last executing test programs: 10.527804559s ago: executing program 2 (id=718): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000500)=0x2) (async) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) pread64$auto(r0, &(0x7f0000000480)='l\x02\xd6\xc2_\x13=[xi\x00\x00\xe6\xbe\xe7K$`s\x11\xa7\x90 A\xf7\x00\x00', 0x1000000100000004, 0x8) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) epoll_ctl$auto_EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x9, 0xfffffffffffffb70}) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x20000000000009, 0x3, 0x2c, 0x4, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0x8, 0x7, 0x2, 0x3, 0x5, 0x3, 0x0, 0x8b, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x23, 0x4, 0x300) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) setsockopt$auto_SO_SNDBUF(r1, 0x2, 0x7, 0x0, 0x6) (async) open(0x0, 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) io_uring_setup$auto(0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0x27, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x401, r4, @relative_id=0x13, 0xe600}, 0xf) (async) r8 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/0:0:0:0\x00', 0x4680c0, 0x0) ioctl$auto_SG_EMULATED_HOST(r8, 0x2203, &(0x7f0000000380)="3747c5c35378ca49442e146f595b90e01e272f922acb8a137e6d1119da9f54ef714fb3723a03a26fd47b3b5c3fe4ff753a58a6597e75277ce1576a60633ea058c4a97c506c1093f3f05f3d6581bddaf125b18f371f6f2199edcad1afb9ba8f8fb912a2e7097e56133d4adb19e2d3b12bf9e31a5674a944933d144b0c13b178f22b3b460ade48875e769d3872fe4d3a0b9d4db427d8d23f382c91ada519d077a82d74f3b6a77ad0376b29f9f55bf7c9082e9ef57a7273dfab7dc4cdc1e8edef3d416ce4bd31990a1ad0048924d33a5182a5a22ea726b223de4cd246c48fcda6f3f1d77887a84ba0eed55d2fd885e80a76c806a3014c9338") r9 = bpf$auto(0x2, 0x0, 0xc) sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=r7, @ANYRES32=r7, @ANYRES8=r6], 0x1ac}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) r10 = socket(0x27, 0x5, 0x0) sendmmsg$auto(r10, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 10.269413638s ago: executing program 2 (id=719): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x0, 0x800, 0x200062db) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a", 0xfff}, 0x3) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) 7.810826413s ago: executing program 3 (id=734): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x68502, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x7}, 0x7, &(0x7f0000000280)={&(0x7f0000000380)="099f2d3a12d5bb33f972a9064eece50b6c9e97ddbd88bd34d86f96c8eec6d7b8b5a0a6ac2e8ff9ba6d142d1c4339fff87666e5d0c7dd6bb69933c05f05000aed000000000000de1cc1fa55972525038eb6ce5d229cdbfeb4a8a12b8459f8f21cff8efa02ae132a21fb49b1d7b05f6ec7e8b85ea4cde9f4bf1a3b660226723571305783f7635f2ddb71e0d004c53f3c14", 0x1ffffffff}, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7cc) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x9, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x4, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 6.081930169s ago: executing program 3 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4048800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), 0xffffffffffffffff) 5.67034828s ago: executing program 2 (id=745): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) getsockopt$auto_SO_NO_CHECK(r0, 0x7, 0xb, 0x0, 0x0) getcwd$auto(0x0, 0x3) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x37e, 0x0, 0xf, 0xffffffffffffffff, 0x2, 0x5}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mbind$auto(0x1000, 0xb, 0x3, &(0x7f0000000180)=0xffff, 0x3, 0x3) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_kernel_debug_fops_orangefs_debugfs(r2, &(0x7f0000000640)=""/4096, 0x1000) read$auto_l2cap_debugfs_fops_(r2, 0x0, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r2, 0x4018bc0e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2a}) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) tkill$auto(0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ioctl$auto(r3, 0xfffffff9, 0xffffffffffffffff) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) unshare$auto(0x2) unshare$auto(0x7fffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) write$auto(r4, 0x0, 0x100082) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) 5.64874553s ago: executing program 3 (id=746): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r0 = socket(0x2b, 0x800, 0x76) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r0) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000000500)={{0x2, 0x0, 0xffffffffffffffff, 0x80, 0x38cb, 0x1, 0x1}, 0xe44, 0x7, 0xffffffffffffffff, 0x28, @inferred, @raw=0x1, 0x73c, 0x0, &(0x7f0000000240)="fd683e63025f8b65954c19e3414772f4d09eec96611720ea05094b772e19345731c54b547d0b5aacf1ee3def038114f474fbdf75c55aa8da271d2ca062668777bebd53e4225cf62dbbbc", &(0x7f0000000400)="51abaff804a0f24de290a35755a98bf8d533cf2fc4686c81977b4e151eaca2a08390c94ece0d5166568b3114e6240b337623418575f06448b94a147e196113e435e64841a059a5695d8d39e2beb6668c72a2094a4a78aabb325d01ba9455d8523e05fd4454a70fe85cff8ff410666bd8874ff0c36b7141c0651fe69ed4636fa1278f1d1897cf96ad8db3a668f2b6c8b45314b1c4a51cc8cedd6efb5de0b52659ddd1eaca9710b2bacba6ec555da89dc6d6bfff3b0258376c9539eba6d12f52be4c0b21eed67fe462"}) sendmsg$auto_TIPC_NL_BEARER_ADD(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40030}, 0xd0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r5, 0x0, 0x87ff, 0x5) mmap$auto(0x0, 0x400008, 0x3, 0xffffffff, 0xffffffffffffffff, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r6, 0x8, 0x1) 4.558779853s ago: executing program 3 (id=748): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, 0xffffffffffffffff) 4.189239617s ago: executing program 3 (id=750): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x27, 0x80000, 0x73) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x769700, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x22240, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r2, 0x1, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) write$auto(r0, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) setfsuid$auto(0xee00) cachestat$auto(r4, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700fc00"}, 0x1c) mmap$auto(0x2b04, 0x202000a, 0x403, 0xeb1, 0xfffffffffffffffa, 0x10000000008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) 4.085361616s ago: executing program 1 (id=751): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x68502, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x7}, 0x7, &(0x7f0000000280)={&(0x7f0000000380)="099f2d3a12d5bb33f972a9064eece50b6c9e97ddbd88bd34d86f96c8eec6d7b8b5a0a6ac2e8ff9ba6d142d1c4339fff87666e5d0c7dd6bb69933c05f05000aed000000000000de1cc1fa55972525038eb6ce5d229cdbfeb4a8a12b8459f8f21cff8efa02ae132a21fb49b1d7b05f6ec7e8b85ea4cde9f4bf1a3b660226723571305783f7635f2ddb71e0d004c53f3c14", 0x1ffffffff}, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7cc) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x9, 0x15) listen$auto(r4, 0x3) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x4, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 3.936914934s ago: executing program 0 (id=752): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/conf/macvlan0/proxy_arp\x00', 0x8a042, 0x0) sendfile$auto(r0, r0, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd07, &(0x7f00000001c0)) io_uring_enter$auto(r1, 0xe, 0x2a, 0x7, &(0x7f0000000000)="83331d635d4fc0750463faef3a3760b6e39902e55e9124383b68e0d48b28757b5aa47c5d", 0x3) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0xa0800, 0x0) r3 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)=@test={r2, 0x4, 0x92ed, 0x2, 0x5, 0x4, 0x7c67, 0x0, 0x9, 0x0, 0x9, 0x0, 0x8, 0x82, 0x4}, 0x9) ioctl$auto_FIOCLEX(r3, 0x5451, 0x101) openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404041, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x1fe, 0xd) r5 = socket(0x2a, 0x2, 0x1) connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) ioctl$auto(0xffffffffffffffff, 0x8, 0x1) bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_KSMBD_EVENT_SHUTTING_DOWN(r5, 0x0, 0x20004880) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r5, &(0x7f0000000100)="ad8426d8572f", 0xc, 0x0, 0x8000, 0x0, 0x0}) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) read$auto_fops_u64_ro_(r4, &(0x7f0000000380)=""/195, 0xc3) 3.908663585s ago: executing program 3 (id=753): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x0, 0x800, 0x200062db) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a", 0xfff}, 0x3) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) 3.004396565s ago: executing program 0 (id=754): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x22003, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) socket(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) 2.858670931s ago: executing program 0 (id=755): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000080) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe2702, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x2}]}) semctl$auto(0x8, 0x806, 0x13, 0x46) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xc6c43, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/pages_2m\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3ff, 0x5, 0x10, 0x2, 0x8002) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a502, 0x0) 2.834636213s ago: executing program 1 (id=756): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/65, 0x41) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x15, 0x10d, "8223d208b7dd3463a3a936688073d724bb"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r6, 0x0, 0x1) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r7, r8, 0x0, 0x2) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "fb7d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040004) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r3, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) ioctl$auto_HPET_DPI(0xffffffffffffffff, 0x6805, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000500)={0x0, 0x0, "a68a78cddb9af7ac4c80865002a0d2e3", '\x00', "04622c3aac2504ff5de7b81eefde747e7674da7f6154e6bcf81ec7dadaa3b485", "12f251f2492bb43c598ef0237d522cb86954c0763131c2f67eaa6356799443a9576c948fc3fb995daec2f1fc9170a7000000004f04809f3ca99cb9b4e9d3abb67d33f3d3fe57d0289938f4ce01d60bfd", "e9e7f824968ee78f73dc2749d12c7e05", "402beaf8e2dfaba5303a6efa74256963183267b80c0b5a1f09a2c919b4c43dc3817ea4719a3e48cdb8c3e9873ecfe260f627c94bc35f96d61597d52c380a5c79e1dfa060cdb00680f9562c947ed257fd", "5c84948d2c357792b0c4be9a3a15ecfee836d93ae475d2bc8193e8ac53c0494bf16e9a6d85fa65416177e39fac9de9d4869f6e9602c6f01a500ba2ba3d5fef158c908f502afdfe316cf3ac63f1f4842ec3c180d103084776592ff9e4a66125f8f285cabc67891f381c9bcc345f41ee4f2d7f4bffb05d58b0377a76a50de67bb8"}) 2.631745247s ago: executing program 2 (id=757): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r0 = socket(0x2b, 0x800, 0x76) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r0) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000000500)={{0x2, 0x0, 0xffffffffffffffff, 0x80, 0x38cb, 0x1, 0x1}, 0xe44, 0x7, 0xffffffffffffffff, 0x28, @inferred, @raw=0x1, 0x73c, 0x0, &(0x7f0000000240)="fd683e63025f8b65954c19e3414772f4d09eec96611720ea05094b772e19345731c54b547d0b5aacf1ee3def038114f474fbdf75c55aa8da271d2ca062668777bebd53e4225cf62dbbbc", &(0x7f0000000400)="51abaff804a0f24de290a35755a98bf8d533cf2fc4686c81977b4e151eaca2a08390c94ece0d5166568b3114e6240b337623418575f06448b94a147e196113e435e64841a059a5695d8d39e2beb6668c72a2094a4a78aabb325d01ba9455d8523e05fd4454a70fe85cff8ff410666bd8874ff0c36b7141c0651fe69ed4636fa1278f1d1897cf96ad8db3a668f2b6c8b45314b1c4a51cc8cedd6efb5de0b52659ddd1eaca9710b2bacba6ec555da89dc6d6bfff3b0258376c9539eba6d12f52be4c0b21eed67fe462"}) sendmsg$auto_TIPC_NL_BEARER_ADD(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0, 0x18c}, 0x1, 0x0, 0x0, 0x40030}, 0xd0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r5, 0x0, 0x87ff, 0x5) mmap$auto(0x0, 0x400008, 0x3, 0xffffffff, 0xffffffffffffffff, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r6, 0x8, 0x1) 2.512038643s ago: executing program 1 (id=758): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x22003, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) socket(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) (fail_nth: 1) 2.341023575s ago: executing program 1 (id=759): nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x22003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) setsockopt$auto(0x4, 0x88, 0x68, &(0x7f0000000000)='!/*\x19(*\'\x00', 0xe) setsockopt$auto(0x4, 0x88, 0x68, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) socket(0x2b, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x5, r1, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, r2, 0x9, 0x7, 0x6, 0xfffffffffffffff3, r2, r2}, 0x7ff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xcc, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_AUTH_DATA={0xa8, 0x9c, "a27bb0f79d6a00d5e465cfaaedb869b6049966b81b079313ac1b518d7bc22a9c5d7764d9555730f15c813fe2fb96244baaf309bd834bd09efa555b62e4875aaf77fc7dac102a91bdc4430dd3dde401c51a40b96b088f04a9453757132e9303ee4c1d0a6e74e4895c90cf53717b3d190116e5d320a8358a69505a39d57de2c98f48aad6c1077c8a8258f8072038f37cd4f86d979cd77359c47b87aae7a911e906f334e32c"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40004}, 0x24008004) 1.902867515s ago: executing program 0 (id=760): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x86200, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"57f475c61457e99f769f5235b668e09caf9941b9b26b2fb80cf70643d6ff9594", 0x3ff, 0x23, 0xc130, 0xd5e9, 0x401}) r1 = socket(0xa, 0x1, 0x84) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0xe0801, 0x0) ioctl$auto_SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000001c0)="e2d12d93b7195a5134fc98b539a9b970d30af5972526e02fd3f264d6c46c78a626623405c3b8287229ef7e9f7c2706ee5db29993c2097d5c39276719f9b0ce777a7091d7d75f7c70662d3367b5107a716f8f4d9ab67dcbbed7fce24df3222d28a118af59bf1abc3a45b24f481655ecda6aa60b010aa8d9b76aebfb9d0a9d26904620f2f0878dd1") r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x5b57}, 0x40000000101, &(0x7f0000000180)={&(0x7f0000000280)="14d0e12d7db48ab1bcb67c0062ea22368fa5be6ed02330372ef040a1aa45482c1447dd6bb06538d42707e4196e36", 0x7c}, 0x0, 0x100000400000000) setsockopt$auto(r1, 0x0, 0x60, 0x0, 0x6f7250c4) acct$auto(&(0x7f0000002380)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00') 1.760871518s ago: executing program 0 (id=761): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) memfd_secret$auto(0x6) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) (fail_nth: 10) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f0000000080)=""/71, 0x47) 1.440192328s ago: executing program 2 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x40000) (fail_nth: 9) 1.396552744s ago: executing program 1 (id=763): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/conf/macvlan0/proxy_arp\x00', 0x8a042, 0x0) sendfile$auto(r0, r0, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd07, &(0x7f00000001c0)) io_uring_enter$auto(r1, 0xe, 0x2a, 0x7, &(0x7f0000000000)="83331d635d4fc0750463faef3a3760b6e39902e55e9124383b68e0d48b28757b5aa47c5d", 0x3) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0xa0800, 0x0) r3 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)=@test={r2, 0x4, 0x92ed, 0x2, 0x5, 0x4, 0x7c67, 0x0, 0x9, 0x0, 0x9, 0x0, 0x8, 0x82, 0x4}, 0x9) ioctl$auto_FIOCLEX(r3, 0x5451, 0x101) openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404041, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x1fe, 0xd) r5 = socket(0x2a, 0x2, 0x1) connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) ioctl$auto(0xffffffffffffffff, 0x8, 0x1) bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_KSMBD_EVENT_SHUTTING_DOWN(r5, 0x0, 0x20004880) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r5, &(0x7f0000000100)="ad8426d8572f", 0xc, 0x0, 0x8000, 0x0, 0x0}) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) read$auto_fops_u64_ro_(r4, &(0x7f0000000380)=""/195, 0xc3) 320.915888ms ago: executing program 0 (id=764): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x68502, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x7}, 0x7, &(0x7f0000000280)={&(0x7f0000000380)="099f2d3a12d5bb33f972a9064eece50b6c9e97ddbd88bd34d86f96c8eec6d7b8b5a0a6ac2e8ff9ba6d142d1c4339fff87666e5d0c7dd6bb69933c05f05000aed000000000000de1cc1fa55972525038eb6ce5d229cdbfeb4a8a12b8459f8f21cff8efa02ae132a21fb49b1d7b05f6ec7e8b85ea4cde9f4bf1a3b660226723571305783f7635f2ddb71e0d004c53f3c14", 0x1ffffffff}, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7cc) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x9, 0x15) listen$auto(r4, 0x3) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x4, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 64.46389ms ago: executing program 1 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/sw\x00', 0x0, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtd\x00', 0x80842, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000280)=""/144, 0x90) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001600)=""/4098, 0x1002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{0x0, 0x19, 0x0, 0x0, 0x0, 0x2, 0x80008003}, 0x8}, 0x5, 0x1c) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000140)=@ax25={0x3, @bcast}, 0x7) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, 0x0) mmap$auto(0x0, 0x7, 0x8, 0x1c, 0x40000000000a5, 0x8000) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r7, 0x0, 0x100000001, 0x100) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x2}, @ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x810) 0s ago: executing program 2 (id=766): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) getsockopt$auto_SO_NO_CHECK(r0, 0x7, 0xb, 0x0, 0x0) getcwd$auto(0x0, 0x3) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x37e, 0x0, 0xf, 0xffffffffffffffff, 0x2, 0x5}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mbind$auto(0x1000, 0xb, 0x3, &(0x7f0000000180)=0xffff, 0x3, 