last executing test programs: 3m39.42386181s ago: executing program 32 (id=3317): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 2m57.367338573s ago: executing program 33 (id=3602): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m32.136982795s ago: executing program 4 (id=3972): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) readv$auto(0x0, &(0x7f0000000080)={&(0x7f00000000c0), 0x3f}, 0x7) 2m31.98356696s ago: executing program 4 (id=3974): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) 2m31.617492321s ago: executing program 4 (id=3976): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff7}, 0x4, 0x0, 0xa, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6db, 0x0, 0x3ff, 0x0, 0x3, 0x697b}, 0xed7138c}, 0x9a6, 0xc01) 2m31.261704246s ago: executing program 4 (id=3979): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x2, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m31.091341689s ago: executing program 4 (id=3980): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r0, 0x9, 0x0) getdents$auto(r0, 0x0, 0x62d4) 2m31.023227593s ago: executing program 0 (id=3981): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, 0x0, 0x4) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) read$auto(0x3, 0x0, 0x80) 2m30.945359515s ago: executing program 4 (id=3982): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8b0f, 0x24) 2m30.741756391s ago: executing program 0 (id=3983): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) readv$auto(0x0, &(0x7f0000000080)={&(0x7f00000000c0), 0x3f}, 0x7) 2m30.576508309s ago: executing program 0 (id=3984): read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) 2m28.851819311s ago: executing program 0 (id=3995): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) 2m27.650784475s ago: executing program 0 (id=3997): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r0, 0x9, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, &(0x7f0000000140)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d1) 2m27.481749163s ago: executing program 0 (id=3998): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0xe34, 0x7}, 0x8}, 0x3, 0xb00) 2m23.515574854s ago: executing program 34 (id=3914): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) writev$auto(r0, &(0x7f0000000240)={0x0, 0x5}, 0xa) 2m15.893522814s ago: executing program 35 (id=3982): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8b0f, 0x24) 2m12.30795475s ago: executing program 36 (id=3998): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0xe34, 0x7}, 0x8}, 0x3, 0xb00) 1m56.026677514s ago: executing program 6 (id=4191): write$auto(0x4, 0x0, 0x100082) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) faccessat2$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1ff) 1m54.932961659s ago: executing program 6 (id=4197): mmap$auto(0x0, 0x2020005, 0x3, 0xeb2, 0xfffffffffffffffa, 0x101) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 1m54.721706256s ago: executing program 6 (id=4198): socket(0x10, 0x2, 0xc) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000073, 0x400, 0x2}]}) 1m53.599693789s ago: executing program 6 (id=4204): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x19) modify_ldt$auto(0x1, 0x0, 0x10) 1m52.323966843s ago: executing program 6 (id=4211): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100) 1m52.234377272s ago: executing program 6 (id=4213): close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) 1m47.485411766s ago: executing program 7 (id=4247): timerfd_settime$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r0, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1m47.374774643s ago: executing program 7 (id=4249): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x80802, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) 1m47.279420284s ago: executing program 7 (id=4252): sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44845}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) 1m46.997702964s ago: executing program 7 (id=4255): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) close_range$auto(0x2, 0xa, 0x0) 1m46.778786586s ago: executing program 7 (id=4258): open(0x0, 0x4242, 0xe1d2b27bdc14aabc) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) fchdir$auto(0xffffffffffffffff) mount$auto(0x0, &(0x7f0000001180)='.\x00', 0x0, 0xdec, 0x0) 1m46.596352873s ago: executing program 7 (id=4260): r0 = socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) 1m44.049990581s ago: executing program 5 (id=4282): r0 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) poll$auto(&(0x7f0000000080)={r0, 0xb, 0xb}, 0x7, 0x4003ff) lseek$auto(0xffffffffffffffff, 0x0, 0x2) ppoll$auto(0x0, 0x1, 0x0, 0x0, 0x8) setsockopt$auto(r1, 0x113, 0x1, 0x0, 0x81) 1m43.172204402s ago: executing program 5 (id=4284): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8081) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 1m37.26618316s ago: executing program 37 (id=4213): close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) 1m37.21791306s ago: executing program 5 (id=4288): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8922, 0x24) 1m35.138168975s ago: executing program 5 (id=4304): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x5) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0x11, 0x2, 0xfe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)="d8", 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) sendfile$auto(r0, r2, 0x0, 0x200008) 1m34.803913842s ago: executing program 5 (id=4297): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', 0x0, 0x1ff, 0x0) 1m34.688801249s ago: executing program 5 (id=4298): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(r0, 0x1) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) 1m31.285921797s ago: executing program 38 (id=4260): r0 = socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) 1m19.499350646s ago: executing program 39 (id=4298): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(r0, 0x1) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) 39.35763472s ago: executing program 2 (id=4739): mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r1, 0x2f}, 0x22) 39.050756306s ago: executing program 2 (id=4743): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x3}, 0x3) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x1, 0x2, '\v'}, 0x2) 38.581862807s ago: executing program 2 (id=4746): openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/gspca_gl860/parameters/sensor\x00', 0x22001, 0x0) prctl$auto(0x23, 0xd, 0x8, 0x0, 0x0) 38.47117583s ago: executing program 2 (id=4748): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)="7f0d40") r1 = epoll_create$auto(0x8) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) 38.372647088s ago: executing program 2 (id=4750): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) r0 = fsopen$auto(0x0, 0x1) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 38.199161186s ago: executing program 2 (id=4753): mmap$auto(0x0, 0x7, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7fff) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) umount2$auto(0x0, 0x3) 23.185937509s ago: executing program 40 (id=4753): mmap$auto(0x0, 0x7, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7fff) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) umount2$auto(0x0, 0x3) 17.26927494s ago: executing program 3 (id=4889): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0xa) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 16.727888083s ago: executing program 3 (id=4891): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x20008004) unshare$auto(0x40000080) sysfs$auto(0x2, 0xe, 0x7) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b52, 0x1) 15.797522056s ago: executing program 3 (id=4897): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000400), 0xa441, 0x0) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x82802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) select$auto(0x9, &(0x7f0000000440)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) 15.585596714s ago: executing program 3 (id=4901): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) recvmmsg$auto(r0, 0x0, 0x4, 0x6586, 0x0) 15.409659563s ago: executing program 3 (id=4903): mmap$auto(0x0, 0x7, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 15.178245494s ago: executing program 3 (id=4907): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x121002, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) semctl$auto(0x204, 0xfffffffe, 0x3, 0x4) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 4.001104467s ago: executing program 9 (id=4984): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, [{0x7, 0x10, 0x3d}]}) 3.69409235s ago: executing program 9 (id=4988): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(r0, 0x3, 0x8000000000402, 0x5) 3.453315917s ago: executing program 9 (id=4990): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getsid$auto(0x0) set_tid_address$auto(0x0) 3.250770419s ago: executing program 8 (id=4993): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x10002, 0x7ffe, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2.429723963s ago: executing program 1 (id=4997): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, [{0x7, 0x10, 0x3d}]}) 2.266479034s ago: executing program 8 (id=4998): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) 2.213685761s ago: executing program 1 (id=4999): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x70fe8275}, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x55d8}, 0x7}, 0x6, 0x0) 2.115888772s ago: executing program 9 (id=5000): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0x123041, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x7) 2.029347346s ago: executing program 1 (id=5001): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) getpid() 1.895946085s ago: executing program 9 (id=5002): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') 1.638092169s ago: executing program 8 (id=5003): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x10}, 0x3) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) 1.365275449s ago: executing program 8 (id=5004): mmap$auto(0x2, 0xdf2, 0x5, 0x8a75, 0xffffffffffffffff, 0x8) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 725.942709ms ago: executing program 9 (id=5005): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), r0) 725.871665ms ago: executing program 1 (id=5006): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYRESOCT], 0x44}}, 0x4044000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}}, 0x4000091) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 300.080252ms ago: executing program 1 (id=5007): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x0, 0x5, 0x0) 299.169886ms ago: executing program 8 (id=5008): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, [{0x7, 0x10, 0x3d}]}) 129.429535ms ago: executing program 41 (id=4907): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x121002, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) semctl$auto(0x204, 0xfffffffe, 0x3, 0x4) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 116.612126ms ago: executing program 8 (id=5010): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r0, 0x0, 0xfffffff7) futex$auto(&(0x7f0000000000)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) 0s ago: executing program 1 (id=5011): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080), 0xe24102, 0x0) socket(0x11, 0x3, 0x9) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram5/make-it-fail\x00', 0x80302, 0x0) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) kernel console output (not intermixed with test programs): netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.125245][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.139762][ T3551] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.155859][ T3551] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.219735][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.227702][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.255952][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.264037][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.499107][T17385] zswap: compressor Ø not available [ 534.606678][ T52] Bluetooth: hci9: command tx timeout [ 534.887243][T17398] zswap: compressor not available [ 535.028303][T17407] FAULT_INJECTION: forcing a failure. [ 535.028303][T17407] name failslab, interval 1, probability 0, space 0, times 0 [ 535.041564][T17407] CPU: 0 UID: 0 PID: 17407 Comm: syz.9.4300 Tainted: G U syzkaller #0 PREEMPT(full) [ 535.041602][T17407] Tainted: [U]=USER [ 535.041612][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.041628][T17407] Call Trace: [ 535.041637][T17407] [ 535.041646][T17407] dump_stack_lvl+0x16c/0x1f0 [ 535.041683][T17407] should_fail_ex+0x512/0x640 [ 535.041717][T17407] ? fs_reclaim_acquire+0xae/0x150 [ 535.041751][T17407] should_failslab+0xc2/0x120 [ 535.041795][T17407] __kmalloc_noprof+0xdd/0x880 [ 535.041834][T17407] ? tomoyo_encode2+0x100/0x3e0 [ 535.041865][T17407] ? tomoyo_encode2+0x100/0x3e0 [ 535.041888][T17407] tomoyo_encode2+0x100/0x3e0 [ 535.041927][T17407] tomoyo_encode+0x29/0x50 [ 535.041953][T17407] tomoyo_realpath_from_path+0x18f/0x6e0 [ 535.041994][T17407] tomoyo_path_number_perm+0x245/0x580 [ 535.042031][T17407] ? tomoyo_path_number_perm+0x237/0x580 [ 535.042075][T17407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 535.042151][T17407] ? d_alloc_parallel+0xb4e/0x1510 [ 535.042188][T17407] ? current_check_access_path+0x33c/0x460 [ 535.042220][T17407] ? __pfx_current_check_access_path+0x10/0x10 [ 535.042259][T17407] tomoyo_path_mknod+0x10c/0x190 [ 535.042292][T17407] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 535.042329][T17407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.042377][T17407] security_path_mknod+0x161/0x310 [ 535.042406][T17407] lookup_open.isra.0+0xc17/0x1580 [ 535.042454][T17407] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 535.042502][T17407] ? find_held_lock+0x2b/0x80 [ 535.042539][T17407] ? __pfx_down_write+0x10/0x10 [ 535.042584][T17407] path_openat+0x893/0x2cb0 [ 535.042625][T17407] ? __pfx_path_openat+0x10/0x10 [ 535.042657][T17407] ? __lock_acquire+0xb8a/0x1c90 [ 535.042697][T17407] do_filp_open+0x20b/0x470 [ 535.042726][T17407] ? __pfx_do_filp_open+0x10/0x10 [ 535.042792][T17407] ? alloc_fd+0x471/0x7d0 [ 535.042832][T17407] do_sys_openat2+0x11b/0x1d0 [ 535.042870][T17407] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.042925][T17407] __x64_sys_openat+0x174/0x210 [ 535.042962][T17407] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.043015][T17407] do_syscall_64+0xcd/0xfa0 [ 535.043049][T17407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.043074][T17407] RIP: 0033:0x7f44f698f6c9 [ 535.043094][T17407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.043118][T17407] RSP: 002b:00007f44f7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.043144][T17407] RAX: ffffffffffffffda RBX: 00007f44f6be5fa0 RCX: 00007f44f698f6c9 [ 535.043161][T17407] RDX: 000000000000a140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 535.043177][T17407] RBP: 00007f44f6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.043193][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.043209][T17407] R13: 00007f44f6be6038 R14: 00007f44f6be5fa0 R15: 00007ffc8f9f3758 [ 535.043248][T17407] [ 535.373503][T17407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.818249][T17425] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4311'. [ 535.903333][T17429] FAULT_INJECTION: forcing a failure. [ 535.903333][T17429] name failslab, interval 1, probability 0, space 0, times 0 [ 535.918099][T17429] CPU: 1 UID: 0 PID: 17429 Comm: syz.8.4312 Tainted: G U syzkaller #0 PREEMPT(full) [ 535.918141][T17429] Tainted: [U]=USER [ 535.918150][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.918167][T17429] Call Trace: [ 535.918177][T17429] [ 535.918188][T17429] dump_stack_lvl+0x16c/0x1f0 [ 535.918224][T17429] should_fail_ex+0x512/0x640 [ 535.918263][T17429] ? __kmalloc_noprof+0xca/0x880 [ 535.918305][T17429] should_failslab+0xc2/0x120 [ 535.918336][T17429] __kmalloc_noprof+0xdd/0x880 [ 535.918374][T17429] ? argv_split+0x188/0x440 [ 535.918405][T17429] ? argv_split+0x188/0x440 [ 535.918430][T17429] argv_split+0x188/0x440 [ 535.918457][T17429] ? __pfx___trace_eprobe_create+0x10/0x10 [ 535.918488][T17429] trace_probe_create+0x7d/0x100 [ 535.918524][T17429] ? __pfx_trace_probe_create+0x10/0x10 [ 535.918568][T17429] create_dyn_event+0xee/0x1c0 [ 535.918600][T17429] trace_parse_run_command+0x1a9/0x400 [ 535.918642][T17429] ? __pfx_create_dyn_event+0x10/0x10 [ 535.918673][T17429] ? __pfx_dyn_event_write+0x10/0x10 [ 535.918698][T17429] vfs_write+0x2a0/0x11d0 [ 535.918730][T17429] ? __pfx___mutex_lock+0x10/0x10 [ 535.918762][T17429] ? __pfx_vfs_write+0x10/0x10 [ 535.918810][T17429] ? __fget_files+0x20e/0x3c0 [ 535.918850][T17429] ksys_write+0x12a/0x250 [ 535.918879][T17429] ? __pfx_ksys_write+0x10/0x10 [ 535.918920][T17429] do_syscall_64+0xcd/0xfa0 [ 535.918955][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.918980][T17429] RIP: 0033:0x7f347818f6c9 [ 535.918999][T17429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.919023][T17429] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 535.919049][T17429] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 535.919067][T17429] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000005 [ 535.919084][T17429] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.919101][T17429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.919114][T17429] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 535.919152][T17429] [ 536.674864][ T52] Bluetooth: hci9: command tx timeout [ 536.713132][T17447] netlink: 21 bytes leftover after parsing attributes in process `syz.9.4320'. [ 536.888719][T17451] netlink: 354 bytes leftover after parsing attributes in process `syz.9.4322'. [ 537.261056][T17457] netlink: 74 bytes leftover after parsing attributes in process `syz.8.4325'. [ 537.422920][T17464] FAULT_INJECTION: forcing a failure. [ 537.422920][T17464] name failslab, interval 1, probability 0, space 0, times 0 [ 537.437162][T17464] CPU: 0 UID: 0 PID: 17464 Comm: syz.8.4328 Tainted: G U syzkaller #0 PREEMPT(full) [ 537.437217][T17464] Tainted: [U]=USER [ 537.437227][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.437244][T17464] Call Trace: [ 537.437253][T17464] [ 537.437264][T17464] dump_stack_lvl+0x16c/0x1f0 [ 537.437303][T17464] should_fail_ex+0x512/0x640 [ 537.437340][T17464] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 537.437373][T17464] should_failslab+0xc2/0x120 [ 537.437408][T17464] kmem_cache_alloc_node_noprof+0x78/0x770 [ 537.437437][T17464] ? do_kmem_cache_create+0x25b/0x740 [ 537.437477][T17464] ? do_kmem_cache_create+0x25b/0x740 [ 537.437507][T17464] do_kmem_cache_create+0x25b/0x740 [ 537.437546][T17464] __kmem_cache_create_args+0x202/0x3c0 [ 537.437591][T17464] mon_text_open+0x333/0x510 [ 537.437623][T17464] ? __pfx_mon_text_open+0x10/0x10 [ 537.437656][T17464] ? __pfx_mon_text_ctor+0x10/0x10 [ 537.437686][T17464] ? __pfx_apparmor_file_open+0x10/0x10 [ 537.437722][T17464] ? lockdown_is_locked_down+0x3f/0x130 [ 537.437756][T17464] ? bpf_lsm_locked_down+0x9/0x10 [ 537.437794][T17464] ? __pfx_mon_text_open+0x10/0x10 [ 537.437822][T17464] full_proxy_open_regular+0x1b9/0x360 [ 537.437863][T17464] do_dentry_open+0x982/0x1530 [ 537.437894][T17464] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 537.437947][T17464] vfs_open+0x82/0x3f0 [ 537.437989][T17464] path_openat+0x1de4/0x2cb0 [ 537.438032][T17464] ? __pfx_path_openat+0x10/0x10 [ 537.438063][T17464] ? __lock_acquire+0xb8a/0x1c90 [ 537.438102][T17464] do_filp_open+0x20b/0x470 [ 537.438132][T17464] ? __pfx_do_filp_open+0x10/0x10 [ 537.438189][T17464] ? alloc_fd+0x471/0x7d0 [ 537.438227][T17464] do_sys_openat2+0x11b/0x1d0 [ 537.438264][T17464] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.438314][T17464] __x64_sys_openat+0x174/0x210 [ 537.438352][T17464] ? __pfx___x64_sys_openat+0x10/0x10 [ 537.438405][T17464] do_syscall_64+0xcd/0xfa0 [ 537.438440][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.438467][T17464] RIP: 0033:0x7f347818f6c9 [ 537.438490][T17464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.438516][T17464] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.438543][T17464] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 537.438561][T17464] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 537.438579][T17464] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.438596][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.438613][T17464] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 537.438652][T17464] [ 537.438768][T17464] __kmem_cache_create_args(mon_text_ffff88808693ac00) failed with error -22 [ 537.737053][T17464] CPU: 0 UID: 0 PID: 17464 Comm: syz.8.4328 Tainted: G U syzkaller #0 PREEMPT(full) [ 537.737094][T17464] Tainted: [U]=USER [ 537.737103][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.737118][T17464] Call Trace: [ 537.737127][T17464] [ 537.737137][T17464] dump_stack_lvl+0x16c/0x1f0 [ 537.737173][T17464] __kmem_cache_create_args+0x128/0x3c0 [ 537.737218][T17464] mon_text_open+0x333/0x510 [ 537.737249][T17464] ? __pfx_mon_text_open+0x10/0x10 [ 537.737282][T17464] ? __pfx_mon_text_ctor+0x10/0x10 [ 537.737311][T17464] ? __pfx_apparmor_file_open+0x10/0x10 [ 537.737346][T17464] ? lockdown_is_locked_down+0x3f/0x130 [ 537.737379][T17464] ? bpf_lsm_locked_down+0x9/0x10 [ 537.737416][T17464] ? __pfx_mon_text_open+0x10/0x10 [ 537.737442][T17464] full_proxy_open_regular+0x1b9/0x360 [ 537.737482][T17464] do_dentry_open+0x982/0x1530 [ 537.737513][T17464] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 537.737555][T17464] vfs_open+0x82/0x3f0 [ 537.737594][T17464] path_openat+0x1de4/0x2cb0 [ 537.737634][T17464] ? __pfx_path_openat+0x10/0x10 [ 537.737663][T17464] ? __lock_acquire+0xb8a/0x1c90 [ 537.737700][T17464] do_filp_open+0x20b/0x470 [ 537.737729][T17464] ? __pfx_do_filp_open+0x10/0x10 [ 537.737784][T17464] ? alloc_fd+0x471/0x7d0 [ 537.737820][T17464] do_sys_openat2+0x11b/0x1d0 [ 537.737853][T17464] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.737907][T17464] __x64_sys_openat+0x174/0x210 [ 537.737943][T17464] ? __pfx___x64_sys_openat+0x10/0x10 [ 537.737992][T17464] do_syscall_64+0xcd/0xfa0 [ 537.738024][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.738049][T17464] RIP: 0033:0x7f347818f6c9 [ 537.738068][T17464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.738092][T17464] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.738116][T17464] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 537.738133][T17464] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 537.738150][T17464] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.738166][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.738181][T17464] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 537.738218][T17464] [ 538.338417][T17474] FAULT_INJECTION: forcing a failure. [ 538.338417][T17474] name failslab, interval 1, probability 0, space 0, times 0 [ 538.362056][T17474] CPU: 1 UID: 0 PID: 17474 Comm: syz.8.4332 Tainted: G U syzkaller #0 PREEMPT(full) [ 538.362101][T17474] Tainted: [U]=USER [ 538.362111][T17474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.362129][T17474] Call Trace: [ 538.362138][T17474] [ 538.362149][T17474] dump_stack_lvl+0x16c/0x1f0 [ 538.362187][T17474] should_fail_ex+0x512/0x640 [ 538.362225][T17474] ? __kmalloc_noprof+0xca/0x880 [ 538.362269][T17474] should_failslab+0xc2/0x120 [ 538.362303][T17474] __kmalloc_noprof+0xdd/0x880 [ 538.362343][T17474] ? lsm_blob_alloc+0x68/0x90 [ 538.362382][T17474] ? lsm_blob_alloc+0x68/0x90 [ 538.362411][T17474] lsm_blob_alloc+0x68/0x90 [ 538.362444][T17474] security_sk_alloc+0x30/0x270 [ 538.362483][T17474] sk_prot_alloc+0x1c7/0x2a0 [ 538.362529][T17474] sk_alloc+0x36/0xc20 [ 538.362570][T17474] xsk_create+0x11b/0x770 [ 538.362614][T17474] __sock_create+0x338/0x8d0 [ 538.362655][T17474] __sys_socket+0x14d/0x260 [ 538.362690][T17474] ? __pfx___sys_socket+0x10/0x10 [ 538.362724][T17474] ? xfd_validate_state+0x61/0x180 [ 538.362757][T17474] ? __pfx___do_sys_close_range+0x10/0x10 [ 538.362795][T17474] __x64_sys_socket+0x72/0xb0 [ 538.362827][T17474] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.362858][T17474] do_syscall_64+0xcd/0xfa0 [ 538.362893][T17474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.362919][T17474] RIP: 0033:0x7f347818f6c9 [ 538.362940][T17474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.362966][T17474] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 538.362992][T17474] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 538.363010][T17474] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 538.363026][T17474] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.363042][T17474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.363058][T17474] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 538.363094][T17474] [ 538.744413][ T52] Bluetooth: hci9: command tx timeout [ 538.837509][T14750] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 538.866197][T14750] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 538.883092][T14750] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 538.898585][T14750] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 538.909719][T14750] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 539.471822][T17480] chnl_net:caif_netlink_parms(): no params data found [ 539.521610][ T52] Bluetooth: hci9: Malformed Event: 0x2f [ 539.745172][T17480] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.758858][T17480] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.766206][T17480] bridge_slave_0: entered allmulticast mode [ 539.774601][T17480] bridge_slave_0: entered promiscuous mode [ 539.785883][T17480] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.793368][T17480] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.800661][T17480] bridge_slave_1: entered allmulticast mode [ 539.808571][T17480] bridge_slave_1: entered promiscuous mode [ 539.874218][T17480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.892604][T17480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.982258][T17480] team0: Port device team_slave_0 added [ 539.991374][T17480] team0: Port device team_slave_1 added [ 540.120021][T17480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.129636][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.184673][T17480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.219455][T17480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.226660][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.276158][T17480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.393285][T17480] hsr_slave_0: entered promiscuous mode [ 540.419547][T17480] hsr_slave_1: entered promiscuous mode [ 540.433289][T17480] debugfs: 'hsr0' already exists in 'hsr' [ 540.440256][T17480] Cannot create hsr debugfs directory [ 540.813427][ T52] Bluetooth: hci9: command tx timeout [ 540.972859][ T52] Bluetooth: hci10: command tx timeout [ 540.995024][T17514] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4343'. [ 541.071558][T17480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.204511][T17517] netlink: 'syz.8.4345': attribute type 1 has an invalid length. [ 541.233732][T17517] netlink: 318 bytes leftover after parsing attributes in process `syz.8.4345'. [ 541.336502][T17480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.477140][T17480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.588997][T17480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.136425][T17480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 542.184377][T17480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 542.221488][T17480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 542.253593][T17480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 542.634346][T17480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.659477][T17480] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.678687][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.685909][T16831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.721131][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.728360][T16831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.042009][ T52] Bluetooth: hci10: command tx timeout [ 543.172263][T17480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.264289][T17480] veth0_vlan: entered promiscuous mode [ 543.317825][T17545] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 543.321520][T17480] veth1_vlan: entered promiscuous mode [ 543.422527][T17480] veth0_macvtap: entered promiscuous mode [ 543.443245][T17480] veth1_macvtap: entered promiscuous mode [ 543.494300][T17480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.532057][T17480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.556914][T16831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.585934][T16831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.598657][T16831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.632122][T16831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.755447][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.772300][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.820889][T15913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.834090][T15913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.112987][ T52] Bluetooth: hci10: command tx timeout [ 545.712290][T17602] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4372'. [ 545.943106][T17610] netlink: 350 bytes leftover after parsing attributes in process `syz.3.4375'. [ 546.541053][T17635] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4383'. [ 547.181408][ T52] Bluetooth: hci10: command tx timeout [ 547.691990][T17672] FAULT_INJECTION: forcing a failure. [ 547.691990][T17672] name failslab, interval 1, probability 0, space 0, times 0 [ 547.738408][T17672] CPU: 0 UID: 0 PID: 17672 Comm: syz.8.4395 Tainted: G U syzkaller #0 PREEMPT(full) [ 547.738455][T17672] Tainted: [U]=USER [ 547.738465][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.738483][T17672] Call Trace: [ 547.738493][T17672] [ 547.738504][T17672] dump_stack_lvl+0x16c/0x1f0 [ 547.738544][T17672] should_fail_ex+0x512/0x640 [ 547.738583][T17672] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 547.738616][T17672] should_failslab+0xc2/0x120 [ 547.738651][T17672] kmem_cache_alloc_noprof+0x75/0x6e0 [ 547.738677][T17672] ? acpi_ut_create_control_state+0x6a/0x100 [ 547.738723][T17672] ? acpi_ut_create_control_state+0x6a/0x100 [ 547.738760][T17672] acpi_ut_create_control_state+0x6a/0x100 [ 547.738798][T17672] acpi_ds_exec_begin_control_op+0x180/0x520 [ 547.738830][T17672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.738872][T17672] acpi_ds_exec_begin_op+0x209/0x9c0 [ 547.738913][T17672] acpi_ps_create_op+0x7cb/0xd30 [ 547.738954][T17672] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 547.738992][T17672] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 547.739017][T17672] ? acpi_ut_value_exit+0xff/0x180 [ 547.739050][T17672] acpi_ps_parse_loop+0xf06/0x2470 [ 547.739092][T17672] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 547.739135][T17672] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 547.739174][T17672] ? acpi_ut_status_exit+0x103/0x1c0 [ 547.739203][T17672] ? acpi_ds_call_control_method+0x435/0xab0 [ 547.739248][T17672] acpi_ps_parse_aml+0x817/0x1170 [ 547.739294][T17672] acpi_ps_execute_method+0x5c4/0xe90 [ 547.739330][T17672] acpi_ns_evaluate+0x98c/0x16d0 [ 547.739369][T17672] acpi_evaluate_object+0x4ca/0xdf0 [ 547.739413][T17672] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 547.739449][T17672] ? __mutex_trylock_common+0xe9/0x250 [ 547.739492][T17672] acpi_evaluate_integer+0xdd/0x200 [ 547.739522][T17672] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 547.739568][T17672] ? __pfx_status_show+0x10/0x10 [ 547.739600][T17672] status_show+0xa0/0x120 [ 547.739633][T17672] ? __pfx_status_show+0x10/0x10 [ 547.739674][T17672] dev_attr_show+0x56/0xe0 [ 547.739714][T17672] ? __pfx_dev_attr_show+0x10/0x10 [ 547.739747][T17672] sysfs_kf_seq_show+0x216/0x3e0 [ 547.739785][T17672] seq_read_iter+0x50e/0x12d0 [ 547.739841][T17672] kernfs_fop_read_iter+0x46c/0x610 [ 547.739868][T17672] ? rw_verify_area+0xcf/0x6c0 [ 547.739898][T17672] vfs_read+0x8bf/0xcf0 [ 547.739932][T17672] ? __pfx___mutex_lock+0x10/0x10 [ 547.739967][T17672] ? __pfx_vfs_read+0x10/0x10 [ 547.740023][T17672] ksys_read+0x12a/0x250 [ 547.740053][T17672] ? __pfx_ksys_read+0x10/0x10 [ 547.740095][T17672] do_syscall_64+0xcd/0xfa0 [ 547.740137][T17672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.740166][T17672] RIP: 0033:0x7f347818f6c9 [ 547.740188][T17672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.740216][T17672] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.740242][T17672] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 547.740261][T17672] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 547.740279][T17672] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 547.740296][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.740313][T17672] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 547.740354][T17672] [ 547.740425][T17672] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 548.123248][T17672] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 548.528454][T17682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4399'. [ 548.541019][T17682] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 548.550021][T17682] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 548.708425][T17688] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4402'. [ 549.608542][T17703] FAULT_INJECTION: forcing a failure. [ 549.608542][T17703] name failslab, interval 1, probability 0, space 0, times 0 [ 549.622384][T17703] CPU: 1 UID: 0 PID: 17703 Comm: syz.3.4407 Tainted: G U syzkaller #0 PREEMPT(full) [ 549.622427][T17703] Tainted: [U]=USER [ 549.622438][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.622455][T17703] Call Trace: [ 549.622465][T17703] [ 549.622476][T17703] dump_stack_lvl+0x16c/0x1f0 [ 549.622516][T17703] should_fail_ex+0x512/0x640 [ 549.622554][T17703] ? __kmalloc_cache_noprof+0x5f/0x780 [ 549.622584][T17703] should_failslab+0xc2/0x120 [ 549.622619][T17703] __kmalloc_cache_noprof+0x72/0x780 [ 549.622644][T17703] ? cuse_channel_open+0x4f/0x7f0 [ 549.622696][T17703] ? __pfx_cuse_channel_open+0x10/0x10 [ 549.622727][T17703] ? cuse_channel_open+0x4f/0x7f0 [ 549.622757][T17703] cuse_channel_open+0x4f/0x7f0 [ 549.622789][T17703] ? __pfx_cuse_channel_open+0x10/0x10 [ 549.622822][T17703] misc_open+0x26d/0x450 [ 549.622860][T17703] ? __pfx_misc_open+0x10/0x10 [ 549.622896][T17703] chrdev_open+0x234/0x6a0 [ 549.622927][T17703] ? __pfx_apparmor_file_open+0x10/0x10 [ 549.622965][T17703] ? __pfx_chrdev_open+0x10/0x10 [ 549.622998][T17703] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 549.623035][T17703] do_dentry_open+0x982/0x1530 [ 549.623067][T17703] ? __pfx_chrdev_open+0x10/0x10 [ 549.623104][T17703] vfs_open+0x82/0x3f0 [ 549.623145][T17703] path_openat+0x1de4/0x2cb0 [ 549.623186][T17703] ? __pfx_path_openat+0x10/0x10 [ 549.623218][T17703] ? __lock_acquire+0xb8a/0x1c90 [ 549.623257][T17703] do_filp_open+0x20b/0x470 [ 549.623287][T17703] ? __pfx_do_filp_open+0x10/0x10 [ 549.623342][T17703] ? alloc_fd+0x471/0x7d0 [ 549.623386][T17703] do_sys_openat2+0x11b/0x1d0 [ 549.623425][T17703] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.623479][T17703] __x64_sys_openat+0x174/0x210 [ 549.623518][T17703] ? __pfx___x64_sys_openat+0x10/0x10 [ 549.623571][T17703] do_syscall_64+0xcd/0xfa0 [ 549.623606][T17703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.623635][T17703] RIP: 0033:0x7fe57f58f6c9 [ 549.623669][T17703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.623696][T17703] RSP: 002b:00007fe5803ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 549.623721][T17703] RAX: ffffffffffffffda RBX: 00007fe57f7e5fa0 RCX: 00007fe57f58f6c9 [ 549.623737][T17703] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 549.623752][T17703] RBP: 00007fe57f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.623767][T17703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.623782][T17703] R13: 00007fe57f7e6038 R14: 00007fe57f7e5fa0 R15: 00007ffff3b56fe8 [ 549.623820][T17703] [ 550.211336][T17709] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4410'. [ 550.414475][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4411'. [ 550.425078][T17714] FAULT_INJECTION: forcing a failure. [ 550.425078][T17714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.453196][T17714] CPU: 1 UID: 0 PID: 17714 Comm: syz.3.4412 Tainted: G U syzkaller #0 PREEMPT(full) [ 550.453239][T17714] Tainted: [U]=USER [ 550.453250][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.453265][T17714] Call Trace: [ 550.453274][T17714] [ 550.453284][T17714] dump_stack_lvl+0x16c/0x1f0 [ 550.453320][T17714] should_fail_ex+0x512/0x640 [ 550.453360][T17714] core_sys_select+0x9cf/0xc20 [ 550.453392][T17714] ? __pfx_core_sys_select+0x10/0x10 [ 550.453421][T17714] ? futex_wait+0x120/0x380 [ 550.453464][T17714] ? __pfx_do_futex+0x10/0x10 [ 550.453503][T17714] kern_select+0x15d/0x1e0 [ 550.453525][T17714] ? __pfx_kern_select+0x10/0x10 [ 550.453552][T17714] ? xfd_validate_state+0x61/0x180 [ 550.453582][T17714] ? __pfx_ksys_write+0x10/0x10 [ 550.453611][T17714] __x64_sys_select+0xbd/0x160 [ 550.453632][T17714] ? do_syscall_64+0x91/0xfa0 [ 550.453658][T17714] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.453685][T17714] do_syscall_64+0xcd/0xfa0 [ 550.453713][T17714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.453736][T17714] RIP: 0033:0x7fe57f58f6c9 [ 550.453754][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.453776][T17714] RSP: 002b:00007fe5803ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 550.453797][T17714] RAX: ffffffffffffffda RBX: 00007fe57f7e5fa0 RCX: 00007fe57f58f6c9 [ 550.453812][T17714] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 550.453826][T17714] RBP: 00007fe57f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 550.453840][T17714] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 550.453854][T17714] R13: 00007fe57f7e6038 R14: 00007fe57f7e5fa0 R15: 00007ffff3b56fe8 [ 550.453884][T17714] [ 550.674238][T17711] netlink: 13 bytes leftover after parsing attributes in process `syz.9.4411'. [ 550.801931][T14750] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 550.819570][T14750] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 550.828073][T14750] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 