last executing test programs: 9.653081556s ago: executing program 3 (id=1001): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttycd\x00', 0x0, 0x0) ioctl$auto_TIOCMBIC(r0, 0x5417, &(0x7f0000000040)="d266ef7f21ab13b5315907c01a261681a88d69a7b3b3b1f482afb174e08f774ca5fe2de44fa9a35f1bd8432f52bd559dfd7b8efa3606048253c09d56ee35") openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyaa\x00', 0x2240, 0x0) (async) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyaa\x00', 0x2240, 0x0) read$auto_console_fops_tty_io(r1, &(0x7f00000000c0)=""/159, 0x9f) (async) read$auto_console_fops_tty_io(r1, &(0x7f00000000c0)=""/159, 0x9f) capget$auto(&(0x7f0000000180)={0x1000}, &(0x7f00000001c0)={0x7, 0x1000, 0x6}) (async) capget$auto(&(0x7f0000000180)={0x1000, 0x0}, &(0x7f00000001c0)={0x7, 0x1000, 0x6}) r3 = fcntl$auto(r1, 0x1, r2) r4 = ioctl$auto_SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000200)=0x2) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r1, 0x0, &(0x7f0000000380)='SEG6\x00', &(0x7f00000003c0)="965c9066e16e3521b79da4747c465c03f265adfabeea5b221b947216954e9502d0c4ad2a7b2a32c96c2b56cce36c704c7534138e6f5a2eee50d69627333b8f31a2bf5489c70db0b61a62fa9a1bb41e0944", 0x4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000440), 0x3, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000440), 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r4) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r4) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x25c, r6, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x55}, @NL80211_ATTR_HE_OBSS_PD={0x230, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x51, 0x5, "14cf7d982bba20aa6450a4210ab3fbae8f038b09a0fe5387cdb03940fef3c70080a5902d828172effcb057e852dcb8b2500b15526e8f498815ff628915dc3d1dc42feacbcce535fc3ca025a9b8"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xbe, 0x4, "a9a6240224abca5f0eb7fafb6f1daf6bd6c36ad6c0f4a43f95ed3e6f715b75ec02a2d8d7fd2c854076dc845e5231b9f163d542cc754a89c9828fba7baabe9d4bf6138827cc01e14d88eeca0e69cdd014b991d56a0c9de774918264c39ae933f62500dd1350c21b83724c966524192b6d367b3e70b054d157c584ca5a8bdad2348fe058093ae61987dce4eea02d82fda924eaa1f7ef8fdd5f95f4c90eab1a9456c78c23c8b142a48429e28fb66f33a49ea8a8efb9d96e4b43dbba"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xed, 0x5, "4c2c0149d36ee47f2b1f9b908a27c172c128af37f74d843758cec55d9e6f87915c9787a3fd48392ff9a4276b96d57d00ecd758ff19a45da1170cd411b7dfbef6e0c512e26f76afa5869f58db90ec2c143b6fead567d0827eceee24269ca72a56c8d114956cec91c99d0c10ebfa697ce268fed369be9252163fc54e44ea0006601706eb7bddeee252a4ee093b36020526923f8baf29d3061f3ecf28f6f90a8f25f47b59e87f36c7eaae078e7af4e5ef9ea26248918a78e26a8eccdf0a83bfa79b1af18ec76904d74f34e2d04897cfa13fde89bbe2a007ed3846c38d7b63b7729ac9e9857ebccadca6f8"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x2e}]}, @NL80211_ATTR_MBSSID_CONFIG={0x10, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x84}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0xfb08cb3fc8cc8f6b}, 0x40000) lsetxattr$auto(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='/dev/ttycd\x00', &(0x7f0000000880)="560ff4c241c3a7ac89d31baedb674464818cf6785752a1720edb580ac7d9b85f63870e4893545e735ffd6ff13594433d37298ddd791fefe682e157030163b96b5a41949efacb692932ee47c442d4f71b2cb4f7e7771a01984a122e0e6fcbd3f23de922ac053587950655c899d39b45b9ff21025c3a1b009771f5fec4cc368ef7cd9465d6", 0x7ff, 0x5) open$auto(&(0x7f0000000940)='./file0\x00', 0x1, 0x9) r7 = clone3$auto(&(0x7f0000000980)={0x100000001, 0x9, 0xffffffffffffff01, 0x3, 0x3, 0x6, 0x7c94, 0x51, 0xd, 0xa6, 0xff}, 0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/bus/usb/033/001\x00', 0x80000, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/bus/usb/033/001\x00', 0x80000, 0x0) msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000ac0)={{0x4, 0xffffffffffffffff, 0x0, 0x552, 0x0, 0x1, 0x401}, &(0x7f0000000a40)=0x1, &(0x7f0000000a80)=0x2, 0x4, 0x2, 0xa9a, 0x7fff, 0x7fffffffffffffff, 0xae73, 0x8a, 0x3, @inferred=0xffffffffffffffff, @inferred=r7}) (async) msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000ac0)={{0x4, 0xffffffffffffffff, 0x0, 0x552, 0x0, 0x1, 0x401}, &(0x7f0000000a40)=0x1, &(0x7f0000000a80)=0x2, 0x4, 0x2, 0xa9a, 0x7fff, 0x7fffffffffffffff, 0xae73, 0x8a, 0x3, @inferred=0xffffffffffffffff, @inferred=r7}) shmctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000c00)={{0x400, 0xee00, 0x0, 0x4, 0x8, 0x4, 0x4}, 0x6, 0x8001, 0x1, 0x0, @raw=0x3, @raw=0xe28, 0x8, 0x0, &(0x7f0000000b40)="6e20870eac4d3f2bda1856f88e615500f61813c73cb6f1248cc8a8d00b2588c1da9747ac167441a2869d6bd49d1da95bd376b73f29", &(0x7f0000000b80)="7c1636e9b551e7f267ff7fc2569b4347dc55647ee9c4a8c73b21a0109effcc82ed914e91e7f267a91d9f1496d42b119067be3ad11d08be3d88fcd396d9a418dc40057754baec8deeaf8df641"}) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000000dc0)={{0x400, 0xffffffffffffffff, 0xee01, 0xfffff001, 0xc, 0x1, 0x4}, 0x7, 0xe0c, 0x3, 0x4, @raw=0xc27c, @raw=0x8, 0x5ae1, 0x0, &(0x7f0000000c80)="d8606e9b685307131381f76f6fd6569780e9764dae92298521d4c7da8e24f65c7fa030948403404fc219283e8efca5ca290545792a8cede20484a5271fd1efd71ee1980395f46d0138fc1f600e27fe9199500d4e", &(0x7f0000000d00)="fc8cc15ee1f0a3fe917024506ac9c7043ca57dc7be26003341de38b3cdeb38c9b95473452c77e5271c729f256da14f342d8f409b4c13614c00db41a57213e6a765643584c34bccffdc6eb9d25b094ed8e31aeb68938ad21ac77e105d9f9beb492252e290833cfbbafa182397215b7cda39669191598ec3c28a12408d23fb605d47214c9bdb30700673068d7365a6acf08dd9e5cb46076f5170cb2dbd1ea16810185b62"}) (async) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000000dc0)={{0x400, 