last executing test programs: 1m51.305375147s ago: executing program 2 (id=226): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x149e02, 0x0) mprotect$auto(0x0, 0x8, 0x2000006) mmap$auto(0x8, 0x7ffd, 0xffd, 0x17, 0x3, 0x8000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semctl$auto_SETALL(0x0, 0x9, 0x11, 0x9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/profile\x00', 0x1c0600, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) pipe2$auto(0x0, 0x0) socket(0x2, 0x1, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x7, 0x4) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x13, r0, 0x8000) 1m49.974423749s ago: executing program 2 (id=232): syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) ioperm$auto(0x7, 0x6, 0x2) (async) ioperm$auto(0xffffffff80000001, 0x1, 0x10000) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) 1m49.65745405s ago: executing program 2 (id=233): mmap$auto(0x7, 0x7, 0xdf, 0x30, 0x69a5, 0x7) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_create$auto(0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) r3 = io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x3, 0x5, 0xbc, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x6], {0x6, 0x38, 0x9, 0x80004, 0x4, 0x3, 0x3ff, 0x7fffffff, 0xffff}, {0x2, 0x9, 0x7, 0x2, 0x0, 0xffff13a7, 0x80000006, 0x44a0, 0x1001}}) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x80000001, 0x6, 0x5c}) sendfile$auto(r2, r3, &(0x7f0000000180)=0x4, 0xfe) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r8, r7, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r5, 0xe600}, 0xf) creat$auto(&(0x7f0000000040)='./file0\x00', 0x7) epoll_create$auto(0x3e) 1m44.328177157s ago: executing program 2 (id=248): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000000c0)=0x4000000) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) (async, rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r4 = mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) mq_timedreceive$auto(r4, 0x0, 0x3, 0x0, 0x0) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (rerun: 64) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r6, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async, rerun: 64) mlockall$auto(0x800000000000005) (async, rerun: 64) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) (async) r7 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r7, &(0x7f00000002c0)=""/190, 0xfffffe39) (async, rerun: 64) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f0000000000)="1404000000000000a5") (rerun: 64) 1m44.05066086s ago: executing program 2 (id=249): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000140)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, 0x5b) r1 = prctl$auto(0x1, 0x1, 0x0, 0x10, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x800000000000, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8003) ioctl$auto_AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000300)=0x7) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0xc) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]}) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x1) unshare$auto(0x40000080) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) writev$auto(r5, &(0x7f0000000340)={0x0, 0x500000}, 0x9) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x204000, 0x0) getsockopt$auto_SO_MEMINFO(r3, 0x8, 0x37, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0)=0x1) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r6 = setfsuid$auto(0x0) setreuid$auto(r6, 0x0) 1m42.128359277s ago: executing program 2 (id=258): r0 = socket(0x25, 0x1, 0x0) connect$auto(r0, 0x0, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0xf) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xfff8, 0x1008}, 0x80, 0xd5) (async) connect$auto(0x3, 0x0, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sysinfo$auto(0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x401, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$auto(r1, &(0x7f00000002c0)=@xdp={0x2c, 0x8, r2, 0x2e}, 0x5) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/sit0/proxy_ndp\x00', 0xf22437c7300036b6, 0x0) write$auto(r3, 0x0, 0xa) (async) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0x1}}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c1000, 0x0) read$auto(r4, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xffd8) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio0\x00', 0x200, 0x0) ioctl$auto(r5, 0xc0945662, r5) 1m26.692563325s ago: executing program 32 (id=258): r0 = socket(0x25, 0x1, 0x0) connect$auto(r0, 0x0, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0xf) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xfff8, 0x1008}, 0x80, 0xd5) (async) connect$auto(0x3, 0x0, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sysinfo$auto(0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x401, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$auto(r1, &(0x7f00000002c0)=@xdp={0x2c, 0x8, r2, 0x2e}, 0x5) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/sit0/proxy_ndp\x00', 0xf22437c7300036b6, 0x0) write$auto(r3, 0x0, 0xa) (async) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0x1}}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c1000, 0x0) read$auto(r4, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xffd8) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio0\x00', 0x200, 0x0) ioctl$auto(r5, 0xc0945662, r5) 3.378580597s ago: executing program 4 (id=660): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) ioctl$auto_EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000240)=0xb20) setsockopt$auto_SO_NO_CHECK(r0, 0xfff, 0xb, &(0x7f0000000000)='}(\x00', 0x8) ioctl$auto(r0, 0x4004af07, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) (async) rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) (async) ioctl$auto_EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000240)=0xb20) (async) setsockopt$auto_SO_NO_CHECK(r0, 0xfff, 0xb, &(0x7f0000000000)='}(\x00', 0x8) (async) ioctl$auto(r0, 0x4004af07, r0) (async) 3.377464421s ago: executing program 0 (id=661): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0xfffffc96) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 3.236013014s ago: executing program 4 (id=662): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x400002, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) mlock$auto(0xfbea, 0x10004) madvise$auto(0x8000, 0x87fff, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffc) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r0 = setfsuid$auto(0x0) setuid$auto(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) kcmp$auto(0x0, 0x0, 0x7, 0xffffffffffffffff, r1) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80c0) mkdir$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3.079402689s ago: executing program 1 (id=664): ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x181080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x82) socket(0x848000000015, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty43\x00', 0x101201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x202080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) io_uring_setup$auto(0xe, 0x0) io_uring_setup$auto(0x83, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x20c002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x109500, 0x0) 2.791716526s ago: executing program 1 (id=665): getegid() openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x9, 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xc000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x8a200, 0x0) pread64$auto(r0, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000003, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r1 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) setsockopt$auto(r1, 0x0, 0x20, 0x0, 0x6) 2.727239045s ago: executing program 4 (id=666): r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) move_pages$auto(r0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x108000) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_MARK(r2, 0x6, 0x24, 0x0, &(0x7f0000000240)=0xfffffffe) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x3, 0xe, 0x0, 0x0, 0x9) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/016/001\x00', 0x4c04c1, 0x0) 2.542395807s ago: executing program 3 (id=667): mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x101082, 0x0) ioctl$auto(r1, 0xc0045543, 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) socketpair$auto(0x3, 0x5, 0x8, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) ioctl$auto(r1, 0x400454cc, r0) close_range$auto(0x2, 0xa, 0x0) 2.10220533s ago: executing program 3 (id=668): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) pwrite64$auto(r0, &(0x7f0000000440)=',^\x00', 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x800, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r1 = socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x84) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) socket(0x2b, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="18000000", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/o2hb/live_regions\x00', 0x20000, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) 1.903945864s ago: executing program 3 (id=669): openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci6/force_devcoredump\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x28}}, 0x40480d0) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200002) (async) openat$auto_full_fops_mem(0xffffffffffffff9c, 0x0, 0xb42, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) (async, rerun: 32) mprotect$auto(0xfffff000, 0xa588, 0x6) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r6], 0x24}, 0x1, 0x300, 0x0, 0x404c0c0}, 0x80) (async) mremap$auto(0xffff, 0x4, 0x7fff, 0x7bf0bec4, 0xf) init_module$auto(&(0x7f0000000300)="2f0de30c", 0xffffc, 0x0) 1.782525321s ago: executing program 0 (id=670): mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) r2 = bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r1, 0x3, 0x7f, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1f, 0x4}}, 0x81) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) gettid() fsmount$auto(0xffffffffffffffff, 0x8d5, 0x6) (async) fsmount$auto(0xffffffffffffffff, 0x8d5, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/max_nr_regions\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) (async) sendfile$auto(r3, r3, 0x0, 0x3) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x6, 0x37db}, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) setsockopt$auto(r0, 0xb87, 0x448, &(0x7f0000000080)='l2tp\x00', 0x4) write$auto(r4, &(0x7f00000027c0)='9#dL\xff\x15\x01\x00\x00\x00\x00\x00\x00\x00\xff\v\xb5^w/[\x00', 0x400c) waitid$auto(0x6, r2, &(0x7f0000000100)={@_si_pad}, 0x4, &(0x7f0000000280)={{0x7, 0x4}, {0x2, 0x8}, 0x49, 0x5, 0xff, 0x401, 0x800, 0x0, 0x7, 0x68, 0x1, 0x2, 0x7ff, 0x0, 0x2, 0x7}) 1.661073554s ago: executing program 4 (id=671): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x0, 0x0) mmap$auto(0x0, 0x20006, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x1f, 0x80804, 0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xdc, 0x4000000000000011, r1, 0x2) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x8000059, 0x0) (async) io_uring_setup$auto(0x8000059, 0x0) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) msync$auto(0x0, 0x8000, 0x6) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x900064b6, r0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nullb0/hctx0/busy\x00', 0x40, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x9076, 0x400000000000001, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) memfd_create$auto(0x0, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_seg6(0xfffffffffffffffd, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_seg6(0xfffffffffffffffd, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) read$auto(0x3, 0x0, 0xfdef) r3 = socket(0x27, 0xa, 0x221) getsockopt$auto(r3, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) (async) getsockopt$auto(r3, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x80000, 0x80) (async) r4 = socket(0xa, 0x80000, 0x80) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x5, 0x0, 0x9, 0x0, 0x8000001f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) (async) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x5, 0x0, 0x9, 0x0, 0x8000001f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0\x00', 0x601, 0x0) 1.509833375s ago: executing program 0 (id=672): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x79f, 0x0) (async) io_uring_setup$auto(0x79f, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x20100, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x80342, 0x0) socket(0x2, 0x2, 0x1) (async) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x4, 0x37) (async) socket(0xa, 0x4, 0x37) mmap$auto(0x100000000, 0x1000, 0x3, 0xfffffffffffffff9, 0x40000000000a5, 0x800000007) setsockopt$auto(0xffffffffffffffff, 0x7, 0x2, 0x0, 0xffffbff8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop9\x00', 0x7ed702, 0x0) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/x86/nmi_longest_ns\x00', 0x101000, 0x0) (async) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/x86/nmi_longest_ns\x00', 0x101000, 0x0) getsockopt$auto_SO_TIMESTAMP_OLD(r0, 0x8000, 0x1d, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=0xcd00) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x480, 0x0) (async) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x480, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$auto(r2, 0x89e2, 0x91) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0x401, 0x7ffe) ioctl$auto(0x3, 0x89e0, 0x91) (async) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x400c4d05, 0x5) ioctl$auto(r1, 0x400c4d05, 0x5) (async) ioctl$auto(r1, 0x400c4d05, 0x5) close_range$auto(0xffffffffffffffff, 0x8, 0x0) 1.5085287s ago: executing program 3 (id=673): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/uprobe/format/ref_ctr_offset\x00', 0x700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) select$auto(0x100000e, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x100000000000001, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x800000003, 0x5, 0x7, 0x3, 0x6d39, 0x5, 0x2, 0x3]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x220802, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001100), 0x410440, 0x0) ioctl$auto(0x3, 0xc05c5340, 0x38) mmap$auto(0xfffffffffffffff9, 0x2020009, 0xa, 0x400080000000ebf, r1, 0x7ffe) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r3) r5 = getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r4, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) ioctl$auto(r2, 0x921064a3, 0x1000000000000003) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a332000300800040008800"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xc00000000, 0xfffffffffffffffc) socket(0x1d, 0x2, 0x6) getsockopt$auto(r0, 0x46a, 0x2, 0x0, 0x0) 1.485465841s ago: executing program 1 (id=674): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x10002, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x4000000000400002, 0x0, 0xff, 0x4}, 0xedf1388}, 0x2, 0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r1, &(0x7f0000000140)={0x8, 0x4000000100008}, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x1f) ioctl$auto_BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, &(0x7f0000000680)={@raw=0x5, "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"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycc\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = memfd_create$auto(0x0, 0x4) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video31\x00', 0x640601, 0x0) close_range$auto(r3, r5, 0x3bc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty46\x00', 0x88a42, 0x0) write$auto(0x3, 0x0, 0xfdef) r7 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) ioctl$auto(0x3, 0x541a, r7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r8 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4, @ANYRES16=r8, @ANYBLOB="2395436e84066b209f5b4764a583e0c04fbdfd3b4709af55b1b8cd0720981e8c115ba0f8abedfec5819aa2530eba9c1e1962f3a73a40cb45ed75406c1907a65619fb1d603b5e0ab7007ca4ee7bd8d6243c73c43843f422", @ANYRESHEX=r5, @ANYRES16=r3, @ANYRESDEC=r6, @ANYRESDEC=r1, @ANYRES64=r2], 0x14}, 0x1, 0x0, 0x0, 0x80c2}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r8], 0x1ac}}, 0x40000) 1.074810787s ago: executing program 0 (id=675): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x22, 0x3, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media19\x00', 0x28801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.024394507s ago: executing program 3 (id=676): unshare$auto(0x40000080) r0 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000000)={@_si_pad}, 0x5, &(0x7f0000000080)={{0x3, 0x80000001}, {0x7, 0x10001}, 0x10001, 0x7, 0x1, 0x21, 0x6, 0xe, 0x2, 0x5, 0x1, 0x0, 0x1, 0x7, 0xc404, 0x101}) mmap$auto(0x0, 0x20009, 0xfffffffffffffffd, 0xeb2, 0x8, 0x1008000) unshare$auto(0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0xf, &(0x7f00000001c0)=@bpf_attr_3={0x5, 0xaa, 0x276, 0x0, 0x3, 0x2, 0x8, 0x33, 0xd, "6326bcc7c57ffed984639b375ee8d538", 0x0, 0x3, 0xffffffffffffffff, 0xfffffffc, 0x6, 0x5, 0x0, 0x9, 0x2, 0x7f, @attach_prog_fd, 0xce51, 0x0, 0x7, 0x92c, 0x8}, 0xc) prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x80, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) unshare$auto(0x40000080) setregid$auto(0x81, 0x0) 946.160183ms ago: executing program 1 (id=677): write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61883c13fe44afc3e67b91241c5cf586c524a2687925", 0xa6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) setsockopt$auto(r0, 0x0, 0x60, 0x0, 0x6f7250c4) mmap$auto(0x0, 0x128009, 0xdf, 0xeb3, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2c, 0x1, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x6, 0xc, 0x10, 0x0, 0x0, 0x0, 0x9, 0x1, 0x2, 0x8, 0x9, 0x40000009, 0x2, 