550.836428][T14750] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 550.845607][T14750] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 550.961853][T17723] netlink: 'syz.3.4414': attribute type 27 has an invalid length. [ 551.020244][T17723] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4414'. [ 551.446459][T17716] chnl_net:caif_netlink_parms(): no params data found [ 551.709690][T17716] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.744976][T17716] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.837606][T17716] bridge_slave_0: entered allmulticast mode [ 551.868413][T17716] bridge_slave_0: entered promiscuous mode [ 551.902895][T17716] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.924428][T17716] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.950039][T17716] bridge_slave_1: entered allmulticast mode [ 551.974277][T17716] bridge_slave_1: entered promiscuous mode [ 552.071641][T17716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.109367][T17716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.331657][T17716] team0: Port device team_slave_0 added [ 552.353658][T17716] team0: Port device team_slave_1 added [ 552.468503][T17716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.476764][T17716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.672669][T17716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.711605][T17716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.719931][T17716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.750621][T17716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.911411][ T52] Bluetooth: hci11: command tx timeout [ 553.423297][T17716] hsr_slave_0: entered promiscuous mode [ 553.460528][T17716] hsr_slave_1: entered promiscuous mode [ 553.470386][T17716] debugfs: 'hsr0' already exists in 'hsr' [ 553.476161][T17716] Cannot create hsr debugfs directory [ 554.327637][T17716] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.448173][T17716] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.531662][T17716] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.640323][T17716] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.980924][ T52] Bluetooth: hci11: command tx timeout [ 555.004318][T17781] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4432'. [ 555.055948][T17716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 555.084050][T17716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 555.119966][T17716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 555.144749][T17716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.359433][T17794] FAULT_INJECTION: forcing a failure. [ 555.359433][T17794] name failslab, interval 1, probability 0, space 0, times 0 [ 555.399080][T17794] CPU: 1 UID: 0 PID: 17794 Comm: syz.3.4435 Tainted: G U syzkaller #0 PREEMPT(full) [ 555.399124][T17794] Tainted: [U]=USER [ 555.399133][T17794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.399149][T17794] Call Trace: [ 555.399157][T17794] [ 555.399167][T17794] dump_stack_lvl+0x16c/0x1f0 [ 555.399229][T17794] should_fail_ex+0x512/0x640 [ 555.399268][T17794] ? fs_reclaim_acquire+0xae/0x150 [ 555.399305][T17794] should_failslab+0xc2/0x120 [ 555.399340][T17794] __kmalloc_noprof+0xdd/0x880 [ 555.399377][T17794] ? kfree+0x252/0x6d0 [ 555.399397][T17794] ? look_up_lock_class+0x6b/0x150 [ 555.399426][T17794] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 555.399463][T17794] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 555.399492][T17794] tomoyo_realpath_from_path+0xc2/0x6e0 [ 555.399526][T17794] ? tomoyo_profile+0x47/0x60 [ 555.399564][T17794] tomoyo_path_perm+0x274/0x460 [ 555.399586][T17794] ? tomoyo_path_perm+0x260/0x460 [ 555.399613][T17794] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 555.399659][T17794] ? find_held_lock+0x2b/0x80 [ 555.399692][T17794] ? do_raw_spin_unlock+0x172/0x230 [ 555.399738][T17794] ? __pfx_current_check_access_path+0x10/0x10 [ 555.399770][T17794] ? simple_lookup+0x105/0x1d0 [ 555.399797][T17794] ? lookup_one_qstr_excl+0xb3/0x250 [ 555.399838][T17794] tomoyo_path_symlink+0x97/0xe0 [ 555.399871][T17794] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 555.399899][T17794] ? find_held_lock+0x2b/0x80 [ 555.399923][T17794] ? __might_fault+0xe3/0x190 [ 555.399954][T17794] security_path_symlink+0x152/0x2e0 [ 555.399995][T17794] do_symlinkat+0x10d/0x310 [ 555.400027][T17794] ? __pfx_do_symlinkat+0x10/0x10 [ 555.400058][T17794] ? getname_flags.part.0+0x1c5/0x550 [ 555.400102][T17794] __x64_sys_symlink+0x75/0x90 [ 555.400135][T17794] do_syscall_64+0xcd/0xfa0 [ 555.400169][T17794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.400197][T17794] RIP: 0033:0x7fe57f58f6c9 [ 555.400229][T17794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.400258][T17794] RSP: 002b:00007fe5803ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 555.400285][T17794] RAX: ffffffffffffffda RBX: 00007fe57f7e5fa0 RCX: 00007fe57f58f6c9 [ 555.400303][T17794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.400319][T17794] RBP: 00007fe57f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 555.400336][T17794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.400351][T17794] R13: 00007fe57f7e6038 R14: 00007fe57f7e5fa0 R15: 00007ffff3b56fe8 [ 555.400389][T17794] [ 555.400401][T17794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.732166][T17716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.758775][T17716] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.797410][T15913] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.804609][T15913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.838812][T15913] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.846062][T15913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.545524][T17819] ima: policy update failed [ 556.546748][T17716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.557078][ T30] audit: type=1807 audit(4294968542.972:13): UNKNOWN=1000 res=0 [ 556.578466][ T30] audit: type=1802 audit(4294968542.972:14): pid=17820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.4446" res=0 errno=0 [ 556.637639][ T30] audit: type=1802 audit(4294968542.992:15): pid=17819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4446" res=0 errno=0 [ 556.691238][T17716] veth0_vlan: entered promiscuous mode [ 556.708401][T17716] veth1_vlan: entered promiscuous mode [ 556.757714][T17716] veth0_macvtap: entered promiscuous mode [ 556.791788][T17716] veth1_macvtap: entered promiscuous mode [ 556.845005][T17716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.881098][T17716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.931359][ T3551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.950499][ T3551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.991055][ T3551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.011388][ T3551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.064604][ T52] Bluetooth: hci11: command tx timeout [ 557.153700][T15913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.173896][T15913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.220870][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.235790][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.682300][T17869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 558.695163][T17869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 558.720543][T17869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 558.736842][T17869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 558.760757][T17869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 558.780161][T17869] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 558.787670][T17869] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 558.801840][T17869] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 558.808113][T17869] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 558.819930][T17869] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 558.826026][T17869] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 558.853257][T17869] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 558.866067][T17869] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 558.880058][T17869] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 558.887698][T17869] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 558.904812][T17869] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 558.921412][T17869] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 558.932345][T17869] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 559.353455][T17889] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4473'. [ 559.641551][T17897] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4476'. [ 559.884514][T17900] FAULT_INJECTION: forcing a failure. [ 559.884514][T17900] name failslab, interval 1, probability 0, space 0, times 0 [ 559.914184][T17900] CPU: 1 UID: 0 PID: 17900 Comm: syz.3.4478 Tainted: G U syzkaller #0 PREEMPT(full) [ 559.914226][T17900] Tainted: [U]=USER [ 559.914237][T17900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.914254][T17900] Call Trace: [ 559.914264][T17900] [ 559.914276][T17900] dump_stack_lvl+0x16c/0x1f0 [ 559.914314][T17900] should_fail_ex+0x512/0x640 [ 559.914351][T17900] ? __kmalloc_cache_noprof+0x5f/0x780 [ 559.914380][T17900] should_failslab+0xc2/0x120 [ 559.914414][T17900] __kmalloc_cache_noprof+0x72/0x780 [ 559.914437][T17900] ? trace_kmalloc+0x2b/0xd0 [ 559.914463][T17900] ? snd_virmidi_output_open+0xc4/0x670 [ 559.914497][T17900] ? snd_virmidi_output_open+0xc4/0x670 [ 559.914524][T17900] snd_virmidi_output_open+0xc4/0x670 [ 559.914556][T17900] open_substream+0x480/0x990 [ 559.914593][T17900] rawmidi_open_priv+0x543/0x6e0 [ 559.914631][T17900] snd_rawmidi_open+0x4cb/0xbf0 [ 559.914670][T17900] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 559.914706][T17900] ? __pfx_default_wake_function+0x10/0x10 [ 559.914733][T17900] ? kobject_get_unless_zero+0x156/0x1e0 [ 559.914766][T17900] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 559.914799][T17900] snd_open+0x22d/0x4c0 [ 559.914826][T17900] ? __pfx_snd_open+0x10/0x10 [ 559.914852][T17900] chrdev_open+0x234/0x6a0 [ 559.914879][T17900] ? __pfx_apparmor_file_open+0x10/0x10 [ 559.914912][T17900] ? __pfx_chrdev_open+0x10/0x10 [ 559.914940][T17900] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 559.914971][T17900] do_dentry_open+0x982/0x1530 [ 559.914998][T17900] ? __pfx_chrdev_open+0x10/0x10 [ 559.915030][T17900] vfs_open+0x82/0x3f0 [ 559.915065][T17900] path_openat+0x1de4/0x2cb0 [ 559.915099][T17900] ? __pfx_path_openat+0x10/0x10 [ 559.915126][T17900] ? __lock_acquire+0xb8a/0x1c90 [ 559.915167][T17900] do_filp_open+0x20b/0x470 [ 559.915194][T17900] ? __pfx_do_filp_open+0x10/0x10 [ 559.915243][T17900] ? alloc_fd+0x471/0x7d0 [ 559.915275][T17900] do_sys_openat2+0x11b/0x1d0 [ 559.915308][T17900] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.915351][T17900] __x64_sys_openat+0x174/0x210 [ 559.915384][T17900] ? __pfx___x64_sys_openat+0x10/0x10 [ 559.915429][T17900] do_syscall_64+0xcd/0xfa0 [ 559.915458][T17900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.915481][T17900] RIP: 0033:0x7fe57f58f6c9 [ 559.915499][T17900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.915521][T17900] RSP: 002b:00007fe5803ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 559.915543][T17900] RAX: ffffffffffffffda RBX: 00007fe57f7e5fa0 RCX: 00007fe57f58f6c9 [ 559.915558][T17900] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 559.915572][T17900] RBP: 00007fe57f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 559.915586][T17900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.915599][T17900] R13: 00007fe57f7e6038 R14: 00007fe57f7e5fa0 R15: 00007ffff3b56fe8 [ 559.915632][T17900] [ 560.314174][T17905] block nbd7: not configured, cannot reconfigure [ 560.716136][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.749600][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.756846][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 560.765261][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.790105][T14750] Bluetooth: hci6: command 0x0c1a tx timeout [ 560.800437][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 560.800699][T16750] Bluetooth: hci4: command 0x0c1a tx timeout [ 560.806567][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 560.819278][T14750] Bluetooth: hci1: command 0x0c1a tx timeout [ 560.869664][T17926] Bluetooth: hci10: command 0x0c1a tx timeout [ 560.876489][T17926] Bluetooth: hci9: command 0x0c1a tx timeout [ 560.883112][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout [ 560.883189][ T52] Bluetooth: hci7: command 0x0c1a tx timeout [ 560.949245][ T52] Bluetooth: hci11: command 0x0c1a tx timeout [ 561.329755][ T3551] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.372363][ T3551] netdevsim netdevsim15 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.394510][T17937] zswap: compressor - not available [ 561.430310][ T3551] netdevsim netdevsim15 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.492131][T16831] netdevsim netdevsim15 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.621948][ T50] netdevsim netdevsim15 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.068965][T17956] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4495'. [ 562.079249][T17956] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4495'. [ 562.137555][T17958] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4496'. [ 562.189017][T17960] device-mapper: ioctl: name not supplied when creating device [ 562.293516][T17962] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4498'. [ 562.416798][T17967] netlink: 'syz.2.4500': attribute type 27 has an invalid length. [ 562.425330][T17967] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4500'. [ 562.904154][T17978] erspan0: refused to change device tx_queue_len [ 562.938543][ T52] Bluetooth: hci9: command 0x0c1a tx timeout [ 562.944611][ T52] Bluetooth: hci10: command 0x0c1a tx timeout [ 563.018059][ T52] Bluetooth: hci11: command 0x0c1a tx timeout [ 563.104991][T17989] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4510'. [ 563.122780][T17987] FAULT_INJECTION: forcing a failure. [ 563.122780][T17987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.143671][T17987] CPU: 0 UID: 0 PID: 17987 Comm: syz.8.4509 Tainted: G U syzkaller #0 PREEMPT(full) [ 563.143712][T17987] Tainted: [U]=USER [ 563.143722][T17987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.143737][T17987] Call Trace: [ 563.143747][T17987] [ 563.143757][T17987] dump_stack_lvl+0x16c/0x1f0 [ 563.143793][T17987] should_fail_ex+0x512/0x640 [ 563.143843][T17987] _copy_to_user+0x32/0xd0 [ 563.143889][T17987] tomoyo_flush+0x161/0x520 [ 563.143926][T17987] tomoyo_set_string+0xaf/0xe0 [ 563.143957][T17987] tomoyo_print_name_union+0x22/0x150 [ 563.143991][T17987] tomoyo_print_entry+0x1703/0x2710 [ 563.144032][T17987] ? find_held_lock+0x2b/0x80 [ 563.144060][T17987] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 563.144090][T17987] ? __might_fault+0xe3/0x190 [ 563.144113][T17987] ? __might_fault+0x13b/0x190 [ 563.144148][T17987] ? _copy_to_user+0x48/0xd0 [ 563.144195][T17987] tomoyo_read_domain2+0xa3/0x380 [ 563.144234][T17987] tomoyo_read_domain+0x3e1/0x9e0 [ 563.144278][T17987] tomoyo_read_control+0x29c/0x540 [ 563.144316][T17987] ? __pfx_tomoyo_read+0x10/0x10 [ 563.144348][T17987] vfs_read+0x1e4/0xcf0 [ 563.144382][T17987] ? __pfx___mutex_lock+0x10/0x10 [ 563.144416][T17987] ? __pfx_vfs_read+0x10/0x10 [ 563.144455][T17987] ? __fget_files+0x20e/0x3c0 [ 563.144493][T17987] ksys_read+0x12a/0x250 [ 563.144521][T17987] ? __pfx_ksys_read+0x10/0x10 [ 563.144561][T17987] do_syscall_64+0xcd/0xfa0 [ 563.144592][T17987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.144616][T17987] RIP: 0033:0x7f347818f6c9 [ 563.144639][T17987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.144665][T17987] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.144690][T17987] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 563.144710][T17987] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 563.144725][T17987] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 563.144741][T17987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.144757][T17987] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 563.144796][T17987] [ 563.793136][T18005] netlink: 334 bytes leftover after parsing attributes in process `syz.9.4517'. [ 564.014595][T18007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4516'. [ 564.328718][T18023] FAULT_INJECTION: forcing a failure. [ 564.328718][T18023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.360253][T18023] CPU: 1 UID: 0 PID: 18023 Comm: syz.3.4523 Tainted: G U syzkaller #0 PREEMPT(full) [ 564.360300][T18023] Tainted: [U]=USER [ 564.360309][T18023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.360325][T18023] Call Trace: [ 564.360334][T18023] [ 564.360344][T18023] dump_stack_lvl+0x16c/0x1f0 [ 564.360381][T18023] should_fail_ex+0x512/0x640 [ 564.360421][T18023] _copy_to_user+0x32/0xd0 [ 564.360459][T18023] tomoyo_flush+0x161/0x520 [ 564.360497][T18023] tomoyo_set_string+0xaf/0xe0 [ 564.360528][T18023] tomoyo_print_entry+0x1661/0x2710 [ 564.360566][T18023] ? find_held_lock+0x2b/0x80 [ 564.360592][T18023] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 564.360621][T18023] ? __might_fault+0xe3/0x190 [ 564.360645][T18023] ? __might_fault+0x13b/0x190 [ 564.360679][T18023] ? _copy_to_user+0x48/0xd0 [ 564.360736][T18023] tomoyo_read_domain2+0xa3/0x380 [ 564.360770][T18023] tomoyo_read_domain+0x3e1/0x9e0 [ 564.360809][T18023] tomoyo_read_control+0x29c/0x540 [ 564.360846][T18023] ? __pfx_tomoyo_read+0x10/0x10 [ 564.360877][T18023] vfs_read+0x1e4/0xcf0 [ 564.360912][T18023] ? __pfx___mutex_lock+0x10/0x10 [ 564.360945][T18023] ? __pfx_vfs_read+0x10/0x10 [ 564.360984][T18023] ? __fget_files+0x20e/0x3c0 [ 564.361022][T18023] ksys_read+0x12a/0x250 [ 564.361048][T18023] ? __pfx_ksys_read+0x10/0x10 [ 564.361084][T18023] do_syscall_64+0xcd/0xfa0 [ 564.361116][T18023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.361142][T18023] RIP: 0033:0x7fe57f58f6c9 [ 564.361162][T18023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.361188][T18023] RSP: 002b:00007fe5803ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.361212][T18023] RAX: ffffffffffffffda RBX: 00007fe57f7e5fa0 RCX: 00007fe57f58f6c9 [ 564.361230][T18023] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 564.361246][T18023] RBP: 00007fe57f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.361263][T18023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.361278][T18023] R13: 00007fe57f7e6038 R14: 00007fe57f7e5fa0 R15: 00007ffff3b56fe8 [ 564.361318][T18023] [ 564.577512][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.993160][T18029] erspan0: refused to change device tx_queue_len [ 565.008014][ T52] Bluetooth: hci10: command 0x0c1a tx timeout [ 565.014161][ T52] Bluetooth: hci9: command 0x0c1a tx timeout [ 565.087368][ T52] Bluetooth: hci11: command 0x0c1a tx timeout [ 565.449521][T18043] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4530'. [ 565.943403][T18048] sctp: [Deprecated]: syz.2.4532 (pid 18048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.943403][T18048] Use struct sctp_sack_info instead [ 567.631777][T18076] ERROR: Out of memory at tomoyo_memory_ok. [ 