0x3) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_kernel_debug_fops_orangefs_debugfs(r2, &(0x7f0000000640)=""/4096, 0x1000) read$auto_l2cap_debugfs_fops_(r2, 0x0, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r2, 0x4018bc0e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2a}) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) tkill$auto(0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ioctl$auto(r3, 0xfffffff9, 0xffffffffffffffff) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) unshare$auto(0x2) unshare$auto(0x7fffffff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0xffffffffffffffff, 0x0, 0x100082) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) kernel console output (not intermixed with test programs): +0x512/0x640 [ 125.479191][ T6545] get_futex_key+0x1d0/0x15f0 [ 125.479229][ T6545] ? __pfx_get_futex_key+0x10/0x10 [ 125.479258][ T6545] ? find_held_lock+0x2b/0x80 [ 125.479305][ T6545] futex_wake+0xea/0x530 [ 125.479354][ T6545] ? __pfx_futex_wake+0x10/0x10 [ 125.479395][ T6545] ? __lock_acquire+0x433/0x22f0 [ 125.479430][ T6545] do_futex+0x1e3/0x350 [ 125.479461][ T6545] ? __pfx_do_futex+0x10/0x10 [ 125.479492][ T6545] ? find_held_lock+0x2b/0x80 [ 125.479531][ T6545] __x64_sys_futex+0x1e0/0x4c0 [ 125.479566][ T6545] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.479598][ T6545] ? xfd_validate_state+0x61/0x180 [ 125.479634][ T6545] do_syscall_64+0xcd/0xf80 [ 125.479660][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.479684][ T6545] RIP: 0033:0x7f926478f7c9 [ 125.479705][ T6545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.479728][ T6545] RSP: 002b:00007f92656d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.479754][ T6545] RAX: ffffffffffffffda RBX: 00007f92649e5fa8 RCX: 00007f926478f7c9 [ 125.479770][ T6545] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f92649e5fac [ 125.479784][ T6545] RBP: 00007f92649e5fa0 R08: 00007f92656d3000 R09: 0000000000000000 [ 125.479799][ T6545] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.479813][ T6545] R13: 00007f92649e6038 R14: 00007fff01f3d490 R15: 00007fff01f3d578 [ 125.479846][ T6545] [ 126.614178][ T6555] random: crng reseeded on system resumption [ 128.177850][ T6578] Invalid ELF header magic: != ELF [ 128.907992][ T6589] ACPI: Can not change Invalid GPE/Fixed Event status [ 129.477255][ T6603] random: crng reseeded on system resumption [ 129.664577][ T6612] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 130.201055][ T6632] Invalid ELF header magic: != ELF [ 130.284252][ T6616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 131.702931][ T6658] Invalid ELF header magic: != ELF [ 131.964233][ T6664] random: crng reseeded on system resumption [ 132.484457][ T6678] futex_wake_op: syz.0.186 tries to shift op by -1; fix this program [ 132.702684][ T6687] FAULT_INJECTION: forcing a failure. [ 132.702684][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 132.730434][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.1.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.730479][ T6687] Tainted: [L]=SOFTLOCKUP [ 132.730488][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.730503][ T6687] Call Trace: [ 132.730512][ T6687] [ 132.730522][ T6687] dump_stack_lvl+0x16c/0x1f0 [ 132.730553][ T6687] should_fail_ex+0x512/0x640 [ 132.730583][ T6687] ? kmem_cache_alloc_noprof+0x62/0x760 [ 132.730626][ T6687] should_failslab+0xc2/0x120 [ 132.730655][ T6687] kmem_cache_alloc_noprof+0x75/0x760 [ 132.730690][ T6687] ? prepare_creds+0x2c/0x740 [ 132.730729][ T6687] ? prepare_creds+0x2c/0x740 [ 132.730759][ T6687] prepare_creds+0x2c/0x740 [ 132.730795][ T6687] __sys_setresuid+0x46d/0x1160 [ 132.730839][ T6687] do_syscall_64+0xcd/0xf80 [ 132.730868][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.730903][ T6687] RIP: 0033:0x7f9f6c98f7c9 [ 132.730924][ T6687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.730949][ T6687] RSP: 002b:00007f9f6d865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 132.730974][ T6687] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c98f7c9 [ 132.730991][ T6687] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 132.731007][ T6687] RBP: 00007f9f6ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.731022][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.731036][ T6687] R13: 00007f9f6cbe6038 R14: 00007f9f6cbe5fa0 R15: 00007ffefc0d4508 [ 132.731073][ T6687] [ 133.118448][ T6693] Invalid ELF header magic: != ELF [ 134.741951][ T6725] Invalid ELF header magic: != ELF [ 134.883570][ T6732] futex_wake_op: syz.3.201 tries to shift op by -1; fix this program [ 134.931401][ T6734] Invalid ELF header magic: != ELF [ 135.074716][ T6742] random: crng reseeded on system resumption [ 135.950496][ T6765] capability: warning: `syz.3.210' uses 32-bit capabilities (legacy support in use) [ 136.470077][ T6779] netlink: 334 bytes leftover after parsing attributes in process `syz.3.215'. [ 136.691620][ T6782] random: crng reseeded on system resumption [ 137.224479][ T6795] futex_wake_op: syz.2.219 tries to shift op by -1; fix this program [ 138.051412][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.057894][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.180181][ T6797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.318226][ T6797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.348234][ T6797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.426687][ T6797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.403680][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.190826][ T6837] random: crng reseeded on system resumption [ 140.220549][ T6839] netlink: 334 bytes leftover after parsing attributes in process `syz.0.229'. [ 140.366827][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.366831][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.439911][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.084320][ T6886] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 143.591922][ T6888] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 143.683110][ T6898] Invalid ELF header magic: != ELF [ 144.649236][ T6907] FAULT_INJECTION: forcing a failure. [ 144.649236][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 144.792273][ T6907] CPU: 0 UID: 0 PID: 6907 Comm: syz.0.248 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.792298][ T6907] Tainted: [L]=SOFTLOCKUP [ 144.792302][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.792310][ T6907] Call Trace: [ 144.792315][ T6907] [ 144.792320][ T6907] dump_stack_lvl+0x16c/0x1f0 [ 144.792341][ T6907] should_fail_ex+0x512/0x640 [ 144.792356][ T6907] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 144.792379][ T6907] should_failslab+0xc2/0x120 [ 144.792395][ T6907] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 144.792414][ T6907] ? __alloc_skb+0x156/0x410 [ 144.792433][ T6907] ? __alloc_skb+0x156/0x410 [ 144.792446][ T6907] __alloc_skb+0x156/0x410 [ 144.792459][ T6907] ? __alloc_skb+0x35d/0x410 [ 144.792473][ T6907] ? __pfx___alloc_skb+0x10/0x10 [ 144.792488][ T6907] ? genl_rcv_msg+0x460/0x800 [ 144.792501][ T6907] ? genl_rcv_msg+0x4bb/0x800 [ 144.792519][ T6907] netlink_ack+0x15d/0xb80 [ 144.792544][ T6907] netlink_rcv_skb+0x332/0x420 [ 144.792564][ T6907] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.792579][ T6907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.792607][ T6907] ? netlink_deliver_tap+0x1ae/0xd30 [ 144.792629][ T6907] genl_rcv+0x28/0x40 [ 144.792640][ T6907] netlink_unicast+0x5aa/0x870 [ 144.792663][ T6907] ? __pfx_netlink_unicast+0x10/0x10 [ 144.792690][ T6907] netlink_sendmsg+0x8c8/0xdd0 [ 144.792713][ T6907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.792740][ T6907] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 144.792765][ T6907] ____sys_sendmsg+0xa5d/0xc30 [ 144.792787][ T6907] ? copy_msghdr_from_user+0x10a/0x160 [ 144.792804][ T6907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.792822][ T6907] ? __lock_acquire+0x433/0x22f0 [ 144.792847][ T6907] ___sys_sendmsg+0x134/0x1d0 [ 144.792865][ T6907] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.792881][ T6907] ? __lock_acquire+0x433/0x22f0 [ 144.792918][ T6907] __sys_sendmsg+0x16d/0x220 [ 144.792935][ T6907] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.792964][ T6907] do_syscall_64+0xcd/0xf80 [ 144.792981][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.792995][ T6907] RIP: 0033:0x7f24bf78f7c9 [ 144.793011][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.793030][ T6907] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.793051][ T6907] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 144.793065][ T6907] RDX: 0000000000040000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 144.793078][ T6907] RBP: 00007f24c06b6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.793091][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.793104][ T6907] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 144.793127][ T6907] [ 146.548086][ T6918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.554480][ T6918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.568486][ T6918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.600375][ T6918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.025599][ T6945] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input10 [ 148.049034][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.600955][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.607169][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.679826][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.777661][ T6972] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 149.039493][ T6962] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.084704][ T6962] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.136386][ T6962] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.160239][ T6962] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.597401][ T6973] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 150.528955][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.164473][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.164481][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.240536][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.332058][ T7008] futex_wake_op: syz.2.272 tries to shift op by -2048; fix this program [ 151.379164][ T7008] futex_wake_op: syz.2.272 tries to shift op by -2048; fix this program [ 152.954304][ T7014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.986404][ T7014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.004285][ T7014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.029359][ T7014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.200447][ T7029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.214464][ T7051] FAULT_INJECTION: forcing a failure. [ 154.214464][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 154.214495][ T7051] CPU: 1 UID: 0 PID: 7051 Comm: syz.2.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.214515][ T7051] Tainted: [L]=SOFTLOCKUP [ 154.214520][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.214528][ T7051] Call Trace: [ 154.214533][ T7051] [ 154.214539][ T7051] dump_stack_lvl+0x16c/0x1f0 [ 154.214559][ T7051] should_fail_ex+0x512/0x640 [ 154.214579][ T7051] should_failslab+0xc2/0x120 [ 154.214604][ T7051] __kmalloc_cache_noprof+0x72/0x800 [ 154.214623][ T7051] ? __task_pid_nr_ns+0x1f5/0x500 [ 154.214639][ T7051] ? proc_thread_self_get_link+0x1c6/0x240 [ 154.214665][ T7051] ? proc_thread_self_get_link+0x1c6/0x240 [ 154.214685][ T7051] proc_thread_self_get_link+0x1c6/0x240 [ 154.214707][ T7051] pick_link+0xb09/0x13b0 [ 154.214729][ T7051] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 154.214756][ T7051] step_into_slowpath+0x6c6/0xf50 [ 154.214782][ T7051] ? __pfx_step_into_slowpath+0x10/0x10 [ 154.214806][ T7051] ? lookup_fast+0x156/0x610 [ 154.214825][ T7051] ? inode_permission+0x37b/0x640 [ 154.214849][ T7051] link_path_walk+0xd26/0x1c70 [ 154.214869][ T7051] path_openat+0x1bd/0x3140 [ 154.214883][ T7051] ? do_syscall_64+0xcd/0xf80 [ 154.214897][ T7051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.214917][ T7051] ? __pfx_path_openat+0x10/0x10 [ 154.214939][ T7051] do_filp_open+0x20b/0x470 [ 154.214955][ T7051] ? __pfx_do_filp_open+0x10/0x10 [ 154.214984][ T7051] ? alloc_fd+0x471/0x7d0 [ 154.215004][ T7051] do_sys_openat2+0x11f/0x280 [ 154.215023][ T7051] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.215050][ T7051] __x64_sys_openat+0x174/0x210 [ 154.215069][ T7051] ? __pfx___x64_sys_openat+0x10/0x10 [ 154.215096][ T7051] do_syscall_64+0xcd/0xf80 [ 154.215111][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.215124][ T7051] RIP: 0033:0x7f7833b8f7c9 [ 154.215136][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.215149][ T7051] RSP: 002b:00007f7834b00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.215162][ T7051] RAX: ffffffffffffffda RBX: 00007f7833de5fa0 RCX: 00007f7833b8f7c9 [ 154.215172][ T7051] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 154.215180][ T7051] RBP: 00007f7833c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 154.215188][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.215196][ T7051] R13: 00007f7833de6038 R14: 00007f7833de5fa0 R15: 00007ffe5e3a7c68 [ 154.215216][ T7051] [ 154.280742][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.817656][ T7062] futex_wake_op: syz.3.285 tries to shift op by -2048; fix this program [ 154.817808][ T7062] futex_wake_op: syz.3.285 tries to shift op by -2048; fix this program [ 155.000088][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.079486][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.079541][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.003984][ T5907] smpboot: CPU 1 is now offline [ 156.634523][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 157.293247][ T7105] zswap: compressor -Ž not available [ 157.504541][ T7100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.504773][ T7100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.504910][ T7100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.505039][ T7100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.839623][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.229372][ T7155] FAULT_INJECTION: forcing a failure. [ 159.229372][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.229400][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.0.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.229418][ T7155] Tainted: [L]=SOFTLOCKUP [ 159.229423][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.229431][ T7155] Call Trace: [ 159.229435][ T7155] [ 159.229440][ T7155] dump_stack_lvl+0x16c/0x1f0 [ 159.229459][ T7155] should_fail_ex+0x512/0x640 [ 159.229478][ T7155] _copy_from_user+0x2e/0xd0 [ 159.229494][ T7155] do_pages_stat+0x240/0x7b0 [ 159.229517][ T7155] ? __pfx_do_pages_stat+0x10/0x10 [ 159.229536][ T7155] ? __lock_acquire+0x433/0x22f0 [ 159.229565][ T7155] ? do_raw_spin_unlock+0x172/0x230 [ 159.229587][ T7155] kernel_move_pages+0xfc8/0x12f0 [ 159.229609][ T7155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.229626][ T7155] ? __pfx_kernel_move_pages+0x10/0x10 [ 159.229644][ T7155] ? __fget_files+0x20e/0x3c0 [ 159.229662][ T7155] ? fput+0x70/0xf0 [ 159.229678][ T7155] ? ksys_write+0x1ac/0x250 [ 159.229692][ T7155] ? __pfx_ksys_write+0x10/0x10 [ 159.229708][ T7155] __x64_sys_move_pages+0xe0/0x1c0 [ 159.229725][ T7155] ? do_syscall_64+0x91/0xf80 [ 159.229738][ T7155] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.229752][ T7155] do_syscall_64+0xcd/0xf80 [ 159.229767][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.229781][ T7155] RIP: 0033:0x7f24bf78f7c9 [ 159.229792][ T7155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.229804][ T7155] RSP: 002b:00007f24c0653038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 159.229817][ T7155] RAX: ffffffffffffffda RBX: 00007f24bf9e6270 RCX: 00007f24bf78f7c9 [ 159.229826][ T7155] RDX: 0000000000000000 RSI: 0000000000020007 RDI: 0000000000000001 [ 159.229834][ T7155] RBP: 00007f24c0653090 R08: 0000000000000000 R09: 8000000000000000 [ 159.229842][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.229849][ T7155] R13: 00007f24bf9e6308 R14: 00007f24bf9e6270 R15: 00007ffc768a0f98 [ 159.229867][ T7155] [ 159.339942][ T30] audit: type=1800 audit(1765001658.709:4): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="dbroot" dev="configfs" ino=13771 res=0 errno=0 [ 159.560135][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.560175][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.560199][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.281053][ T7156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.281303][ T7156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.281405][ T7156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.281497][ T7156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.163984][ T7160] tty tty12: ldisc open failed (-12), clearing slot 11 [ 161.399086][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.487839][ T7177] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.507879][ T7177] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.531884][ T7177] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.550469][ T7177] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.479385][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.559039][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.559079][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.559104][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.892020][ T7235] binder: 7234:7235 ioctl 4 ffffffffffffffff returned -22 [ 166.880368][ T7260] usbcore.quirks: string doesn't fit in 127 chars. [ 166.938199][ T7259] FAULT_INJECTION: forcing a failure. [ 166.938199][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 166.938260][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.0.