last executing test programs: 17m31.381109589s ago: executing program 2 (id=1679): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001080)=""/4143, 0x102f) 17m30.894316289s ago: executing program 2 (id=1680): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2140, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, 0x0, 0x400c000) close_range$auto(0x2, 0xa, 0x0) socket(0x22, 0x2, 0x1) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) socket(0xa, 0x5, 0x84) socketpair$auto(0xf3, 0x4, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz2\x00', 0x50b282, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) 17m29.352497888s ago: executing program 2 (id=1684): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x108000, 0x800032, 0x4) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000001340)={r0, 0x7, 0xa}, 0xd4a, 0x3) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x654442, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000001a00)="5142651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79aa73484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb12dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbba8c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b3983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee6d6088b541a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2b5101b742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92163d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee7fa7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062bb3b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1", 0x9cb) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xffffffeb) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c1080, 0x0) 17m25.270202265s ago: executing program 2 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x408001, 0x0) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4000000) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x54, 0x0, 0x201, 0x70bd28, 0x25dfdc03, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x8}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x40000000000001c}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r2}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r2}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x38) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x19c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6aea}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1d1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000010) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) close_range$auto(0x2, r3, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') socket(0x2, 0x80000, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4) sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r6 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r6, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdc01, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x80000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001080)=""/4143, 0x102f) 17m24.139864538s ago: executing program 2 (id=1696): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000e80)=""/199, 0xc7) 17m23.913561122s ago: executing program 2 (id=1699): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) sysfs$auto(0x2, 0x9, 0x0) (async) capset$auto(0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfdf3) (async) socket(0x2c, 0x3, 0x0) (async) r0 = socket(0x848000000015, 0x5, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), r0) (async) r1 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) getsockopt$auto_SO_BUF_LOCK(r1, 0x4, 0x48, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000080)=0x2) (async) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0x15, 0x3, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) (async) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) (async) ioctl$auto(0x3, 0x8905, 0x38) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3d, 0xffffffffffffffff, 0x9) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) close_range$auto(0x2, 0x8, 0x0) (async) userfaultfd$auto(0x1) 17m8.802327919s ago: executing program 32 (id=1699): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) sysfs$auto(0x2, 0x9, 0x0) (async) capset$auto(0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfdf3) (async) socket(0x2c, 0x3, 0x0) (async) r0 = socket(0x848000000015, 0x5, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), r0) (async) r1 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) getsockopt$auto_SO_BUF_LOCK(r1, 0x4, 0x48, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000080)=0x2) (async) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0x15, 0x3, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) (async) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) (async) ioctl$auto(0x3, 0x8905, 0x38) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3d, 0xffffffffffffffff, 0x9) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) close_range$auto(0x2, 0x8, 0x0) (async) userfaultfd$auto(0x1) 19.906323956s ago: executing program 0 (id=4858): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x68140, 0x0) timer_settime$auto(0x4, 0x5, &(0x7f00000000c0)={{0x8, 0x10004}, {0x809, 0x11}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/awdio1\x00V\xff\xfe\x88\xee;\x9d[\xc4\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\xeb4\x1b\xe4O\x99\xedX;\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa44\x953.O\xab\x01\x00\x00\x00\x00\x00\x00\x805`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf6\x94\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf.f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xd1\xa4(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccr[\\iE\xd9\xf9\xa8\xa5\xaf\xfcgrM\x9e\x0e', 0x100000a3dd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 18.866984853s ago: executing program 0 (id=4862): ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 18.493123996s ago: executing program 0 (id=4864): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = prctl$auto_PR_SET_SECCOMP(0x16, 0x0, 0x5, 0x3, 0xd) mmap$auto(0x80000001, 0x400008, 0x8, 0x9b72, r4, 0x8000) setresuid$auto(0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x722, 0x2, &(0x7f00000008c0)={{0x10001, 0xee00, 0x0, 0x10000, 0x1, 0x0, 0x155}, &(0x7f0000000840), &(0x7f0000000880)=0x9, 0x401, 0x0, 0x3, 0xfff, 0x9, 0xc, 0xff, 0x6, @raw=0x8, @inferred=0xffffffffffffffff}) shmctl$auto_SHM_STAT_ANY(0x1, 0xf, &(0x7f0000000a40)={{0x2, 0xee00, 0xee01, 0x9, 0x3b, 0xfffffff8, 0x8}, 0x7, 0x2, 0x7ff, 0x4b, @inferred, @inferred, 0xc64c, 0x0, &(0x7f0000000940), &(0x7f0000000980)="490506101210341871202b0545695dad96c5c8a19414f522930ce9f8582bd210b5502010bdaef08d3d59f7b23149e37d9043978a59bc4d00578db532d0a87cf133215c72bee2de9c1a422dbd3ecc38c15735d049051413a073ea5bdcc597274c7476cc43d003b9707b7f321ae79cc0150296b8784fabaa61c51f9a91d3f8a6b77141af9c9a4182ac2f3e0472be54a5228cb25f0727686cd45426c5"}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000001540)=ANY=[@ANYBLOB='x\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a500bd8004000a80837dfb651320b10d3638d887374aa552c8eece994932fcf313ea54f4f1dcfb64d5503c290c61c9625a0d88c58ffb5d13f9fc4ef23188fb5be6ef4ee89034841384482635a90d58a2c59dd7806c681ad3034c4b2bbe931d9aa8d2acad07cdef81c0fc7fd98022346a5c32f537a4dd6ff25fa0f95ea73778ca2878309b73951b0400778008009000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000b80297d60860af66614e593a7905485f97c103837e36c76e5fc3d70dda4dee49f67a57555977c5fbe3053f09af0aac30a0277c46586a5778be522d9764b6a1b9344d04727dd23ecba200d6b8eeb476a8e6df08a9f8554cf96c58b4fbc0f348b1fb7c751f07222e0019e684e06d350c10b0405d995c901fe0eae3ad3f5f95dadefc913b51a327833997a0800f000ac1414bb0800b000", @ANYRES16=r0, @ANYBLOB="0000b200488001f76014a527c1fbcde65e5fe058e5a127961552584260e2ad51e2876dc1f027c935a862c7eef3ee5d3c7e43fa6531f3a2a9ed81367d734a2161a2fdb09997c0c65c8048e517387ec667948f1a9df3ca741ec3ee0a3f0abb39f1fe52b56e1a46f55f16b5c3984acb4cb3c3c03232c7b38b2aa4ee0ae8d0b66b7e294c1057a8426700e526aba50c9f71c2a6291d1a0800d200", @ANYRES32=0xee00, @ANYBLOB="1400d700fc010000000000000000000000000001040054800000bfab7cbb96cec1a9527620ae26e0c1cb4d4967c315233bd2be96f898811f91f0c461736eaa2a3f62317e81d45003063514e1995a464a76e078f0844ceb87a5d0160daed340e81359704b6c25e41b34b39250e61450edccd0e285267c66ab18e4911df2e2dc013e3512e19aec16a900303dfac2aefd8948ff3fc7bda3a8fc30715069447e0f91c6c44eb1f33f8f1ac2aca03b4e7a5e482582b09a1130d56e233f7e3bac4ebcd124ba4b74a94cde67121590935fda5776e8c6a35226fb1ee6a7a4320bad07b95e41f6ef088e71f0efdc8f55de5d2bb300cc1f0c89a30719ab57c6d64f30788420a2c05622f1694dd1dca336e2edbfb2b291d71da458696e011280be959d77ec88a993a65550df22a909f22f74e2918a9a00301f0f33f186be59ec13da6341ecd3cf53fd7aaaf4133384563ed3de7978c37be4f6772413d108b2d9b8e7f144681f19532e284d69f70cc0bd2af3157ae6d2c9d5d68901df10d312722ce60e90601118009cb321e37cba99bd681f6ad1e0c1f7cd47d9ed7d0222663dd2fde53bb8635538c7d4b98e9908004100", @ANYRES32=0x0, @ANYBLOB="0400158008003500", @ANYRES32=r3, @ANYBLOB="8ce50e1c845ef1203be9f1b243643ca28fb0c6ec53152cef1256c5c6e5deeb0b9bb4e761094ad0a35d8c5791505064b79295bf6deed54016437cf6bbabb728a7e022ff0cbfbf674f9c299109bd52a9cee50dee078a0d836ef1c4542e9d035a644d172454de3ddf4d408a45ebd6fd4f8f1fa618510716f3b91cfde874ab10e7d21e25e0569e5d9a6c06318b2f82c54b3a1caea2b9d1a2428a7c93c1859cd3afb4d2fd6e770df153fe4431eba660a2c7eb8b8ee8eea8efea4f035252c0aa08002500e000000204009e800000f802098008001e00", @ANYRES32=0x0, @ANYBLOB='\b\x00y\x00', @ANYRES32=r1, @ANYBLOB="14005e00fc0200000000000000000000000000000400f08078a3c4130cfd02642a995c674a11486241a7917c1a210e476ad2f83e0400d600f8004c800400eb8008002e00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="1dc55d2633ea1bf185a097e0f5d44a97806b5f20eb94aabcccad3a0c2762d941013e8260f6b38325714d55b1f4a05dfe995ecd9581056eda0ba60c7ce6e05a08008100ffffffff000008003a00", @ANYRES32=r6, @ANYBLOB], 0xa78}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) 17.202018994s ago: executing program 0 (id=4869): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x4) r1 = socket(0xa, 0x1, 0x100) accept$auto(r1, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b8008002600", @ANYRES32=r2, @ANYBLOB="08006e00ac1414aa2c02bc8028029880220242804b8ef4dea62052d4391e1b7fcd2429f7195770e4ca6f21844850ff750ce04caf301dc66838e61817fb1f807d53f524a2ac569f0f1c754ec84650d22b883479398e9d766ecc3fa8de0f83e8f703cb19a0826ec7c4949cfb6d57b9da527f69f742accc66d7f2c47d87ec1d7fde707f710037006af15d7fa2ec9194354a1069b7c806492e043fa1fdad718d351a10ddade114048ff1302faa59a651c349c5ec3cede0e3949d48b97b2bd1d493852ed30d3a7c2cead7511ef0c8d71cb13b68fb7475ceac2b9816379110f6b4d10d69aea84f032ee4c179ba7929c5d06329cbdf05000000040034804d001f800400f18004006c800d7112532deb3ef76f18436c6041ed69a31df55778585e94b7244ba30fca32a34652fd3f440a97d881a3e6c962f72b82c506b0f9531ca4e8321faaa8982bbdfd85000000e5007d800800e4000474c6ce2b42d43548d264eeb0222a1fef36b71e6f343c79479f1fe8dc01a1364b", @ANYRES32=0x0, @ANYBLOB="0400af80cee0bd49dab2a617b70e1a2e040e6ba448f301800a8999cec0bec67eb0617ad3f9a0977d09fa35f0e26b923a2713f1104ff7a5b18a2629bbee5de69b17f06e13870462f79e9deb527b97fd65fc8b156b0f525dfca9340f14dc75ef0881c14f5b87a6c615ee754d72289dcac3c308002b00", @ANYRES32=0x0, @ANYBLOB="6000f68004004880f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a0400de8004004380040078800c00a700feffffffffffffff0000000000000000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) r5 = prctl$auto_PR_SET_MM_ENV_END(0xd4, 0xb, 0x0, 0x6, 0x7) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000140), r5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/pts/ptmx\x00', 0x80, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto(0x3, 0x5411, 0xffffffffffffffff) 16.785731554s ago: executing program 0 (id=4870): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = prctl$auto_PR_SET_SECCOMP(0x16, 0x0, 0x5, 0x3, 0xd) mmap$auto(0x80000001, 0x400008, 0x8, 0x9b72, r4, 0x8000) setresuid$auto(0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x722, 0x2, &(0x7f00000008c0)={{0x10001, 0xee00, 0x0, 0x10000, 0x1, 0x0, 0x155}, &(0x7f0000000840), &(0x7f0000000880)=0x9, 0x401, 0x0, 0x3, 0xfff, 0x9, 0xc, 0xff, 0x6, @raw=0x8, @inferred=0xffffffffffffffff}) shmctl$auto_SHM_STAT_ANY(0x1, 0xf, &(0x7f0000000a40)={{0x2, 0xee00, 0xee01, 0x9, 0x3b, 0xfffffff8, 0x8}, 0x7, 0x2, 0x7ff, 0x4b, @inferred, @inferred, 0xc64c, 0x0, &(0x7f0000000940)="a194ce7d84937f9d90a7297c480d20ba62e25bec8f74c7", &(0x7f0000000980)="490506101210341871202b0545695dad96c5c8a19414f522930ce9f8582bd210b5502010bdaef08d3d59f7b23149e37d9043978a59bc4d00578db532d0a87cf133215c72bee2de9c1a422dbd3ecc38c15735d049051413a073ea5bdcc597274c7476cc43d003b9707b7f321ae79cc0150296b8784fabaa61c51f9a91d3f8a6b77141af9c9a4182ac2f3e0472be54a5228cb25f0727686cd45426c5"}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000001540)=ANY=[@ANYBLOB='x\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a500bd8004000a80837dfb651320b10d3638d887374aa552c8eece994932fcf313ea54f4f1dcfb64d5503c290c61c9625a0d88c58ffb5d13f9fc4ef23188fb5be6ef4ee89034841384482635a90d58a2c59dd7806c681ad3034c4b2bbe931d9aa8d2acad07cdef81c0fc7fd98022346a5c32f537a4dd6ff25fa0f95ea73778ca2878309b73951b0400778008009000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000b80297d60860af66614e593a7905485f97c103837e36c76e5fc3d70dda4dee49f67a57555977c5fbe3053f09af0aac30a0277c46586a5778be522d9764b6a1b9344d04727dd23ecba200d6b8eeb476a8e6df08a9f8554cf96c58b4fbc0f348b1fb7c751f07222e0019e684e06d350c10b0405d995c901fe0eae3ad3f5f95dadefc913b51a327833997a0800f000ac1414bb0800b000", @ANYRES16=r0, @ANYBLOB="0000b200488001f76014a527c1fbcde65e5fe058e5a127961552584260e2ad51e2876dc1f027c935a862c7eef3ee5d3c7e43fa6531f3a2a9ed81367d734a2161a2fdb09997c0c65c8048e517387ec667948f1a9df3ca741ec3ee0a3f0abb39f1fe52b56e1a46f55f16b5c3984acb4cb3c3c03232c7b38b2aa4ee0ae8d0b66b7e294c1057a8426700e526aba50c9f71c2a6291d1a0800d200", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400158008003500", @ANYRES32=r3, @ANYBLOB="8ce50e1c845ef1203be9f1b243643ca28fb0c6ec53152cef1256c5c6e5deeb0b9bb4e761094ad0a35d8c5791505064b79295bf6deed54016437cf6bbabb728a7e022ff0cbfbf674f9c299109bd52a9cee50dee078a0d836ef1c4542e9d035a644d172454de3ddf4d408a45ebd6fd4f8f1fa618510716f3b91cfde874ab10e7d21e25e0569e5d9a6c06318b2f82c54b3a1caea2b9d1a2428a7c93c1859cd3afb4d2fd6e770df153fe4431eba660a2c7eb8b8ee8eea8efea4f035252c0aa08002500e000000204009e800000f802098008001e00", @ANYRES32=0x0, @ANYBLOB='\b\x00y\x00', @ANYRES32=r1, @ANYBLOB="14005e00fc0200000000000000000000000000000400f08078a3c4130cfd02642a995c674a11486241a7917c1a210e476ad2f83e0400d600f8004c800400eb8008002e00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="1dc55d2633ea1bf185a097e0f5d44a97806b5f20eb94aabcccad3a0c2762d941013e8260f6b38325714d55b1f4a05dfe995ecd9581056eda0ba60c7ce6e05a08008100ffffffff000008003a00", @ANYRES32=r6, @ANYBLOB], 0xa78}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) 15.672301383s ago: executing program 0 (id=4874): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_clock\x00', 0x20000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) mmap$auto(0x0, 0x3, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x4, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x4000000, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r1, 0x0, 0x2) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x800, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 5.087335959s ago: executing program 3 (id=4916): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000100)='B\x00\x00\x00\x00\x00\x00\x001\x00', 0xe, 0x7) r0 = semctl$auto(0x1, 0x7, 0x2, 0xffffffffffffff7e) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="00042bbd7000fcdbdf250200000008000900", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r0, @ANYRES16, @ANYRES32=r3, @ANYBLOB="0008000200", @ANYRES32=r0, @ANYBLOB="0800070004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r6, @ANYRES8, @ANYBLOB="fb0c9586c543bbc10b8093921124a477fb375b986f320ddd2ffc17c1d15862cd7e76498f74", @ANYRES16=r1, @ANYRES8=r4, @ANYRESOCT=r6, @ANYRESOCT=r6], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000440)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) close_range$auto(r5, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) madvise$auto(0x0, 0x400053, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r7, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_CREATE_VM(r7, 0x4040aea0, 0x0) 4.624789057s ago: executing program 3 (id=4918): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x101601, 0x0) socket(0x2a, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video1\x00', 0x8a240, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60c1c2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getpid() r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) open_by_handle_at$auto(r1, &(0x7f0000000440)={0x1a, 0x3ff, "9136a9be8e677f546c9d59e672d01f29fc398b89f6b84b0df9eb"}, 0x4295) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) acct$auto(&(0x7f0000000040)='./cgroup/cgroup.subtree_control\x00') openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x1]}, 0x0) msync$auto(0x7, 0x401, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) 4.500379149s ago: executing program 4 (id=4919): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) fspick$auto(0xffffffffffffffff, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x161342, 0x130) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040094) write$auto(r1, 0x0, 0x98c7) madvise$auto(0x0, 0x8, 0x15) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0xf3ffffff) 3.541254178s ago: executing program 1 (id=4921): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) set_tid_address$auto(0x0) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r0, 0x80046f45, 0x38) 3.493692504s ago: executing program 3 (id=4922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) sendmsg$auto_NFC_CMD_DEV_DOWN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x2ec, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1000000}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4370}, @NFC_ATTR_LLC_SDP={0x2c0, 0x13, 0x0, 0x1, [@nested={0x1cb, 0x12f, 0x0, 0x1, [@generic="375cc6848c556fc5276fc4fdc59906c32079123e451623f8a6819b399a7fe938bbf32b46c45d4d9ecd9b977f9a3484599bc1f9f58a3abf83213c608655f87a46bba3b2898ac0cdecf6fb7ae84bd42fd0a25e685e9f5684e56984f87e667338dcd619108d79128dedcab904a1dc613dadd988160f88cce77e64432fc18388535e509245dbe90aab467dc39261667730ebfaf44c71a31688b52b43c4f5754c18394b0e880728260ab5a159af9df2716ba0315b3bfa505eb8b4921e8c9980864c08b8", @nested={0x4, 0x4}, @generic="93a77406418df4b11ea7f1df1fa02a44f397a7d50551b43719a7219991b4ccfd9b76085388a82e084403e8a2b2abcd4e844ae0b3e2ef8f0e139ba175c53d99e0a8a9c97a", @generic="49cfc52015ffa7a1c83a1f807937aa4d909dbca6b6f69242e090826f9240d1fd2538475cd34ad40d6f8c131c32cbe9d0d0f2187b6c0df9c4f1e8725abc2f82c8a5fb7cfdfbd279bfbaf71fb43639c67d7cfae18fd4122770dca7488f64b36f5ec456a8fb590af9907f1c8aeeeedf0bc8f1f52d5e8e363ac49b493934a4c680416e6ae71c5d59d0d112c35a3b001a9ad11a7fed2d3cb19c552cf43e9051106086c46cb4b095e82fa8acd4cead93e784bdd1814a70de6e00d6706e", @nested={0x4, 0x109}]}, @generic="285ef8c4d8d41d8b2fdb1259b4374c66657c6bc1f5f00c5564db2d6e21a9d54ea40d4f5f2a80d745545057ca821b5308c2153e4c5c359166d58d9189ae68f7869d94020f1d99e298ca303d6a667d6eca56465a7fe252a2260f76e90754018be086eaa7fbd4a6445e97a69df823caf59e92b295b15ceac8888bda683e55bbfb4eaef6e6129f47ef14c07ac395d83ce034095dfa4d5cbf23fe951a2a54fb5f2ccfd38f54c2010d2b5fed27968e8e532b41158078289e8eea2e56b3b486b180803ffcc2bf64946d3769e5d0673289a173712cb8da579e803a9f776c93b0ea792c4605cc0a649d4d507d70558df726dd8135"]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40}, 0x2080) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, &(0x7f0000000540)="5024515f72ee835aee6da491ccab91660401ce9edac1db31899e5ead17de12f5d2edd0de178bd38d7eb1a98635d73452b75f8353e1f2fc9ffaa3d68f04ceb8898aa94fde95ab7106712b4cab341a6c4a48a9089dd3519c02e9d9724f29ddeb4847", 0x61) 3.297030984s ago: executing program 1 (id=4923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) (fail_nth: 1) sendmsg$auto_NFC_CMD_DEV_DOWN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x2ec, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1000000}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4370}, @NFC_ATTR_LLC_SDP={0x2c0, 0x13, 0x0, 0x1, [@nested={0x1cb, 0x12f, 0x0, 