0xffffffffffffffff, 0xee01, 0xfffff001, 0xc, 0x1, 0x4}, 0x7, 0xe0c, 0x3, 0x4, @raw=0xc27c, @raw=0x8, 0x5ae1, 0x0, &(0x7f0000000c80)="d8606e9b685307131381f76f6fd6569780e9764dae92298521d4c7da8e24f65c7fa030948403404fc219283e8efca5ca290545792a8cede20484a5271fd1efd71ee1980395f46d0138fc1f600e27fe9199500d4e", &(0x7f0000000d00)="fc8cc15ee1f0a3fe917024506ac9c7043ca57dc7be26003341de38b3cdeb38c9b95473452c77e5271c729f256da14f342d8f409b4c13614c00db41a57213e6a765643584c34bccffdc6eb9d25b094ed8e31aeb68938ad21ac77e105d9f9beb492252e290833cfbbafa182397215b7cda39669191598ec3c28a12408d23fb605d47214c9bdb30700673068d7365a6acf08dd9e5cb46076f5170cb2dbd1ea16810185b62"}) keyctl$auto(0x7f, r8, r10, r11, 0x9) r12 = pipe$auto(&(0x7f0000000e40)=r1) r14 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000ec0), r3) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r12, &(0x7f0000003140)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003100)={&(0x7f0000000f00)={0x21d0, r14, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x5}, @NFC_ATTR_LLC_SDP={0x2173, 0x13, 0x0, 0x1, [@generic="fc2b5bb2ebc2c6df45d8787615436780951db7b4618941d451c69428efbadee13ceefc830aafde4d376d19b8c476cf16dd0720b17ff65bafb85db13cbbf4e17a6c6d799cb3f1436d3895b2a59120bf6f50e67c4e7ae102a0b06e3e9ab8cb0fe331216a2f626318b7382ef5878d6aa125cc6377968200120f1423fc", @generic="8827c4ef961cfef4229383b4bf6260fb881cd45ab344f4438b6baa91a29fe47462fef07776e3d9ab143ef389f10e67dae5a9749e6d57379860", @nested={0x207f, 0x71, 0x0, 0x1, [@typed={0x4, 0x100}, @generic="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", @generic="88a0e31f2db15e084f7763d82db4fa9c035ca6666070f375c95db1fbbbd2323373f0d97a9ab837c63c03c185bbba2f23ccb08e5584d7fab1c9dc2811750ba69c47", @typed={0x8, 0x124, 0x0, 0x0, @pid=r9}, @generic="253023210c6e3bda8afad4f02b9db8a777c67ebc48f17ec467dfc41f88a6", @generic="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", @typed={0x8, 0xe9, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@empty}]}, @generic="51e455d9e075dbbb64042acf6e1b863e2e7bfb7bf2a86f76b3d3a1635ff768ebc6bdbcfa1a6bb919fc21214c442df4c6b5aee6a5e5d5804f9b6be2"]}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x40}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x8}]}, 0x21d0}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000031c0), r3) (async) r15 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000031c0), r3) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r13, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x14, r15, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$auto_FIONBIO(r0, 0x5421, 0x7) mbind$auto(0x9, 0x1, 0x3, &(0x7f00000032c0)=0x5, 0x4, 0x274b9391) mbind$auto(0x9, 0x8, 0x8, &(0x7f0000003300)=0x2, 0x3, 0x2) (async) mbind$auto(0x9, 0x8, 0x8, &(0x7f0000003300)=0x2, 0x3, 0x2) umask$auto(0x5) 9.207458881s ago: executing program 3 (id=1002): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1, 0x3000, 0x6, 0x7, 0x4007, 0xffffffffffffffff, [0xffffffff], {0xa, 0x6, 0x8c4c, 0x29f, 0x3, 0xfffffffa, 0x4, 0x6}, {0xe63c, 0x1, 0x52, 0xa5, 0x2, 0x1a7b870a, 0x76c2, 0x8000d, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x6b) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty57\x00', 0x0, 0x0) ioctl$auto(0x3, 0x40045436, 0x14) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop6\x00', 0x16fa02, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x800, 0x10) getdents$auto(r2, &(0x7f0000000f40)={0x1000000000302, 0xfffffffffffffffa, 0x7}, 0x18) sendfile$auto(0x3, r1, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) 8.349342488s ago: executing program 2 (id=1009): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x1, 0x2, 0x2, 0xb, 0x2e, 0x8000, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) r0 = socket(0x2, 0x801, 0x106) listen$auto(r0, 0xf52b) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 7.818958054s ago: executing program 2 (id=1010): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0xfffffffffffffffe, 0x10000000000009) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x4, 0x7, 0x3, 0x1d, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr5\x00', 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r2, @ANYBLOB="10002bbd7000ffdbdf250100000005001d000c000000d0fd45e490388d13dbe18677c722d324f244d17babfd9448ee4e256c552171c2849f9df21275c5689191db493f87768e6188cd79dda575c878fa"], 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4008890) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r3, 0x0, 0x1000200) r4 = socket(0x11, 0x80000, 0x300) recvmmsg$auto(r4, 0x0, 0x10001, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) getdents64$auto(r1, &(0x7f00000000c0)={0x8b7, 0x10001, 0xf, 0x93, "98926d09103960d20df0ba9d16ae893e3741690ae4481076201fa4bb8b303e86fa9a71398cdbf8d199433c6fb654c503820757f8ef95685067a283853b1f19944e9c9c2097c83d869e74f55c5d73680cacbc7dd3f4a914610eb6d726118c6a6bed8695427da3d7"}, 0xa224) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) r5 = fsopen$auto(0x0, 0x1) ioctl$auto_BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f00000005c0)={@raw=0xfffffffffffffffe, "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"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x800, 