0x20000000d, 0x6, 0x3}) r2 = socket(0x28, 0x6, 0x106) getsockopt$auto_SO_MAX_PACING_RATE(r2, 0x6, 0x2f, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = socket(0x3, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) read$auto(0x3, 0x0, 0xf3c) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) mmap$auto(0x0, 0x4020009, 0x5, 0xeb9, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2d, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 890.705194ms ago: executing program 0 (id=678): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000002640), 0x241, 0x0) pwritev$auto(r2, &(0x7f0000002980)={&(0x7f0000002900)="dcf510a2ee", 0x4}, 0x9, 0x6, 0xfffffffffffffffd) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r3, 0x0, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) 762.561324ms ago: executing program 0 (id=679): ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x400040, 0x0) mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) ioctl$auto_BLKROSET(r1, 0x125d, 0x0) fsconfig$auto(0xffffffffffffffff, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x30805, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0xd3a7, 0xfffffffd, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x400005, 0x25, 0x4, @inferred=0x0, @reserved="630d530e55f2940f87c5580dd6d03d326858cba1428368e17dd0ceca88463efa0e31cd124fc844bc62fc6fce5ce6dcdea7d8b0aaa17e657c5969b5b494035f33865acc90360b98bd8e36c3b553f3c18172a2579ad612531a4dccc48e8770223069caf4694e9f7759a0d16ffa4780bc3f828dd4a8cc877abd7dc6ae56ff3f0cce", "7a9fc199a16a2311eacf2fc7ae1d8778dc610400000001000f00000000b6debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cb7c0eb32791702b8d7c2d"}) rt_sigqueueinfo$auto(r2, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e7b, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000080)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x5, 0xe}, 0x5}, 0x1, 0x101) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x40011) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x9, 0x15, 0x8001, 0x1, 0x8, 0x5, 0x8, 0x3fffffffffffff, 0x1, 0x8000000008, 0xfffffffffffffffe, 0xab, 0x2, 0x9]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) 574.198532ms ago: executing program 4 (id=680): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.7/usb23/speed\x00', 0x262004, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x110c230000, 0x8, 0x6) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_RNDRESEEDCRNG2(r1, 0x5207, 0x99) mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0xd528, 0x20000003, 0x9, 0x9, 0x0, 0x7f93, 0x8, 0xb, 0x7ff, 0x7, 0x9}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x220001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf25040000000400190004001a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4004044) close_range$auto(r3, 0xffffffffffffffff, 0x800a) ioctl$auto_RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, &(0x7f0000000180)=0x762) r6 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'tunl0\x00', 0x0}) bpf$auto(0xfffffffd, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x401, r6, @relative_fd=r4, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@link_detach={r2}, 0xc) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r9, 0xc0385720, &(0x7f0000000080)={0x0, "aa8c44a1", 0x6, 0x9, 0x3, 0x0, "9f929aabd06e2686b720bf916f3fa0df"}) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event\x00', 0x46140, 0x0) 571.614768ms ago: executing program 1 (id=681): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x1, 0x0, 0x1f, 0x732}, 0x8}, 0x7, 0x20020000) (async) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x32, 0x0, 0x7) (async) shutdown$auto(0x200000003, 0x2) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog_thresh\x00', 0x20402, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb-serial/drivers/digi_4/new_id\x00', 0x183841, 0x0) (async) sysfs$auto(0x2, 0x100000000000038, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) (async) write$auto(0x3, 0x0, 0x5c8) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="205c2078027e0dc0023af10e9bfa1babfa20a974ca9a20370a", 0x19) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x104000000000010e, 0xb, 0x0, 0x400) (async) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004840) (async) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x84, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x84}}, 0x40800) 241.989305ms ago: executing program 4 (id=682): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) ioctl$auto(0xffffffffffffffff, 0x4bfa, 0x1) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r2) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xa0, r4, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x8b, 0x2, 0x0, 0x1, [@typed={0x6d, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f"}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic, @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) mmap$auto(0x8c, 0x0, 0x2, 0x16, r0, 0x101) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 215.016659ms ago: executing program 3 (id=683): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) prctl$auto_PR_SET_TSC(0x1a, 0x2f, 0xf, 0x9, 0x9) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) statmount$auto(0x0, 0x0, 0x202, 0x81) (async, rerun: 64) setfsuid$auto(0xee00) (async, rerun: 64) sysfs$auto(0x2, 0x5, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) write$auto(0x3, 0x0, 0x1) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket(0x18, 0x1, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async, rerun: 32) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) (async, rerun: 64) r4 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media8\x00', 0x2, 0x0) (async, rerun: 64) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1f1d02, 0x0) (async, rerun: 32) ioctl$auto(r4, 0x1, r4) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, 0xffffffffffffffff, 0x0) (async) read$auto(r0, 0x0, 0x80000000006) (async) signalfd$auto(r0, 0x0, 0x8) 0s ago: executing program 1 (id=684): add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(0xffffffffffffffff, 0x80000401, 0xfffffffb, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0xb, 0xffffffff, 0xfffffffffffffffe, 0x1, 0xfc2, 0x26f, @inferred, @raw=0x9}) setresgid$auto(0x0, 0xffffffffffffffff, r0) (async) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) socket(0x1d, 0x2, 0x6) (async) socket(0x2, 0x1, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9]}, 0x4, 0x40000081) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) (async) mmap$auto(0x0, 0xeb80, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): wn subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.587848][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.624377][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.633115][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.642507][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.644120][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.650079][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.657621][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.665569][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.672596][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.678825][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.691967][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.699643][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.712437][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.716272][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.720952][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.733947][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.736152][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.749880][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.766905][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.774840][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.789545][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.319895][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 77.334249][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 77.413701][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 77.464227][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 77.586694][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.594365][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.601886][ T5824] bridge_slave_0: entered allmulticast mode [ 77.608997][ T5824] bridge_slave_0: entered promiscuous mode [ 77.643338][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.650582][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.657948][ T5824] bridge_slave_1: entered allmulticast mode [ 77.664863][ T5824] bridge_slave_1: entered promiscuous mode [ 77.672290][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.679480][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.686717][ T5826] bridge_slave_0: entered allmulticast mode [ 77.693695][ T5826] bridge_slave_0: entered promiscuous mode [ 77.730455][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.737655][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.744900][ T5826] bridge_slave_1: entered allmulticast mode [ 77.752227][ T5826] bridge_slave_1: entered promiscuous mode [ 77.798498][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.805751][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.812862][ T5823] bridge_slave_0: entered allmulticast mode [ 77.820126][ T5823] bridge_slave_0: entered promiscuous mode [ 77.827456][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.834583][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.842143][ T5825] bridge_slave_0: entered allmulticast mode [ 77.849169][ T5825] bridge_slave_0: entered promiscuous mode [ 77.859551][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.879863][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.887266][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.894375][ T5823] bridge_slave_1: entered allmulticast mode [ 77.901684][ T5823] bridge_slave_1: entered promiscuous mode [ 77.908863][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.916458][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.923567][ T5825] bridge_slave_1: entered allmulticast mode [ 77.930789][ T5825] bridge_slave_1: entered promiscuous mode [ 77.940598][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.952868][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.004916][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.024883][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.036745][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.079537][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.091089][ T5824] team0: Port device team_slave_0 added [ 78.119927][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.131123][ T5824] team0: Port device team_slave_1 added [ 78.138681][ T5823] team0: Port device team_slave_0 added [ 78.146844][ T5826] team0: Port device team_slave_0 added [ 78.173310][ T5823] team0: Port device team_slave_1 added [ 78.180521][ T5826] team0: Port device team_slave_1 added [ 78.228022][ T5825] team0: Port device team_slave_0 added [ 78.234624][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.241721][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.267717][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.305050][ T5825] team0: Port device team_slave_1 added [ 78.319628][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.326894][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.353365][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.364912][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.372294][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.398829][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.410472][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.417622][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.443722][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.479980][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.487240][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.513219][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.524920][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.532124][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.558326][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.570045][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.577030][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.603229][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.616343][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.623306][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.649567][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.713388][ T5824] hsr_slave_0: entered promiscuous mode [ 78.720141][ T5824] hsr_slave_1: entered promiscuous mode [ 78.785968][ T5837] Bluetooth: hci0: command tx timeout [ 78.804334][ T5823] hsr_slave_0: entered promiscuous mode [ 78.810898][ T5823] hsr_slave_1: entered promiscuous mode [ 78.817178][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 78.822955][ T5823] Cannot create hsr debugfs directory [ 78.854213][ T5825] hsr_slave_0: entered promiscuous mode [ 78.860637][ T5825] hsr_slave_1: entered promiscuous mode [ 78.866376][ T5837] Bluetooth: hci2: command tx timeout [ 78.866394][ T50] Bluetooth: hci1: command tx timeout [ 78.866786][ T5828] Bluetooth: hci3: command tx timeout [ 78.881348][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 78.889252][ T5825] Cannot create hsr debugfs directory [ 78.924440][ T5826] hsr_slave_0: entered promiscuous mode [ 78.930931][ T5826] hsr_slave_1: entered promiscuous mode [ 78.937232][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 78.942961][ T5826] Cannot create hsr debugfs directory [ 79.374774][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.389593][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.400072][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.420371][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.486316][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.496674][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.510789][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.523341][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.627196][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.639470][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.666720][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.673554][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.716328][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.781055][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.795744][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.805842][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.818190][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.836487][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.850985][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.858302][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.881904][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.889025][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.002681][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.074395][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.096082][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.141217][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.148407][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.168102][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.175304][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.194073][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.243124][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.250344][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.271054][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.291388][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.298597][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.323683][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.356492][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.363587][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.400650][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.407846][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.471341][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.723587][ T5824] veth0_vlan: entered promiscuous mode [ 80.754289][ T5824] veth1_vlan: entered promiscuous mode [ 80.832883][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.866064][ T5837] Bluetooth: hci0: command tx timeout [ 80.873550][ T5824] veth0_macvtap: entered promiscuous mode [ 80.893914][ T5824] veth1_macvtap: entered promiscuous mode [ 80.919426][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.947383][ T5828] Bluetooth: hci3: command tx timeout [ 80.947672][ T50] Bluetooth: hci1: command tx timeout [ 80.952868][ T5837] Bluetooth: hci2: command tx timeout [ 80.998572][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.022833][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.051539][ T565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.062051][ T565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.082183][ T5823] veth0_vlan: entered promiscuous mode [ 81.089098][ T565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.098442][ T565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.123768][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.168004][ T5823] veth1_vlan: entered promiscuous mode [ 81.203405][ T5826] veth0_vlan: entered promiscuous mode [ 81.246498][ T5826] veth1_vlan: entered promiscuous mode [ 81.272396][ T5825] veth0_vlan: entered promiscuous mode [ 81.301955][ T5823] veth0_macvtap: entered promiscuous mode [ 81.309093][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.317826][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.340225][ T5823] veth1_macvtap: entered promiscuous mode [ 81.350739][ T5825] veth1_vlan: entered promiscuous mode [ 