0x1, [@generic="375cc6848c556fc5276fc4fdc59906c32079123e451623f8a6819b399a7fe938bbf32b46c45d4d9ecd9b977f9a3484599bc1f9f58a3abf83213c608655f87a46bba3b2898ac0cdecf6fb7ae84bd42fd0a25e685e9f5684e56984f87e667338dcd619108d79128dedcab904a1dc613dadd988160f88cce77e64432fc18388535e509245dbe90aab467dc39261667730ebfaf44c71a31688b52b43c4f5754c18394b0e880728260ab5a159af9df2716ba0315b3bfa505eb8b4921e8c9980864c08b8", @nested={0x4, 0x4}, @generic="93a77406418df4b11ea7f1df1fa02a44f397a7d50551b43719a7219991b4ccfd9b76085388a82e084403e8a2b2abcd4e844ae0b3e2ef8f0e139ba175c53d99e0a8a9c97a", @generic="49cfc52015ffa7a1c83a1f807937aa4d909dbca6b6f69242e090826f9240d1fd2538475cd34ad40d6f8c131c32cbe9d0d0f2187b6c0df9c4f1e8725abc2f82c8a5fb7cfdfbd279bfbaf71fb43639c67d7cfae18fd4122770dca7488f64b36f5ec456a8fb590af9907f1c8aeeeedf0bc8f1f52d5e8e363ac49b493934a4c680416e6ae71c5d59d0d112c35a3b001a9ad11a7fed2d3cb19c552cf43e9051106086c46cb4b095e82fa8acd4cead93e784bdd1814a70de6e00d6706e", @nested={0x4, 0x109}]}, @generic="285ef8c4d8d41d8b2fdb1259b4374c66657c6bc1f5f00c5564db2d6e21a9d54ea40d4f5f2a80d745545057ca821b5308c2153e4c5c359166d58d9189ae68f7869d94020f1d99e298ca303d6a667d6eca56465a7fe252a2260f76e90754018be086eaa7fbd4a6445e97a69df823caf59e92b295b15ceac8888bda683e55bbfb4eaef6e6129f47ef14c07ac395d83ce034095dfa4d5cbf23fe951a2a54fb5f2ccfd38f54c2010d2b5fed27968e8e532b41158078289e8eea2e56b3b486b180803ffcc2bf64946d3769e5d0673289a173712cb8da579e803a9f776c93b0ea792c4605cc0a649d4d507d70558df726dd8135"]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40}, 0x2080) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, &(0x7f0000000540)="5024515f72ee835aee6da491ccab91660401ce9edac1db31899e5ead17de12f5d2edd0de178bd38d7eb1a98635d73452b75f8353e1f2fc9ffaa3d68f04ceb8898aa94fde95ab7106712b4cab341a6c4a48a9089dd3519c02e9d9724f29ddeb4847", 0x61) 3.286762704s ago: executing program 3 (id=4924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) sendmsg$auto_NFC_CMD_DEV_DOWN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x2ec, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1000000}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4370}, @NFC_ATTR_LLC_SDP={0x2c0, 0x13, 0x0, 0x1, [@nested={0x1cb, 0x12f, 0x0, 0x1, [@generic="375cc6848c556fc5276fc4fdc59906c32079123e451623f8a6819b399a7fe938bbf32b46c45d4d9ecd9b977f9a3484599bc1f9f58a3abf83213c608655f87a46bba3b2898ac0cdecf6fb7ae84bd42fd0a25e685e9f5684e56984f87e667338dcd619108d79128dedcab904a1dc613dadd988160f88cce77e64432fc18388535e509245dbe90aab467dc39261667730ebfaf44c71a31688b52b43c4f5754c18394b0e880728260ab5a159af9df2716ba0315b3bfa505eb8b4921e8c9980864c08b8", @nested={0x4, 0x4}, @generic="93a77406418df4b11ea7f1df1fa02a44f397a7d50551b43719a7219991b4ccfd9b76085388a82e084403e8a2b2abcd4e844ae0b3e2ef8f0e139ba175c53d99e0a8a9c97a", @generic="49cfc52015ffa7a1c83a1f807937aa4d909dbca6b6f69242e090826f9240d1fd2538475cd34ad40d6f8c131c32cbe9d0d0f2187b6c0df9c4f1e8725abc2f82c8a5fb7cfdfbd279bfbaf71fb43639c67d7cfae18fd4122770dca7488f64b36f5ec456a8fb590af9907f1c8aeeeedf0bc8f1f52d5e8e363ac49b493934a4c680416e6ae71c5d59d0d112c35a3b001a9ad11a7fed2d3cb19c552cf43e9051106086c46cb4b095e82fa8acd4cead93e784bdd1814a70de6e00d6706e", @nested={0x4, 0x109}]}, @generic="285ef8c4d8d41d8b2fdb1259b4374c66657c6bc1f5f00c5564db2d6e21a9d54ea40d4f5f2a80d745545057ca821b5308c2153e4c5c359166d58d9189ae68f7869d94020f1d99e298ca303d6a667d6eca56465a7fe252a2260f76e90754018be086eaa7fbd4a6445e97a69df823caf59e92b295b15ceac8888bda683e55bbfb4eaef6e6129f47ef14c07ac395d83ce034095dfa4d5cbf23fe951a2a54fb5f2ccfd38f54c2010d2b5fed27968e8e532b41158078289e8eea2e56b3b486b180803ffcc2bf64946d3769e5d0673289a173712cb8da579e803a9f776c93b0ea792c4605cc0a649d4d507d70558df726dd8135"]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40}, 0x2080) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x40}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x45}, @NL80211_ATTR_MLO_LINKS={0x10, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf255e0000000400cc000c00580006000000000000000400410008000900ff010000"], 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x48096) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, &(0x7f0000000540)="5024515f72ee835aee6da491ccab91660401ce9edac1db31899e5ead17de12f5d2edd0de178bd38d7eb1a98635d73452b75f8353e1f2fc9ffaa3d68f04ceb8898aa94fde95ab7106712b4cab341a6c4a48a9089dd3519c02e9d9724f29ddeb4847", 0x61) 3.175980416s ago: executing program 4 (id=4925): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000300)="db000000") keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="c6000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4010) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) 2.775867104s ago: executing program 3 (id=4926): mmap$auto(0x2, 0x400008, 0xdf, 0x10011, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, 0x0) kill$auto_SIGCONT(0x0, 0x12) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0xb) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, 0x0, 0x3) socket(0x10, 0x2, 0x4) socket(0x21, 0x2, 0x4) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) ioctl$auto_UI_SET_SNDBIT(r2, 0x4004556a, 0x0) read$auto_snapshot_fops_user(0xffffffffffffffff, &(0x7f0000000000)=""/198, 0xc6) close_range$auto(0x0, 0x5, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r3) 2.725697596s ago: executing program 1 (id=4927): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x101601, 0x0) socket(0x2a, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video1\x00', 0x8a240, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60c1c2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getpid() r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) open_by_handle_at$auto(r1, &(0x7f0000000440)={0x1a, 0x3ff, "9136a9be8e677f546c9d59e672d01f29fc398b89f6b84b0df9eb"}, 0x4295) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) acct$auto(&(0x7f0000000040)='./cgroup/cgroup.subtree_control\x00') openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x1]}, 0x0) msync$auto(0x7, 0x401, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.034435071s ago: executing program 3 (id=4928): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) open(0x0, 0x40202, 0x79) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffc) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xffffffffffffffff, 0xffffffffffff0002, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r2, 0x0) socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x10b402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.283584358s ago: executing program 1 (id=4929): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="17000000", @ANYBLOB='j\x00%', @ANYBLOB="8e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340), 0xfc2}, 0x2, &(0x7f0000000440), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) unshare$auto(0x40000080) fadvise64$auto(0xffffffffffffffff, 0x8, 0x400000000000006, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xffffffffffffffc0, 0x6, 0x9b72, 0x2, 0x8008) r1 = socket(0xa, 0x1, 0x0) prctl$auto(0x3e, 0x0, 0x0, 0x1, 0x0) sendmmsg$auto(r1, 0x0, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) write$auto(0x3, 0x0, 0xfffffdef) 1.131325529s ago: executing program 4 (id=4930): ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 955.554455ms ago: executing program 4 (id=4931): r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000180), 0x0) futex$auto(&(0x7f0000000080)=0x7, 0x69, 0x7, &(0x7f00000000c0)={0x100000001, 0x7fffffff}, &(0x7f0000000140)=0x7, 0x0) write$auto(0x3, 0x0, 0x5) write$auto(r3, 0x0, 0x3) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000014001f00ffffff7f000000000000ffff000000001400200000000000000000000000ffff0000000006001b004e"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) socket(0x1e, 0x4, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) ioctl$auto_TCSBRKP2(r8, 0x5425, 0x0) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyv3\x00', 0xc0ac1, 0x0) ioctl$auto_TCFLSH2(r10, 0x5408, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) sendfile$auto(r2, r5, &(0x7f00000002c0)=0x4, 0xc8) pread64$auto(r0, 0x0, 0x7ff, 0x800) 837.641529ms ago: executing program 1 (id=4932): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) set_tid_address$auto(0x0) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r0, 0x80046f45, 0x38) 699.045585ms ago: executing program 1 (id=4933): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x68140, 0x0) timer_settime$auto(0x4, 0x5, &(0x7f00000000c0)={{0x8, 0x10004}, {0x809, 0x11}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/awdio1\x00V\xff\xfe\x88\xee;\x9d[\xc4\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\xeb4\x1b\xe4O\x99\xedX;\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa44\x953.O\xab\x01\x00\x00\x00\x00\x00\x00\x805`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf6\x94\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf.f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xd1\xa4(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccr[\\iE\xd9\xf9\xa8\xa5\xaf\xfcgrM\x9e\x0e', 0x100000a3dd) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 422.0289ms ago: executing program 33 (id=4874): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_clock\x00', 0x20000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) mmap$auto(0x0, 0x3, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x4, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x4000000, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r1, 0x0, 0x2) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x800, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 417.237992ms ago: executing program 4 (id=4935): mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x1, 0x84) setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x10000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram8/queue/max_integrity_segments\x00', 0x8080, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0x100000000eb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) r1 = epoll_create$auto(0x4e) capset$auto(0x0, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r2, 0x0, 0x8) close_range$auto(0x2, 0xa, 0x0) 0s ago: executing program 4 (id=4936): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x20000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x40000080) r0 = socket(0x1d, 0x0, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, 0xffffffffffffffff) r3 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x200, 0x0) fanotify_mark$auto(r3, 0x72d, 0x5, 0xffffffffffffffff, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto(r0, 0x0, 0x2) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 334 bytes leftover after parsing attributes in process `syz.4.4538'. [ 1975.427795][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4538'. [ 1975.962118][T28899] usb usb15: usbfs: process 28899 (syz.4.4538) did not claim interface 0 before use [ 1978.370603][T28929] FAULT_INJECTION: forcing a failure. [ 1978.370603][T28929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1978.479869][T28929] CPU: 1 UID: 0 PID: 28929 Comm: syz.3.4544 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1978.479924][T28929] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1978.479936][T28929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1978.479955][T28929] Call Trace: [ 1978.479965][T28929] [ 1978.479977][T28929] dump_stack_lvl+0x100/0x190 [ 1978.480021][T28929] should_fail_ex.cold+0x5/0xa [ 1978.480077][T28929] _copy_from_user+0x2e/0xd0 [ 1978.480138][T28929] copy_msghdr_from_user+0x9f/0x4f0 [ 1978.480182][T28929] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1978.480232][T28929] ? __lock_acquire+0x4a5/0x2630 [ 1978.480285][T28929] ___sys_recvmsg+0xdd/0x1a0 [ 1978.480325][T28929] ? __pfx____sys_recvmsg+0x10/0x10 [ 1978.480388][T28929] ? __pfx___might_resched+0x10/0x10 [ 1978.480450][T28929] do_recvmmsg+0x301/0x760 [ 1978.480497][T28929] ? __pfx_do_recvmmsg+0x10/0x10 [ 1978.480534][T28929] ? ksys_write+0x190/0x250 [ 1978.480572][T28929] ? ksys_write+0x190/0x250 [ 1978.480618][T28929] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1978.480674][T28929] ? __fget_files+0x21f/0x3d0 [ 1978.480722][T28929] __x64_sys_recvmmsg+0x22a/0x280 [ 1978.480777][T28929] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1978.480841][T28929] do_syscall_64+0xc9/0xf80 [ 1978.480886][T28929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.480920][T28929] RIP: 0033:0x7f62d419aeb9 [ 1978.480946][T28929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.480978][T28929] RSP: 002b:00007f62d50fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1978.481009][T28929] RAX: ffffffffffffffda RBX: 00007f62d4415fa0 RCX: 00007f62d419aeb9 [ 1978.481031][T28929] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1978.481051][T28929] RBP: 00007f62d50fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.481070][T28929] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 1978.481090][T28929] R13: 00007f62d4416038 R14: 00007f62d4415fa0 R15: 00007ffed3336c08 [ 1978.481140][T28929] [ 1979.023840][T28940] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 1980.687093][T28961] block nbd8: shutting down sockets [ 1982.091957][T28980] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4556'. [ 1982.407364][T28988] bond0: invalid ARP target specified [ 1982.456729][T28988] bond0: invalid ARP target specified [ 1982.508099][T28988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4557'. [ 1983.372088][T29006] FAULT_INJECTION: forcing a failure. [ 1983.372088][T29006] name failslab, interval 1, probability 393216, space 0, times 0 [ 1983.385454][T29006] CPU: 1 UID: 0 PID: 29006 Comm: syz.3.4564 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1983.385501][T29006] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1983.385511][T29006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1983.385525][T29006] Call Trace: [ 1983.385533][T29006] [ 1983.385543][T29006] dump_stack_lvl+0x100/0x190 [ 1983.385620][T29006] should_fail_ex.cold+0x5/0xa [ 1983.385674][T29006] should_failslab+0xc2/0x120 [ 1983.385708][T29006] __kmalloc_cache_noprof+0x80/0x810 [ 1983.385735][T29006] ? snd_seq_prioq_new+0x3f/0x110 [ 1983.385778][T29006] ? snd_seq_prioq_new+0x3f/0x110 [ 1983.385811][T29006] snd_seq_prioq_new+0x3f/0x110 [ 1983.385845][T29006] snd_seq_queue_alloc+0x153/0x590 [ 1983.385881][T29006] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1983.385923][T29006] call_seq_client_ctl+0xa3/0x130 [ 1983.385949][T29006] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1983.385988][T29006] alloc_seq_queue+0xdb/0x180 [ 1983.386013][T29006] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1983.386052][T29006] ? mark_held_locks+0x40/0x70 [ 1983.386083][T29006] ? _raw_spin_unlock_irq+0x23/0x50 [ 1983.386108][T29006] ? lockdep_hardirqs_on+0x78/0x100 [ 1983.386138][T29006] snd_seq_oss_open+0x2b2/0xa10 [ 1983.386170][T29006] odev_open+0x79/0xc0 [ 1983.386191][T29006] ? __pfx_odev_open+0x10/0x10 [ 1983.386214][T29006] soundcore_open+0x2e3/0x5a0 [ 1983.386242][T29006] ? __pfx_soundcore_open+0x10/0x10 [ 1983.386267][T29006] chrdev_open+0x234/0x6a0 [ 1983.386296][T29006] ? __pfx_apparmor_file_open+0x10/0x10 [ 1983.386328][T29006] ? __pfx_chrdev_open+0x10/0x10 [ 1983.386358][T29006] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1983.386393][T29006] do_dentry_open+0x73e/0x1570 [ 1983.386421][T29006] ? __pfx_chrdev_open+0x10/0x10 [ 1983.386450][T29006] ? security_inode_permission+0xbf/0x250 [ 1983.386495][T29006] vfs_open+0x82/0x3f0 [ 1983.386532][T29006] path_openat+0x21dc/0x3120 [ 1983.386588][T29006] ? __pfx_path_openat+0x10/0x10 [ 1983.386627][T29006] do_filp_open+0x1f7/0x420 [ 1983.386656][T29006] ? __pfx_do_filp_open+0x10/0x10 [ 1983.386702][T29006] ? _raw_spin_unlock+0x28/0x50 [ 1983.386724][T29006] ? alloc_fd+0x476/0x790 [ 1983.386759][T29006] do_sys_openat2+0x12e/0x220 [ 1983.386795][T29006] ? __pfx_do_sys_openat2+0x10/0x10 [ 1983.386831][T29006] ? __do_sys_close_range+0x230/0x740 [ 1983.386866][T29006] __x64_sys_openat+0x12d/0x210 [ 1983.386902][T29006] ? __pfx___x64_sys_openat+0x10/0x10 [ 1983.386936][T29006] ? ksys_write+0x1ac/0x250 [ 1983.386978][T29006] do_syscall_64+0xc9/0xf80 [ 1983.387009][T29006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.387032][T29006] RIP: 0033:0x7f62d419aeb9 [ 1983.387051][T29006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.387074][T29006] RSP: 002b:00007f62d50da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1983.387096][T29006] RAX: ffffffffffffffda RBX: 00007f62d4416090 RCX: 00007f62d419aeb9 [ 1983.387111][T29006] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1983.387126][T29006] RBP: 00007f62d50da090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.387140][T29006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1983.387154][T29006] R13: 00007f62d4416128 R14: 00007f62d4416090 R15: 00007ffed3336c08 [ 1983.387183][T29006] [ 1984.374932][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1986.210453][T29058] netlink: 'syz.3.4577': attribute type 5 has an invalid length. [ 1986.223020][T29058] netlink: 'syz.3.4577': attribute type 1 has an invalid length. [ 1986.235289][T29058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4577'. [ 1986.290257][T29058] netlink: 'syz.3.4577': attribute type 5 has an invalid length. [ 1986.403482][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.410538][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.435004][T29058] netlink: 'syz.3.4577': attribute type 1 has an invalid length. [ 1986.475919][T29058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4577'. [ 1986.842112][T29070] block nbd8: shutting down sockets [ 1989.425828][T29100] Invalid ELF header magic: != ELF [ 1990.404221][T29116] Invalid ELF header magic: != ELF [ 1991.177294][T29116] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input37 [ 1991.858155][T29126] FAULT_INJECTION: forcing a failure. [ 1991.858155][T29126] name failslab, interval 1, probability 393216, space 0, times 0 [ 1991.936280][T29126] CPU: 1 UID: 0 PID: 29126 Comm: syz.1.4591 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1991.936334][T29126] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1991.936346][T29126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1991.936365][T29126] Call Trace: [ 1991.936377][T29126] [ 1991.936389][T29126] dump_stack_lvl+0x100/0x190 [ 1991.936434][T29126] should_fail_ex.cold+0x5/0xa [ 1991.936488][T29126] should_failslab+0xc2/0x120 [ 1991.936535][T29126] kmem_cache_alloc_noprof+0x83/0x780 [ 1991.936579][T29126] ? __pmd_alloc+0xbf/0x9c0 [ 1991.936636][T29126] ? __pmd_alloc+0xbf/0x9c0 [ 1991.936684][T29126] __pmd_alloc+0xbf/0x9c0 [ 1991.936737][T29126] __handle_mm_fault+0xa99/0x2b50 [ 1991.936787][T29126] ? mt_find+0x45e/0x8e0 [ 1991.936831][T29126] ? __pfx___handle_mm_fault+0x10/0x10 [ 1991.936866][T29126] ? __pfx_mt_find+0x10/0x10 [ 1991.936930][T29126] ? find_vma+0xbf/0x140 [ 1991.936982][T29126] ? __pfx_find_vma+0x10/0x10 [ 1991.937030][T29126] handle_mm_fault+0x36d/0xa20 [ 1991.937074][T29126] do_user_addr_fault+0x74c/0x12f0 [ 1991.937124][T29126] exc_page_fault+0x6f/0xd0 [ 1991.937168][T29126] asm_exc_page_fault+0x26/0x30 [ 1991.937199][T29126] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1991.937250][T29126] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1991.937281][T29126] RSP: 0018:ffffc9000ae5fc80 EFLAGS: 00050202 [ 1991.937312][T29126] RAX: 0000000000000001 RBX: 0000000000000060 RCX: 0000000000000060 [ 1991.937332][T29126] RDX: 0000000000000001 RSI: ffff88801feeb700 RDI: 0000000000000001 [ 1991.937353][T29126] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1003fdd6eb [ 1991.937373][T29126] R10: ffff88801feeb75f R11: 0000000000000000 R12: ffff88801feeb700 [ 1991.937395][T29126] R13: 0000000000000061 R14: 00007ffffffff000 R15: 0000000000000000 [ 1991.937437][T29126] _copy_to_user+0xa4/0xd0 [ 1991.937489][T29126] do_pagemap_scan+0x4a7/0xcc0 [ 1991.937538][T29126] ? __pfx_do_pagemap_scan+0x10/0x10 [ 1991.937577][T29126] ? do_vfs_ioctl+0x226/0x13e0 [ 1991.937662][T29126] ? __fget_files+0x21f/0x3d0 [ 1991.937705][T29126] do_pagemap_cmd+0x58/0x80 [ 1991.937744][T29126] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 1991.937790][T29126] __x64_sys_ioctl+0x18e/0x210 [ 1991.937844][T29126] do_syscall_64+0xc9/0xf80 [ 1991.937888][T29126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.937921][T29126] RIP: 0033:0x7fa440f9aeb9 [ 1991.937947][T29126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.937980][T29126] RSP: 