567.665910][T18076] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/53/file0' not defined. [ 568.137804][T18084] FAULT_INJECTION: forcing a failure. [ 568.137804][T18084] name failslab, interval 1, probability 0, space 0, times 0 [ 568.181055][T18084] CPU: 0 UID: 0 PID: 18084 Comm: syz.8.4545 Tainted: G U syzkaller #0 PREEMPT(full) [ 568.181100][T18084] Tainted: [U]=USER [ 568.181109][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.181127][T18084] Call Trace: [ 568.181136][T18084] [ 568.181147][T18084] dump_stack_lvl+0x16c/0x1f0 [ 568.181186][T18084] should_fail_ex+0x512/0x640 [ 568.181227][T18084] ? fs_reclaim_acquire+0xae/0x150 [ 568.181264][T18084] should_failslab+0xc2/0x120 [ 568.181297][T18084] kmem_cache_alloc_noprof+0x75/0x6e0 [ 568.181325][T18084] ? __kernfs_new_node+0xd2/0x8e0 [ 568.181364][T18084] ? __kernfs_new_node+0xd2/0x8e0 [ 568.181400][T18084] __kernfs_new_node+0xd2/0x8e0 [ 568.181436][T18084] ? __pfx___kernfs_new_node+0x10/0x10 [ 568.181480][T18084] ? find_held_lock+0x2b/0x80 [ 568.181507][T18084] ? kernfs_root+0xee/0x2a0 [ 568.181543][T18084] kernfs_new_node+0x13c/0x1e0 [ 568.181584][T18084] __kernfs_create_file+0x53/0x350 [ 568.181616][T18084] sysfs_add_file_mode_ns+0x207/0x3c0 [ 568.181658][T18084] internal_create_group+0x578/0xf30 [ 568.181700][T18084] ? __pfx_internal_create_group+0x10/0x10 [ 568.181741][T18084] ? kernfs_create_link+0x1bd/0x240 [ 568.181774][T18084] internal_create_groups+0x9d/0x150 [ 568.181812][T18084] device_add+0x731/0x1aa0 [ 568.181857][T18084] ? __pfx_device_add+0x10/0x10 [ 568.181893][T18084] ? __pfx___might_resched+0x10/0x10 [ 568.181920][T18084] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.181965][T18084] __add_disk+0x457/0xf00 [ 568.182009][T18084] add_disk_fwnode+0x13f/0x5d0 [ 568.182047][T18084] loop_add+0x903/0xb70 [ 568.182077][T18084] ? __pfx_loop_add+0x10/0x10 [ 568.182130][T18084] ? find_held_lock+0x2b/0x80 [ 568.182162][T18084] loop_control_ioctl+0x13e/0x630 [ 568.182192][T18084] ? __pfx_loop_control_ioctl+0x10/0x10 [ 568.182227][T18084] ? __pfx_loop_control_ioctl+0x10/0x10 [ 568.182258][T18084] __x64_sys_ioctl+0x18e/0x210 [ 568.182300][T18084] do_syscall_64+0xcd/0xfa0 [ 568.182335][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.182362][T18084] RIP: 0033:0x7f347818f6c9 [ 568.182384][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.182418][T18084] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.182445][T18084] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 568.182464][T18084] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 568.182482][T18084] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 568.182498][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.182515][T18084] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 568.182553][T18084] [ 569.102753][T18095] FAULT_INJECTION: forcing a failure. [ 569.102753][T18095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.130949][T18095] CPU: 0 UID: 0 PID: 18095 Comm: syz.8.4550 Tainted: G U syzkaller #0 PREEMPT(full) [ 569.130991][T18095] Tainted: [U]=USER [ 569.131001][T18095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.131017][T18095] Call Trace: [ 569.131027][T18095] [ 569.131038][T18095] dump_stack_lvl+0x16c/0x1f0 [ 569.131074][T18095] should_fail_ex+0x512/0x640 [ 569.131120][T18095] should_fail_alloc_page+0xe7/0x130 [ 569.131158][T18095] prepare_alloc_pages+0x3c2/0x610 [ 569.131194][T18095] ? rcu_is_watching+0x12/0xc0 [ 569.131225][T18095] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 569.131255][T18095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 569.131287][T18095] ? is_bpf_text_address+0x94/0x1a0 [ 569.131333][T18095] ? kernel_text_address+0x8d/0x100 [ 569.131361][T18095] ? __kernel_text_address+0xd/0x40 [ 569.131385][T18095] ? unwind_get_return_address+0x59/0xa0 [ 569.131414][T18095] ? arch_stack_walk+0xa6/0x100 [ 569.131444][T18095] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.131487][T18095] ? stack_depot_save_flags+0x29/0x9c0 [ 569.131531][T18095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 569.131575][T18095] ? policy_nodemask+0xea/0x4e0 [ 569.131611][T18095] alloc_pages_mpol+0x1fb/0x550 [ 569.131648][T18095] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 569.131692][T18095] alloc_pages_noprof+0x131/0x390 [ 569.131727][T18095] kimage_alloc_pages+0x74/0x350 [ 569.131759][T18095] kimage_alloc_control_pages+0x153/0xa00 [ 569.131796][T18095] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 569.131836][T18095] do_kexec_load+0x478/0x8a0 [ 569.131867][T18095] ? __pfx_do_kexec_load+0x10/0x10 [ 569.131899][T18095] ? _copy_from_user+0x59/0xd0 [ 569.131946][T18095] __x64_sys_kexec_load+0x1bf/0x230 [ 569.131979][T18095] do_syscall_64+0xcd/0xfa0 [ 569.132013][T18095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.132039][T18095] RIP: 0033:0x7f347818f6c9 [ 569.132060][T18095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.132087][T18095] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 569.132110][T18095] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 569.132127][T18095] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000007 [ 569.132142][T18095] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.132157][T18095] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 569.132171][T18095] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 569.132213][T18095] [ 569.133416][T18095] kexec: Could not allocate control_code_buffer [ 569.411569][T18105] erspan0: refused to change device tx_queue_len [ 569.734000][T18116] FAULT_INJECTION: forcing a failure. [ 569.734000][T18116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.763609][T18116] CPU: 1 UID: 0 PID: 18116 Comm: syz.8.4558 Tainted: G U syzkaller #0 PREEMPT(full) [ 569.763663][T18116] Tainted: [U]=USER [ 569.763673][T18116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.763690][T18116] Call Trace: [ 569.763699][T18116] [ 569.763711][T18116] dump_stack_lvl+0x16c/0x1f0 [ 569.763749][T18116] should_fail_ex+0x512/0x640 [ 569.763792][T18116] _copy_from_user+0x2e/0xd0 [ 569.763833][T18116] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 569.763884][T18116] snd_rawmidi_write+0x26e/0xc10 [ 569.763932][T18116] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 569.763971][T18116] ? __pfx_default_wake_function+0x10/0x10 [ 569.764000][T18116] ? bpf_lsm_file_permission+0x9/0x10 [ 569.764031][T18116] ? security_file_permission+0x71/0x210 [ 569.764059][T18116] ? rw_verify_area+0xcf/0x6c0 [ 569.764087][T18116] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 569.764123][T18116] vfs_write+0x2a0/0x11d0 [ 569.764159][T18116] ? __pfx_vfs_write+0x10/0x10 [ 569.764185][T18116] ? find_held_lock+0x2b/0x80 [ 569.764213][T18116] ? __fget_files+0x204/0x3c0 [ 569.764244][T18116] ? __fget_files+0x20e/0x3c0 [ 569.764281][T18116] ksys_write+0x1f8/0x250 [ 569.764316][T18116] ? __pfx_ksys_write+0x10/0x10 [ 569.764357][T18116] do_syscall_64+0xcd/0xfa0 [ 569.764392][T18116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.764419][T18116] RIP: 0033:0x7f347818f6c9 [ 569.764441][T18116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.764466][T18116] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.764492][T18116] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 569.764512][T18116] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000005 [ 569.764529][T18116] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.764546][T18116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.764562][T18116] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 569.764603][T18116] [ 571.155042][T18141] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 572.255604][T18168] ERROR: Out of memory at tomoyo_memory_ok. [ 572.534944][T18179] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4578'. [ 572.747531][T18181] random: crng reseeded on system resumption [ 572.763285][T18181] FAULT_INJECTION: forcing a failure. [ 572.763285][T18181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.789057][T18181] CPU: 1 UID: 0 PID: 18181 Comm: syz.9.4581 Tainted: G U syzkaller #0 PREEMPT(full) [ 572.789112][T18181] Tainted: [U]=USER [ 572.789121][T18181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.789137][T18181] Call Trace: [ 572.789146][T18181] [ 572.789157][T18181] dump_stack_lvl+0x16c/0x1f0 [ 572.789196][T18181] should_fail_ex+0x512/0x640 [ 572.789239][T18181] should_fail_alloc_page+0xe7/0x130 [ 572.789275][T18181] prepare_alloc_pages+0x3c2/0x610 [ 572.789307][T18181] ? rcu_is_watching+0x12/0xc0 [ 572.789340][T18181] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 572.789378][T18181] ? stack_trace_save+0x8e/0xc0 [ 572.789407][T18181] ? __pfx_stack_trace_save+0x10/0x10 [ 572.789441][T18181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.789469][T18181] ? kasan_save_stack+0x42/0x60 [ 572.789496][T18181] ? kasan_save_stack+0x33/0x60 [ 572.789530][T18181] ? do_dentry_open+0x982/0x1530 [ 572.789558][T18181] ? vfs_open+0x82/0x3f0 [ 572.789588][T18181] ? path_openat+0x1de4/0x2cb0 [ 572.789613][T18181] ? do_filp_open+0x20b/0x470 [ 572.789639][T18181] ? do_sys_openat2+0x11b/0x1d0 [ 572.789673][T18181] ? __x64_sys_openat+0x174/0x210 [ 572.789707][T18181] ? do_syscall_64+0xcd/0xfa0 [ 572.789735][T18181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.789764][T18181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 572.789813][T18181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 572.789857][T18181] ? policy_nodemask+0xea/0x4e0 [ 572.789894][T18181] alloc_pages_mpol+0x1fb/0x550 [ 572.789927][T18181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 572.789967][T18181] alloc_pages_noprof+0x131/0x390 [ 572.789999][T18181] get_zeroed_page_noprof+0x18/0xb0 [ 572.790029][T18181] get_image_page+0x18/0x190 [ 572.790055][T18181] alloc_rtree_node+0x3c/0xb0 [ 572.790092][T18181] memory_bm_create+0x519/0x810 [ 572.790136][T18181] create_basic_memory_bitmaps+0xbd/0x320 [ 572.790171][T18181] snapshot_open+0x235/0x2b0 [ 572.790200][T18181] ? __pfx_snapshot_open+0x10/0x10 [ 572.790234][T18181] misc_open+0x26d/0x450 [ 572.790271][T18181] ? __pfx_misc_open+0x10/0x10 [ 572.790306][T18181] chrdev_open+0x234/0x6a0 [ 572.790335][T18181] ? __pfx_apparmor_file_open+0x10/0x10 [ 572.790374][T18181] ? __pfx_chrdev_open+0x10/0x10 [ 572.790408][T18181] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 572.790443][T18181] do_dentry_open+0x982/0x1530 [ 572.790474][T18181] ? __pfx_chrdev_open+0x10/0x10 [ 572.790511][T18181] vfs_open+0x82/0x3f0 [ 572.790552][T18181] path_openat+0x1de4/0x2cb0 [ 572.790592][T18181] ? __pfx_path_openat+0x10/0x10 [ 572.790623][T18181] ? __lock_acquire+0xb8a/0x1c90 [ 572.790662][T18181] do_filp_open+0x20b/0x470 [ 572.790692][T18181] ? __pfx_do_filp_open+0x10/0x10 [ 572.790749][T18181] ? alloc_fd+0x471/0x7d0 [ 572.790788][T18181] do_sys_openat2+0x11b/0x1d0 [ 572.790823][T18181] ? __pfx_do_sys_openat2+0x10/0x10 [ 572.790860][T18181] ? __fput+0x68d/0xb70 [ 572.790903][T18181] __x64_sys_openat+0x174/0x210 [ 572.790942][T18181] ? __pfx___x64_sys_openat+0x10/0x10 [ 572.790998][T18181] do_syscall_64+0xcd/0xfa0 [ 572.791033][T18181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.791060][T18181] RIP: 0033:0x7f44f698f6c9 [ 572.791091][T18181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.791120][T18181] RSP: 002b:00007f44f7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.791145][T18181] RAX: ffffffffffffffda RBX: 00007f44f6be5fa0 RCX: 00007f44f698f6c9 [ 572.791164][T18181] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 572.791182][T18181] RBP: 00007f44f6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 572.791198][T18181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.791214][T18181] R13: 00007f44f6be6038 R14: 00007f44f6be5fa0 R15: 00007ffc8f9f3758 [ 572.791253][T18181] [ 573.615062][T18193] FAULT_INJECTION: forcing a failure. [ 573.615062][T18193] name fail_futex, interval 1, probability 0, space 0, times 0 [ 573.673298][T18193] CPU: 0 UID: 0 PID: 18193 Comm: syz.9.4585 Tainted: G U syzkaller #0 PREEMPT(full) [ 573.673344][T18193] Tainted: [U]=USER [ 573.673355][T18193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 573.673371][T18193] Call Trace: [ 573.673382][T18193] [ 573.673393][T18193] dump_stack_lvl+0x16c/0x1f0 [ 573.673431][T18193] should_fail_ex+0x512/0x640 [ 573.673475][T18193] get_futex_key+0x1d0/0x1560 [ 573.673512][T18193] ? __pfx_get_futex_key+0x10/0x10 [ 573.673558][T18193] futex_wake+0xea/0x530 [ 573.673593][T18193] ? __pfx___might_resched+0x10/0x10 [ 573.673626][T18193] ? __pfx_futex_wake+0x10/0x10 [ 573.673664][T18193] ? __sys_sendmmsg+0x35f/0x420 [ 573.673696][T18193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 573.673730][T18193] do_futex+0x1e3/0x350 [ 573.673776][T18193] ? __pfx_do_futex+0x10/0x10 [ 573.673822][T18193] __x64_sys_futex+0x1e0/0x4c0 [ 573.673860][T18193] ? fput+0x9b/0xd0 [ 573.673894][T18193] ? __pfx___x64_sys_futex+0x10/0x10 [ 573.673929][T18193] ? xfd_validate_state+0x61/0x180 [ 573.673963][T18193] ? __pfx_ksys_write+0x10/0x10 [ 573.674002][T18193] do_syscall_64+0xcd/0xfa0 [ 573.674036][T18193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.674063][T18193] RIP: 0033:0x7f44f698f6c9 [ 573.674085][T18193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.674109][T18193] RSP: 002b:00007f44f77770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 573.674134][T18193] RAX: ffffffffffffffda RBX: 00007f44f6be5fa8 RCX: 00007f44f698f6c9 [ 573.674149][T18193] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44f6be5fac [ 573.674164][T18193] RBP: 00007f44f6be5fa0 R08: 00007f44f7778000 R09: 0000000000000000 [ 573.674179][T18193] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 573.674193][T18193] R13: 00007f44f6be6038 R14: 00007ffc8f9f3670 R15: 00007ffc8f9f3758 [ 573.674229][T18193] [ 575.006838][T18217] ERROR: Out of memory at tomoyo_memory_ok. [ 575.829439][T18240] ERROR: Out of memory at tomoyo_memory_ok. [ 576.028857][T18244] Console: switching to colour VGA+ 80x25 [ 576.192958][T18244] Console: switching to colour frame buffer device 128x48 [ 577.066153][T18267] netlink: 338 bytes leftover after parsing attributes in process `syz.8.4613'. [ 577.390100][T18271] __vm_enough_memory: pid: 18271, comm: syz.8.4614, bytes: 4398046511104 not enough memory for the allocation [ 578.080621][T18274] FAULT_INJECTION: forcing a failure. [ 578.080621][T18274] name failslab, interval 1, probability 0, space 0, times 0 [ 578.131331][T18278] netlink: 186 bytes leftover after parsing attributes in process `syz.8.4617'. [ 578.141214][T18274] CPU: 0 UID: 0 PID: 18274 Comm: syz.9.4624 Tainted: G U syzkaller #0 PREEMPT(full) [ 578.141257][T18274] Tainted: [U]=USER [ 578.141266][T18274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.141283][T18274] Call Trace: [ 578.141292][T18274] [ 578.141303][T18274] dump_stack_lvl+0x16c/0x1f0 [ 578.141341][T18274] should_fail_ex+0x512/0x640 [ 578.141379][T18274] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 578.141411][T18274] should_failslab+0xc2/0x120 [ 578.141446][T18274] kmem_cache_alloc_noprof+0x75/0x6e0 [ 578.141474][T18274] ? __anon_vma_prepare+0xae/0x5e0 [ 578.141520][T18274] ? __anon_vma_prepare+0xae/0x5e0 [ 578.141558][T18274] __anon_vma_prepare+0xae/0x5e0 [ 578.141609][T18274] __vmf_anon_prepare+0x11c/0x240 [ 578.141648][T18274] do_wp_page+0x10fc/0x52b0 [ 578.141695][T18274] ? __pfx_do_wp_page+0x10/0x10 [ 578.141734][T18274] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 578.141775][T18274] ? ___pte_offset_map+0x2ad/0x4f0 [ 578.141814][T18274] __handle_mm_fault+0x1ae3/0x2aa0 [ 578.141865][T18274] ? __pfx___handle_mm_fault+0x10/0x10 [ 578.141907][T18274] ? __pte_offset_map_lock+0x174/0x310 [ 578.141940][T18274] ? find_held_lock+0x2b/0x80 [ 578.141979][T18274] ? follow_page_pte+0x5cf/0x1390 [ 578.142021][T18274] handle_mm_fault+0x589/0xd10 [ 578.142067][T18274] __get_user_pages+0x54e/0x3530 [ 578.142119][T18274] ? __pfx___get_user_pages+0x10/0x10 [ 578.142164][T18274] populate_vma_page_range+0x267/0x3f0 [ 578.142203][T18274] ? __pfx_populate_vma_page_range+0x10/0x10 [ 578.142239][T18274] ? __pfx_find_vma_intersection+0x10/0x10 [ 578.142274][T18274] ? do_mmap+0x69c/0x1210 [ 578.142311][T18274] __mm_populate+0x1d8/0x380 [ 578.142348][T18274] ? __pfx___mm_populate+0x10/0x10 [ 578.142388][T18274] ? up_write+0x1b2/0x520 [ 578.142430][T18274] vm_mmap_pgoff+0x37f/0x470 [ 578.142469][T18274] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 578.142510][T18274] ? __fget_files+0x20e/0x3c0 [ 578.142546][T18274] ksys_mmap_pgoff+0x32c/0x5c0 [ 578.142579][T18274] ? __pfx_ksys_write+0x10/0x10 [ 578.142620][T18274] __x64_sys_mmap+0x125/0x190 [ 578.142664][T18274] do_syscall_64+0xcd/0xfa0 [ 578.142698][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.142725][T18274] RIP: 0033:0x7f44f698f6c9 [ 578.142746][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.142772][T18274] RSP: 002b:00007f44f7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 578.142798][T18274] RAX: ffffffffffffffda RBX: 00007f44f6be5fa0 RCX: 00007f44f698f6c9 [ 578.142816][T18274] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 578.142832][T18274] RBP: 00007f44f6a11f91 R08: 0000000000000003 R09: 0000000000008000 [ 578.142850][T18274] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 578.142867][T18274] R13: 00007f44f6be6038 R14: 00007f44f6be5fa0 R15: 00007ffc8f9f3758 [ 578.142906][T18274] [ 578.458801][T18279] FAULT_INJECTION: forcing a failure. [ 578.458801][T18279] name fail_futex, interval 1, probability 0, space 0, times 0 [ 578.526043][T18279] CPU: 1 UID: 0 PID: 18279 Comm: syz.2.4616 Tainted: G U syzkaller #0 PREEMPT(full) [ 578.526084][T18279] Tainted: [U]=USER [ 578.526092][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.526106][T18279] Call Trace: [ 578.526116][T18279] [ 578.526126][T18279] dump_stack_lvl+0x16c/0x1f0 [ 578.526160][T18279] should_fail_ex+0x512/0x640 [ 578.526200][T18279] get_futex_key+0x293/0x1560 [ 578.526238][T18279] ? __pfx_get_futex_key+0x10/0x10 [ 578.526269][T18279] ? __mutex_trylock_common+0xe9/0x250 [ 578.526311][T18279] futex_wake+0xea/0x530 [ 578.526360][T18279] ? __pfx_futex_wake+0x10/0x10 [ 578.526392][T18279] ? __lock_acquire+0xb8a/0x1c90 [ 578.526439][T18279] do_futex+0x1e3/0x350 [ 578.526471][T18279] ? __pfx_do_futex+0x10/0x10 [ 578.526501][T18279] ? __might_fault+0xe3/0x190 [ 578.526536][T18279] mm_release+0x24e/0x300 [ 578.526565][T18279] do_exit+0x68e/0x2bf0 [ 578.526603][T18279] ? __pfx_do_exit+0x10/0x10 [ 578.526635][T18279] ? do_raw_spin_lock+0x12c/0x2b0 [ 578.526669][T18279] ? find_held_lock+0x2b/0x80 [ 578.526700][T18279] do_group_exit+0xd3/0x2a0 [ 578.526735][T18279] get_signal+0x2671/0x26d0 [ 578.526777][T18279] ? __pfx_get_signal+0x10/0x10 [ 578.526805][T18279] ? do_futex+0x122/0x350 [ 578.526836][T18279] ? __pfx_do_futex+0x10/0x10 [ 578.526871][T18279] arch_do_signal_or_restart+0x8f/0x790 [ 578.526904][T18279] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 578.526945][T18279] ? xfd_validate_state+0x61/0x180 [ 578.526977][T18279] ? __pfx_ksys_write+0x10/0x10 [ 578.527011][T18279] exit_to_user_mode_loop+0x85/0x130 [ 578.527052][T18279] do_syscall_64+0x426/0xfa0 [ 578.527081][T18279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.527104][T18279] RIP: 0033:0x7f792b58f6c9 [ 578.527122][T18279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.527145][T18279] RSP: 