_1: left promiscuous mode [ 334.459394][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.475157][ T48] bridge_slave_0: left allmulticast mode [ 334.487363][ T48] bridge_slave_0: left promiscuous mode [ 334.493204][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.002231][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.033430][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.055432][ T48] bond0 (unregistering): Released all slaves [ 335.477144][ T5625] Bluetooth: hci2: command tx timeout [ 335.970382][T10369] FAULT_INJECTION: forcing a failure. [ 335.970382][T10369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.986216][T10369] CPU: 1 UID: 0 PID: 10369 Comm: syz.5.1394 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.986265][T10369] Tainted: [L]=SOFTLOCKUP [ 335.986275][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.986294][T10369] Call Trace: [ 335.986303][T10369] [ 335.986314][T10369] dump_stack_lvl+0x100/0x190 [ 335.986353][T10369] should_fail_ex.cold+0x5/0xa [ 335.986385][T10369] ? prepare_alloc_pages+0x16d/0x5f0 [ 335.986428][T10369] should_fail_alloc_page+0xeb/0x140 [ 335.986469][T10369] prepare_alloc_pages+0x1f0/0x5f0 [ 335.986517][T10369] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 335.986568][T10369] ? stack_trace_save+0x8e/0xc0 [ 335.986612][T10369] ? __pfx_stack_trace_save+0x10/0x10 [ 335.986657][T10369] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.986707][T10369] ? kasan_save_stack+0x3f/0x50 [ 335.986737][T10369] ? kasan_save_stack+0x30/0x50 [ 335.986765][T10369] ? kasan_save_track+0x14/0x30 [ 335.986793][T10369] ? __kasan_kmalloc+0xaa/0xb0 [ 335.986820][T10369] ? mon_bin_open+0x1a8/0x470 [ 335.986858][T10369] ? chrdev_open+0x234/0x6a0 [ 335.986900][T10369] ? __x64_sys_openat+0x12d/0x210 [ 335.986928][T10369] ? do_syscall_64+0x10b/0x830 [ 335.986955][T10369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.986995][T10369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.987044][T10369] ? policy_nodemask+0xed/0x4f0 [ 335.987086][T10369] alloc_pages_mpol+0x1fb/0x540 [ 335.987126][T10369] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 335.987177][T10369] alloc_pages_noprof+0x1a/0x160 [ 335.987221][T10369] get_zeroed_page_noprof+0x18/0xb0 [ 335.987260][T10369] mon_alloc_buff+0xce/0x1b0 [ 335.987300][T10369] ? kasan_save_track+0x14/0x30 [ 335.987335][T10369] mon_bin_open+0x207/0x470 [ 335.987377][T10369] ? __pfx_mon_bin_open+0x10/0x10 [ 335.987417][T10369] chrdev_open+0x234/0x6a0 [ 335.987452][T10369] ? __pfx_apparmor_file_open+0x10/0x10 [ 335.987485][T10369] ? __pfx_chrdev_open+0x10/0x10 [ 335.987526][T10369] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 335.987577][T10369] do_dentry_open+0x6d8/0x1660 [ 335.987615][T10369] ? __pfx_chrdev_open+0x10/0x10 [ 335.987662][T10369] vfs_open+0x82/0x3f0 [ 335.987718][T10369] path_openat+0x208c/0x31a0 [ 335.987773][T10369] ? __pfx_path_openat+0x10/0x10 [ 335.987830][T10369] do_file_open+0x20e/0x430 [ 335.987870][T10369] ? __pfx_do_file_open+0x10/0x10 [ 335.987941][T10369] ? alloc_fd+0x476/0x790 [ 335.987984][T10369] ? do_getname+0x191/0x390 [ 335.988033][T10369] do_sys_openat2+0x10d/0x1e0 [ 335.988078][T10369] ? __pfx_do_sys_openat2+0x10/0x10 [ 335.988126][T10369] ? __fget_files+0x21f/0x3d0 [ 335.988170][T10369] __x64_sys_openat+0x12d/0x210 [ 335.988199][T10369] ? __pfx___x64_sys_openat+0x10/0x10 [ 335.988253][T10369] ? rcu_is_watching+0x12/0xc0 [ 335.988295][T10369] do_syscall_64+0x10b/0x830 [ 335.988321][T10369] ? clear_bhb_loop+0x40/0x90 [ 335.988359][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.988390][T10369] RIP: 0033:0x7f11f159ce59 [ 335.988414][T10369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.988442][T10369] RSP: 002b:00007f11f2422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.988473][T10369] RAX: ffffffffffffffda RBX: 00007f11f1815fa0 RCX: 00007f11f159ce59 [ 335.988493][T10369] RDX: 0000000000004000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 335.988511][T10369] RBP: 00007f11f1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 335.988529][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.988547][T10369] R13: 00007f11f1816038 R14: 00007f11f1815fa0 R15: 00007ffc39b85fc8 [ 335.988587][T10369] [ 336.538812][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 336.972040][ T48] hsr_slave_0: left promiscuous mode [ 336.992165][ T48] hsr_slave_1: left promiscuous mode [ 337.008189][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.027755][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.043328][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.062026][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.076443][T10381] FAULT_INJECTION: forcing a failure. [ 337.076443][T10381] name failslab, interval 1, probability 0, space 0, times 0 [ 337.095297][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.6.1398 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.095345][T10381] Tainted: [L]=SOFTLOCKUP [ 337.095356][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.095374][T10381] Call Trace: [ 337.095384][T10381] [ 337.095396][T10381] dump_stack_lvl+0x100/0x190 [ 337.095435][T10381] should_fail_ex.cold+0x5/0xa [ 337.095474][T10381] ? memcg_list_lru_alloc+0x4ec/0x740 [ 337.095506][T10381] should_failslab+0xc2/0x120 [ 337.095542][T10381] __kmalloc_noprof+0xe0/0x850 [ 337.095572][T10381] ? __lock_acquire+0x4a5/0x2630 [ 337.095607][T10381] memcg_list_lru_alloc+0x4ec/0x740 [ 337.095649][T10381] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 337.095710][T10381] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 337.095764][T10381] ? kasan_save_track+0x14/0x30 [ 337.095799][T10381] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 337.095829][T10381] ? alloc_inode+0x183/0x250 [ 337.095866][T10381] alloc_inode+0x183/0x250 [ 337.095895][T10381] path_from_stashed+0x25b/0x750 [ 337.095947][T10381] pidfs_alloc_file+0xf8/0x290 [ 337.095985][T10381] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 337.096035][T10381] pidfd_prepare+0x10c/0x1b0 [ 337.096080][T10381] __x64_sys_pidfd_open+0x105/0x1a0 [ 337.096112][T10381] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 337.096147][T10381] ? rcu_is_watching+0x12/0xc0 [ 337.096190][T10381] do_syscall_64+0x10b/0x830 [ 337.096219][T10381] ? clear_bhb_loop+0x40/0x90 [ 337.096257][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.096294][T10381] RIP: 0033:0x7f1ff259ce59 [ 337.096319][T10381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.096347][T10381] RSP: 002b:00007f1ff33a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 337.096376][T10381] RAX: ffffffffffffffda RBX: 00007f1ff2815fa0 RCX: 00007f1ff259ce59 [ 337.096395][T10381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 337.096413][T10381] RBP: 00007f1ff2632d6f R08: 0000000000000000 R09: 0000000000000000 [ 337.096429][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.096446][T10381] R13: 00007f1ff2816038 R14: 00007f1ff2815fa0 R15: 00007ffc1e3cc018 [ 337.096487][T10381] [ 337.328101][ T48] veth1_macvtap: left promiscuous mode [ 337.333739][ T48] veth0_macvtap: left promiscuous mode [ 337.341256][ T48] veth1_vlan: left promiscuous mode [ 337.346643][ T48] veth0_vlan: left promiscuous mode [ 337.558891][ T5625] Bluetooth: hci2: command tx timeout [ 337.994380][ T48] team0 (unregistering): Port device team_slave_1 removed [ 338.011421][ T48] team0 (unregistering): Port device team_slave_0 removed [ 338.556821][T10402] sctp: [Deprecated]: syz.0.1403 (pid 10402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.556821][T10402] Use struct sctp_sack_info instead [ 338.885131][T10318] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.892572][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.900044][T10318] bridge_slave_0: entered allmulticast mode [ 338.909724][T10318] bridge_slave_0: entered promiscuous mode [ 338.924046][T10318] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.931783][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.940523][T10318] bridge_slave_1: entered allmulticast mode [ 338.948890][T10318] bridge_slave_1: entered promiscuous mode [ 339.007039][T10318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.026065][T10318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.070849][T10318] team0: Port device team_slave_0 added [ 339.080267][T10318] team0: Port device team_slave_1 added [ 339.128133][T10318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.135638][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.163257][T10318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.183435][T10318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.190591][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.220276][T10318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.387475][T10318] hsr_slave_0: entered promiscuous mode [ 339.396396][T10318] hsr_slave_1: entered promiscuous mode [ 339.403329][T10318] debugfs: 'hsr0' already exists in 'hsr' [ 339.409732][T10318] Cannot create hsr debugfs directory [ 339.459050][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 339.640290][ T5625] Bluetooth: hci2: command tx timeout [ 339.741490][T10318] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 339.755629][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.764792][T10318] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 339.779425][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.793703][T10318] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 339.814144][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.823140][T10318] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 339.835178][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.996628][T10318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.033944][T10318] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.050507][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.057776][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.091844][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.099105][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.804557][T10318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.972691][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 341.183338][T10318] veth0_vlan: entered promiscuous mode [ 341.204431][T10318] veth1_vlan: entered promiscuous mode [ 341.267783][T10318] veth0_macvtap: entered promiscuous mode [ 341.283773][T10318] veth1_macvtap: entered promiscuous mode [ 341.312580][T10318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.336815][T10318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.361649][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.382830][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.423986][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.444563][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.515055][ T379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.537410][ T379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.577760][ T5774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.587421][ T5774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.722309][ T5625] Bluetooth: hci2: command tx timeout [ 341.777126][T10491] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1411'. [ 341.918864][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 342.279289][T10507] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1415'. [ 342.307366][T10504] FAULT_INJECTION: forcing a failure. [ 342.307366][T10504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.336181][T10504] CPU: 1 UID: 0 PID: 10504 Comm: syz.0.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.336233][T10504] Tainted: [L]=SOFTLOCKUP [ 342.336245][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.336263][T10504] Call Trace: [ 342.336277][T10504] [ 342.336290][T10504] dump_stack_lvl+0x100/0x190 [ 342.336330][T10504] should_fail_ex.cold+0x5/0xa [ 342.336362][T10504] ? prepare_alloc_pages+0x16d/0x5f0 [ 342.336407][T10504] should_fail_alloc_page+0xeb/0x140 [ 342.336455][T10504] prepare_alloc_pages+0x1f0/0x5f0 [ 342.336502][T10504] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 342.336551][T10504] ? stack_trace_save+0x8e/0xc0 [ 342.336591][T10504] ? __pfx_stack_trace_save+0x10/0x10 [ 342.336630][T10504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.336665][T10504] ? kasan_save_stack+0x3f/0x50 [ 342.336692][T10504] ? kasan_save_stack+0x30/0x50 [ 342.336719][T10504] ? kasan_save_track+0x14/0x30 [ 342.336746][T10504] ? __kasan_kmalloc+0xaa/0xb0 [ 342.336774][T10504] ? mon_bin_open+0x1a8/0x470 [ 342.336811][T10504] ? chrdev_open+0x234/0x6a0 [ 342.336851][T10504] ? __x64_sys_openat+0x12d/0x210 [ 342.336877][T10504] ? do_syscall_64+0x10b/0x830 [ 342.336905][T10504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.336942][T10504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.336993][T10504] ? policy_nodemask+0xed/0x4f0 [ 342.337031][T10504] alloc_pages_mpol+0x1fb/0x540 [ 342.337067][T10504] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 342.337115][T10504] alloc_pages_noprof+0x1a/0x160 [ 342.337159][T10504] get_zeroed_page_noprof+0x18/0xb0 [ 342.337197][T10504] mon_alloc_buff+0xce/0x1b0 [ 342.337233][T10504] ? kasan_save_track+0x14/0x30 [ 342.337268][T10504] mon_bin_open+0x207/0x470 [ 342.337308][T10504] ? __pfx_mon_bin_open+0x10/0x10 [ 342.337350][T10504] chrdev_open+0x234/0x6a0 [ 342.337388][T10504] ? __pfx_apparmor_file_open+0x10/0x10 [ 342.337429][T10504] ? __pfx_chrdev_open+0x10/0x10 [ 342.337471][T10504] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 342.337519][T10504] do_dentry_open+0x6d8/0x1660 [ 342.337553][T10504] ? __pfx_chrdev_open+0x10/0x10 [ 342.337601][T10504] vfs_open+0x82/0x3f0 [ 342.337651][T10504] path_openat+0x208c/0x31a0 [ 342.337703][T10504] ? __pfx_path_openat+0x10/0x10 [ 342.337757][T10504] do_file_open+0x20e/0x430 [ 342.337797][T10504] ? __pfx_do_file_open+0x10/0x10 [ 342.337859][T10504] ? alloc_fd+0x476/0x790 [ 342.337898][T10504] ? do_getname+0x191/0x390 [ 342.337941][T10504] do_sys_openat2+0x10d/0x1e0 [ 342.337983][T10504] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.338032][T10504] ? __fget_files+0x21f/0x3d0 [ 342.338075][T10504] __x64_sys_openat+0x12d/0x210 [ 342.338105][T10504] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.338157][T10504] ? rcu_is_watching+0x12/0xc0 [ 342.338201][T10504] do_syscall_64+0x10b/0x830 [ 342.338229][T10504] ? clear_bhb_loop+0x40/0x90 [ 342.338267][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.338297][T10504] RIP: 0033:0x7fd6bdf9ce59 [ 342.338324][T10504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.338351][T10504] RSP: 002b:00007fd6beedc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.338382][T10504] RAX: ffffffffffffffda RBX: 00007fd6be215fa0 RCX: 00007fd6bdf9ce59 [ 342.338403][T10504] RDX: 0000000000004000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 342.338431][T10504] RBP: 00007fd6be032d6f R08: 0000000000000000 R09: 0000000000000000 [ 342.338447][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.338462][T10504] R13: 00007fd6be216038 R14: 00007fd6be215fa0 R15: 00007ffddd7f5fc8 [ 342.338502][T10504] [ 343.330178][T10525] sctp: [Deprecated]: syz.5.1419 (pid 10525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.330178][T10525] Use struct sctp_sack_info instead [ 343.372551][T10526] FAULT_INJECTION: forcing a failure. [ 343.372551][T10526] name failslab, interval 1, probability 0, space 0, times 0 [ 343.400453][T10526] CPU: 0 UID: 0 PID: 10526 Comm: syz.7.1407 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.400502][T10526] Tainted: [L]=SOFTLOCKUP [ 343.400512][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.400528][T10526] Call Trace: [ 343.400539][T10526] [ 343.400550][T10526] dump_stack_lvl+0x100/0x190 [ 343.400590][T10526] should_fail_ex.cold+0x5/0xa [ 343.400629][T10526] should_failslab+0xc2/0x120 [ 343.400664][T10526] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 343.400694][T10526] ? __d_alloc+0x34/0xa40 [ 343.400735][T10526] ? security_inode_alloc+0xcf/0x2c0 [ 343.400773][T10526] __d_alloc+0x34/0xa40 [ 343.400819][T10526] path_from_stashed+0x427/0x750 [ 343.400873][T10526] pidfs_alloc_file+0xf8/0x290 [ 343.400912][T10526] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 343.400961][T10526] pidfd_prepare+0x10c/0x1b0 [ 343.401006][T10526] __x64_sys_pidfd_open+0x105/0x1a0 [ 343.401038][T10526] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 343.401072][T10526] ? rcu_is_watching+0x12/0xc0 [ 343.401115][T10526] do_syscall_64+0x10b/0x830 [ 343.401144][T10526] ? clear_bhb_loop+0x40/0x90 [ 343.401182][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.401213][T10526] RIP: 0033:0x7f77a159ce59 [ 343.401240][T10526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.401270][T10526] RSP: 002b:00007f77a23b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 343.401301][T10526] RAX: ffffffffffffffda RBX: 00007f77a1815fa0 RCX: 00007f77a159ce59 [ 343.401322][T10526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 343.401339][T10526] RBP: 00007f77a1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 343.401357][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.401375][T10526] R13: 00007f77a1816038 R14: 00007f77a1815fa0 R15: 00007ffc9483e828 [ 343.401426][T10526] [ 344.309609][T10551] netlink: 266 bytes leftover after parsing attributes in process `syz.5.1414'. [ 344.347925][T10551] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.068938][T10572] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1421'. [ 345.976154][T10595] netlink: 266 bytes leftover after parsing attributes in process `syz.7.1428'. [ 346.003710][T10595] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.573249][T10623] zswap: compressor not available [ 348.268206][T10647] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1434'. [ 350.102676][T10697] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1446'. [ 351.423950][T10731] zswap: compressor not available [ 352.210402][T10754] random: crng reseeded on system resumption [ 352.970011][T10767] random: crng reseeded on system resumption [ 354.385826][T10796] random: crng reseeded on system resumption [ 354.774025][T10799] zswap: compressor not available [ 363.309829][T10952] random: crng reseeded on system resumption [ 368.497828][T11026] zswap: compressor not available [ 373.814945][T11109] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 373.846776][T11109] File: /dev/ram7 PID: 11109 Comm: syz.0.1538 [ 374.572290][T11122] zswap: compressor not available [ 376.898772][T11161] zswap: compressor not available [ 378.846948][T11197] zswap: compressor not available [ 378.863163][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.873314][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.372544][T11246] random: crng reseeded on system resumption [ 381.851511][T11250] zswap: compressor not available [ 382.351110][T11258] futex_wake_op: syz.5.1574 tries to shift op by -2048; fix this program [ 384.518348][T11274] netlink: 206 bytes leftover after parsing attributes in process `syz.7.1579'. [ 384.566366][T11293] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1583'. [ 384.613827][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.623721][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.677158][T11332] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1602'. [ 387.733891][T11307] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1596'. [ 388.849158][T11341] random: crng reseeded on system resumption [ 388.915067][T11344] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1598'. [ 388.929204][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.938035][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.629971][T11357] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1612'. [ 389.871054][T11365] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1606'. [ 390.185470][T11371] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1609'. [ 390.487196][T11384] netlink: 'syz.6.1616': attribute type 33 has an invalid length. [ 390.821982][T11390] FAULT_INJECTION: forcing a failure. [ 390.821982][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 390.837668][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.5.1619 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.837727][T11390] Tainted: [L]=SOFTLOCKUP [ 390.837738][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.837756][T11390] Call Trace: [ 390.837766][T11390] [ 390.837778][T11390] dump_stack_lvl+0x100/0x190 [ 390.837818][T11390] should_fail_ex.cold+0x5/0xa [ 390.837860][T11390] should_failslab+0xc2/0x120 [ 390.837897][T11390] __kmalloc_cache_noprof+0x7a/0x6f0 [ 390.837942][T11390] ? alloc_fs_context+0x57/0xf40 [ 390.837982][T11390] ? kasan_quarantine_put+0x104/0x240 [ 390.838012][T11390] ? lockdep_hardirqs_on+0x78/0x100 [ 390.838049][T11390] alloc_fs_context+0x57/0xf40 [ 390.838108][T11390] __x64_sys_fsopen+0xed/0x220 [ 390.838138][T11390] do_syscall_64+0x10b/0x830 [ 390.838166][T11390] ? clear_bhb_loop+0x40/0x90 [ 390.838204][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.838235][T11390] RIP: 0033:0x7f11f159ce59 [ 390.838260][T11390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.838288][T11390] RSP: 002b:00007f11f2422028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 390.838317][T11390] RAX: ffffffffffffffda RBX: 00007f11f1815fa0 RCX: 00007f11f159ce59 [ 390.838337][T11390] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 390.838354][T11390] RBP: 00007f11f1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 390.838371][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.838389][T11390] R13: 00007f11f1816038 R14: 00007f11f1815fa0 R15: 00007ffc39b85fc8 [ 390.838430][T11390] [ 391.049186][ T5625] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 391.483445][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1627'. [ 391.520807][T11409] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1627'. [ 393.197222][T11431] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1635'. [ 393.220176][T11431] \: renamed from lo (while UP) [ 393.849852][T11449] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1641'. [ 394.914217][T11468] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 395.447834][T11482] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1655'. [ 395.894288][T11492] zswap: compressor 000 not available [ 396.014405][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1659'. [ 396.063061][T11501] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1659'. [ 398.531810][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1674'. [ 398.553888][T11553] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1674'. [ 399.796471][T11579] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1681'. [ 400.363426][T11587] ubi0: attaching mtd0 [ 400.451718][T11587] ubi0: scanning is finished [ 400.460519][T11587] ubi0: empty MTD device detected [ 401.025969][T11600] FAULT_INJECTION: forcing a failure. [ 401.025969][T11600] name failslab, interval 1, probability 0, space 0, times 0 [ 401.057050][T11587] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 401.065594][T11600] CPU: 1 UID: 0 PID: 11600 Comm: syz.5.1689 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.065645][T11600] Tainted: [L]=SOFTLOCKUP [ 401.065656][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.065674][T11600] Call Trace: [ 401.065683][T11600] [ 401.065696][T11600] dump_stack_lvl+0x100/0x190 [ 401.065735][T11600] should_fail_ex.cold+0x5/0xa [ 401.065776][T11600] should_failslab+0xc2/0x120 [ 401.065822][T11600] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 401.065852][T11600] ? __pmd_alloc+0xbf/0x950 [ 401.065899][T11600] __pmd_alloc+0xbf/0x950 [ 401.065936][T11600] ? __pud_alloc+0x4fb/0x690 [ 401.065977][T11600] __handle_mm_fault+0xa9c/0x2a00 [ 401.066029][T11600] ? mt_find+0x45e/0x8e0 [ 401.066061][T11600] ? __pfx___handle_mm_fault+0x10/0x10 [ 401.066102][T11600] ? __pfx_mt_find+0x10/0x10 [ 401.066166][T11600] handle_mm_fault+0x36d/0xa20 [ 401.066220][T11600] __get_user_pages+0x1178/0x32a0 [ 401.066283][T11600] ? __pfx___get_user_pages+0x10/0x10 [ 401.066336][T11600] populate_vma_page_range+0x267/0x3f0 [ 401.066383][T11600] ? __pfx_populate_vma_page_range+0x10/0x10 [ 401.066423][T11600] ? __pfx_find_vma_intersection+0x10/0x10 [ 401.066463][T11600] ? do_mmap+0x93f/0x12f0 [ 401.066506][T11600] __mm_populate+0x107/0x3a0 [ 401.066548][T11600] ? __pfx___mm_populate+0x10/0x10 [ 401.066593][T11600] ? up_write+0x28c/0x4f0 [ 401.066632][T11600] vm_mmap_pgoff+0x37f/0x470 [ 401.066677][T11600] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 401.066722][T11600] ? do_futex+0x192/0x350 [ 401.066755][T11600] ? __pfx_do_futex+0x10/0x10 [ 401.066806][T11600] ksys_mmap_pgoff+0xe4/0x610 [ 401.066846][T11600] ? __x64_sys_futex+0x358/0x4d0 [ 401.066881][T11600] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 401.066919][T11600] ? xfd_validate_state+0x129/0x190 [ 401.066952][T11600] ? ksys_write+0x1ac/0x250 [ 401.066996][T11600] __x64_sys_mmap+0x125/0x190 [ 401.067035][T11600] do_syscall_64+0x10b/0x830 [ 401.067061][T11600] ? clear_bhb_loop+0x40/0x90 [ 401.067096][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.067129][T11600] RIP: 0033:0x7f11f159ce59 [ 401.067155][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.067184][T11600] RSP: 002b:00007f11f2422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 401.067214][T11600] RAX: ffffffffffffffda RBX: 00007f11f1815fa0 RCX: 00007f11f159ce59 [ 401.067236][T11600] RDX: 0000000000000896 RSI: 0000000000000003 RDI: 0000240000000000 [ 401.067254][T11600] RBP: 00007f11f1632d6f R08: 0000000000000002 R09: 0000000000000000 [ 401.067272][T11600] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 401.067290][T11600] R13: 00007f11f1816038 R14: 00007f11f1815fa0 R15: 00007ffc39b85fc8 [ 401.067332][T11600] [ 401.352912][T11587] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 401.415450][T11587] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 401.474702][T11587] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 401.548392][T11587] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 401.593115][T11603] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 401.624263][T11587] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 401.687917][T11603] FAULT_INJECTION: forcing a failure. [ 401.687917][T11603] name failslab, interval 1, probability 0, space 0, times 0 [ 401.705828][T11587] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4181221993 [ 401.752504][T11603] CPU: 0 UID: 0 PID: 11603 Comm: syz.6.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.752554][T11603] Tainted: [L]=SOFTLOCKUP [ 401.752564][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.752580][T11603] Call Trace: [ 401.752600][T11603] [ 401.752612][T11603] dump_stack_lvl+0x100/0x190 [ 401.752652][T11603] should_fail_ex.cold+0x5/0xa [ 401.752693][T11603] should_failslab+0xc2/0x120 [ 401.752731][T11603] __kmalloc_cache_noprof+0x7a/0x6f0 [ 401.752780][T11603] ? apply_subsystem_event_filter+0x444/0x17b0 [ 401.752837][T11603] apply_subsystem_event_filter+0x444/0x17b0 [ 401.752896][T11603] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 401.752952][T11603] ? _copy_from_user+0x59/0xd0 [ 401.752992][T11603] subsystem_filter_write+0x95/0x120 [ 401.753040][T11603] vfs_write+0x2aa/0x1070 [ 401.753079][T11603] ? __pfx_subsystem_filter_write+0x10/0x10 [ 401.753127][T11603] ? __pfx_vfs_write+0x10/0x10 [ 401.753163][T11603] ? __fget_files+0x215/0x3d0 [ 401.753210][T11603] ? __fget_files+0x21f/0x3d0 [ 401.753260][T11603] ksys_write+0x12a/0x250 [ 401.753295][T11603] ? __pfx_ksys_write+0x10/0x10 [ 401.753335][T11603] ? rcu_is_watching+0x12/0xc0 [ 401.753378][T11603] do_syscall_64+0x10b/0x830 [ 401.753407][T11603] ? clear_bhb_loop+0x40/0x90 [ 401.753445][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.753476][T11603] RIP: 0033:0x7f1ff259ce59 [ 401.753502][T11603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.753532][T11603] RSP: 002b:00007f1ff33a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.753562][T11603] RAX: ffffffffffffffda RBX: 00007f1ff2815fa0 RCX: 00007f1ff259ce59 [ 401.753589][T11603] RDX: 0000000000000078 RSI: 0000200000000040 RDI: 0000000000000006 [ 401.753607][T11603] RBP: 00007f1ff2632d6f R08: 0000000000000000 R09: 0000000000000000 [ 401.753624][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.753642][T11603] R13: 00007f1ff2816038 R14: 00007f1ff2815fa0 R15: 00007ffc1e3cc018 [ 401.753685][T11603] [ 402.002633][T11587] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 402.037460][T11601] ubi0: background thread "ubi_bgt0d" started, PID 11601 [ 402.160602][T11610] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1693'. [ 402.383221][T11616] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1694'. [ 402.928923][T11611] Process accounting resumed [ 403.050695][T11628] netlink: 'syz.5.1699': attribute type 33 has an invalid length. [ 404.402101][T11654] netlink: zone id is out of range [ 404.409990][T11654] netlink: zone id is out of range [ 404.418444][T11654] netlink: zone id is out of range [ 404.426144][T11654] netlink: zone id is out of range [ 404.436401][T11654] netlink: zone id is out of range [ 404.442724][T11654] netlink: zone id is out of range [ 404.448026][T11654] netlink: zone id is out of range [ 404.454402][T11654] netlink: zone id is out of range [ 404.461169][T11654] netlink: zone id is out of range [ 404.470682][T11654] netlink: zone id is out of range [ 404.627150][T11660] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1711'. [ 404.835469][ T30] audit: type=1800 audit(1779746623.422:8): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1712" name="file0" dev="tmpfs" ino=470 res=0 errno=0 [ 405.464195][T11684] netlink: 110 bytes leftover after parsing attributes in process `syz.7.1719'. [ 405.494957][T11685] netlink: 314 bytes leftover after parsing attributes in process `syz.5.1720'. [ 407.860282][T11743] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1741'. [ 407.878916][T11743] netlink: 'syz.0.1741': attribute type 3 has an invalid length. [ 407.887522][T11743] netlink: 298 bytes leftover after parsing attributes in process `syz.0.1741'. [ 407.977592][T11745] netlink: 'syz.6.1742': attribute type 16 has an invalid length. [ 407.985871][T11745] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1742'. [ 408.245572][T11753] netlink: 'syz.5.1746': attribute type 10 has an invalid length. [ 408.258237][T11753] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1746'. [ 408.466857][T11759] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1749'. [ 408.718566][T11772] netlink: 322 bytes leftover after parsing attributes in process `syz.5.1753'. [ 408.930571][T11776] Falling back ldisc for ttyS2. [ 408.972567][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1755'. [ 409.006605][T11778] unsupported nlmsg_type 40 [ 409.009086][T11780] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1757'. [ 410.193192][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'. [ 410.236029][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'. [ 410.786900][T11825] netlink: 'syz.0.1772': attribute type 33 has an invalid length. [ 412.025372][T11853] sd 0:0:1:0: PR command failed: 1026 [ 412.046386][T11853] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 412.064881][T11853] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 413.775191][T11894] __nla_validate_parse: 2 callbacks suppressed [ 413.775216][T11894] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1794'. [ 415.142753][T11917] FAULT_INJECTION: forcing a failure. [ 415.142753][T11917] name failslab, interval 1, probability 0, space 0, times 0 [ 415.165045][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.7.1802 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.165093][T11917] Tainted: [L]=SOFTLOCKUP [ 415.165103][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.165120][T11917] Call