002b:00007fa441e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.938010][T29126] RAX: ffffffffffffffda RBX: 00007fa441215fa0 RCX: 00007fa440f9aeb9 [ 1991.938033][T29126] RDX: 000020000000c380 RSI: 00000000c0606610 RDI: 0000000000000003 [ 1991.938054][T29126] RBP: 00007fa441e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1991.938074][T29126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.938094][T29126] R13: 00007fa441216038 R14: 00007fa441215fa0 R15: 00007fff85509078 [ 1991.938135][T29126] [ 1996.066130][T29171] block nbd8: shutting down sockets [ 1997.416937][T29185] Invalid ELF header magic: != ELF [ 1999.496077][T29184] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input38 [ 2003.869253][T29263] block nbd8: shutting down sockets [ 2006.267581][T29291] kvm: kvm [29290]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 2008.174594][ T30] audit: type=1800 audit(2147483706.805:94): pid=29309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4630" name="features" dev="configfs" ino=442911 res=0 errno=0 [ 2011.171963][T29343] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4636'. [ 2011.494881][T29348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4637'. [ 2012.556863][T29362] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input39 [ 2013.678518][T29380] block nbd8: shutting down sockets [ 2014.812014][T29400] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input40 [ 2015.158325][T29403] FAULT_INJECTION: forcing a failure. [ 2015.158325][T29403] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2015.187347][T29403] CPU: 1 UID: 0 PID: 29403 Comm: syz.4.4653 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2015.187386][T29403] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2015.187396][T29403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2015.187409][T29403] Call Trace: [ 2015.187417][T29403] [ 2015.187426][T29403] dump_stack_lvl+0x100/0x190 [ 2015.187457][T29403] should_fail_ex.cold+0x5/0xa [ 2015.187494][T29403] get_futex_key+0x1d2/0x1620 [ 2015.187527][T29403] ? __pfx_get_futex_key+0x10/0x10 [ 2015.187566][T29403] futex_wake+0xea/0x530 [ 2015.187604][T29403] ? __pfx_futex_wake+0x10/0x10 [ 2015.187643][T29403] ? exit_mm_release+0x19/0x30 [ 2015.187705][T29403] do_futex+0x32b/0x350 [ 2015.187738][T29403] ? __pfx_do_futex+0x10/0x10 [ 2015.187768][T29403] ? __might_fault+0xc5/0x140 [ 2015.187803][T29403] mm_release+0x24a/0x2f0 [ 2015.187831][T29403] do_exit+0x675/0x2a30 [ 2015.187870][T29403] ? __pfx_do_exit+0x10/0x10 [ 2015.187916][T29403] ? do_raw_spin_lock+0x128/0x260 [ 2015.187952][T29403] ? find_held_lock+0x2b/0x80 [ 2015.187979][T29403] ? get_signal+0x7e0/0x21e0 [ 2015.188009][T29403] do_group_exit+0xd5/0x2a0 [ 2015.188047][T29403] get_signal+0x1ec7/0x21e0 [ 2015.188080][T29403] ? fd_install+0x223/0x580 [ 2015.188109][T29403] ? __pfx_get_signal+0x10/0x10 [ 2015.188138][T29403] ? do_futex+0x192/0x350 [ 2015.188173][T29403] arch_do_signal_or_restart+0x91/0x770 [ 2015.188208][T29403] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2015.188249][T29403] ? __pfx___x64_sys_futex+0x10/0x10 [ 2015.188280][T29403] ? xfd_validate_state+0x129/0x190 [ 2015.188323][T29403] exit_to_user_mode_loop+0x86/0x4b0 [ 2015.188357][T29403] ? rcu_is_watching+0x12/0xc0 [ 2015.188382][T29403] do_syscall_64+0x4ea/0xf80 [ 2015.188414][T29403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.188438][T29403] RIP: 0033:0x7f133db9aeb9 [ 2015.188457][T29403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2015.188480][T29403] RSP: 002b:00007f133bdee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2015.188503][T29403] RAX: fffffffffffffe00 RBX: 00007f133de15fa8 RCX: 00007f133db9aeb9 [ 2015.188519][T29403] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f133de15fa8 [ 2015.188533][T29403] RBP: 00007f133de15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2015.188550][T29403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2015.188564][T29403] R13: 00007f133de16038 R14: 00007ffca8ce3030 R15: 00007ffca8ce3118 [ 2015.188594][T29403] [ 2016.731663][T29425] FAULT_INJECTION: forcing a failure. [ 2016.731663][T29425] name failslab, interval 1, probability 393216, space 0, times 0 [ 2016.829847][T29425] CPU: 0 UID: 0 PID: 29425 Comm: syz.3.4659 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2016.829889][T29425] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2016.829898][T29425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2016.829912][T29425] Call Trace: [ 2016.829919][T29425] [ 2016.829929][T29425] dump_stack_lvl+0x100/0x190 [ 2016.829962][T29425] should_fail_ex.cold+0x5/0xa [ 2016.830001][T29425] should_failslab+0xc2/0x120 [ 2016.830035][T29425] __kvmalloc_node_noprof+0x101/0xac0 [ 2016.830064][T29425] ? bpf_lsm_capable+0x9/0x10 [ 2016.830084][T29425] ? security_capable+0x80/0x260 [ 2016.830113][T29425] ? proc_sys_call_handler+0x2c7/0x5a0 [ 2016.830149][T29425] ? ns_capable_noaudit+0xd5/0x100 [ 2016.830180][T29425] ? proc_sys_call_handler+0x2c7/0x5a0 [ 2016.830217][T29425] proc_sys_call_handler+0x2c7/0x5a0 [ 2016.830256][T29425] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 2016.830301][T29425] copy_splice_read+0x4ba/0xb90 [ 2016.830334][T29425] ? __pfx_copy_splice_read+0x10/0x10 [ 2016.830369][T29425] ? find_held_lock+0x2b/0x80 [ 2016.830397][T29425] ? __pfx_copy_splice_read+0x10/0x10 [ 2016.830427][T29425] do_splice_read+0x285/0x370 [ 2016.830456][T29425] splice_direct_to_actor+0x2a1/0xa30 [ 2016.830484][T29425] ? __pfx_direct_splice_actor+0x10/0x10 [ 2016.830517][T29425] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2016.830559][T29425] do_splice_direct+0x174/0x240 [ 2016.830586][T29425] ? __pfx_do_splice_direct+0x10/0x10 [ 2016.830612][T29425] ? common_file_perm+0x1ab/0x4f0 [ 2016.830648][T29425] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2016.830680][T29425] ? rw_verify_area+0xce/0x6d0 [ 2016.830706][T29425] do_sendfile+0xadc/0xe20 [ 2016.830737][T29425] ? __pfx_do_sendfile+0x10/0x10 [ 2016.830764][T29425] ? __fget_files+0x21f/0x3d0 [ 2016.830799][T29425] __x64_sys_sendfile64+0x1d8/0x220 [ 2016.830832][T29425] ? ksys_write+0x1ac/0x250 [ 2016.830858][T29425] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2016.830901][T29425] do_syscall_64+0xc9/0xf80 [ 2016.830933][T29425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.830957][T29425] RIP: 0033:0x7f62d419aeb9 [ 2016.830975][T29425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2016.830999][T29425] RSP: 002b:00007f62d50fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2016.831021][T29425] RAX: ffffffffffffffda RBX: 00007f62d4415fa0 RCX: 00007f62d419aeb9 [ 2016.831037][T29425] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2016.831051][T29425] RBP: 00007f62d50fb090 R08: 0000000000000000 R09: 0000000000000000 [ 2016.831065][T29425] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000002 [ 2016.831079][T29425] R13: 00007f62d4416038 R14: 00007f62d4415fa0 R15: 00007ffed3336c08 [ 2016.831109][T29425] [ 2017.557724][T29432] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input41 [ 2017.686645][T29435] random: crng reseeded on system resumption [ 2018.285740][T20289] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2019.106341][T29456] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4667'. [ 2019.393816][T29456] ima: policy update failed [ 2019.399083][ T30] audit: type=1802 audit(2147483718.045:95): pid=29456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4667" res=0 errno=0 [ 2020.665382][T29470] syz.3.4670(29470): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2022.757843][T29501] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input42 [ 2022.784689][T29501] FAULT_INJECTION: forcing a failure. [ 2022.784689][T29501] name failslab, interval 1, probability 393216, space 0, times 0 [ 2022.868555][T29501] CPU: 1 UID: 0 PID: 29501 Comm: syz.3.4680 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2022.868595][T29501] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2022.868604][T29501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2022.868618][T29501] Call Trace: [ 2022.868626][T29501] [ 2022.868635][T29501] dump_stack_lvl+0x100/0x190 [ 2022.868669][T29501] should_fail_ex.cold+0x5/0xa [ 2022.868709][T29501] should_failslab+0xc2/0x120 [ 2022.868744][T29501] kmem_cache_alloc_noprof+0x83/0x780 [ 2022.868795][T29501] ? __asan_memcpy+0x3c/0x60 [ 2022.868820][T29501] ? __kernfs_new_node+0xd2/0x960 [ 2022.868860][T29501] ? __kernfs_new_node+0xd2/0x960 [ 2022.868892][T29501] __kernfs_new_node+0xd2/0x960 [ 2022.868929][T29501] ? __pfx___kernfs_new_node+0x10/0x10 [ 2022.868971][T29501] ? find_held_lock+0x2b/0x80 [ 2022.868995][T29501] ? kernfs_root+0xee/0x2a0 [ 2022.869028][T29501] ? kernfs_root+0xee/0x2a0 [ 2022.869068][T29501] kernfs_new_node+0x11b/0x1a0 [ 2022.869111][T29501] kernfs_create_link+0xcc/0x240 [ 2022.869142][T29501] sysfs_do_create_link_sd+0x90/0x140 [ 2022.869178][T29501] sysfs_create_link+0x61/0xc0 [ 2022.869212][T29501] device_add+0xb5d/0x1950 [ 2022.869251][T29501] ? __pfx_device_add+0x10/0x10 [ 2022.869303][T29501] ? kobject_get+0xbb/0x150 [ 2022.869340][T29501] cdev_device_add+0x12b/0x270 [ 2022.869373][T29501] evdev_connect+0x3a8/0x4b0 [ 2022.869410][T29501] input_attach_handler.isra.0+0x177/0x1e0 [ 2022.869446][T29501] input_register_device.cold+0x139/0x375 [ 2022.869493][T29501] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 2022.869535][T29501] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2022.869575][T29501] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 2022.869624][T29501] ? find_held_lock+0x2b/0x80 [ 2022.869648][T29501] ? hook_file_ioctl_common+0x146/0x410 [ 2022.869700][T29501] ? __pfx_uinput_ioctl+0x10/0x10 [ 2022.869741][T29501] __x64_sys_ioctl+0x18e/0x210 [ 2022.869783][T29501] do_syscall_64+0xc9/0xf80 [ 2022.869816][T29501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.869841][T29501] RIP: 0033:0x7f62d419aeb9 [ 2022.869860][T29501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2022.869885][T29501] RSP: 002b:00007f62d50fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2022.869909][T29501] RAX: ffffffffffffffda RBX: 00007f62d4415fa0 RCX: 00007f62d419aeb9 [ 2022.869926][T29501] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 2022.869941][T29501] RBP: 00007f62d4208c1f R08: 0000000000000000 R09: 0000000000000000 [ 2022.869957][T29501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2022.869972][T29501] R13: 00007f62d4416038 R14: 00007f62d4415fa0 R15: 00007ffed3336c08 [ 2022.870003][T29501] [ 2023.552541][T29501] input: failed to attach handler evdev to device input42, error: -12 [ 2024.752796][T29522] FAULT_INJECTION: forcing a failure. [ 2024.752796][T29522] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2024.892330][T29522] CPU: 0 UID: 0 PID: 29522 Comm: syz.4.4685 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2024.892390][T29522] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2024.892413][T29522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2024.892429][T29522] Call Trace: [ 2024.892438][T29522] [ 2024.892448][T29522] dump_stack_lvl+0x100/0x190 [ 2024.892482][T29522] should_fail_ex.cold+0x5/0xa [ 2024.892522][T29522] get_futex_key+0x1d2/0x1620 [ 2024.892558][T29522] ? __pfx_get_futex_key+0x10/0x10 [ 2024.892592][T29522] ? trace_pid_list_is_set+0x11a/0x390 [ 2024.892631][T29522] ? trace_pid_list_is_set+0x22c/0x390 [ 2024.892676][T29522] futex_wait_setup+0x81/0x500 [ 2024.892707][T29522] __futex_wait+0x19f/0x300 [ 2024.892732][T29522] ? __pfx___futex_wait+0x10/0x10 [ 2024.892754][T29522] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2024.892781][T29522] ? lockdep_hardirqs_on+0x78/0x100 [ 2024.892813][T29522] ? __pfx_futex_wake_mark+0x10/0x10 [ 2024.892860][T29522] ? find_held_lock+0x2b/0x80 [ 2024.892884][T29522] ? futex_wake+0x456/0x530 [ 2024.892929][T29522] futex_wait+0xed/0x380 [ 2024.892952][T29522] ? __pfx_futex_wait+0x10/0x10 [ 2024.892981][T29522] ? fd_install+0x223/0x580 [ 2024.893006][T29522] ? putname+0xf5/0x1a0 [ 2024.893044][T29522] do_futex+0x1ef/0x350 [ 2024.893085][T29522] ? __pfx_do_futex+0x10/0x10 [ 2024.893117][T29522] ? __pfx_do_sys_openat2+0x10/0x10 [ 2024.893159][T29522] ? __fget_files+0x21f/0x3d0 [ 2024.893189][T29522] __x64_sys_futex+0x34f/0x4d0 [ 2024.893226][T29522] ? __x64_sys_openat+0x12d/0x210 [ 2024.893265][T29522] ? __pfx___x64_sys_futex+0x10/0x10 [ 2024.893299][T29522] ? xfd_validate_state+0x129/0x190 [ 2024.893348][T29522] do_syscall_64+0xc9/0xf80 [ 2024.893380][T29522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.893406][T29522] RIP: 0033:0x7f133db9aeb9 [ 2024.893425][T29522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2024.893449][T29522] RSP: 002b:00007f133bdee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2024.893473][T29522] RAX: ffffffffffffffda RBX: 00007f133de15fa8 RCX: 00007f133db9aeb9 [ 2024.893490][T29522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f133de15fa8 [ 2024.893505][T29522] RBP: 00007f133de15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2024.893521][T29522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2024.893536][T29522] R13: 00007f133de16038 R14: 00007ffca8ce3030 R15: 00007ffca8ce3118 [ 2024.893567][T29522] [ 2026.273055][T29535] ima: policy update failed [ 2026.320803][ T30] audit: type=1802 audit(2147483724.915:96): pid=29535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4687" res=0 errno=0 [ 2028.787128][T29555] block nbd8: shutting down sockets [ 2029.069612][T29562] FAULT_INJECTION: forcing a failure. [ 2029.069612][T29562] name failslab, interval 1, probability 393216, space 0, times 0 [ 2029.097163][T29562] CPU: 0 UID: 0 PID: 29562 Comm: syz.4.4696 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2029.097206][T29562] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2029.097216][T29562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2029.097231][T29562] Call Trace: [ 2029.097239][T29562] [ 2029.097249][T29562] dump_stack_lvl+0x100/0x190 [ 2029.097284][T29562] should_fail_ex.cold+0x5/0xa [ 2029.097325][T29562] should_failslab+0xc2/0x120 [ 2029.097361][T29562] __kmalloc_cache_noprof+0x80/0x810 [ 2029.097388][T29562] ? cec_open+0xdb/0x690 [ 2029.097420][T29562] ? cec_open+0xdb/0x690 [ 2029.097452][T29562] cec_open+0xdb/0x690 [ 2029.097481][T29562] ? __pfx_cec_open+0x10/0x10 [ 2029.097512][T29562] ? kobject_get_unless_zero+0x156/0x200 [ 2029.097546][T29562] ? find_held_lock+0x2b/0x80 [ 2029.097570][T29562] ? chrdev_open+0x10b/0x6a0 [ 2029.097600][T29562] ? chrdev_open+0x10b/0x6a0 [ 2029.097634][T29562] ? __pfx_cec_open+0x10/0x10 [ 2029.097661][T29562] chrdev_open+0x234/0x6a0 [ 2029.097691][T29562] ? __pfx_apparmor_file_open+0x10/0x10 [ 2029.097724][T29562] ? __pfx_chrdev_open+0x10/0x10 [ 2029.097756][T29562] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2029.097793][T29562] do_dentry_open+0x73e/0x1570 [ 2029.097822][T29562] ? __pfx_chrdev_open+0x10/0x10 [ 2029.097854][T29562] ? security_inode_permission+0xbf/0x250 [ 2029.097897][T29562] vfs_open+0x82/0x3f0 [ 2029.097936][T29562] path_openat+0x21dc/0x3120 [ 2029.097976][T29562] ? __pfx_path_openat+0x10/0x10 [ 2029.098016][T29562] do_filp_open+0x1f7/0x420 [ 2029.098048][T29562] ? __pfx_do_filp_open+0x10/0x10 [ 2029.098103][T29562] ? _raw_spin_unlock+0x28/0x50 [ 2029.098127][T29562] ? alloc_fd+0x476/0x790 [ 2029.098163][T29562] do_sys_openat2+0x12e/0x220 [ 2029.098202][T29562] ? __pfx_do_sys_openat2+0x10/0x10 [ 2029.098242][T29562] ? __fget_files+0x21f/0x3d0 [ 2029.098275][T29562] __x64_sys_openat+0x12d/0x210 [ 2029.098316][T29562] ? __pfx___x64_sys_openat+0x10/0x10 [ 2029.098359][T29562] ? xfd_validate_state+0x129/0x190 [ 2029.098412][T29562] do_syscall_64+0xc9/0xf80 [ 2029.098450][T29562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.098477][T29562] RIP: 0033:0x7f133db9aeb9 [ 2029.098497][T29562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.098521][T29562] RSP: 002b:00007f133bdee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2029.098545][T29562] RAX: ffffffffffffffda RBX: 00007f133de15fa0 RCX: 00007f133db9aeb9 [ 2029.098562][T29562] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 2029.098578][T29562] RBP: 00007f133dc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2029.098594][T29562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2029.098609][T29562] R13: 00007f133de16038 R14: 00007f133de15fa0 R15: 00007ffca8ce3118 [ 2029.098640][T29562] [ 2030.170156][T29566] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.4697'. [ 2030.272250][T29566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4697'. [ 2030.281715][T29566] openvswitch: netlink: Message has 8 unknown bytes. [ 2032.217585][T29602] FAULT_INJECTION: forcing a failure. [ 2032.217585][T29602] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2032.231907][T29602] CPU: 1 UID: 0 PID: 29602 Comm: syz.4.4707 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2032.231948][T29602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2032.231958][T29602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2032.231974][T29602] Call Trace: [ 2032.231981][T29602] [ 2032.231991][T29602] dump_stack_lvl+0x100/0x190 [ 2032.232025][T29602] should_fail_ex.cold+0x5/0xa [ 2032.232066][T29602] get_futex_key+0x1d2/0x1620 [ 2032.232101][T29602] ? __pfx_get_futex_key+0x10/0x10 [ 2032.232143][T29602] futex_wake+0xea/0x530 [ 2032.232181][T29602] ? rcu_is_watching+0x12/0xc0 [ 2032.232207][T29602] ? lockdep_hardirqs_on+0x78/0x100 [ 2032.232236][T29602] ? __pfx_futex_wake+0x10/0x10 [ 2032.232279][T29602] ? fd_install+0x223/0x580 [ 2032.232304][T29602] ? putname+0xf5/0x1a0 [ 2032.232343][T29602] do_futex+0x32b/0x350 [ 2032.232377][T29602] ? __pfx_do_futex+0x10/0x10 [ 2032.232410][T29602] ? __pfx_do_sys_openat2+0x10/0x10 [ 2032.232450][T29602] ? __fget_files+0x21f/0x3d0 [ 2032.232487][T29602] __x64_sys_futex+0x34f/0x4d0 [ 2032.232523][T29602] ? __x64_sys_openat+0x12d/0x210 [ 2032.232562][T29602] ? __pfx___x64_sys_futex+0x10/0x10 [ 2032.232596][T29602] ? xfd_validate_state+0x129/0x190 [ 2032.232646][T29602] do_syscall_64+0xc9/0xf80 [ 2032.232678][T29602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2032.232703][T29602] RIP: 0033:0x7f133db9aeb9 [ 2032.232722][T29602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.232746][T29602] RSP: 002b:00007f133bdee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2032.232769][T29602] RAX: ffffffffffffffda RBX: 00007f133de15fa8 RCX: 00007f133db9aeb9 [ 2032.232786][T29602] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f133de15fac [ 2032.232801][T29602] RBP: 00007f133de15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2032.232816][T29602] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 2032.232831][T29602] R13: 00007f133de16038 R14: 00007ffca8ce3030 R15: 00007ffca8ce3118 [ 2032.232861][T29602] [ 2033.308081][T29615] block nbd8: shutting down sockets [ 2033.752049][T29611] [U] [ 2033.754953][T29611] [U] [ 2033.757713][T29611] [U] [ 2033.760468][T29611] [U] [ 2033.796248][T29611] [U] [ 2033.799058][T29611] [U] [ 2033.801821][T29611] [U] [ 2033.804601][T29611] [U] [ 2033.893952][T29611] [U] [ 2033.896778][T29611] [U] [ 2033.899553][T29611] [U] [ 2033.902409][T29611] [U] [ 2033.965823][T29611] [U] [ 2034.659584][T29639] FAULT_INJECTION: forcing a failure. [ 2034.659584][T29639] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2034.727267][T29639] CPU: 1 UID: 0 PID: 29639 Comm: syz.0.4718 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2034.727324][T29639] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2034.727338][T29639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2034.727358][T29639] Call Trace: [ 2034.727369][T29639] [ 2034.727382][T29639] dump_stack_lvl+0x100/0x190 [ 2034.727431][T29639] should_fail_ex.cold+0x5/0xa [ 2034.727487][T29639] get_futex_key+0x1d2/0x1620 [ 2034.727538][T29639] ? __pfx_get_futex_key+0x10/0x10 [ 2034.727598][T29639] futex_wake+0xea/0x530 [ 2034.727650][T29639] ? rcu_is_watching+0x12/0xc0 [ 2034.727687][T29639] ? lockdep_hardirqs_on+0x78/0x100 [ 2034.727729][T29639] ? __pfx_futex_wake+0x10/0x10 [ 2034.727788][T29639] ? fd_install+0x223/0x580 [ 2034.727823][T29639] ? putname+0xf5/0x1a0 [ 2034.727877][T29639] do_futex+0x32b/0x350 [ 2034.727926][T29639] ? __pfx_do_futex+0x10/0x10 [ 2034.727982][T29639] ? __pfx_do_sys_openat2+0x10/0x10 [ 2034.728041][T29639] ? __fget_files+0x21f/0x3d0 [ 2034.728083][T29639] __x64_sys_futex+0x34f/0x4d0 [ 2034.728135][T29639] ? __x64_sys_openat+0x12d/0x210 [ 2034.728192][T29639] ? __pfx___x64_sys_futex+0x10/0x10 [ 2034.728242][T29639] ? xfd_validate_state+0x129/0x190 [ 2034.728312][T29639] do_syscall_64+0xc9/0xf80 [ 2034.728360][T29639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2034.728396][T29639] RIP: 0033:0x7eff2599aeb9 [ 2034.728423][T29639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2034.728456][T29639] RSP: 002b:00007eff23bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2034.728489][T29639] RAX: ffffffffffffffda RBX: 00007eff25c15fa8 RCX: 00007eff2599aeb9 [ 2034.728513][T29639] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007eff25c15fac [ 2034.728534][T29639] RBP: 00007eff25c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2034.728555][T29639] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 2034.728575][T29639] R13: 00007eff25c16038 R14: 00007ffc16639d10 R15: 00007ffc16639df8 [ 2034.728619][T29639] [ 2035.625609][ T30] audit: type=1326 audit(2147483734.255:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29651 comm="syz.3.4723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62d419aeb9 code=0x0 [ 2037.824011][T29680] [U] [ 2037.826897][T29680] [U] [ 2037.829655][T29680] [U] [ 2037.832408][T29680] [U] [ 2037.865957][T29680] [U] [ 2037.868771][T29680] [U] [ 2037.871535][T29680] [U] [ 2037.874331][T29680] [U] [ 2037.878782][T29680] [U] [ 2037.881560][T29680] [U] [ 2037.884312][T29680] [U] [ 2037.887069][T29680] [U] [ 2037.896755][T29680] [U] [ 2037.899538][T29680] [U] [ 2037.902292][T29680] [U] [ 2037.905046][T29680] [U] [ 2037.995030][T29680] [U] [ 2037.997833][T29680] [U] [ 2038.000593][T29680] [U] [ 2038.003369][T29680] [U] [ 2038.066002][T29680] [U] [ 2038.068800][T29680] [U] [ 2038.071553][T29680] [U] [ 2038.074324][T29680] [U] [ 2038.096635][T29680] [U] [ 2040.034057][T29715] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4736'. [ 2040.385446][T29722] FAULT_INJECTION: forcing a failure. [ 2040.385446][T29722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2040.432979][T29722] CPU: 1 UID: 0 PID: 29722 Comm: syz.3.4738 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2040.433032][T29722] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2040.433045][T29722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2040.433064][T29722] Call Trace: [ 2040.433074][T29722] [ 2040.433085][T29722] dump_stack_lvl+0x100/0x190 [ 2040.433128][T29722] should_fail_ex.cold+0x5/0xa [ 2040.433175][T29722] ? prepare_alloc_pages+0x16d/0x5f0 [ 2040.433229][T29722] should_fail_alloc_page+0xeb/0x140 [ 2040.433278][T29722] prepare_alloc_pages+0x1f0/0x5f0 [ 2040.433334][T29722] __alloc_frozen_pages_noprof+0x193/0x2410 [ 2040.433374][T29722] ? is_bpf_text_address+0x94/0x1a0 [ 2040.433413][T29722] ? kernel_text_address+0x8d/0x100 [ 2040.433471][T29722] ? __kernel_text_address+0xd/0x30 [ 2040.433521][T29722] ? unwind_get_return_address+0x59/0xa0 [ 2040.433562][T29722] ? arch_stack_walk+0xa6/0xf0 [ 2040.433610][T29722] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2040.433656][T29722] ? stack_trace_save+0x8e/0xc0 [ 2040.433694][T29722] ? __pfx_stack_trace_save+0x10/0x10 [ 2040.433743][T29722] ? kasan_save_stack+0x3f/0x50 [ 2040.433783][T29722] ? kasan_save_stack+0x30/0x50 [ 2040.433821][T29722] ? kasan_save_track+0x14/0x30 [ 2040.433859][T29722] ? __kasan_kmalloc+0xaa/0xb0 [ 2040.433896][T29722] ? __kmalloc_noprof+0x347/0x9c0 [ 2040.433927][T29722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2040.433968][T29722] ? policy_nodemask+0xed/0x4f0 [ 2040.434025][T29722] alloc_pages_mpol+0x1fb/0x550 [ 2040.434076][T29722] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2040.434134][T29722] alloc_pages_noprof+0x131/0x390 [ 2040.434184][T29722] rds_page_remainder_alloc+0x57/0x14e0 [ 2040.434231][T29722] rds_message_copy_from_user+0x1cd/0xdc0 [ 2040.434286][T29722] ? rds_message_alloc+0x48/0x220 [ 2040.434332][T29722] ? rcu_is_watching+0x12/0xc0 [ 2040.434363][T29722] ? rds_message_alloc+0x48/0x220 [ 2040.434407][T29722] ? trace_kmalloc+0x83/0xb0 [ 2040.434460][T29722] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 2040.434513][T29722] ? __asan_memset+0x23/0x50 [ 2040.434548][T29722] ? sg_init_table+0x20/0x60 [ 2040.434592][T29722] rds_sendmsg+0x208a/0x31a0 [ 2040.434641][T29722] ? __pfx_rds_sendmsg+0x10/0x10 [ 2040.434687][T29722] ? __pfx_aa_sk_perm+0x10/0x10 [ 2040.434748][T29722] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2040.434795][T29722] ? ____sys_sendmsg+0xa54/0xc30 [ 2040.434830][T29722] ____sys_sendmsg+0xa54/0xc30 [ 2040.434870][T29722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2040.434925][T29722] ___sys_sendmsg+0x190/0x1e0 [ 2040.434966][T29722] ? __pfx____sys_sendmsg+0x10/0x10 [ 2040.435025][T29722] ? find_held_lock+0x2b/0x80 [ 2040.435084][T29722] __sys_sendmsg+0x170/0x220 [ 2040.435135][T29722] ? __pfx___sys_sendmsg+0x10/0x10 [ 2040.435208][T29722] do_syscall_64+0xc9/0xf80 [ 2040.435251][T29722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.435285][T29722] RIP: 0033:0x7f62d419aeb9 [ 2040.435310][T29722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2040.435342][T29722] RSP: 002b:00007f62d50fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2040.435372][T29722] RAX: ffffffffffffffda RBX: 00007f62d4415fa0 RCX: 00007f62d419aeb9 [ 2040.435393][T29722] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2040.435413][T29722] RBP: 00007f62d50fb090 R08: 0000000000000000 R09: 0000000000000000 [ 2040.435439][T29722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2040.435458][T29722] R13: 00007f62d4416038 R14: 00007f62d4415fa0 R15: 00007ffed3336c08 [ 2040.435502][T29722] [ 2041.345892][T29734] FAULT_INJECTION: forcing a failure. [ 2041.345892][T29734] name failslab, interval 1, probability 393216, space 0, times 0 [ 2041.373864][T29734] CPU: 1 UID: 0 PID: 29734 Comm: syz.4.4742 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2041.373920][T29734] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2041.373933][T29734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2041.373951][T29734] Call Trace: [ 2041.373962][T29734] [ 2041.373975][T29734] dump_stack_lvl+0x100/0x190 [ 2041.374022][T29734] should_fail_ex.cold+0x5/0xa [ 2041.374076][T29734] should_failslab+0xc2/0x120 [ 2041.374124][T29734] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 2041.374175][T29734] ? __d_alloc+0x34/0xa80 [ 2041.374224][T29734] ? __d_alloc+0x34/0xa80 [ 2041.374264][T29734] __d_alloc+0x34/0xa80 [ 2041.374323][T29734] d_alloc_pseudo+0x1c/0xc0 [ 2041.374356][T29734] alloc_file_pseudo+0xcf/0x230 [ 2041.374408][T29734] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2041.374459][T29734] ? alloc_fd+0x476/0x790 [ 2041.374504][T29734] sock_alloc_file+0x50/0x210 [ 2041.374562][T29734] __sys_socket+0x1c0/0x260 [ 2041.374601][T29734] ? fput+0x79/0x100 [ 2041.374647][T29734] ? __pfx___sys_socket+0x10/0x10 [ 2041.374686][T29734] ? xfd_validate_state+0x129/0x190 [ 2041.374751][T29734] __x64_sys_socket+0x72/0xb0 [ 2041.374790][T29734] ? lockdep_hardirqs_on+0x78/0x100 [ 2041.374832][T29734] do_syscall_64+0xc9/0xf80 [ 2041.374877][T29734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.374912][T29734] RIP: 0033:0x7f133db9aeb9 [ 2041.374939][T29734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2041.374974][T29734] RSP: 002b:00007f133bdee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2041.375009][T29734] RAX: ffffffffffffffda RBX: 00007f133de15fa0 RCX: 00007f133db9aeb9 [ 2041.375033][T29734] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 2041.375054][T29734] RBP: 00007f133dc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2041.375075][T29734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2041.375096][T29734] R13: 00007f133de16038 R14: 00007f133de15fa0 R15: 00007ffca8ce3118 [ 2041.375140][T29734] [ 2041.770968][T29741] FAULT_INJECTION: forcing a failure. [ 2041.770968][T29741] name failslab, interval 1, probability 393216, space 0, times 0 [ 2041.828756][T29741] CPU: 0 UID: 0 PID: 29741 Comm: syz.1.4743 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2041.828811][T29741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2041.828825][T29741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2041.828845][T29741] Call Trace: [ 2041.828856][T29741] [ 2041.828869][T29741] dump_stack_lvl+0x100/0x190 [ 2041.828914][T29741] should_fail_ex.cold+0x5/0xa [ 2041.828968][T29741] should_failslab+0xc2/0x120 [ 2041.829015][T29741] kmem_cache_alloc_noprof+0x83/0x780 [ 2041.829058][T29741] ? alloc_empty_file+0x55/0x1c0 [ 2041.829111][T29741] ? alloc_empty_file+0x55/0x1c0 [ 2041.829158][T29741] alloc_empty_file+0x55/0x1c0 [ 2041.829206][T29741] path_openat+0xe8/0x3120 [ 2041.829242][T29741] ? getname_flags+0x93/0xf0 [ 2041.829272][T29741] ? do_sys_openat2+0xc5/0x220 [ 2041.829319][T29741] ? __x64_sys_openat+0x12d/0x210 [ 2041.829365][T29741] ? do_syscall_64+0xc9/0xf80 [ 2041.829403][T29741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.829446][T29741] ? __pfx_path_openat+0x10/0x10 [ 2041.829500][T29741] do_filp_open+0x1f7/0x420 [ 2041.829542][T29741] ? __pfx_do_filp_open+0x10/0x10 [ 2041.829618][T29741] ? _raw_spin_unlock+0x28/0x50 [ 2041.829652][T29741] ? alloc_fd+0x476/0x790 [ 2041.829703][T29741] do_sys_openat2+0x12e/0x220 [ 2041.829755][T29741] ? __pfx_do_sys_openat2+0x10/0x10 [ 2041.829809][T29741] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2041.829858][T29741] ? __fget_files+0x21f/0x3d0 [ 2041.829901][T29741] __x64_sys_openat+0x12d/0x210 [ 2041.829953][T29741] ? __pfx___x64_sys_openat+0x10/0x10 [ 2041.830000][T29741] ? ksys_write+0x1ac/0x250 [ 2041.830064][T29741] do_syscall_64+0xc9/0xf80 [ 2041.830107][T29741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.830141][T29741] RIP: 0033:0x7fa440f9aeb9 [ 2041.830166][T29741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2041.830199][T29741] RSP: 002b:00007fa441e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2041.830231][T29741] RAX: ffffffffffffffda RBX: 00007fa441215fa0 RCX: 00007fa440f9aeb9 [ 2041.830253][T29741] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2041.830274][T29741] RBP: 00007fa441e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 2041.830294][T29741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.830313][T29741] R13: 00007fa441216038 R14: 00007fa441215fa0 R15: 00007fff85509078 [ 2041.830357][T29741] [ 2042.169938][T29744] block nbd8: shutting down sockets [ 2042.285027][T29751] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4746'. [ 2042.438984][T29754] FAULT_INJECTION: forcing a failure. [ 2042.438984][T29754] name failslab, interval 1, probability 393216, space 0, times 0 [ 2042.473263][T29754] CPU: 1 UID: 0 PID: 29754 Comm: syz.0.4748 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2042.473320][T29754] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2042.473334][T29754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2042.473355][T29754] Call Trace: [ 2042.473367][T29754] [ 2042.473380][T29754] dump_stack_lvl+0x100/0x190 [ 2042.473429][T29754] should_fail_ex.cold+0x5/0xa [ 2042.473485][T29754] should_failslab+0xc2/0x120 [ 2042.473535][T29754] __kmalloc_cache_noprof+0x80/0x810 [ 2042.473572][T29754] ? cec_open+0xdb/0x690 [ 2042.473615][T29754] ? cec_open+0xdb/0x690 [ 2042.473651][T29754] cec_open+0xdb/0x690 [ 2042.473690][T29754] ? __pfx_cec_open+0x10/0x10 [ 2042.473731][T29754] ? kobject_get_unless_zero+0x156/0x200 [ 2042.473778][T29754] ? find_held_lock+0x2b/0x80 [ 2042.473812][T29754] ? chrdev_open+0x10b/0x6a0 [ 2042.473854][T29754] ? chrdev_open+0x10b/0x6a0 [ 2042.473906][T29754] ? __pfx_cec_open+0x10/0x10 [ 2042.473933][T29754] chrdev_open+0x234/0x6a0 [ 2042.473963][T29754] ? __pfx_apparmor_file_open+0x10/0x10 [ 2042.474002][T29754] ? __pfx_chrdev_open+0x10/0x10 [ 2042.474035][T29754] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2042.474071][T29754] do_dentry_open+0x73e/0x1570 [ 2042.474101][T29754] ? __pfx_chrdev_open+0x10/0x10 [ 2042.474133][T29754] ? security_inode_permission+0xbf/0x250 [ 2042.474176][T29754] vfs_open+0x82/0x3f0 [ 2042.474221][T29754] path_openat+0x21dc/0x3120 [ 2042.474262][T29754] ? __pfx_path_openat+0x10/0x10 [ 2042.474302][T29754] do_filp_open+0x1f7/0x420 [ 2042.474334][T29754] ? __pfx_do_filp_open+0x10/0x10 [ 2042.474384][T29754] ? _raw_spin_unlock+0x28/0x50 [ 2042.474409][T29754] ? alloc_fd+0x476/0x790 [ 2042.474445][T29754] do_sys_openat2+0x12e/0x220 [ 2042.474486][T29754] ? __pfx_do_sys_openat2+0x10/0x10 [ 2042.474527][T29754] ? __fget_files+0x21f/0x3d0 [ 2042.474560][T29754] __x64_sys_openat+0x12d/0x210 [ 2042.474600][T29754] ? __pfx___x64_sys_openat+0x10/0x10 [ 2042.474637][T29754] ? xfd_validate_state+0x129/0x190 [ 2042.474686][T29754] do_syscall_64+0xc9/0xf80 [ 2042.474719][T29754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.474744][T29754] RIP: 0033:0x7eff2599aeb9 [ 2042.474764][T29754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2042.474789][T29754] RSP: 002b:00007eff23bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2042.474812][T29754] RAX: ffffffffffffffda RBX: 00007eff25c15fa0 RCX: 00007eff2599aeb9 [ 2042.474829][T29754] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 2042.474845][T29754] RBP: 00007eff25a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2042.474860][T29754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2042.474876][T29754] R13: 00007eff25c16038 R14: 00007eff25c15fa0 R15: 00007ffc16639df8 [ 2042.474907][T29754] [ 2043.213355][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'. [ 2043.458186][T29750] Process accounting resumed [ 2043.787437][T29788] netlink: 354 bytes leftover after parsing attributes in process `syz.1.4756'. [ 2044.876704][T29793] FAULT_INJECTION: forcing a failure. [ 2044.876704][T29793] name failslab, interval 1, probability 393216, space 0, times 0 [ 2044.895756][T29793] CPU: 1 UID: 0 PID: 29793 Comm: syz.0.4758 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2044.895812][T29793] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2044.895825][T29793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2044.895844][T29793] Call Trace: [ 2044.895855][T29793] [ 2044.895867][T29793] dump_stack_lvl+0x100/0x190 [ 2044.895912][T29793] should_fail_ex.cold+0x5/0xa [ 2044.895966][T29793] should_failslab+0xc2/0x120 [ 2044.896013][T29793] __kmalloc_cache_noprof+0x80/0x810 [ 2044.896059][T29793] ? cec_open+0xdb/0x690 [ 2044.896103][T29793] ? cec_open+0xdb/0x690 [ 2044.896138][T29793] cec_open+0xdb/0x690 [ 2044.896178][T29793] ? __pfx_cec_open+0x10/0x10 [ 2044.896219][T29793] ? kobject_get_unless_zero+0x156/0x200 [ 2044.896265][T29793] ? find_held_lock+0x2b/0x80 [ 2044.896297][T29793] ? chrdev_open+0x10b/0x6a0 [ 2044.896337][T29793] ? chrdev_open+0x10b/0x6a0 [ 2044.896384][T29793] ? __pfx_cec_open+0x10/0x10 [ 2044.896420][T29793] chrdev_open+0x234/0x6a0 [ 2044.896459][T29793] ? __pfx_apparmor_file_open+0x10/0x10 [ 2044.896504][T29793] ? __pfx_chrdev_open+0x10/0x10 [ 2044.896547][T29793] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2044.896596][T29793] do_dentry_open+0x73e/0x1570 [ 2044.896635][T29793] ? __pfx_chrdev_open+0x10/0x10 [ 2044.896676][T29793] ? security_inode_permission+0xbf/0x250 [ 2044.896734][T29793] vfs_open+0x82/0x3f0 [ 2044.896788][T29793] path_openat+0x21dc/0x3120 [ 2044.896841][T29793] ? __pfx_path_openat+0x10/0x10 [ 2044.896896][T29793] do_filp_open+0x1f7/0x420 [ 2044.896940][T29793] ? __pfx_do_filp_open+0x10/0x10 [ 2044.897009][T29793] ? _raw_spin_unlock+0x28/0x50 [ 2044.897050][T29793] ? alloc_fd+0x476/0x790 [ 2044.897100][T29793] do_sys_openat2+0x12e/0x220 [ 2044.897150][T29793] ? __pfx_do_sys_openat2+0x10/0x10 [ 2044.897204][T29793] ? __fget_files+0x21f/0x3d0 [ 2044.897250][T29793] __x64_sys_openat+0x12d/0x210 [ 2044.897302][T29793] ? __pfx___x64_sys_openat+0x10/0x10 [ 2044.897353][T29793] ? xfd_validate_state+0x129/0x190 [ 2044.897420][T29793] do_syscall_64+0xc9/0xf80 [ 2044.897464][T29793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.897497][T29793] RIP: 0033:0x7eff2599aeb9 [ 2044.897525][T29793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2044.897558][T29793] RSP: 002b:00007eff23bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2044.897591][T29793] RAX: ffffffffffffffda RBX: 00007eff25c15fa0 RCX: 00007eff2599aeb9 [ 2044.897613][T29793] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 2044.897633][T29793] RBP: 00007eff25a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2044.897654][T29793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.897673][T29793] R13: 00007eff25c16038 R14: 00007eff25c15fa0 R15: 00007ffc16639df8 [ 2044.897717][T29793] [ 2045.635688][T29802] binder: BINDER_SET_CONTEXT_MGR already set [ 2045.642787][T29802] binder: 29801:29802 ioctl 4018620d 9 returned -16 [ 2047.811967][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.818781][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2048.019308][T29835] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4767'. [ 2048.776589][T29841] Invalid ELF header magic: != ELF [ 2048.871165][T29844] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4770'. [ 2049.173430][T29848] block nbd8: shutting down sockets [ 2049.554325][T29854] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4772'. [ 2050.274575][T29867] FAULT_INJECTION: forcing a failure. [ 2050.274575][T29867] name failslab, interval 1, probability 393216, space 0, times 0 [ 2050.303024][T29867] CPU: 1 UID: 0 PID: 29867 Comm: syz.3.4777 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2050.303082][T29867] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2050.303095][T29867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2050.303116][T29867] Call Trace: [ 2050.303128][T29867] [ 2050.303140][T29867] dump_stack_lvl+0x100/0x190 [ 2050.303186][T29867] should_fail_ex.cold+0x5/0xa [ 2050.303241][T29867] should_failslab+0xc2/0x120 [ 2050.303291][T29867] kmem_cache_alloc_noprof+0x83/0x780 [ 2050.303335][T29867] ? __asan_memset+0x23/0x50 [ 2050.303371][T29867] ? copy_fs_struct+0x49/0x340 [ 2050.303432][T29867] ? copy_fs_struct+0x49/0x340 [ 2050.303483][T29867] copy_fs_struct+0x49/0x340 [ 2050.303538][T29867] copy_process+0x3b53/0x7890 [ 2050.303597][T29867] ? __pfx___futex_wait+0x10/0x10 [ 2050.303646][T29867] ? __pfx_copy_process+0x10/0x10 [ 2050.303713][T29867] kernel_clone+0xfc/0x930 [ 2050.303769][T29867] ? __pfx_futex_wait+0x10/0x10 [ 2050.303803][T29867] ? __pfx_kernel_clone+0x10/0x10 [ 2050.303870][T29867] __do_sys_clone+0xd9/0x120 [ 2050.303916][T29867] ? __pfx___do_sys_clone+0x10/0x10 [ 2050.303976][T29867] ? xfd_validate_state+0x129/0x190 [ 2050.304060][T29867] do_syscall_64+0xc9/0xf80 [ 2050.304106][T29867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2050.304142][T29867] RIP: 0033:0x7f62d419aeb9 [ 2050.304169][T29867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2050.304204][T29867] RSP: 002b:00007f62d50fafd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2050.304237][T29867] RAX: ffffffffffffffda RBX: 00007f62d4415fa0 RCX: 00007f62d419aeb9 [ 2050.304259][T29867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2050.304280][T29867] RBP: 00007f62d4208c1f R08: 0000000000000000 R09: 0000000000000000 [ 2050.304300][T29867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2050.304320][T29867] R13: 00007f62d4416038 R14: 00007f62d4415fa0 R15: 00007ffed3336c08 [ 2050.304364][T29867] [ 2050.553113][T29870] netlink: 226 bytes leftover after parsing attributes in process `syz.1.4778'. [ 2050.563574][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4778'. [ 2050.581366][T29870] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2051.346628][ T30] audit: type=1800 audit(2147483749.985:98): pid=29876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4780" name="file0" dev="tmpfs" ino=3131 res=0 errno=0 [ 2051.697946][T29887] block nbd8: shutting down sockets [ 2052.205869][T29899] block nbd8: shutting down sockets [ 2053.068378][T29791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2053.080127][T29913] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4791'. [ 2053.091781][T29791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2053.101544][T29791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2053.112060][T29791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2053.119975][T29791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2053.146965][T29913] netlink: 