0x0) fsconfig$auto(r5, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptys4\x00', 0x10000, 0x0) 7.319767781s ago: executing program 0 (id=1011): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x3, 0x7) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) (async) madvise$auto(0x110c230000, 0x8031ca, 0x9) (async) madvise$auto(0x110d230000, 0x1, 0x9) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x121a01, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r1, r3, 0x0, 0x3) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) mprotect$auto(0x110c230000, 0xa588, 0x6) (async) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) (async, rerun: 64) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (rerun: 64) getdents64$auto(r4, 0x0, 0x18) (async, rerun: 32) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async, rerun: 32) mprotect$auto(0x0, 0x806121, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) read$auto(r5, &(0x7f00000003c0)=']%\'\x00', 0x5) (async, rerun: 32) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (rerun: 32) 6.70581713s ago: executing program 0 (id=1012): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1000, 0x84a5, 0xfffffffffe) ioctl$auto(0xc8, 0x801054db, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) pkey_free$auto(0x20001) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x4, 0x40, 0xd2d6, 0x0, 0xb, "000001004e050d08000800"}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r2, 0x28000) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x2, 0x9) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) poll$auto(&(0x7f0000000180)={r4, 0xfff7, 0x9816}, 0x7f, 0x9) getdents$auto(r1, &(0x7f0000000240)={0x2, 0x22, 0x6, "19c5b845f972638b60d426d26f1a1ddefe409ee4509efe543ac055751d95305080cc4213940ba762d490ce838cb0550adbe186bef7028cf86e9e55156603d1c677e28692e7eac31814ff24bc6041cb00931191e5dcb9296393fbaece7eaa1dbe7a5eb519ac6dcf76a155f96c74bc9342b5bba5c2efc65509d33b735cd5102b7b323d62185c81e40484a951ea984c1170bfce8d40382932695b54a907"}, 0x101) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x100408c0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(r1, 0x4b47, 0x1) prctl$auto_PR_SET_MM_BRK(0xfffffff8, 0x7, 0xffffffffffffffff, 0x0, 0x9) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0xcf68, 0x7, 0x9, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xd, 0x3, 0x1, 0x1000, 0x0, 0x1, 0x9, 0xfffffffffffffff9, 0xffffffffffff8003, 0x1000}, 0x8) msgctl$auto(0x4, 0x10000, 0x0) 5.627645297s ago: executing program 3 (id=1013): read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D2\x00', 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x4, 0x0, 0x0, 0x1, 0xb) ioctl$auto(r1, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0xc89, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) pselect6$auto(0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xffffffff, 0x100000000}, 0x0) futex$auto(0x0, 0x10b, 0x1, 0x0, 0x0, 0xfbfffffa) ioctl$auto(r2, 0x4b65, r2) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0) prctl$auto_PR_SET_TIMERSLACK(0x1d, 0x0, 0x3, 0x0, 0xfa) r4 = syz_clone(0x20008000, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto_transactions_fops_(r1, &(0x7f0000000280)=""/4096, 0x1000) capset$auto(&(0x7f0000000040)={0x800, r4}, &(0x7f0000000080)={0x8, 0x5, 0xf2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r3) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0) 5.472067218s ago: executing program 0 (id=1014): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = eventfd$auto(0x8c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2$auto(0x0, 0x80) r2 = getpid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/verbose\x00', 0x460600, 0x0) recvmmsg$auto(r0, &(0x7f00000025c0)={{&(0x7f0000000180)="5775ab921fcb118003a7eac2f942fd078aaacb99688b14b0203d4ae377500b534118469c4d1fcc90901c808b1cf74ccdb246c540ddc3a91e709ae14bdfb55bee47035f38121423079d58c10fa7240aeaa61baa625d023456f6c851d5473f3c9005fa32e540cec2801e99dfde9ce05a62b629225fdc2b2f6a70e3cd4f79a28c89a60eb3752fab559995", 0x40, &(0x7f0000000280)={&(0x7f0000000240), 0x1}, 0x7, &(0x7f00000002c0)="b3955e4a940c174a0378bf4affe9bf92716257370282be7134f9facec4b6db78b1a29478a914e1b53d420b87f92b3ef0e7c96c1feddf0dd47f044b38af77afa471b7eb79c3ccb10752f2da5baf4e3cc6524cb6818b3dd08ab6760e92808d3343926a09c87c168736412bfe93f736db8bdecd07", 0xf, 0x79}, 0x5cdf}, 0x6, 0xc6cc, &(0x7f0000000240)={0xf, 0x5}) r4 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r5 = socket(0x2, 0x80802, 0x0) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r5) r7 = getpgid(0xffffffffffffffff) sendmsg$auto_IPVS_CMD_NEW_DEST(r5, &(0x7f0000001700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="68130000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf25050000004c13038052d79991284a12976a844bcd0b18de9a2db65fb29190bccd3581ab4a4288703e91014585c1094c08386a9bd99aafbde1fffcbf15f0be5bff3cf1ecdf46b52aef206658d2ba18648922f46e4db24961391354844fcef6a2c6bd4fdf28de8514627a7db6f18c78d9377872f55ea8d738a3189f99041c4d9923207eaec132b78320385bf0e66596f19013427dc7ace87a7d2398b205b3e23ad90db3480ac863e5e2411ac45203bf29c2c5462e74d10a354571f3db70353af4a9db2209fee49787ffa9bb255d05468514000900ff010000000000000000000000000001641016800400028004000d8008006600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"/522], 