81.410112][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.423604][ T5826] veth0_macvtap: entered promiscuous mode [ 81.425553][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.437388][ T5826] veth1_macvtap: entered promiscuous mode [ 81.452397][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.467641][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.492818][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.504190][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.523190][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.549561][ T5825] veth0_macvtap: entered promiscuous mode [ 81.557876][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.568364][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.600985][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.638338][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.673640][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.705374][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.731524][ T5825] veth1_macvtap: entered promiscuous mode [ 81.776926][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.795524][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.896915][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.945873][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.020213][ T165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.029728][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.055211][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.074416][ T165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.092628][ T165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.132938][ T165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.174497][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.197368][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.256222][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.279388][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.350719][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.372808][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.382788][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.406404][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.523304][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.537100][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.804623][ T5933] tc_dump_action: action bad kind [ 82.883523][ T5930] FAULT_INJECTION: forcing a failure. [ 82.883523][ T5930] name failslab, interval 1, probability 0, space 0, times 1 [ 82.930217][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 82.930254][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.930278][ T5930] Call Trace: [ 82.930287][ T5930] [ 82.930298][ T5930] dump_stack_lvl+0x100/0x190 [ 82.930343][ T5930] should_fail_ex.cold+0x5/0xa [ 82.930375][ T5930] should_failslab+0xc2/0x120 [ 82.930405][ T5930] __kmalloc_cache_noprof+0x7a/0x6f0 [ 82.930440][ T5930] ? snd_virmidi_input_open+0xc8/0x4d0 [ 82.930469][ T5930] ? __kasan_kmalloc+0xaa/0xb0 [ 82.930518][ T5930] snd_virmidi_input_open+0xc8/0x4d0 [ 82.930553][ T5930] open_substream+0x480/0x9e0 [ 82.930591][ T5930] rawmidi_open_priv+0x524/0x6f0 [ 82.930632][ T5930] snd_rawmidi_open+0x4c9/0xba0 [ 82.930679][ T5930] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 82.930717][ T5930] ? __pfx_default_wake_function+0x10/0x10 [ 82.930746][ T5930] ? soundcore_open+0x231/0x5a0 [ 82.930772][ T5930] ? soundcore_open+0x231/0x5a0 [ 82.930799][ T5930] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 82.930837][ T5930] soundcore_open+0x2e3/0x5a0 [ 82.930868][ T5930] ? __pfx_soundcore_open+0x10/0x10 [ 82.930895][ T5930] chrdev_open+0x234/0x6a0 [ 82.930925][ T5930] ? __pfx_chrdev_open+0x10/0x10 [ 82.930964][ T5930] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 82.931000][ T5930] do_dentry_open+0x6d8/0x1660 [ 82.931025][ T5930] ? __pfx_chrdev_open+0x10/0x10 [ 82.931062][ T5930] vfs_open+0x82/0x3f0 [ 82.931099][ T5930] path_openat+0x208c/0x31a0 [ 82.931139][ T5930] ? __pfx_path_openat+0x10/0x10 [ 82.931182][ T5930] do_file_open+0x20e/0x430 [ 82.931213][ T5930] ? __pfx_do_file_open+0x10/0x10 [ 82.931268][ T5930] ? alloc_fd+0x476/0x790 [ 82.931298][ T5930] ? do_getname+0x191/0x390 [ 82.931335][ T5930] do_sys_openat2+0x10d/0x1e0 [ 82.931369][ T5930] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.931406][ T5930] ? __fget_files+0x21f/0x3d0 [ 82.931439][ T5930] __x64_sys_openat+0x12d/0x210 [ 82.931474][ T5930] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.931523][ T5930] do_syscall_64+0x106/0xf80 [ 82.931559][ T5930] ? clear_bhb_loop+0x40/0x90 [ 82.931594][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.931622][ T5930] RIP: 0033:0x7f988659c799 [ 82.931655][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.931681][ T5930] RSP: 002b:00007f9887515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.931712][ T5930] RAX: ffffffffffffffda RBX: 00007f9886815fa0 RCX: 00007f988659c799 [ 82.931730][ T5930] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 82.931748][ T5930] RBP: 00007f9886632c99 R08: 0000000000000000 R09: 0000000000000000 [ 82.931765][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.931781][ T5930] R13: 00007f9886816038 R14: 00007f9886815fa0 R15: 00007ffef4e6e768 [ 82.931818][ T5930] [ 83.232239][ T5837] Bluetooth: hci1: command tx timeout [ 83.238497][ T5837] Bluetooth: hci0: command tx timeout [ 83.243958][ T5837] Bluetooth: hci2: command tx timeout [ 83.249439][ T5837] Bluetooth: hci3: command tx timeout [ 83.453479][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.581929][ T5940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.900416][ T5958] FAULT_INJECTION: forcing a failure. [ 84.900416][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.928611][ T5958] CPU: 1 UID: 0 PID: 5958 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) [ 84.928650][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.928666][ T5958] Call Trace: [ 84.928675][ T5958] [ 84.928686][ T5958] dump_stack_lvl+0x100/0x190 [ 84.928732][ T5958] should_fail_ex.cold+0x5/0xa [ 84.928766][ T5958] _copy_from_user+0x2e/0xd0 [ 84.928801][ T5958] snd_pcm_oss_write2+0x1c2/0x400 [ 84.928837][ T5958] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 84.928882][ T5958] snd_pcm_oss_write+0x729/0xa30 [ 84.928917][ T5958] ? security_file_permission+0x76/0x210 [ 84.928960][ T5958] vfs_write+0x2aa/0x1070 [ 84.928988][ T5958] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 84.929026][ T5958] ? __pfx_vfs_write+0x10/0x10 [ 84.929050][ T5958] ? find_held_lock+0x2b/0x80 [ 84.929076][ T5958] ? __fget_files+0x215/0x3d0 [ 84.929103][ T5958] ? __fget_files+0x215/0x3d0 [ 84.929136][ T5958] ? __fget_files+0x21f/0x3d0 [ 84.929174][ T5958] ksys_write+0x12a/0x250 [ 84.929200][ T5958] ? __pfx_ksys_write+0x10/0x10 [ 84.929239][ T5958] do_syscall_64+0x106/0xf80 [ 84.929277][ T5958] ? clear_bhb_loop+0x40/0x90 [ 84.929319][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.929348][ T5958] RIP: 0033:0x7f212359c799 [ 84.929372][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.929398][ T5958] RSP: 002b:00007f2121391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.929425][ T5958] RAX: ffffffffffffffda RBX: 00007f2123816270 RCX: 00007f212359c799 [ 84.929444][ T5958] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 84.929461][ T5958] RBP: 00007f2123632c99 R08: 0000000000000000 R09: 0000000000000000 [ 84.929478][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.929495][ T5958] R13: 00007f2123816308 R14: 00007f2123816270 R15: 00007ffeabe70c98 [ 84.929536][ T5958] [ 85.266575][ T50] Bluetooth: hci3: command tx timeout [ 85.272340][ T5837] Bluetooth: hci2: command tx timeout [ 85.275278][ T50] Bluetooth: hci0: command tx timeout [ 85.277790][ T5837] Bluetooth: hci1: command tx timeout [ 85.548177][ T5961] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 85.548177][ T5961] M' is too long [ 85.558942][ T5961] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 85.558942][ T5961] W ' is too long [ 86.007116][ T5965] netlink: 330 bytes leftover after parsing attributes in process `syz.1.12'. [ 86.025351][ T5965] : renamed from team_slave_0 (while UP) [ 86.729750][ T796] cfg80211: failed to load regulatory.db [ 86.922913][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 87.144020][ T5984] Zero length message leads to an empty skb [ 90.620733][ T6033] smpboot: CPU 1 is now offline [ 94.046449][ T6077] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.188189][ T6077] FAULT_INJECTION: forcing a failure. [ 94.188189][ T6077] name failslab, interval 1, probability 0, space 0, times 0 [ 94.329104][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(full) [ 94.329125][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.329143][ T6077] Call Trace: [ 94.329150][ T6077] [ 94.329156][ T6077] dump_stack_lvl+0x100/0x190 [ 94.329182][ T6077] should_fail_ex.cold+0x5/0xa [ 94.329200][ T6077] should_failslab+0xc2/0x120 [ 94.329216][ T6077] __kmalloc_cache_noprof+0x7a/0x6f0 [ 94.329235][ T6077] ? uevent_net_init+0xd3/0x330 [ 94.329255][ T6077] uevent_net_init+0xd3/0x330 [ 94.329270][ T6077] ? __pfx_uevent_net_init+0x10/0x10 [ 94.329286][ T6077] ? __pfx_uevent_net_rcv+0x10/0x10 [ 94.329302][ T6077] ? __kmalloc_noprof+0x320/0x850 [ 94.329327][ T6077] ? __pfx_uevent_net_init+0x10/0x10 [ 94.329341][ T6077] ops_init+0x1e2/0x5f0 [ 94.329364][ T6077] setup_net+0x118/0x3a0 [ 94.329388][ T6077] ? __pfx_setup_net+0x10/0x10 [ 94.329410][ T6077] ? lockdep_init_map_type+0x5c/0x250 [ 94.329430][ T6077] ? mutex_init_lockep+0x110/0x150 [ 94.329452][ T6077] copy_net_ns+0x46f/0x7c0 [ 94.329468][ T6077] create_new_namespaces+0x3ea/0xac0 [ 94.329487][ T6077] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 94.329505][ T6077] ksys_unshare+0x473/0xad0 [ 94.329524][ T6077] ? __pfx_ksys_unshare+0x10/0x10 [ 94.329549][ T6077] __x64_sys_unshare+0x31/0x40 [ 94.329567][ T6077] do_syscall_64+0x106/0xf80 [ 94.329586][ T6077] ? clear_bhb_loop+0x40/0x90 [ 94.329604][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.329618][ T6077] RIP: 0033:0x7f988659c799 [ 94.329631][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.329645][ T6077] RSP: 002b:00007f9887515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.329659][ T6077] RAX: ffffffffffffffda RBX: 00007f9886815fa0 RCX: 00007f988659c799 [ 94.329668][ T6077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 94.329677][ T6077] RBP: 00007f9886632c99 R08: 0000000000000000 R09: 0000000000000000 [ 94.329685][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.329693][ T6077] R13: 00007f9886816038 R14: 00007f9886815fa0 R15: 00007ffef4e6e768 [ 94.329712][ T6077] [ 94.962123][ T6067] nvme_fabrics: missing parameter 'transport=%s' [ 94.968962][ T6067] nvme_fabrics: missing parameter 'nqn=%s' [ 95.105735][ T6069] nvme_fabrics: missing parameter 'transport=%s' [ 95.117471][ T6069] nvme_fabrics: missing parameter 'nqn=%s' [ 95.580195][ T6089] mmap: syz.2.38 (6089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.938732][ T6089] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 98.757714][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.880622][ T6150] FAULT_INJECTION: forcing a failure. [ 98.880622][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 98.933934][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz.1.50 Not tainted syzkaller #0 PREEMPT(full) [ 98.933957][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.933967][ T6150] Call Trace: [ 98.933972][ T6150] [ 98.933978][ T6150] dump_stack_lvl+0x100/0x190 [ 98.934004][ T6150] should_fail_ex.cold+0x5/0xa [ 98.934023][ T6150] should_failslab+0xc2/0x120 [ 98.934038][ T6150] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 98.934060][ T6150] ? __kernfs_new_node+0xd2/0x960 [ 98.934084][ T6150] __kernfs_new_node+0xd2/0x960 [ 98.934106][ T6150] ? __pfx___kernfs_new_node+0x10/0x10 [ 98.934130][ T6150] ? find_held_lock+0x2b/0x80 [ 98.934144][ T6150] ? kernfs_root+0xee/0x2a0 [ 98.934162][ T6150] ? kernfs_root+0xee/0x2a0 [ 98.934185][ T6150] kernfs_new_node+0x11b/0x1a0 [ 98.934210][ T6150] __kernfs_create_file+0x53/0x350 [ 98.934228][ T6150] sysfs_add_file_mode_ns+0x207/0x3c0 [ 98.934252][ T6150] internal_create_group+0x593/0xf40 [ 98.934278][ T6150] ? __pfx_internal_create_group+0x10/0x10 [ 98.934301][ T6150] ? kernfs_create_link+0x1bd/0x240 [ 98.934320][ T6150] internal_create_groups+0x9d/0x150 [ 98.934345][ T6150] device_add+0xf5b/0x1950 [ 98.934364][ T6150] ? __pfx_device_add+0x10/0x10 [ 98.934381][ T6150] ? lockdep_init_map_type+0x5c/0x250 [ 98.934400][ T6150] ? __init_waitqueue_head+0xca/0x150 [ 98.934430][ T6150] netdev_register_kobject+0x1a9/0x3d0 [ 98.934456][ T6150] register_netdevice+0x12e0/0x2210 [ 98.934481][ T6150] ? __pfx_register_netdevice+0x10/0x10 [ 98.934508][ T6150] register_netdev+0x34/0x50 [ 98.934528][ T6150] sit_init_net+0x2c0/0x5f0 [ 98.934545][ T6150] ? __pfx_sit_init_net+0x10/0x10 [ 98.934561][ T6150] ops_init+0x1e2/0x5f0 [ 98.934584][ T6150] setup_net+0x118/0x3a0 [ 98.934605][ T6150] ? __pfx_setup_net+0x10/0x10 [ 98.934624][ T6150] ? lockdep_init_map_type+0x5c/0x250 [ 98.934643][ T6150] ? mutex_init_lockep+0x110/0x150 [ 98.934665][ T6150] copy_net_ns+0x46f/0x7c0 [ 98.934681][ T6150] create_new_namespaces+0x3ea/0xac0 [ 98.934701][ T6150] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 98.934718][ T6150] ksys_unshare+0x473/0xad0 [ 98.934737][ T6150] ? __pfx_ksys_unshare+0x10/0x10 [ 98.934762][ T6150] __x64_sys_unshare+0x31/0x40 [ 98.934779][ T6150] do_syscall_64+0x106/0xf80 [ 98.934800][ T6150] ? clear_bhb_loop+0x40/0x90 [ 98.934818][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.934832][ T6150] RIP: 0033:0x7f212359c799 [ 98.934845][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.934858][ T6150] RSP: 002b:00007f21217f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 98.934872][ T6150] RAX: ffffffffffffffda RBX: 00007f2123815fa0 RCX: 00007f212359c799 [ 98.934881][ T6150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 98.934890][ T6150] RBP: 00007f2123632c99 R08: 0000000000000000 R09: 0000000000000000 [ 98.934898][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.934906][ T6150] R13: 00007f2123816038 R14: 00007f2123815fa0 R15: 00007ffeabe70c98 [ 98.934925][ T6150] [ 100.018269][ T29] audit: type=1800 audit(1774005569.583:2): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.55" name="filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 100.947983][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 100.990055][ T6204] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 101.030197][ T6204] netlink: 5 bytes leftover after parsing attributes in process `syz.1.63'. [ 102.251503][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.265370][ T6248] blktrace: Concurrent blktraces are not allowed on loop2 [ 102.395402][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.828683][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 102.890100][ T6264] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 102.907342][ T6259] nbd: must specify a size in bytes for the device [ 103.436045][ T6259] futex_wake_op: syz.1.74 tries to shift op by -2048; fix this program [ 103.495880][ T6259] futex_wake_op: syz.1.74 tries to shift op by -2048; fix this program [ 103.990891][ T6300] FAULT_INJECTION: forcing a failure. [ 103.990891][ T6300] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 104.059762][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 104.059785][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.059794][ T6300] Call Trace: [ 104.059800][ T6300] [ 104.059806][ T6300] dump_stack_lvl+0x100/0x190 [ 104.059833][ T6300] should_fail_ex.cold+0x5/0xa [ 104.059848][ T6300] ? prepare_alloc_pages+0x16d/0x5f0 [ 104.059866][ T6300] should_fail_alloc_page+0xeb/0x140 [ 104.059883][ T6300] prepare_alloc_pages+0x1f0/0x5f0 [ 104.059906][ T6300] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 104.059932][ T6300] ? __lock_acquire+0x4a5/0x2630 [ 104.059953][ T6300] ? __lock_acquire+0x4a5/0x2630 [ 104.059973][ T6300] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.059996][ T6300] ? __lock_acquire+0x4a5/0x2630 [ 104.060023][ T6300] ? find_held_lock+0x2b/0x80 [ 104.060036][ T6300] ? is_bpf_text_address+0x8a/0x1a0 [ 104.060057][ T6300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.060081][ T6300] ? policy_nodemask+0xed/0x4f0 [ 104.060098][ T6300] alloc_pages_mpol+0x1fb/0x550 [ 104.060114][ T6300] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 104.060129][ T6300] ? arch_stack_walk+0xa6/0xf0 [ 104.060148][ T6300] folio_alloc_mpol_noprof+0x36/0x340 [ 104.060166][ T6300] shmem_alloc_folio+0x135/0x160 [ 104.060185][ T6300] shmem_alloc_and_add_folio+0x371/0xd40 [ 104.060211][ T6300] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 104.060233][ T6300] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 104.060259][ T6300] shmem_get_folio_gfp+0x6ab/0x1900 [ 104.060284][ T6300] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 104.060306][ T6300] ? filemap_map_pages+0xe69/0x2020 [ 104.060331][ T6300] shmem_fault+0x1f9/0xa20 [ 104.060351][ T6300] ? __lock_acquire+0x4a5/0x2630 [ 104.060369][ T6300] ? __pfx_shmem_fault+0x10/0x10 [ 104.060392][ T6300] ? rcu_is_watching+0x12/0xc0 [ 104.060413][ T6300] ? __pfx_filemap_map_pages+0x10/0x10 [ 104.060439][ T6300] __do_fault+0x10d/0x550 [ 104.060455][ T6300] do_fault+0xabb/0x1990 [ 104.060471][ T6300] ? __pmd_alloc+0x3fb/0x950 [ 104.060488][ T6300] __handle_mm_fault+0x180f/0x2b60 [ 104.060510][ T6300] ? mt_find+0x45e/0x8e0 [ 104.060533][ T6300] ? __pfx___handle_mm_fault+0x10/0x10 [ 104.060559][ T6300] ? __pfx_mt_find+0x10/0x10 [ 104.060591][ T6300] ? find_vma+0xbf/0x140 [ 104.060605][ T6300] ? __pfx_find_vma+0x10/0x10 [ 104.060621][ T6300] handle_mm_fault+0x36d/0xa20 [ 104.060645][ T6300] do_user_addr_fault+0x74c/0x12f0 [ 104.060673][ T6300] exc_page_fault+0x6f/0xd0 [ 104.060694][ T6300] asm_exc_page_fault+0x26/0x30 [ 104.060709][ T6300] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 104.060725][ T6300] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 104.060739][ T6300] RSP: 0018:ffffc9000508fba8 EFLAGS: 00050216 [ 104.060752][ T6300] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000020 [ 104.060761][ T6300] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880334ff3c0 [ 104.060770][ T6300] RBP: 0000000000000020 R08: 0000000000000001 R09: ffffed100669fe7b [ 104.060779][ T6300] R10: ffff8880334ff3df R11: 0000000000000000 R12: 0000000000000000 [ 104.060787][ T6300] R13: ffff8880334ff3c0 R14: 0000000000000000 R15: ffff888029895000 [ 104.060806][ T6300] _copy_from_user+0x98/0xd0 [ 104.060825][ T6300] snd_pcm_oss_write2+0x1c2/0x400 [ 104.060844][ T6300] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 104.060867][ T6300] snd_pcm_oss_write+0x729/0xa30 [ 104.060886][ T6300] ? security_file_permission+0x76/0x210 [ 104.060909][ T6300] vfs_write+0x2aa/0x1070 [ 104.060924][ T6300] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 104.060943][ T6300] ? __pfx_vfs_write+0x10/0x10 [ 104.060955][ T6300] ? find_held_lock+0x2b/0x80 [ 104.060969][ T6300] ? __fget_files+0x215/0x3d0 [ 104.060982][ T6300] ? __fget_files+0x215/0x3d0 [ 104.060998][ T6300] ? __fget_files+0x21f/0x3d0 [ 104.061017][ T6300] ksys_write+0x12a/0x250 [ 104.061034][ T6300] ? __pfx_ksys_write+0x10/0x10 [ 104.061053][ T6300] do_syscall_64+0x106/0xf80 [ 104.061072][ T6300] ? clear_bhb_loop+0x40/0x90 [ 104.061089][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.061104][ T6300] RIP: 0033:0x7f212359c799 [ 104.061116][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.061129][ T6300] RSP: 002b:00007f21217b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.061142][ T6300] RAX: ffffffffffffffda RBX: 00007f2123816180 RCX: 00007f212359c799 [ 104.061151][ T6300] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.061159][ T6300] RBP: 00007f2123632c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.061167][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.061176][ T6300] R13: 00007f2123816218 R14: 00007f2123816180 R15: 00007ffeabe70c98 [ 104.061196][ T6300] [ 105.443758][ T6327] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.056376][ T6340] openvswitch: netlink: IP tunnel dst address not specified [ 106.929217][ T6346] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 107.998461][ T6351] FAULT_INJECTION: forcing a failure. [ 107.998461][ T6351] name failslab, interval 1, probability 0, space 0, times 0 [ 108.151326][ T6351] CPU: 0 UID: 0 PID: 6351 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(full) [ 108.151349][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.151359][ T6351] Call Trace: [ 108.151364][ T6351] [ 108.151370][ T6351] dump_stack_lvl+0x100/0x190 [ 108.151397][ T6351] should_fail_ex.cold+0x5/0xa [ 108.151416][ T6351] should_failslab+0xc2/0x120 [ 108.151432][ T6351] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 108.151455][ T6351] ? alloc_inode+0x68/0x250 [ 108.151474][ T6351] ? simple_start_creating+0xb0/0x110 [ 108.151496][ T6351] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 108.151512][ T6351] alloc_inode+0x68/0x250 [ 108.151530][ T6351] new_inode+0x22/0x1c0 [ 108.151550][ T6351] __debugfs_create_file+0x105/0x4f0 [ 108.151569][ T6351] debugfs_create_file_full+0x41/0x60 [ 108.151587][ T6351] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 108.151607][ T6351] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 108.151640][ T6351] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 108.151661][ T6351] ? alloc_netdev_mqs+0xd7/0x14f0 [ 108.151682][ T6351] ? lockdep_init_map_type+0x5c/0x250 [ 108.151703][ T6351] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 108.151720][ T6351] alloc_netdev_mqs+0x314/0x14f0 [ 108.151745][ T6351] __ip_tunnel_create+0x398/0x670 [ 108.151767][ T6351] ? __pfx___ip_tunnel_create+0x10/0x10 [ 108.151788][ T6351] ? net_generic+0xea/0x2a0 [ 108.151813][ T6351] ip_tunnel_init_net+0x230/0x780 [ 108.151837][ T6351] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 108.151863][ T6351] ? __kmalloc_noprof+0x320/0x850 [ 108.151886][ T6351] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 108.151905][ T6351] ops_init+0x1e2/0x5f0 [ 108.151928][ T6351] setup_net+0x118/0x3a0 [ 108.151949][ T6351] ? __pfx_setup_net+0x10/0x10 [ 108.151968][ T6351] ? lockdep_init_map_type+0x5c/0x250 [ 108.151987][ T6351] ? mutex_init_lockep+0x110/0x150 [ 108.152009][ T6351] copy_net_ns+0x46f/0x7c0 [ 108.152025][ T6351] create_new_namespaces+0x3ea/0xac0 [ 108.152045][ T6351] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 108.152063][ T6351] ksys_unshare+0x473/0xad0 [ 108.152082][ T6351] ? __pfx_ksys_unshare+0x10/0x10 [ 108.152107][ T6351] __x64_sys_unshare+0x31/0x40 [ 108.152124][ T6351] do_syscall_64+0x106/0xf80 [ 108.152144][ T6351] ? clear_bhb_loop+0x40/0x90 [ 108.152162][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.152176][ T6351] RIP: 0033:0x7f988659c799 [ 108.152190][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.152204][ T6351] RSP: 002b:00007f9887515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 108.152218][ T6351] RAX: ffffffffffffffda RBX: 00007f9886815fa0 RCX: 00007f988659c799 [ 108.152236][ T6351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 108.152245][ T6351] RBP: 00007f9886632c99 R08: 0000000000000000 R09: 0000000000000000 [ 108.152253][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.152262][ T6351] R13: 00007f9886816038 R14: 00007f9886815fa0 R15: 00007ffef4e6e768 [ 108.152282][ T6351] [ 108.152290][ T6351] debugfs: out of free dentries, can not create file 'netdev@ffff888037cc8620' [ 110.367440][ T6371] tipc: Started in network mode [ 110.400098][ T6371] tipc: Node identity ee00, cluster identity 4711 [ 110.435174][ T6371] tipc: Node number set to 60928 [ 112.124286][ T6428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.688431][ T6439] bond0: no command found in slaves file - use +ifname or -ifname [ 113.762807][ T6453] netlink: zone id is out of range [ 113.808453][ T6453] netlink: zone id is out of range [ 113.836956][ T6453] netlink: zone id is out of range [ 113.883920][ T6455] netlink: zone id is out of range [ 113.953423][ T6455] netlink: zone id is out of range [ 114.007290][ T6453] netlink: set zone limit has 8 unknown bytes [ 114.027432][ T6482] FAULT_INJECTION: forcing a failure. [ 114.027432][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 114.040459][ T6455] netlink: zone id is out of range [ 114.058205][ T6455] netlink: zone id is out of range [ 114.094896][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.2.124 Not tainted syzkaller #0 PREEMPT(full) [ 114.094919][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.094928][ T6482] Call Trace: [ 114.094935][ T6482] [ 114.094941][ T6482] dump_stack_lvl+0x100/0x190 [ 114.094970][ T6482] should_fail_ex.cold+0x5/0xa [ 114.094988][ T6482] should_failslab+0xc2/0x120 [ 114.095004][ T6482] __kmalloc_cache_noprof+0x7a/0x6f0 [ 114.095023][ T6482] ? snd_seq_oss_writeq_new+0xb5/0x2b0 [ 114.095048][ T6482] snd_seq_oss_writeq_new+0xb5/0x2b0 [ 114.095072][ T6482] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 114.095098][ T6482] ? __raw_spin_lock_init+0x3a/0x110 [ 114.095124][ T6482] snd_seq_oss_open+0x7bc/0xa10 [ 114.095144][ T6482] odev_open+0x79/0xc0 [ 114.095156][ T6482] ? __pfx_odev_open+0x10/0x10 [ 114.095169][ T6482] soundcore_open+0x2e3/0x5a0 [ 114.095185][ T6482] ? __pfx_soundcore_open+0x10/0x10 [ 114.095200][ T6482] chrdev_open+0x234/0x6a0 [ 114.095215][ T6482] ? __pfx_apparmor_file_open+0x10/0x10 [ 114.095230][ T6482] ? __pfx_chrdev_open+0x10/0x10 [ 114.095245][ T6482] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 114.095265][ T6482] do_dentry_open+0x6d8/0x1660 [ 114.095279][ T6482] ? __pfx_chrdev_open+0x10/0x10 [ 114.095299][ T6482] vfs_open+0x82/0x3f0 [ 114.095320][ T6482] path_openat+0x208c/0x31a0 [ 114.095341][ T6482] ? __pfx_path_openat+0x10/0x10 [ 114.095363][ T6482] do_file_open+0x20e/0x430 [ 114.095379][ T6482] ? __pfx_do_file_open+0x10/0x10 [ 114.095408][ T6482] ? alloc_fd+0x476/0x790 [ 114.095424][ T6482] ? do_getname+0x191/0x390 [ 114.095443][ T6482] do_sys_openat2+0x10d/0x1e0 [ 114.095461][ T6482] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.095481][ T6482] ? __fget_files+0x21f/0x3d0 [ 114.095498][ T6482] __x64_sys_openat+0x12d/0x210 [ 114.095518][ T6482] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.095544][ T6482] do_syscall_64+0x106/0xf80 [ 114.095563][ T6482] ? clear_bhb_loop+0x40/0x90 [ 114.095581][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.095596][ T6482] RIP: 0033:0x7ff41559c799 [ 114.095609][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.095623][ T6482] RSP: 002b:00007ff416505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.095638][ T6482] RAX: ffffffffffffffda RBX: 00007ff415815fa0 RCX: 00007ff41559c799 [ 114.095647][ T6482] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 114.095656][ T6482] RBP: 00007ff415632c99 R08: 0000000000000000 R09: 0000000000000000 [ 114.095665][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.095673][ T6482] R13: 00007ff415816038 R14: 00007ff415815fa0 R15: 00007ffdbc0cbc78 [ 114.095692][ T6482] [ 114.649820][ T6455] netlink: zone id is out of range [ 114.654951][ T6455] netlink: zone id is out of range [ 115.030292][ T6497] blk-mq: reduced tag depth (128 -> 64) [ 115.220062][ T6502] block2mtd: illegal erase size [ 115.748802][ T5832] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 115.757489][ T5832] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 116.593880][ T29] audit: type=1800 audit(1774005586.163:3): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.135" name="dbroot" dev="configfs" ino=12063 res=0 errno=0 [ 116.646239][ T6527] db_root: cannot open: 0 [ 116.655814][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 116.842607][ T6543] can: request_module (can-proto-5) failed. [ 116.876668][ T6547] netlink: 186 bytes leftover after parsing attributes in process `syz.3.140'. [ 116.916111][ T6543] netlink: 186 bytes leftover after parsing attributes in process `syz.3.140'. [ 117.910806][ T6579] process 'syz.3.146' launched './file0' with NULL argv: empty string added [ 118.469252][ T6589] FAULT_INJECTION: forcing a failure. [ 118.469252][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 118.519524][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 118.519547][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.519556][ T6589] Call Trace: [ 118.519561][ T6589] [ 118.519567][ T6589] dump_stack_lvl+0x100/0x190 [ 118.519593][ T6589] should_fail_ex.cold+0x5/0xa [ 118.519611][ T6589] ? lsm_blob_alloc+0x68/0x90 [ 118.519630][ T6589] should_failslab+0xc2/0x120 [ 118.519645][ T6589] __kmalloc_noprof+0xe0/0x850 [ 118.519667][ T6589] ? trace_kmalloc+0x101/0x130 [ 118.519684][ T6589] lsm_blob_alloc+0x68/0x90 [ 118.519704][ T6589] security_sk_alloc+0x2d/0x290 [ 118.519719][ T6589] sk_prot_alloc+0x12a/0x2a0 [ 118.519736][ T6589] sk_alloc+0x36/0xe80 [ 118.519754][ T6589] caif_create+0x10b/0x430 [ 118.519775][ T6589] __sock_create+0x339/0x860 [ 118.519794][ T6589] __sys_socket+0x14d/0x260 [ 118.519811][ T6589] ? __pfx___sys_socket+0x10/0x10 [ 118.519833][ T6589] __x64_sys_socket+0x72/0xb0 [ 118.519849][ T6589] ? lockdep_hardirqs_on+0x78/0x100 [ 118.519870][ T6589] do_syscall_64+0x106/0xf80 [ 118.519889][ T6589] ? clear_bhb_loop+0x40/0x90 [ 118.519906][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.519921][ T6589] RIP: 0033:0x7f212359c799 [ 118.519933][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.519948][ T6589] RSP: 002b:00007f21217d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 118.519962][ T6589] RAX: ffffffffffffffda RBX: 00007f2123816090 RCX: 00007f212359c799 [ 118.519972][ T6589] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000025 [ 118.519980][ T6589] RBP: 00007f2123632c99 R08: 0000000000000000 R09: 0000000000000000 [ 118.519988][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.519996][ T6589] R13: 00007f2123816128 R14: 00007f2123816090 R15: 00007ffeabe70c98 [ 118.520015][ T6589] [ 119.655002][ T6611] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 119.673246][ T6609] FAULT_INJECTION: forcing a failure. [ 119.673246][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 119.843712][ T6614] block2mtd: illegal erase size [ 119.927789][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 119.927813][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.927822][ T6609] Call Trace: [ 119.927828][ T6609] [ 119.927834][ T6609] dump_stack_lvl+0x100/0x190 [ 119.927869][ T6609] should_fail_ex.cold+0x5/0xa [ 119.927888][ T6609] should_failslab+0xc2/0x120 [ 119.927904][ T6609] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 119.927926][ T6609] ? __d_alloc+0x34/0xa80 [ 119.927945][ T6609] __d_alloc+0x34/0xa80 [ 119.927963][ T6609] d_alloc+0x4a/0x1e0 [ 119.927980][ T6609] lookup_one_qstr_excl+0x175/0x250 [ 119.928000][ T6609] start_dirop+0x59/0xb0 [ 119.928022][ T6609] simple_start_creating+0xf9/0x110 [ 119.928045][ T6609] ? __pfx_simple_start_creating+0x10/0x10 [ 119.928067][ T6609] ? mntput+0x70/0xa0 [ 119.928087][ T6609] ? simple_pin_fs+0xa3/0x190 [ 119.928108][ T6609] debugfs_start_creating.part.0+0x82/0x170 [ 119.928125][ T6609] __debugfs_create_file+0xb3/0x4f0 [ 119.928143][ T6609] debugfs_create_file_full+0x41/0x60 [ 119.928160][ T6609] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 119.928180][ T6609] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 119.928198][ T6609] ? rcu_is_watching+0x12/0xc0 [ 119.928235][ T6609] ? lockdep_init_map_type+0x5c/0x250 [ 119.928257][ T6609] preinit_net.part.0+0x24e/0x8f0 [ 119.928280][ T6609] copy_net_ns+0x339/0x7c0 [ 119.928296][ T6609] create_new_namespaces+0x3ea/0xac0 [ 119.928316][ T6609] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 119.928333][ T6609] ksys_unshare+0x473/0xad0 [ 119.928360][ T6609] ? __pfx_ksys_unshare+0x10/0x10 [ 119.928387][ T6609] __x64_sys_unshare+0x31/0x40 [ 119.928404][ T6609] do_syscall_64+0x106/0xf80 [ 119.928424][ T6609] ? clear_bhb_loop+0x40/0x90 [ 119.928443][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.928458][ T6609] RIP: 0033:0x7f988659c799 [ 119.928475][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.928489][ T6609] RSP: 002b:00007f98874b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.928507][ T6609] RAX: ffffffffffffffda RBX: 00007f9886816270 RCX: 00007f988659c799 [ 119.928517][ T6609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 119.928525][ T6609] RBP: 00007f9886632c99 R08: 0000000000000000 R09: 0000000000000000 [ 119.928534][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.928543][ T6609] R13: 00007f9886816308 R14: 00007f9886816270 R15: 00007ffef4e6e768 [ 119.928562][ T6609] [ 121.218836][ T6625] Invalid ELF header magic: != ELF [ 122.644439][ T6659] FAULT_INJECTION: forcing a failure. [ 122.644439][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 122.715207][ T6659] CPU: 0 UID: 0 PID: 6659 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(full) [ 122.715228][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.715237][ T6659] Call Trace: [ 122.715242][ T6659] [ 122.715248][ T6659] dump_stack_lvl+0x100/0x190 [ 122.715273][ T6659] should_fail_ex.cold+0x5/0xa [ 122.715290][ T6659] should_failslab+0xc2/0x120 [ 122.715305][ T6659] __kmalloc_cache_noprof+0x7a/0x6f0 [ 122.715322][ T6659] ? p9_client_create+0xaf/0xd40 [ 122.715347][ T6659] p9_client_create+0xaf/0xd40 [ 122.715368][ T6659] ? __pfx_p9_client_create+0x10/0x10 [ 122.715393][ T6659] ? lockdep_init_map_type+0x5c/0x250 [ 122.715411][ T6659] ? __raw_spin_lock_init+0x3a/0x110 [ 122.715434][ T6659] v9fs_session_init+0x40/0xce0 [ 122.715453][ T6659] ? kasan_save_track+0x14/0x30 [ 122.715476][ T6659] v9fs_get_tree+0xb8/0xb50 [ 122.715495][ T6659] ? rcu_is_watching+0x12/0xc0 [ 122.715516][ T6659] ? __pfx_v9fs_get_tree+0x10/0x10 [ 122.715538][ T6659] ? bpf_lsm_capable+0x9/0x10 [ 122.715552][ T6659] ? security_capable+0x80/0x260 [ 122.715577][ T6659] vfs_get_tree+0x92/0x320 [ 122.715597][ T6659] vfs_cmd_create+0xd7/0x2a0 [ 122.715615][ T6659] __do_sys_fsconfig+0x55a/0xcb0 [ 122.715634][ T6659] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 122.715661][ T6659] do_syscall_64+0x106/0xf80 [ 122.715679][ T6659] ? clear_bhb_loop+0x40/0x90 [ 122.715697][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.715711][ T6659] RIP: 0033:0x7ff41559c799 [ 122.715723][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.715736][ T6659] RSP: 002b:00007ff416505028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 122.715749][ T6659] RAX: ffffffffffffffda RBX: 00007ff415815fa0 RCX: 00007ff41559c799 [ 122.715758][ T6659] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 122.715766][ T6659] RBP: 00007ff415632c99 R08: 0000000000000000 R09: 0000000000000000 [ 122.715774][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.715782][ T6659] R13: 00007ff415816038 R14: 00007ff415815fa0 R15: 00007ffdbc0cbc78 [ 122.715800][ T6659] [ 123.037848][ T6657] Setting dangerous option i915.mitigations - tainting kernel [ 123.450024][ T6677] synth uevent: /module/au0828: unknown uevent action string [ 124.115617][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 125.909934][ T6732] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.929486][ T6733] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.583495][ T6750] random: crng reseeded on system resumption syzkaller syzkaller login: [ 128.782652][ T6816] netlink: 330 bytes leftover after parsing attributes in process `syz.0.194'. [ 129.849763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc61800: rx timeout, send abort [ 130.358637][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc61800: abort rx timeout. Force session deactivation [ 130.888670][ T6855] net_ratelimit: 5 callbacks suppressed [ 130.888685][ T6855] netlink: zone id is out of range [ 131.007771][ T6855] netlink: zone id is out of range [ 132.018432][ T6915] netlink: 326 bytes leftover after parsing attributes