350 bytes leftover after parsing attributes in process `syz.4.4791'. [ 2053.630378][T29923] FAULT_INJECTION: forcing a failure. [ 2053.630378][T29923] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2053.657565][T29923] CPU: 0 UID: 0 PID: 29923 Comm: syz.0.4793 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2053.657607][T29923] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2053.657617][T29923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2053.657632][T29923] Call Trace: [ 2053.657641][T29923] [ 2053.657650][T29923] dump_stack_lvl+0x100/0x190 [ 2053.657685][T29923] should_fail_ex.cold+0x5/0xa [ 2053.657726][T29923] get_futex_key+0x1d2/0x1620 [ 2053.657762][T29923] ? __pfx_get_futex_key+0x10/0x10 [ 2053.657804][T29923] futex_wake+0xea/0x530 [ 2053.657841][T29923] ? rcu_is_watching+0x12/0xc0 [ 2053.657868][T29923] ? lockdep_hardirqs_on+0x78/0x100 [ 2053.657898][T29923] ? __pfx_futex_wake+0x10/0x10 [ 2053.657940][T29923] ? fd_install+0x223/0x580 [ 2053.657966][T29923] ? putname+0xf5/0x1a0 [ 2053.658005][T29923] do_futex+0x32b/0x350 [ 2053.658039][T29923] ? __pfx_do_futex+0x10/0x10 [ 2053.658072][T29923] ? __pfx_do_sys_openat2+0x10/0x10 [ 2053.658113][T29923] ? __fget_files+0x21f/0x3d0 [ 2053.658143][T29923] __x64_sys_futex+0x34f/0x4d0 [ 2053.658179][T29923] ? __x64_sys_openat+0x12d/0x210 [ 2053.658219][T29923] ? __pfx___x64_sys_futex+0x10/0x10 [ 2053.658259][T29923] ? xfd_validate_state+0x129/0x190 [ 2053.658314][T29923] do_syscall_64+0xc9/0xf80 [ 2053.658347][T29923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.658372][T29923] RIP: 0033:0x7eff2599aeb9 [ 2053.658392][T29923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2053.658417][T29923] RSP: 002b:00007eff23bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2053.658440][T29923] RAX: ffffffffffffffda RBX: 00007eff25c15fa8 RCX: 00007eff2599aeb9 [ 2053.658457][T29923] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007eff25c15fac [ 2053.658473][T29923] RBP: 00007eff25c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.658488][T29923] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 2053.658505][T29923] R13: 00007eff25c16038 R14: 00007ffc16639d10 R15: 00007ffc16639df8 [ 2053.658537][T29923] [ 2054.140745][T29914] chnl_net:caif_netlink_parms(): no params data found [ 2054.152210][T29931] FAULT_INJECTION: forcing a failure. [ 2054.152210][T29931] name failslab, interval 1, probability 393216, space 0, times 0 [ 2054.167398][T29931] CPU: 1 UID: 0 PID: 29931 Comm: syz.0.4794 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2054.167451][T29931] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2054.167464][T29931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2054.167483][T29931] Call Trace: [ 2054.167494][T29931] [ 2054.167513][T29931] dump_stack_lvl+0x100/0x190 [ 2054.167558][T29931] should_fail_ex.cold+0x5/0xa [ 2054.167613][T29931] should_failslab+0xc2/0x120 [ 2054.167661][T29931] __kvmalloc_node_noprof+0x101/0xac0 [ 2054.167711][T29931] ? alloc_pages_bulk_noprof+0x806/0x1500 [ 2054.167752][T29931] ? seq_read_iter+0x819/0x1270 [ 2054.167794][T29931] ? seq_read_iter+0x819/0x1270 [ 2054.167825][T29931] seq_read_iter+0x819/0x1270 [ 2054.167860][T29931] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2054.167910][T29931] ? copy_splice_read+0x1a3/0xb90 [ 2054.167953][T29931] kernfs_fop_read_iter+0x46c/0x610 [ 2054.167999][T29931] copy_splice_read+0x4ba/0xb90 [ 2054.168051][T29931] ? __pfx_copy_splice_read+0x10/0x10 [ 2054.168091][T29931] ? look_up_lock_class+0x55/0x120 [ 2054.168140][T29931] ? lockdep_init_map_type+0x5c/0x250 [ 2054.168188][T29931] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 2054.168229][T29931] ? __pfx_copy_splice_read+0x10/0x10 [ 2054.168266][T29931] do_splice_read+0x285/0x370 [ 2054.168307][T29931] splice_direct_to_actor+0x2a1/0xa30 [ 2054.168348][T29931] ? __pfx_direct_splice_actor+0x10/0x10 [ 2054.168395][T29931] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2054.168446][T29931] do_splice_direct+0x174/0x240 [ 2054.168490][T29931] ? __pfx_do_splice_direct+0x10/0x10 [ 2054.168532][T29931] ? common_file_perm+0x1ab/0x4f0 [ 2054.168581][T29931] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2054.168625][T29931] ? rw_verify_area+0xce/0x6d0 [ 2054.168662][T29931] do_sendfile+0xadc/0xe20 [ 2054.168713][T29931] ? __pfx_do_sendfile+0x10/0x10 [ 2054.168749][T29931] ? __fget_files+0x21f/0x3d0 [ 2054.168797][T29931] __x64_sys_sendfile64+0x1d8/0x220 [ 2054.168841][T29931] ? ksys_write+0x1ac/0x250 [ 2054.168889][T29931] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2054.168949][T29931] do_syscall_64+0xc9/0xf80 [ 2054.168994][T29931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2054.169028][T29931] RIP: 0033:0x7eff2599aeb9 [ 2054.169055][T29931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2054.169088][T29931] RSP: 002b:00007eff23bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2054.169119][T29931] RAX: ffffffffffffffda RBX: 00007eff25c15fa0 RCX: 00007eff2599aeb9 [ 2054.169140][T29931] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2054.169159][T29931] RBP: 00007eff23bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2054.169179][T29931] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2054.169198][T29931] R13: 00007eff25c16038 R14: 00007eff25c15fa0 R15: 00007ffc16639df8 [ 2054.169246][T29931] [ 2054.463343][T29930] block nbd8: shutting down sockets [ 2054.488077][T29914] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.495385][T29914] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.503299][T29914] bridge_slave_0: entered allmulticast mode [ 2054.514959][T29914] bridge_slave_0: entered promiscuous mode [ 2054.531187][T29914] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.538724][T29914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.546320][T29914] bridge_slave_1: entered allmulticast mode [ 2054.554734][T29914] bridge_slave_1: entered promiscuous mode [ 2054.658970][T29914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.717109][T29914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2054.872549][T29914] team0: Port device team_slave_0 added [ 2054.901432][T29914] team0: Port device team_slave_1 added [ 2055.045807][T29914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2055.053055][T29914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2055.086436][T29914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2055.156948][T29914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2055.164124][T29914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2055.196255][T29914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2055.247709][T29791] Bluetooth: hci4: command tx timeout [ 2055.284610][T29914] hsr_slave_0: entered promiscuous mode [ 2055.291807][T29914] hsr_slave_1: entered promiscuous mode [ 2055.305020][T29914] debugfs: 'hsr0' already exists in 'hsr' [ 2055.312069][T29914] Cannot create hsr debugfs directory [ 2055.617159][T29914] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.777886][T29914] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.868953][T29950] [U] [ 2055.871789][T29950] [U] [ 2055.874543][T29950] [U] [ 2055.877297][T29950] [U] [ 2055.968976][T29914] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.985044][T29950] [U] [ 2055.987805][T29950] [U] [ 2055.990533][T29950] [U] [ 2055.993249][T29950] [U] [ 2056.085354][T29950] [U] [ 2056.088324][T29950] [U] [ 2056.091085][T29950] [U] [ 2056.093920][T29950] [U] [ 2056.119156][T29950] [U] [ 2056.122056][T29950] [U] [ 2056.124824][T29950] [U] [ 2056.127590][T29950] [U] [ 2056.146150][T29966] FAULT_INJECTION: forcing a failure. [ 2056.146150][T29966] name failslab, interval 1, probability 393216, space 0, times 0 [ 2056.190694][T29966] CPU: 0 UID: 0 PID: 29966 Comm: syz.4.4802 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2056.190747][T29966] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2056.190756][T29966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2056.190771][T29966] Call Trace: [ 2056.190779][T29966] [ 2056.190788][T29966] dump_stack_lvl+0x100/0x190 [ 2056.190821][T29966] should_fail_ex.cold+0x5/0xa [ 2056.190859][T29966] should_failslab+0xc2/0x120 [ 2056.190896][T29966] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2056.190930][T29966] ? __alloc_skb+0x156/0x410 [ 2056.190961][T29966] ? __alloc_skb+0x35d/0x410 [ 2056.190996][T29966] ? __alloc_skb+0x156/0x410 [ 2056.191025][T29966] __alloc_skb+0x156/0x410 [ 2056.191056][T29966] ? __alloc_skb+0x35d/0x410 [ 2056.191088][T29966] ? __pfx___alloc_skb+0x10/0x10 [ 2056.191121][T29966] ? netlink_autobind.isra.0+0x60/0x370 [ 2056.191167][T29966] netlink_alloc_large_skb+0x69/0x150 [ 2056.191206][T29966] netlink_sendmsg+0x680/0xda0 [ 2056.191247][T29966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2056.191283][T29966] ? __import_iovec+0x1d2/0x640 [ 2056.191327][T29966] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2056.191362][T29966] ____sys_sendmsg+0xa54/0xc30 [ 2056.191392][T29966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2056.191430][T29966] ___sys_sendmsg+0x190/0x1e0 [ 2056.191460][T29966] ? __pfx____sys_sendmsg+0x10/0x10 [ 2056.191500][T29966] ? find_held_lock+0x2b/0x80 [ 2056.191543][T29966] __sys_sendmsg+0x170/0x220 [ 2056.191580][T29966] ? __pfx___sys_sendmsg+0x10/0x10 [ 2056.191633][T29966] do_syscall_64+0xc9/0xf80 [ 2056.191664][T29966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.191688][T29966] RIP: 0033:0x7f133db9aeb9 [ 2056.191707][T29966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2056.191730][T29966] RSP: 002b:00007f133bdee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2056.191752][T29966] RAX: ffffffffffffffda RBX: 00007f133de15fa0 RCX: 00007f133db9aeb9 [ 2056.191767][T29966] RDX: 0000000024048084 RSI: 0000200000000440 RDI: 0000000000000003 [ 2056.191782][T29966] RBP: 00007f133bdee090 R08: 0000000000000000 R09: 0000000000000000 [ 2056.191796][T29966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2056.191810][T29966] R13: 00007f133de16038 R14: 00007f133de15fa0 R15: 00007ffca8ce3118 [ 2056.191840][T29966] [ 2056.486109][T29950] [U] [ 2056.487762][T29914] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.488968][T29950] [U] [ 2056.501840][T29950] [U] [ 2056.504615][T29950] [U] [ 2056.507781][T29950] [U] [ 2056.510544][T29950] [U] [ 2056.513299][T29950] [U] [ 2056.516068][T29950] [U] [ 2056.519197][T29950] [U] [ 2056.521953][T29950] [U] [ 2056.524726][T29950] [U] [ 2056.527480][T29950] [U] [ 2056.530952][T29950] [U] [ 2056.533726][T29950] [U] [ 2056.536473][T29950] [U] [ 2056.539229][T29950] [U] [ 2056.542554][T29950] [U] [ 2056.545330][T29950] [U] [ 2056.548096][T29950] [U] [ 2056.550855][T29950] [U] [ 2056.553900][T29950] [U] [ 2056.556636][T29950] [U] [ 2056.559350][T29950] [U] [ 2056.562061][T29950] [U] [ 2056.565382][T29950] [U] [ 2056.568100][T29950] [U] [ 2056.570809][T29950] [U] [ 2056.573517][T29950] [U] [ 2056.576506][T29950] [U] [ 2056.579227][T29950] [U] [ 2056.581937][T29950] [U] [ 2056.584656][T29950] [U] [ 2056.587560][T29950] [U] [ 2056.590276][T29950] [U] [ 2056.592986][T29950] [U] [ 2056.595719][T29950] [U] [ 2056.598638][T29950] [U] [ 2056.601350][T29950] [U] [ 2056.604080][T29950] [U] [ 2056.606790][T29950] [U] [ 2056.609725][T29950] [U] [ 2056.612444][T29950] [U] [ 2056.615154][T29950] [U] [ 2056.617863][T29950] [U] [ 2056.620796][T29950] [U] [ 2056.623627][T29950] [U] [ 2056.626357][T29950] [U] [ 2056.629071][T29950] [U] [ 2056.632261][T29950] [U] [ 2056.634979][T29950] [U] [ 2056.637687][T29950] [U] [ 2056.640395][T29950] [U] [ 2056.643319][T29950] [U] [ 2056.646033][T29950] [U] [ 2056.648740][T29950] [U] [ 2056.651466][T29950] [U] [ 2056.654386][T29950] [U] [ 2056.657112][T29950] [U] [ 2056.659816][T29950] [U] [ 2056.662524][T29950] [U] [ 2056.665443][T29950] [U] [ 2056.668151][T29950] [U] [ 2056.670860][T29950] [U] [ 2056.673572][T29950] [U] [ 2056.707496][T29950] [U] [ 2056.851472][T29969] block nbd8: shutting down sockets [ 2057.162779][T29914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2057.188708][T29914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2057.327061][T29791] Bluetooth: hci4: command tx timeout [ 2057.415671][T29914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2057.556423][T29914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2057.679736][T29980] zswap: compressor not available [ 2057.857670][T29994] netlink: 'syz.0.4807': attribute type 7 has an invalid length. [ 2057.873975][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4807'. [ 2058.102776][T29914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2058.199507][T29914] 8021q: adding VLAN 0 to HW filter on device team0 [ 2058.233322][T29766] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.240527][T29766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2058.314877][T30004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 2058.358402][T30004] i: entered promiscuous mode [ 2058.393173][T29764] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.400470][T29764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.462202][T30006] HfR: entered promiscuous mode [ 2059.200676][T29914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2059.288854][T30020] block nbd8: shutting down sockets [ 2059.406203][T29791] Bluetooth: hci4: command tx timeout [ 2059.574897][T29914] veth0_vlan: entered promiscuous mode [ 2059.624009][T29914] veth1_vlan: entered promiscuous mode [ 2059.709260][T29914] veth0_macvtap: entered promiscuous mode [ 2059.754548][T29914] veth1_macvtap: entered promiscuous mode [ 2059.816490][T29914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2059.892406][T29914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2059.953667][T29760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.981224][T29760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.020335][T29760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.043730][T29760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.389072][T29760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.409972][T29760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2060.573384][T29760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.596599][T29760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2060.777743][T30033] FAULT_INJECTION: forcing a failure. [ 2060.777743][T30033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2060.835990][T30033] CPU: 0 UID: 0 PID: 30033 Comm: syz.4.4815 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2060.836031][T30033] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2060.836041][T30033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2060.836055][T30033] Call Trace: [ 2060.836063][T30033] [ 2060.836072][T30033] dump_stack_lvl+0x100/0x190 [ 2060.836105][T30033] should_fail_ex.cold+0x5/0xa [ 2060.836165][T30033] _copy_from_user+0x2e/0xd0 [ 2060.836203][T30033] __x64_sys_timer_create+0x10d/0x1d0 [ 2060.836243][T30033] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 2060.836295][T30033] do_syscall_64+0xc9/0xf80 [ 2060.836328][T30033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2060.836353][T30033] RIP: 0033:0x7f133db9aeb9 [ 2060.836372][T30033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2060.836397][T30033] RSP: 002b:00007f133bdee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 2060.836421][T30033] RAX: ffffffffffffffda RBX: 00007f133de15fa0 RCX: 00007f133db9aeb9 [ 2060.836438][T30033] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 2060.836453][T30033] RBP: 00007f133dc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2060.836468][T30033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2060.836509][T30033] R13: 00007f133de16038 R14: 00007f133de15fa0 R15: 00007ffca8ce3118 [ 2060.836554][T30033] [ 2061.141847][T30038] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4816'. [ 2061.181828][T29791] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 2061.485864][T29791] Bluetooth: hci4: command tx timeout [ 2062.661641][T30082] FAULT_INJECTION: forcing a failure. [ 2062.661641][T30082] name failslab, interval 1, probability 393216, space 0, times 0 [ 2062.738160][T30082] CPU: 1 UID: 0 PID: 30082 Comm: syz.3.4825 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2062.738200][T30082] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2062.738209][T30082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2062.738224][T30082] Call Trace: [ 2062.738232][T30082] [ 2062.738241][T30082] dump_stack_lvl+0x100/0x190 [ 2062.738273][T30082] should_fail_ex.cold+0x5/0xa [ 2062.738312][T30082] should_failslab+0xc2/0x120 [ 2062.738346][T30082] kmem_cache_alloc_noprof+0x83/0x780 [ 2062.738378][T30082] ? security_file_alloc+0x34/0x2c0 [ 2062.738421][T30082] ? security_file_alloc+0x34/0x2c0 [ 2062.738464][T30082] security_file_alloc+0x34/0x2c0 [ 2062.738502][T30082] init_file+0x93/0x4c0 [ 2062.738536][T30082] alloc_empty_file+0x73/0x1c0 [ 2062.738572][T30082] path_openat+0xe8/0x3120 [ 2062.738599][T30082] ? getname_flags+0x93/0xf0 [ 2062.738622][T30082] ? do_sys_openat2+0xc5/0x220 [ 2062.738655][T30082] ? __x64_sys_openat+0x12d/0x210 [ 2062.738690][T30082] ? do_syscall_64+0xc9/0xf80 [ 2062.738720][T30082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2062.738750][T30082] ? __pfx_path_openat+0x10/0x10 [ 2062.738789][T30082] do_filp_open+0x1f7/0x420 [ 2062.738819][T30082] ? __pfx_do_filp_open+0x10/0x10 [ 2062.738867][T30082] ? _raw_spin_unlock+0x28/0x50 [ 2062.738890][T30082] ? alloc_fd+0x476/0x790 [ 2062.738925][T30082] do_sys_openat2+0x12e/0x220 [ 2062.738961][T30082] ? __pfx_do_sys_openat2+0x10/0x10 [ 2062.738996][T30082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2062.739030][T30082] ? __fget_files+0x21f/0x3d0 [ 2062.739060][T30082] __x64_sys_openat+0x12d/0x210 [ 2062.739097][T30082] ? __pfx___x64_sys_openat+0x10/0x10 [ 2062.739132][T30082] ? ksys_write+0x1ac/0x250 [ 2062.739168][T30082] do_syscall_64+0xc9/0xf80 [ 2062.739204][T30082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2062.739228][T30082] RIP: 0033:0x7f62d419aeb9 [ 2062.739246][T30082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2062.739269][T30082] RSP: 002b:00007f62d50da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2062.739292][T30082] RAX: ffffffffffffffda RBX: 00007f62d4416090 RCX: 00007f62d419aeb9 [ 2062.739309][T30082] RDX: 0000000000000080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2062.739323][T30082] RBP: 00007f62d50da090 R08: 0000000000000000 R09: 0000000000000000 [ 2062.739338][T30082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2062.739352][T30082] R13: 00007f62d4416128 R14: 00007f62d4416090 R15: 00007ffed3336c08 [ 2062.739382][T30082] [ 2063.158728][T30086] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2063.326102][T30084] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 2063.492050][T30076] Process accounting resumed [ 2064.423157][T29728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2064.436241][T29728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2064.445154][T29728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2064.461421][T29728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2064.469550][T29728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2064.594735][T30119] FAULT_INJECTION: forcing a failure. [ 2064.594735][T30119] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2064.634303][T30119] CPU: 0 UID: 0 PID: 30119 Comm: syz.3.4834 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2064.634378][T30119] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2064.634393][T30119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2064.634414][T30119] Call Trace: [ 2064.634427][T30119] [ 2064.634440][T30119] dump_stack_lvl+0x100/0x190 [ 2064.634496][T30119] should_fail_ex.cold+0x5/0xa [ 2064.634555][T30119] get_futex_key+0x1d2/0x1620 [ 2064.634604][T30119] ? __pfx_get_futex_key+0x10/0x10 [ 2064.634664][T30119] futex_wake+0xea/0x530 [ 2064.634714][T30119] ? rcu_is_watching+0x12/0xc0 [ 2064.634749][T30119] ? lockdep_hardirqs_on+0x78/0x100 [ 2064.634789][T30119] ? __pfx_futex_wake+0x10/0x10 [ 2064.634848][T30119] ? fd_install+0x223/0x580 [ 2064.634882][T30119] ? putname+0xf5/0x1a0 [ 2064.634936][T30119] do_futex+0x32b/0x350 [ 2064.634985][T30119] ? __pfx_do_futex+0x10/0x10 [ 2064.635030][T30119] ? __pfx_do_sys_openat2+0x10/0x10 [ 2064.635085][T30119] ? __fget_files+0x21f/0x3d0 [ 2064.635128][T30119] __x64_sys_futex+0x34f/0x4d0 [ 2064.635178][T30119] ? __x64_sys_openat+0x12d/0x210 [ 2064.635230][T30119] ? __pfx___x64_sys_futex+0x10/0x10 [ 2064.635275][T30119] ? xfd_validate_state+0x129/0x190 [ 2064.635350][T30119] do_syscall_64+0xc9/0xf80 [ 2064.635395][T30119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.635431][T30119] RIP: 0033:0x7f62d419aeb9 [ 2064.635458][T30119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2064.635493][T30119] RSP: 002b:00007f62d50fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2064.635530][T30119] RAX: ffffffffffffffda RBX: 00007f62d4415fa8 RCX: 00007f62d419aeb9 [ 2064.635551][T30119] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f62d4415fac [ 2064.635572][T30119] RBP: 00007f62d4415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2064.635592][T30119] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 2064.635612][T30119] R13: 00007f62d4416038 R14: 00007ffed3336b20 R15: 00007ffed3336c08 [ 2064.635654][T30119] [ 2066.113679][T30120] chnl_net:caif_netlink_parms(): no params data found [ 2066.223296][T30127] Process accounting resumed [ 2066.416078][T30131] Process accounting resumed [ 2066.514838][T30120] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.531472][T29728] Bluetooth: hci0: command tx timeout [ 2066.535174][T30120] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.559516][T30120] bridge_slave_0: entered allmulticast mode [ 2066.613860][T30120] bridge_slave_0: entered promiscuous mode [ 2066.644348][T30120] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.673122][T30120] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.705066][T30120] bridge_slave_1: entered allmulticast mode [ 2066.727826][T30120] bridge_slave_1: entered promiscuous mode [ 2066.744266][T30146] zswap: compressor not available [ 2066.832146][T30120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2066.849525][T30120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2066.972021][T30120] team0: Port device team_slave_0 added [ 2066.989689][T30120] team0: Port device team_slave_1 added [ 2067.055852][T30120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2067.070836][T30120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2067.106293][T30120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2067.131646][T30120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2067.191023][T30120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2067.335038][T30120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2067.537351][T30120] hsr_slave_0: entered promiscuous mode [ 2067.553765][T30120] hsr_slave_1: entered promiscuous mode [ 2067.565095][T30120] debugfs: 'hsr0' already exists in 'hsr' [ 2067.576015][T30120] Cannot create hsr debugfs directory [ 2068.524138][T30174] FAULT_INJECTION: forcing a failure. [ 2068.524138][T30174] name failslab, interval 1, probability 393216, space 0, times 0 [ 2068.555696][T30174] CPU: 1 UID: 0 PID: 30174 Comm: syz.3.4845 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2068.555752][T30174] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2068.555765][T30174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2068.555783][T30174] Call Trace: [ 2068.555793][T30174] [ 2068.555804][T30174] dump_stack_lvl+0x100/0x190 [ 2068.555843][T30174] should_fail_ex.cold+0x5/0xa [ 2068.555893][T30174] should_failslab+0xc2/0x120 [ 2068.555936][T30174] kmem_cache_alloc_noprof+0x83/0x780 [ 2068.555979][T30174] ? __asan_memset+0x23/0x50 [ 2068.556012][T30174] ? copy_fs_struct+0x49/0x340 [ 2068.556059][T30174] ? copy_fs_struct+0x49/0x340 [ 2068.556107][T30174] copy_fs_struct+0x49/0x340 [ 2068.556157][T30174] copy_process+0x3b53/0x7890 [ 2068.556210][T30174] ? __pfx___futex_wait+0x10/0x10 [ 2068.556236][T30174] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2068.556282][T30174] ? __pfx_copy_process+0x10/0x10 [ 2068.556320][T30174] ? find_held_lock+0x2b/0x80 [ 2068.556362][T30174] kernel_clone+0xfc/0x930 [ 2068.556401][T30174] ? __pfx_futex_wait+0x10/0x10 [ 2068.556432][T30174] ? __pfx_kernel_clone+0x10/0x10 [ 2068.556490][T30174] __do_sys_clone+0xd9/0x120 [ 2068.556532][T30174] ? __pfx___do_sys_clone+0x10/0x10 [ 2068.556591][T30174] ? xfd_validate_state+0x129/0x190 [ 2068.556652][T30174] do_syscall_64+0xc9/0xf80 [ 2068.556691][T30174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.556724][T30174] RIP: 0033:0x7f62d419aeb9 [ 2068.556750][T30174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2068.556783][T30174] RSP: 002b:00007f62d50fafd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2068.556827][T30174] RAX: ffffffffffffffda RBX: 00007f62d4415fa0 RCX: 00007f62d419aeb9 [ 2068.556849][T30174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2068.556887][T30174] RBP: 00007f62d4208c1f R08: 0000000000000000 R09: 0000000000000000 [ 2068.556908][T30174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2068.556932][T30174] R13: 00007f62d4416038 R14: 00007f62d4415fa0 R15: 00007ffed3336c08 [ 2068.556975][T30174] [ 2068.561276][T30120] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.747275][T30176] input: 00 [ 2068.747275][T30176] as /devices/virtual/input/input43 [ 2068.775905][T29728] Bluetooth: hci0: command tx timeout [ 2068.855854][T30176] FAULT_INJECTION: forcing a failure. [ 2068.855854][T30176] name failslab, interval 1, probability 393216, space 0, times 0 [ 2068.885704][T30176] CPU: 1 UID: 0 PID: 30176 Comm: syz.0.4846 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2068.885762][T30176] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2068.885777][T30176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2068.885798][T30176] Call Trace: [ 2068.885811][T30176] [ 2068.885824][T30176] dump_stack_lvl+0x100/0x190 [ 2068.885871][T30176] should_fail_ex.cold+0x5/0xa [ 2068.885929][T30176] should_failslab+0xc2/0x120 [ 2068.885988][T30176] kmem_cache_alloc_noprof+0x83/0x780 [ 2068.886035][T30176] ? __kernfs_new_node+0xd2/0x960 [ 2068.886091][T30176] ? __kernfs_new_node+0xd2/0x960 [ 2068.886137][T30176] __kernfs_new_node+0xd2/0x960 [ 2068.886185][T30176] ? __lock_acquire+0x4a5/0x2630 [ 2068.886233][T30176] ? __pfx___kernfs_new_node+0x10/0x10 [ 2068.886293][T30176] ? find_held_lock+0x2b/0x80 [ 2068.886327][T30176] ? kernfs_root+0xee/0x2a0 [ 2068.886372][T30176] ? kernfs_root+0xee/0x2a0 [ 2068.886428][T30176] kernfs_new_node+0x11b/0x1a0 [ 2068.886488][T30176] __kernfs_create_file+0x53/0x350 [ 2068.886533][T30176] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2068.886588][T30176] sysfs_create_file_ns+0x145/0x1e0 [ 2068.886632][T30176] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 2068.886683][T30176] ? mark_held_locks+0x40/0x70 [ 2068.886741][T30176] device_create_file+0xf2/0x1d0 [ 2068.886801][T30176] device_add+0xa74/0x1950 [ 2068.886853][T30176] ? __pfx_device_add+0x10/0x10 [ 2068.886909][T30176] ? kobject_get+0xbb/0x150 [ 2068.886967][T30176] cdev_device_add+0x12b/0x270 [ 2068.887014][T30176] evdev_connect+0x3a8/0x4b0 [ 2068.887066][T30176] input_attach_handler.isra.0+0x177/0x1e0 [ 2068.887115][T30176] input_register_device.cold+0x139/0x375 [ 2068.887178][T30176] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 2068.887237][T30176] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2068.887303][T30176] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 2068.887374][T30176] ? find_held_lock+0x2b/0x80 [ 2068.887408][T30176] ? hook_file_ioctl_common+0x146/0x410 [ 2068.887477][T30176] ? __pfx_uinput_ioctl+0x10/0x10 [ 2068.887533][T30176] __x64_sys_ioctl+0x18e/0x210 [ 2068.887587][T30176] do_syscall_64+0xc9/0xf80 [ 2068.887629][T30176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.887662][T30176] RIP: 0033:0x7eff2599aeb9 [ 2068.887690][T30176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2068.887724][T30176] RSP: 002b:00007eff23bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2068.887756][T30176] RAX: ffffffffffffffda RBX: 00007eff25c15fa0 RCX: 00007eff2599aeb9 [ 2068.887781][T30176] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 2068.887804][T30176] RBP: 00007eff25a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2068.887820][T30176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2068.887834][T30176] R13: 00007eff25c16038 R14: 00007eff25c15fa0 R15: 00007ffc16639df8 [ 2068.887866][T30176] [ 2068.936110][T30176] input: failed to attach handler evdev to device input43, error: -12 [ 2069.059034][T30183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4847'. [ 2069.275048][T30120] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.396890][T30185] block nbd8: shutting down sockets [ 2069.414133][T30120] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.677914][T30196] FAULT_INJECTION: forcing a failure. [ 2069.677914][T30196] name failslab, interval 1, probability 393216, space 0, times 0 [ 2069.752970][T30120] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.805857][T30196] CPU: 0 UID: 0 PID: 30196 Comm: syz.1.4850 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2069.805913][T30196] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2069.805926][T30196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2069.805946][T30196] Call Trace: [ 2069.805957][T30196] [ 2069.805971][T30196] dump_stack_lvl+0x100/0x190 [ 2069.806018][T30196] should_fail_ex.cold+0x5/0xa [ 2069.806076][T30196] should_failslab+0xc2/0x120 [ 2069.806125][T30196] kmem_cache_alloc_noprof+0x83/0x780 [ 2069.806177][T30196] ? vm_area_dup+0x27/0x8e0 [ 2069.806209][T30196] ? vm_area_dup+0x27/0x8e0 [ 2069.806233][T30196] vm_area_dup+0x27/0x8e0 [ 2069.806261][T30196] dup_mmap+0x6a4/0x1e20 [ 2069.806293][T30196] ? __pfx_dup_mmap+0x10/0x10 [ 2069.806335][T30196] copy_process+0x7451/0x7890 [ 2069.806383][T30196] ? __pfx_copy_process+0x10/0x10 [ 2069.806431][T30196] kernel_clone+0xfc/0x930 [ 2069.806462][T30196] ? __pfx_futex_wait+0x10/0x10 [ 2069.806487][T30196] ? __pfx_kernel_clone+0x10/0x10 [ 2069.806528][T30196] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2069.806567][T30196] __do_sys_clone+0xd9/0x120 [ 2069.806601][T30196] ? __pfx___do_sys_clone+0x10/0x10 [ 2069.806647][T30196] ? xfd_validate_state+0x129/0x190 [ 2069.806697][T30196] do_syscall_64+0xc9/0xf80 [ 2069.806730][T30196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.806756][T30196] RIP: 0033:0x7f13f839aeb9 [ 2069.806777][T30196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2069.806807][T30196] RSP: 002b:00007f13f921efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2069.806831][T30196] RAX: ffffffffffffffda RBX: 00007f13f8616180 RCX: 00007f13f839aeb9 [ 2069.806847][T30196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 2069.806863][T30196] RBP: 00007f13f8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2069.806878][T30196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2069.806893][T30196] R13: 00007f13f8616218 R14: 00007f13f8616180 R15: 00007ffe17366718 [ 2069.806925][T30196] [ 2070.351586][T30120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2070.384322][T30120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2070.424303][T30120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2070.467672][T30120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2070.725169][T30120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2070.761336][T30120] 8021q: adding VLAN 0 to HW filter on device team0 [ 2070.811716][T29760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.819002][T29760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2070.843794][T29764] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.851125][T29764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2070.861672][T29728] Bluetooth: hci0: command tx timeout [ 2071.483868][T30120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2072.260921][T30120] veth0_vlan: entered promiscuous mode [ 2072.289608][T30120] veth1_vlan: entered promiscuous mode [ 2072.372572][T30120] veth0_macvtap: entered promiscuous mode [ 2072.389577][T30120] veth1_macvtap: entered promiscuous mode [ 2072.468608][T30120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2072.497120][T30120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2072.534992][T29735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.550169][T29735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.587991][T29735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.617962][T29735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.927205][T29791] Bluetooth: hci0: command tx timeout [ 2073.001989][T29768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.019037][T29768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.212361][T29735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.225115][T29735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.424727][T30253] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4862'. [ 2073.864982][T30263] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input44 [ 2074.147162][T29728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2074.177073][T29728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2074.194987][T29728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2074.226196][T29728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2074.233935][T29728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2074.801102][T30267] chnl_net:caif_netlink_parms(): no params data found [ 2075.075891][T30284] netlink: zone id is out of range [ 2075.086836][T30284] netlink: zone id is out of range [ 2075.092025][T30284] netlink: zone id is out of range [ 2075.115658][T30284] netlink: zone id is out of range [ 2075.120841][T30284] netlink: zone id is out of range [ 2075.145608][T30284] netlink: zone id is out of range [ 2075.150799][T30284] netlink: zone id is out of range [ 2075.186753][T30284] netlink: zone id is out of range [ 2075.192028][T30284] netlink: zone id is out of range [ 2075.197514][T30284] netlink: zone id is out of range [ 2075.270182][T30277] [U] [ 2075.273068][T30277] [U] [ 2075.275825][T30277] [U] [ 2075.278593][T30277] [U] [ 2075.341162][T30277] [U] [ 2075.343981][T30277] [U] [ 2075.346755][T30277] [U] [ 2075.349514][T30277] [U] [ 2075.363784][T30267] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.374622][T30267] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.384445][T30277] [U] [ 2075.387223][T30277] [U] [ 2075.389981][T30277] [U] [ 2075.392749][T30277] [U] [ 2075.396407][T30267] bridge_slave_0: entered allmulticast mode [ 2075.404469][T30267] bridge_slave_0: entered promiscuous mode [ 2075.414459][T30267] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.421791][T30267] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.429267][T30267] bridge_slave_1: entered allmulticast mode [ 2075.436926][T30277] [U] [ 2075.438049][T30267] bridge_slave_1: entered promiscuous mode [ 2075.439768][T30277] [U] [ 2075.448224][T30277] [U] [ 2075.450998][T30277] [U] [ 2075.484572][T30267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.499165][T30267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2075.548683][T30267] team0: Port device team_slave_0 added [ 2075.558490][T30267] team0: Port device team_slave_1 added [ 2075.576735][T30277] [U] [ 2075.579529][T30277] [U] [ 2075.582276][T30277] [U] [ 2075.585027][T30277] [U] [ 2075.611679][T30267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2075.618887][T30267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2075.645145][T30277] [U] [ 2075.648490][T30267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2075.668575][T30267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2075.685614][T30267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2075.761991][T30267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2076.003620][T30267] hsr_slave_0: entered promiscuous mode [ 2076.015893][T30267] hsr_slave_1: entered promiscuous mode [ 2076.027122][T30267] debugfs: 'hsr0' already exists in 'hsr' [ 2076.032983][T30267] Cannot create hsr debugfs directory [ 2076.186672][T30301] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4872'. [ 2076.304412][T29728] Bluetooth: hci3: command tx timeout [ 2076.515861][T30305] FAULT_INJECTION: forcing a failure. [ 2076.515861][T30305] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2076.545950][T30305] CPU: 1 UID: 0 PID: 30305 Comm: syz.4.4873 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2076.545993][T30305] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2076.546004][T30305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2076.546019][T30305] Call Trace: [ 2076.546027][T30305] [ 2076.546037][T30305] dump_stack_lvl+0x100/0x190 [ 2076.546071][T30305] should_fail_ex.cold+0x5/0xa [ 2076.546112][T30305] get_futex_key+0x1d2/0x1620 [ 2076.546148][T30305] ? __pfx_get_futex_key+0x10/0x10 [ 2076.546191][T30305] futex_wake+0xea/0x530 [ 2076.546228][T30305] ? rcu_is_watching+0x12/0xc0 [ 2076.546262][T30305] ? lockdep_hardirqs_on+0x78/0x100 [ 2076.546292][T30305] ? __pfx_futex_wake+0x10/0x10 [ 2076.546335][T30305] ? fd_install+0x223/0x580 [ 2076.546360][T30305] ? putname+0xf5/0x1a0 [ 2076.546399][T30305] do_futex+0x32b/0x350 [ 2076.546434][T30305] ? __pfx_do_futex+0x10/0x10 [ 2076.546467][T30305] ? __pfx_do_sys_openat2+0x10/0x10 [ 2076.546513][T30305] __x64_sys_futex+0x34f/0x4d0 [ 2076.546549][T30305] ? __x64_sys_openat+0x12d/0x210 [ 2076.546588][T30305] ? __pfx___x64_sys_futex+0x10/0x10 [ 2076.546627][T30305] ? trace_irq_enable.constprop.0+0x2d/0x110 [ 2076.546663][T30305] do_syscall_64+0xc9/0xf80 [ 2076.546695][T30305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.546720][T30305] RIP: 0033:0x7ffacf19aeb9 [ 2076.546740][T30305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2076.546764][T30305] RSP: 002b:00007ffad01010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2076.546788][T30305] RAX: ffffffffffffffda RBX: 00007ffacf415fa8 RCX: 00007ffacf19aeb9 [ 2076.546805][T30305] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffacf415fac [ 2076.546820][T30305] RBP: 00007ffacf415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2076.546835][T30305] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 2076.546850][T30305] R13: 00007ffacf416038 R14: 00007fffa1c0dab0 R15: 00007fffa1c0db98 [ 2076.546881][T30305] [ 2077.028567][T30267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.140592][T30312] FAULT_INJECTION: forcing a failure. [ 2077.140592][T30312] name failslab, interval 1, probability 393216, space 0, times 0 [ 2077.166034][T30312] CPU: 0 UID: 0 PID: 30312 Comm: syz.4.4875 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2077.166076][T30312] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2077.166086][T30312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2077.166101][T30312] Call Trace: [ 2077.166110][T30312] [ 2077.166119][T30312] dump_stack_lvl+0x100/0x190 [ 2077.166159][T30312] should_fail_ex.cold+0x5/0xa [ 2077.166200][T30312] should_failslab+0xc2/0x120 [ 2077.166235][T30312] kmem_cache_alloc_noprof+0x83/0x780 [ 2077.166268][T30312] ? copy_process+0x2974/0x7890 [ 2077.166300][T30312] ? copy_process+0x29bc/0x7890 [ 2077.166337][T30312] ? copy_process+0x29bc/0x7890 [ 2077.166374][T30312] copy_process+0x29bc/0x7890 [ 2077.166409][T30312] ? preempt_schedule_thunk+0x16/0x30 [ 2077.166445][T30312] ? __pfx_copy_process+0x10/0x10 [ 2077.166478][T30312] ? find_held_lock+0x2b/0x80 [ 2077.166509][T30312] ? futex_private_hash_put+0x107/0x1c0 [ 2077.166546][T30312] kernel_clone+0xfc/0x930 [ 2077.166581][T30312] ? __pfx_kernel_clone+0x10/0x10 [ 2077.166630][T30312] __do_sys_clone+0xd9/0x120 [ 2077.166664][T30312] ? __pfx___do_sys_clone+0x10/0x10 [ 2077.166709][T30312] ? xfd_validate_state+0x129/0x190 [ 2077.166758][T30312] do_syscall_64+0xc9/0xf80 [ 2077.166791][T30312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.166816][T30312] RIP: 0033:0x7ffacf19aeb9 [ 2077.166836][T30312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.166860][T30312] RSP: 002b:00007ffad0100fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2077.166883][T30312] RAX: ffffffffffffffda RBX: 00007ffacf415fa0 RCX: 00007ffacf19aeb9 [ 2077.166900][T30312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2077.166914][T30312] RBP: 00007ffacf208c1f R08: 0000000000000000 R09: 0000000000000000 [ 2077.166929][T30312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2077.166944][T30312] R13: 00007ffacf416038 R14: 00007ffacf415fa0 R15: 00007fffa1c0db98 [ 