002b:00007f792c3de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 578.527169][T18279] RAX: fffffffffffffe00 RBX: 00007f792b7e6098 RCX: 00007f792b58f6c9 [ 578.527190][T18279] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f792b7e6098 [ 578.527205][T18279] RBP: 00007f792b7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 578.527220][T18279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.527235][T18279] R13: 00007f792b7e6128 R14: 00007ffcde62fe70 R15: 00007ffcde62ff58 [ 578.527272][T18279] [ 578.768272][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.168601][T18288] netlink: 322 bytes leftover after parsing attributes in process `syz.3.4621'. [ 579.220738][T18291] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 579.267224][T18291] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 579.308988][T18293] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4625'. [ 579.857145][T18310] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4632'. [ 580.068550][T18315] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4633'. [ 580.494790][T18325] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4637'. [ 581.493835][T18364] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4649'. [ 581.834901][T18376] netlink: 'syz.8.4660': attribute type 2 has an invalid length. [ 583.468132][T18432] __vm_enough_memory: pid: 18432, comm: syz.9.4666, bytes: 4398046511104 not enough memory for the allocation [ 583.709195][T18435] FAULT_INJECTION: forcing a failure. [ 583.709195][T18435] name failslab, interval 1, probability 0, space 0, times 0 [ 583.740389][T18435] CPU: 1 UID: 0 PID: 18435 Comm: syz.2.4667 Tainted: G U syzkaller #0 PREEMPT(full) [ 583.740435][T18435] Tainted: [U]=USER [ 583.740445][T18435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.740461][T18435] Call Trace: [ 583.740471][T18435] [ 583.740482][T18435] dump_stack_lvl+0x16c/0x1f0 [ 583.740521][T18435] should_fail_ex+0x512/0x640 [ 583.740559][T18435] ? fs_reclaim_acquire+0xae/0x150 [ 583.740597][T18435] should_failslab+0xc2/0x120 [ 583.740632][T18435] __kmalloc_noprof+0xdd/0x880 [ 583.740672][T18435] ? tomoyo_encode2+0x100/0x3e0 [ 583.740707][T18435] ? tomoyo_encode2+0x100/0x3e0 [ 583.740735][T18435] tomoyo_encode2+0x100/0x3e0 [ 583.740769][T18435] tomoyo_encode+0x29/0x50 [ 583.740796][T18435] tomoyo_path_perm+0x3a5/0x460 [ 583.740824][T18435] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 583.740870][T18435] ? find_held_lock+0x2b/0x80 [ 583.740904][T18435] ? do_raw_spin_unlock+0x172/0x230 [ 583.740948][T18435] ? __pfx_current_check_access_path+0x10/0x10 [ 583.740982][T18435] ? simple_lookup+0x105/0x1d0 [ 583.741016][T18435] ? lookup_one_qstr_excl+0xb3/0x250 [ 583.741060][T18435] tomoyo_path_symlink+0x97/0xe0 [ 583.741093][T18435] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 583.741124][T18435] ? find_held_lock+0x2b/0x80 [ 583.741152][T18435] ? __might_fault+0xe3/0x190 [ 583.741184][T18435] security_path_symlink+0x152/0x2e0 [ 583.741226][T18435] do_symlinkat+0x10d/0x310 [ 583.741259][T18435] ? __pfx_do_symlinkat+0x10/0x10 [ 583.741289][T18435] ? getname_flags.part.0+0x1c5/0x550 [ 583.741327][T18435] __x64_sys_symlink+0x75/0x90 [ 583.741359][T18435] do_syscall_64+0xcd/0xfa0 [ 583.741392][T18435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.741420][T18435] RIP: 0033:0x7f792b58f6c9 [ 583.741443][T18435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.741467][T18435] RSP: 002b:00007f792c3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 583.741492][T18435] RAX: ffffffffffffffda RBX: 00007f792b7e5fa0 RCX: 00007f792b58f6c9 [ 583.741510][T18435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 583.741527][T18435] RBP: 00007f792b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.741543][T18435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.741558][T18435] R13: 00007f792b7e6038 R14: 00007f792b7e5fa0 R15: 00007ffcde62ff58 [ 583.741596][T18435] [ 584.358881][T18453] netlink: 'syz.9.4676': attribute type 21 has an invalid length. [ 584.371588][T18453] netlink: 334 bytes leftover after parsing attributes in process `syz.9.4676'. [ 584.742148][T18464] netlink: 'syz.3.4680': attribute type 2 has an invalid length. [ 584.928249][T18469] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4682'. [ 584.933605][T18471] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4683'. [ 585.320263][T18480] netlink: 'syz.3.4687': attribute type 27 has an invalid length. [ 585.345848][T18480] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4687'. [ 585.749693][T18491] netlink: 'syz.2.4692': attribute type 2 has an invalid length. [ 585.887271][T18501] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4695'. [ 587.356675][T18540] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4708'. [ 588.026424][T18557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4715'. [ 588.949716][T18582] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 589.049037][T18584] FAULT_INJECTION: forcing a failure. [ 589.049037][T18584] name failslab, interval 1, probability 0, space 0, times 0 [ 589.062585][T18584] CPU: 0 UID: 0 PID: 18584 Comm: syz.3.4726 Tainted: G U syzkaller #0 PREEMPT(full) [ 589.062632][T18584] Tainted: [U]=USER [ 589.062643][T18584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.062663][T18584] Call Trace: [ 589.062673][T18584] [ 589.062685][T18584] dump_stack_lvl+0x16c/0x1f0 [ 589.062729][T18584] should_fail_ex+0x512/0x640 [ 589.062787][T18584] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 589.062823][T18584] should_failslab+0xc2/0x120 [ 589.062860][T18584] kmem_cache_alloc_noprof+0x75/0x6e0 [ 589.062891][T18584] ? __proc_create+0x2ce/0x8e0 [ 589.062941][T18584] ? __proc_create+0x2ce/0x8e0 [ 589.062985][T18584] __proc_create+0x2ce/0x8e0 [ 589.063030][T18584] ? __pfx___proc_create+0x10/0x10 [ 589.063094][T18584] proc_create_reg+0x7d/0x180 [ 589.063145][T18584] proc_create_data+0x86/0x110 [ 589.063184][T18584] ? __pfx_proc_create_data+0x10/0x10 [ 589.063230][T18584] gss_svc_init_net+0x238/0x660 [ 589.063256][T18584] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 589.063293][T18584] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 589.063323][T18584] ops_init+0x1e2/0x5f0 [ 589.063356][T18584] setup_net+0x100/0x390 [ 589.063384][T18584] ? __pfx_setup_net+0x10/0x10 [ 589.063415][T18584] ? debug_mutex_init+0x37/0x70 [ 589.063448][T18584] copy_net_ns+0x2f8/0x690 [ 589.063483][T18584] create_new_namespaces+0x3ea/0xa90 [ 589.063520][T18584] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 589.063552][T18584] ksys_unshare+0x45b/0xa40 [ 589.063584][T18584] ? __pfx_ksys_unshare+0x10/0x10 [ 589.063620][T18584] ? xfd_validate_state+0x61/0x180 [ 589.063668][T18584] __x64_sys_unshare+0x31/0x40 [ 589.063699][T18584] do_syscall_64+0xcd/0xfa0 [ 589.063733][T18584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.063773][T18584] RIP: 0033:0x7fe57f58f6c9 [ 589.063796][T18584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.063824][T18584] RSP: 002b:00007fe5803ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.063851][T18584] RAX: ffffffffffffffda RBX: 00007fe57f7e5fa0 RCX: 00007fe57f58f6c9 [ 589.063871][T18584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 589.063888][T18584] RBP: 00007fe57f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.063906][T18584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.063923][T18584] R13: 00007fe57f7e6038 R14: 00007fe57f7e5fa0 R15: 00007ffff3b56fe8 [ 589.063964][T18584] [ 590.054761][T18612] netlink: 330 bytes leftover after parsing attributes in process `syz.9.4738'. [ 590.345281][T18616] zswap: compressor not available [ 590.507867][T18627] FAULT_INJECTION: forcing a failure. [ 590.507867][T18627] name fail_futex, interval 1, probability 0, space 0, times 0 [ 590.527044][T18627] CPU: 0 UID: 0 PID: 18627 Comm: syz.2.4743 Tainted: G U syzkaller #0 PREEMPT(full) [ 590.527087][T18627] Tainted: [U]=USER [ 590.527097][T18627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.527113][T18627] Call Trace: [ 590.527121][T18627] [ 590.527133][T18627] dump_stack_lvl+0x16c/0x1f0 [ 590.527170][T18627] should_fail_ex+0x512/0x640 [ 590.527209][T18627] ? kfree+0x2b8/0x6d0 [ 590.527235][T18627] get_futex_key+0x1d0/0x1560 [ 590.527270][T18627] ? __pfx_get_futex_key+0x10/0x10 [ 590.527312][T18627] futex_wake+0xea/0x530 [ 590.527351][T18627] ? __pfx_futex_wake+0x10/0x10 [ 590.527405][T18627] ? rcu_is_watching+0x12/0xc0 [ 590.527431][T18627] ? kasan_quarantine_put+0x10a/0x240 [ 590.527459][T18627] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.527493][T18627] do_futex+0x1e3/0x350 [ 590.527525][T18627] ? __pfx_do_futex+0x10/0x10 [ 590.527558][T18627] ? mntput+0x10/0x90 [ 590.527583][T18627] __x64_sys_futex+0x1e0/0x4c0 [ 590.527620][T18627] ? __pfx___x64_sys_futex+0x10/0x10 [ 590.527652][T18627] ? xfd_validate_state+0x61/0x180 [ 590.527697][T18627] do_syscall_64+0xcd/0xfa0 [ 590.527730][T18627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.527756][T18627] RIP: 0033:0x7f792b58f6c9 [ 590.527777][T18627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.527801][T18627] RSP: 002b:00007f792c3ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 590.527826][T18627] RAX: ffffffffffffffda RBX: 00007f792b7e5fa8 RCX: 00007f792b58f6c9 [ 590.527845][T18627] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f792b7e5fac [ 590.527863][T18627] RBP: 00007f792b7e5fa0 R08: 00007f792c400000 R09: 0000000000000000 [ 590.527881][T18627] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 590.527898][T18627] R13: 00007f792b7e6038 R14: 00007ffcde62fe70 R15: 00007ffcde62ff58 [ 590.527935][T18627] [ 590.959248][T18639] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4745'. [ 592.230685][T18687] FAULT_INJECTION: forcing a failure. [ 592.230685][T18687] name failslab, interval 1, probability 0, space 0, times 0 [ 592.243698][T18687] CPU: 0 UID: 0 PID: 18687 Comm: syz.8.4766 Tainted: G U syzkaller #0 PREEMPT(full) [ 592.243740][T18687] Tainted: [U]=USER [ 592.243750][T18687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.243767][T18687] Call Trace: [ 592.243776][T18687] [ 592.243786][T18687] dump_stack_lvl+0x16c/0x1f0 [ 592.243824][T18687] should_fail_ex+0x512/0x640 [ 592.243862][T18687] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 592.243894][T18687] should_failslab+0xc2/0x120 [ 592.243930][T18687] kmem_cache_alloc_noprof+0x75/0x6e0 [ 592.243959][T18687] ? __proc_create+0x2ce/0x8e0 [ 592.244002][T18687] ? __proc_create+0x2ce/0x8e0 [ 592.244033][T18687] __proc_create+0x2ce/0x8e0 [ 592.244069][T18687] ? __pfx___proc_create+0x10/0x10 [ 592.244103][T18687] ? __lock_acquire+0x622/0x1c90 [ 592.244141][T18687] proc_create_reg+0x7d/0x180 [ 592.244181][T18687] proc_create_net_data+0x8e/0x1c0 [ 592.244241][T18687] ? __pfx_proc_create_net_data+0x10/0x10 [ 592.244288][T18687] ? __pfx_phonet_init_net+0x10/0x10 [ 592.244323][T18687] phonet_init_net+0x66/0x120 [ 592.244354][T18687] ops_init+0x1e2/0x5f0 [ 592.244384][T18687] setup_net+0x100/0x390 [ 592.244411][T18687] ? __pfx_setup_net+0x10/0x10 [ 592.244437][T18687] ? debug_mutex_init+0x37/0x70 [ 592.244468][T18687] copy_net_ns+0x2f8/0x690 [ 592.244508][T18687] create_new_namespaces+0x3ea/0xa90 [ 592.244546][T18687] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 592.244579][T18687] ksys_unshare+0x45b/0xa40 [ 592.244613][T18687] ? __pfx_ksys_unshare+0x10/0x10 [ 592.244648][T18687] ? xfd_validate_state+0x61/0x180 [ 592.244693][T18687] __x64_sys_unshare+0x31/0x40 [ 592.244722][T18687] do_syscall_64+0xcd/0xfa0 [ 592.244754][T18687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.244781][T18687] RIP: 0033:0x7f347818f6c9 [ 592.244802][T18687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.244828][T18687] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 592.244852][T18687] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 592.244869][T18687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 592.244883][T18687] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 592.244900][T18687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.244914][T18687] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 592.244951][T18687] [ 592.616021][T18690] netlink: 326 bytes leftover after parsing attributes in process `syz.9.4767'. [ 593.760545][T18726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4782'. [ 594.081637][T18738] netlink: 'syz.3.4787': attribute type 29 has an invalid length. [ 594.093040][T18738] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4787'. [ 594.546031][T18746] zswap: compressor not available [ 594.556461][T18747] phram: parameter too long [ 594.785267][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4795'. [ 594.796455][T18761] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4795'. [ 594.806666][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4795'. [ 595.733863][T18770] netlink: 346 bytes leftover after parsing attributes in process `syz.8.4807'. [ 596.009805][T18783] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4804'. [ 596.095770][ T30] audit: type=1800 audit(4294967313.137:16): pid=18778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4802" name="lu_gp_id" dev="configfs" ino=66599 res=0 errno=0 [ 596.271116][T18785] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4805'. [ 597.707243][T18831] FAULT_INJECTION: forcing a failure. [ 597.707243][T18831] name failslab, interval 1, probability 0, space 0, times 0 [ 597.747361][T18831] CPU: 1 UID: 0 PID: 18831 Comm: syz.9.4824 Tainted: G U syzkaller #0 PREEMPT(full) [ 597.747402][T18831] Tainted: [U]=USER [ 597.747411][T18831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.747426][T18831] Call Trace: [ 597.747435][T18831] [ 597.747444][T18831] dump_stack_lvl+0x16c/0x1f0 [ 597.747482][T18831] should_fail_ex+0x512/0x640 [ 597.747519][T18831] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 597.747559][T18831] should_failslab+0xc2/0x120 [ 597.747593][T18831] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 597.747625][T18831] ? sctp_sysctl_net_register+0x30/0x200 [ 597.747655][T18831] ? proc_create_reg+0xe3/0x180 [ 597.747695][T18831] ? __pfx_sctp_defaults_init+0x10/0x10 [ 597.747726][T18831] ? kmemdup_noprof+0x29/0x60 [ 597.747751][T18831] ? __pfx_proc_create_net_data+0x10/0x10 [ 597.747788][T18831] kmemdup_noprof+0x29/0x60 [ 597.747818][T18831] sctp_sysctl_net_register+0x30/0x200 [ 597.747847][T18831] ? __pfx_sctp_defaults_init+0x10/0x10 [ 597.747878][T18831] sctp_defaults_init+0x6d2/0xd90 [ 597.747909][T18831] ? __pfx_sctp_defaults_init+0x10/0x10 [ 597.747941][T18831] ops_init+0x1e2/0x5f0 [ 597.747973][T18831] setup_net+0x100/0x390 [ 597.748002][T18831] ? __pfx_setup_net+0x10/0x10 [ 597.748031][T18831] ? debug_mutex_init+0x37/0x70 [ 597.748064][T18831] copy_net_ns+0x2f8/0x690 [ 597.748107][T18831] create_new_namespaces+0x3ea/0xa90 [ 597.748143][T18831] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 597.748176][T18831] ksys_unshare+0x45b/0xa40 [ 597.748210][T18831] ? __pfx_ksys_unshare+0x10/0x10 [ 597.748244][T18831] ? xfd_validate_state+0x61/0x180 [ 597.748291][T18831] __x64_sys_unshare+0x31/0x40 [ 597.748325][T18831] do_syscall_64+0xcd/0xfa0 [ 597.748360][T18831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.748388][T18831] RIP: 0033:0x7f44f698f6c9 [ 597.748410][T18831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.748435][T18831] RSP: 002b:00007f44f7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 597.748461][T18831] RAX: ffffffffffffffda RBX: 00007f44f6be5fa0 RCX: 00007f44f698f6c9 [ 597.748481][T18831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 597.748498][T18831] RBP: 00007f44f6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 597.748515][T18831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.748531][T18831] R13: 00007f44f6be6038 R14: 00007f44f6be5fa0 R15: 00007ffc8f9f3758 [ 597.748570][T18831] [ 599.105503][T18853] FAULT_INJECTION: forcing a failure. [ 599.105503][T18853] name failslab, interval 1, probability 0, space 0, times 0 [ 599.123645][T18853] CPU: 0 UID: 0 PID: 18853 Comm: syz.3.4831 Tainted: G U syzkaller #0 PREEMPT(full) [ 599.123707][T18853] Tainted: [U]=USER [ 599.123723][T18853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.123739][T18853] Call Trace: [ 599.123748][T18853] [ 599.123759][T18853] dump_stack_lvl+0x16c/0x1f0 [ 599.123799][T18853] should_fail_ex+0x512/0x640 [ 599.123838][T18853] ? __kmalloc_cache_noprof+0x5f/0x780 [ 599.123869][T18853] should_failslab+0xc2/0x120 [ 599.123905][T18853] __kmalloc_cache_noprof+0x72/0x780 [ 599.123933][T18853] ? snd_seq_prioq_new+0x3f/0x110 [ 599.123965][T18853] ? snd_seq_prioq_new+0x3f/0x110 [ 599.123991][T18853] snd_seq_prioq_new+0x3f/0x110 [ 599.124017][T18853] snd_seq_queue_alloc+0x12b/0x5a0 [ 599.124064][T18853] snd_seq_ioctl_create_queue+0xa9/0x390 [ 599.124100][T18853] call_seq_client_ctl+0x9f/0x110 [ 599.124133][T18853] snd_seq_kernel_client_ctl+0x77/0xd0 [ 599.124165][T18853] alloc_seq_queue+0xda/0x180 [ 599.124197][T18853] ? __pfx_alloc_seq_queue+0x10/0x10 [ 599.124249][T18853] ? mark_held_locks+0x49/0x80 [ 599.124282][T18853] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.124311][T18853] ? lockdep_hardirqs_on+0x7c/0x110 [ 599.124347][T18853] snd_seq_oss_open+0x38c/0xa20 [ 599.124387][T18853] odev_open+0x79/0xc0 [ 599.124415][T18853] ? __pfx_odev_open+0x10/0x10 [ 599.124445][T18853] soundcore_open+0x40c/0x580 [ 599.124479][T18853] ? __pfx_soundcore_open+0x10/0x10 [ 599.124510][T18853] chrdev_open+0x234/0x6a0 [ 599.124541][T18853] ? __pfx_apparmor_file_open+0x10/0x10 [ 599.124580][T18853] ? __pfx_chrdev_open+0x10/0x10 [ 599.124613][T18853] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 599.124655][T18853] do_dentry_open+0x982/0x1530 [ 599.124689][T18853] ? __pfx_chrdev_open+0x10/0x10 [ 599.124736][T18853] vfs_open+0x82/0x3f0 [ 599.124779][T18853] path_openat+0x1de4/0x2cb0 [ 599.124823][T18853] ? __pfx_path_openat+0x10/0x10 [ 599.124858][T18853] ? __lock_acquire+0xb8a/0x1c90 [ 599.124897][T18853] do_filp_open+0x20b/0x470 [ 599.124927][T18853] ? __pfx_do_filp_open+0x10/0x10 [ 599.124984][T18853] ? alloc_fd+0x471/0x7d0 [ 599.125022][T18853] do_sys_openat2+0x11b/0x1d0 [ 599.125058][T18853] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.125110][T18853] __x64_sys_openat+0x174/0x210 [ 599.125149][T18853] ? __pfx___x64_sys_openat+0x10/0x10 [ 599.125202][T18853] do_syscall_64+0xcd/0xfa0 [ 599.125237][T18853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.125264][T18853] RIP: 0033:0x7fe57f58f6c9 [ 599.125285][T18853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.125312][T18853] RSP: 002b:00007fe5803ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.125338][T18853] RAX: ffffffffffffffda RBX: 00007fe57f7e5fa0 RCX: 00007fe57f58f6c9 [ 599.125356][T18853] RDX: 00000000001c8740 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 599.125375][T18853] RBP: 00007fe57f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.125391][T18853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.125408][T18853] R13: 00007fe57f7e6038 R14: 00007fe57f7e5fa0 R15: 00007ffff3b56fe8 [ 599.125448][T18853] [ 606.349891][T18885] binder: 18883:18885 ioctl c0306201 200000000000 returned -14 [ 607.039414][T18902] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4851'. [ 607.153031][T14750] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 