0x1368}, 0x1, 0x0, 0x0, 0x80}, 0x20040850) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000002580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002540)={&(0x7f0000004780)=ANY=[], 0x20a0}, 0x1, 0x0, 0x0, 0x100}, 0x4040040) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/net/xfrm_stat\x00', 0xd000, 0x0) ptrace$auto_ARCH_SHSTK_ENABLE(0x3ff, r2, 0x4, 0x5001) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(r3, 0x0, 0x4ffffffff) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) 4.745556246s ago: executing program 2 (id=1016): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) (async, rerun: 32) r1 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) (rerun: 32) ioctl$auto_OSS_ALSAEMULVER2(r1, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") (async) mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r0, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x9, 0x8000000008011, r2, 0x808000) (async, rerun: 32) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x24045840) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, &(0x7f0000000080)=0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setsockopt$auto_SO_PEEK_OFF(r2, 0xff, 0x2a, &(0x7f0000000080)='/dev/nullb0\x00', 0x4) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x110c230000, 0x200001, 0x6) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) 4.627041008s ago: executing program 0 (id=1017): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x48c83, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x801, 0x84) fcntl$auto_F_GETFD(r3, 0x1, 0xffffffff) io_uring_setup$auto(0x4, 0x0) landlock_add_rule$auto(r0, 0x1, &(0x7f0000000200)="6739e025d8c93d3cb41d3848843770e5ff7083a47ebb83cfd0ddd07c", 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0xd9, &(0x7f0000000140)={@siginfo_0_0={0x6, 0x7ff, 0x8, @_sigsys={&(0x7f0000000280)="8a163100f59d0cafadbd6e1e4a34c26eaabacf380ecc65311ed086cdf51be037ebef6123989a1f9bc4ee29325604384dabc7604f8af8cc9d72664d2f6b6373930f6cfff3406c0e9203d7f75c58dbc62cdcf0dbfbb8ccf5c75d6ee1ba9175f5900f7d977adf290814a57bb3ca3e419309246f3749c8efabfe5cb45410e946af6801dc0d05", 0x5, 0xffffffff}}}, 0x700) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) epoll_create$auto(0x4) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x1, 0x7, 0x9, 0x4, 0x1}) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) epoll_create$auto(0x8800001) epoll_ctl$auto(r5, 0x1, r4, 0x0) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) getpid() 4.283131305s ago: executing program 2 (id=1018): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101681, 0x0) poll$auto(&(0x7f0000000200)={r0, 0x1, 0xa}, 0x25, 0x109) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x2f, 0x4, 0x7fffffffefff, 0x0, 0x0) socket(0x1e, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x4802, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x0, 0x1e02c17c, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x3, 0x80, 0x4, @inferred, @reserved="f4d3cddf749819bb6bb0ffd3be267660e604c2e08a7952f2d54b8e596d11dcd5ee5098a75a3f318489930c1f503095e5c0a36a5f52d607811d54a6470a9b3de1d9892e3f71557240924156c8a69ffb0edd71ede748c1037a5fc6134e8487c4f7b174337ba05c011359ed80fbe9a4f0d3a30abaa989213665d665999ec82de25d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000180), 0x1f}, 0x5, &(0x7f0000000180), 0x5, 0x5a}, 0x1401005}, 0x2, 0x100) pipe$auto(0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf250c00000008000100", @ANYRES32=0x0, @ANYBLOB="0800012e", @ANYRES32=r3, @ANYBLOB="0c0004000800000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_uhid_fops_uhid(r2, 0x0, 0xfccd) close_range$auto(0xffffffffffffffff, r0, 0x100000a) socket(0x10, 0x3, 0x6) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xd) 3.738439129s ago: executing program 2 (id=1019): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x4f) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) select$auto(0x7ff, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0x36a6f960, 0x3, 0x6, 0x6, 0x6, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x76]}, 0x0, 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) r1 = io_uring_setup$auto(0x1, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex=r3, r1, 0x4, 0x4e, r2, @relative_fd=r2, 0x41}, 0x10) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x2f, 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:256/strict_limit\x00', 0xa022, 0x0) write$auto(r5, &(0x7f00000001c0)='9\x00\\\xa0\x04|\x03\xcb\x12\x13\t\x1c\xc7k', 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x35, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x10001, 0x2000, 0x200, 0x0, 0x81, 0x2, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.928188269s ago: executing program 3 (id=1020): socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x20, 0x0, 0x1f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/sequencer/power/runtime_active_time\x00', 0x4a42c0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x105400, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES2(r2, 0x80489439, &(0x7f0000000140)=[{0x26b, 0x6d, 0x9}, {0x1ff, 0x5, 0x1}, {0x6, 0x2ab, 0x9}]) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) select$auto(0x4004, 0x0, &(0x7f0000000080)={[0x1c2f, 0x80000e9e, 0x80010000, 0xe, 0xfffffffffffffffb, 0x100000004, 0x2c2, 0x800002017e, 0x4, 0x9, 0x10000003, 0x9, 