Trace: [ 415.165130][T11917] [ 415.165141][T11917] dump_stack_lvl+0x100/0x190 [ 415.165180][T11917] should_fail_ex.cold+0x5/0xa [ 415.165216][T11917] should_failslab+0xc2/0x120 [ 415.165253][T11917] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 415.165284][T11917] ? __kernfs_new_node+0xd2/0x9f0 [ 415.165326][T11917] __kernfs_new_node+0xd2/0x9f0 [ 415.165367][T11917] ? __pfx___kernfs_new_node+0x10/0x10 [ 415.165421][T11917] ? find_held_lock+0x2b/0x80 [ 415.165461][T11917] ? kernfs_root+0xee/0x2a0 [ 415.165493][T11917] ? kernfs_root+0xee/0x2a0 [ 415.165536][T11917] kernfs_new_node+0x11b/0x1a0 [ 415.165581][T11917] __kernfs_create_file+0x53/0x350 [ 415.165631][T11917] sysfs_add_file_mode_ns+0x207/0x3c0 [ 415.165670][T11917] sysfs_merge_group+0x194/0x340 [ 415.165704][T11917] ? __pfx_sysfs_merge_group+0x10/0x10 [ 415.165737][T11917] ? bus_add_device+0x368/0x6b0 [ 415.165772][T11917] ? __pfx_bus_add_device+0x10/0x10 [ 415.165802][T11917] ? __pfx_dev_add_physical_location+0x10/0x10 [ 415.165854][T11917] dpm_sysfs_add+0x237/0x280 [ 415.165897][T11917] device_add+0x9ef/0x1950 [ 415.165942][T11917] ? __pfx_device_add+0x10/0x10 [ 415.165995][T11917] nfc_register_device+0x41/0x3e0 [ 415.166045][T11917] nci_register_device+0x7f1/0xb80 [ 415.166092][T11917] ? __pfx_nci_register_device+0x10/0x10 [ 415.166137][T11917] ? lockdep_init_map_type+0x5c/0x250 [ 415.166173][T11917] virtual_ncidev_open+0x141/0x220 [ 415.166204][T11917] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 415.166231][T11917] misc_open+0x26d/0x450 [ 415.166267][T11917] ? __pfx_misc_open+0x10/0x10 [ 415.166304][T11917] chrdev_open+0x234/0x6a0 [ 415.166342][T11917] ? __pfx_apparmor_file_open+0x10/0x10 [ 415.166373][T11917] ? __pfx_chrdev_open+0x10/0x10 [ 415.166426][T11917] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 415.166479][T11917] do_dentry_open+0x6d8/0x1660 [ 415.166516][T11917] ? __pfx_chrdev_open+0x10/0x10 [ 415.166566][T11917] vfs_open+0x82/0x3f0 [ 415.166618][T11917] path_openat+0x208c/0x31a0 [ 415.166670][T11917] ? __pfx_path_openat+0x10/0x10 [ 415.166724][T11917] do_file_open+0x20e/0x430 [ 415.166767][T11917] ? __pfx_do_file_open+0x10/0x10 [ 415.166837][T11917] ? alloc_fd+0x476/0x790 [ 415.166878][T11917] ? do_getname+0x191/0x390 [ 415.166927][T11917] do_sys_openat2+0x10d/0x1e0 [ 415.166974][T11917] ? __pfx_do_sys_openat2+0x10/0x10 [ 415.167024][T11917] ? find_held_lock+0x2b/0x80 [ 415.167073][T11917] __x64_sys_openat+0x12d/0x210 [ 415.167100][T11917] ? __pfx___x64_sys_openat+0x10/0x10 [ 415.167151][T11917] ? rcu_is_watching+0x12/0xc0 [ 415.167192][T11917] do_syscall_64+0x10b/0x830 [ 415.167220][T11917] ? clear_bhb_loop+0x40/0x90 [ 415.167255][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.167286][T11917] RIP: 0033:0x7f77a159ce59 [ 415.167312][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.167340][T11917] RSP: 002b:00007f77a23b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 415.167368][T11917] RAX: ffffffffffffffda RBX: 00007f77a1815fa0 RCX: 00007f77a159ce59 [ 415.167398][T11917] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 415.167417][T11917] RBP: 00007f77a1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 415.167436][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.167453][T11917] R13: 00007f77a1816038 R14: 00007f77a1815fa0 R15: 00007ffc9483e828 [ 415.167493][T11917] [ 415.792433][T11928] random: crng reseeded on system resumption [ 415.896099][T11928] hub 1-0:1.0: USB hub found [ 415.930575][T11928] hub 1-0:1.0: 1 port detected [ 416.032686][T11933] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 416.190474][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 417.173780][T11960] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1817'. [ 417.313322][T11953] bridge0: port 3(bond0) entered blocking state [ 417.334156][T11953] bridge0: port 3(bond0) entered disabled state [ 417.366446][T11953] bond0: entered allmulticast mode [ 417.372852][T11953] bond_slave_0: entered allmulticast mode [ 417.387659][T11953] bond_slave_1: entered allmulticast mode [ 417.419133][T11953] bond0: entered promiscuous mode [ 417.428819][T11953] bond_slave_0: entered promiscuous mode [ 417.435464][T11953] bond_slave_1: entered promiscuous mode [ 417.452226][T11953] bridge0: port 3(bond0) entered blocking state [ 417.458950][T11953] bridge0: port 3(bond0) entered forwarding state [ 418.850911][T11994] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 419.754724][T12000] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1831'. [ 421.025997][T12042] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1842'. [ 421.483396][ T5625] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 423.504631][T12086] netlink: 'syz.6.1857': attribute type 16 has an invalid length. [ 423.522616][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 423.544429][T12086] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1857'. [ 425.602794][ T5625] Bluetooth: hci2: command 0x2016 tx timeout [ 425.608058][T12117] FAULT_INJECTION: forcing a failure. [ 425.608058][T12117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.641554][T12117] CPU: 0 UID: 0 PID: 12117 Comm: syz.7.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.641602][T12117] Tainted: [L]=SOFTLOCKUP [ 425.641615][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.641631][T12117] Call Trace: [ 425.641640][T12117] [ 425.641651][T12117] dump_stack_lvl+0x100/0x190 [ 425.641690][T12117] should_fail_ex.cold+0x5/0xa [ 425.641722][T12117] ? prepare_alloc_pages+0x16d/0x5f0 [ 425.641767][T12117] should_fail_alloc_page+0xeb/0x140 [ 425.641805][T12117] prepare_alloc_pages+0x1f0/0x5f0 [ 425.641851][T12117] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 425.641883][T12117] ? clockevents_program_event+0x1c1/0x820 [ 425.641928][T12117] ? __lock_acquire+0x4a5/0x2630 [ 425.641957][T12117] ? __css_rstat_updated+0x1ce/0x5a0 [ 425.642006][T12117] ? __pfx___css_rstat_updated+0x10/0x10 [ 425.642058][T12117] ? xas_create+0x1f4/0x14e0 [ 425.642088][T12117] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.642127][T12117] ? rcu_is_watching+0x12/0xc0 [ 425.642163][T12117] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 425.642194][T12117] ? find_held_lock+0x2b/0x80 [ 425.642254][T12117] ? __lock_acquire+0x4a5/0x2630 [ 425.642285][T12117] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.642332][T12117] ? policy_nodemask+0xed/0x4f0 [ 425.642372][T12117] alloc_pages_mpol+0x1fb/0x540 [ 425.642410][T12117] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.642445][T12117] ? filemap_get_entry+0x22d/0x450 [ 425.642476][T12117] ? filemap_get_entry+0x22d/0x450 [ 425.642513][T12117] folio_alloc_noprof+0x22/0x250 [ 425.642555][T12117] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 425.642602][T12117] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 425.642651][T12117] ? rcu_is_watching+0x12/0xc0 [ 425.642694][T12117] __filemap_get_folio_mpol+0x6a4/0xe70 [ 425.642739][T12117] ioctx_alloc+0x7e1/0x21a0 [ 425.642802][T12117] ? __pfx_ioctx_alloc+0x10/0x10 [ 425.642857][T12117] __x64_sys_io_setup+0xc9/0x220 [ 425.642912][T12117] do_syscall_64+0x10b/0x830 [ 425.642941][T12117] ? clear_bhb_loop+0x40/0x90 [ 425.642979][T12117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.643010][T12117] RIP: 0033:0x7f77a159ce59 [ 425.643038][T12117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.643067][T12117] RSP: 002b:00007f77a23b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 425.643098][T12117] RAX: ffffffffffffffda RBX: 00007f77a1815fa0 RCX: 00007f77a159ce59 [ 425.643119][T12117] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 425.643137][T12117] RBP: 00007f77a1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 425.643156][T12117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.643173][T12117] R13: 00007f77a1816038 R14: 00007f77a1815fa0 R15: 00007ffc9483e828 [ 425.643214][T12117] [ 426.763951][T12129] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1872'. [ 