607.164643][T14750] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 607.175853][T14750] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 607.184861][T14750] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 607.196102][T14750] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 607.321497][T18911] netlink: 334 bytes leftover after parsing attributes in process `syz.9.4854'. [ 607.368318][T18913] vhci_hcd: not connected 4 [ 607.619808][T18905] chnl_net:caif_netlink_parms(): no params data found [ 607.971240][T18933] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4860'. [ 608.039467][T18905] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.060468][T18905] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.083977][T18905] bridge_slave_0: entered allmulticast mode [ 608.100233][T18905] bridge_slave_0: entered promiscuous mode [ 608.122373][T18905] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.133221][T18905] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.161024][T18905] bridge_slave_1: entered allmulticast mode [ 608.182544][T18905] bridge_slave_1: entered promiscuous mode [ 608.276465][T18905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.316860][T18905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.447301][T18905] team0: Port device team_slave_0 added [ 608.464393][T18905] team0: Port device team_slave_1 added [ 608.576739][T18905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.593673][T18905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.622698][T18905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.637541][T18905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.644930][T18905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.673948][T18905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.795692][T18905] hsr_slave_0: entered promiscuous mode [ 608.808676][T18905] hsr_slave_1: entered promiscuous mode [ 608.830867][T18905] debugfs: 'hsr0' already exists in 'hsr' [ 608.838022][T18905] Cannot create hsr debugfs directory [ 608.921681][T18946] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 608.977176][T18946] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 609.179711][T18905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.264123][T18943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 609.271800][ T52] Bluetooth: hci11: command tx timeout [ 609.294075][T18943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 609.302098][T18943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 609.310224][T18943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 609.312254][T18960] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4872'. [ 609.316560][T18943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 609.333123][T18943] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 609.340396][T18943] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 609.346599][T18943] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 609.354178][T18943] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 609.360459][T18943] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 609.367543][T18943] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 609.374766][T18943] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 609.376594][T18905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.392112][T18943] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 609.405211][T18943] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 609.569650][T18905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.642176][T18972] netlink: 'syz.3.4874': attribute type 27 has an invalid length. [ 609.643500][T18905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.650269][T18972] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4874'. [ 609.743928][T18975] FAULT_INJECTION: forcing a failure. [ 609.743928][T18975] name failslab, interval 1, probability 0, space 0, times 0 [ 609.758833][T18975] CPU: 0 UID: 0 PID: 18975 Comm: syz.8.4876 Tainted: G U syzkaller #0 PREEMPT(full) [ 609.758877][T18975] Tainted: [U]=USER [ 609.758887][T18975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.758902][T18975] Call Trace: [ 609.758911][T18975] [ 609.758921][T18975] dump_stack_lvl+0x16c/0x1f0 [ 609.758960][T18975] should_fail_ex+0x512/0x640 [ 609.758998][T18975] ? __kmalloc_noprof+0xca/0x880 [ 609.759042][T18975] should_failslab+0xc2/0x120 [ 609.759077][T18975] __kmalloc_noprof+0xdd/0x880 [ 609.759117][T18975] ? lsm_blob_alloc+0x68/0x90 [ 609.759161][T18975] ? lsm_blob_alloc+0x68/0x90 [ 609.759191][T18975] lsm_blob_alloc+0x68/0x90 [ 609.759225][T18975] security_sk_alloc+0x30/0x270 [ 609.759264][T18975] sk_prot_alloc+0xfb/0x2a0 [ 609.759300][T18975] sk_alloc+0x36/0xc20 [ 609.759340][T18975] unix_create1+0xa6/0x700 [ 609.759378][T18975] unix_create+0x110/0x270 [ 609.759413][T18975] __sock_create+0x338/0x8d0 [ 609.759454][T18975] __sys_socketpair+0x25c/0x5a0 [ 609.759491][T18975] ? __pfx___sys_socketpair+0x10/0x10 [ 609.759530][T18975] ? xfd_validate_state+0x61/0x180 [ 609.759565][T18975] ? __pfx_do_writev+0x10/0x10 [ 609.759600][T18975] __x64_sys_socketpair+0x96/0x100 [ 609.759635][T18975] ? lockdep_hardirqs_on+0x7c/0x110 [ 609.759666][T18975] do_syscall_64+0xcd/0xfa0 [ 609.759699][T18975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.759726][T18975] RIP: 0033:0x7f347818f6c9 [ 609.759748][T18975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.759774][T18975] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 609.759799][T18975] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 609.759818][T18975] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 609.759835][T18975] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 609.759852][T18975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.759869][T18975] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 609.759905][T18975] [ 609.872868][T18905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 609.876327][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.009621][T18905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 610.035274][T18905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 610.048825][T18905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 610.228145][T18905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.267711][T18905] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.309324][T15913] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.316530][T15913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.337999][T15913] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.345216][T15913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.531124][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 610.846256][T18905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.985545][T18905] veth0_vlan: entered promiscuous mode [ 611.033867][T18905] veth1_vlan: entered promiscuous mode [ 611.116451][T18905] veth0_macvtap: entered promiscuous mode [ 611.143028][T18905] veth1_macvtap: entered promiscuous mode [ 611.193236][T18905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.236002][T18905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.281841][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.309624][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.327428][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 611.327671][T14750] Bluetooth: hci4: command 0x0c1a tx timeout [ 611.334619][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 611.339595][T14750] Bluetooth: hci1: command 0x0c1a tx timeout [ 611.346611][T17926] Bluetooth: hci3: command 0x0c1a tx timeout [ 611.382732][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.395521][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.406496][ T52] Bluetooth: hci11: command 0x040f tx timeout [ 611.412852][ T5839] Bluetooth: hci10: command 0x0c1a tx timeout [ 611.420511][T16750] Bluetooth: hci9: command 0x0c1a tx timeout [ 611.420542][T17926] Bluetooth: hci8: command 0x0c1a tx timeout [ 611.430726][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout [ 611.439067][T17926] Bluetooth: hci6: command 0x0c1a tx timeout [ 611.784416][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.792307][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.906345][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.940385][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.225462][T19022] FAULT_INJECTION: forcing a failure. [ 612.225462][T19022] name failslab, interval 1, probability 0, space 0, times 0 [ 612.272633][T19022] CPU: 1 UID: 0 PID: 19022 Comm: syz.1.4841 Tainted: G U syzkaller #0 PREEMPT(full) [ 612.272678][T19022] Tainted: [U]=USER [ 612.272689][T19022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.272705][T19022] Call Trace: [ 612.272714][T19022] [ 612.272726][T19022] dump_stack_lvl+0x16c/0x1f0 [ 612.272764][T19022] should_fail_ex+0x512/0x640 [ 612.272802][T19022] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 612.272832][T19022] should_failslab+0xc2/0x120 [ 612.272870][T19022] kmem_cache_alloc_noprof+0x75/0x6e0 [ 612.272897][T19022] ? __proc_create+0x2ce/0x8e0 [ 612.272948][T19022] ? __proc_create+0x2ce/0x8e0 [ 612.272983][T19022] __proc_create+0x2ce/0x8e0 [ 612.273023][T19022] ? __pfx___proc_create+0x10/0x10 [ 612.273064][T19022] ? _raw_write_unlock+0x28/0x50 [ 612.273095][T19022] ? proc_register+0x559/0x8b0 [ 612.273136][T19022] proc_create_reg+0x7d/0x180 [ 612.273171][T19022] ? __pfx_can_rcvlist_eff_proc_show+0x10/0x10 [ 612.273203][T19022] proc_create_net_single+0x86/0x180 [ 612.273242][T19022] ? __pfx_proc_create_net_single+0x10/0x10 [ 612.273293][T19022] can_init_proc+0x319/0x4d0 [ 612.273326][T19022] can_pernet_init+0x1e4/0x370 [ 612.273356][T19022] ? __pfx_can_pernet_init+0x10/0x10 [ 612.273382][T19022] ops_init+0x1e2/0x5f0 [ 612.273412][T19022] setup_net+0x100/0x390 [ 612.273440][T19022] ? __pfx_setup_net+0x10/0x10 [ 612.273469][T19022] ? debug_mutex_init+0x37/0x70 [ 612.273501][T19022] copy_net_ns+0x2f8/0x690 [ 612.273532][T19022] create_new_namespaces+0x3ea/0xa90 [ 612.273567][T19022] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 612.273602][T19022] ksys_unshare+0x45b/0xa40 [ 612.273644][T19022] ? __pfx_ksys_unshare+0x10/0x10 [ 612.273677][T19022] ? xfd_validate_state+0x61/0x180 [ 612.273720][T19022] __x64_sys_unshare+0x31/0x40 [ 612.273754][T19022] do_syscall_64+0xcd/0xfa0 [ 612.273787][T19022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.273811][T19022] RIP: 0033:0x7fd2ead8f6c9 [ 612.273833][T19022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.273859][T19022] RSP: 002b:00007fd2e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 612.273883][T19022] RAX: ffffffffffffffda RBX: 00007fd2eafe5fa0 RCX: 00007fd2ead8f6c9 [ 612.273900][T19022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 612.273916][T19022] RBP: 00007fd2eae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 612.273932][T19022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.273956][T19022] R13: 00007fd2eafe6038 R14: 00007fd2eafe5fa0 R15: 00007fffe57d9dc8 [ 612.273992][T19022] [ 612.569728][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4888'. [ 612.912994][T19031] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4890'. [ 613.066356][T19035] FAULT_INJECTION: forcing a failure. [ 613.066356][T19035] name failslab, interval 1, probability 0, space 0, times 0 [ 613.079487][T19035] CPU: 1 UID: 0 PID: 19035 Comm: syz.1.4893 Tainted: G U syzkaller #0 PREEMPT(full) [ 613.079530][T19035] Tainted: [U]=USER [ 613.079540][T19035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.079555][T19035] Call Trace: [ 613.079565][T19035] [ 613.079576][T19035] dump_stack_lvl+0x16c/0x1f0 [ 613.079615][T19035] should_fail_ex+0x512/0x640 [ 613.079660][T19035] should_failslab+0xc2/0x120 [ 613.079697][T19035] __kmalloc_cache_noprof+0x72/0x780 [ 613.079723][T19035] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 613.079763][T19035] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 613.079805][T19035] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 613.079847][T19035] tipc_nametbl_insert_publ+0x700/0x1720 [ 613.079889][T19035] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 613.079928][T19035] ? net_generic+0xea/0x2a0 [ 613.079970][T19035] tipc_nametbl_publish+0x137/0x280 [ 613.080012][T19035] tipc_sk_publish+0x1d8/0x430 [ 613.080050][T19035] ? __pfx_tipc_sk_publish+0x10/0x10 [ 613.080090][T19035] ? __local_bh_enable_ip+0xa4/0x120 [ 613.080127][T19035] tipc_sk_bind+0x16f/0x380 [ 613.080165][T19035] tipc_bind+0x190/0x2a0 [ 613.080204][T19035] __sys_bind+0x1a7/0x260 [ 613.080242][T19035] ? __pfx___sys_bind+0x10/0x10 [ 613.080291][T19035] ? xfd_validate_state+0x61/0x180 [ 613.080325][T19035] ? __pfx_do_writev+0x10/0x10 [ 613.080360][T19035] __x64_sys_bind+0x72/0xb0 [ 613.080393][T19035] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.080424][T19035] do_syscall_64+0xcd/0xfa0 [ 613.080459][T19035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.080486][T19035] RIP: 0033:0x7fd2ead8f6c9 [ 613.080509][T19035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.080535][T19035] RSP: 002b:00007fd2e8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 613.080561][T19035] RAX: ffffffffffffffda RBX: 00007fd2eafe5fa0 RCX: 00007fd2ead8f6c9 [ 613.080579][T19035] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000005 [ 613.080597][T19035] RBP: 00007fd2eae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 613.080613][T19035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.080629][T19035] R13: 00007fd2eafe6038 R14: 00007fd2eafe5fa0 R15: 00007fffe57d9dc8 [ 613.080666][T19035] [ 613.080677][T19035] tipc: Failed to bind to 65,0,0 [ 613.475444][T19014] Bluetooth: hci11: command 0x040f tx timeout [ 613.964991][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4901'. [ 613.986434][T19055] netlink: 'syz.1.4900': attribute type 4 has an invalid length. [ 614.784264][T19076] netlink: 146 bytes leftover after parsing attributes in process `syz.9.4910'. [ 615.068989][T19081] vhci_hcd: pdev 60373248 [ 615.544918][T19014] Bluetooth: hci11: command 0x040f tx timeout [ 615.625968][T19091] zswap: compressor not available [ 616.280433][T19113] FAULT_INJECTION: forcing a failure. [ 616.280433][T19113] name failslab, interval 1, probability 0, space 0, times 0 [ 616.299065][T19113] CPU: 0 UID: 0 PID: 19113 Comm: syz.8.4925 Tainted: G U syzkaller #0 PREEMPT(full) [ 616.299107][T19113] Tainted: [U]=USER [ 616.299118][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.299134][T19113] Call Trace: [ 616.299144][T19113] [ 616.299154][T19113] dump_stack_lvl+0x16c/0x1f0 [ 616.299193][T19113] should_fail_ex+0x512/0x640 [ 616.299233][T19113] ? __kmalloc_cache_noprof+0x5f/0x780 [ 616.299265][T19113] should_failslab+0xc2/0x120 [ 616.299300][T19113] __kmalloc_cache_noprof+0x72/0x780 [ 616.299329][T19113] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 616.299361][T19113] ? shrinker_alloc+0xf5/0xbf0 [ 616.299406][T19113] ? shrinker_alloc+0xf5/0xbf0 [ 616.299435][T19113] shrinker_alloc+0xf5/0xbf0 [ 616.299467][T19113] ? mark_held_locks+0x49/0x80 [ 616.299500][T19113] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 616.299536][T19113] ? __pfx_shrinker_alloc+0x10/0x10 [ 616.299572][T19113] ? lockdep_init_map_type+0x5c/0x280 [ 616.299608][T19113] ? __raw_spin_lock_init+0x3a/0x110 [ 616.299643][T19113] ? __init_rwsem+0x12d/0x1b0 [ 616.299684][T19113] alloc_super+0x776/0xb60 [ 616.299719][T19113] sget_fc+0x116/0xc20 [ 616.299746][T19113] ? __pfx_set_anon_super_fc+0x10/0x10 [ 616.299788][T19113] ? __pfx_mqueue_fill_super+0x10/0x10 [ 616.299821][T19113] get_tree_nodev+0x28/0x190 [ 616.299849][T19113] mqueue_get_tree+0xf1/0x130 [ 616.299881][T19113] vfs_get_tree+0x8e/0x340 [ 616.299918][T19113] fc_mount_longterm+0x1a/0x270 [ 616.299957][T19113] mq_init_ns+0x426/0x620 [ 616.299998][T19113] copy_ipcs+0x2d6/0x550 [ 616.300039][T19113] create_new_namespaces+0x20a/0xa90 [ 616.300069][T19113] ? security_capable+0x7e/0x260 [ 616.300111][T19113] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 616.300145][T19113] ksys_unshare+0x45b/0xa40 [ 616.300180][T19113] ? __pfx_ksys_unshare+0x10/0x10 [ 616.300217][T19113] ? xfd_validate_state+0x61/0x180 [ 616.300264][T19113] __x64_sys_unshare+0x31/0x40 [ 616.300297][T19113] do_syscall_64+0xcd/0xfa0 [ 616.300331][T19113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.300360][T19113] RIP: 0033:0x7f347818f6c9 [ 616.300389][T19113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.300416][T19113] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 616.300442][T19113] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 616.300461][T19113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 616.300478][T19113] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 616.300495][T19113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.300510][T19113] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 616.300549][T19113] [ 617.281435][T19129] netlink: 74 bytes leftover after parsing attributes in process `syz.8.4931'. [ 617.614639][T19014] Bluetooth: hci11: command 0x040f tx timeout [ 618.196450][T19150] vhci_hcd: pdev 61162496 [ 618.600660][T19160] netlink: 'syz.9.4942': attribute type 4 has an invalid length. [ 618.946227][T19170] FAULT_INJECTION: forcing a failure. [ 618.946227][T19170] name failslab, interval 1, probability 0, space 0, times 0 [ 618.990643][T19170] CPU: 0 UID: 0 PID: 19170 Comm: syz.9.4946 Tainted: G U syzkaller #0 PREEMPT(full) [ 618.990689][T19170] Tainted: [U]=USER [ 618.990699][T19170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.990715][T19170] Call Trace: [ 618.990725][T19170] [ 618.990735][T19170] dump_stack_lvl+0x16c/0x1f0 [ 618.990773][T19170] should_fail_ex+0x512/0x640 [ 618.990811][T19170] ? fs_reclaim_acquire+0xae/0x150 [ 618.990846][T19170] should_failslab+0xc2/0x120 [ 618.990880][T19170] __kmalloc_noprof+0xdd/0x880 [ 618.990918][T19170] ? ima_alloc_init_template+0x19d/0x720 [ 618.990966][T19170] ? ima_alloc_init_template+0x19d/0x720 [ 618.991004][T19170] ima_alloc_init_template+0x19d/0x720 [ 618.991053][T19170] ? take_dentry_name_snapshot+0x319/0x7d0 [ 618.991096][T19170] ima_store_measurement+0x1eb/0x5c0 [ 618.991125][T19170] ? __pfx_ima_store_measurement+0x10/0x10 [ 618.991153][T19170] ? vfs_getxattr_alloc+0xec/0x350 [ 618.991189][T19170] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 618.991233][T19170] process_measurement+0x1ddb/0x23e0 [ 618.991280][T19170] ? __lock_acquire+0x622/0x1c90 [ 618.991316][T19170] ? __pfx_process_measurement+0x10/0x10 [ 618.991352][T19170] ? __kasan_slab_alloc+0x89/0x90 [ 618.991380][T19170] ? security_file_alloc+0x34/0x2b0 [ 618.991405][T19170] ? alloc_empty_file+0x73/0x1e0 [ 618.991449][T19170] ? alloc_file_pseudo+0x13a/0x230 [ 618.991493][T19170] ? find_held_lock+0x2b/0x80 [ 618.991567][T19170] ima_file_mmap+0x1b1/0x1d0 [ 618.991602][T19170] ? __pfx_ima_file_mmap+0x10/0x10 [ 618.991649][T19170] security_mmap_file+0x88c/0x990 [ 618.991679][T19170] vm_mmap_pgoff+0xec/0x470 [ 618.991717][T19170] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 618.991748][T19170] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 618.991787][T19170] ? hugetlbfs_get_inode+0x31f/0x730 [ 618.991829][T19170] ksys_mmap_pgoff+0x1c8/0x5c0 [ 618.991868][T19170] __x64_sys_mmap+0x125/0x190 [ 618.991911][T19170] do_syscall_64+0xcd/0xfa0 [ 618.991946][T19170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.991973][T19170] RIP: 0033:0x7f44f698f6c9 [ 618.991996][T19170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.992023][T19170] RSP: 002b:00007f44f7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 618.992050][T19170] RAX: ffffffffffffffda RBX: 00007f44f6be5fa0 RCX: 00007f44f698f6c9 [ 618.992069][T19170] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 618.992086][T19170] RBP: 00007f44f6a11f91 R08: ffffffffffffffff R09: 0000300000000000 [ 618.992105][T19170] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 618.992120][T19170] R13: 00007f44f6be6038 R14: 00007f44f6be5fa0 R15: 00007ffc8f9f3758 [ 618.992155][T19170] [ 618.995285][ T30] audit: type=1804 audit(4294985680.155:17): pid=19170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.9.4946" name="anon_hugepage" dev="hugetlbfs" ino=69804 res=0 errno=0 [ 619.691633][T19014] Bluetooth: hci11: command 0x040f tx timeout [ 620.859392][T19192] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4951'. [ 620.868584][T19192] macvtap0: entered promiscuous mode [ 621.033810][T19196] FAULT_INJECTION: forcing a failure. [ 621.033810][T19196] name failslab, interval 1, probability 0, space 0, times 0 [ 621.075723][T19196] CPU: 1 UID: 0 PID: 19196 Comm: syz.8.4961 Tainted: G U syzkaller #0 PREEMPT(full) [ 621.075766][T19196] Tainted: [U]=USER [ 621.075775][T19196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.075790][T19196] Call Trace: [ 621.075804][T19196] [ 621.075814][T19196] dump_stack_lvl+0x16c/0x1f0 [ 621.075851][T19196] should_fail_ex+0x512/0x640 [ 621.075890][T19196] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 621.075924][T19196] should_failslab+0xc2/0x120 [ 621.075956][T19196] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 621.075984][T19196] ? __d_alloc+0x32/0xae0 [ 621.076030][T19196] ? __d_alloc+0x32/0xae0 [ 621.076060][T19196] __d_alloc+0x32/0xae0 [ 621.076095][T19196] d_alloc_parallel+0x111/0x1510 [ 621.076142][T19196] ? find_held_lock+0x2b/0x80 [ 621.076171][T19196] ? __d_lookup+0x25c/0x4a0 [ 621.076210][T19196] ? __pfx_d_alloc_parallel+0x10/0x10 [ 621.076247][T19196] ? __d_lookup+0x266/0x4a0 [ 621.076280][T19196] ? lockdep_init_map_type+0x5c/0x280 [ 621.076318][T19196] ? lockdep_init_map_type+0x5c/0x280 [ 621.076360][T19196] proc_fill_cache+0x2e6/0x470 [ 621.076393][T19196] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 621.076429][T19196] ? __pfx_proc_fill_cache+0x10/0x10 [ 621.076500][T19196] proc_pident_readdir+0x1bc/0x530 [ 621.076543][T19196] iterate_dir+0x296/0xaf0 [ 621.076587][T19196] __x64_sys_getdents64+0x13c/0x2c0 [ 621.076624][T19196] ? __x64_sys_futex+0x1e9/0x4c0 [ 621.076660][T19196] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 621.076697][T19196] ? __x64_sys_openat+0x174/0x210 [ 621.076734][T19196] ? __pfx_filldir64+0x10/0x10 [ 621.076786][T19196] do_syscall_64+0xcd/0xfa0 [ 621.076822][T19196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.076848][T19196] RIP: 0033:0x7f347818f6c9 [ 621.076871][T19196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.076898][T19196] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 621.076924][T19196] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 621.076942][T19196] RDX: 0000000000000803 RSI: 0000000000000000 RDI: 0000000000000005 [ 621.076959][T19196] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 0000000000000000 [ 621.076976][T19196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.076992][T19196] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 621.077038][T19196] [ 621.846250][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.862074][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 621.923112][T19202] FAULT_INJECTION: forcing a failure. [ 621.923112][T19202] name failslab, interval 1, probability 0, space 0, times 0 [ 621.935917][T19202] CPU: 1 UID: 0 PID: 19202 Comm: syz.9.4954 Tainted: G U syzkaller #0 PREEMPT(full) [ 621.935960][T19202] Tainted: [U]=USER [ 621.935970][T19202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.935986][T19202] Call Trace: [ 621.935997][T19202] [ 621.936008][T19202] dump_stack_lvl+0x16c/0x1f0 [ 621.936045][T19202] should_fail_ex+0x512/0x640 [ 621.936083][T19202] ? __kmalloc_noprof+0xca/0x880 [ 621.936127][T19202] should_failslab+0xc2/0x120 [ 621.936163][T19202] __kmalloc_noprof+0xdd/0x880 [ 621.936203][T19202] ? __list_lru_init+0xe8/0x4c0 [ 621.936236][T19202] ? __list_lru_init+0xe8/0x4c0 [ 621.936261][T19202] __list_lru_init+0xe8/0x4c0 [ 621.936291][T19202] alloc_super+0x86d/0xb60 [ 621.936327][T19202] sget_fc+0x116/0xc20 [ 621.936353][T19202] ? __pfx_set_anon_super_fc+0x10/0x10 [ 621.936395][T19202] ? __pfx_mqueue_fill_super+0x10/0x10 [ 621.936429][T19202] get_tree_nodev+0x28/0x190 [ 621.936459][T19202] mqueue_get_tree+0xf1/0x130 [ 621.936493][T19202] vfs_get_tree+0x8e/0x340 [ 621.936531][T19202] fc_mount_longterm+0x1a/0x270 [ 621.936570][T19202] mq_init_ns+0x426/0x620 [ 621.936611][T19202] copy_ipcs+0x2d6/0x550 [ 621.936652][T19202] create_new_namespaces+0x20a/0xa90 [ 621.936683][T19202] ? security_capable+0x7e/0x260 [ 621.936724][T19202] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 621.936757][T19202] ksys_unshare+0x45b/0xa40 [ 621.936791][T19202] ? __pfx_ksys_unshare+0x10/0x10 [ 621.936827][T19202] ? xfd_validate_state+0x61/0x180 [ 621.936874][T19202] __x64_sys_unshare+0x31/0x40 [ 621.936915][T19202] do_syscall_64+0xcd/0xfa0 [ 621.936952][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.936980][T19202] RIP: 0033:0x7f44f698f6c9 [ 621.937002][T19202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.937028][T19202] RSP: 002b:00007f44f7777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 621.937054][T19202] RAX: ffffffffffffffda RBX: 00007f44f6be5fa0 RCX: 00007f44f698f6c9 [ 621.937072][T19202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 621.937089][T19202] RBP: 00007f44f6a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 621.937105][T19202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.937122][T19202] R13: 00007f44f6be6038 R14: 00007f44f6be5fa0 R15: 00007ffc8f9f3758 [ 621.937157][T19202] [ 622.660886][T19209] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4956'. [ 622.800692][T19212] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 8 [ 624.284646][T19249] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 8 [ 625.057516][T19264] CIFS: VFS: Unsupported security flags: 0x30 [ 625.160252][T19266] FAULT_INJECTION: forcing a failure. [ 625.160252][T19266] name failslab, interval 1, probability 0, space 0, times 0 [ 625.198849][T19266] CPU: 1 UID: 0 PID: 19266 Comm: syz.8.4979 Tainted: G U syzkaller #0 PREEMPT(full) [ 625.198892][T19266] Tainted: [U]=USER [ 625.198902][T19266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.198918][T19266] Call Trace: [ 625.198929][T19266] [ 625.198939][T19266] dump_stack_lvl+0x16c/0x1f0 [ 625.198979][T19266] should_fail_ex+0x512/0x640 [ 625.199018][T19266] ? __kmalloc_noprof+0xca/0x880 [ 625.199064][T19266] should_failslab+0xc2/0x120 [ 625.199101][T19266] __kmalloc_noprof+0xdd/0x880 [ 625.199139][T19266] ? __pfx_sprintf+0x10/0x10 [ 625.199165][T19266] ? do_syscall_64+0xcd/0xfa0 [ 625.199195][T19266] ? ima_write_template_field_data+0x5d/0x1f0 [ 625.199234][T19266] ? ima_write_template_field_data+0x5d/0x1f0 [ 625.199266][T19266] ima_write_template_field_data+0x5d/0x1f0 [ 625.199304][T19266] ima_eventdigest_init_common+0x154/0x430 [ 625.199340][T19266] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 625.199396][T19266] ? trace_kmalloc+0x2b/0xd0 [ 625.199426][T19266] ? __kmalloc_noprof+0x34f/0x880 [ 625.199466][T19266] ? ima_alloc_init_template+0x19d/0x720 [ 625.199514][T19266] ima_alloc_init_template+0x3a0/0x720 [ 625.199563][T19266] ima_store_measurement+0x1eb/0x5c0 [ 625.199593][T19266] ? __pfx_ima_store_measurement+0x10/0x10 [ 625.199621][T19266] ? vfs_getxattr_alloc+0xec/0x350 [ 625.199659][T19266] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 625.199710][T19266] process_measurement+0x1ddb/0x23e0 [ 625.199759][T19266] ? __lock_acquire+0x622/0x1c90 [ 625.199795][T19266] ? __pfx_process_measurement+0x10/0x10 [ 625.199832][T19266] ? __kasan_slab_alloc+0x89/0x90 [ 625.199863][T19266] ? security_file_alloc+0x34/0x2b0 [ 625.199894][T19266] ? alloc_empty_file+0x73/0x1e0 [ 625.199928][T19266] ? alloc_file_pseudo+0x13a/0x230 [ 625.199971][T19266] ? find_held_lock+0x2b/0x80 [ 625.200043][T19266] ima_file_mmap+0x1b1/0x1d0 [ 625.200079][T19266] ? __pfx_ima_file_mmap+0x10/0x10 [ 625.200126][T19266] security_mmap_file+0x88c/0x990 [ 625.200156][T19266] vm_mmap_pgoff+0xec/0x470 [ 625.200194][T19266] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 625.200225][T19266] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 625.200264][T19266] ? hugetlbfs_get_inode+0x31f/0x730 [ 625.200306][T19266] ksys_mmap_pgoff+0x1c8/0x5c0 [ 625.200346][T19266] __x64_sys_mmap+0x125/0x190 [ 625.200388][T19266] do_syscall_64+0xcd/0xfa0 [ 625.200422][T19266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.200449][T19266] RIP: 0033:0x7f347818f6c9 [ 625.200471][T19266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.200496][T19266] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 625.200522][T19266] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 625.200541][T19266] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 625.200557][T19266] RBP: 00007f3478211f91 R08: ffffffffffffffff R09: 0000300000000000 [ 625.200576][T19266] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 625.200592][T19266] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 625.200631][T19266] [ 625.203147][ T30] audit: type=1804 audit(4294985686.397:18): pid=19266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.8.4979" name="anon_hugepage" dev="hugetlbfs" ino=69269 res=0 errno=0 [ 627.593953][T19313] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 629.452977][T19345] FAULT_INJECTION: forcing a failure. [ 629.452977][T19345] name fail_futex, interval 1, probability 0, space 0, times 0 [ 629.472772][ T31] INFO: task syz-executor:5826 blocked for more than 143 seconds. [ 629.480631][ T31] Tainted: G U syzkaller #0 [ 629.496915][T19345] CPU: 1 UID: 0 PID: 19345 Comm: syz.8.5010 Tainted: G U syzkaller #0 PREEMPT(full) [ 629.496958][T19345] Tainted: [U]=USER [ 629.496967][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.496983][T19345] Call Trace: [ 629.496992][T19345] [ 629.497004][T19345] dump_stack_lvl+0x16c/0x1f0 [ 629.497040][T19345] should_fail_ex+0x512/0x640 [ 629.497083][T19345] get_futex_key+0xff0/0x1560 [ 629.497121][T19345] ? __pfx_get_futex_key+0x10/0x10 [ 629.497156][T19345] ? get_futex_key+0x5b4/0x1560 [ 629.497195][T19345] futex_wait_setup+0x9d/0x550 [ 629.497230][T19345] futex_wait_requeue_pi+0x241/0x830 [ 629.497271][T19345] ? futex_unqueue+0x13d/0x2c0 [ 629.497301][T19345] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 629.497340][T19345] ? __futex_wait+0x24b/0x2f0 [ 629.497366][T19345] ? __pfx___futex_wait+0x10/0x10 [ 629.497415][T19345] ? futex_private_hash_put+0xd5/0x190 [ 629.497453][T19345] ? __pfx_futex_wake_mark+0x10/0x10 [ 629.497503][T19345] ? do_writev+0x218/0x340 [ 629.497536][T19345] do_futex+0x2ae/0x350 [ 629.497581][T19345] ? __pfx_do_futex+0x10/0x10 [ 629.497614][T19345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 629.497654][T19345] ? __sys_recvmsg+0x189/0x220 [ 629.497684][T19345] __x64_sys_futex+0x1e0/0x4c0 [ 629.497723][T19345] ? __pfx___x64_sys_futex+0x10/0x10 [ 629.497759][T19345] ? xfd_validate_state+0x61/0x180 [ 629.497806][T19345] do_syscall_64+0xcd/0xfa0 [ 629.497840][T19345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.497867][T19345] RIP: 0033:0x7f347818f6c9 [ 629.497888][T19345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.497914][T19345] RSP: 002b:00007f3479087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 629.497940][T19345] RAX: ffffffffffffffda RBX: 00007f34783e5fa0 RCX: 00007f347818f6c9 [ 629.497958][T19345] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000000 [ 629.497975][T19345] RBP: 00007f3478211f91 R08: 0000000000000000 R09: 00000000fffffffa [ 629.497992][T19345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.498008][T19345] R13: 00007f34783e6038 R14: 00007f34783e5fa0 R15: 00007ffc0a8bc908 [ 629.498044][T19345] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 629.841951][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 629.860408][ T31] task:syz-executor state:D stack:23704 pid:5826 tgid:5826 ppid:1 task_flags:0x400140 flags:0x00080002 [ 629.900269][ T31] Call Trace: [ 629.909944][ T31] [ 629.913042][ T31] __schedule+0x1190/0x5de0 [ 629.936513][ T31] ? __lock_acquire+0x622/0x1c90 [ 629.959732][ T31] ? __pfx___schedule+0x10/0x10 [ 629.979578][ T31] ? find_held_lock+0x2b/0x80 [ 629.984302][ T31] ? schedule+0x2d7/0x3a0 [ 630.008951][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 630.029155][ T31] schedule+0xe7/0x3a0 [ 630.033772][ T31] schedule_preempt_disabled+0x13/0x30 [ 630.059174][ T31] __mutex_lock+0x818/0x1060 [ 630.063816][ T31] ? __lock_acquire+0x622/0x1c90 [ 630.074248][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 630.089012][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 630.094199][ T31] ? net_generic+0xea/0x2a0 [ 630.098736][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 630.118866][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 630.124191][ T31] nfsd_umount+0x48/0xe0 [ 630.139372][ T31] deactivate_locked_super+0xc1/0x1a0 [ 630.147960][ T31] deactivate_super+0xde/0x100 [ 630.153698][ T31] cleanup_mnt+0x225/0x450 [ 630.158139][ T31] task_work_run+0x150/0x240 [ 630.178678][ T31] ? __pfx_task_work_run+0x10/0x10 [ 630.183872][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 630.197129][ T31] exit_to_user_mode_loop+0xec/0x130 [ 630.212193][ T31] do_syscall_64+0x426/0xfa0 [ 630.216932][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.236043][ T31] RIP: 0033:0x7fca73d909f7 [ 630.240923][ T31] RSP: 002b:00007ffde1feb248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 630.252882][ T31] RAX: 0000000000000000 RBX: 00007fca73e11d7d RCX: 00007fca73d909f7 [ 630.278077][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1feb300 [ 630.287205][ T31] RBP: 00007ffde1feb300 R08: 0000000000000000 R09: 0000000000000000 [ 630.298380][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde1fec390 [ 630.311772][ T31] R13: 00007fca73e11d7d R14: 0000000000076125 R15: 00007ffde1fec3d0 [ 630.333215][ T31] [ 630.378778][T14750] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 630.389748][T14750] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 630.400924][T14750] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 630.416883][T14750] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 630.427698][T14750] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 630.435540][ T31] INFO: task syz-executor:14748 blocked for more than 144 seconds. [ 630.467042][ T31] Tainted: G U syzkaller #0 [ 630.474493][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.503235][ T31] task:syz-executor state:D stack:23976 pid:14748 tgid:14748 ppid:1 task_flags:0x400140 flags:0x00080002 [ 630.546664][ T31] Call Trace: [ 630.554268][ T31] [ 630.566524][ T31] __schedule+0x1190/0x5de0 [ 630.571071][ T31] ? check_path.constprop.0+0x24/0x50 [ 630.616267][ T31] ? __lock_acquire+0x622/0x1c90 [ 630.621282][ T31] ? __pfx___schedule+0x10/0x10 [ 630.648055][ T31] ? find_held_lock+0x2b/0x80 [ 630.666289][ T31] ? schedule+0x2d7/0x3a0 [ 630.670681][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 630.705932][ T31] schedule+0xe7/0x3a0 [ 630.710066][ T31] schedule_preempt_disabled+0x13/0x30 [ 630.715549][ T31] __mutex_lock+0x818/0x1060 [ 630.745740][ T31] ? __lock_acquire+0x622/0x1c90 [ 630.750743][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 630.855015][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 630.860702][ T31] ? net_generic+0xea/0x2a0 [ 630.881374][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 630.903734][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 630.938425][ T31] nfsd_umount+0x48/0xe0 [ 630.942775][ T31] deactivate_locked_super+0xc1/0x1a0 [ 630.977587][ T31] deactivate_super+0xde/0x100 [ 631.004889][ T31] cleanup_mnt+0x225/0x450 [ 631.009381][ T31] task_work_run+0x150/0x240 [ 631.014015][ T31] ? __pfx_task_work_run+0x10/0x10 [ 631.041180][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 631.054000][ T31] exit_to_user_mode_loop+0xec/0x130 [ 631.085019][ T31] do_syscall_64+0x426/0xfa0 [ 631.100037][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.137011][ T31] RIP: 0033:0x7f0bea9909f7 [ 631.141484][ T31] RSP: 002b:00007ffd78d0e168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 631.173376][ T31] RAX: 0000000000000000 RBX: 00007f0beaa11d7d RCX: 00007f0bea9909f7 [ 631.181425][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd78d0e220 [ 631.247106][ T31] RBP: 00007ffd78d0e220 R08: 0000000000000000 R09: 0000000000000000 [ 631.333734][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd78d0f2b0 [ 631.341764][ T31] R13: 00007f0beaa11d7d R14: 00000000000753ba R15: 00007ffd78d0f2f0 [ 631.351870][ T31] [ 631.354997][ T31] INFO: task syz.2.3602:15483 blocked for more than 186 seconds. [ 631.365335][ T31] Tainted: G U syzkaller #0 [ 631.372561][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.381252][ T31] task:syz.2.3602 state:D stack:27176 pid:15483 tgid:15482 ppid:9852 task_flags:0x400140 flags:0x00080006 [ 631.395371][ T31] Call Trace: [ 631.398761][ T31] [ 631.401703][ T31] __schedule+0x1190/0x5de0 [ 631.439858][ T31] ? __lock_acquire+0x622/0x1c90 [ 631.445282][ T31] ? __pfx___schedule+0x10/0x10 [ 631.450395][ T31] ? find_held_lock+0x2b/0x80 [ 631.456378][ T31] ? schedule+0x2d7/0x3a0 [ 631.460740][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 631.467365][ T31] schedule+0xe7/0x3a0 [ 631.472093][ T31] schedule_preempt_disabled+0x13/0x30 [ 631.477660][ T31] __mutex_lock+0x818/0x1060 [ 631.482385][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 631.487349][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 631.493528][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 631.501351][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 631.506488][ T31] ? __asan_memset+0x23/0x50 [ 631.511086][ T31] ? __nla_validate_parse+0x600/0x2880 [ 631.516713][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 631.522557][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 631.528184][ T31] ? rcu_is_watching+0x12/0xc0 [ 631.535493][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 631.541900][ T31] ? __nla_parse+0x40/0x60 [ 631.546338][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 631.553801][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 631.561188][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 631.566803][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.574849][ T31] ? rcu_is_watching+0x12/0xc0 [ 631.579641][ T31] ? bpf_lsm_capable+0x9/0x10 [ 631.584354][ T31] ? security_capable+0x7e/0x260 [ 631.589322][ T31] genl_rcv_msg+0x55c/0x800 [ 631.594571][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.601357][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 631.607554][ T31] netlink_rcv_skb+0x158/0x420 [ 