0xfb, 0x40, 0x1000803, 0x100000002]}, 0x0, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080), 0x4}, 0x4, 0x6c, 0x5c) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/notify_on_release\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)="6cb72f4e", 0x4) clone$auto(0x10421, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x81) sysfs$auto(0x2, 0x100000000000011, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = fsopen$auto(0x0, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) preadv$auto(0x3, 0x0, 0x3, 0x2, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x4, 0xe3, 0x16, 0x401, 0xffcf) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) setuid$auto(0xe) r6 = socket(0x10, 0x2, 0x0) bind$auto(r6, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) pread64$auto(r0, 0x0, 0x6, 0x40008) 2.074412357s ago: executing program 0 (id=1021): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0xdf2, 0x3, 0xc, &(0x7f00000000c0)=0x7ff) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, &(0x7f0000000140)="9b6c8801208b6fdf717fcd6c57ac1eb9d14bec4c58") r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto_SO_BUSY_POLL(r1, 0x8, 0x2e, 0x0, 0x0) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6) r2 = prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/clockevents/broadcast/current_device\x00', 0x181400, 0x0) pread64$auto(r3, 0x0, 0x7, 0xd3f3) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) write$auto_nsim_dev_max_vfs_fops_dev(r2, &(0x7f0000000340)="7234b4b18f81481a09999bebf7fdf8843f7923537f89e1d6766ced7a1a68c4c51015f246397783b9546045cf0c99fc585905c52c23f70ee6b04db52f0ec8b713debf739dae929eee365e0a049b5acc05020732dc1814736ca84ca5da216bcfddef091cc5de14ff9aeac0f803905168ee816fdb078d72bf205f1343a82a23262a56a083c2d26ec01a7401be0fbe4fe132f85b6270e2baefcd83da4bb35f0688fdb315cb9415fb15b41a17d367bbc009bb388f06f937ab060ceaa1c1ff8f51", 0xbe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c0004000000120001006d8771f1c19f17790485908286dd00000400028004000800"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000400)=""/217, 0xd9) mmap$auto(0x3, 0x4, 0x6, 0x736cf6f2, r3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2502cff3291849be3657003c80080019"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r7) 1.862741213s ago: executing program 1 (id=1023): r0 = fanotify_init$auto(0x5, 0x0) r1 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) (async) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) mq_timedsend$auto(r1, &(0x7f0000000040)='#-#{\x00', 0x1b5f5b780, 0xffffffff, &(0x7f0000000080)={0x3, 0x101}) (async) r3 = setfsuid$auto(0xee00) (async) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) (async) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2, 0x9, 0x2, 0xf, 0x0, 0x0, 0x0, 0x9, 0x5, 0x5, 0x80000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x4, 0x8}) setreuid$auto(r4, r5) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) 1.651171884s ago: executing program 1 (id=1024): socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x48101, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xd, 0x1, '&#$@\\]\\-\x00'}]}, 0x34}, 0x1, 0x300, 0x0, 0x801}, 0x0) socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x24, r3, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 1.528539379s ago: executing program 1 (id=1025): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) io_uring_setup$auto(0xa, 0x0) (async) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x591081, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "3ab0b86fbda1df44af3122352d439752fa942a96ec6ba1b2c91c505f950692dd", @raw=0xd82}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001440)={0xd, "edb3fe1f79fec9784d775afa38e3bdbfd95388bb3600c3bde59b00", @inferred=r1}) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(r3, 0x11, 0x1, 0x0, 0x8) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async) mprotect$auto(0x0, 0x8000000000000001, 0x1) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sysfs$auto(0x2, 0x5, 0x0) (async) fsopen$auto(0x0, 0x1) r4 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x1, 0x0) fcntl$auto_F_DUPFD(r2, 0x0, r4) (async) mprotect$auto(0x0, 0x20000806121, 0x6) 1.362076589s ago: executing program 0 (id=1026): madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0x50, 0x4, 0x4, 0x2, 0xce) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6e, {r1}}, 0x58) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x36281, 0x0) 1.244651262s ago: executing program 1 (id=1027): r0 = getpgid$auto(0x0) r1 = prctl$auto_PR_SET_MM_END_CODE(0x4a, 0x2, r0, 0x0, 0x6) r2 = prctl$auto_SIGCONT(0x400, 0x12, r0, 0x7, 0x5) close_range$auto(r2, r1, 0x10) readv$auto(r1, &(0x7f0000000040)={&(0x7f0000000000)="02f9df62e72dd31f76fe335f3528fdd19738f3e98ef238d6493fc48da1483f17e407ff47bf360b8a700873655f260390c90d44da486a2a3cff6e", 0x2}, 0x5eb1) r3 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x80000, 0x0) fcntl$auto_F_SETLKW(r3, 0x7, 0xff) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r1) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x0, 0x4, 0x1287, 0x401, 0x0, 0x2, 0x0, 0xfffffffffffffffa}}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xffff}, @OVS_VPORT_ATTR_UPCALL_PID={0x9b, 