in process `syz.2.217'. [ 132.056093][ T6903] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.099537][ T6917] FAULT_INJECTION: forcing a failure. [ 132.099537][ T6917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.189762][ T6915] FAULT_INJECTION: forcing a failure. [ 132.189762][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 132.206621][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 132.267799][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.2.217 Tainted: G U syzkaller #0 PREEMPT(full) [ 132.267824][ T6917] Tainted: [U]=USER [ 132.267831][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.267840][ T6917] Call Trace: [ 132.267845][ T6917] [ 132.267851][ T6917] dump_stack_lvl+0x100/0x190 [ 132.267878][ T6917] should_fail_ex.cold+0x5/0xa [ 132.267895][ T6917] core_sys_select+0x9b9/0xbb0 [ 132.267923][ T6917] ? __pfx_core_sys_select+0x10/0x10 [ 132.267963][ T6917] ? ktime_get_ts64+0x2d2/0x3f0 [ 132.267981][ T6917] ? read_tsc+0x9/0x20 [ 132.267996][ T6917] ? ktime_get_ts64+0x256/0x3f0 [ 132.268014][ T6917] kern_select+0x20c/0x270 [ 132.268037][ T6917] ? __pfx_kern_select+0x10/0x10 [ 132.268065][ T6917] __x64_sys_select+0xbd/0x160 [ 132.268078][ T6917] ? do_syscall_64+0x95/0xf80 [ 132.268097][ T6917] ? lockdep_hardirqs_on+0x78/0x100 [ 132.268117][ T6917] do_syscall_64+0x106/0xf80 [ 132.268136][ T6917] ? clear_bhb_loop+0x40/0x90 [ 132.268154][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.268169][ T6917] RIP: 0033:0x7ff41559c799 [ 132.268181][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.268194][ T6917] RSP: 002b:00007ff4164e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 132.268209][ T6917] RAX: ffffffffffffffda RBX: 00007ff415816090 RCX: 00007ff41559c799 [ 132.268218][ T6917] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 132.268227][ T6917] RBP: 00007ff415632c99 R08: 00002000000001c0 R09: 0000000000000000 [ 132.268236][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.268244][ T6917] R13: 00007ff415816128 R14: 00007ff415816090 R15: 00007ffdbc0cbc78 [ 132.268262][ T6917] [ 132.647762][ T6932] FAULT_INJECTION: forcing a failure. [ 132.647762][ T6932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.677728][ T6932] CPU: 0 UID: 0 PID: 6932 Comm: syz.0.222 Tainted: G U syzkaller #0 PREEMPT(full) [ 132.677753][ T6932] Tainted: [U]=USER [ 132.677758][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.677767][ T6932] Call Trace: [ 132.677773][ T6932] [ 132.677778][ T6932] dump_stack_lvl+0x100/0x190 [ 132.677806][ T6932] should_fail_ex.cold+0x5/0xa [ 132.677824][ T6932] strncpy_from_user+0x3b/0x2d0 [ 132.677843][ T6932] do_getname+0x78/0x390 [ 132.677865][ T6932] do_sys_openat2+0xc5/0x1e0 [ 132.677885][ T6932] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.677910][ T6932] __x64_sys_openat+0x12d/0x210 [ 132.677929][ T6932] ? __pfx___x64_sys_openat+0x10/0x10 [ 132.677954][ T6932] do_syscall_64+0x106/0xf80 [ 132.677975][ T6932] ? clear_bhb_loop+0x40/0x90 [ 132.677992][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.678007][ T6932] RIP: 0033:0x7f988659c799 [ 132.678019][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.678033][ T6932] RSP: 002b:00007f9887515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.678048][ T6932] RAX: ffffffffffffffda RBX: 00007f9886815fa0 RCX: 00007f988659c799 [ 132.678057][ T6932] RDX: 000000000010b142 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 132.678066][ T6932] RBP: 00007f9886632c99 R08: 0000000000000000 R09: 0000000000000000 [ 132.678074][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.678082][ T6932] R13: 00007f9886816038 R14: 00007f9886815fa0 R15: 00007ffef4e6e768 [ 132.678101][ T6932] [ 132.904774][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911245][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.952384][ T6935] cgroup: fork rejected by pids controller in /syz0 [ 133.108395][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.2.217 Tainted: G U syzkaller #0 PREEMPT(full) [ 133.108421][ T6915] Tainted: [U]=USER [ 133.108426][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.108435][ T6915] Call Trace: [ 133.108440][ T6915] [ 133.108452][ T6915] dump_stack_lvl+0x100/0x190 [ 133.108478][ T6915] should_fail_ex.cold+0x5/0xa [ 133.108496][ T6915] should_failslab+0xc2/0x120 [ 133.108512][ T6915] __kmalloc_cache_noprof+0x7a/0x6f0 [ 133.108531][ T6915] ? call_usermodehelper_setup+0xaf/0x360 [ 133.108555][ T6915] ? __pfx_free_modprobe_argv+0x10/0x10 [ 133.108576][ T6915] call_usermodehelper_setup+0xaf/0x360 [ 133.108602][ T6915] __request_module+0x3c7/0x6c0 [ 133.108622][ T6915] ? __pfx___request_module+0x10/0x10 [ 133.108647][ T6915] ? __get_fs_type+0x12c/0x170 [ 133.108663][ T6915] ? __get_fs_type+0x12c/0x170 [ 133.108686][ T6915] get_fs_type+0xd7/0x190 [ 133.108703][ T6915] __x64_sys_fsopen+0xca/0x220 [ 133.108722][ T6915] do_syscall_64+0x106/0xf80 [ 133.108742][ T6915] ? clear_bhb_loop+0x40/0x90 [ 133.108760][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.108776][ T6915] RIP: 0033:0x7ff41559c799 [ 133.108789][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.108803][ T6915] RSP: 002b:00007ff416505028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 133.108817][ T6915] RAX: ffffffffffffffda RBX: 00007ff415815fa0 RCX: 00007ff41559c799 [ 133.108827][ T6915] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 133.108835][ T6915] RBP: 00007ff415632c99 R08: 0000000000000000 R09: 0000000000000000 [ 133.108843][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.108852][ T6915] R13: 00007ff415816038 R14: 00007ff415815fa0 R15: 00007ffdbc0cbc78 [ 133.108871][ T6915] [ 133.723125][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.116673][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 134.909449][ T29] audit: type=1800 audit(1774023948.483:4): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.230" name="dbroot" dev="configfs" ino=14569 res=0 errno=0 [ 136.065400][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 136.072851][ T5837] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 136.079287][ T50] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 136.085513][ T5828] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 136.091953][ T5831] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 136.102730][ T5146] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 136.109186][ T5838] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 136.154311][ T5836] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 136.161167][ T7020] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 136.167684][ T7023] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 136.174008][ T7022] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 136.181097][ T7025] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 136.187753][ T7026] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 136.194462][ T7028] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 136.225474][ T7031] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 136.231811][ T7032] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 136.238077][ T7027] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 136.244420][ T7033] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 136.251148][ T7036] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 136.258457][ T7034] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 136.264827][ T7037] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 136.271331][ T7035] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 136.278012][ T7040] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 136.284333][ T7041] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 136.319957][ T7042] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 136.326319][ T7044] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 136.332678][ T7043] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 136.465177][ T7039] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 136.471692][ T7057] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 136.478348][ T7058] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 136.484736][ T7059] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 136.491366][ T7046] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 136.497638][ T7060] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 136.503869][ T7061] Bluetooth: hci37: Opcode 0x0c03 failed: -110 [ 136.510200][ T7062] Bluetooth: hci38: Opcode 0x0c03 failed: -110 [ 136.517770][ T7063] Bluetooth: hci40: Opcode 0x0c03 failed: -110 [ 136.524254][ T7064] Bluetooth: hci39: Opcode 0x0c03 failed: -110 [ 137.949448][ T7098] FAULT_INJECTION: forcing a failure. [ 137.949448][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 138.010465][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.0.236 Tainted: G U syzkaller #0 PREEMPT(full) [ 138.010491][ T7098] Tainted: [U]=USER [ 138.010496][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.010505][ T7098] Call Trace: [ 138.010511][ T7098] [ 138.010516][ T7098] dump_stack_lvl+0x100/0x190 [ 138.010543][ T7098] should_fail_ex.cold+0x5/0xa [ 138.010562][ T7098] should_failslab+0xc2/0x120 [ 138.010578][ T7098] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 138.010599][ T7098] ? __kernfs_new_node+0xd2/0x960 [ 138.010623][ T7098] __kernfs_new_node+0xd2/0x960 [ 138.010645][ T7098] ? __pfx___kernfs_new_node+0x10/0x10 [ 138.010669][ T7098] ? find_held_lock+0x2b/0x80 [ 138.010683][ T7098] ? kernfs_root+0xee/0x2a0 [ 138.010701][ T7098] ? kernfs_root+0xee/0x2a0 [ 138.010724][ T7098] kernfs_new_node+0x11b/0x1a0 [ 138.010749][ T7098] __kernfs_create_file+0x53/0x350 [ 138.010768][ T7098] sysfs_add_file_mode_ns+0x207/0x3c0 [ 138.010792][ T7098] sysfs_merge_group+0x194/0x340 [ 138.010813][ T7098] ? __pfx_sysfs_merge_group+0x10/0x10 [ 138.010836][ T7098] ? __pfx_dev_add_physical_location+0x10/0x10 [ 138.010853][ T7098] ? bus_to_subsys+0x114/0x150 [ 138.010874][ T7098] dpm_sysfs_add+0x237/0x280 [ 138.010891][ T7098] device_add+0x9ef/0x1950 [ 138.010909][ T7098] ? __pfx_device_add+0x10/0x10 [ 138.010925][ T7098] ? __pfx___might_resched+0x10/0x10 [ 138.010944][ T7098] ? lockdep_hardirqs_on+0x78/0x100 [ 138.010971][ T7098] __add_disk+0x518/0xe40 [ 138.010989][ T7098] add_disk_fwnode+0x118/0x5c0 [ 138.011006][ T7098] loop_add+0x90b/0xb60 [ 138.011028][ T7098] ? __pfx_loop_add+0x10/0x10 [ 138.011059][ T7098] ? find_held_lock+0x2b/0x80 [ 138.011072][ T7098] ? __fget_files+0x215/0x3d0 [ 138.011088][ T7098] loop_control_ioctl+0xae/0x620 [ 138.011108][ T7098] ? __pfx_loop_control_ioctl+0x10/0x10 [ 138.011131][ T7098] ? __pfx_loop_control_ioctl+0x10/0x10 [ 138.011160][ T7098] __x64_sys_ioctl+0x18e/0x210 [ 138.011184][ T7098] do_syscall_64+0x106/0xf80 [ 138.011205][ T7098] ? clear_bhb_loop+0x40/0x90 [ 138.011222][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.011237][ T7098] RIP: 0033:0x7f988659c799 [ 138.011250][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.011263][ T7098] RSP: 002b:00007f9887515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.011278][ T7098] RAX: ffffffffffffffda RBX: 00007f9886815fa0 RCX: 00007f988659c799 [ 138.011287][ T7098] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 138.011296][ T7098] RBP: 00007f9886632c99 R08: 0000000000000000 R09: 0000000000000000 [ 138.011304][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.011313][ T7098] R13: 00007f9886816038 R14: 00007f9886815fa0 R15: 00007ffef4e6e768 [ 138.011332][ T7098] [ 138.786849][ T7101] zram: Added device: zram1 [ 139.190840][ T7111] FAULT_INJECTION: forcing a failure. [ 139.190840][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 139.241519][ T7111] CPU: 0 UID: 0 PID: 7111 Comm: syz.1.239 Tainted: G U syzkaller #0 PREEMPT(full) [ 139.241546][ T7111] Tainted: [U]=USER [ 139.241551][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.241560][ T7111] Call Trace: [ 139.241570][ T7111] [ 139.241577][ T7111] dump_stack_lvl+0x100/0x190 [ 139.241604][ T7111] should_fail_ex.cold+0x5/0xa [ 139.241621][ T7111] ? lsm_blob_alloc+0x68/0x90 [ 139.241640][ T7111] should_failslab+0xc2/0x120 [ 139.241656][ T7111] __kmalloc_noprof+0xe0/0x850 [ 139.241679][ T7111] ? trace_kmalloc+0x101/0x130 [ 139.241696][ T7111] lsm_blob_alloc+0x68/0x90 [ 139.241716][ T7111] security_sk_alloc+0x2d/0x290 [ 139.241731][ T7111] sk_prot_alloc+0x12a/0x2a0 [ 139.241747][ T7111] sk_alloc+0x36/0xe80 [ 139.241766][ T7111] __netlink_create+0x5e/0x2c0 [ 139.241783][ T7111] ? __wake_up+0x3f/0x60 [ 139.241800][ T7111] netlink_create+0x293/0x610 [ 139.241819][ T7111] ? __pfx_genl_bind+0x10/0x10 [ 139.241831][ T7111] ? __pfx_genl_unbind+0x10/0x10 [ 139.241843][ T7111] ? __pfx_genl_release+0x10/0x10 [ 139.241859][ T7111] __sock_create+0x339/0x860 [ 139.241878][ T7111] __sys_socket+0x14d/0x260 [ 139.241894][ T7111] ? exc_page_fault+0x6f/0xd0 [ 139.241914][ T7111] ? __pfx___sys_socket+0x10/0x10 [ 139.241931][ T7111] ? do_user_addr_fault+0x8d6/0x12f0 [ 139.241957][ T7111] __x64_sys_socket+0x72/0xb0 [ 139.241973][ T7111] ? lockdep_hardirqs_on+0x78/0x100 [ 139.241993][ T7111] do_syscall_64+0x106/0xf80 [ 139.242012][ T7111] ? clear_bhb_loop+0x40/0x90 [ 139.242030][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.242052][ T7111] RIP: 0033:0x7f212359e007 [ 139.242065][ T7111] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.242080][ T7111] RSP: 002b:00007f21217d3f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 139.242095][ T7111] RAX: ffffffffffffffda RBX: 00007f2123816090 RCX: 00007f212359e007 [ 139.242105][ T7111] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 139.242114][ T7111] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 139.242122][ T7111] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 139.242131][ T7111] R13: 00007f2123816128 R14: 00007f2123816090 R15: 00007ffeabe70c98 [ 139.242150][ T7111] [ 140.098014][ T7141] FAULT_INJECTION: forcing a failure. [ 140.098014][ T7141] name fail_futex, interval 1, probability 0, space 0, times 1 [ 140.183810][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.1.247 Tainted: G U syzkaller #0 PREEMPT(full) [ 140.183835][ T7141] Tainted: [U]=USER [ 140.183840][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.183849][ T7141] Call Trace: [ 140.183854][ T7141] [ 140.183860][ T7141] dump_stack_lvl+0x100/0x190 [ 140.183887][ T7141] should_fail_ex.cold+0x5/0xa [ 140.183905][ T7141] get_futex_key+0x1d2/0x1620 [ 140.183925][ T7141] ? __pfx_get_futex_key+0x10/0x10 [ 140.183942][ T7141] ? __destroy_inode+0x2ed/0x740 [ 140.183960][ T7141] ? __pfx_sock_free_inode+0x10/0x10 [ 140.183982][ T7141] ? destroy_inode+0x139/0x1c0 [ 140.184002][ T7141] futex_wake+0xea/0x530 [ 140.184025][ T7141] ? __pfx_futex_wake+0x10/0x10 [ 140.184055][ T7141] do_futex+0x32b/0x350 [ 140.184074][ T7141] ? __pfx_do_futex+0x10/0x10 [ 140.184091][ T7141] ? iput+0x3a/0x40 [ 140.184107][ T7141] ? __sock_release+0x184/0x260 [ 140.184132][ T7141] __x64_sys_futex+0x34f/0x4d0 [ 140.184151][ T7141] ? __sys_socket+0xac/0x260 [ 140.184167][ T7141] ? __pfx___x64_sys_futex+0x10/0x10 [ 140.184192][ T7141] do_syscall_64+0x106/0xf80 [ 140.184212][ T7141] ? clear_bhb_loop+0x40/0x90 [ 140.184229][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.184244][ T7141] RIP: 0033:0x7f212359c799 [ 140.184256][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.184270][ T7141] RSP: 002b:00007f21217f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.184286][ T7141] RAX: ffffffffffffffda RBX: 00007f2123815fa8 RCX: 00007f212359c799 [ 140.184295][ T7141] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2123815fac [ 140.184304][ T7141] RBP: 00007f2123815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 140.184313][ T7141] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 140.184321][ T7141] R13: 00007f2123816038 R14: 00007ffeabe70bb0 R15: 00007ffeabe70c98 [ 140.184340][ T7141] [ 140.387572][ T7139] HfR: entered promiscuous mode [ 141.305190][ T7160] input: jJǸ-9%vJ86 as /devices/virtual/input/input10 [ 143.565860][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 143.650849][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 143.710716][ T7224] Invalid ELF header magic: != ELF [ 145.231036][ T7241] ima: policy update failed [ 145.252796][ T29] audit: type=1802 audit(1774023958.823:5): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.267" res=0 errno=0 [ 145.527738][ T7243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 147.686756][ T7272] can: request_module (can-proto-0) failed. [ 150.434929][ T7339] netlink: 334 bytes leftover after parsing attributes in process `syz.1.286'. [ 152.899948][ T7369] No such timeout policy "" [ 152.904681][ T7369] netlink: Failed to associated timeout policy '' [ 153.293415][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 153.330626][ T7380] veth0_macvtap: left promiscuous mode [ 153.368631][ T7380] macvtap0: entered promiscuous mode [ 153.405492][ T7380] macvtap0: entered allmulticast mode [ 154.961908][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'. [ 155.586481][ T7404] FAULT_INJECTION: forcing a failure. [ 155.586481][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 155.655510][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.1.305 Tainted: G U syzkaller #0 PREEMPT(full) [ 155.655536][ T7404] Tainted: [U]=USER [ 155.655541][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.655550][ T7404] Call Trace: [ 155.655555][ T7404] [ 155.655561][ T7404] dump_stack_lvl+0x100/0x190 [ 155.655588][ T7404] should_fail_ex.cold+0x5/0xa [ 155.655606][ T7404] should_failslab+0xc2/0x120 [ 155.655621][ T7404] __kmalloc_cache_noprof+0x7a/0x6f0 [ 155.655640][ T7404] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 155.655660][ T7404] tcp_sendmsg_fastopen+0x24d/0x750 [ 155.655679][ T7404] tcp_sendmsg_locked+0x2791/0x45e0 [ 155.655699][ T7404] ? __lock_acquire+0x4a5/0x2630 [ 155.655721][ T7404] ? __pfx___might_resched+0x10/0x10 [ 155.655742][ T7404] ? trace_kmalloc+0x101/0x130 [ 155.655757][ T7404] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 