2077.166976][T30312] [ 2077.459986][T30316] random: crng reseeded on system resumption [ 2077.638408][T30267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.822558][T30267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.076535][T30267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.368811][T29728] Bluetooth: hci3: command tx timeout [ 2078.436874][T30326] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input45 [ 2078.465769][T30326] FAULT_INJECTION: forcing a failure. [ 2078.465769][T30326] name failslab, interval 1, probability 393216, space 0, times 0 [ 2078.522169][T30326] CPU: 1 UID: 0 PID: 30326 Comm: syz.1.4878 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2078.522225][T30326] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2078.522239][T30326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2078.522258][T30326] Call Trace: [ 2078.522271][T30326] [ 2078.522283][T30326] dump_stack_lvl+0x100/0x190 [ 2078.522330][T30326] should_fail_ex.cold+0x5/0xa [ 2078.522389][T30326] should_failslab+0xc2/0x120 [ 2078.522436][T30326] kmem_cache_alloc_noprof+0x83/0x780 [ 2078.522482][T30326] ? __kernfs_new_node+0xd2/0x960 [ 2078.522537][T30326] ? __kernfs_new_node+0xd2/0x960 [ 2078.522579][T30326] __kernfs_new_node+0xd2/0x960 [ 2078.522626][T30326] ? wake_up_q+0xae/0x130 [ 2078.522661][T30326] ? __pfx___kernfs_new_node+0x10/0x10 [ 2078.522717][T30326] ? find_held_lock+0x2b/0x80 [ 2078.522751][T30326] ? kernfs_root+0xee/0x2a0 [ 2078.522796][T30326] ? kernfs_root+0xee/0x2a0 [ 2078.522851][T30326] kernfs_new_node+0x11b/0x1a0 [ 2078.522911][T30326] __kernfs_create_file+0x53/0x350 [ 2078.522954][T30326] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2078.523008][T30326] sysfs_merge_group+0x194/0x340 [ 2078.523078][T30326] ? __pfx_sysfs_merge_group+0x10/0x10 [ 2078.523144][T30326] ? __pfx_dev_add_physical_location+0x10/0x10 [ 2078.523194][T30326] ? bus_to_subsys+0x114/0x150 [ 2078.523254][T30326] dpm_sysfs_add+0x237/0x280 [ 2078.523303][T30326] device_add+0x9ef/0x1950 [ 2078.523357][T30326] ? __pfx_device_add+0x10/0x10 [ 2078.523413][T30326] ? kobject_get+0xbb/0x150 [ 2078.523464][T30326] cdev_device_add+0x12b/0x270 [ 2078.523513][T30326] evdev_connect+0x3a8/0x4b0 [ 2078.523563][T30326] input_attach_handler.isra.0+0x177/0x1e0 [ 2078.523614][T30326] input_register_device.cold+0x139/0x375 [ 2078.523679][T30326] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 2078.523739][T30326] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2078.523793][T30326] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 2078.523863][T30326] ? find_held_lock+0x2b/0x80 [ 2078.523898][T30326] ? hook_file_ioctl_common+0x146/0x410 [ 2078.523971][T30326] ? __pfx_uinput_ioctl+0x10/0x10 [ 2078.524030][T30326] __x64_sys_ioctl+0x18e/0x210 [ 2078.524098][T30326] do_syscall_64+0xc9/0xf80 [ 2078.524144][T30326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2078.524180][T30326] RIP: 0033:0x7f13f839aeb9 [ 2078.524207][T30326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2078.524243][T30326] RSP: 002b:00007f13f9261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.524277][T30326] RAX: ffffffffffffffda RBX: 00007f13f8615fa0 RCX: 00007f13f839aeb9 [ 2078.524313][T30326] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 2078.524334][T30326] RBP: 00007f13f8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2078.524354][T30326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2078.524374][T30326] R13: 00007f13f8616038 R14: 00007f13f8615fa0 R15: 00007ffe17366718 [ 2078.524418][T30326] [ 2078.826231][T30326] input: failed to attach handler evdev to device input45, error: -12 [ 2078.867711][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4879'. [ 2078.977224][T30331] i: entered promiscuous mode [ 2078.985704][T30333] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4880'. [ 2079.008112][T30331] HfR: entered promiscuous mode [ 2079.059929][T30267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2079.083199][T30267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2079.106396][T30267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2079.118662][T30267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2079.399582][T30267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2079.413679][T30350] FAULT_INJECTION: forcing a failure. [ 2079.413679][T30350] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2079.428388][T30350] CPU: 0 UID: 0 PID: 30350 Comm: syz.4.4883 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2079.428428][T30350] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2079.428438][T30350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2079.428452][T30350] Call Trace: [ 2079.428460][T30350] [ 2079.428469][T30350] dump_stack_lvl+0x100/0x190 [ 2079.428503][T30350] should_fail_ex.cold+0x5/0xa [ 2079.428542][T30350] get_futex_key+0x1d2/0x1620 [ 2079.428577][T30350] ? __pfx_get_futex_key+0x10/0x10 [ 2079.428617][T30350] futex_wake+0xea/0x530 [ 2079.428653][T30350] ? rcu_is_watching+0x12/0xc0 [ 2079.428678][T30350] ? lockdep_hardirqs_on+0x78/0x100 [ 2079.428707][T30350] ? __pfx_futex_wake+0x10/0x10 [ 2079.428766][T30350] ? fd_install+0x223/0x580 [ 2079.428791][T30350] ? putname+0xf5/0x1a0 [ 2079.428829][T30350] do_futex+0x32b/0x350 [ 2079.428864][T30350] ? __pfx_do_futex+0x10/0x10 [ 2079.428896][T30350] ? __pfx_do_sys_openat2+0x10/0x10 [ 2079.428937][T30350] ? __fget_files+0x21f/0x3d0 [ 2079.428967][T30350] __x64_sys_futex+0x34f/0x4d0 [ 2079.429003][T30350] ? __x64_sys_openat+0x12d/0x210 [ 2079.429042][T30350] ? __pfx___x64_sys_futex+0x10/0x10 [ 2079.429076][T30350] ? xfd_validate_state+0x129/0x190 [ 2079.429125][T30350] do_syscall_64+0xc9/0xf80 [ 2079.429157][T30350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2079.429182][T30350] RIP: 0033:0x7ffacf19aeb9 [ 2079.429208][T30350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2079.429233][T30350] RSP: 002b:00007ffad01010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2079.429257][T30350] RAX: ffffffffffffffda RBX: 00007ffacf415fa8 RCX: 00007ffacf19aeb9 [ 2079.429273][T30350] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffacf415fac [ 2079.429288][T30350] RBP: 00007ffacf415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2079.429304][T30350] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 2079.429319][T30350] R13: 00007ffacf416038 R14: 00007fffa1c0dab0 R15: 00007fffa1c0db98 [ 2079.429350][T30350] [ 2079.730704][T30267] 8021q: adding VLAN 0 to HW filter on device team0 [ 2079.786945][T29760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.794221][T29760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2079.823019][T29760] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.830344][T29760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2080.255950][T30362] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input46 [ 2080.282025][T30362] FAULT_INJECTION: forcing a failure. [ 2080.282025][T30362] name failslab, interval 1, probability 393216, space 0, times 0 [ 2080.313238][T30362] CPU: 1 UID: 0 PID: 30362 Comm: syz.1.4887 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2080.313295][T30362] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2080.313308][T30362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2080.313328][T30362] Call Trace: [ 2080.313339][T30362] [ 2080.313352][T30362] dump_stack_lvl+0x100/0x190 [ 2080.313398][T30362] should_fail_ex.cold+0x5/0xa [ 2080.313454][T30362] should_failslab+0xc2/0x120 [ 2080.313527][T30362] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 2080.313578][T30362] ? kstrdup_const+0x63/0x80 [ 2080.313630][T30362] ? kstrdup+0x51/0xe0 [ 2080.313670][T30362] kstrdup+0x51/0xe0 [ 2080.313717][T30362] kstrdup_const+0x63/0x80 [ 2080.313762][T30362] __kernfs_new_node+0x9b/0x960 [ 2080.313817][T30362] ? __pfx___kernfs_new_node+0x10/0x10 [ 2080.313877][T30362] ? find_held_lock+0x2b/0x80 [ 2080.313921][T30362] ? kernfs_root+0xee/0x2a0 [ 2080.313967][T30362] ? kernfs_root+0xee/0x2a0 [ 2080.314025][T30362] kernfs_new_node+0x11b/0x1a0 [ 2080.314086][T30362] kernfs_create_link+0xcc/0x240 [ 2080.314130][T30362] sysfs_do_create_link_sd+0x90/0x140 [ 2080.314181][T30362] sysfs_create_link+0x61/0xc0 [ 2080.314228][T30362] device_add+0xb5d/0x1950 [ 2080.314282][T30362] ? __pfx_device_add+0x10/0x10 [ 2080.314338][T30362] ? kobject_get+0xbb/0x150 [ 2080.314389][T30362] cdev_device_add+0x12b/0x270 [ 2080.314436][T30362] evdev_connect+0x3a8/0x4b0 [ 2080.314486][T30362] input_attach_handler.isra.0+0x177/0x1e0 [ 2080.314538][T30362] input_register_device.cold+0x139/0x375 [ 2080.314601][T30362] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 2080.314661][T30362] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2080.314716][T30362] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 2080.314781][T30362] ? find_held_lock+0x2b/0x80 [ 2080.314816][T30362] ? hook_file_ioctl_common+0x146/0x410 [ 2080.314897][T30362] ? __pfx_uinput_ioctl+0x10/0x10 [ 2080.314955][T30362] __x64_sys_ioctl+0x18e/0x210 [ 2080.315016][T30362] do_syscall_64+0xc9/0xf80 [ 2080.315061][T30362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2080.315096][T30362] RIP: 0033:0x7f13f839aeb9 [ 2080.315123][T30362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2080.315159][T30362] RSP: 002b:00007f13f9261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2080.315193][T30362] RAX: ffffffffffffffda RBX: 00007f13f8615fa0 RCX: 00007f13f839aeb9 [ 2080.315216][T30362] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 2080.315236][T30362] RBP: 00007f13f8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2080.315256][T30362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2080.315275][T30362] R13: 00007f13f8616038 R14: 00007f13f8615fa0 R15: 00007ffe17366718 [ 2080.315321][T30362] [ 2080.452737][T29728] Bluetooth: hci3: command tx timeout [ 2080.659874][T30362] input: failed to attach handler evdev to device input46, error: -12 [ 2080.712744][T30267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2080.941405][T30267] veth0_vlan: entered promiscuous mode [ 2080.983252][T30267] veth1_vlan: entered promiscuous mode [ 2081.141835][T30267] veth0_macvtap: entered promiscuous mode [ 2081.158232][T30267] veth1_macvtap: entered promiscuous mode [ 2081.206963][T30267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2081.267713][T30267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2081.291814][T29766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.301798][T29766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.313418][T29766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.324450][T29766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.495036][T29760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2081.504856][T29760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2081.584298][T29764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2081.592809][T29764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2081.906141][T30388] block nbd8: shutting down sockets [ 2082.686009][T29728] Bluetooth: hci3: command tx timeout [ 2082.702939][T30403] FAULT_INJECTION: forcing a failure. [ 2082.702939][T30403] name failslab, interval 1, probability 393216, space 0, times 0 [ 2082.717572][T30403] CPU: 1 UID: 0 PID: 30403 Comm: syz.1.4895 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2082.717621][T30403] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2082.717631][T30403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2082.717646][T30403] Call Trace: [ 2082.717655][T30403] [ 2082.717664][T30403] dump_stack_lvl+0x100/0x190 [ 2082.717698][T30403] should_fail_ex.cold+0x5/0xa [ 2082.717745][T30403] should_failslab+0xc2/0x120 [ 2082.717781][T30403] kmem_cache_alloc_noprof+0x83/0x780 [ 2082.717813][T30403] ? __asan_memset+0x23/0x50 [ 2082.717838][T30403] ? copy_fs_struct+0x49/0x340 [ 2082.717883][T30403] ? copy_fs_struct+0x49/0x340 [ 2082.717921][T30403] copy_fs_struct+0x49/0x340 [ 2082.717963][T30403] copy_process+0x3b53/0x7890 [ 2082.717996][T30403] ? __pfx___futex_wait+0x10/0x10 [ 2082.718030][T30403] ? __pfx_copy_process+0x10/0x10 [ 2082.718078][T30403] kernel_clone+0xfc/0x930 [ 2082.718109][T30403] ? __pfx_futex_wait+0x10/0x10 [ 2082.718134][T30403] ? __pfx_kernel_clone+0x10/0x10 [ 2082.718183][T30403] __do_sys_clone+0xd9/0x120 [ 2082.718217][T30403] ? __pfx___do_sys_clone+0x10/0x10 [ 2082.718262][T30403] ? xfd_validate_state+0x129/0x190 [ 2082.718311][T30403] do_syscall_64+0xc9/0xf80 [ 2082.718344][T30403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2082.718370][T30403] RIP: 0033:0x7f13f839aeb9 [ 2082.718388][T30403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2082.718419][T30403] RSP: 002b:00007f13f9260fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2082.718444][T30403] RAX: ffffffffffffffda RBX: 00007f13f8615fa0 RCX: 00007f13f839aeb9 [ 2082.718461][T30403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2082.718475][T30403] RBP: 00007f13f8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2082.718490][T30403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2082.718505][T30403] R13: 00007f13f8616038 R14: 00007f13f8615fa0 R15: 00007ffe17366718 [ 2082.718536][T30403] [ 2083.109919][T30408] FAULT_INJECTION: forcing a failure. [ 2083.109919][T30408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2083.152986][T30410] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4898'. [ 2083.162650][T30408] CPU: 0 UID: 0 PID: 30408 Comm: syz.4.4897 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2083.162690][T30408] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2083.162699][T30408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2083.162713][T30408] Call Trace: [ 2083.162721][T30408] [ 2083.162730][T30408] dump_stack_lvl+0x100/0x190 [ 2083.162763][T30408] should_fail_ex.cold+0x5/0xa [ 2083.162801][T30408] _copy_from_user+0x2e/0xd0 [ 2083.162838][T30408] copy_msghdr_from_user+0x9f/0x4f0 [ 2083.162867][T30408] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2083.162914][T30408] ? __lock_acquire+0x4a5/0x2630 [ 2083.162950][T30408] ___sys_recvmsg+0xdd/0x1a0 [ 2083.162978][T30408] ? __pfx____sys_recvmsg+0x10/0x10 [ 2083.163029][T30408] do_recvmmsg+0x301/0x760 [ 2083.163061][T30408] ? __pfx_do_recvmmsg+0x10/0x10 [ 2083.163087][T30408] ? ksys_write+0x190/0x250 [ 2083.163113][T30408] ? ksys_write+0x190/0x250 [ 2083.163145][T30408] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2083.163184][T30408] ? __fget_files+0x21f/0x3d0 [ 2083.163216][T30408] __x64_sys_recvmmsg+0x22a/0x280 [ 2083.163256][T30408] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2083.163301][T30408] do_syscall_64+0xc9/0xf80 [ 2083.163332][T30408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2083.163356][T30408] RIP: 0033:0x7ffacf19aeb9 [ 2083.163374][T30408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2083.163398][T30408] RSP: 002b:00007ffad0101028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2083.163420][T30408] RAX: ffffffffffffffda RBX: 00007ffacf415fa0 RCX: 00007ffacf19aeb9 [ 2083.163436][T30408] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2083.163451][T30408] RBP: 00007ffad0101090 R08: 0000000000000000 R09: 0000000000000000 [ 2083.163465][T30408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2083.163479][T30408] R13: 00007ffacf416038 R14: 00007ffacf415fa0 R15: 00007fffa1c0db98 [ 2083.163509][T30408] [ 2083.472670][T30413] FAULT_INJECTION: forcing a failure. [ 2083.472670][T30413] name failslab, interval 1, probability 393216, space 0, times 0 [ 2083.492316][T30413] CPU: 0 UID: 0 PID: 30413 Comm: syz.1.4899 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2083.492377][T30413] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2083.492391][T30413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2083.492411][T30413] Call Trace: [ 2083.492422][T30413] [ 2083.492437][T30413] dump_stack_lvl+0x100/0x190 [ 2083.492486][T30413] should_fail_ex.cold+0x5/0xa [ 2083.492545][T30413] should_failslab+0xc2/0x120 [ 2083.492595][T30413] __kmalloc_cache_noprof+0x80/0x810 [ 2083.492635][T30413] ? cec_open+0xdb/0x690 [ 2083.492679][T30413] ? cec_open+0xdb/0x690 [ 2083.492714][T30413] cec_open+0xdb/0x690 [ 2083.492755][T30413] ? __pfx_cec_open+0x10/0x10 [ 2083.492799][T30413] ? kobject_get_unless_zero+0x156/0x200 [ 2083.492854][T30413] ? find_held_lock+0x2b/0x80 [ 2083.492890][T30413] ? chrdev_open+0x10b/0x6a0 [ 2083.492932][T30413] ? chrdev_open+0x10b/0x6a0 [ 2083.492980][T30413] ? __pfx_cec_open+0x10/0x10 [ 2083.493020][T30413] chrdev_open+0x234/0x6a0 [ 2083.493060][T30413] ? __pfx_apparmor_file_open+0x10/0x10 [ 2083.493107][T30413] ? __pfx_chrdev_open+0x10/0x10 [ 2083.493158][T30413] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2083.493211][T30413] do_dentry_open+0x73e/0x1570 [ 2083.493252][T30413] ? __pfx_chrdev_open+0x10/0x10 [ 2083.493297][T30413] ? security_inode_permission+0xbf/0x250 [ 2083.493356][T30413] vfs_open+0x82/0x3f0 [ 2083.493413][T30413] path_openat+0x21dc/0x3120 [ 2083.493470][T30413] ? __pfx_path_openat+0x10/0x10 [ 2083.493527][T30413] do_filp_open+0x1f7/0x420 [ 2083.493573][T30413] ? __pfx_do_filp_open+0x10/0x10 [ 2083.493647][T30413] ? _raw_spin_unlock+0x28/0x50 [ 2083.493682][T30413] ? alloc_fd+0x476/0x790 [ 2083.493733][T30413] do_sys_openat2+0x12e/0x220 [ 2083.493786][T30413] ? __pfx_do_sys_openat2+0x10/0x10 [ 2083.493843][T30413] ? __fget_files+0x21f/0x3d0 [ 2083.493899][T30413] __x64_sys_openat+0x12d/0x210 [ 2083.493954][T30413] ? __pfx___x64_sys_openat+0x10/0x10 [ 2083.494026][T30413] do_syscall_64+0xc9/0xf80 [ 2083.494072][T30413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2083.494108][T30413] RIP: 0033:0x7f13f839aeb9 [ 2083.494137][T30413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2083.494170][T30413] RSP: 002b:00007f13f9261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2083.494205][T30413] RAX: ffffffffffffffda RBX: 00007f13f8615fa0 RCX: 00007f13f839aeb9 [ 2083.494228][T30413] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 2083.494251][T30413] RBP: 00007f13f8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2083.494273][T30413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2083.494293][T30413] R13: 00007f13f8616038 R14: 00007f13f8615fa0 R15: 00007ffe17366718 [ 2083.494338][T30413] [ 2083.799947][T30415] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input47 [ 2084.355362][T30422] block nbd8: shutting down sockets [ 2085.892050][T30435] Process accounting resumed [ 2086.026944][T30444] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4908'. [ 2086.042050][T30443] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4909'. [ 2086.407099][T30456] block nbd8: shutting down sockets [ 2087.398693][T30470] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4917'. [ 2087.409302][T30470] unsupported nla_type 65535 [ 2088.468674][T30483] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4920'. [ 2088.627104][T30475] Process accounting resumed [ 2088.730211][T30488] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2088.976256][T30493] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2089.008121][T30494] FAULT_INJECTION: forcing a failure. [ 2089.008121][T30494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.023544][T30494] CPU: 1 UID: 0 PID: 30494 Comm: syz.1.4923 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2089.023595][T30494] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2089.023606][T30494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2089.023624][T30494] Call Trace: [ 2089.023635][T30494] [ 2089.023646][T30494] dump_stack_lvl+0x100/0x190 [ 2089.023687][T30494] should_fail_ex.cold+0x5/0xa [ 2089.023736][T30494] _copy_to_user+0x32/0xd0 [ 2089.023785][T30494] simple_read_from_buffer+0xcb/0x170 [ 2089.023820][T30494] proc_fail_nth_read+0x1af/0x230 [ 2089.023857][T30494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2089.023896][T30494] ? rw_verify_area+0xce/0x6d0 [ 2089.023925][T30494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2089.023960][T30494] vfs_read+0x1e4/0xb30 [ 2089.023998][T30494] ? __pfx_vfs_read+0x10/0x10 [ 2089.024029][T30494] ? find_held_lock+0x2b/0x80 [ 2089.024059][T30494] ? __fget_files+0x215/0x3d0 [ 2089.024098][T30494] ? __fget_files+0x21f/0x3d0 [ 2089.024151][T30494] ksys_read+0x12a/0x250 [ 2089.024187][T30494] ? __pfx_ksys_read+0x10/0x10 [ 2089.024237][T30494] do_syscall_64+0xc9/0xf80 [ 