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.938289][ T7259] Tainted: [L]=SOFTLOCKUP [ 166.938293][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.938302][ T7259] Call Trace: [ 166.938307][ T7259] [ 166.938313][ T7259] dump_stack_lvl+0x16c/0x1f0 [ 166.938332][ T7259] should_fail_ex+0x512/0x640 [ 166.938349][ T7259] ? __kmalloc_noprof+0xca/0x8f0 [ 166.938370][ T7259] should_failslab+0xc2/0x120 [ 166.938387][ T7259] __kmalloc_noprof+0xdd/0x8f0 [ 166.938405][ T7259] ? lsm_blob_alloc+0x68/0x90 [ 166.938428][ T7259] ? lsm_blob_alloc+0x68/0x90 [ 166.938445][ T7259] lsm_blob_alloc+0x68/0x90 [ 166.938464][ T7259] security_sk_alloc+0x2f/0x270 [ 166.938479][ T7259] sk_prot_alloc+0xfb/0x2a0 [ 166.938501][ T7259] sk_alloc+0x36/0xc20 [ 166.938518][ T7259] inet6_create+0x381/0x12b0 [ 166.938533][ T7259] ? inet6_create+0x7f/0x12b0 [ 166.938547][ T7259] __sock_create+0x339/0x8a0 [ 166.938563][ T7259] inet_ctl_sock_create+0x94/0x230 [ 166.938581][ T7259] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 166.938597][ T7259] ? ndisc_net_init+0x1bc/0x250 [ 166.938613][ T7259] ? __pfx_ndisc_net_init+0x10/0x10 [ 166.938631][ T7259] igmp6_net_init+0x1b2/0x470 [ 166.938648][ T7259] ? __pfx_igmp6_net_init+0x10/0x10 [ 166.938663][ T7259] ops_init+0x1e2/0x5f0 [ 166.938684][ T7259] setup_net+0x11d/0x3a0 [ 166.938702][ T7259] ? __pfx_setup_net+0x10/0x10 [ 166.938722][ T7259] ? lockdep_init_map_type+0x5c/0x270 [ 166.938740][ T7259] ? mutex_init_lockep+0x110/0x150 [ 166.938759][ T7259] copy_net_ns+0x351/0x5d0 [ 166.938781][ T7259] create_new_namespaces+0x3ea/0xab0 [ 166.938808][ T7259] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 166.938830][ T7259] ksys_unshare+0x45b/0xa40 [ 166.938845][ T7259] ? __pfx_ksys_unshare+0x10/0x10 [ 166.938860][ T7259] ? xfd_validate_state+0x61/0x180 [ 166.938879][ T7259] __x64_sys_unshare+0x31/0x40 [ 166.938893][ T7259] do_syscall_64+0xcd/0xf80 [ 166.938909][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.938922][ T7259] RIP: 0033:0x7f24bf78f7c9 [ 166.938934][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.938947][ T7259] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 166.938960][ T7259] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 166.938969][ T7259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 166.938977][ T7259] RBP: 00007f24bf813f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.938985][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.938993][ T7259] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 166.939013][ T7259] [ 166.959673][ T7259] Failed to initialize the IGMP6 autojoin socket (err -105) [ 167.367044][ T7254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.367602][ T7254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.373880][ T7254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.374063][ T7254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.166642][ T7274] [U]  [ 168.166672][ T7274] [U] [ 168.166695][ T7274] [U] [ 168.166718][ T7274] [U] [ 168.166819][ T7274] [U] [ 168.166842][ T7274] [U] [ 168.166864][ T7274] [U] [ 168.166887][ T7274] [U] [ 168.167062][ T7274] [U] [ 168.167087][ T7274] [U] [ 168.167110][ T7274] [U] [ 168.167134][ T7274] [U] [ 168.167241][ T7274] [U] [ 168.167264][ T7274] [U] [ 168.167287][ T7274] [U] [ 168.167313][ T7274] [U] [ 168.167473][ T7274] [U] [ 168.167498][ T7274] [U] [ 168.167521][ T7274] [U] [ 168.167544][ T7274] [U] [ 168.167642][ T7274] [U] [ 168.167664][ T7274] [U] [ 168.167686][ T7274] [U] [ 168.167708][ T7274] [U] [ 168.167845][ T7274] [U] [ 168.167868][ T7274] [U] [ 168.167892][ T7274] [U] [ 168.167914][ T7274] [U] [ 168.168011][ T7274] [U] [ 168.168033][ T7274] [U] [ 168.168056][ T7274] [U] [ 168.168078][ T7274] [U] [ 168.168223][ T7274] [U] [ 168.168248][ T7274] [U] [ 168.168272][ T7274] [U] [ 168.168295][ T7274] [U] [ 168.168394][ T7274] [U] [ 168.168417][ T7274] [U] [ 168.168439][ T7274] [U] [ 168.168461][ T7274] [U] [ 168.168598][ T7274] [U] [ 168.168621][ T7274] [U] [ 168.168644][ T7274] [U] [ 168.168665][ T7274] [U] [ 168.168762][ T7274] [U] [ 168.168784][ T7274] [U] [ 168.168810][ T7274] [U] [ 168.168832][ T7274] [U] [ 168.191618][ T7274] [U] [ 168.191647][ T7274] [U] [ 168.191669][ T7274] [U] [ 168.191692][ T7274] [U] [ 168.191793][ T7274] [U] [ 168.191816][ T7274] [U] [ 168.191845][ T7274] [U] [ 168.191869][ T7274] [U] [ 168.192015][ T7274] [U] [ 168.192040][ T7274] [U] [ 168.192063][ T7274] [U] [ 168.192087][ T7274] [U] [ 168.192193][ T7274] [U] [ 168.192218][ T7274] [U] [ 168.192240][ T7274] [U] [ 168.192264][ T7274] [U] [ 168.192408][ T7274] [U] [ 168.192433][ T7274] [U] [ 168.192455][ T7274] [U] [ 168.192479][ T7274] [U] [ 168.192577][ T7274] [U] [ 168.192600][ T7274] [U] [ 168.192622][ T7274] [U] [ 168.192644][ T7274] [U] [ 168.192784][ T7274] [U] [ 168.192807][ T7274] [U] [ 168.192829][ T7274] [U] [ 168.192851][ T7274] [U] [ 168.192948][ T7274] [U] [ 168.192970][ T7274] [U] [ 168.192993][ T7274] [U] [ 168.193015][ T7274] [U] [ 168.193183][ T7274] [U] [ 168.193208][ T7274] [U] [ 168.193232][ T7274] [U] [ 168.193254][ T7274] [U] [ 168.193354][ T7274] [U] [ 168.193377][ T7274] [U] [ 168.193400][ T7274] [U] [ 168.193422][ T7274] [U] [ 168.193565][ T7274] [U] [ 168.193589][ T7274] [U] [ 168.193612][ T7274] [U] [ 168.193635][ T7274] [U] [ 168.193733][ T7274] [U] [ 168.193755][ T7274] [U] [ 168.193778][ T7274] [U] [ 168.193800][ T7274] [U] [ 168.193942][ T7274] [U] [ 168.193965][ T7274] [U] [ 168.193987][ T7274] [U] [ 168.194010][ T7274] [U] [ 168.194119][ T7274] [U] [ 168.194142][ T7274] [U] [ 168.194164][ T7274] [U] [ 168.194193][ T7274] [U] [ 168.208977][ T7274] [U] [ 168.209006][ T7274] [U] [ 168.209029][ T7274] [U] [ 168.209053][ T7274] [U] [ 168.209154][ T7274] [U] [ 168.209183][ T7274] [U] [ 168.209207][ T7274] [U] [ 168.209230][ T7274] [U] [ 168.209408][ T7274] [U] [ 168.209432][ T7274] [U] [ 168.209455][ T7274] [U] [ 168.209477][ T7274] [U] [ 168.209577][ T7274] [U] [ 168.209600][ T7274] [U] [ 168.209623][ T7274] [U] [ 168.209645][ T7274] [U] [ 168.209795][ T7274] [U] [ 168.209819][ T7274] [U] [ 168.209841][ T7274] [U] [ 168.209864][ T7274] [U] [ 168.209950][ T7274] [U] [ 168.209974][ T7274] [U] [ 168.209996][ T7274] [U] [ 168.333343][ T7271] [U] [ 168.689393][ T7273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.689665][ T7273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.689773][ T7273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.689866][ T7273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.310079][ T7310] bond0: invalid ARP target specified [ 169.799122][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.758978][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.759018][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.759044][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.919614][ T7327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.926403][ T7327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.934798][ T7327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.947547][ T7327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.323291][ T7345] [U]  [ 171.326108][ T7345] [U] [ 171.328793][ T7345] [U] [ 171.331468][ T7345] [U] [ 171.372067][ T7345] [U] [ 171.374791][ T7345] [U] [ 171.377464][ T7345] [U] [ 171.380135][ T7345] [U] [ 171.392670][ T7356] FAULT_INJECTION: forcing a failure. [ 171.392670][ T7356] name failslab, interval 1, probability 0, space 0, times 0 [ 171.422406][ T7345] [U] [ 171.425131][ T7345] [U] [ 171.427805][ T7345] [U] [ 171.430497][ T7345] [U] [ 171.440280][ T7356] CPU: 0 UID: 0 PID: 7356 Comm: syz.2.344 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.440307][ T7356] Tainted: [L]=SOFTLOCKUP [ 171.440313][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.440321][ T7356] Call Trace: [ 171.440327][ T7356] [ 171.440333][ T7356] dump_stack_lvl+0x16c/0x1f0 [ 171.440353][ T7356] should_fail_ex+0x512/0x640 [ 171.440370][ T7356] ? kmem_cache_alloc_noprof+0x62/0x760 [ 171.440394][ T7356] should_failslab+0xc2/0x120 [ 171.440411][ T7356] kmem_cache_alloc_noprof+0x75/0x760 [ 171.440430][ T7356] ? __proc_create+0x2c8/0x8d0 [ 171.440447][ T7356] ? __proc_create+0x2c8/0x8d0 [ 171.440459][ T7356] __proc_create+0x2c8/0x8d0 [ 171.440473][ T7356] ? __pfx___proc_create+0x10/0x10 [ 171.440489][ T7356] ? _raw_write_unlock+0x28/0x50 [ 171.440503][ T7356] ? proc_register+0x559/0x8b0 [ 171.440519][ T7356] proc_create_reg+0x7d/0x180 [ 171.440534][ T7356] ? __pfx_snmp6_seq_show+0x10/0x10 [ 171.440549][ T7356] proc_create_net_single+0x86/0x180 [ 171.440565][ T7356] ? __pfx_proc_create_net_single+0x10/0x10 [ 171.440581][ T7356] ? __pfx_ndisc_net_init+0x10/0x10 [ 171.440599][ T7356] ? __pfx_ipv6_proc_init_net+0x10/0x10 [ 171.440613][ T7356] ipv6_proc_init_net+0xa1/0x1e0 [ 171.440628][ T7356] ops_init+0x1e2/0x5f0 [ 171.440650][ T7356] setup_net+0x11d/0x3a0 [ 171.440668][ T7356] ? __pfx_setup_net+0x10/0x10 [ 171.440685][ T7356] ? lockdep_init_map_type+0x5c/0x270 [ 171.440703][ T7356] ? mutex_init_lockep+0x110/0x150 [ 171.440722][ T7356] copy_net_ns+0x351/0x5d0 [ 171.440744][ T7356] create_new_namespaces+0x3ea/0xab0 [ 171.440769][ T7356] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 171.440792][ T7356] ksys_unshare+0x45b/0xa40 [ 171.440807][ T7356] ? __pfx_ksys_unshare+0x10/0x10 [ 171.440822][ T7356] ? xfd_validate_state+0x61/0x180 [ 171.440841][ T7356] __x64_sys_unshare+0x31/0x40 [ 171.440855][ T7356] do_syscall_64+0xcd/0xf80 [ 171.440871][ T7356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.440885][ T7356] RIP: 0033:0x7f7833b8f7c9 [ 171.440896][ T7356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.440910][ T7356] RSP: 002b:00007f7834b00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.440924][ T7356] RAX: ffffffffffffffda RBX: 00007f7833de5fa0 RCX: 00007f7833b8f7c9 [ 171.440933][ T7356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 171.440949][ T7356] RBP: 00007f7833c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.440957][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.440966][ T7356] R13: 00007f7833de6038 R14: 00007f7833de5fa0 R15: 00007ffe5e3a7c68 [ 171.440986][ T7356] [ 171.782490][ T7345] [U] [ 171.785297][ T7345] [U] [ 171.787992][ T7345] [U] [ 171.790672][ T7345] [U] [ 171.793674][ T7345] [U] [ 171.796373][ T7345] [U] [ 171.799043][ T7345] [U] [ 171.801715][ T7345] [U] [ 171.804672][ T7345] [U] [ 171.807349][ T7345] [U] [ 171.810052][ T7345] [U] [ 171.812722][ T7345] [U] [ 171.815706][ T7345] [U] [ 171.818387][ T7345] [U] [ 171.821060][ T7345] [U] [ 171.823730][ T7345] [U] [ 171.826655][ T7345] [U] [ 171.829333][ T7345] [U] [ 171.832020][ T7345] [U] [ 171.834700][ T7345] [U] [ 171.837751][ T7345] [U] [ 171.840439][ T7345] [U] [ 171.843131][ T7345] [U] [ 171.845824][ T7345] [U] [ 171.848754][ T7345] [U] [ 171.851445][ T7345] [U] [ 171.854124][ T7345] [U] [ 171.856814][ T7345] [U] [ 171.859856][ T7345] [U] [ 171.862556][ T7345] [U] [ 171.865237][ T7345] [U] [ 171.867912][ T7345] [U] [ 171.871457][ T7345] [U] [ 171.874138][ T7345] [U] [ 171.876811][ T7345] [U] [ 171.879483][ T7345] [U] [ 171.883082][ T7345] [U] [ 171.885766][ T7345] [U] [ 171.888436][ T7345] [U] [ 171.891107][ T7345] [U] [ 171.893987][ T7345] [U] [ 171.896662][ T7345] [U] [ 171.899332][ T7345] [U] [ 171.902016][ T7345] [U] [ 171.904966][ T7345] [U] [ 171.907653][ T7345] [U] [ 171.910325][ T7345] [U] [ 171.913005][ T7345] [U] [ 171.915869][ T7345] [U] [ 171.918541][ T7345] [U] [ 171.921211][ T7345] [U] [ 171.923882][ T7345] [U] [ 171.926813][ T7345] [U] [ 171.929488][ T7345] [U] [ 171.932160][ T7345] [U] [ 171.934837][ T7345] [U] [ 171.941087][ T7345] [U] [ 172.243822][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.328723][ T7362] bond0: invalid ARP target specified [ 172.999605][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.005647][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.011844][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.077750][ T7369] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.118660][ T7369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.139106][ T7369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.162310][ T7369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.435110][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 173.499711][ T7385] FAULT_INJECTION: forcing a failure. [ 173.499711][ T7385] name failslab, interval 1, probability 0, space 0, times 0 [ 173.499740][ T7385] CPU: 0 UID: 0 PID: 7385 Comm: syz.0.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.499767][ T7385] Tainted: [L]=SOFTLOCKUP [ 173.499772][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.499780][ T7385] Call Trace: [ 173.499785][ T7385] [ 173.499790][ T7385] dump_stack_lvl+0x16c/0x1f0 [ 173.499809][ T7385] should_fail_ex+0x512/0x640 [ 173.499825][ T7385] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 173.499848][ T7385] should_failslab+0xc2/0x120 [ 173.499863][ T7385] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 173.499882][ T7385] ? __alloc_skb+0x156/0x410 [ 173.499901][ T7385] ? __alloc_skb+0x156/0x410 [ 173.499914][ T7385] __alloc_skb+0x156/0x410 [ 173.499930][ T7385] ? __alloc_skb+0x35d/0x410 [ 173.499944][ T7385] ? __pfx___alloc_skb+0x10/0x10 [ 173.499959][ T7385] ? netlink_autobind.isra.0+0x158/0x370 [ 173.499985][ T7385] netlink_alloc_large_skb+0x69/0x140 [ 173.500006][ T7385] netlink_sendmsg+0x698/0xdd0 [ 173.500029][ T7385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.500051][ T7385] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 173.500076][ T7385] ____sys_sendmsg+0xa5d/0xc30 [ 173.500098][ T7385] ? copy_msghdr_from_user+0x10a/0x160 [ 173.500114][ T7385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.500133][ T7385] ? __lock_acquire+0x433/0x22f0 [ 173.500157][ T7385] ___sys_sendmsg+0x134/0x1d0 [ 173.500175][ T7385] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.500191][ T7385] ? __lock_acquire+0x433/0x22f0 [ 173.500226][ T7385] __sys_sendmsg+0x16d/0x220 [ 173.500243][ T7385] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.500272][ T7385] do_syscall_64+0xcd/0xf80 [ 173.500288][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.500301][ T7385] RIP: 0033:0x7f24bf78f7c9 [ 173.500313][ T7385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.500325][ T7385] RSP: 002b:00007f24c0674038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.500341][ T7385] RAX: ffffffffffffffda RBX: 00007f24bf9e6180 RCX: 00007f24bf78f7c9 [ 173.500350][ T7385] RDX: 0000000000004000 RSI: 0000200000003480 RDI: 0000000000000007 [ 173.500357][ T7385] RBP: 00007f24c0674090 R08: 0000000000000000 R09: 0000000000000000 [ 173.500365][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.500372][ T7385] R13: 00007f24bf9e6218 R14: 00007f24bf9e6180 R15: 00007ffc768a0f98 [ 173.500390][ T7385] [ 173.799324][ T7390] netlink: 342 bytes leftover after parsing attributes in process `syz.3.354'. [ 174.580787][ T7388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.627567][ T7398] [U]  [ 174.627600][ T7398] [U] [ 174.627622][ T7398] [U] [ 174.627644][ T7398] [U] [ 174.627744][ T7398] [U] [ 174.627767][ T7398] [U] [ 174.627795][ T7398] [U] [ 174.627819][ T7398] [U] [ 174.627920][ T7398] [U] [ 174.627944][ T7398] [U] [ 174.627967][ T7398] [U] [ 174.627989][ T7398] [U] [ 174.628087][ T7398] [U] [ 174.628109][ T7398] [U] [ 174.628131][ T7398] [U] [ 174.628153][ T7398] [U] [ 174.628251][ T7398] [U] [ 174.628273][ T7398] [U] [ 174.628296][ T7398] [U] [ 174.628318][ T7398] [U] [ 174.628416][ T7398] [U] [ 174.628441][ T7398] [U] [ 174.628464][ T7398] [U] [ 174.628487][ T7398] [U] [ 174.638169][ T7398] [U] [ 174.638199][ T7398] [U] [ 174.638221][ T7398] [U] [ 174.638244][ T7398] [U] [ 174.638345][ T7398] [U] [ 174.638367][ T7398] [U] [ 174.638389][ T7398] [U] [ 174.638412][ T7398] [U] [ 174.638510][ T7398] [U] [ 174.638532][ T7398] [U] [ 174.638554][ T7398] [U] [ 174.638577][ T7398] [U] [ 174.638673][ T7398] [U] [ 174.638696][ T7398] [U] [ 174.638718][ T7398] [U] [ 174.638740][ T7398] [U] [ 174.639064][ T7398] [U] [ 174.639092][ T7398] [U] [ 174.639114][ T7398] [U] [ 174.639137][ T7398] [U] [ 174.639240][ T7398] [U] [ 174.639263][ T7398] [U] [ 174.639287][ T7398] [U] [ 174.639310][ T7398] [U] [ 174.639408][ T7398] [U] [ 174.639430][ T7398] [U] [ 174.639452][ T7398] [U] [ 174.639474][ T7398] [U] [ 174.639581][ T7398] [U] [ 174.639605][ T7398] [U] [ 174.639629][ T7398] [U] [ 174.639652][ T7398] [U] [ 174.639753][ T7398] [U] [ 174.639776][ T7398] [U] [ 174.639801][ T7398] [U] [ 174.639823][ T7398] [U] [ 174.639925][ T7398] [U] [ 174.639948][ T7398] [U] [ 174.639971][ T7398] [U] [ 174.639993][ T7398] [U] [ 174.640095][ T7398] [U] [ 174.640117][ T7398] [U] [ 174.640140][ T7398] [U] [ 174.640162][ T7398] [U] [ 174.640262][ T7398] [U] [ 174.640284][ T7398] [U] [ 174.640306][ T7398] [U] [ 174.640329][ T7398] [U] [ 174.640430][ T7398] [U] [ 174.640453][ T7398] [U] [ 174.640475][ T7398] [U] [ 174.640498][ T7398] [U] [ 174.640605][ T7398] [U] [ 174.640629][ T7398] [U] [ 174.640653][ T7398] [U] [ 174.640677][ T7398] [U] [ 174.640777][ T7398] [U] [ 174.640801][ T7398] [U] [ 174.640823][ T7398] [U] [ 174.640846][ T7398] [U] [ 174.640948][ T7398] [U] [ 174.640970][ T7398] [U] [ 174.640993][ T7398] [U] [ 174.641016][ T7398] [U] [ 174.641117][ T7398] [U] [ 174.641139][ T7398] [U] [ 174.641161][ T7398] [U] [ 174.641184][ T7398] [U] [ 174.641283][ T7398] [U] [ 174.641306][ T7398] [U] [ 174.641328][ T7398] [U] [ 174.641350][ T7398] [U] [ 174.641449][ T7398] [U] [ 174.641471][ T7398] [U] [ 174.641494][ T7398] [U] [ 174.641515][ T7398] [U] [ 174.641622][ T7398] [U] [ 174.641646][ T7398] [U] [ 174.641669][ T7398] [U] [ 174.641693][ T7398] [U] [ 174.641793][ T7398] [U] [ 174.641815][ T7398] [U] [ 174.641838][ T7398] [U] [ 174.641860][ T7398] [U] [ 174.641958][ T7398] [U] [ 174.641981][ T7398] [U] [ 174.642004][ T7398] [U] [ 174.642026][ T7398] [U] [ 174.642126][ T7398] [U] [ 174.642149][ T7398] [U] [ 174.642172][ T7398] [U] [ 174.642194][ T7398] [U] [ 174.642294][ T7398] [U] [ 174.642318][ T7398] [U] [ 174.642341][ T7398] [U] [ 174.642364][ T7398] [U] [ 