155.655774][ T7404] ? do_raw_spin_lock+0x128/0x260 [ 155.655795][ T7404] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.655819][ T7404] ? __local_bh_enable_ip+0x9e/0x120 [ 155.655837][ T7404] tcp_sendmsg+0x2e/0x50 [ 155.655850][ T7404] ? __pfx_tcp_sendmsg+0x10/0x10 [ 155.655865][ T7404] inet_sendmsg+0xb9/0x140 [ 155.655881][ T7404] ____sys_sendmsg+0x98d/0xb70 [ 155.655895][ T7404] ? __pfx_inet_sendmsg+0x10/0x10 [ 155.655912][ T7404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.655930][ T7404] ? futex_unqueue+0x133/0x2c0 [ 155.655952][ T7404] ___sys_sendmsg+0x190/0x1e0 [ 155.655969][ T7404] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.655984][ T7404] ? __pfx___futex_wait+0x10/0x10 [ 155.656004][ T7404] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 155.656031][ T7404] ? find_held_lock+0x2b/0x80 [ 155.656066][ T7404] __sys_sendmmsg+0x205/0x430 [ 155.656090][ T7404] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.656116][ T7404] ? __pfx_do_futex+0x10/0x10 [ 155.656144][ T7404] ? xfd_validate_state+0x129/0x190 [ 155.656170][ T7404] __x64_sys_sendmmsg+0x9c/0x100 [ 155.656189][ T7404] ? lockdep_hardirqs_on+0x78/0x100 [ 155.656209][ T7404] do_syscall_64+0x106/0xf80 [ 155.656231][ T7404] ? clear_bhb_loop+0x40/0x90 [ 155.656249][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.656264][ T7404] RIP: 0033:0x7f212359c799 [ 155.656277][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.656290][ T7404] RSP: 002b:00007f21217f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.656304][ T7404] RAX: ffffffffffffffda RBX: 00007f2123815fa0 RCX: 00007f212359c799 [ 155.656314][ T7404] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005 [ 155.656322][ T7404] RBP: 00007f2123632c99 R08: 0000000000000000 R09: 0000000000000000 [ 155.656331][ T7404] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.656340][ T7404] R13: 00007f2123816038 R14: 00007f2123815fa0 R15: 00007ffeabe70c98 [ 155.656360][ T7404] [ 156.437545][ T7064] block nbd0: Receive control failed (result -32) [ 156.586294][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 157.586516][ T7442] futex_wake_op: syz.1.313 tries to shift op by -2048; fix this program [ 157.594949][ T7442] futex_wake_op: syz.1.313 tries to shift op by -2048; fix this program [ 157.670495][ T7452] 0x000000000001-0x000000020000 : "" [ 157.824865][ T7452] ftl_cs: FTL header corrupt! [ 158.563865][ T7476] Invalid ELF header magic: != ELF [ 158.842764][ T7062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.851996][ T7062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.862273][ T7062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.872555][ T7062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.882001][ T7062] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.081653][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 160.584127][ T7492] kexec: Could not allocate control_code_buffer [ 160.670240][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.718184][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.757813][ T7487] bridge_slave_0: entered allmulticast mode [ 160.803194][ T7487] bridge_slave_0: entered promiscuous mode [ 160.842593][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.895336][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.902523][ T7487] bridge_slave_1: entered allmulticast mode [ 160.945736][ T7062] Bluetooth: hci4: command tx timeout [ 160.972439][ T7487] bridge_slave_1: entered promiscuous mode [ 161.181089][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.279745][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.462039][ T7487] team0: Port device team_slave_0 added [ 161.763568][ T7487] team0: Port device team_slave_1 added [ 161.909098][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.975745][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.185138][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.252095][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.307974][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.489126][ T7575] vivid-003: ================= START STATUS ================= [ 162.523671][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.635186][ T7575] vivid-003: Radio HW Seek Mode: Bounded [ 162.640990][ T7575] vivid-003: Radio Programmable HW Seek: false [ 162.805545][ T7575] vivid-003: RDS Rx I/O Mode: Block I/O [ 162.811127][ T7575] vivid-003: Generate RBDS Instead of RDS: false [ 162.955190][ T7575] vivid-003: RDS Reception: true [ 162.998226][ T7487] hsr_slave_0: entered promiscuous mode [ 163.014628][ T7575] vivid-003: RDS Program Type: 0 inactive [ 163.033347][ T7062] Bluetooth: hci4: command tx timeout [ 163.047767][ T7487] hsr_slave_1: entered promiscuous mode [ 163.080440][ T7487] debugfs: 'hsr0' already exists in 'hsr' [ 163.105708][ T7575] vivid-003: RDS PS Name: inactive [ 163.110929][ T7575] vivid-003: RDS Radio Text: inactive [ 163.128012][ T7487] Cannot create hsr debugfs directory [ 163.154068][ T7575] vivid-003: RDS Traffic Announcement: false inactive [ 163.193746][ T7575] vivid-003: RDS Traffic Program: false inactive [ 163.217640][ T7575] vivid-003: RDS Music: false inactive [ 163.223126][ T7575] vivid-003: ================== END STATUS ================== [ 163.481002][ T7583] netlink: 266 bytes leftover after parsing attributes in process `syz.3.340'. [ 163.550104][ T7583] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.056903][ T7588] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 164.348809][ T7487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.419542][ T7487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.483737][ T7487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.528594][ T7487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.846750][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.966880][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.036069][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.043224][ T7321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.105217][ T7062] Bluetooth: hci4: command tx timeout [ 165.117025][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.124129][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.272935][ T7607] bond0: invalid ARP target specified [ 165.874913][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.686306][ T7062] Bluetooth: hci0: unexpected event 0x31 length: 19 > 6 [ 167.185533][ T7062] Bluetooth: hci4: command tx timeout [ 167.224012][ T7487] veth0_vlan: entered promiscuous mode [ 167.254864][ T7487] veth1_vlan: entered promiscuous mode [ 167.411552][ T7487] veth0_macvtap: entered promiscuous mode [ 167.455214][ T7487] veth1_macvtap: entered promiscuous mode [ 167.539587][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.614312][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_1 /dev/ocfs2_control[ 167.693300][ T7317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.726982][ T7317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.996621][ T7317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.051053][ T7317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.842829][ T7317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.897300][ T7317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.923571][ T7654] capability: warning: `syz.0.351' uses 32-bit capabilities (legacy support in use) [ 168.950897][ T7317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.982299][ T7317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.830241][ T7671] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 170.295686][ T7693] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 170.386476][ T7695] netlink: 350 bytes leftover after parsing attributes in process `syz.0.360'. [ 170.676714][ T7701] binder: 7700:7701 ioctl c0306201 200000000380 returned -14 [ 170.770432][ T7701] FAULT_INJECTION: forcing a failure. [ 170.770432][ T7701] name failslab, interval 1, probability 0, space 0, times 0 [ 171.027853][ T7701] CPU: 0 UID: 0 PID: 7701 Comm: syz.1.361 Tainted: G U L syzkaller #0 PREEMPT(full) [ 171.027881][ T7701] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 171.027886][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.027895][ T7701] Call Trace: [ 171.027900][ T7701] [ 171.027906][ T7701] dump_stack_lvl+0x100/0x190 [ 171.027932][ T7701] should_fail_ex.cold+0x5/0xa [ 171.027949][ T7701] should_failslab+0xc2/0x120 [ 171.027965][ T7701] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 171.027995][ T7701] ? create_new_namespaces+0x30/0xac0 [ 171.028011][ T7701] ? rcu_is_watching+0x12/0xc0 [ 171.028036][ T7701] create_new_namespaces+0x30/0xac0 [ 171.028051][ T7701] ? bpf_lsm_capable+0x9/0x10 [ 171.028066][ T7701] ? security_capable+0x80/0x260 [ 171.028089][ T7701] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 171.028107][ T7701] ksys_unshare+0x473/0xad0 [ 171.028126][ T7701] ? __pfx_ksys_unshare+0x10/0x10 [ 171.028151][ T7701] __x64_sys_unshare+0x31/0x40 [ 171.028169][ T7701] do_syscall_64+0x106/0xf80 [ 171.028189][ T7701] ? clear_bhb_loop+0x40/0x90 [ 171.028207][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.028222][ T7701] RIP: 0033:0x7f212359c799 [ 171.028234][ T7701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.028248][ T7701] RSP: 002b:00007f21217f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.028263][ T7701] RAX: ffffffffffffffda RBX: 00007f2123815fa0 RCX: 00007f212359c799 [ 171.028272][ T7701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 171.028281][ T7701] RBP: 00007f2123632c99 R08: 0000000000000000 R09: 0000000000000000 [ 171.028289][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.028297][ T7701] R13: 00007f2123816038 R14: 00007f2123815fa0 R15: 00007ffeabe70c98 [ 171.028316][ T7701] [ 171.875477][ T7714] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.955650][ T7724] FAULT_INJECTION: forcing a failure. [ 171.955650][ T7724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.184599][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: syz.3.363 Tainted: G U L syzkaller #0 PREEMPT(full) [ 172.184626][ T7724] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 172.184631][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.184640][ T7724] Call Trace: [ 172.184645][ T7724] [ 172.184652][ T7724] dump_stack_lvl+0x100/0x190 [ 172.184678][ T7724] should_fail_ex.cold+0x5/0xa [ 172.184692][ T7724] ? prepare_alloc_pages+0x16d/0x5f0 [ 172.184712][ T7724] should_fail_alloc_page+0xeb/0x140 [ 172.184729][ T7724] prepare_alloc_pages+0x1f0/0x5f0 [ 172.184749][ T7724] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 172.184780][ T7724] ? stack_trace_save+0x8e/0xc0 [ 172.184795][ T7724] ? __pfx_stack_trace_save+0x10/0x10 [ 172.184809][ T7724] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.184829][ T7724] ? stack_depot_save_flags+0x27/0x9d0 [ 172.184847][ T7724] ? lock_acquire+0x1cf/0x380 [ 172.184867][ T7724] ? kasan_save_stack+0x3f/0x50 [ 172.184888][ T7724] ? kasan_save_stack+0x30/0x50 [ 172.184907][ T7724] ? kasan_save_track+0x14/0x30 [ 172.184927][ T7724] ? __kasan_kmalloc+0xaa/0xb0 [ 172.184949][ T7724] ? do_file_open+0x20e/0x430 [ 172.184962][ T7724] ? do_sys_openat2+0x10d/0x1e0 [ 172.184979][ T7724] ? __x64_sys_openat+0x12d/0x210 [ 172.184996][ T7724] ? do_syscall_64+0x106/0xf80 [ 172.185016][ T7724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.185034][ T7724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.185061][ T7724] ? policy_nodemask+0xed/0x4f0 [ 172.185079][ T7724] alloc_pages_mpol+0x1fb/0x550 [ 172.185095][ T7724] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 172.185116][ T7724] alloc_pages_noprof+0x131/0x390 [ 172.185133][ T7724] get_zeroed_page_noprof+0x18/0xb0 [ 172.185149][ T7724] mon_alloc_buff+0xce/0x1b0 [ 172.185165][ T7724] ? kasan_save_track+0x14/0x30 [ 172.185187][ T7724] mon_bin_open+0x207/0x470 [ 172.185203][ T7724] ? __pfx_mon_bin_open+0x10/0x10 [ 172.185219][ T7724] chrdev_open+0x234/0x6a0 [ 172.185246][ T7724] ? __pfx_chrdev_open+0x10/0x10 [ 172.185263][ T7724] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 172.185283][ T7724] do_dentry_open+0x6d8/0x1660 [ 172.185297][ T7724] ? __pfx_chrdev_open+0x10/0x10 [ 172.185316][ T7724] vfs_open+0x82/0x3f0 [ 172.185336][ T7724] path_openat+0x208c/0x31a0 [ 172.185358][ T7724] ? __pfx_path_openat+0x10/0x10 [ 172.185379][ T7724] do_file_open+0x20e/0x430 [ 172.185396][ T7724] ? __pfx_do_file_open+0x10/0x10 [ 172.185424][ T7724] ? alloc_fd+0x476/0x790 [ 172.185440][ T7724] ? do_getname+0x191/0x390 [ 172.185465][ T7724] do_sys_openat2+0x10d/0x1e0 [ 172.185483][ T7724] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.185504][ T7724] ? __fget_files+0x21f/0x3d0 [ 172.185522][ T7724] __x64_sys_openat+0x12d/0x210 [ 172.185542][ T7724] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.185569][ T7724] do_syscall_64+0x106/0xf80 [ 172.185589][ T7724] ? clear_bhb_loop+0x40/0x90 [ 172.185606][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.185621][ T7724] RIP: 0033:0x7f950159c799 [ 172.185635][ T7724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.185649][ T7724] RSP: 002b:00007f94ff3d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.185663][ T7724] RAX: ffffffffffffffda RBX: 00007f9501816270 RCX: 00007f950159c799 [ 172.185673][ T7724] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 172.185682][ T7724] RBP: 00007f9501632c99 R08: 0000000000000000 R09: 0000000000000000 [ 172.185691][ T7724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.185699][ T7724] R13: 00007f9501816308 R14: 00007f9501816270 R15: 00007ffeed1d3bc8 [ 172.185719][ T7724] [ 173.770110][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 173.821081][ T7747] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 173.845256][ T7747] netlink: 5 bytes leftover after parsing attributes in process `syz.0.370'. [ 174.273623][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 176.070030][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 176.141241][ T7805] netlink: 'syz.4.381': attribute type 1 has an invalid length. [ 176.181308][ T7799] FAULT_INJECTION: forcing a failure. [ 176.181308][ T7799] name failslab, interval 1, probability 0, space 0, times 0 [ 176.195323][ T7805] netlink: 5 bytes leftover after parsing attributes in process `syz.4.381'. [ 176.262797][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.0.382 Tainted: G U L syzkaller #0 PREEMPT(full) [ 176.262821][ T7799] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 176.262826][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.262835][ T7799] Call Trace: [ 176.262840][ T7799] [ 176.262845][ T7799] dump_stack_lvl+0x100/0x190 [ 176.262870][ T7799] should_fail_ex.cold+0x5/0xa [ 176.262886][ T7799] ? tomoyo_realpath_from_path+0xb6/0x690 [ 176.262904][ T7799] should_failslab+0xc2/0x120 [ 176.262919][ T7799] __kmalloc_noprof+0xe0/0x850 [ 176.262943][ T7799] tomoyo_realpath_from_path+0xb6/0x690 [ 176.262966][ T7799] tomoyo_path_number_perm+0x23c/0x580 [ 176.262980][ T7799] ? tomoyo_path_number_perm+0x22e/0x580 [ 176.262999][ T7799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.263015][ T7799] ? futex_unqueue+0x133/0x2c0 [ 176.263053][ T7799] ? from_kgid+0x8f/0xd0 [ 176.263066][ T7799] ? __pfx_from_kgid+0x10/0x10 [ 176.263084][ T7799] tomoyo_path_chown+0x14b/0x1b0 [ 176.263104][ T7799] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 176.263124][ T7799] ? from_vfsuid+0xea/0x140 [ 176.263142][ T7799] ? __pfx_from_vfsuid+0x10/0x10 [ 176.263162][ T7799] security_path_chown+0x12a/0x2d0 [ 176.263178][ T7799] chown_common+0x3da/0x6e0 [ 176.263199][ T7799] ? __pfx_chown_common+0x10/0x10 [ 176.263224][ T7799] ? rcu_read_lock_any_held+0x6a/0xa0 [ 176.263240][ T7799] vfs_fchown+0xcd/0x110 [ 176.263258][ T7799] __x64_sys_fchown+0xad/0x130 [ 176.263275][ T7799] do_syscall_64+0x106/0xf80 [ 176.263295][ T7799] ? clear_bhb_loop+0x40/0x90 [ 176.263312][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.263327][ T7799] RIP: 0033:0x7f988659c799 [ 176.263338][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.263351][ T7799] RSP: 002b:00007f98874f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 176.263365][ T7799] RAX: ffffffffffffffda RBX: 00007f9886816090 RCX: 00007f988659c799 [ 176.263374][ T7799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 176.263382][ T7799] RBP: 00007f9886632c99 R08: 0000000000000000 R09: 0000000000000000 [ 176.263390][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.263398][ T7799] R13: 00007f9886816128 R14: 00007f9886816090 R15: 00007ffef4e6e768 [ 176.263417][ T7799] [ 176.755210][ T7799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.624048][ T7851] input: f as /devices/virtual/input/input11 [ 180.515350][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 180.549025][ T7321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.593823][ T7858] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 180.649659][ T7858] netlink: 5 bytes leftover after parsing attributes in process `syz.0.393'. [ 181.531451][ T7321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.717840][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 181.778948][ T7887] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 181.830672][ T7887] netlink: 5 bytes leftover after parsing attributes in process `syz.0.398'. [ 181.870459][ T7321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.977825][ T7891] netlink: 330 bytes leftover after parsing attributes in process `syz.1.397'. [ 182.147230][ T7321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.270726][ T7900] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 182.869825][ T7321] bridge_slave_1: left allmulticast mode [ 182.915233][ T7321] bridge_slave_1: left promiscuous mode [ 182.956349][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.238767][ T7321] bridge_slave_0: left allmulticast mode [ 183.261431][ T7321] bridge_slave_0: left promiscuous mode [ 