428.010870][T12148] net_ratelimit: 656 callbacks suppressed [ 428.010900][T12148] netlink: zone id is out of range [ 428.032596][T12148] netlink: zone id is out of range [ 428.042827][T12148] netlink: zone id is out of range [ 428.056570][T12148] netlink: zone id is out of range [ 428.066004][T12148] netlink: zone id is out of range [ 428.099546][T12148] netlink: zone id is out of range [ 428.111815][T12148] netlink: zone id is out of range [ 428.127071][T12148] netlink: zone id is out of range [ 428.157836][T12148] netlink: zone id is out of range [ 428.182586][T12148] netlink: zone id is out of range [ 428.638847][ T30] audit: type=1800 audit(1779746647.210:9): pid=12157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1878" name="file0" dev="tmpfs" ino=2465 res=0 errno=0 [ 429.734766][T12169] FAULT_INJECTION: forcing a failure. [ 429.734766][T12169] name failslab, interval 1, probability 0, space 0, times 0 [ 429.778159][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.7.1884 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.778217][T12169] Tainted: [L]=SOFTLOCKUP [ 429.778229][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.778247][T12169] Call Trace: [ 429.778256][T12169] [ 429.778269][T12169] dump_stack_lvl+0x100/0x190 [ 429.778309][T12169] should_fail_ex.cold+0x5/0xa [ 429.778348][T12169] should_failslab+0xc2/0x120 [ 429.778385][T12169] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 429.778414][T12169] ? mas_preallocate+0x1105/0x14a0 [ 429.778458][T12169] mas_preallocate+0x1105/0x14a0 [ 429.778501][T12169] ? __pfx_mas_preallocate+0x10/0x10 [ 429.778549][T12169] ? __asan_memset+0x23/0x50 [ 429.778597][T12169] ? init_multi_vma_prep+0x33c/0x650 [ 429.778648][T12169] commit_merge+0x3e3/0xbd0 [ 429.778700][T12169] ? __pfx_commit_merge+0x10/0x10 [ 429.778744][T12169] ? debug_check_no_obj_freed+0x31f/0x630 [ 429.778799][T12169] vma_expand+0xac5/0xea0 [ 429.778848][T12169] ? __pfx_vma_expand+0x10/0x10 [ 429.778893][T12169] ? can_vma_merge_right+0x101/0x720 [ 429.778941][T12169] ? __pfx_can_vma_merge_right+0x10/0x10 [ 429.778997][T12169] vma_merge_new_range+0x516/0xc00 [ 429.779054][T12169] ? __pfx_vma_merge_new_range+0x10/0x10 [ 429.779106][T12169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.779159][T12169] __mmap_region+0xa89/0x2da0 [ 429.779220][T12169] ? __pfx___mmap_region+0x10/0x10 [ 429.779303][T12169] ? __lock_acquire+0x4a5/0x2630 [ 429.779335][T12169] ? do_raw_spin_unlock+0x145/0x1e0 [ 429.779369][T12169] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 429.779429][T12169] ? find_held_lock+0x2b/0x80 [ 429.779465][T12169] ? rcu_is_watching+0x12/0xc0 [ 429.779515][T12169] ? rcu_is_watching+0x12/0xc0 [ 429.779548][T12169] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 429.779595][T12169] ? lockdep_hardirqs_on+0x78/0x100 [ 429.779672][T12169] ? futex_unqueue+0x133/0x2c0 [ 429.779715][T12169] mmap_region+0x35d/0x620 [ 429.779744][T12169] ? rcu_is_watching+0x12/0xc0 [ 429.779780][T12169] ? __pfx_mmap_region+0x10/0x10 [ 429.779816][T12169] ? cap_mmap_addr+0x4b/0x120 [ 429.779862][T12169] ? bpf_lsm_mmap_addr+0x9/0x30 [ 429.779892][T12169] ? security_mmap_addr+0x71/0x1e0 [ 429.779931][T12169] ? __get_unmapped_area+0x255/0x3e0 [ 429.779975][T12169] do_mmap+0xc63/0x12f0 [ 429.780023][T12169] ? __pfx_do_mmap+0x10/0x10 [ 429.780061][T12169] ? __pfx_down_write_killable+0x10/0x10 [ 429.780105][T12169] vm_mmap_pgoff+0x29e/0x470 [ 429.780153][T12169] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 429.780195][T12169] ? do_futex+0x192/0x350 [ 429.780240][T12169] ? __pfx_do_futex+0x10/0x10 [ 429.780282][T12169] ksys_mmap_pgoff+0xe4/0x610 [ 429.780321][T12169] ? __x64_sys_futex+0x358/0x4d0 [ 429.780357][T12169] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 429.780396][T12169] ? xfd_validate_state+0x129/0x190 [ 429.780426][T12169] ? ksys_write+0x1ac/0x250 [ 429.780468][T12169] __x64_sys_mmap+0x125/0x190 [ 429.780507][T12169] do_syscall_64+0x10b/0x830 [ 429.780535][T12169] ? clear_bhb_loop+0x40/0x90 [ 429.780573][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.780605][T12169] RIP: 0033:0x7f77a159ce59 [ 429.780631][T12169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.780660][T12169] RSP: 002b:00007f77a23b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 429.780689][T12169] RAX: ffffffffffffffda RBX: 00007f77a1815fa0 RCX: 00007f77a159ce59 [ 429.780710][T12169] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 429.780727][T12169] RBP: 00007f77a1632d6f R08: 0000000000000007 R09: 0000000000028000 [ 429.780745][T12169] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 429.780763][T12169] R13: 00007f77a1816038 R14: 00007f77a1815fa0 R15: 00007ffc9483e828 [ 429.780804][T12169] [ 431.579919][T12204] netlink: 'syz.0.1897': attribute type 33 has an invalid length. [ 431.592958][T12204] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1897'. [ 432.282775][T12223] capability: warning: `syz.0.1903' uses 32-bit capabilities (legacy support in use) [ 432.599392][ T50] Bluetooth: hci0: unexpected event 0x05 length: 6 > 4 [ 433.716251][T12230] Process accounting paused [ 433.914538][T12248] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1911'. [ 433.952505][T12248] FAULT_INJECTION: forcing a failure. [ 433.952505][T12248] name failslab, interval 1, probability 0, space 0, times 0 [ 433.983736][T12248] CPU: 1 UID: 0 PID: 12248 Comm: syz.6.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.983789][T12248] Tainted: [L]=SOFTLOCKUP [ 433.983800][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.983818][T12248] Call Trace: [ 433.983834][T12248] [ 433.983846][T12248] dump_stack_lvl+0x100/0x190 [ 433.983887][T12248] should_fail_ex.cold+0x5/0xa [ 433.983928][T12248] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 433.983966][T12248] should_failslab+0xc2/0x120 [ 433.984009][T12248] __kmalloc_noprof+0xe0/0x850 [ 433.984048][T12248] apply_wqattrs_prepare+0xfe/0xbb0 [ 433.984088][T12248] ? __alloc_workqueue+0x8fd/0x1980 [ 433.984146][T12248] apply_workqueue_attrs_locked+0x64/0xe0 [ 433.984195][T12248] __alloc_workqueue+0xe04/0x1980 [ 433.984252][T12248] alloc_workqueue_noprof+0xc7/0x130 [ 433.984293][T12248] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 433.984337][T12248] ? trace_kmalloc+0xe3/0x110 [ 433.984371][T12248] ? __kasan_kmalloc+0xaa/0xb0 [ 433.984414][T12248] ieee80211_register_hw+0x2148/0x4570 [ 433.984450][T12248] ? mark_held_locks+0x1/0x70 [ 433.984491][T12248] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 433.984522][T12248] ? __pfx___debug_object_init+0x10/0x10 [ 433.984559][T12248] ? find_held_lock+0x2b/0x80 [ 433.984601][T12248] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.984647][T12248] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 433.984693][T12248] ? __hrtimer_setup+0x208/0x330 [ 433.984728][T12248] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 433.984794][T12248] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 433.984844][T12248] hwsim_new_radio_nl+0xc5f/0x1370 [ 433.984880][T12248] ? rcu_is_watching+0x12/0xc0 [ 433.984919][T12248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 433.984967][T12248] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 433.985000][T12248] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 433.985044][T12248] genl_family_rcv_msg_doit+0x214/0x300 [ 433.985083][T12248] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.985114][T12248] ? genl_get_cmd+0x3e7/0x760 [ 433.985152][T12248] ? bpf_lsm_capable+0x9/0x10 [ 433.985196][T12248] ? security_capable+0x80/0x260 [ 433.985245][T12248] ? ns_capable+0xd2/0xf0 [ 433.985287][T12248] genl_rcv_msg+0x560/0x800 [ 433.985324][T12248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.985357][T12248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 433.985406][T12248] netlink_rcv_skb+0x159/0x420 [ 433.985451][T12248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.985484][T12248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.985546][T12248] ? netlink_deliver_tap+0x1ae/0xcc0 [ 433.985596][T12248] genl_rcv+0x28/0x40 [ 433.985622][T12248] netlink_unicast+0x585/0x850 [ 433.985671][T12248] ? __pfx_netlink_unicast+0x10/0x10 [ 433.985727][T12248] netlink_sendmsg+0x8b0/0xda0 [ 433.985777][T12248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.985818][T12248] ? __import_iovec+0x1d2/0x640 [ 433.985853][T12248] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 433.985906][T12248] ____sys_sendmsg+0x9e1/0xb70 [ 433.985948][T12248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.985997][T12248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.986042][T12248] ? preempt_schedule_thunk+0x16/0x30 [ 433.986096][T12248] ? try_to_wake_up+0x5f6/0x1900 [ 433.986140][T12248] ___sys_sendmsg+0x190/0x1e0 [ 433.986182][T12248] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.986212][T12248] ? futex_private_hash_put+0x107/0x1c0 [ 433.986292][T12248] __sys_sendmsg+0x170/0x220 [ 433.986330][T12248] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.986367][T12248] ? __x64_sys_futex+0x34f/0x4d0 [ 433.986417][T12248] ? rcu_is_watching+0x12/0xc0 [ 433.986460][T12248] do_syscall_64+0x10b/0x830 [ 433.986487][T12248] ? clear_bhb_loop+0x40/0x90 [ 433.986523][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.986551][T12248] RIP: 0033:0x7f1ff259ce59 [ 433.986578][T12248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.986606][T12248] RSP: 002b:00007f1ff33a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.986636][T12248] RAX: ffffffffffffffda RBX: 00007f1ff2815fa0 RCX: 00007f1ff259ce59 [ 433.986657][T12248] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000006 [ 433.986675][T12248] RBP: 00007f1ff2632d6f R08: 0000000000000000 R09: 0000000000000000 [ 433.986693][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.986710][T12248] R13: 00007f1ff2816038 R14: 00007f1ff2815fa0 R15: 00007ffc1e3cc018 [ 433.986753][T12248] [ 434.745732][T12259] random: crng reseeded on system resumption [ 435.560922][T12281] netlink: 186 bytes leftover after parsing attributes in process `syz.7.1923'. [ 436.266121][T12298] [ 436.268523][T12298] ====================================================== [ 436.275660][T12298] WARNING: possible circular locking dependency detected [ 436.282722][T12298] syzkaller #0 Tainted: G L [ 436.288727][T12298] ------------------------------------------------------ [ 436.295777][T12298] syz.0.1929/12298 is trying to acquire lock: [ 436.301876][T12298] ffff88805445a368 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 436.313424][T12298] [ 436.313424][T12298] but task is already holding lock: [ 436.320819][T12298] ffff88805445a7e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 436.329856][T12298] [ 436.329856][T12298] which lock already depends on the new lock. [ 436.329856][T12298] [ 436.340281][T12298] [ 436.340281][T12298] the existing dependency chain (in reverse order) is: [ 436.349317][T12298] [ 436.349317][T12298] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 436.357112][T12298] lock_sock_nested+0x41/0xf0 [ 436.362355][T12298] smc_listen_out+0x1f5/0x4b0 [ 436.367610][T12298] smc_listen_work+0x4c2/0x50e0 [ 436.373045][T12298] process_one_work+0xa0e/0x1980 [ 436.378575][T12298] worker_thread+0x5ef/0xe50 [ 436.383711][T12298] kthread+0x370/0x450 [ 436.388316][T12298] ret_from_fork+0x72b/0xd50 [ 436.393447][T12298] ret_from_fork_asm+0x1a/0x30 [ 436.398755][T12298] [ 436.398755][T12298] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 436.408940][T12298] __lock_acquire+0x14b8/0x2630 [ 436.414328][T12298] lock_acquire+0x1b1/0x370 [ 436.419374][T12298] __flush_work+0x4de/0xcb0 [ 436.424410][T12298] cancel_work_sync+0xd1/0xf0 [ 436.429625][T12298] smc_clcsock_release+0x5f/0xe0 [ 436.435125][T12298] __smc_release+0x5c2/0x880 [ 436.440262][T12298] smc_close_non_accepted+0xda/0x200 [ 436.446090][T12298] smc_close_active+0x4ff/0x1070 [ 436.451574][T12298] __smc_release+0x634/0x880 [ 436.456707][T12298] smc_release+0x1fc/0x620 [ 436.461665][T12298] __sock_release+0xb3/0x260 [ 436.466796][T12298] sock_close+0x1c/0x30 [ 436.471486][T12298] __fput+0x3ff/0xb50 [ 436.476011][T12298] task_work_run+0x150/0x240 [ 436.481142][T12298] exit_to_user_mode_loop+0x107/0x4f0 [ 436.487064][T12298] do_syscall_64+0x6f2/0x830 [ 436.492224][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.498657][T12298] [ 436.498657][T12298] other info that might help us debug this: [ 436.498657][T12298] [ 436.508913][T12298] Possible unsafe locking scenario: [ 436.508913][T12298] [ 436.516393][T12298] CPU0 CPU1 [ 436.521763][T12298] ---- ---- [ 436.527146][T12298] lock(sk_lock-AF_SMC/1); [ 436.531683][T12298] lock((work_completion)(&new_smc->smc_listen_work)); [ 436.541164][T12298] lock(sk_lock-AF_SMC/1); [ 436.548214][T12298] lock((work_completion)(&new_smc->smc_listen_work)); [ 436.555157][T12298] [ 436.555157][T12298] *** DEADLOCK *** [ 436.555157][T12298] [ 436.563307][T12298] 3 locks held by syz.0.1929/12298: [ 436.568514][T12298] #0: ffff88804e29be40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 436.579083][T12298] #1: ffff88805445a7e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 436.588552][T12298] #2: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 436.597718][T12298] [ 436.597718][T12298] stack backtrace: [ 436.603613][T12298] CPU: 0 UID: 0 PID: 12298 Comm: syz.0.1929 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.603646][T12298] Tainted: [L]=SOFTLOCKUP [ 436.603654][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.603667][T12298] Call Trace: [ 436.603674][T12298] [ 436.603682][T12298] dump_stack_lvl+0x100/0x190 [ 436.603707][T12298] print_circular_bug.cold+0x178/0x1c7 [ 436.603746][T12298] check_noncircular+0x146/0x160 [ 436.603784][T12298] __lock_acquire+0x14b8/0x2630 [ 436.603809][T12298] lock_acquire+0x1b1/0x370 [ 436.603829][T12298] ? __flush_work+0x4ca/0xcb0 [ 436.603854][T12298] ? mark_held_locks+0x40/0x70 [ 436.603875][T12298] ? __flush_work+0x4ca/0xcb0 [ 436.603898][T12298] __flush_work+0x4de/0xcb0 [ 436.603920][T12298] ? __flush_work+0x4ca/0xcb0 [ 436.603945][T12298] ? __pfx___flush_work+0x10/0x10 [ 436.603970][T12298] ? __pfx_wq_barrier_func+0x10/0x10 [ 436.604010][T12298] ? __pfx___might_resched+0x10/0x10 [ 436.604038][T12298] cancel_work_sync+0xd1/0xf0 [ 436.604066][T12298] smc_clcsock_release+0x5f/0xe0 [ 436.604101][T12298] __smc_release+0x5c2/0x880 [ 436.604133][T12298] ? __pfx_sock_def_readable+0x10/0x10 [ 436.604158][T12298] smc_close_non_accepted+0xda/0x200 [ 436.604192][T12298] smc_close_active+0x4ff/0x1070 [ 436.604228][T12298] __smc_release+0x634/0x880 [ 436.604259][T12298] smc_release+0x1fc/0x620 [ 436.604290][T12298] __sock_release+0xb3/0x260 [ 436.604318][T12298] ? __pfx_sock_close+0x10/0x10 [ 436.604354][T12298] sock_close+0x1c/0x30 [ 436.604381][T12298] __fput+0x3ff/0xb50 [ 436.604415][T12298] task_work_run+0x150/0x240 [ 436.604438][T12298] ? __pfx_task_work_run+0x10/0x10 [ 436.604461][T12298] ? rcu_is_watching+0x12/0xc0 [ 436.604490][T12298] exit_to_user_mode_loop+0x107/0x4f0 [ 436.604513][T12298] ? rcu_is_watching+0x12/0xc0 [ 436.604541][T12298] do_syscall_64+0x6f2/0x830 [ 436.604562][T12298] ? clear_bhb_loop+0x40/0x90 [ 436.604588][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.604611][T12298] RIP: 0033:0x7fd6bdf9ce59 [ 436.604629][T12298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.604652][T12298] RSP: 002b:00007ffddd7f6128 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 436.604673][T12298] RAX: 0000000000000000 RBX: 00007fd6be217da0 RCX: 00007fd6bdf9ce59 [ 436.604688][T12298] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 436.604702][T12298] RBP: 00007fd6be217da0 R08: 00007fd6be216038 R09: 0000000000000000 [ 436.604716][T12298] R10: 00000000005e61bc R11: 0000000000000246 R12: 000000000006a992 [ 436.604731][T12298] R13: 00007fd6be215fac R14: 000000000006a6a2 R15: 00007ffddd7f6230 [ 436.604751][T12298] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 