0x5, "034a36e4e4fef1c1e0ecae5d2ea2c4e821f7d99d5e4b8f81899cb1d104acb0f96f9c351935ee3fdd65d74b0117579646c6ea7068474f754739cfa1d1d4c8a806b3ded103c8b42dd9411c8b08a23551466643fd4f2cf6b2e70c01e326c7ae94b414b9a905d91e524f17af8f1bde25f1514d83b0f17ef20ef1f3aa26598acfcbe7d0c3fae596cf7eb4180910921f742af91af1881ae22030"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x8d, 0xa, 0x0, 0x1, [@generic="caa0d98b439848a067409f385acf65636ce47d57ed3957dfddc752385e3cc97253f73e4de47c19b52a624628f987f084d91ee6902e1f50da82b8ce77e6f4d60db2ef37595bc41752d640164137b1b4107fc68c2ad0444f0426b816acbe5c6e98deb6737b20e06eed2095efff4bbc61df85be735611c7661824dc4f42143550f1af28e4ffaf75dc134e"]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8041}, 0x94be91510be7c9e4) preadv$auto(r3, &(0x7f00000003c0)={&(0x7f0000000380)="95a3", 0x5}, 0x1ba920c0, 0x400, 0x4) r5 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000440)='@/,-\'{\x00', &(0x7f0000000480)="9503dee94007e12a576713880c295f6421e4bdcb43d55fcd3739d089d6e416b3a1bb05c667a3c923dda93db44ea793eca8f9f04b330d971219536468f7ef3c2aa608b2fc43e65e08b2df54f67ad63c73681633d6ca515c68ee7dd62b", 0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.1/power/autosuspend_delay_ms\x00', 0x221, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000580), 0x101040, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000880)={r3, &(0x7f00000005c0)="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", 0x80, &(0x7f00000006c0)="d74bd90e376c4576413c20d14f850bd2f210478eedfdca745f7cbc4599d420dc9dd0a19973cb1e5f462b2930927f2be37de431d5065c9fd19e4941ee9f44562627b63384abcd47ea51254feb3b38fb0526cf72b8dc425a3fca0f01dd5dd7a82df531a1a87584", 0xffff, &(0x7f0000000740)="158577746c5885018cf8af293018c48362e4ff8ba2e1fcd63b0a0862b6254c668d67c892309d0f30d521694dd8f1e1bac661da016d9f0e3d131b0800511c2a0c8ddad5d3e81b150bd022bf7c381b0e884460c3ee005d3a47340770def8db40605e559f7d7fb9d1c342f493cc15953d35c8e15de0ee0d1f81df86d289ce09173ff07cd8ac8e091e637c41be6ca117692645b2d91acf2c9c62e57bf03266d4a9a1466cb834b4c78c0d9763d17acbba0b69627b3303f105e19a9bbf9b26eb83c612b13d8f9e5c62ed04aeb0538eea483d3e12", &(0x7f0000000840)=0xe}) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r6, 0x4004550f, &(0x7f00000008c0)=0xffffffff) r7 = fsopen$auto(&(0x7f0000000900)='\xed$,]\x00', 0x6368) ioctl$auto_SG_IO2(r1, 0x2285, &(0x7f0000000940)="624f8eefbca63cf1b34eaffaec9a4339") r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000009c0), r1) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'macvlan0\x00'}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x94}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80480e4) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b00), r6) shmctl$auto_SHM_UNLOCK(0x9, 0xc, &(0x7f0000000c80)={{0xd, 0xffffffffffffffff, 0x0, 0x3, 0x9, 0x2, 0x7}, 0x80000000, 0x1, 0x0, 0x3, @raw=0x4, @inferred=r0, 0x1, 0x0, &(0x7f0000000b40)="6828e7e8d590563b867e47eb7ac8c5da574c05917d632ba4e13f47f86e2bde6fff608361580c198af819e7d041a81edd2dfe5d0e6e45ecdf58e707db1302f2d6a89dd4be1e7da6362b1a945e3f36847a27b9acb05fb15caf3c3bd69b656bb679869c2a4f09d700d2fc367aea2ee64506d71bf3a616a67bfda059cea3f4498002f5c6b1b314d1e84e1b200595269b3db46a3eaa2e6b7b9a98f1f7bf2cc16d91d11d44c86a4ec28163db15715e91cda9f2f7594ef49aa034076fde2062d4da9bddd02be97dd2b7cd631057e8dfa3b760d611d8b6e26546566f4191e61acaf98eda977170", &(0x7f0000000c40)="079212fd70fa17e600cd2cbce0c29cdf067afee3439a7da66311d93f04b187"}) sendmsg$auto_NL80211_CMD_TDLS_OPER(r7, &(0x7f0000001140)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000d00)={0x3e8, r9, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x8}, @NL80211_ATTR_MESH_CONFIG={0x6c, 0x23, 0x0, 0x1, [@typed={0x2b, 0x31, 0x0, 0x0, @binary="c4ef5e91ac30cebe50077b34bb51b8578a754ba07a9e7d07e46f17591e61f76567de7183c1c9db"}, @typed={0x4, 0xda}, @nested={0x18, 0x118, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x99}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=r0}]}, @generic="3b1991be7a74859c4b6986f2aaaa6e8d6696053d83ee326fc79a55380f46ec37"]}, @NL80211_ATTR_FILS_ERP_REALM={0xa4, 0xfa, "12a71d19eb80767197e79ff0d99a127a40b7c2a943e3d64c72c520d17edd414f324a4517143ad630deb036f28b2877db644b5c575f86d3b7eba73f883c264a0d9e18430884ce6ac41009e19ef39c6ac29d501bda5a393084678159357199b6109f981970055c7a188cb574488887bff37a924ac8dc5984d75f09e88d7da4de1a3642ebbe5e1fece7e757b1bcabfb24f18232723022e9dbe63cfdded6e8703388"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x80}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x40}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x80}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x299, 0x6e, 0x0, 0x1, [@generic="90db", @generic="87f933b8bcc1456c7a3e134cc360f87727a8c0a0d7b467925c2520ceddc3148b080fc3e45ef91e88523149766638f6e1ff4ba7ca", @typed={0x4, 0x11e}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=r10}, @nested={0xf3, 0xab, 0x0, 0x1, [@nested={0x4, 0x94}, @generic="612ea4841aceee42325a2252a75b63d781b9b8d2f2c22a2a903358d59e223769e373a696f505e05aea32cfb86d87c935b285613bc25bc06d6d0652bc5e236c627e6b695b5bd64d316fad07be4f469db6837b01387a0a8918d032e7e1fb377ca96721dc1cbd2b84ddb77d72041fc04f1862dcb32590ab4a8befe9f07826247959362f4530fc56dd0a257eb85f792a52178abf077d9a86e15b523c191f32a55e5989b57415697df81cfae63026b93895fb597d1ac6481e055af15633866e600fc72a8d41efb54ad15739508ed32c455710de303358902341804ca514d52cd7ea611fbce75d62d90db5be25ca"]}, @generic="99e666e151bdbcb803d70b21233e786424ad745e2bc42dda7e3a68d948bc5bbba79b251cd78726b0d4781932f27605a3e2e1f181a2bb7f90215c937eff77b3ff08fb5b2abf51b3f2c1f5e40751eff21d9a5bf292fee23fb459801a82387bb9670fe8cc87ffb78d79671c329dbf46fd39e4d30d520403a200a0739000d9657b07758f21099d836ce4929075f7f569ecec20fb30cbc7d6651f4d2827fda14b3306e68ff68dab9318e1c1e42316f2b1ef41d9c9df7e6d8217", @typed={0xd, 