174.642466][ T7398] [U] [ 174.642490][ T7398] [U] [ 174.642513][ T7398] [U] [ 174.642541][ T7398] [U] [ 174.642624][ T7398] [U] [ 174.642648][ T7398] [U] [ 174.642671][ T7398] [U] [ 174.670614][ T7397] [U] [ 175.161175][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.161210][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.038917][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.605267][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.611559][ T7388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.620819][ T7388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.626931][ T7388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.634503][ T7390] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 177.142759][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 177.218750][ T7423] netlink: 342 bytes leftover after parsing attributes in process `syz.1.362'. [ 177.625848][ T7412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.627571][ T7412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.627810][ T7412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.630873][ T7412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.918953][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.114273][ T7433] [U]  [ 179.114303][ T7433] [U] [ 179.114326][ T7433] [U] [ 179.114350][ T7433] [U] [ 179.114451][ T7433] [U] [ 179.114474][ T7433] [U] [ 179.114496][ T7433] [U] [ 179.114517][ T7433] [U] [ 179.114615][ T7433] [U] [ 179.114637][ T7433] [U] [ 179.114659][ T7433] [U] [ 179.114681][ T7433] [U] [ 179.114778][ T7433] [U] [ 179.114801][ T7433] [U] [ 179.114823][ T7433] [U] [ 179.114845][ T7433] [U] [ 179.114943][ T7433] [U] [ 179.114966][ T7433] [U] [ 179.114988][ T7433] [U] [ 179.115010][ T7433] [U] [ 179.115107][ T7433] [U] [ 179.115129][ T7433] [U] [ 179.115151][ T7433] [U] [ 179.115173][ T7433] [U] [ 179.115279][ T7433] [U] [ 179.115303][ T7433] [U] [ 179.115326][ T7433] [U] [ 179.115349][ T7433] [U] [ 179.115447][ T7433] [U] [ 179.115470][ T7433] [U] [ 179.115492][ T7433] [U] [ 179.115514][ T7433] [U] [ 179.115612][ T7433] [U] [ 179.115634][ T7433] [U] [ 179.115656][ T7433] [U] [ 179.115678][ T7433] [U] [ 179.115775][ T7433] [U] [ 179.115797][ T7433] [U] [ 179.115819][ T7433] [U] [ 179.115842][ T7433] [U] [ 179.115939][ T7433] [U] [ 179.115962][ T7433] [U] [ 179.115984][ T7433] [U] [ 179.116006][ T7433] [U] [ 179.116103][ T7433] [U] [ 179.116125][ T7433] [U] [ 179.116147][ T7433] [U] [ 179.116169][ T7433] [U] [ 179.116275][ T7433] [U] [ 179.116298][ T7433] [U] [ 179.116322][ T7433] [U] [ 179.116346][ T7433] [U] [ 179.116443][ T7433] [U] [ 179.116466][ T7433] [U] [ 179.116488][ T7433] [U] [ 179.116510][ T7433] [U] [ 179.116608][ T7433] [U] [ 179.116631][ T7433] [U] [ 179.116653][ T7433] [U] [ 179.116675][ T7433] [U] [ 179.116772][ T7433] [U] [ 179.116795][ T7433] [U] [ 179.116818][ T7433] [U] [ 179.116840][ T7433] [U] [ 179.116936][ T7433] [U] [ 179.116959][ T7433] [U] [ 179.116981][ T7433] [U] [ 179.117004][ T7433] [U] [ 179.117101][ T7433] [U] [ 179.117124][ T7433] [U] [ 179.117145][ T7433] [U] [ 179.117168][ T7433] [U] [ 179.117273][ T7433] [U] [ 179.117298][ T7433] [U] [ 179.117321][ T7433] [U] [ 179.117343][ T7433] [U] [ 179.117441][ T7433] [U] [ 179.117463][ T7433] [U] [ 179.117485][ T7433] [U] [ 179.117507][ T7433] [U] [ 179.117612][ T7433] [U] [ 179.117635][ T7433] [U] [ 179.117658][ T7433] [U] [ 179.117680][ T7433] [U] [ 179.117777][ T7433] [U] [ 179.117800][ T7433] [U] [ 179.117827][ T7433] [U] [ 179.117849][ T7433] [U] [ 179.117949][ T7433] [U] [ 179.117973][ T7433] [U] [ 179.117995][ T7433] [U] [ 179.118019][ T7433] [U] [ 179.118116][ T7433] [U] [ 179.118139][ T7433] [U] [ 179.118161][ T7433] [U] [ 179.118187][ T7433] [U] [ 179.118288][ T7433] [U] [ 179.118311][ T7433] [U] [ 179.118334][ T7433] [U] [ 179.118357][ T7433] [U] [ 179.118457][ T7433] [U] [ 179.118479][ T7433] [U] [ 179.118500][ T7433] [U] [ 179.118523][ T7433] [U] [ 179.118622][ T7433] [U] [ 179.118644][ T7433] [U] [ 179.118666][ T7433] [U] [ 179.118688][ T7433] [U] [ 179.118786][ T7433] [U] [ 179.118812][ T7433] [U] [ 179.118834][ T7433] [U] [ 179.118856][ T7433] [U] [ 179.190590][ T7433] [U] [ 179.190622][ T7433] [U] [ 179.190645][ T7433] [U] [ 179.190668][ T7433] [U] [ 179.190769][ T7433] [U] [ 179.190793][ T7433] [U] [ 179.190816][ T7433] [U] [ 179.190838][ T7433] [U] [ 179.190939][ T7433] [U] [ 179.190962][ T7433] [U] [ 179.190984][ T7433] [U] [ 179.191007][ T7433] [U] [ 179.191089][ T7433] [U] [ 179.191112][ T7433] [U] [ 179.191135][ T7433] [U] [ 179.219378][ T7431] [U] [ 179.639118][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.639808][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.639838][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.719149][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.030906][ T7459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.032972][ T7459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.033135][ T7459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.033269][ T7459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.212321][ T7469] FAULT_INJECTION: forcing a failure. [ 182.212321][ T7469] name fail_futex, interval 1, probability 0, space 0, times 0 [ 182.212364][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.2.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.212384][ T7469] Tainted: [L]=SOFTLOCKUP [ 182.212389][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.212397][ T7469] Call Trace: [ 182.212402][ T7469] [ 182.212408][ T7469] dump_stack_lvl+0x16c/0x1f0 [ 182.212428][ T7469] should_fail_ex+0x512/0x640 [ 182.212448][ T7469] get_futex_key+0x1d0/0x15f0 [ 182.212469][ T7469] ? __pfx_get_futex_key+0x10/0x10 [ 182.212493][ T7469] futex_wake+0xea/0x530 [ 182.212515][ T7469] ? __pfx_futex_wake+0x10/0x10 [ 182.212536][ T7469] ? __sys_sendmmsg+0x35f/0x420 [ 182.212556][ T7469] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.212577][ T7469] do_futex+0x1e3/0x350 [ 182.212595][ T7469] ? __pfx_do_futex+0x10/0x10 [ 182.212617][ T7469] __x64_sys_futex+0x1e0/0x4c0 [ 182.212638][ T7469] ? __pfx___x64_sys_futex+0x10/0x10 [ 182.212656][ T7469] ? xfd_validate_state+0x61/0x180 [ 182.212669][ T7469] ? __pfx___do_sys_prctl+0x10/0x10 [ 182.212692][ T7469] do_syscall_64+0xcd/0xf80 [ 182.212708][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.212722][ T7469] RIP: 0033:0x7f7833b8f7c9 [ 182.212733][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.212746][ T7469] RSP: 002b:00007f7834b000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.212759][ T7469] RAX: ffffffffffffffda RBX: 00007f7833de5fa8 RCX: 00007f7833b8f7c9 [ 182.212768][ T7469] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7833de5fac [ 182.212776][ T7469] RBP: 00007f7833de5fa0 R08: 00007f7834b01000 R09: 0000000000000000 [ 182.212784][ T7469] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 182.212799][ T7469] R13: 00007f7833de6038 R14: 00007ffe5e3a7b80 R15: 00007ffe5e3a7c68 [ 182.212818][ T7469] [ 182.678103][ T7482] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 183.092674][ T5842] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 183.092703][ T5842] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 183.092732][ T5842] Bluetooth: hci3: Dropping invalid advertising data [ 183.092818][ T5842] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 183.092828][ T5842] Bluetooth: hci3: unknown advertising packet type: 0xbd [ 183.092842][ T5842] Bluetooth: hci3: Dropping invalid advertising data [ 183.092857][ T5842] Bluetooth: hci3: Malformed LE Event: 0x02 [ 183.322917][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.791491][ T7495] FAULT_INJECTION: forcing a failure. [ 183.791491][ T7495] name fail_futex, interval 1, probability 0, space 0, times 0 [ 183.791545][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.0.377 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.791565][ T7495] Tainted: [L]=SOFTLOCKUP [ 183.791570][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.791578][ T7495] Call Trace: [ 183.791583][ T7495] [ 183.791589][ T7495] dump_stack_lvl+0x16c/0x1f0 [ 183.791609][ T7495] should_fail_ex+0x512/0x640 [ 183.791630][ T7495] get_futex_key+0x1d0/0x15f0 [ 183.791657][ T7495] ? __pfx_get_futex_key+0x10/0x10 [ 183.791681][ T7495] futex_wake+0xea/0x530 [ 183.791702][ T7495] ? futex_wait+0x120/0x380 [ 183.791717][ T7495] ? __pfx_futex_wake+0x10/0x10 [ 183.791745][ T7495] do_futex+0x1e3/0x350 [ 183.791764][ T7495] ? __pfx_do_futex+0x10/0x10 [ 183.791787][ T7495] __x64_sys_futex+0x1e0/0x4c0 [ 183.791805][ T7495] ? fdget_pos+0x2b8/0x370 [ 183.791822][ T7495] ? __pfx___x64_sys_futex+0x10/0x10 [ 183.791841][ T7495] ? __pfx_do_writev+0x10/0x10 [ 183.791859][ T7495] do_syscall_64+0xcd/0xf80 [ 183.791875][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.791890][ T7495] RIP: 0033:0x7f24bf78f7c9 [ 183.791901][ T7495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.791914][ T7495] RSP: 002b:00007f24c06b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 183.791927][ T7495] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa8 RCX: 00007f24bf78f7c9 [ 183.791936][ T7495] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f24bf9e5fac [ 183.791944][ T7495] RBP: 00007f24bf9e5fa0 R08: 00007f24c06b7000 R09: 0000000000000000 [ 183.791952][ T7495] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 183.791960][ T7495] R13: 00007f24bf9e6038 R14: 00007ffc768a0eb0 R15: 00007ffc768a0f98 [ 183.791979][ T7495] [ 184.041318][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.041356][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.041381][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.487294][ T7506] Invalid ELF header magic: != ELF [ 185.101752][ T7477] tty tty12: ldisc open failed (-12), clearing slot 11 [ 185.109748][ T7499] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 185.341171][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 185.434104][ T7516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.467656][ T7516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.497393][ T7516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.522908][ T7516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.415494][ T7523] FAULT_INJECTION: forcing a failure. [ 186.415494][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 186.415522][ T7523] CPU: 0 UID: 0 PID: 7523 Comm: syz.0.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.415543][ T7523] Tainted: [L]=SOFTLOCKUP [ 186.415547][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.415556][ T7523] Call Trace: [ 186.415560][ T7523] [ 186.415566][ T7523] dump_stack_lvl+0x16c/0x1f0 [ 186.415585][ T7523] should_fail_ex+0x512/0x640 [ 186.415601][ T7523] ? kmem_cache_alloc_noprof+0x62/0x760 [ 186.415625][ T7523] should_failslab+0xc2/0x120 [ 186.415642][ T7523] kmem_cache_alloc_noprof+0x75/0x760 [ 186.415662][ T7523] ? cred_alloc_blank+0x1c/0xa0 [ 186.415684][ T7523] ? cred_alloc_blank+0x1c/0xa0 [ 186.415701][ T7523] cred_alloc_blank+0x1c/0xa0 [ 186.415719][ T7523] keyctl_session_to_parent+0x55/0xaf0 [ 186.415734][ T7523] ? __do_sys_keyctl+0x257/0x590 [ 186.415749][ T7523] __do_sys_keyctl+0x25c/0x590 [ 186.415764][ T7523] do_syscall_64+0xcd/0xf80 [ 186.415780][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.415794][ T7523] RIP: 0033:0x7f24bf78f7c9 [ 186.415805][ T7523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.415818][ T7523] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 186.415831][ T7523] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 186.415840][ T7523] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 186.415848][ T7523] RBP: 00007f24bf813f91 R08: 0000000000000001 R09: 0000000000000000 [ 186.415856][ T7523] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 186.415864][ T7523] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 186.415882][ T7523] [ 186.987864][ T7552] Invalid ELF header magic: != ELF [ 187.479216][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.479254][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.558915][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.558957][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.651144][ T7556] FAULT_INJECTION: forcing a failure. [ 187.651144][ T7556] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.651176][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.1.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.651195][ T7556] Tainted: [L]=SOFTLOCKUP [ 187.651200][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.651208][ T7556] Call Trace: [ 187.651213][ T7556] [ 187.651219][ T7556] dump_stack_lvl+0x16c/0x1f0 [ 187.651238][ T7556] should_fail_ex+0x512/0x640 [ 187.651259][ T7556] get_futex_key+0x1d0/0x15f0 [ 187.651281][ T7556] ? __pfx_get_futex_key+0x10/0x10 [ 187.651297][ T7556] ? find_held_lock+0x2b/0x80 [ 187.651319][ T7556] ? futex_wake+0x456/0x530 [ 187.651342][ T7556] futex_wake+0xea/0x530 [ 187.651372][ T7556] ? futex_wait+0x120/0x380 [ 187.651387][ T7556] ? __pfx_futex_wake+0x10/0x10 [ 187.651416][ T7556] do_futex+0x1e3/0x350 [ 187.651436][ T7556] ? __pfx_do_futex+0x10/0x10 [ 187.651460][ T7556] __x64_sys_futex+0x1e0/0x4c0 [ 187.651483][ T7556] ? fdget_pos+0x2b8/0x370 [ 187.651499][ T7556] ? __pfx___x64_sys_futex+0x10/0x10 [ 187.651518][ T7556] ? __pfx_do_writev+0x10/0x10 [ 187.651537][ T7556] do_syscall_64+0xcd/0xf80 [ 187.651553][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.651567][ T7556] RIP: 0033:0x7f9f6c98f7c9 [ 187.651579][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.651591][ T7556] RSP: 002b:00007f9f6d8650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.651604][ T7556] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa8 RCX: 00007f9f6c98f7c9 [ 187.651613][ T7556] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f6cbe5fac [ 187.651621][ T7556] RBP: 00007f9f6cbe5fa0 R08: 00007f9f6d866000 R09: 0000000000000000 [ 187.651630][ T7556] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 187.651638][ T7556] R13: 00007f9f6cbe6038 R14: 00007ffefc0d4420 R15: 00007ffefc0d4508 [ 187.651656][ T7556] [ 189.961916][ T7575] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 190.342407][ T7583] FAULT_INJECTION: forcing a failure. [ 190.342407][ T7583] name failslab, interval 1, probability 0, space 0, times 0 [ 190.342436][ T7583] CPU: 1 UID: 0 PID: 7583 Comm: syz.1.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.342456][ T7583] Tainted: [L]=SOFTLOCKUP [ 190.342461][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.342469][ T7583] Call Trace: [ 190.342474][ T7583] [ 190.342480][ T7583] dump_stack_lvl+0x16c/0x1f0 [ 190.342500][ T7583] should_fail_ex+0x512/0x640 [ 190.342517][ T7583] ? kmem_cache_alloc_noprof+0x62/0x760 [ 190.342541][ T7583] should_failslab+0xc2/0x120 [ 190.342559][ T7583] kmem_cache_alloc_noprof+0x75/0x760 [ 190.342578][ T7583] ? cred_alloc_blank+0x1c/0xa0 [ 190.342609][ T7583] ? cred_alloc_blank+0x1c/0xa0 [ 190.342629][ T7583] cred_alloc_blank+0x1c/0xa0 [ 190.342647][ T7583] keyctl_session_to_parent+0x55/0xaf0 [ 190.342670][ T7583] __do_sys_keyctl+0x25c/0x590 [ 190.342686][ T7583] do_syscall_64+0xcd/0xf80 [ 190.342702][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.342720][ T7583] RIP: 0033:0x7f9f6c98f7c9 [ 190.342732][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.342745][ T7583] RSP: 002b:00007f9f6d844038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 190.342758][ T7583] RAX: ffffffffffffffda RBX: 00007f9f6cbe6090 RCX: 00007f9f6c98f7c9 [ 190.342767][ T7583] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 190.342775][ T7583] RBP: 00007f9f6ca13f91 R08: 0000000000000001 R09: 0000000000000000 [ 190.342784][ T7583] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 190.342793][ T7583] R13: 00007f9f6cbe6128 R14: 00007f9f6cbe6090 R15: 00007ffefc0d4508 [ 190.342812][ T7583] [ 192.145015][ T7608] random: crng reseeded on system resumption [ 192.699540][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 194.174506][ T7650] netlink: 334 bytes leftover after parsing attributes in process `syz.3.409'. [ 194.334800][ T7637] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.344212][ T7637] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.389166][ T7637] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.422960][ T7637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.485725][ T7648] netlink: 334 bytes leftover after parsing attributes in process `syz.2.407'. [ 194.971903][ T7659] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.026214][ T7659] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.062029][ T7659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.102665][ T7659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.272700][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 196.030350][ T7670] FAULT_INJECTION: forcing a failure. [ 196.030350][ T7670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.157711][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.3.