183.293621][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.140637][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.183070][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.201449][ T7321] bond0 (unregistering): Released all slaves [ 185.499262][ T7986] netlink: 186 bytes leftover after parsing attributes in process `syz.0.406'. [ 185.923381][ T7321] hsr_slave_0: left promiscuous mode [ 185.965301][ T7321] hsr_slave_1: left promiscuous mode [ 185.987968][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.027635][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.068290][ T7997] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 186.080937][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.103671][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.192480][ T7321] veth1_macvtap: left promiscuous mode [ 186.209746][ T7321] veth0_macvtap: left promiscuous mode [ 186.237381][ T7321] veth1_vlan: left promiscuous mode [ 186.264014][ T7321] veth0_vlan: left promiscuous mode [ 186.714119][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 186.744414][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 188.069335][ T8031] FAULT_INJECTION: forcing a failure. [ 188.069335][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 188.139253][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.0.417 Tainted: G U L syzkaller #0 PREEMPT(full) [ 188.139281][ T8031] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 188.139286][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.139295][ T8031] Call Trace: [ 188.139301][ T8031] [ 188.139307][ T8031] dump_stack_lvl+0x100/0x190 [ 188.139334][ T8031] should_fail_ex.cold+0x5/0xa [ 188.139352][ T8031] should_failslab+0xc2/0x120 [ 188.139368][ T8031] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 188.139389][ T8031] ? vm_area_alloc+0x1f/0x160 [ 188.139407][ T8031] ? vma_merge_new_range+0x38b/0xa30 [ 188.139427][ T8031] ? __sanitizer_cov_trace_switch+0x10/0x90 [ 188.139452][ T8031] vm_area_alloc+0x1f/0x160 [ 188.139471][ T8031] __mmap_region+0x10cc/0x29e0 [ 188.139494][ T8031] ? __pfx___mmap_region+0x10/0x10 [ 188.139518][ T8031] ? set_next_entity+0x11e/0x9c0 [ 188.139542][ T8031] ? __lock_acquire+0x4a5/0x2630 [ 188.139559][ T8031] ? update_cfs_rq_load_avg+0x51/0x550 [ 188.139583][ T8031] ? find_held_lock+0x2b/0x80 [ 188.139604][ T8031] ? finish_task_switch.isra.0+0x200/0xb80 [ 188.139621][ T8031] ? finish_task_switch.isra.0+0x200/0xb80 [ 188.139644][ T8031] ? trace_sched_exit_tp+0x13a/0x180 [ 188.139662][ T8031] ? __schedule+0x1000/0x6120 [ 188.139704][ T8031] ? rcu_is_watching+0x12/0xc0 [ 188.139725][ T8031] ? cap_capable+0x107/0x460 [ 188.139751][ T8031] mmap_region+0x180/0x3e0 [ 188.139775][ T8031] do_mmap+0xc63/0x12f0 [ 188.139795][ T8031] ? __pfx_do_mmap+0x10/0x10 [ 188.139811][ T8031] ? __pfx_down_write_killable+0x10/0x10 [ 188.139829][ T8031] vm_mmap_pgoff+0x29e/0x470 [ 188.139849][ T8031] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 188.139867][ T8031] ? do_futex+0x192/0x350 [ 188.139885][ T8031] ? __pfx_do_futex+0x10/0x10 [ 188.139906][ T8031] ksys_mmap_pgoff+0xe1/0x650 [ 188.139922][ T8031] ? __x64_sys_futex+0x34f/0x4d0 [ 188.139939][ T8031] ? __x64_sys_futex+0x358/0x4d0 [ 188.139957][ T8031] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 188.139973][ T8031] ? xfd_validate_state+0x129/0x190 [ 188.139997][ T8031] __x64_sys_mmap+0x125/0x190 [ 188.140020][ T8031] do_syscall_64+0x106/0xf80 [ 188.140039][ T8031] ? clear_bhb_loop+0x40/0x90 [ 188.140057][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.140072][ T8031] RIP: 0033:0x7f988659c799 [ 188.140085][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.140098][ T8031] RSP: 002b:00007f9887515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 188.140113][ T8031] RAX: ffffffffffffffda RBX: 00007f9886815fa0 RCX: 00007f988659c799 [ 188.140122][ T8031] RDX: 00000000000000df RSI: 0000000000000005 RDI: 0000000000000000 [ 188.140131][ T8031] RBP: 00007f9886632c99 R08: 0000000000000002 R09: 0000000000008000 [ 188.140140][ T8031] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 188.140148][ T8031] R13: 00007f9886816038 R14: 00007f9886815fa0 R15: 00007ffef4e6e768 [ 188.140168][ T8031] [ 190.124285][ T29] audit: type=1800 audit(1774024003.693:6): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.423" name="lu_gp_id" dev="configfs" ino=20925 res=0 errno=0 [ 190.169447][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 190.234644][ T8064] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 190.302172][ T8064] netlink: 5 bytes leftover after parsing attributes in process `syz.0.425'. [ 191.858182][ T8104] netlink: 326 bytes leftover after parsing attributes in process `syz.4.429'. [ 192.191116][ T8109] bridge0: port 3(bond0) entered blocking state [ 192.219931][ T8109] bridge0: port 3(bond0) entered disabled state [ 192.257551][ T8109] bond0: entered allmulticast mode [ 192.268355][ T8109] bond_slave_0: entered allmulticast mode [ 192.278627][ T29] audit: type=1800 audit(1774024005.843:7): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.433" name="discovery_nqn" dev="configfs" ino=21131 res=0 errno=0 [ 192.316003][ T8109] bond_slave_1: entered allmulticast mode [ 192.336609][ T8109] bond0: entered promiscuous mode [ 192.369525][ T8109] bond_slave_0: entered promiscuous mode [ 192.390171][ T8109] bond_slave_1: entered promiscuous mode [ 192.410258][ T8109] bridge0: port 3(bond0) entered blocking state [ 192.416811][ T8109] bridge0: port 3(bond0) entered forwarding state [ 192.938221][ T8131] sp0: Synchronizing with TNC [ 193.139090][ T8137] FAULT_INJECTION: forcing a failure. [ 193.139090][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 193.186269][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.4.437 Tainted: G U L syzkaller #0 PREEMPT(full) [ 193.186298][ T8137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 193.186304][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.186313][ T8137] Call Trace: [ 193.186318][ T8137] [ 193.186324][ T8137] dump_stack_lvl+0x100/0x190 [ 193.186351][ T8137] should_fail_ex.cold+0x5/0xa [ 193.186370][ T8137] should_failslab+0xc2/0x120 [ 193.186385][ T8137] __kmalloc_cache_noprof+0x7a/0x6f0 [ 193.186403][ T8137] ? init_srcu_struct_fields+0x9a2/0xe30 [ 193.186422][ T8137] ? read_tsc+0x9/0x20 [ 193.186437][ T8137] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 193.186455][ T8137] init_srcu_struct_fields+0x9a2/0xe30 [ 193.186476][ T8137] kvm_dev_ioctl+0x7b6/0x1a50 [ 193.186495][ T8137] ? find_held_lock+0x2b/0x80 [ 193.186509][ T8137] ? __fget_files+0x215/0x3d0 [ 193.186521][ T8137] ? hook_file_ioctl_common+0x146/0x410 [ 193.186539][ T8137] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 193.186557][ T8137] ? __fget_files+0x21f/0x3d0 [ 193.186574][ T8137] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 193.186591][ T8137] __x64_sys_ioctl+0x18e/0x210 [ 193.186612][ T8137] do_syscall_64+0x106/0xf80 [ 193.186632][ T8137] ? clear_bhb_loop+0x40/0x90 [ 193.186650][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.186665][ T8137] RIP: 0033:0x7f2ebf79c799 [ 193.186678][ T8137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.186692][ T8137] RSP: 002b:00007f2ec0600028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.186706][ T8137] RAX: ffffffffffffffda RBX: 00007f2ebfa15fa0 RCX: 00007f2ebf79c799 [ 193.186715][ T8137] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 193.186724][ T8137] RBP: 00007f2ebf832c99 R08: 0000000000000000 R09: 0000000000000000 [ 193.186732][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.186740][ T8137] R13: 00007f2ebfa16038 R14: 00007f2ebfa15fa0 R15: 00007ffe95148058 [ 193.186758][ T8137] [ 194.071670][ T8153] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 194.233982][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240353][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.297108][ T8137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.306653][ T8137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.340412][ T8137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.346823][ T8154] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 194.379261][ T8137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.387633][ T8137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.417141][ T8137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.463730][ T8137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.490659][ T8137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 194.534114][ T8137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 194.658702][ T8137] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.667708][ T8137] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 194.707968][ T8137] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 196.212542][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 196.256858][ T8208] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 196.287383][ T8208] netlink: 5 bytes leftover after parsing attributes in process `syz.4.452'. [ 196.305362][ T7064] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.465298][ T7064] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.471438][ T7062] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.490417][ T8211] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 196.705129][ T7064] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.272680][ T8231] syz.1.456 (8231) used obsolete PPPIOCDETACH ioctl [ 197.840664][ T7064] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 198.118006][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 198.174923][ T8260] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 198.193074][ T8260] netlink: 5 bytes leftover after parsing attributes in process `syz.3.462'. [ 198.385240][ T7064] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.553059][ T7064] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.559158][ T7062] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.567180][ T7062] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 198.785169][ T7062] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.081194][ T8275] Invalid ELF header magic: != ELF [ 199.365489][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 199.472391][ T8292] netlink: 4684 bytes leftover after parsing attributes in process `syz.3.469'. [ 199.581089][ T8297] futex_wake_op: syz.0.470 tries to shift op by -2048; fix this program [ 199.676354][ T8297] futex_wake_op: syz.0.470 tries to shift op by -2048; fix this program [ 199.915940][ T8297] futex_wake_op: syz.0.470 tries to shift op by -2048; fix this program [ 199.924445][ T8297] futex_wake_op: syz.0.470 tries to shift op by -2048; fix this program [ 200.052972][ T8300] 0x000000000001-0x000000020000 : "" [ 200.144051][ T8300] ftl_cs: FTL header corrupt! [ 200.365770][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 200.415445][ T8312] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 200.458816][ T8312] netlink: 5 bytes leftover after parsing attributes in process `syz.3.473'. [ 200.467857][ T7062] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.653893][ T7062] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.659955][ T7064] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.868030][ T7062] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.073265][ T8327] FAULT_INJECTION: forcing a failure. [ 201.073265][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 201.164737][ T8327] CPU: 0 UID: 0 PID: 8327 Comm: syz.3.475 Tainted: G U L syzkaller #0 PREEMPT(full) [ 201.164766][ T8327] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 201.164771][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.164780][ T8327] Call Trace: [ 201.164786][ T8327] [ 201.164793][ T8327] dump_stack_lvl+0x100/0x190 [ 201.164819][ T8327] should_fail_ex.cold+0x5/0xa [ 201.164837][ T8327] ? tracepoint_add_func+0x2c5/0xf30 [ 201.164851][ T8327] should_failslab+0xc2/0x120 [ 201.164867][ T8327] __kmalloc_noprof+0xe0/0x850 [ 201.164893][ T8327] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 201.164908][ T8327] tracepoint_add_func+0x2c5/0xf30 [ 201.164922][ T8327] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 201.164940][ T8327] ? __pfx___mutex_lock+0x10/0x10 [ 201.164961][ T8327] ? rcu_is_watching+0x12/0xc0 [ 201.164986][ T8327] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 201.165001][ T8327] tracepoint_probe_register+0xc4/0x110 [ 201.165018][ T8327] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 201.165033][ T8327] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 201.165047][ T8327] ? __lock_acquire+0x4a5/0x2630 [ 201.165070][ T8327] tracing_start_sched_switch+0xaf/0x170 [ 201.165093][ T8327] __ftrace_event_enable_disable+0x557/0x6f0 [ 201.165112][ T8327] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 201.165135][ T8327] ftrace_set_clr_event+0x16e/0x330 [ 201.165155][ T8327] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 201.165172][ T8327] ? trace_get_user+0x3ae/0xa70 [ 201.165192][ T8327] ftrace_event_write+0x259/0x2c0 [ 201.165212][ T8327] ? __pfx_ftrace_event_write+0x10/0x10 [ 201.165246][ T8327] vfs_write+0x2aa/0x1070 [ 201.165262][ T8327] ? __pfx_ftrace_event_write+0x10/0x10 [ 201.165283][ T8327] ? __pfx_vfs_write+0x10/0x10 [ 201.165297][ T8327] ? __fget_files+0x215/0x3d0 [ 201.165316][ T8327] ? __fget_files+0x21f/0x3d0 [ 201.165335][ T8327] ksys_write+0x12a/0x250 [ 201.165349][ T8327] ? __pfx_ksys_write+0x10/0x10 [ 201.165368][ T8327] do_syscall_64+0x106/0xf80 [ 201.165388][ T8327] ? clear_bhb_loop+0x40/0x90 [ 201.165405][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.165420][ T8327] RIP: 0033:0x7f950159c799 [ 201.165434][ T8327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.165448][ T8327] RSP: 002b:00007f94ff3d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.165462][ T8327] RAX: ffffffffffffffda RBX: 00007f9501816270 RCX: 00007f950159c799 [ 201.165472][ T8327] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000006 [ 201.165480][ T8327] RBP: 00007f9501632c99 R08: 0000000000000000 R09: 0000000000000000 [ 201.165489][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.165497][ T8327] R13: 00007f9501816308 R14: 00007f9501816270 R15: 00007ffeed1d3bc8 [ 201.165517][ T8327] [ 202.501202][ T8327] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 203.589049][ T8364] netlink: 342 bytes leftover after parsing attributes in process `syz.0.483'. [ 203.865729][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 203.932337][ T8370] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 203.984647][ T8370] netlink: 5 bytes leftover after parsing attributes in process `syz.4.485'. [ 204.608100][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 204.748013][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 204.890727][ T8375] ipvlan1: entered promiscuous mode [ 204.924838][ T8375] ipvlan1: entered allmulticast mode [ 204.966987][ T8375] veth0_vlan: entered allmulticast mode [ 205.631722][ T8408] netlink: 'syz.4.491': attribute type 3 has an invalid length. [ 205.685746][ T8408] netlink: 342 bytes leftover after parsing attributes in process `syz.4.491'. [ 208.072349][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 208.206149][ T8443] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 208.301199][ T8443] netlink: 5 bytes leftover after parsing attributes in process `syz.3.496'. [ 210.910166][ T8476] bridge0: port 3(netdevsim1) entered blocking state [ 210.935427][ T8476] bridge0: port 3(netdevsim1) entered disabled state [ 210.969589][ T8476] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 211.000905][ T8476] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 211.034297][ T8476] bridge0: port 3(netdevsim1) entered blocking state [ 211.041134][ T8476] bridge0: port 3(netdevsim1) entered forwarding state [ 211.908912][ T29] audit: type=1800 audit(1774089562.481:8): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.504" name="features" dev="configfs" ino=23387 res=0 errno=0 [ 212.619691][ T8521] Unable to find swap-space signature [ 213.028065][ T8530] random: crng reseeded on system resumption [ 213.901379][ T29] audit: type=1800 audit(1774089564.461:9): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.511" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 214.756277][ T8562] Invalid ELF header magic: != ELF [ 214.883993][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 214.964367][ T8564] netlink: 5 bytes leftover after parsing attributes in process `syz.3.516'. [ 215.095205][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 215.179180][ T8538] kexec: Could not allocate control_code_buffer [ 217.573780][ T8599] FAULT_INJECTION: forcing a failure. [ 217.573780][ T8599] name failslab, interval 1, probability 0, space 0, times 0 [ 217.652428][ T8599] CPU: 0 UID: 0 PID: 8599 Comm: syz.4.526 Tainted: G U L syzkaller #0 PREEMPT(full) [ 217.652457][ T8599] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 217.652462][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.652471][ T8599] Call Trace: [ 217.652477][ T8599] [ 217.652483][ T8599] dump_stack_lvl+0x100/0x190 [ 217.652510][ T8599] should_fail_ex.cold+0x5/0xa [ 217.652527][ T8599] should_failslab+0xc2/0x120 [ 217.652546][ T8599] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 217.652567][ T8599] ? sock_alloc_inode+0x25/0x1c0 [ 217.652584][ T8599] ? __pfx_sock_alloc_inode+0x10/0x10 [ 217.652598][ T8599] sock_alloc_inode+0x25/0x1c0 [ 217.652612][ T8599] alloc_inode+0x68/0x250 [ 217.652630][ T8599] sock_alloc+0x44/0x280 [ 217.652650][ T8599] ? security_socket_create+0x7f/0x250 [ 217.652674][ T8599] __sock_create+0xc2/0x860 [ 217.652693][ T8599] __sys_socket+0x14d/0x260 [ 217.652715][ T8599] ? __pfx___sys_socket+0x10/0x10 [ 217.652737][ T8599] __x64_sys_socket+0x72/0xb0 [ 217.652754][ T8599] ? lockdep_hardirqs_on+0x78/0x100 [ 217.652775][ T8599] do_syscall_64+0x106/0xf80 [ 217.652794][ T8599] ? clear_bhb_loop+0x40/0x90 [ 217.652813][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.652828][ T8599] RIP: 0033:0x7f2ebf79c799 [ 217.652841][ T8599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.652854][ T8599] RSP: 002b:00007f2ec05df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 217.652869][ T8599] RAX: ffffffffffffffda RBX: 00007f2ebfa16090 RCX: 00007f2ebf79c799 [ 217.652879][ T8599] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 217.652887][ T8599] RBP: 00007f2ebf832c99 R08: 0000000000000000 R09: 0000000000000000 [ 217.652895][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.652903][ T8599] R13: 00007f2ebfa16128 R14: 00007f2ebfa16090 R15: 00007ffe95148058 [ 217.652922][ T8599] [ 217.653343][ T8599] socket: no more sockets [ 217.888281][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 218.550875][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 218.618278][ T8613] netlink: 13 bytes leftover after parsing attributes in process `syz.3.531'. [ 218.843451][ T8617] zero sized request [ 218.867594][ T8617] zero sized request [ 220.963185][ T8668] [U] ^@ [ 221.309315][ T8688] mkiss: ax0: crc mode is auto. [ 221.651685][ T8694] ICMPv6: process `syz.4.548' is using deprecated sysctl (syscall) net.ipv6.neigh.geneve0.retrans_time - use net.ipv6.neigh.geneve0.retrans_time_ms instead [ 222.170887][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 222.189958][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 222.228535][ T8701] netlink: 'syz.4.549': attribute type 1 has an invalid length. [ 222.268657][ T8701] netlink: 5 bytes leftover after parsing attributes in process `syz.4.549'. [ 223.811565][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 224.283958][ T8733] can: request_module (can-proto-4) failed. [ 225.573942][ T8774] tipc: Started in network mode [ 225.618670][ T8774] tipc: Node identity ee00, cluster identity 4711 [ 225.666577][ T8774] tipc: Node number set to 60928 [ 225.733678][ T8791] FAULT_INJECTION: forcing a failure. [ 225.733678][ T8791] name failslab, interval 1, probability 0, space 0, times 0 [ 225.833490][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 225.899139][ T8791] CPU: 0 UID: 0 PID: 8791 Comm: syz.1.571 Tainted: G U L syzkaller #0 PREEMPT(full) [ 225.899165][ T8791] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 225.899170][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.899178][ T8791] Call Trace: [ 225.899183][ T8791] [ 225.899188][ T8791] dump_stack_lvl+0x100/0x190 [ 225.899212][ T8791] should_fail_ex.cold+0x5/0xa [ 225.899229][ T8791] should_failslab+0xc2/0x120 [ 225.899246][ T8791] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 225.899267][ T8791] ? kstrdup_const+0x63/0x80 [ 225.899284][ T8791] kstrdup+0x51/0xe0 [ 225.899305][ T8791] kstrdup_const+0x63/0x80 [ 225.899317][ T8791] alloc_vfsmnt+0xe5/0x6a0 [ 225.899336][ T8791] clone_mnt+0x4b/0x930 [ 225.899354][ T8791] ? is_subdir+0x1a8/0x3e0 [ 225.899372][ T8791] copy_tree+0x329/0xbf0 [ 225.899391][ T8791] copy_mnt_ns+0x2bd/0xc30 [ 225.899406][ T8791] ? create_new_namespaces+0x30/0xac0 [ 225.899421][ T8791] ? rcu_is_watching+0x12/0xc0 [ 225.899444][ T8791] create_new_namespaces+0xd3/0xac0 [ 225.899458][ T8791] ? bpf_lsm_capable+0x9/0x10 [ 225.899473][ T8791] ? security_capable+0x80/0x260 [ 225.899497][ T8791] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 225.899513][ T8791] ksys_unshare+0x473/0xad0 [ 225.899532][ T8791] ? __pfx_ksys_unshare+0x10/0x10 [ 225.899555][ T8791] __x64_sys_unshare+0x31/0x40 [ 225.899572][ T8791] do_syscall_64+0x106/0xf80 [ 225.899591][ T8791] ? clear_bhb_loop+0x40/0x90 [ 225.899609][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.899623][ T8791] RIP: 0033:0x7f212359c799 [ 225.899635][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.899648][ T8791] RSP: 002b:00007f2121793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 225.899661][ T8791] RAX: ffffffffffffffda RBX: 00007f2123816270 RCX: 00007f212359c799 [ 225.899670][ T8791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 225.899678][ T8791] RBP: 00007f2123632c99 R08: 0000000000000000 R09: 0000000000000000 [ 225.899686][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.899694][ T8791] R13: 00007f2123816308 R14: 00007f2123816270 R15: 00007ffeabe70c98 [ 225.899712][ T8791] [ 226.434440][ T8807] random: crng reseeded on system resumption [ 226.987066][ T29] audit: type=1800 audit(1774089577.561:10): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.578" name="dbroot" dev="configfs" ino=25856 res=0 errno=0 [ 227.190116][ T8831] zswap: compressor not available [ 228.132436][ T8846] FAULT_INJECTION: forcing a failure. [ 228.132436][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 228.214715][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.4.580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 228.214744][ T8846] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 228.214749][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.214759][ T8846] Call Trace: [ 228.214764][ T8846] [ 228.214769][ T8846] dump_stack_lvl+0x100/0x190 [ 228.214796][ T8846] should_fail_ex.cold+0x5/0xa [ 228.214824][ T8846] should_failslab+0xc2/0x120 [ 228.214840][ T8846] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 228.214862][ T8846] ? security_file_alloc+0x34/0x2c0 [ 228.214880][ T8846] ? trace_kmem_cache_alloc+0xf3/0x120 [ 228.214898][ T8846] security_file_alloc+0x34/0x2c0 [ 228.214916][ T8846] init_file+0x95/0x480 [ 228.214933][ T8846] alloc_empty_file+0x73/0x1c0 [ 228.214951][ T8846] dentry_open+0x46/0xd0 [ 228.214970][ T8846] acct_on+0x189/0x9e0 [ 228.214992][ T8846] ? __pfx_acct_on+0x10/0x10 [ 228.215012][ T8846] ? bpf_lsm_capable+0x9/0x10 [ 228.215030][ T8846] ? security_capable+0x80/0x260 [ 228.215053][ T8846] __x64_sys_acct+0x81/0x1e0 [ 228.215073][ T8846] ? lockdep_hardirqs_on+0x78/0x100 [ 228.215093][ T8846] do_syscall_64+0x106/0xf80 [ 228.215113][ T8846] ? clear_bhb_loop+0x40/0x90 [ 228.215131][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.215146][ T8846] RIP: 0033:0x7f2ebf79c799 [ 228.215159][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.215173][ T8846] RSP: 002b:00007f2ec0600028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 228.215187][ T8846] RAX: ffffffffffffffda RBX: 00007f2ebfa15fa0 RCX: 00007f2ebf79c799 [ 228.215196][ T8846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 228.215205][ T8846] RBP: 00007f2ebf832c99 R08: 0000000000000000 R09: 0000000000000000 [ 228.215213][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.215222][ T8846] R13: 00007f2ebfa16038 R14: 00007f2ebfa15fa0 R15: 00007ffe95148058 [ 228.215241][ T8846] getty: ttyS0: read error: Resource temporarily u[ 229.766390][ T8896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 230.918064][ T8911] syz.0.595 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 232.160450][ T8941] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 232.711297][ T8957] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 232.999823][ T8961] aoe: could not set interface list: too many interfaces [ 233.028934][ T8961] usb usb24: usbfs: process 8961 (syz.1.607) did not claim interface 0 before use [ 233.601557][ T8986] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 233.725562][ T8986] CIFS mount error: No usable UNC path provided in device string! [ 233.725562][ T8986] [ 233.753976][ T8986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 237.675505][ T9090] block2mtd: illegal erase size [ 238.447114][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.454482][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.462398][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.469782][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.477497][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.484799][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.492414][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.500006][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.508558][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.560127][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.567702][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.574986][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.583313][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.590666][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.597929][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.606446][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.613688][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.620968][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.628330][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.637264][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.646476][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.653733][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.665158][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.672396][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.680384][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.687904][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.695330][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.702561][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.715727][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.722971][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.730353][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.737660][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.747878][ T7062] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 238.922052][ T9116] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 238.976726][ T9116] netlink: 330 bytes leftover after parsing attributes in process `syz.0.639'. [ 240.561213][ T29] audit: type=1804 audit(1774089591.131:11): pid=9175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.652" name="file0" dev="tmpfs" ino=957 res=1 errno=0 [ 240.648483][ T9179] Invalid ELF header magic: != ELF [ 240.704670][ T29] audit: type=1804 audit(1774089591.201:12): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.652" name="file0" dev="tmpfs" ino=957 res=1 errno=0 [ 241.202467][ T9190] synth uevent: /bus/hid/drivers/hid-multitouch: unknown uevent action string [ 241.953805][ T9216] Invalid ELF header magic: != ELF [ 242.930832][ T9244] Setting dangerous option i915.mitigations - tainting kernel [ 242.974275][ T9244] netlink: 13 bytes leftover after parsing attributes in process `syz.3.668'. [ 243.119978][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 243.212354][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 243.264556][ T9248] Invalid ELF header magic: != ELF [ 244.924136][ T9310] ------------[ cut here ]------------ [ 244.930119][ T9310] IS_ERR(old) [ 244.930137][ T9310] WARNING: kernel/tracepoint.c:367 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.4.682/9310 [ 244.944416][ T9310] Modules linked in: [ 244.949289][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.4.682 Tainted: G U L syzkaller #0 PREEMPT(full) [ 244.960581][ T9310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 244.966505][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.976860][ T9310] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 244.983472][ T9310] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 a0 df 09 82 48 c7 c7 c0 32 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 245.003617][ T9310] RSP: 0018:ffffc900039778a8 EFLAGS: 00010283 [ 245.010067][ T9310] RAX: 00000000000073bc RBX: 00000000fffffffe RCX: ffffc90019402000 [ 245.018227][ T9310] RDX: 0000000000080000 RSI: ffffffff8209f096 RDI: ffff888037e8db80 [ 245.026524][ T9310] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 245.034552][ T9310] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82100b60 [ 245.042602][ T9310] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f786f20 [ 245.050657][ T9310] FS: 00007f2ec05df6c0(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 [ 245.060071][ T9310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.066972][ T9310] CR2: 00007f21237ea078 CR3: 0000000068e12000 CR4: 00000000003526f0 [ 245.074946][ T9310] Call Trace: [ 245.078263][ T9310] [ 245.081188][ T9310] tracing_stop_cmdline_record+0x66/0xa0 [ 245.086867][ T9310] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 245.093095][ T9310] ftrace_event_set_open+0x224/0x380 [ 245.098703][ T9310] do_dentry_open+0x6d8/0x1660 [ 245.103546][ T9310] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 245.109434][ T9310] vfs_open+0x82/0x3f0 [ 245.113499][ T9310] path_openat+0x208c/0x31a0 [ 245.118261][ T9310] ? __pfx_path_openat+0x10/0x10 [ 245.123194][ T9310] do_file_open+0x20e/0x430 [ 245.127852][ T9310] ? __pfx_do_file_open+0x10/0x10 [ 245.132895][ T9310] ? alloc_fd+0x476/0x790 [ 245.137261][ T9310] ? do_getname+0x191/0x390 [ 245.141756][ T9310] do_sys_openat2+0x10d/0x1e0 [ 245.146450][ T9310] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.151658][ T9310] ? find_held_lock+0x2b/0x80 [ 245.156353][ T9310] __x64_sys_openat+0x12d/0x210 [ 245.161645][ T9310] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.167343][ T9310] do_syscall_64+0x106/0xf80 [ 245.171928][ T9310] ? clear_bhb_loop+0x40/0x90 [ 245.176640][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.182522][ T9310] RIP: 0033:0x7f2ebf79c799 [ 245.186969][ T9310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.206976][ T9310] RSP: 002b:00007f2ec05df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.215639][ T9310] RAX: ffffffffffffffda RBX: 00007f2ebfa16090 RCX: 00007f2ebf79c799 [ 245.223746][ T9310] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 245.231828][ T9310] RBP: 00007f2ebf832c99 R08: 0000000000000000 R09: 0000000000000000 [ 245.239837][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.247894][ T9310] R13: 00007f2ebfa16128 R14: 00007f2ebfa16090 R15: 00007ffe95148058 [ 245.255918][ T9310] [ 245.258932][ T9310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 245.266197][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.4.682 Tainted: G U L syzkaller #0 PREEMPT(full) [ 245.276940][ T9310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 245.282110][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.292142][ T9310] Call Trace: [ 245.295402][ T9310] [ 245.298314][ T9310] dump_stack_lvl+0x100/0x190 [ 245.302987][ T9310] vpanic+0x552/0x970 [ 245.306951][ T9310] ? __pfx_vpanic+0x10/0x10 [ 245.311442][ T9310] panic+0xd1/0xe0 [ 245.315142][ T9310] ? __pfx_panic+0x10/0x10 [ 245.319547][ T9310] check_panic_on_warn.cold+0x19/0x34 [ 245.324901][ T9310] ? tracepoint_probe_unregister+0x837/0xd10 [ 245.330861][ T9310] __warn.cold+0x191/0x348 [ 245.335262][ T9310] __report_bug+0x296/0x3d0 [ 245.339749][ T9310] ? tracepoint_probe_unregister+0x837/0xd10 [ 245.345712][ T9310] ? __pfx___report_bug+0x10/0x10 [ 245.350723][ T9310] ? rcu_is_watching+0x12/0xc0 [ 245.355483][ T9310] ? trace_contention_end+0x140/0x180 [ 245.360843][ T9310] ? __mutex_lock+0x26a/0x1b90 [ 245.365599][ T9310] ? tracepoint_probe_unregister+0x31/0xd10 [ 245.371476][ T9310] ? tracepoint_probe_unregister+0x837/0xd10 [ 245.377437][ T9310] report_bug+0xb2/0x220 [ 245.381665][ T9310] ? tracepoint_probe_unregister+0x837/0xd10 [ 245.387627][ T9310] handle_bug+0x16a/0x2a0 [ 245.391943][ T9310] exc_invalid_op+0x17/0x50 [ 245.396426][ T9310] asm_exc_invalid_op+0x1a/0x20 [ 245.401256][ T9310] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 245.407827][ T9310] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 a0 df 09 82 48 c7 c7 c0 32 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 245.427415][ T9310] RSP: 0018:ffffc900039778a8 EFLAGS: 00010283 [ 245.433463][ T9310] RAX: 00000000000073bc RBX: 00000000fffffffe RCX: ffffc90019402000 [ 245.441414][ T9310] RDX: 0000000000080000 RSI: ffffffff8209f096 RDI: ffff888037e8db80 [ 245.449373][ T9310] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 245.457325][ T9310] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82100b60 [ 245.465278][ T9310] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f786f20 [ 245.473234][ T9310] ? __pfx_probe_sched_switch+0x10/0x10 [ 245.478767][ T9310] ? tracepoint_probe_unregister+0x836/0xd10 [ 245.484745][ T9310] ? tracepoint_probe_unregister+0x836/0xd10 [ 245.490710][ T9310] tracing_stop_cmdline_record+0x66/0xa0 [ 245.496331][ T9310] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 245.502297][ T9310] ftrace_event_set_open+0x224/0x380 [ 245.507565][ T9310] do_dentry_open+0x6d8/0x1660 [ 245.512400][ T9310] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 245.518194][ T9310] vfs_open+0x82/0x3f0 [ 245.522254][ T9310] path_openat+0x208c/0x31a0 [ 245.526834][ T9310] ? __pfx_path_openat+0x10/0x10 [ 245.531763][ T9310] do_file_open+0x20e/0x430 [ 245.536251][ T9310] ? __pfx_do_file_open+0x10/0x10 [ 245.541274][ T9310] ? alloc_fd+0x476/0x790 [ 245.545590][ T9310] ? do_getname+0x191/0x390 [ 245.550087][ T9310] do_sys_openat2+0x10d/0x1e0 [ 245.554753][ T9310] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.559938][ T9310] ? find_held_lock+0x2b/0x80 [ 245.564600][ T9310] __x64_sys_openat+0x12d/0x210 [ 245.569443][ T9310] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.574808][ T9310] do_syscall_64+0x106/0xf80 [ 245.579388][ T9310] ? clear_bhb_loop+0x40/0x90 [ 245.584050][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.589927][ T9310] RIP: 0033:0x7f2ebf79c799 [ 245.594332][ T9310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.613928][ T9310] RSP: 002b:00007f2ec05df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.622329][ T9310] RAX: ffffffffffffffda RBX: 00007f2ebfa16090 RCX: 00007f2ebf79c799 [ 245.630282][ T9310] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 245.638251][ T9310] RBP: 00007f2ebf832c99 R08: 0000000000000000 R09: 0000000000000000 [ 245.646218][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.654175][ T9310] R13: 00007f2ebfa16128 R14: 00007f2ebfa16090 R15: 00007ffe95148058 [ 245.662140][ T9310] [ 245.665209][ T9310] Kernel Offset: disabled [ 245.669521][ T9310] Rebooting in 86400 seconds..