0x77, 0x0, 0x0, @str='macvlan0\x00'}, @nested={0x88, 0xd6, 0x0, 0x1, [@typed={0x80, 0x4, 0x0, 0x0, @binary="cfc422cb4e7258f9bd894e3bc8176511fc65fd639cd9487ef6d9f4fe56f2aa37e27f1ece43af145687926949ecd621faa50af1770215356b9d34446114a497a78e6bf834172e4789f3cacd6d5513f54933f6b3df2dcc7cc6a3b72fd4f720c8ba79e65fae56c840c2e86b7f85fe1a0ec7c0a4573f7b6486b8ad8999ed"}, @nested={0x4, 0xbf}]}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=r0}, @nested={0x8, 0x3f6e, 0x0, 0x1, [@nested={0x4, 0xa2}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x800}, 0x800) r11 = ioctl$auto_TUNDETACHFILTER(r6, 0x401054d6, &(0x7f00000011c0)={0x5, &(0x7f0000001180)={0x62, 0x9, 0x7, @inferred=r6}}) ioctl$auto_RNDGETENTCNT(r12, 0x80045200, &(0x7f0000001200)=0x2) sendmmsg$auto(r11, &(0x7f0000001480)={{&(0x7f0000001240)="0cc96988dd7858f9232ac0058b8644d30747b3dd9fecd07f2ffbb4bc399e536ad81e15ef7bbf5fa470363f3e9c25a6a6a2c975794ec4be5d00d556c6f9af209d359de750d1c1ce13b09d24c279344424e47ddc677b83f6154bed9afe4656a6ecbbee19620a86852309021e839123b2003b6da3110a67df848331b0da229cf2be60b4ecb604063aaa99e238688bfbbfb632ec", 0x3, &(0x7f0000001340)={&(0x7f0000001300)="3745779cea309498", 0x2}, 0x7a3b99f1, &(0x7f0000001380)="8c8cbfc7236bd9873bc9ea8467556ae31b1df3b0b1e21a3e506448eda987f4bc4d1e409d5ce95a2b4a5527c983286860d299f0a4e2c0b13391fde96e5f41773877fd443e7182e80cae16a0a78039232bf2da7dd8a756c724c04487ffd2258efd0d2ea20558c488c43ebb2724dd70e2af81ee6f0bfa99dd121bab4bf55ffedae7a7e338bbc931b79e2ec08d79643c0bb79f2e73dcea9d06dcf6ae4ac54fa2cbd4171c051f1570e26a38308e0b660b651e8987cddf7d992b81e921de605afa3d94495a119721b5ccadfcccecf0e737a74a6f6356f138335c4a26e9e0ae19bdba79d99b4c645bce7b6c814eb7", 0x2, 0x75ff}, 0xfffffffc}, 0xffffffff, 0x8) r13 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/thread-self/pagemap\x00', 0x400000, 0x0) unshare$auto(0x120a) ioctl$auto_TIOCCONS(r12, 0x541d, &(0x7f0000001500)="6ace015682e64b9667b1713f1e3722dcb35dcf5b1cbf540e0df11d891eb3cab381bfc367470810f12af77bf17daa4722a3605d8e260d1199d968aa4b0e521ce3ac64450f85eaf4edd54e83d16bfaaccd84aabce4439b32fa0f34b3a46d1f6f4ed98b9a21b4bc46e941944228e5dbac0ccf41c6e688ca467eccf673699a16e2ae953e9ffa7e780e940c2a3dbb144f3a13add16727bab0fdc82735a55b7db4c5d25ca939d5d1f6c62603ec3a6812978dda71c0e8b11baf963431a0ece28fcfb6f257602a6c0d336f7f189043c8ec31aefa4a5a5a0cd046bc9bb6a396d827d84d3b") getsockopt$auto_SO_TIMESTAMP_NEW(r13, 0x9, 0x3f, &(0x7f0000001600)='/sys/kernel/debug/bluetooth/rfcomm_dlc\x00', &(0x7f0000001640)=0x8001) 1.100992794s ago: executing program 1 (id=1028): socket(0x21, 0x2, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xa, 0x0) unshare$auto(0x8000400) socket(0x2, 0x3, 0xa) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000001440), 0x40002, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$auto_SO_ERROR(0xffffffffffffffff, 0x3, 0x4, 0x0, 0xd) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x34b502, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) select$auto(0xb, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x400, 0x0, 0x1, 0x37, 0x8, 0x15f4da07, 0x6, 0x0, 0x171, 0x80000020, 0x8000, 0x7, 0x9, 0x47fff, 0xd8]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/fs/bcache/pendings_cleanup\x00', 0xc0481, 0x0) write$auto(r1, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x4) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7bffffff, 0x4, 0x1023, 0x205, 0x10001, 0x8, r0, [], {0x6, 0x6, 0x4, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0xfffffffd, 0x673, 0x10001, 0x76c4, 0x80008, 0x5}}) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="20008000", @ANYRES16=r2, @ANYBLOB="250f26bd7000fbdbdf25030000000400080008000a0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x800) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0xa, 0x300) prctl$auto(0x691, 0x1, 0x0, 0x1, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x9, 0x6, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) 1.025428711s ago: executing program 3 (id=1029): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa440002}, 0xc, &(0x7f0000001a00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c050000", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf250200000007050a807c01d88014000a00000000000000000000000000000000018c5e7904b62ded848c5a778ccb9fcd960d5745f5cea399f1393201d03ff61c8faad2714a3f3cb433cf059ecaabcadab9b937fa6270f5834c8977b164f51f8a5010c2391b321a51ed2e59e62b82050afea490c39f241c0bccc4eca2a23856a7463f5922c1e87d7c003922ae40afeb062934923dd36f2ebb228b936966e22c6ef66079c2fc3021977473b17d917d82c4b34eb65f20bd151f080442ea1e9e9145df1e2826836b038d77a91cf3bc1c8e336491d9e593c9de15e694a026b12d4b60593ccff1177b10e75c4ddc060f10dd75faa446540cd4d2789346397d7ec6ef83a74728f306d8a679df003a270e6bbe6d9d34a5c5bff4578c2b78df5f7a0108d105b44a38f769e5a4266a314301bc9d1f94d274645b0c1e5912937fa615ad900e00f090e3c8983552b54cea92f0821b21b88777ffb0b5bf967a7fb3d02a41fdbbbb8516b63c42db43e832d8619d2907d24873200a68c154338a239ec64a0400f8800400e580cea3b1eb5035f2ada7a6b369d9cae80acbce4557f0a5750e99a779e2b15337c19c29137b5f3c8b42c22922d5fc413