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.157735][ T7670] Tainted: [L]=SOFTLOCKUP [ 196.157739][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.157747][ T7670] Call Trace: [ 196.157752][ T7670] [ 196.157758][ T7670] dump_stack_lvl+0x16c/0x1f0 [ 196.157777][ T7670] should_fail_ex+0x512/0x640 [ 196.157796][ T7670] should_fail_alloc_page+0xe7/0x130 [ 196.157814][ T7670] prepare_alloc_pages+0x3c2/0x610 [ 196.157833][ T7670] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 196.157853][ T7670] ? __pfx_try_to_migrate_one+0x10/0x10 [ 196.157875][ T7670] ? __up_read+0x2d1/0x700 [ 196.157894][ T7670] ? __pfx___up_read+0x10/0x10 [ 196.157911][ T7670] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 196.157929][ T7670] ? rmap_walk_anon+0x503/0x710 [ 196.157960][ T7670] __folio_alloc_noprof+0x11/0xa0 [ 196.157979][ T7670] alloc_migration_target+0x24a/0x660 [ 196.157998][ T7670] migrate_pages_batch+0x3bc/0x3bb0 [ 196.158018][ T7670] ? __pfx_alloc_migration_target+0x10/0x10 [ 196.158041][ T7670] ? __pfx_migrate_pages_batch+0x10/0x10 [ 196.158063][ T7670] ? __pfx_walk_pgd_range+0x10/0x10 [ 196.158084][ T7670] migrate_pages_sync+0x12d/0x8a0 [ 196.158103][ T7670] ? __pfx_alloc_migration_target+0x10/0x10 [ 196.158123][ T7670] ? queue_pages_test_walk+0x279/0x410 [ 196.158139][ T7670] ? __pfx_migrate_pages_sync+0x10/0x10 [ 196.158158][ T7670] ? walk_page_test+0x9b/0x180 [ 196.158177][ T7670] ? walk_page_range_mm+0x235/0xb40 [ 196.158200][ T7670] migrate_pages+0x1b0b/0x2350 [ 196.158219][ T7670] ? __pfx_alloc_migration_target+0x10/0x10 [ 196.158241][ T7670] ? __pfx_migrate_pages+0x10/0x10 [ 196.158259][ T7670] ? queue_pages_range+0x11e/0x180 [ 196.158276][ T7670] ? __pfx___up_read+0x10/0x10 [ 196.158293][ T7670] ? do_migrate_pages+0x458/0x750 [ 196.158311][ T7670] do_migrate_pages+0x48e/0x750 [ 196.158333][ T7670] ? __pfx_do_migrate_pages+0x10/0x10 [ 196.158352][ T7670] ? rcu_is_watching+0x12/0xc0 [ 196.158365][ T7670] ? cap_capable+0x10d/0x3f0 [ 196.158385][ T7670] ? get_task_mm+0xc2/0xf0 [ 196.158405][ T7670] ? security_capable+0x250/0x260 [ 196.158427][ T7670] kernel_migrate_pages+0x55b/0x700 [ 196.158542][ T7670] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 196.158560][ T7670] ? __pfx_do_writev+0x10/0x10 [ 196.158577][ T7670] __x64_sys_migrate_pages+0x96/0x100 [ 196.158594][ T7670] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.158609][ T7670] do_syscall_64+0xcd/0xf80 [ 196.158625][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.158639][ T7670] RIP: 0033:0x7f926478f7c9 [ 196.158655][ T7670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.158668][ T7670] RSP: 002b:00007f92656d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 196.158681][ T7670] RAX: ffffffffffffffda RBX: 00007f92649e5fa0 RCX: 00007f926478f7c9 [ 196.158690][ T7670] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 196.158699][ T7670] RBP: 00007f9264813f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.158712][ T7670] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 196.158724][ T7670] R13: 00007f92649e6038 R14: 00007f92649e5fa0 R15: 00007fff01f3d578 [ 196.158754][ T7670] [ 197.002342][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.089323][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.089435][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.159451][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.753015][ T7708] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 199.245407][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 199.486968][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.493552][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.351249][ T7801] futex_wake_op: syz.0.447 tries to shift op by -2048; fix this program [ 204.389806][ T7801] futex_wake_op: syz.0.447 tries to shift op by -2048; fix this program [ 204.603682][ T7808] futex_wake_op: syz.0.449 tries to shift op by -2048; fix this program [ 204.618475][ T7808] futex_wake_op: syz.0.449 tries to shift op by -2048; fix this program [ 204.663910][ T7808] FAULT_INJECTION: forcing a failure. [ 204.663910][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 204.676750][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.0.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.676785][ T7808] Tainted: [L]=SOFTLOCKUP [ 204.676791][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.676802][ T7808] Call Trace: [ 204.676809][ T7808] [ 204.676817][ T7808] dump_stack_lvl+0x16c/0x1f0 [ 204.676844][ T7808] should_fail_ex+0x512/0x640 [ 204.676866][ T7808] ? fs_reclaim_acquire+0xae/0x150 [ 204.676891][ T7808] should_failslab+0xc2/0x120 [ 204.676914][ T7808] __kmalloc_noprof+0xdd/0x8f0 [ 204.676942][ T7808] ? tomoyo_encode2+0x100/0x3e0 [ 204.676973][ T7808] ? tomoyo_encode2+0x100/0x3e0 [ 204.676997][ T7808] tomoyo_encode2+0x100/0x3e0 [ 204.677026][ T7808] tomoyo_encode+0x29/0x50 [ 204.677050][ T7808] tomoyo_realpath_from_path+0x18f/0x6e0 [ 204.677084][ T7808] tomoyo_path_number_perm+0x245/0x580 [ 204.677105][ T7808] ? tomoyo_path_number_perm+0x237/0x580 [ 204.677130][ T7808] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.677154][ T7808] ? find_held_lock+0x2b/0x80 [ 204.677209][ T7808] ? find_held_lock+0x2b/0x80 [ 204.677237][ T7808] ? hook_file_ioctl_common+0x144/0x410 [ 204.677267][ T7808] ? __fget_files+0x20e/0x3c0 [ 204.677293][ T7808] security_file_ioctl+0x9b/0x240 [ 204.677317][ T7808] __x64_sys_ioctl+0xb7/0x210 [ 204.677349][ T7808] do_syscall_64+0xcd/0xf80 [ 204.677373][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.677393][ T7808] RIP: 0033:0x7f24bf78f7c9 [ 204.677409][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.677428][ T7808] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.677447][ T7808] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 204.677460][ T7808] RDX: 0000000000000000 RSI: 0000000040345410 RDI: 0000000000000003 [ 204.677472][ T7808] RBP: 00007f24c06b6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.677484][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.677495][ T7808] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 204.677524][ T7808] [ 204.677549][ T7808] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.798610][ T7824] [U]  [ 205.798639][ T7824] [U] [ 205.798662][ T7824] [U] [ 205.798685][ T7824] [U] [ 205.798788][ T7824] [U] [ 205.798821][ T7824] [U] [ 205.798858][ T7824] [U] [ 205.798886][ T7824] [U] [ 205.800077][ T7824] [U] [ 205.800104][ T7824] [U] [ 205.800126][ T7824] [U] [ 205.800149][ T7824] [U] [ 205.800249][ T7824] [U] [ 205.800272][ T7824] [U] [ 205.800294][ T7824] [U] [ 205.800316][ T7824] [U] [ 205.800459][ T7824] [U] [ 205.800483][ T7824] [U] [ 205.800550][ T7824] [U] [ 205.800574][ T7824] [U] [ 205.800677][ T7824] [U] [ 205.800701][ T7824] [U] [ 205.800723][ T7824] [U] [ 205.800746][ T7824] [U] [ 205.800891][ T7824] [U] [ 205.800916][ T7824] [U] [ 205.800940][ T7824] [U] [ 205.800963][ T7824] [U] [ 205.801062][ T7824] [U] [ 205.801084][ T7824] [U] [ 205.801106][ T7824] [U] [ 205.801129][ T7824] [U] [ 205.801265][ T7824] [U] [ 205.801288][ T7824] [U] [ 205.801311][ T7824] [U] [ 205.801333][ T7824] [U] [ 205.801434][ T7824] [U] [ 205.801456][ T7824] [U] [ 205.801478][ T7824] [U] [ 205.801510][ T7824] [U] [ 205.801649][ T7824] [U] [ 205.801673][ T7824] [U] [ 205.801697][ T7824] [U] [ 205.801720][ T7824] [U] [ 205.801818][ T7824] [U] [ 205.801840][ T7824] [U] [ 205.801863][ T7824] [U] [ 205.801885][ T7824] [U] [ 205.802022][ T7824] [U] [ 205.802046][ T7824] [U] [ 205.802068][ T7824] [U] [ 205.802090][ T7824] [U] [ 205.802187][ T7824] [U] [ 205.802210][ T7824] [U] [ 205.802232][ T7824] [U] [ 205.802254][ T7824] [U] [ 205.802392][ T7824] [U] [ 205.802416][ T7824] [U] [ 205.802439][ T7824] [U] [ 205.802462][ T7824] [U] [ 205.802567][ T7824] [U] [ 205.802591][ T7824] [U] [ 205.802614][ T7824] [U] [ 205.802637][ T7824] [U] [ 205.802778][ T7824] [U] [ 205.802802][ T7824] [U] [ 205.802825][ T7824] [U] [ 205.802848][ T7824] [U] [ 205.802945][ T7824] [U] [ 205.802967][ T7824] [U] [ 205.802990][ T7824] [U] [ 205.803012][ T7824] [U] [ 205.803198][ T7824] [U] [ 205.803222][ T7824] [U] [ 205.803245][ T7824] [U] [ 205.803268][ T7824] [U] [ 205.803365][ T7824] [U] [ 205.803388][ T7824] [U] [ 205.803410][ T7824] [U] [ 205.803432][ T7824] [U] [ 205.803581][ T7824] [U] [ 205.803605][ T7824] [U] [ 205.803629][ T7824] [U] [ 205.803652][ T7824] [U] [ 205.803751][ T7824] [U] [ 205.803774][ T7824] [U] [ 205.803796][ T7824] [U] [ 205.803818][ T7824] [U] [ 205.803959][ T7824] [U] [ 205.803982][ T7824] [U] [ 205.804005][ T7824] [U] [ 205.804027][ T7824] [U] [ 205.804125][ T7824] [U] [ 205.804147][ T7824] [U] [ 205.804169][ T7824] [U] [ 205.804191][ T7824] [U] [ 205.804331][ T7824] [U] [ 205.804355][ T7824] [U] [ 205.804377][ T7824] [U] [ 205.804401][ T7824] [U] [ 205.804507][ T7824] [U] [ 205.804531][ T7824] [U] [ 205.804554][ T7824] [U] [ 205.804577][ T7824] [U] [ 205.804722][ T7824] [U] [ 205.804745][ T7824] [U] [ 205.804768][ T7824] [U] [ 205.804791][ T7824] [U] [ 205.804887][ T7824] [U] [ 205.804910][ T7824] [U] [ 205.804932][ T7824] [U] [ 205.804954][ T7824] [U] [ 205.805106][ T7824] [U] [ 205.805130][ T7824] [U] [ 205.805153][ T7824] [U] [ 205.805176][ T7824] [U] [ 205.805277][ T7824] [U] [ 205.805300][ T7824] [U] [ 205.805322][ T7824] [U] [ 205.805345][ T7824] [U] [ 205.805494][ T7824] [U] [ 205.805524][ T7824] [U] [ 205.805546][ T7824] [U] [ 205.805569][ T7824] [U] [ 205.805651][ T7824] [U] [ 205.805674][ T7824] [U] [ 205.805697][ T7824] [U] [ 205.983634][ T7823] [U] [ 207.121202][ T7826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.121459][ T7826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.128618][ T7826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.131849][ T7826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.493161][ T7842] futex_wake_op: syz.1.457 tries to shift op by -2048; fix this program [ 208.386240][ T7836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.386718][ T7836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.386871][ T7836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.387006][ T7836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.490965][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.439208][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.439250][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.439276][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.793446][ T7898] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 211.945016][ T7906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.972629][ T7906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.019164][ T7906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.041114][ T7906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.750766][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 213.322273][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.788088][ T7944] ACPI: button: Initial lid state set to 'ignore' [ 214.078558][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.084711][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.090983][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.975333][ T7950] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.022142][ T7950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.049048][ T7950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.077183][ T7950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.515630][ T7970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.515776][ T7970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.515918][ T7970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.516012][ T7970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.559168][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.559208][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.565245][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.571251][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.025542][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 218.237153][ T7991] ======================================================= [ 218.237153][ T7991] WARNING: The mand mount option has been deprecated and [ 218.237153][ T7991] and is ignored by this kernel. Remove the mand [ 218.237153][ T7991] option from the mount to silence this warning. [ 218.237153][ T7991] ======================================================= [ 219.183956][ T5840] smpboot: CPU 1 is now offline [ 219.388538][ T8018] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 220.341048][ T8039] Invalid ELF header magic: != ELF [ 221.187472][ T8066] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 222.419104][ T8073] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 223.769823][ T8111] zero sized request [ 224.915372][ T5907] smpboot: CPU 1 is now offline [ 225.197177][ T8137] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 225.394881][ T8146] forcing mempool usage for bio_alloc_bioset+0x410/0x8d0 [ 226.754366][ T8152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.754582][ T8152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.754781][ T8152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.755076][ T8152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.109254][ T7292] smpboot: CPU 1 is now offline [ 227.220947][ T8162] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 228.121427][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.839106][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.839147][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.839173][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.958388][ T8178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.958532][ T8178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.959683][ T8178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.959832][ T8178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.278393][ T8198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.278670][ T8198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.279103][ T8198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.283769][ T8198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.398899][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.009864][ T8241] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 232.288970][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.329039][ T8253] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 232.365904][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.365920][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.198582][ T8278] netlink: 342 bytes leftover after parsing attributes in process `syz.1.541'. [ 234.645448][ T8287] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.656363][ T8287] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.693206][ T8287] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.699911][ T8287] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.924931][ T8309] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 234.955497][ T8311] netlink: 346 bytes leftover after parsing attributes in process `syz.1.546'. [ 235.137532][ T8322] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 236.120688][ T8326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.148716][ T8326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.164104][ T8326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.179227][ T8326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.443842][ T8346] FAULT_INJECTION: forcing a failure. [ 236.443842][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 236.504296][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.1.558 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.504339][ T8346] Tainted: [L]=SOFTLOCKUP [ 236.504347][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.504360][ T8346] Call Trace: [ 236.504369][ T8346] [ 236.504378][ T8346] dump_stack_lvl+0x16c/0x1f0 [ 236.504410][ T8346] should_fail_ex+0x512/0x640 [ 236.504438][ T8346] ? kmem_cache_alloc_noprof+0x62/0x760 [ 236.504476][ T8346] should_failslab+0xc2/0x120 [ 236.504500][ T8346] kmem_cache_alloc_noprof+0x75/0x760 [ 236.504545][ T8346] ? __proc_create+0x2c8/0x8d0 [ 236.504577][ T8346] ? __proc_create+0x2c8/0x8d0 [ 236.504598][ T8346] __proc_create+0x2c8/0x8d0 [ 236.504625][ T8346] ? __pfx___proc_create+0x10/0x10 [ 236.504654][ T8346] ? _raw_write_unlock+0x28/0x50 [ 236.504678][ T8346] ? proc_register+0x559/0x8b0 [ 236.504708][ T8346] proc_create_reg+0x7d/0x180 [ 236.504738][ T8346] proc_create_net_data+0x8e/0x1c0 [ 236.504763][ T8346] ? __pfx_proc_create_net_data+0x10/0x10 [ 236.504801][ T8346] sctp_proc_init+0x199/0x270 [ 236.504841][ T8346] ? __pfx_sctp_defaults_init+0x10/0x10 [ 236.504864][ T8346] sctp_defaults_init+0x758/0xd90 [ 236.504888][ T8346] ? __pfx_sctp_defaults_init+0x10/0x10 [ 236.504914][ T8346] ops_init+0x1e2/0x5f0 [ 236.504948][ T8346] setup_net+0x11d/0x3a0 [ 236.504981][ T8346] ? __pfx_setup_net+0x10/0x10 [ 236.505010][ T8346] ? lockdep_init_map_type+0x5c/0x270 [ 236.505041][ T8346] ? mutex_init_lockep+0x110/0x150 [ 236.505076][ T8346] copy_net_ns+0x351/0x5d0 [ 236.505115][ T8346] create_new_namespaces+0x3ea/0xab0 [ 236.505158][ T8346] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 236.505198][ T8346] ksys_unshare+0x45b/0xa40 [ 236.505224][ T8346] ? __pfx_ksys_unshare+0x10/0x10 [ 236.505251][ T8346] ? xfd_validate_state+0x61/0x180 [ 236.505291][ T8346] __x64_sys_unshare+0x31/0x40 [ 236.505315][ T8346] do_syscall_64+0xcd/0xf80 [ 236.505344][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.505369][ T8346] RIP: 0033:0x7f9f6c98f7c9 [ 236.505389][ T8346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.505412][ T8346] RSP: 002b:00007f9f6d865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.505435][ T8346] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c98f7c9 [ 236.505452][ T8346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 236.505467][ T8346] RBP: 00007f9f6ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 236.505482][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.505497][ T8346] R13: 00007f9f6cbe6038 R14: 00007f9f6cbe5fa0 R15: 00007ffefc0d4508 [ 236.505541][ T8346] [ 237.126134][ T8362] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 237.137319][ T52] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 237.399044][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.200776][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.200806][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.207114][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.482631][ T8382] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.498976][ T8382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.523752][ T8382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.548043][ T8382] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.743845][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.573'. [ 239.015364][ T8409] FAULT_INJECTION: forcing a failure. [ 239.015364][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 239.079211][ T8409] CPU: 0 UID: 0 PID: 8409 Comm: syz.1.576 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.079254][ T8409] Tainted: [L]=SOFTLOCKUP [ 239.079274][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.079289][ T8409] Call Trace: [ 239.079298][ T8409] [ 239.079308][ T8409] dump_stack_lvl+0x16c/0x1f0 [ 239.079342][ T8409] should_fail_ex+0x512/0x640 [ 239.079372][ T8409] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 239.079414][ T8409] should_failslab+0xc2/0x120 [ 239.079444][ T8409] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 239.079477][ T8409] ? __dquot_initialize+0x299/0xd50 [ 239.079510][ T8409] ? __d_alloc+0x35/0xa80 [ 239.079544][ T8409] ? __d_alloc+0x35/0xa80 [ 239.079571][ T8409] __d_alloc+0x35/0xa80 [ 239.079605][ T8409] d_alloc_pseudo+0x1c/0xc0 [ 239.079639][ T8409] alloc_file_pseudo+0xcf/0x230 [ 239.079676][ T8409] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 239.079721][ T8409] __shmem_file_setup+0x1a3/0x330 [ 239.079757][ T8409] shmem_zero_setup+0x93/0x1a0 [ 239.079794][ T8409] __mmap_region+0x2076/0x2770 [ 239.079835][ T8409] ? __pfx___mmap_region+0x10/0x10 [ 239.079871][ T8409] ? lock_acquire+0x179/0x330 [ 239.079901][ T8409] ? find_held_lock+0x2b/0x80 [ 239.079938][ T8409] ? finish_task_switch.isra.0+0x202/0xbd0 [ 239.079989][ T8409] ? rcu_is_watching+0x12/0xc0 [ 239.080080][ T8409] ? rcu_is_watching+0x12/0xc0 [ 239.080114][ T8409] mmap_region+0x1ab/0x3f0 [ 239.080149][ T8409] ? __get_unmapped_area+0x267/0x440 [ 239.080178][ T8409] do_mmap+0xa3e/0x1210 [ 239.080211][ T8409] ? __pfx_do_mmap+0x10/0x10 [ 239.080238][ T8409] ? __pfx_down_write_killable+0x10/0x10 [ 239.080284][ T8409] vm_mmap_pgoff+0x29e/0x470 [ 239.080315][ T8409] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 239.080345][ T8409] ? __x64_sys_futex+0x1e0/0x4c0 [ 239.080376][ T8409] ? __x64_sys_futex+0x1e9/0x4c0 [ 239.080411][ T8409] ksys_mmap_pgoff+0x7d/0x5c0 [ 239.080435][ T8409] ? xfd_validate_state+0x61/0x180 [ 239.080457][ T8409] ? __pfx_ksys_write+0x10/0x10 [ 239.080487][ T8409] __x64_sys_mmap+0x125/0x190 [ 239.080519][ T8409] do_syscall_64+0xcd/0xf80 [ 239.080547][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.080572][ T8409] RIP: 0033:0x7f9f6c98f7c9 [ 239.080592][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.080615][ T8409] RSP: 002b:00007f9f6d865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 239.080640][ T8409] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c98f7c9 [ 239.080658][ T8409] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 239.080673][ T8409] RBP: 00007f9f6ca13f91 R08: 0000000000000401 R09: 0000000000008000 [ 239.080688][ T8409] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 239.080704][ T8409] R13: 00007f9f6cbe6038 R14: 00007f9f6cbe5fa0 R15: 00007ffefc0d4508 [ 239.080741][ T8409] [ 239.373490][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 239.419119][ T8417] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 239.436221][ T8418] netlink: zone id is out of range [ 239.441598][ T8418] netlink: del zone limit has 4 unknown bytes [ 239.565912][ T8426] FAULT_INJECTION: forcing a failure. [ 239.565912][ T8426] name failslab, interval 1, probability 0, space 0, times 0 [ 239.588942][ T8426] CPU: 0 UID: 0 PID: 8426 Comm: syz.0.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.588987][ T8426] Tainted: [L]=SOFTLOCKUP [ 239.588997][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.589012][ T8426] Call Trace: [ 239.589022][ T8426] [ 239.589033][ T8426] dump_stack_lvl+0x16c/0x1f0 [ 239.589067][ T8426] should_fail_ex+0x512/0x640 [ 239.589095][ T8426] ? __kmalloc_cache_noprof+0x5f/0x800 [ 239.589135][ T8426] should_failslab+0xc2/0x120 [ 239.589165][ T8426] __kmalloc_cache_noprof+0x72/0x800 [ 239.589200][ T8426] ? find_held_lock+0x2b/0x80 [ 239.589235][ T8426] ? yama_ptracer_add+0x48/0x590 [ 239.589273][ T8426] ? yama_ptracer_add+0x48/0x590 [ 239.589304][ T8426] yama_ptracer_add+0x48/0x590 [ 239.589339][ T8426] yama_task_prctl+0xf4/0x1d0 [ 239.589374][ T8426] security_task_prctl+0xc2/0x160 [ 239.589414][ T8426] __do_sys_prctl+0xaa/0x2220 [ 239.589558][ T8426] ? __pfx___do_sys_prctl+0x10/0x10 [ 239.589599][ T8426] do_syscall_64+0xcd/0xf80 [ 239.589630][ T8426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.589660][ T8426] RIP: 0033:0x7f24bf78f7c9 [ 239.589682][ T8426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.589709][ T8426] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 239.589735][ T8426] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 239.589754][ T8426] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000059616d61 [ 239.589771][ T8426] RBP: 00007f24bf813f91 R08: 000000001f000000 R09: 0000000000000000 [ 239.589790][ T8426] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 239.589807][ T8426] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 239.589845][ T8426] [ 239.791427][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.313114][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 240.521532][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.599423][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.599433][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.793627][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 240.864042][ T8458] netlink: 342 bytes leftover after parsing attributes in process `syz.3.588'. [ 240.869586][ T8433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.894689][ T8433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.909509][ T8433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.918917][ T8433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.026144][ T8460] FAULT_INJECTION: forcing a failure. [ 241.026144][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 241.062147][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.1.589 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.062180][ T8460] Tainted: [L]=SOFTLOCKUP [ 241.062186][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.062196][ T8460] Call Trace: [ 241.062202][ T8460] [ 241.062209][ T8460] dump_stack_lvl+0x16c/0x1f0 [ 241.062235][ T8460] should_fail_ex+0x512/0x640 [ 241.062259][ T8460] should_failslab+0xc2/0x120 [ 241.062280][ T8460] kmem_cache_alloc_noprof+0x75/0x760 [ 241.062305][ T8460] ? skb_clone+0x190/0x3f0 [ 241.062341][ T8460] ? skb_clone+0x190/0x3f0 [ 241.062360][ T8460] skb_clone+0x190/0x3f0 [ 241.062383][ T8460] netlink_deliver_tap+0xabd/0xd30 [ 241.062415][ T8460] netlink_unicast+0x71f/0x870 [ 241.062445][ T8460] ? __pfx_netlink_unicast+0x10/0x10 [ 241.062473][ T8460] ? genl_rcv_msg+0x4bb/0x800 [ 241.062497][ T8460] netlink_ack+0x696/0xb80 [ 241.062532][ T8460] netlink_rcv_skb+0x332/0x420 [ 241.062558][ T8460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.062577][ T8460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.062613][ T8460] ? netlink_deliver_tap+0x1ae/0xd30 [ 241.062642][ T8460] genl_rcv+0x28/0x40 [ 241.062658][ T8460] netlink_unicast+0x5aa/0x870 [ 241.062691][ T8460] ? __pfx_netlink_unicast+0x10/0x10 [ 241.062718][ T8460] ? __pfx___might_resched+0x10/0x10 [ 241.062748][ T8460] netlink_sendmsg+0x8c8/0xdd0 [ 241.062781][ T8460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.062811][ T8460] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 241.062855][ T8460] __sys_sendto+0x4a3/0x520 [ 241.062879][ T8460] ? __pfx___sys_sendto+0x10/0x10 [ 241.062924][ T8460] ? ksys_write+0x1ac/0x250 [ 241.062943][ T8460] ? __pfx_ksys_write+0x10/0x10 [ 241.062965][ T8460] __x64_sys_sendto+0xe0/0x1c0 [ 241.062987][ T8460] ? do_syscall_64+0x91/0xf80 [ 241.063009][ T8460] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.063030][ T8460] do_syscall_64+0xcd/0xf80 [ 241.063055][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.063077][ T8460] RIP: 0033:0x7f9f6c99165c [ 241.063096][ T8460] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 241.063116][ T8460] RSP: 002b:00007f9f6d863ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 241.063136][ T8460] RAX: ffffffffffffffda RBX: 00007f9f6d863fc0 RCX: 00007f9f6c99165c [ 241.063151][ T8460] RDX: 0000000000000020 RSI: 00007f9f6d864010 RDI: 0000000000000003 [ 241.063164][ T8460] RBP: 0000000000000000 R08: 00007f9f6d863f14 R09: 000000000000000c [ 241.063175][ T8460] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 241.063185][ T8460] R13: 00007f9f6d863f68 R14: 00007f9f6d864010 R15: 0000000000000000 [ 241.063215][ T8460] [ 241.333035][ T8474] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 241.480865][ T8478] FAULT_INJECTION: forcing a failure. [ 241.480865][ T8478] name fail_futex, interval 1, probability 0, space 0, times 0 [ 241.573652][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.1.596 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.573695][ T8478] Tainted: [L]=SOFTLOCKUP [ 241.573705][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.573726][ T8478] Call Trace: [ 241.573735][ T8478] [ 241.573745][ T8478] dump_stack_lvl+0x16c/0x1f0 [ 241.573779][ T8478] should_fail_ex+0x512/0x640 [ 241.573814][ T8478] get_futex_key+0x1d0/0x15f0 [ 241.573853][ T8478] ? __pfx_get_futex_key+0x10/0x10 [ 241.573900][ T8478] futex_wake+0xea/0x530 [ 241.573934][ T8478] ? futex_wait+0x120/0x380 [ 241.573953][ T8478] ? __pfx_futex_wait+0x10/0x10 [ 241.573975][ T8478] ? __pfx_futex_wake+0x10/0x10 [ 241.574017][ T8478] ? __lock_acquire+0x433/0x22f0 [ 241.574055][ T8478] do_futex+0x1e3/0x350 [ 241.574089][ T8478] ? __pfx_do_futex+0x10/0x10 [ 241.574136][ T8478] ? __pfx_sched_core_share_pid+0x10/0x10 [ 241.574167][ T8478] __x64_sys_futex+0x1e0/0x4c0 [ 241.574207][ T8478] ? __pfx___x64_sys_futex+0x10/0x10 [ 241.574244][ T8478] ? __pfx___do_sys_prctl+0x10/0x10 [ 241.574286][ T8478] do_syscall_64+0xcd/0xf80 [ 241.574316][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.574341][ T8478] RIP: 0033:0x7f9f6c98f7c9 [ 241.574361][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.574384][ T8478] RSP: 002b:00007f9f6d8650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.574409][ T8478] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa8 RCX: 00007f9f6c98f7c9 [ 241.574425][ T8478] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f6cbe5fac [ 241.574441][ T8478] RBP: 00007f9f6cbe5fa0 R08: 00007f9f6d866000 R09: 0000000000000000 [ 241.574457][ T8478] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 241.574473][ T8478] R13: 00007f9f6cbe6038 R14: 00007ffefc0d4420 R15: 00007ffefc0d4508 [ 241.574511][ T8478] [ 242.119056][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.317114][ T8498] FAULT_INJECTION: forcing a failure. [ 242.317114][ T8498] name failslab, interval 1, probability 0, space 0, times 0 [ 242.354070][ T8498] CPU: 0 UID: 0 PID: 8498 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.354097][ T8498] Tainted: [L]=SOFTLOCKUP [ 242.354102][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.354111][ T8498] Call Trace: [ 242.354116][ T8498] [ 242.354122][ T8498] dump_stack_lvl+0x16c/0x1f0 [ 242.354143][ T8498] should_fail_ex+0x512/0x640 [ 242.354160][ T8498] ? __kmalloc_noprof+0xca/0x8f0 [ 242.354181][ T8498] should_failslab+0xc2/0x120 [ 242.354197][ T8498] __kmalloc_noprof+0xdd/0x8f0 [ 242.354216][ T8498] ? __lock_acquire+0x433/0x22f0 [ 242.354232][ T8498] ? sk_prot_alloc+0x1a8/0x2a0 [ 242.354255][ T8498] ? sk_prot_alloc+0x1a8/0x2a0 [ 242.354273][ T8498] sk_prot_alloc+0x1a8/0x2a0 [ 242.354301][ T8498] sk_alloc+0x36/0xc20 [ 242.354318][ T8498] pppol2tp_create+0x32/0x250 [ 242.354338][ T8498] pppox_create+0x15c/0x2c0 [ 242.354372][ T8498] __sock_create+0x339/0x8a0 [ 242.354389][ T8498] __sys_socket+0x153/0x2d0 [ 242.354403][ T8498] ? __pfx___sys_socket+0x10/0x10 [ 242.354417][ T8498] ? xfd_validate_state+0x61/0x180 [ 242.354436][ T8498] __x64_sys_socket+0x72/0xb0 [ 242.354449][ T8498] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.354463][ T8498] do_syscall_64+0xcd/0xf80 [ 242.354479][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.354493][ T8498] RIP: 0033:0x7f9f6c98f7c9 [ 242.354505][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.354519][ T8498] RSP: 002b:00007f9f6d865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 242.354533][ T8498] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c98f7c9 [ 242.354542][ T8498] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 242.354551][ T8498] RBP: 00007f9f6ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.354559][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.354567][ T8498] R13: 00007f9f6cbe6038 R14: 00007f9f6cbe5fa0 R15: 00007ffefc0d4508 [ 242.354585][ T8498] [ 242.919218][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.927506][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.933846][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.945173][ T8491] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.968038][ T8491] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.985251][ T8491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.109136][ T8491] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.477415][ T8521] Invalid ELF header magic: != ELF [ 244.198874][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.678745][ T3647] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.702028][ T8534] process 'syz.2.612' launched '/dev/fd/6/./file0' with NULL argv: empty string added [ 244.979642][ T8545] FAULT_INJECTION: forcing a failure. [ 244.979642][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 244.992822][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.2.617 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.992863][ T8545] Tainted: [L]=SOFTLOCKUP [ 244.992872][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.992903][ T8545] Call Trace: [ 244.992913][ T8545] [ 244.992922][ T8545] dump_stack_lvl+0x16c/0x1f0 [ 244.992955][ T8545] should_fail_ex+0x512/0x640 [ 244.992983][ T8545] ? fs_reclaim_acquire+0xae/0x150 [ 244.993015][ T8545] should_failslab+0xc2/0x120 [ 244.993044][ T8545] __kmalloc_noprof+0xdd/0x8f0 [ 244.993077][ T8545] ? tomoyo_encode2+0x100/0x3e0 [ 244.993110][ T8545] ? tomoyo_encode2+0x100/0x3e0 [ 244.993135][ T8545] tomoyo_encode2+0x100/0x3e0 [ 244.993166][ T8545] tomoyo_encode+0x29/0x50 [ 244.993191][ T8545] tomoyo_realpath_from_path+0x18f/0x6e0 [ 244.993227][ T8545] tomoyo_check_open_permission+0x2ab/0x3c0 [ 244.993253][ T8545] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 244.993307][ T8545] ? do_raw_spin_lock+0x12c/0x2b0 [ 244.993344][ T8545] tomoyo_file_open+0x6b/0x90 [ 244.993376][ T8545] security_file_open+0x84/0x1e0 [ 244.993402][ T8545] do_dentry_open+0x597/0x1590 [ 244.993428][ T8545] ? security_inode_permission+0xbf/0x260 [ 244.993457][ T8545] vfs_open+0x82/0x3f0 [ 244.993488][ T8545] path_openat+0x2078/0x3140 [ 244.993522][ T8545] ? __pfx_path_openat+0x10/0x10 [ 244.993557][ T8545] do_filp_open+0x20b/0x470 [ 244.993581][ T8545] ? __pfx_do_filp_open+0x10/0x10 [ 244.993627][ T8545] ? alloc_fd+0x471/0x7d0 [ 244.993658][ T8545] do_sys_openat2+0x11f/0x280 [ 244.993695][ T8545] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.993738][ T8545] __x64_sys_openat+0x174/0x210 [ 244.993771][ T8545] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.993816][ T8545] do_syscall_64+0xcd/0xf80 [ 244.993842][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.993863][ T8545] RIP: 0033:0x7f7833b8f7c9 [ 244.993880][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.993901][ T8545] RSP: 002b:00007f7834b00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.993921][ T8545] RAX: ffffffffffffffda RBX: 00007f7833de5fa0 RCX: 00007f7833b8f7c9 [ 244.993935][ T8545] RDX: 0000000000101080 RSI: 0000200000001e00 RDI: ffffffffffffff9c [ 244.993949][ T8545] RBP: 00007f7833c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 244.993962][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.993974][ T8545] R13: 00007f7833de6038 R14: 00007f7833de5fa0 R15: 00007ffe5e3a7c68 [ 244.994004][ T8545] [ 244.994115][ T8545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.023978][ T8547] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 245.025894][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.069131][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.168928][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.981056][ T8550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.987428][ T8550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.019245][ T8550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.110538][ T8550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.408910][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.830108][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 247.832022][ T5906] smpboot: CPU 1 is now offline [ 247.958758][ T8607] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 247.993651][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.018995][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.108868][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.396668][ T8617] usb usb4: usbfs: process 8617 (syz.2.630) did not claim interface 0 before use [ 249.463757][ T8622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.464280][ T8622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.465172][ T8622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.465321][ T8622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.288213][ T8650] netlink: 338 bytes leftover after parsing attributes in process `syz.3.637'. [ 250.604458][ T8636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.629643][ T8636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.649991][ T8636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.656241][ T8636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.881894][ T8665] FAULT_INJECTION: forcing a failure. [ 250.881894][ T8665] name failslab, interval 1, probability 0, space 0, times 0 [ 250.918997][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.0.