631.612743][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.617785][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.623217][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 631.628580][ T31] genl_rcv+0x28/0x40 [ 631.632862][ T31] netlink_unicast+0x5aa/0x870 [ 631.638090][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 631.643494][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 631.648268][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.653611][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 631.659695][ T31] ____sys_sendmsg+0xa98/0xc70 [ 631.664516][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 631.670613][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.676829][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 631.682461][ T31] ___sys_sendmsg+0x134/0x1d0 [ 631.687129][ T31] ? find_held_lock+0x2b/0x80 [ 631.692006][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.700119][ T31] ? __lock_acquire+0x622/0x1c90 [ 631.705265][ T31] __sys_sendmsg+0x16d/0x220 [ 631.709869][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 631.715039][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 631.720005][ T31] do_syscall_64+0xcd/0xfa0 [ 631.724578][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.730533][ T31] RIP: 0033:0x7f9d3fb8f6c9 [ 631.734958][ T31] RSP: 002b:00007f9d409a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.744360][ T31] RAX: ffffffffffffffda RBX: 00007f9d3fde5fa0 RCX: 00007f9d3fb8f6c9 [ 631.752417][ T31] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000002 [ 631.760435][ T31] RBP: 00007f9d3fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 631.768389][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.778306][ T31] R13: 00007f9d3fde6038 R14: 00007f9d3fde5fa0 R15: 00007ffef13be558 [ 631.786873][ T31] [ 631.804293][ T31] INFO: task syz.1.3914:16288 blocked for more than 145 seconds. [ 631.812200][ T31] Tainted: G U syzkaller #0 [ 631.818722][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.827499][ T31] task:syz.1.3914 state:D stack:29096 pid:16288 tgid:16282 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 631.840274][ T31] Call Trace: [ 631.843582][ T31] [ 631.846522][ T31] __schedule+0x1190/0x5de0 [ 631.851752][ T31] ? check_path.constprop.0+0x24/0x50 [ 631.857167][ T31] ? __lock_acquire+0x622/0x1c90 [ 631.862813][ T31] ? __pfx___schedule+0x10/0x10 [ 631.870682][ T31] ? find_held_lock+0x2b/0x80 [ 631.875396][ T31] ? schedule+0x2d7/0x3a0 [ 631.885786][ T31] ? expkey_flush+0x20/0x90 [ 631.890384][ T31] schedule+0xe7/0x3a0 [ 631.894473][ T31] schedule_preempt_disabled+0x13/0x30 [ 631.900238][ T31] __mutex_lock+0x818/0x1060 [ 631.905467][ T31] ? expkey_flush+0x20/0x90 [ 631.910118][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 631.915176][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 631.920652][ T31] ? _raw_spin_unlock+0x28/0x50 [ 631.925527][ T31] ? __pfx_cache_clean+0x10/0x10 [ 631.930608][ T31] ? __pfx___might_resched+0x10/0x10 [ 631.935918][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 631.941571][ T31] ? expkey_flush+0x20/0x90 [ 631.946113][ T31] expkey_flush+0x20/0x90 [ 631.950513][ T31] write_flush.constprop.0+0x2af/0x3d0 [ 631.955999][ T31] ? __pfx_write_flush.constprop.0+0x10/0x10 [ 631.962127][ T31] ? iovec_from_user+0xbb/0x140 [ 631.967013][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 631.972640][ T31] proc_reg_write+0x240/0x330 [ 631.977345][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 631.983543][ T31] vfs_writev+0x5df/0xde0 [ 631.987908][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 631.992861][ T31] ? __mutex_lock+0x1c5/0x1060 [ 631.997660][ T31] ? __lock_acquire+0x622/0x1c90 [ 632.002899][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 632.008724][ T31] ? __fget_files+0x20e/0x3c0 [ 632.016249][ T31] ? do_writev+0x132/0x340 [ 632.028571][ T31] do_writev+0x132/0x340 [ 632.040520][ T31] ? __pfx_do_writev+0x10/0x10 [ 632.045722][ T31] do_syscall_64+0xcd/0xfa0 [ 632.051469][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.057391][ T31] RIP: 0033:0x7efead78f6c9 [ 632.061885][ T31] RSP: 002b:00007efeae5ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 632.070408][ T31] RAX: ffffffffffffffda RBX: 00007efead9e6090 RCX: 00007efead78f6c9 [ 632.078845][ T31] RDX: 000000000000000a RSI: 0000200000000240 RDI: 0000000000000003 [ 632.088355][ T31] RBP: 00007efead811f91 R08: 0000000000000000 R09: 0000000000000000 [ 632.096853][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.106109][ T31] R13: 00007efead9e6128 R14: 00007efead9e6090 R15: 00007ffc9a2828c8 [ 632.114322][ T31] [ 632.117441][ T31] [ 632.117441][ T31] Showing all locks held in the system: [ 632.129052][ T31] 1 lock held by khungtaskd/31: [ 632.133952][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 632.160798][ T31] 3 locks held by kworker/u8:2/36: [ 632.165964][ T31] #0: ffff8880b853a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 632.176055][ T31] #1: ffff888098090018 (&pid_list->lock){-.-.}-{2:2}, at: trace_pid_list_is_set+0x4c/0x150 [ 632.187718][ T31] #2: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 632.197227][ T31] 2 locks held by kworker/u8:4/70: [ 632.202402][ T31] #0: ffff888141791148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 632.215894][ T31] #1: ffffc9000217fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 632.227502][ T31] 3 locks held by kworker/u8:5/144: [ 632.232838][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 632.244220][ T31] #1: ffffc90002ed7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 632.254665][ T31] #2: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 632.265442][ T31] 2 locks held by kworker/0:2/981: [ 632.271474][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 632.282018][ T31] #1: ffffc90003bafd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 632.292174][ T31] 2 locks held by syz-executor/5826: [ 632.297524][ T31] #0: ffff88802991c0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 632.307859][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 632.318148][ T31] 2 locks held by syz.3.3317/14664: [ 632.323359][ T31] #0: ffffffff9018ec50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.331600][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 632.341932][ T31] 2 locks held by syz-executor/14748: [ 632.347475][ T31] #0: ffff8880277f00e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 632.357824][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 632.367460][ T31] 2 locks held by syz.2.3602/15483: [ 632.372746][ T31] #0: ffffffff9018ec50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.381069][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 632.391653][ T31] 2 locks held by syz-executor/15783: [ 632.397109][ T31] #0: ffff88805ae760e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 632.407462][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 632.417541][ T31] 3 locks held by syz.1.3914/16288: [ 632.422742][ T31] #0: ffff88804a1b8ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 632.432178][ T31] #1: ffff88807a086420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 632.441169][ T31] #2: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x20/0x90 [ 632.450193][ T31] 2 locks held by getty/16415: [ 632.454977][ T31] #0: ffff88814d6a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 632.464842][ T31] #1: ffffc9000215a2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 632.475123][ T31] 2 locks held by syz-executor/16555: [ 632.480578][ T31] #0: ffff88803338c0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 632.491332][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 632.502776][ T31] 2 locks held by syz-executor/16695: [ 632.502923][T14750] Bluetooth: hci12: command tx timeout [ 632.508200][ T31] #0: ffff888058eb60e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 632.524702][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 632.534326][ T31] 2 locks held by syz-executor/16719: [ 632.539739][ T31] #0: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 632.549323][ T31] #1: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 632.559810][ T31] 2 locks held by syz-executor/17480: [ 632.565197][ T31] #0: ffff888090f180e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 632.575568][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 632.589367][ T31] 2 locks held by syz.2.4753/18651: [ 632.595465][ T31] #0: ffff888078a020e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 632.605959][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 632.618109][ T31] 1 lock held by syz-executor/18905: [ 632.623427][ T31] #0: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 632.632549][ T31] 1 lock held by syz.9.5005/19336: [ 632.637690][ T31] #0: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 632.646749][ T31] 1 lock held by syz-executor/19348: [ 632.652036][ T31] #0: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 632.670053][ T31] [ 632.672462][ T31] ============================================= [ 632.672462][ T31] [ 632.681508][ T31] NMI backtrace for cpu 0 [ 632.681530][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 632.681561][ T31] Tainted: [U]=USER [ 632.681568][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.681582][ T31] Call Trace: [ 632.681589][ T31] [ 632.681598][ T31] dump_stack_lvl+0x116/0x1f0 [ 632.681630][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 632.681659][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 632.681685][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 632.681715][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 632.681749][ T31] watchdog+0xf3f/0x1170 [ 632.681776][ T31] ? rcu_is_watching+0x12/0xc0 [ 632.681799][ T31] ? __pfx_watchdog+0x10/0x10 [ 632.681817][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.681844][ T31] ? __kthread_parkme+0x19e/0x250 [ 632.681872][ T31] ? __pfx_watchdog+0x10/0x10 [ 632.681892][ T31] kthread+0x3c5/0x780 [ 632.681922][ T31] ? __pfx_kthread+0x10/0x10 [ 632.681953][ T31] ? rcu_is_watching+0x12/0xc0 [ 632.681974][ T31] ? __pfx_kthread+0x10/0x10 [ 632.682004][ T31] ret_from_fork+0x675/0x7d0 [ 632.682041][ T31] ? __pfx_kthread+0x10/0x10 [ 632.682071][ T31] ret_from_fork_asm+0x1a/0x30 [ 632.682112][ T31] [ 632.682120][ T31] Sending NMI from CPU 0 to CPUs 1: [ 632.822356][ C1] NMI backtrace for cpu 1 [ 632.822380][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U syzkaller #0 PREEMPT(full) [ 632.822415][ C1] Tainted: [U]=USER [ 632.822423][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.822438][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 632.822472][ C1] Code: 77 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 94 2c 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 632.822496][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 632.822516][ C1] RAX: 00000000000c898d RBX: 0000000000000001 RCX: ffffffff8b5d92a9 [ 632.822532][ C1] RDX: 0000000000000000 RSI: ffffffff8da28d30 RDI: ffffffff8bf075c0 [ 632.822548][ C1] RBP: ffffed1003ad6b58 R08: 0000000000000001 R09: ffffed10170a6655 [ 632.822565][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 632.822581][ C1] R13: ffff88801d6b5ac0 R14: ffffffff908248d0 R15: 0000000000000000 [ 632.822598][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 632.822621][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.822637][ C1] CR2: 00007f5001837a10 CR3: 000000000e182000 CR4: 00000000003526f0 [ 632.822653][ C1] Call Trace: [ 632.822661][ C1] [ 632.822670][ C1] default_idle+0x13/0x20 [ 632.822703][ C1] default_idle_call+0x6c/0xb0 [ 632.822736][ C1] do_idle+0x38d/0x500 [ 632.822764][ C1] ? __pfx_do_idle+0x10/0x10 [ 632.822788][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 632.822829][ C1] cpu_startup_entry+0x4f/0x60 [ 632.822854][ C1] start_secondary+0x21d/0x2b0 [ 632.822886][ C1] ? __pfx_start_secondary+0x10/0x10 [ 632.822921][ C1] common_startup_64+0x13e/0x148 [ 632.822954][ C1] [ 633.087657][T19348] chnl_net:caif_netlink_parms(): no params data found [ 633.141549][T16831] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.208324][T19348] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.216085][T19348] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.227132][T19348] bridge_slave_0: entered allmulticast mode [ 633.237560][T19348] bridge_slave_0: entered promiscuous mode [ 633.259384][T16831] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.272606][T19348] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.279741][T19348] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.287152][T19348] bridge_slave_1: entered allmulticast mode [ 633.297307][T19348] bridge_slave_1: entered promiscuous mode [ 633.358856][T16831] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.376310][T19348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.388075][T19348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.422930][T16831] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.454532][T19348] team0: Port device team_slave_0 added [ 633.463867][T19348] team0: Port device team_slave_1 added [ 633.498648][T19348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.505753][T19348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.535784][T19348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.548577][T19348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.555684][T19348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.582450][T19348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.675287][T19348] hsr_slave_0: entered promiscuous mode [ 633.681641][T19348] hsr_slave_1: entered promiscuous mode [ 633.687656][T19348] debugfs: 'hsr0' already exists in 'hsr' [ 633.701414][T19348] Cannot create hsr debugfs directory [ 633.778032][T16831] bridge_slave_1: left allmulticast mode [ 633.783778][T16831] bridge_slave_1: left promiscuous mode [ 633.790351][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.799818][T16831] bridge_slave_0: left allmulticast mode [ 633.805554][T16831] bridge_slave_0: left promiscuous mode [ 633.815929][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.143928][T16831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.155474][T16831] bond0 (unregistering): Released all slaves [ 634.345661][T19348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.447877][T19348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.501761][T16831] hsr_slave_0: left promiscuous mode [ 634.508006][T16831] hsr_slave_1: left promiscuous mode [ 634.514178][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.525184][T16831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.537009][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.544405][T16831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.567380][T14750] Bluetooth: hci12: command tx timeout [ 634.582647][T16831] veth1_macvtap: left promiscuous mode [ 634.595229][T16831] veth0_macvtap: left promiscuous mode [ 634.601679][T16831] veth1_vlan: left promiscuous mode [ 634.608179][T16831] veth0_vlan: left promiscuous mode [ 635.212139][T16831] team0 (unregistering): Port device team_slave_1 removed [ 635.249630][T16831] team0 (unregistering): Port device team_slave_0 removed [ 635.606296][T19348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.704625][T19348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.936353][T19348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 635.955086][T19348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 635.979689][T19348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 635.993657][T19348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 636.080900][T16831] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.190478][T16831] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.235863][T19348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.276201][T19348] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.313209][T16831] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.340597][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.347830][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.392062][T16831] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.413093][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.420249][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.636877][T14750] Bluetooth: hci12: command tx timeout [ 636.729067][T16831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.833089][T16831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.892902][T19348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.969002][T16831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.077400][T16831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.379980][T16831] bridge_slave_1: left allmulticast mode [ 637.391093][T16831] bridge_slave_1: left promiscuous mode [ 637.396977][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.444799][T16831] bridge_slave_0: left allmulticast mode [ 637.450487][T16831] bridge_slave_0: left promiscuous mode [ 637.472849][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.498240][T16831] bridge_slave_1: left allmulticast mode [ 637.512060][T16831] bridge_slave_1: left promiscuous mode [ 637.517877][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.553406][T16831] bridge_slave_0: left allmulticast mode [ 637.559092][T16831] bridge_slave_0: left promiscuous mode [ 637.567866][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.252023][T16831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.263594][T16831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.273706][T16831] bond0 (unregistering): Released all slaves [ 638.554710][T16831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.565720][T16831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.576077][T16831] bond0 (unregistering): Released all slaves [ 638.690842][T19348] veth0_vlan: entered promiscuous mode [ 638.704571][T14750] Bluetooth: hci12: command tx timeout [ 638.740225][T19348] veth1_vlan: entered promiscuous mode [ 638.812015][T19348] veth0_macvtap: entered promiscuous mode [ 638.823484][T19348] veth1_macvtap: entered promiscuous mode [ 638.871626][T19348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.938226][T19348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.954773][T14812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.964068][T14812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.981295][T14812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.991875][T14812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.230027][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.249726][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.305660][T16831] hsr_slave_0: left promiscuous mode [ 639.317999][T16831] hsr_slave_1: left promiscuous mode [ 639.324536][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.333136][T16831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.343139][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.350572][T16831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.367842][T16831] hsr_slave_0: left promiscuous mode [ 639.374417][T16831] hsr_slave_1: left promiscuous mode [ 639.381116][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.388518][T16831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.397363][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.405171][T16831] batman_adv: batadv0: Removing interface: batadv_slave_1