436.965063][T12306] netlink: 'syz.7.1930': attribute type 5 has an invalid length. [ 436.987264][T12306] netlink: 314 bytes leftover after parsing attributes in process `syz.7.1930'. [ 437.812202][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.913825][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.980985][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.041961][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.125844][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.187328][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.226038][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.285199][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.382323][ T48] bond0: left allmulticast mode [ 438.390008][ T48] bond_slave_0: left allmulticast mode [ 438.396515][ T48] bond_slave_1: left allmulticast mode [ 438.403712][ T48] bond0: left promiscuous mode [ 438.408770][ T48] bond_slave_0: left promiscuous mode [ 438.414443][ T48] bond_slave_1: left promiscuous mode [ 438.420532][ T48] bridge0: port 3(bond0) entered disabled state [ 438.428464][ T48] bridge_slave_1: left allmulticast mode [ 438.434166][ T48] bridge_slave_1: left promiscuous mode [ 438.440128][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.449502][ T48] bridge_slave_0: left allmulticast mode [ 438.455205][ T48] bridge_slave_0: left promiscuous mode [ 438.461289][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.473279][ T48] bridge_slave_1: left allmulticast mode [ 438.479831][ T48] bridge_slave_1: left promiscuous mode [ 438.485568][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.500959][ T48] bridge_slave_0: left allmulticast mode [ 438.506679][ T48] bridge_slave_0: left promiscuous mode [ 438.512981][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.604970][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.614888][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.624622][ T48] bond0 (unregistering): Released all slaves [ 438.695781][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.708832][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.718518][ T48] bond0 (unregistering): Released all slaves [ 438.729052][ T5287] 8021q: adding VLAN 0 to HW filter on device eth17 [ 439.059417][ T5287] 8021q: adding VLAN 0 to HW filter on device eth18 [ 439.374787][ T5287] 8021q: adding VLAN 0 to HW filter on device eth19 [ 439.676542][ T48] hsr_slave_0: left promiscuous mode [ 439.683122][ T48] hsr_slave_1: left promiscuous mode [ 439.689106][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.696524][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.705329][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.713698][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.725210][ T48] hsr_slave_0: left promiscuous mode [ 439.732589][ T48] hsr_slave_1: left promiscuous mode [ 439.738313][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.745953][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.753623][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.761095][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.773212][ T48] veth1_macvtap: left promiscuous mode [ 439.778773][ T48] veth0_macvtap: left promiscuous mode [ 439.784277][ T48] veth1_vlan: left promiscuous mode [ 439.789728][ T48] veth0_vlan: left promiscuous mode [ 439.795593][ T48] veth1_macvtap: left promiscuous mode [ 439.801138][ T48] veth0_macvtap: left promiscuous mode [ 439.806647][ T48] veth1_vlan: left promiscuous mode [ 439.812214][ T48] veth0_vlan: left promiscuous mode [ 439.939200][ T48] team0 (unregistering): Port device team_slave_1 removed [ 439.954258][ T48] team0 (unregistering): Port device team_slave_0 removed [ 440.067855][ T48] team0 (unregistering): Port device team_slave_1 removed [ 440.081373][ T48] team0 (unregistering): Port device team_slave_0 removed [ 440.124386][ T5287] 8021q: adding VLAN 0 to HW filter on device eth20 [ 440.330602][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.337135][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.526371][ T5287] 8021q: adding VLAN 0 to HW filter on device eth21 [ 440.667575][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.767132][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.817286][ T5287] 8021q: adding VLAN 0 to HW filter on device eth22 [ 440.835603][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.894975][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.028830][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.085033][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.149976][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.171249][ T5287] 8021q: adding VLAN 0 to HW filter on device eth23 [ 441.208179][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.343384][ T48] bridge_slave_1: left allmulticast mode [ 441.351241][ T48] bridge_slave_1: left promiscuous mode [ 441.357290][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.367303][ T48] bridge_slave_0: left allmulticast mode [ 441.373126][ T48] bridge_slave_0: left promiscuous mode [ 441.378892][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.395949][ T48] bridge_slave_1: left allmulticast mode [ 441.406050][ T48] bridge_slave_1: left promiscuous mode [ 441.412401][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.421725][ T48] bridge_slave_0: left allmulticast mode [ 441.427451][ T48] bridge_slave_0: left promiscuous mode [ 441.433794][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.550873][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.561714][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.572388][ T48] bond0 (unregistering): Released all slaves [ 441.638262][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.648208][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.657791][ T48] bond0 (unregistering): Released all slaves [ 441.666919][ T5287] 8021q: adding VLAN 0 to HW filter on device eth24 [ 441.996901][ T48] hsr_slave_0: left promiscuous mode [ 442.002974][ T48] hsr_slave_1: left promiscuous mode [ 442.008820][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.016733][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.028737][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.036420][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.048058][ T48] hsr_slave_0: left promiscuous mode [ 442.054300][ T48] hsr_slave_1: left promiscuous mode [ 442.060381][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.067798][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.075535][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.082957][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.095723][ T48] veth1_macvtap: left promiscuous mode [ 442.101279][ T48] veth0_macvtap: left promiscuous mode [ 442.106806][ T48] veth1_vlan: left promiscuous mode [ 442.112201][ T48] veth0_vlan: left promiscuous mode [ 442.118046][ T48] veth1_macvtap: left promiscuous mode [ 442.123578][ T48] veth0_macvtap: left promiscuous mode [ 442.129088][ T48] veth1_vlan: left promiscuous mode [ 442.134477][ T48] veth0_vlan: left promiscuous mode [ 442.254608][ T48] team0 (unregistering): Port device team_slave_1 removed [ 442.271102][ T48] team0 (unregistering): Port device team_slave_0 removed [ 442.363457][ T48] team0 (unregistering): Port device team_slave_1 removed [ 442.374818][ T48] team0 (unregistering): Port device team_slave_0 removed [ 442.439609][ T5287] 8021q: adding VLAN 0 to HW filter on device eth25 [ 442.872844][ T5287] 8021q: adding VLAN 0 to HW filter on device eth26 [ 443.175044][ T5287] 8021q: adding VLAN 0 to HW filter on device eth27 [ 443.439603][ T5287] 8021q: adding VLAN 0 to HW filter on device eth28 [ 443.724167][ T5287] 8021q: adding VLAN 0 to HW filter on device eth29 [ 443.982898][ T5287] 8021q: adding VLAN 0 to HW filter on device eth30 [ 444.279695][ T5287] 8021q: adding VLAN 0 to HW filter on device eth31 [ 444.536114][ T5287] 8021q: adding VLAN 0 to HW filter on device eth32