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.919039][ T8665] Tainted: [L]=SOFTLOCKUP [ 250.919049][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.919059][ T8665] Call Trace: [ 250.919065][ T8665] [ 250.919071][ T8665] dump_stack_lvl+0x16c/0x1f0 [ 250.919093][ T8665] should_fail_ex+0x512/0x640 [ 250.919118][ T8665] ? __kmalloc_noprof+0xca/0x8f0 [ 250.919140][ T8665] should_failslab+0xc2/0x120 [ 250.919157][ T8665] __kmalloc_noprof+0xdd/0x8f0 [ 250.919176][ T8665] ? lsm_blob_alloc+0x68/0x90 [ 250.919199][ T8665] ? lsm_blob_alloc+0x68/0x90 [ 250.919217][ T8665] lsm_blob_alloc+0x68/0x90 [ 250.919236][ T8665] security_prepare_creds+0x2f/0x270 [ 250.919256][ T8665] prepare_creds+0x501/0x740 [ 250.919277][ T8665] __sys_setresgid+0x4af/0x1150 [ 250.919301][ T8665] do_syscall_64+0xcd/0xf80 [ 250.919318][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.919333][ T8665] RIP: 0033:0x7f24bf78f7c9 [ 250.919346][ T8665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.919363][ T8665] RSP: 002b:00007f24c0695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 250.919381][ T8665] RAX: ffffffffffffffda RBX: 00007f24bf9e6090 RCX: 00007f24bf78f7c9 [ 250.919396][ T8665] RDX: 0000000000000008 RSI: 00000000800000a0 RDI: 0000000000000081 [ 250.919410][ T8665] RBP: 00007f24bf813f91 R08: 0000000000000000 R09: 0000000000000000 [ 250.919423][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.919436][ T8665] R13: 00007f24bf9e6128 R14: 00007f24bf9e6090 R15: 00007ffc768a0f98 [ 250.919456][ T8665] [ 251.681512][ T8662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.688384][ T8662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.694862][ T8662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.701444][ T8662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.829939][ T7292] smpboot: CPU 1 is now offline [ 251.970332][ T8677] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 252.743605][ T8699] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 253.721642][ T8703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.728952][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.731680][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.737522][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.771725][ T8703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.777801][ T8703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.809225][ T8703] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.949093][ T8720] usb usb4: usbfs: process 8720 (syz.0.654) did not claim interface 0 before use [ 254.262731][ T8736] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 254.371152][ T7292] smpboot: CPU 1 is now offline [ 254.457003][ T8745] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 254.998942][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.799201][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.799212][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.878896][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.961922][ T8754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.962139][ T8754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.962304][ T8754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.962545][ T8754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.511494][ T8776] sd 0:0:1:0: PR command failed: 1026 [ 256.511541][ T8776] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 256.511580][ T8776] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 256.833960][ T8789] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 256.898970][ T5840] smpboot: CPU 1 is now offline [ 257.722111][ T8793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.756342][ T8793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.783582][ T8793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.813291][ T8793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.021707][ T8797] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 258.271740][ T8818] FAULT_INJECTION: forcing a failure. [ 258.271740][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 258.319010][ T8818] CPU: 1 UID: 0 PID: 8818 Comm: syz.3.678 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.319052][ T8818] Tainted: [L]=SOFTLOCKUP [ 258.319060][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.319074][ T8818] Call Trace: [ 258.319082][ T8818] [ 258.319092][ T8818] dump_stack_lvl+0x16c/0x1f0 [ 258.319123][ T8818] should_fail_ex+0x512/0x640 [ 258.319156][ T8818] should_failslab+0xc2/0x120 [ 258.319182][ T8818] kmem_cache_alloc_noprof+0x75/0x760 [ 258.319214][ T8818] ? skb_clone+0x190/0x3f0 [ 258.319249][ T8818] ? skb_clone+0x190/0x3f0 [ 258.319276][ T8818] skb_clone+0x190/0x3f0 [ 258.319309][ T8818] netlink_deliver_tap+0xabd/0xd30 [ 258.319352][ T8818] netlink_dump+0xa5f/0xd30 [ 258.319386][ T8818] ? __pfx_netlink_dump+0x10/0x10 [ 258.319417][ T8818] ? kasan_quarantine_put+0x10a/0x240 [ 258.319455][ T8818] ? kfree_skbmem+0x1a4/0x1f0 [ 258.319475][ T8818] ? kfree_skbmem+0x1a4/0x1f0 [ 258.319500][ T8818] netlink_recvmsg+0x7dc/0xa90 [ 258.319536][ T8818] ? __pfx_netlink_recvmsg+0x10/0x10 [ 258.319569][ T8818] ? __fget_files+0x204/0x3c0 [ 258.319599][ T8818] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 258.319667][ T8818] sock_recvmsg+0x1f9/0x250 [ 258.319703][ T8818] __sys_recvfrom+0x203/0x310 [ 258.319732][ T8818] ? __pfx___sys_recvfrom+0x10/0x10 [ 258.319789][ T8818] ? ksys_write+0x1ac/0x250 [ 258.319813][ T8818] ? __pfx_ksys_write+0x10/0x10 [ 258.319841][ T8818] __x64_sys_recvfrom+0xe0/0x1c0 [ 258.319865][ T8818] ? do_syscall_64+0x91/0xf80 [ 258.319887][ T8818] ? lockdep_hardirqs_on+0x7c/0x110 [ 258.319909][ T8818] do_syscall_64+0xcd/0xf80 [ 258.319939][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.319962][ T8818] RIP: 0033:0x7f9264791594 [ 258.319981][ T8818] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 258.320005][ T8818] RSP: 002b:00007f92656d0ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 258.320028][ T8818] RAX: ffffffffffffffda RBX: 00007f92656d0fc0 RCX: 00007f9264791594 [ 258.320044][ T8818] RDX: 0000000000001000 RSI: 00007f92656d1010 RDI: 0000000000000003 [ 258.320060][ T8818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.320074][ T8818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 258.320088][ T8818] R13: 00007f92656d0f68 R14: 00007f92656d1010 R15: 0000000000000000 [ 258.320124][ T8818] [ 259.239652][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 259.526918][ T8838] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 259.799483][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.799488][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.879252][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 260.959283][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.959337][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.079491][ T8849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.079733][ T8849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.081466][ T8849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.081661][ T8849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.250936][ T5840] smpboot: CPU 1 is now offline [ 261.352436][ T8870] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 262.118916][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.633590][ T8890] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 263.158950][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.166883][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.173396][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.774427][ T8899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.807553][ T8899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.825151][ T8899] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.848251][ T8899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.349278][ T8916] FAULT_INJECTION: forcing a failure. [ 264.349278][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 264.400289][ T7292] smpboot: CPU 1 is now offline [ 264.456001][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.0.700 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.456027][ T8916] Tainted: [L]=SOFTLOCKUP [ 264.456032][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.456041][ T8916] Call Trace: [ 264.456047][ T8916] [ 264.456053][ T8916] dump_stack_lvl+0x16c/0x1f0 [ 264.456074][ T8916] should_fail_ex+0x512/0x640 [ 264.456090][ T8916] ? kmem_cache_alloc_noprof+0x62/0x760 [ 264.456115][ T8916] should_failslab+0xc2/0x120 [ 264.456131][ T8916] kmem_cache_alloc_noprof+0x75/0x760 [ 264.456152][ T8916] ? prepare_creds+0x2c/0x740 [ 264.456174][ T8916] ? prepare_creds+0x2c/0x740 [ 264.456190][ T8916] prepare_creds+0x2c/0x740 [ 264.456209][ T8916] cap_task_prctl+0x559/0xa80 [ 264.456224][ T8916] security_task_prctl+0xc2/0x160 [ 264.456247][ T8916] __do_sys_prctl+0xaa/0x2220 [ 264.456266][ T8916] ? __pfx___do_sys_prctl+0x10/0x10 [ 264.456289][ T8916] do_syscall_64+0xcd/0xf80 [ 264.456307][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.456321][ T8916] RIP: 0033:0x7f24bf78f7c9 [ 264.456333][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.456346][ T8916] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 264.456360][ T8916] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 264.456369][ T8916] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 264.456377][ T8916] RBP: 00007f24bf813f91 R08: 0900000000000000 R09: 0000000000000000 [ 264.456385][ T8916] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 264.456393][ T8916] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 264.456412][ T8916] [ 264.649963][ T8917] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 265.238951][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.879123][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.879169][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.879198][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 266.355218][ T8944] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 266.821523][ T8951] FAULT_INJECTION: forcing a failure. [ 266.821523][ T8951] name failslab, interval 1, probability 0, space 0, times 0 [ 266.821551][ T8951] CPU: 1 UID: 0 PID: 8951 Comm: syz.2.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.821573][ T8951] Tainted: [L]=SOFTLOCKUP [ 266.821578][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.821588][ T8951] Call Trace: [ 266.821592][ T8951] [ 266.821598][ T8951] dump_stack_lvl+0x16c/0x1f0 [ 266.821617][ T8951] should_fail_ex+0x512/0x640 [ 266.821635][ T8951] ? __kvmalloc_node_noprof+0x129/0xa50 [ 266.821652][ T8951] should_failslab+0xc2/0x120 [ 266.821669][ T8951] __kvmalloc_node_noprof+0x13c/0xa50 [ 266.821684][ T8951] ? sbitmap_init_node+0x1cc/0x770 [ 266.821707][ T8951] ? sbitmap_init_node+0x1cc/0x770 [ 266.821726][ T8951] sbitmap_init_node+0x1cc/0x770 [ 266.821748][ T8951] sbitmap_queue_init_node+0x40/0x4a0 [ 266.821771][ T8951] blk_mq_init_tags+0x17f/0x320 [ 266.821793][ T8951] blk_mq_alloc_map_and_rqs+0x222/0xeb0 [ 266.821824][ T8951] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 266.821845][ T8951] blk_mq_alloc_tag_set+0x7c3/0x12e0 [ 266.821870][ T8951] loop_add+0x3b2/0xb70 [ 266.821887][ T8951] ? __pfx_loop_add+0x10/0x10 [ 266.821913][ T8951] ? find_held_lock+0x2b/0x80 [ 266.821944][ T8951] loop_control_ioctl+0x13e/0x630 [ 266.821964][ T8951] ? __pfx_loop_control_ioctl+0x10/0x10 [ 266.821982][ T8951] ? __pfx_loop_control_ioctl+0x10/0x10 [ 266.821997][ T8951] __x64_sys_ioctl+0x18e/0x210 [ 266.822020][ T8951] do_syscall_64+0xcd/0xf80 [ 266.822036][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.822050][ T8951] RIP: 0033:0x7f7833b8f7c9 [ 266.822062][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.822076][ T8951] RSP: 002b:00007f7834b00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.822089][ T8951] RAX: ffffffffffffffda RBX: 00007f7833de5fa0 RCX: 00007f7833b8f7c9 [ 266.822098][ T8951] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 266.822106][ T8951] RBP: 00007f7833c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.822114][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.822122][ T8951] R13: 00007f7833de6038 R14: 00007f7833de5fa0 R15: 00007ffe5e3a7c68 [ 266.822141][ T8951] [ 266.822238][ T8951] blk-mq: reduced tag depth (128 -> 64) [ 267.624435][ T8949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.641666][ T8949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.658398][ T8949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.690350][ T8949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.311316][ T5952] smpboot: CPU 1 is now offline [ 268.477174][ T8981] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 268.741086][ T8985] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 269.159251][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.718976][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.719035][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.719075][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.320655][ T9013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 270.320868][ T9013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.339498][ T9013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.341566][ T9013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.576935][ T9032] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 271.071123][ T9041] FAULT_INJECTION: forcing a failure. [ 271.071123][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.071165][ T9041] CPU: 0 UID: 0 PID: 9041 Comm: syz.1.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.071200][ T9041] Tainted: [L]=SOFTLOCKUP [ 271.071208][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.071222][ T9041] Call Trace: [ 271.071229][ T9041] [ 271.071239][ T9041] dump_stack_lvl+0x16c/0x1f0 [ 271.071269][ T9041] should_fail_ex+0x512/0x640 [ 271.071301][ T9041] _copy_to_user+0x32/0xd0 [ 271.071330][ T9041] simple_read_from_buffer+0xcb/0x170 [ 271.071359][ T9041] proc_fail_nth_read+0x197/0x240 [ 271.071392][ T9041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.071433][ T9041] ? rw_verify_area+0xcf/0x6c0 [ 271.071470][ T9041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.071501][ T9041] vfs_read+0x1e4/0xcf0 [ 271.071527][ T9041] ? __pfx___mutex_lock+0x10/0x10 [ 271.071558][ T9041] ? __pfx_vfs_read+0x10/0x10 [ 271.071593][ T9041] ? __fget_files+0x20e/0x3c0 [ 271.071620][ T9041] ? jump_label_swap+0x100/0x180 [ 271.071653][ T9041] ksys_read+0x12a/0x250 [ 271.071679][ T9041] ? __pfx_ksys_read+0x10/0x10 [ 271.071715][ T9041] do_syscall_64+0xcd/0xf80 [ 271.071743][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.071768][ T9041] RIP: 0033:0x7f9f6c98e1dc [ 271.071786][ T9041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 271.071809][ T9041] RSP: 002b:00007f9f6d865030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.071832][ T9041] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c98e1dc [ 271.071848][ T9041] RDX: 000000000000000f RSI: 00007f9f6d8650a0 RDI: 0000000000000003 [ 271.071863][ T9041] RBP: 00007f9f6d865090 R08: 0000000000000000 R09: 0000000000000000 [ 271.071877][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.071891][ T9041] R13: 00007f9f6cbe6038 R14: 00007f9f6cbe5fa0 R15: 00007ffefc0d4508 [ 271.071927][ T9041] [ 271.563914][ T5946] smpboot: CPU 1 is now offline [ 271.731897][ T9052] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 272.150881][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.362824][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.362881][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.362938][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.634584][ T9058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.635843][ T9058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.635966][ T9058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.636066][ T9058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.845532][ T9075] netlink: 342 bytes leftover after parsing attributes in process `syz.0.738'. [ 272.937738][ T9077] FAULT_INJECTION: forcing a failure. [ 272.937738][ T9077] name failslab, interval 1, probability 0, space 0, times 0 [ 272.937782][ T9077] CPU: 0 UID: 0 PID: 9077 Comm: syz.0.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.937819][ T9077] Tainted: [L]=SOFTLOCKUP [ 272.937828][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.937843][ T9077] Call Trace: [ 272.937851][ T9077] [ 272.937861][ T9077] dump_stack_lvl+0x16c/0x1f0 [ 272.937893][ T9077] should_fail_ex+0x512/0x640 [ 272.937923][ T9077] ? kmem_cache_alloc_noprof+0x62/0x760 [ 272.937966][ T9077] should_failslab+0xc2/0x120 [ 272.937997][ T9077] kmem_cache_alloc_noprof+0x75/0x760 [ 272.938033][ T9077] ? dup_fd+0x52/0xc70 [ 272.938066][ T9077] ? dup_fd+0x52/0xc70 [ 272.938090][ T9077] dup_fd+0x52/0xc70 [ 272.938117][ T9077] ? find_held_lock+0x2b/0x80 [ 272.938163][ T9077] __do_sys_close_range+0x4ca/0x730 [ 272.938197][ T9077] ? __pfx___do_sys_close_range+0x10/0x10 [ 272.938246][ T9077] do_syscall_64+0xcd/0xf80 [ 272.938277][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.938304][ T9077] RIP: 0033:0x7f24bf78f7c9 [ 272.938324][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.938349][ T9077] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 272.938373][ T9077] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 272.938391][ T9077] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: 0000000000000000 [ 272.938410][ T9077] RBP: 00007f24bf813f91 R08: 0000000000000000 R09: 0000000000000000 [ 272.938426][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.938441][ T9077] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 272.938477][ T9077] [ 273.048788][ T9079] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 273.220294][ T9085] netlink: 334 bytes leftover after parsing attributes in process `syz.3.742'. [ 274.518487][ T9092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.552266][ T9092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.561903][ T9092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.567956][ T9092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.803500][ T9110] FAULT_INJECTION: forcing a failure. [ 274.803500][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 274.853664][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.0.