2089.024281][T30494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.024314][T30494] RIP: 0033:0x7f13f835b78e [ 2089.024340][T30494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2089.024373][T30494] RSP: 002b:00007f13f923ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2089.024404][T30494] RAX: ffffffffffffffda RBX: 00007f13f92406c0 RCX: 00007f13f835b78e [ 2089.024425][T30494] RDX: 000000000000000f RSI: 00007f13f92400a0 RDI: 0000000000000005 [ 2089.024444][T30494] RBP: 00007f13f9240090 R08: 0000000000000000 R09: 0000000000000000 [ 2089.024464][T30494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2089.024483][T30494] R13: 00007f13f8616128 R14: 00007f13f8616090 R15: 00007ffe17366718 [ 2089.024526][T30494] [ 2089.936030][T30504] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input48 [ 2090.794069][T30506] Process accounting resumed [ 2091.065051][T30518] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4930'. [ 2092.224055][T29791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2092.237419][T29791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2092.251698][T29791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2092.263305][T29791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2092.272208][T29791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2092.528197][T30540] can: request_module (can-proto-0) failed. [ 2093.072034][T30548] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4938'. [ 2093.350116][T30535] chnl_net:caif_netlink_parms(): no params data found [ 2093.646543][T30535] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.653873][T30535] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.687281][T30535] bridge_slave_0: entered allmulticast mode [ 2093.705987][T30535] bridge_slave_0: entered promiscuous mode [ 2093.726501][T30535] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.733792][T30535] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.755920][T30535] bridge_slave_1: entered allmulticast mode [ 2093.796092][T30535] bridge_slave_1: entered promiscuous mode [ 2093.882410][T30535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2093.915413][T30535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2094.038376][T30535] team0: Port device team_slave_0 added [ 2094.076978][T30535] team0: Port device team_slave_1 added [ 2094.149564][T30535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2094.165619][T30535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2094.232600][T30535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2094.275825][T30535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2094.282969][T30535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2094.340307][T30535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2094.465009][T29791] Bluetooth: hci2: command tx timeout [ 2094.653447][T30535] hsr_slave_0: entered promiscuous mode [ 2094.717065][T30535] hsr_slave_1: entered promiscuous mode [ 2094.724288][T30535] debugfs: 'hsr0' already exists in 'hsr' [ 2094.774672][T30535] Cannot create hsr debugfs directory [ 2095.668419][T30535] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2095.701083][T30535] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2095.761653][T30535] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2095.820358][T30535] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2096.052034][T30535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2096.079871][T30535] 8021q: adding VLAN 0 to HW filter on device team0 [ 2096.095401][T29769] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.102854][T29769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2096.143615][T29769] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.151264][T29769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2096.527802][T29791] Bluetooth: hci2: command tx timeout [ 2096.596093][T30535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2097.058729][T30535] veth0_vlan: entered promiscuous mode [ 2097.082932][T30535] veth1_vlan: entered promiscuous mode [ 2097.139956][T30535] veth0_macvtap: entered promiscuous mode [ 2097.152282][T30535] veth1_macvtap: entered promiscuous mode [ 2097.187618][T30535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2097.204477][T30535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2097.223228][T29737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.236973][T29737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.248045][T29737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.264437][T29737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.367530][T29737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.384867][T29737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2097.426627][T29760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.434623][T29760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.606220][T29791] Bluetooth: hci2: command tx timeout [ 2100.685854][T29791] Bluetooth: hci2: command tx timeout [ 2109.249784][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.257092][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.690491][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.697329][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2177.892839][T29791] Bluetooth: hci4: command 0x0406 tx timeout [ 2188.126283][T29728] Bluetooth: hci0: command 0x0406 tx timeout [ 2198.365814][T30639] Bluetooth: hci3: command 0x0406 tx timeout [ 2218.851637][T29916] Bluetooth: hci2: command 0x0406 tx timeout [ 2222.526431][ T31] INFO: task kworker/u10:0:29727 blocked for more than 143 seconds. [ 2222.534705][ T31] Tainted: G U L syzkaller #0 [ 2222.549439][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.565203][ T31] task:kworker/u10:0 state:D stack:24808 pid:29727 tgid:29727 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2222.577683][ T31] Workqueue: netns cleanup_net [ 2222.582532][ T31] Call Trace: [ 2222.585965][ T31] [ 2222.588991][ T31] ? __schedule+0xf65/0x5e10 [ 2222.593645][ T31] __schedule+0xfe4/0x5e10 [ 2222.598358][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2222.603970][ T31] ? __pfx___schedule+0x10/0x10 [ 2222.609061][ T31] ? find_held_lock+0x2b/0x80 [ 2222.613860][ T31] ? schedule+0x2bf/0x390 [ 2222.618668][ T31] schedule+0xdd/0x390 [ 2222.623362][ T31] schedule_timeout+0x1b2/0x280 [ 2222.628720][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2222.634268][ T31] ? mark_held_locks+0x40/0x70 [ 2222.639356][ T31] __wait_for_common+0x2e7/0x4c0 [ 2222.644583][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2222.650428][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 2222.662206][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2222.670124][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 2222.676911][ T31] __flush_workqueue+0x3f7/0x1200 [ 2222.682220][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2222.689734][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2222.695035][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 2222.701017][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 2222.706784][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 2222.713160][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 2222.718839][ T31] rds_tcp_listen_stop+0x104/0x160 [ 2222.724793][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2222.730792][ T31] rds_tcp_exit_net+0xcb/0x810 [ 2222.735884][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2222.741567][ T31] ? __pfx___might_resched+0x10/0x10 [ 2222.747517][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2222.754226][ T31] ops_undo_list+0x2ee/0xab0 [ 2222.760146][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 2222.771905][ T31] ? cleanup_net+0x345/0x830 [ 2222.780033][ T31] ? idr_destroy+0x62/0x2e0 [ 2222.785439][ T31] cleanup_net+0x419/0x830 [ 2222.790562][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 2222.796900][ T31] ? rcu_is_watching+0x12/0xc0 [ 2222.802852][ T31] process_one_work+0x9c2/0x1840 [ 2222.808965][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2222.814730][ T31] ? assign_work+0x19c/0x250 [ 2222.819729][ T31] worker_thread+0x5da/0xe40 [ 2222.824610][ T31] ? kthread+0x17d/0x730 [ 2222.830320][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2222.835705][ T31] kthread+0x3b3/0x730 [ 2222.840107][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.844848][ T31] ? ret_from_fork+0x79/0xaf0 [ 2222.850737][ T31] ? ret_from_fork+0x79/0xaf0 [ 2222.855883][ T31] ? rcu_is_watching+0x12/0xc0 [ 2222.860724][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.870239][ T31] ret_from_fork+0x754/0xaf0 [ 2222.875316][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2222.884258][ T31] ? __switch_to+0x7b9/0x10c0 [ 2222.893688][ T31] ? __pfx_kthread+0x10/0x10 [ 2222.899070][ T31] ret_from_fork_asm+0x1a/0x30 [ 2222.904695][ T31] [ 2222.908028][ T31] INFO: task syz.0.4874:30309 blocked for more than 143 seconds. [ 2222.917646][ T31] Tainted: G U L syzkaller #0 [ 2222.925875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2222.936836][ T31] task:syz.0.4874 state:D stack:27032 pid:30309 tgid:30307 ppid:24838 task_flags:0x400140 flags:0x00080002 [ 2222.951552][ T31] Call Trace: [ 2222.954987][ T31] [ 2222.958134][ T31] ? __schedule+0xf65/0x5e10 [ 2222.964725][ T31] __schedule+0xfe4/0x5e10 [ 2222.972479][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2222.978452][ T31] ? __pfx___schedule+0x10/0x10 [ 2222.983827][ T31] ? find_held_lock+0x2b/0x80 [ 2222.991365][ T31] ? schedule+0x2bf/0x390 [ 2222.999165][ T31] schedule+0xdd/0x390 [ 2223.003896][ T31] schedule_timeout+0x1b2/0x280 [ 2223.010473][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2223.017669][ T31] ? mark_held_locks+0x40/0x70 [ 2223.023197][ T31] __wait_for_common+0x2e7/0x4c0 [ 2223.028619][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2223.034888][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 2223.040901][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2223.047136][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 2223.054157][ T31] __flush_workqueue+0x3f7/0x1200 [ 2223.060972][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2223.067758][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2223.077114][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 2223.082948][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 2223.089313][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 2223.098654][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 2223.108914][ T31] rds_tcp_listen_stop+0x104/0x160 [ 2223.115093][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2223.121617][ T31] rds_tcp_exit_net+0xcb/0x810 [ 2223.126914][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2223.133565][ T31] ? __pfx___might_resched+0x10/0x10 [ 2223.139209][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2223.145577][ T31] ops_undo_list+0x2ee/0xab0 [ 2223.150685][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 2223.156649][ T31] ? ops_init+0x2f0/0x5f0 [ 2223.161685][ T31] ? ops_init+0x2fa/0x5f0 [ 2223.169653][ T31] setup_net+0x1fa/0x3a0 [ 2223.177883][ T31] ? __pfx_setup_net+0x10/0x10 [ 2223.183503][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 2223.189590][ T31] ? mutex_init_lockep+0x110/0x150 [ 2223.196386][ T31] copy_net_ns+0x46f/0x7c0 [ 2223.201563][ T31] create_new_namespaces+0x3ea/0xab0 [ 2223.210348][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 2223.218941][ T31] ksys_unshare+0x455/0xab0 [ 2223.223826][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 2223.229913][ T31] ? xfd_validate_state+0x129/0x190 [ 2223.236202][ T31] __x64_sys_unshare+0x31/0x40 [ 2223.241249][ T31] do_syscall_64+0xc9/0xf80 [ 2223.247116][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.254343][ T31] RIP: 0033:0x7eff2599aeb9 [ 2223.259601][ T31] RSP: 002b:00007eff23bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2223.268425][ T31] RAX: ffffffffffffffda RBX: 00007eff25c16090 RCX: 00007eff2599aeb9 [ 2223.282805][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2223.291368][ T31] RBP: 00007eff25a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2223.300400][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2223.309884][ T31] R13: 00007eff25c16128 R14: 00007eff25c16090 R15: 00007ffc16639df8 [ 2223.321870][ T31] [ 2223.328399][ T31] [ 2223.328399][ T31] Showing all locks held in the system: [ 2223.337544][ T31] 1 lock held by khungtaskd/31: [ 2223.343199][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2223.354862][ T31] 2 locks held by getty/15722: [ 2223.360477][ T31] #0: ffff88814d7570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2223.370796][ T31] #1: ffffc90008e552f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2223.384399][ T31] 3 locks held by kworker/u10:0/29727: [ 2223.390174][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 2223.402465][ T31] #1: ffffc90004367c98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 2223.415251][ T31] #2: ffffffff903dcf30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 2223.428350][ T31] 1 lock held by syz.0.4874/30309: [ 2223.434388][ T31] #0: ffffffff903dcf30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 2223.445585][ T31] [ 2223.449229][ T31] ============================================= [ 2223.449229][ T31] [ 2223.457792][ T31] NMI backtrace for cpu 1 [ 2223.457822][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 2223.457868][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2223.457881][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2223.457900][ T31] Call Trace: [ 2223.457912][ T31] [ 2223.457925][ T31] dump_stack_lvl+0x100/0x190 [ 2223.457971][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2223.458016][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2223.458067][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2223.458121][ T31] sys_info+0x141/0x190 [ 2223.458163][ T31] watchdog+0xcc3/0xfe0 [ 2223.458210][ T31] ? __pfx_watchdog+0x10/0x10 [ 2223.458246][ T31] ? __kthread_parkme+0x18c/0x230 [ 2223.458284][ T31] ? __pfx_watchdog+0x10/0x10 [ 2223.458322][ T31] ? __pfx_watchdog+0x10/0x10 [ 2223.458353][ T31] kthread+0x3b3/0x730 [ 2223.458402][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.458444][ T31] ? ret_from_fork+0x79/0xaf0 [ 2223.458472][ T31] ? ret_from_fork+0x79/0xaf0 [ 2223.458502][ T31] ? rcu_is_watching+0x12/0xc0 [ 2223.458534][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.458588][ T31] ret_from_fork+0x754/0xaf0 [ 2223.458686][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2223.458721][ T31] ? __switch_to+0x7b9/0x10c0 [ 2223.458762][ T31] ? __pfx_kthread+0x10/0x10 [ 2223.458816][ T31] ret_from_fork_asm+0x1a/0x30 [ 2223.458882][ T31] [ 2223.458895][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2223.620809][ C0] NMI backtrace for cpu 0 [ 2223.620835][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 2223.620874][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2223.620884][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2223.620900][ C0] RIP: 0010:trace_sched_wakeup+0xa4/0x100 [ 2223.620935][ C0] Code: 05 31 c2 10 12 48 8b 2d 52 30 cd 0e 48 85 ed 74 27 48 b8 00 00 00 00 00 fc ff df 48 8d 7d 08 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 53 48 8b 7d 08 48 89 de e8 4e f6 fe ff 65 ff 0d f7 c1 10 12 0f [ 2223.620960][ C0] RSP: 0018:ffffc90000007998 EFLAGS: 00000046 [ 2223.620981][ C0] RAX: dffffc0000000000 RBX: ffff88801e2bbd00 RCX: ffffffff81d31dee [ 2223.620998][ C0] RDX: 1ffff1100bc43af3 RSI: 0000000000000008 RDI: ffff88805e21d798 [ 2223.621015][ C0] RBP: ffff88805e21d790 R08: 0000000000000000 R09: fffffbfff216edfa [ 2223.621031][ C0] R10: ffffffff90b76fd7 R11: 0000000000000001 R12: 0000000000000008 [ 2223.621046][ C0] R13: ffff88801e2bbd68 R14: ffff88801e2bbd00 R15: ffff8880b853adc0 [ 2223.621064][ C0] FS: 0000000000000000(0000) GS:ffff8881245e2000(0000) knlGS:0000000000000000 [ 2223.621087][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2223.621103][ C0] CR2: 0000558a54e670d0 CR3: 000000007cce4000 CR4: 00000000003526f0 [ 2223.621119][ C0] Call Trace: [ 2223.621129][ C0] [ 2223.621140][ C0] ttwu_do_activate+0x1fb/0xa90 [ 2223.621172][ C0] ? update_rq_clock+0x269/0xd30 [ 2223.621203][ C0] try_to_wake_up+0xc47/0x1a60 [ 2223.621231][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 2223.621267][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2223.621299][ C0] cpu_stop_queue_work+0x26e/0x340 [ 2223.621335][ C0] sched_balance_rq+0x251d/0x36b0 [ 2223.621375][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 2223.621403][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2223.621430][ C0] ? sched_clock+0x38/0x60 [ 2223.621479][ C0] sched_balance_domains+0x46d/0xd40 [ 2223.621513][ C0] ? __pfx_sched_balance_domains+0x10/0x10 [ 2223.621542][ C0] ? find_held_lock+0x2b/0x80 [ 2223.621567][ C0] ? _nohz_idle_balance.isra.0+0x472/0x840 [ 2223.621596][ C0] ? _nohz_idle_balance.isra.0+0x472/0x840 [ 2223.621633][ C0] _nohz_idle_balance.isra.0+0x611/0x840 [ 2223.621668][ C0] ? __pfx__nohz_idle_balance.isra.0+0x10/0x10 [ 2223.621705][ C0] handle_softirqs+0x1ea/0x910 [ 2223.621738][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2223.621772][ C0] __irq_exit_rcu+0xef/0x150 [ 2223.621802][ C0] irq_exit_rcu+0x9/0x30 [ 2223.621830][ C0] sysvec_call_function_single+0xa3/0xc0 [ 2223.621859][ C0] [ 2223.621867][ C0] [ 2223.621876][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 2223.621905][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2223.621934][ C0] Code: a6 7a 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 6c 17 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2223.621958][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 2223.621976][ C0] RAX: 0000000000e30965 RBX: ffffffff8e297ac0 RCX: ffffffff8b7414b5 [ 2223.621992][ C0] RDX: 0000000000000000 RSI: ffffffff8dc41a8e RDI: ffffffff8bfa3320 [ 2223.622008][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 2223.622024][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 2223.622040][ C0] R13: 0000000000000000 R14: ffffffff90b76fd0 R15: 0000000000000000 [ 2223.622060][ C0] ? ct_kernel_exit+0x125/0x180 [ 2223.622093][ C0] default_idle+0x9/0x10 [ 2223.622134][ C0] default_idle_call+0x6c/0xb0 [ 2223.622168][ C0] do_idle+0x35b/0x4b0 [ 2223.622194][ C0] ? __pfx_do_idle+0x10/0x10 [ 2223.622220][ C0] ? do_idle+0x6/0x4b0 [ 2223.622245][ C0] cpu_startup_entry+0x4f/0x60 [ 2223.622276][ C0] rest_init+0x251/0x260 [ 2223.622310][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2223.622438][ C0] start_kernel+0x47a/0x480 [ 2223.622463][ C0] x86_64_start_reservations+0x24/0x30 [ 2223.622490][ C0] x86_64_start_kernel+0x122/0x130 [ 2223.622517][ C0] common_startup_64+0x13e/0x148 [ 2223.622557][ C0] [ 2224.048953][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2224.056780][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 2224.067863][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 2224.073480][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2224.084279][ T31] Call Trace: [ 2224.087817][ T31] [ 2224.091578][ T31] dump_stack_lvl+0x100/0x190 [ 2224.097480][ T31] vpanic+0x20d/0x630 [ 2224.101938][ T31] panic+0xd1/0xd1 [ 2224.105731][ T31] ? __pfx_panic+0x10/0x10 [ 2224.110447][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2224.116868][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2224.123455][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2224.129954][ T31] ? watchdog.cold+0x198/0x1ca [ 2224.135389][ T31] ? watchdog+0xcd3/0xfe0 [ 2224.140670][ T31] watchdog.cold+0x1a9/0x1ca [ 2224.145601][ T31] ? __pfx_watchdog+0x10/0x10 [ 2224.151553][ T31] ? __kthread_parkme+0x18c/0x230 [ 2224.157357][ T31] ? __pfx_watchdog+0x10/0x10 [ 2224.162813][ T31] ? __pfx_watchdog+0x10/0x10 [ 2224.167974][ T31] kthread+0x3b3/0x730 [ 2224.172397][ T31] ? __pfx_kthread+0x10/0x10 [ 2224.178490][ T31] ? ret_from_fork+0x79/0xaf0 [ 2224.184451][ T31] ? ret_from_fork+0x79/0xaf0 [ 2224.189181][ T31] ? rcu_is_watching+0x12/0xc0 [ 2224.193990][ T31] ? __pfx_kthread+0x10/0x10 [ 2224.199000][ T31] ret_from_fork+0x754/0xaf0 [ 2224.203771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2224.209126][ T31] ? __switch_to+0x7b9/0x10c0 [ 2224.214383][ T31] ? __pfx_kthread+0x10/0x10 [ 2224.219486][ T31] ret_from_fork_asm+0x1a/0x30 [ 2224.224521][ T31] [ 2224.228238][ T31] Kernel Offset: disabled [ 2224.232598][ T31] Rebooting in 86400 seconds..