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.853710][ T9110] Tainted: [L]=SOFTLOCKUP [ 274.853719][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.853735][ T9110] Call Trace: [ 274.853743][ T9110] [ 274.853753][ T9110] dump_stack_lvl+0x16c/0x1f0 [ 274.853793][ T9110] should_fail_ex+0x512/0x640 [ 274.853822][ T9110] ? __kmalloc_noprof+0xca/0x8f0 [ 274.853861][ T9110] should_failslab+0xc2/0x120 [ 274.853892][ T9110] __kmalloc_noprof+0xdd/0x8f0 [ 274.853926][ T9110] ? lsm_blob_alloc+0x68/0x90 [ 274.853966][ T9110] ? lsm_blob_alloc+0x68/0x90 [ 274.853998][ T9110] lsm_blob_alloc+0x68/0x90 [ 274.854032][ T9110] security_prepare_creds+0x2f/0x270 [ 274.854068][ T9110] prepare_creds+0x501/0x740 [ 274.854106][ T9110] __sys_setreuid+0x101/0xaf0 [ 274.854148][ T9110] ? rcu_is_watching+0x12/0xc0 [ 274.854176][ T9110] do_syscall_64+0xcd/0xf80 [ 274.854206][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.854232][ T9110] RIP: 0033:0x7f24bf78f7c9 [ 274.854252][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.854277][ T9110] RSP: 002b:00007f24c06b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 274.854301][ T9110] RAX: ffffffffffffffda RBX: 00007f24bf9e5fa0 RCX: 00007f24bf78f7c9 [ 274.854319][ T9110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.854333][ T9110] RBP: 00007f24bf813f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.854349][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.854364][ T9110] R13: 00007f24bf9e6038 R14: 00007f24bf9e5fa0 R15: 00007ffc768a0f98 [ 274.854399][ T9110] [ 275.414039][ T9120] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 275.878956][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.609105][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 276.609149][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 276.609179][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.775424][ T9147] FAULT_INJECTION: forcing a failure. [ 276.775424][ T9147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.775452][ T9147] CPU: 1 UID: 0 PID: 9147 Comm: syz.1.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.775472][ T9147] Tainted: [L]=SOFTLOCKUP [ 276.775476][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.775484][ T9147] Call Trace: [ 276.775489][ T9147] [ 276.775494][ T9147] dump_stack_lvl+0x16c/0x1f0 [ 276.775513][ T9147] should_fail_ex+0x512/0x640 [ 276.775532][ T9147] _copy_from_user+0x2e/0xd0 [ 276.775548][ T9147] core_sys_select+0x361/0xae0 [ 276.775568][ T9147] ? __pfx_core_sys_select+0x10/0x10 [ 276.775586][ T9147] ? proc_fail_nth_write+0x9f/0x220 [ 276.775627][ T9147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.775648][ T9147] kern_select+0x15d/0x1e0 [ 276.775662][ T9147] ? __pfx_kern_select+0x10/0x10 [ 276.775678][ T9147] ? __pfx_ksys_write+0x10/0x10 [ 276.775695][ T9147] __x64_sys_select+0xbd/0x160 [ 276.775708][ T9147] ? do_syscall_64+0x91/0xf80 [ 276.775722][ T9147] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.775736][ T9147] do_syscall_64+0xcd/0xf80 [ 276.775754][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.775768][ T9147] RIP: 0033:0x7f9f6c98f7c9 [ 276.775779][ T9147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.775792][ T9147] RSP: 002b:00007f9f6d865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 276.775805][ T9147] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c98f7c9 [ 276.775815][ T9147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 276.775823][ T9147] RBP: 00007f9f6d865090 R08: 0000000000000000 R09: 0000000000000000 [ 276.775830][ T9147] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 276.775839][ T9147] R13: 00007f9f6cbe6038 R14: 00007f9f6cbe5fa0 R15: 00007ffefc0d4508 [ 276.775857][ T9147] [ 276.952396][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 277.603058][ T9144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.603306][ T9144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.603504][ T9144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.603676][ T9144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.679813][ T9159] FAULT_INJECTION: forcing a failure. [ 277.679813][ T9159] name failslab, interval 1, probability 0, space 0, times 0 [ 277.679905][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.0.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.679934][ T9159] Tainted: [L]=SOFTLOCKUP [ 277.679939][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.679947][ T9159] Call Trace: [ 277.679952][ T9159] [ 277.679957][ T9159] dump_stack_lvl+0x16c/0x1f0 [ 277.679978][ T9159] should_fail_ex+0x512/0x640 [ 277.679993][ T9159] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 277.680016][ T9159] should_failslab+0xc2/0x120 [ 277.680033][ T9159] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 277.680052][ T9159] ? __alloc_skb+0x156/0x410 [ 277.680071][ T9159] ? __alloc_skb+0x156/0x410 [ 277.680084][ T9159] __alloc_skb+0x156/0x410 [ 277.680098][ T9159] ? __alloc_skb+0x35d/0x410 [ 277.680111][ T9159] ? __pfx___alloc_skb+0x10/0x10 [ 277.680133][ T9159] alloc_skb_with_frags+0xe0/0x860 [ 277.680157][ T9159] sock_alloc_send_pskb+0x7f9/0x980 [ 277.680172][ T9159] ? __lock_acquire+0x433/0x22f0 [ 277.680194][ T9159] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 277.680215][ T9159] ? __local_bh_enable_ip+0xa4/0x120 [ 277.680239][ T9159] j1939_sk_sendmsg+0x6bc/0x13d0 [ 277.680263][ T9159] ? __pfx_aa_sk_perm+0x10/0x10 [ 277.680287][ T9159] ? iovec_from_user+0xbb/0x140 [ 277.680319][ T9159] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 277.680341][ T9159] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 277.680368][ T9159] ____sys_sendmsg+0xa5d/0xc30 [ 277.680390][ T9159] ? copy_msghdr_from_user+0x10a/0x160 [ 277.680410][ T9159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.680433][ T9159] ? __pfx__kstrtoull+0x10/0x10 [ 277.680458][ T9159] ___sys_sendmsg+0x134/0x1d0 [ 277.680476][ T9159] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.680516][ T9159] ? __pfx___might_resched+0x10/0x10 [ 277.680536][ T9159] __sys_sendmmsg+0x200/0x420 [ 277.680555][ T9159] ? __pfx___sys_sendmmsg+0x10/0x10 [ 277.680580][ T9159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.680604][ T9159] ? fput+0x70/0xf0 [ 277.680622][ T9159] ? ksys_write+0x1ac/0x250 [ 277.680636][ T9159] ? __pfx_ksys_write+0x10/0x10 [ 277.680653][ T9159] __x64_sys_sendmmsg+0x9c/0x100 [ 277.680670][ T9159] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.680684][ T9159] do_syscall_64+0xcd/0xf80 [ 277.680699][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.680714][ T9159] RIP: 0033:0x7f24bf78f7c9 [ 277.680725][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.680739][ T9159] RSP: 002b:00007f24c0695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.680751][ T9159] RAX: ffffffffffffffda RBX: 00007f24bf9e6090 RCX: 00007f24bf78f7c9 [ 277.680763][ T9159] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.680771][ T9159] RBP: 00007f24c0695090 R08: 0000000000000000 R09: 0000000000000000 [ 277.680779][ T9159] R10: 000000003f0000f5 R11: 0000000000000246 R12: 0000000000000002 [ 277.680787][ T9159] R13: 00007f24bf9e6128 R14: 00007f24bf9e6090 R15: 00007ffc768a0f98 [ 277.680806][ T9159] [ 278.044358][ T9163] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 278.928013][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.130754][ T9161] FAULT_INJECTION: forcing a failure. [ 279.130754][ T9161] name failslab, interval 1, probability 0, space 0, times 0 [ 279.130807][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.2.762 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.130841][ T9161] Tainted: [L]=SOFTLOCKUP [ 279.130849][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.130863][ T9161] Call Trace: [ 279.130871][ T9161] [ 279.130880][ T9161] dump_stack_lvl+0x16c/0x1f0 [ 279.130911][ T9161] should_fail_ex+0x512/0x640 [ 279.130938][ T9161] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 279.130972][ T9161] should_failslab+0xc2/0x120 [ 279.131001][ T9161] kmem_cache_alloc_noprof+0x75/0x760 [ 279.131035][ T9161] ? skb_clone+0x190/0x3f0 [ 279.131073][ T9161] ? skb_clone+0x190/0x3f0 [ 279.131100][ T9161] skb_clone+0x190/0x3f0 [ 279.131132][ T9161] netlink_deliver_tap+0xabd/0xd30 [ 279.131175][ T9161] netlink_unicast+0x71f/0x870 [ 279.131215][ T9161] ? __pfx_netlink_unicast+0x10/0x10 [ 279.131252][ T9161] ? genl_rcv_msg+0x4bb/0x800 [ 279.131287][ T9161] netlink_ack+0x696/0xb80 [ 279.131333][ T9161] netlink_rcv_skb+0x332/0x420 [ 279.131367][ T9161] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.131395][ T9161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.131446][ T9161] ? netlink_deliver_tap+0x1ae/0xd30 [ 279.131486][ T9161] genl_rcv+0x28/0x40 [ 279.131507][ T9161] netlink_unicast+0x5aa/0x870 [ 279.131547][ T9161] ? __pfx_netlink_unicast+0x10/0x10 [ 279.131597][ T9161] netlink_sendmsg+0x8c8/0xdd0 [ 279.131650][ T9161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.131690][ T9161] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 279.131734][ T9161] ____sys_sendmsg+0xa5d/0xc30 [ 279.131772][ T9161] ? copy_msghdr_from_user+0x10a/0x160 [ 279.131806][ T9161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.131839][ T9161] ? __lock_acquire+0x433/0x22f0 [ 279.131887][ T9161] ___sys_sendmsg+0x134/0x1d0 [ 279.131919][ T9161] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.131948][ T9161] ? __lock_acquire+0x433/0x22f0 [ 279.132020][ T9161] __sys_sendmsg+0x16d/0x220 [ 279.132049][ T9161] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.132102][ T9161] do_syscall_64+0xcd/0xf80 [ 279.132131][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.132155][ T9161] RIP: 0033:0x7f7833b8f7c9 [ 279.132174][ T9161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.132197][ T9161] RSP: 002b:00007f7834b00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.132220][ T9161] RAX: ffffffffffffffda RBX: 00007f7833de5fa0 RCX: 00007f7833b8f7c9 [ 279.132236][ T9161] RDX: 0000000000040000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 279.132252][ T9161] RBP: 00007f7834b00090 R08: 0000000000000000 R09: 0000000000000000 [ 279.132267][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.132281][ T9161] R13: 00007f7833de6038 R14: 00007f7833de5fa0 R15: 00007ffe5e3a7c68 [ 279.132318][ T9161] [ 279.638974][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.639016][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.639042][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.665480][ T22] numa_remove_cpu cpu 1 node 0: mask now 0 [ 279.665561][ T22] numa_remove_cpu cpu 1 node 1: mask now 0 [ 279.667654][ T5952] smpboot: CPU 1 is now offline [ 279.917727][ T9177] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 279.918610][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 279.918637][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 279.918748][ T9170] ------------[ cut here ]------------ [ 279.919712][ T9170] WARNING: kernel/sched/sched.h:1549 at update_rq_clock+0x34a/0xc70, CPU#0: syz.1.765/9170 [ 279.919740][ T9170] Modules linked in: [ 279.920076][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.1.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.920097][ T9170] Tainted: [L]=SOFTLOCKUP [ 279.920103][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.920111][ T9170] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 279.920127][ T9170] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 98 6b dc 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 279.920140][ T9170] RSP: 0018:ffffc9000485fa90 EFLAGS: 00010046 [ 279.920152][ T9170] RAX: 0000000000000000 RBX: ffff8880b853acc0 RCX: 0000000000000001 [ 279.920161][ T9170] RDX: 0000000000000000 RSI: ffffffff8da94318 RDI: ffffffff8bf21680 [ 279.920170][ T9170] RBP: 0000000000000001 R08: ffff8880b843b7c8 R09: fffffbfff210eafa [ 279.920180][ T9170] R10: ffffffff908757d7 R11: 0000000000000001 R12: ffffffff90878854 [ 279.920188][ T9170] R13: ffffffff8dd53560 R14: ffff8880307fdb80 R15: ffff8880b853acc0 [ 279.920198][ T9170] FS: 000055558f9fe500(0000) GS:ffff888124965000(0000) knlGS:0000000000000000 [ 279.920213][ T9170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.920223][ T9170] CR2: 0000200000bec000 CR3: 0000000029572000 CR4: 00000000003526f0 [ 279.920232][ T9170] Call Trace: [ 279.920236][ T9170] [ 279.920242][ T9170] ? pick_task_fair+0x85/0x350 [ 279.920266][ T9170] __schedule+0x212d/0x6150 [ 279.920298][ T9170] ? __pfx___schedule+0x10/0x10 [ 279.920310][ T9170] ? find_held_lock+0x2b/0x80 [ 279.920331][ T9170] ? schedule+0x2d7/0x3a0 [ 279.920346][ T9170] schedule+0xe7/0x3a0 [ 279.920359][ T9170] do_nanosleep+0x219/0x580 [ 279.920381][ T9170] ? __pfx_do_nanosleep+0x10/0x10 [ 279.920400][ T9170] ? __asan_memset+0x23/0x50 [ 279.920422][ T9170] ? __hrtimer_setup+0x176/0x280 [ 279.920445][ T9170] hrtimer_nanosleep+0x155/0x380 [ 279.920460][ T9170] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 279.920476][ T9170] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 279.920499][ T9170] ? get_timespec64+0x136/0x1b0 [ 279.920516][ T9170] ? __pfx_get_timespec64+0x10/0x10 [ 279.920535][ T9170] common_nsleep+0xa1/0xd0 [ 279.920556][ T9170] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 279.920573][ T9170] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 279.920593][ T9170] do_syscall_64+0xcd/0xf80 [ 279.920609][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.920624][ T9170] RIP: 0033:0x7f9f6c9c2085 [ 279.920636][ T9170] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 279.920650][ T9170] RSP: 002b:00007ffefc0d4600 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 279.920663][ T9170] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c9c2085 [ 279.920672][ T9170] RDX: 00007ffefc0d4640 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.920681][ T9170] RBP: 00007f9f6cbe7da0 R08: 0000000000000000 R09: 00007f9f6d866000 [ 279.920689][ T9170] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000445e0 [ 279.920698][ T9170] R13: 00007f9f6cbe6180 R14: ffffffffffffffff R15: 00007ffefc0d4780 [ 279.920717][ T9170] [ 279.920724][ T9170] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.920734][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.1.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.920753][ T9170] Tainted: [L]=SOFTLOCKUP [ 279.920758][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.920766][ T9170] Call Trace: [ 279.920770][ T9170] [ 279.920776][ T9170] dump_stack_lvl+0x3d/0x1f0 [ 279.920791][ T9170] vpanic+0x640/0x6f0 [ 279.920808][ T9170] ? update_rq_clock+0x34a/0xc70 [ 279.920820][ T9170] panic+0xca/0xd0 [ 279.920834][ T9170] ? __pfx_panic+0x10/0x10 [ 279.920855][ T9170] ? check_panic_on_warn+0x1f/0xb0 [ 279.920872][ T9170] check_panic_on_warn+0xab/0xb0 [ 279.920889][ T9170] __warn+0x108/0x3c0 [ 279.920907][ T9170] __report_bug+0x2a0/0x520 [ 279.920926][ T9170] ? update_rq_clock+0x34a/0xc70 [ 279.920940][ T9170] ? __pfx___report_bug+0x10/0x10 [ 279.920959][ T9170] ? __pfx_css_rstat_updated+0x10/0x10 [ 279.920983][ T9170] ? update_rq_clock+0x34a/0xc70 [ 279.920996][ T9170] report_bug+0xb2/0x220 [ 279.921016][ T9170] ? update_rq_clock+0x34a/0xc70 [ 279.921028][ T9170] handle_bug+0x127/0x260 [ 279.921045][ T9170] exc_invalid_op+0x17/0x50 [ 279.921061][ T9170] asm_exc_invalid_op+0x1a/0x20 [ 279.921074][ T9170] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 279.921087][ T9170] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 98 6b dc 09 a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 279.921100][ T9170] RSP: 0018:ffffc9000485fa90 EFLAGS: 00010046 [ 279.921111][ T9170] RAX: 0000000000000000 RBX: ffff8880b853acc0 RCX: 0000000000000001 [ 279.921119][ T9170] RDX: 0000000000000000 RSI: ffffffff8da94318 RDI: ffffffff8bf21680 [ 279.921128][ T9170] RBP: 0000000000000001 R08: ffff8880b843b7c8 R09: fffffbfff210eafa [ 279.921137][ T9170] R10: ffffffff908757d7 R11: 0000000000000001 R12: ffffffff90878854 [ 279.921146][ T9170] R13: ffffffff8dd53560 R14: ffff8880307fdb80 R15: ffff8880b853acc0 [ 279.921164][ T9170] ? pick_task_fair+0x85/0x350 [ 279.921186][ T9170] __schedule+0x212d/0x6150 [ 279.921208][ T9170] ? __pfx___schedule+0x10/0x10 [ 279.921220][ T9170] ? find_held_lock+0x2b/0x80 [ 279.921240][ T9170] ? schedule+0x2d7/0x3a0 [ 279.921255][ T9170] schedule+0xe7/0x3a0 [ 279.921268][ T9170] do_nanosleep+0x219/0x580 [ 279.921294][ T9170] ? __pfx_do_nanosleep+0x10/0x10 [ 279.921313][ T9170] ? __asan_memset+0x23/0x50 [ 279.921334][ T9170] ? __hrtimer_setup+0x176/0x280 [ 279.921355][ T9170] hrtimer_nanosleep+0x155/0x380 [ 279.921369][ T9170] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 279.921386][ T9170] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 279.921408][ T9170] ? get_timespec64+0x136/0x1b0 [ 279.921424][ T9170] ? __pfx_get_timespec64+0x10/0x10 [ 279.921443][ T9170] common_nsleep+0xa1/0xd0 [ 279.921461][ T9170] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 279.921477][ T9170] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 279.921497][ T9170] do_syscall_64+0xcd/0xf80 [ 279.921512][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.921526][ T9170] RIP: 0033:0x7f9f6c9c2085 [ 279.921537][ T9170] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 279.921551][ T9170] RSP: 002b:00007ffefc0d4600 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 279.921564][ T9170] RAX: ffffffffffffffda RBX: 00007f9f6cbe5fa0 RCX: 00007f9f6c9c2085 [ 279.921573][ T9170] RDX: 00007ffefc0d4640 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.921582][ T9170] RBP: 00007f9f6cbe7da0 R08: 0000000000000000 R09: 00007f9f6d866000 [ 279.921590][ T9170] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000445e0 [ 279.921599][ T9170] R13: 00007f9f6cbe6180 R14: ffffffffffffffff R15: 00007ffefc0d4780 [ 279.921617][ T9170] [ 279.921665][ T9170] Kernel Offset: disabled