ad50eac5db9d9600a977494ac571a4cc04d4ef62f297b19171852125f670e0986874ebd14c9069aa95a53648686fd3687a6e1b112d0f14449ee614bc9253faa00f7e2cb1278c5cb429df67247106ca66808003300ffffffffa2e51c731e48c1c636ffffe1588d1951c13ab2c929acd0618de874f0cf024b800400400014000500fe88000000000000000000000000000104004680a00d8ff41cccbf55c36b5d5793b6ad42435e2cc5368e1f7460d84ab4104519e965f9ddc2952e5c7833887d56fbf664f0c427fe74c8e656a2c630037a9b04033ce61f32864a8ca1909fb177864116d7e5b835df404cde2e7b18d069155563fbbe8c295df3fb0e4b465f9ad68cac8994bd7cb152b40f837efa7f8155c887cc82b77054893cb8183bd7d5283ad5b395492caad2d0e6114d4d314b6968b6858a1e20094f7e7c5243ebbaea2f639e9f0bf971a18f68326f7844933654971c4f0156eb94fd978405a40ea23d0e0fbfcd88be971646869ca13f179a0b673ae041c9c02e32a32dd05530f6c35ae0c5b7dcb4bb265fcf856a030b981bb322d4928329ec5ff77e4ad21dd42b1392491d534b63fb1aae4e2e5f3ffcd818ed6693a63d260bf76118ebdb0907505a66d6c8cd91e916af9c590fad10485dca7b11b67b7aa70069d9b8b1192e04635a0b4ce37724474ee08608003400", @ANYRES32=0x0, @ANYBLOB="ade57f643a14595b914c973a369390e6bfb2fe25a488f8967b8d2912c14299b8b4f9d6d8a46c6c6bd54c6c937a45a412bc7311a20162a1ee859a7ec087e3c4895833e0323c4837d09ce4f000672e1fa0ebeb59fb041bcf4d6d46fc508712950a58514d6151b7675cbf7ba9eaaf23cd9e9bf56ab078b56d0ed50b1839e3db54d3420c1b4042dddd7867fcb86f3abed33f49040326091e384f124cc9d0afeceefa55525b630647420f1fb7764ba6909c52d36d58e188e5aa204bc9aa96081303a5d8b8bf603147f0617a97437db03901171e66970c3da108005b00", @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc724c22a764446162708f4c7e28de820014001c0000000000000000000000ffffe000000100"], 0x51c}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000a00)='/\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x95\xcaA\xaeP\xfb\x98\xec\x85y3\xf2\xa8\x9e\n\x9b\xf2\xf6\x13[\xefZi@\x93\x85\xa1\xe0\x81z\xd0\x8fq\x94\x0f\x92\xf5\xabt\x1c\x17\x91\x8d\x9c\x7f\x8fb\xe3p\xa1J\v\xefM^\xfc72\x87\xee\\Ob\xbb\xa6\xf8\xfdEv\xbb\xd0\td\"\xd9\x8b\x10\xf1\xf3\xae\x19\x8b\x8d\xf0\x90r[\xec\xc2\xd6\xffhP\x7f\x97\xdd\xe0\xdd\xf8`\x9b\x19\x8f\x87Lm\xd7\xa00u\x81Z\xf6\x97\xd6\xdc\x00\xd3\xd2', 0x80000000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000240)='/proc/kmsg\x00', 0x88102, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fb, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x800000000004]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x2000000008000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x4bd, 0x0, 0x1000, &(0x7f0000000040)=0x2) write$auto(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25f500000006001000010000000400ae00080027004d29000004004a01"], 0x3}, 0x1, 0x0, 0x0, 0x890}, 0x800c5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) 526.970223ms ago: executing program 3 (id=1030): ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1, 0x5, 0x6, 0x8, [0xfffffffffffffff2, 0xffff, 0x4, 0x10, 0xa5, 0x72]}) mmap$auto(0x1, 0x5, 0x3, 0x200eb1, 0xffffffffffffffff, 0x3) r0 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x2, 0x1, 0x4, 0x8000000000008, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x2, 0x0) r2 = socket(0x2, 0x5, 0x84) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @rand_addr=0x640100ff}, 0x55) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) ioctl$auto(0x3, 0x89e3, 0x91) read$auto_uinput_fops_uinput(r1, &(0x7f0000000180)=""/206, 0xce) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x40c) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b1000000", @ANYRES32=0x0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r3, &(0x7f00000000c0)='.', 0x1) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000280), 0x521000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd4ea9d07400fcdbdf25140000000c00080000", @ANYRES32=r6, @ANYBLOB='\b\x00 \x00\a\x00\x00\x00'], 0x28}}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 113.193838ms ago: executing program 2 (id=1031): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyte\x00', 0x421c83, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) socket(0x11, 0x5, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x7, 0x9, 0x8, 0x3, 0x1, 0x5, 0x6, 0x5]}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') poll$auto(&(0x7f0000000340)={r2, 0x5, 0x3}, 0x4, 0x101) 0s ago: executing program 1 (id=1032): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) ioctl$auto_VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, 0x0, 0x3e, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)='+') (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/devices\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x0) (async) ioctl$auto(0x3, 0x40086200, 0x38) (async) socket(0x2, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0) mmap$auto(0x0, 0x68, 0x3, 0x8012, 0x3, 0x83000000) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) kernel console output (not intermixed with test programs): sim netdevsim1 netdevsim2: renamed from eth2 [ 95.223239][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.239731][ T4951] Bluetooth: hci1: command tx timeout [ 95.246939][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.257676][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.377390][ T5640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.392394][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.400861][ T4951] Bluetooth: hci3: command tx timeout [ 95.400903][ T4951] Bluetooth: hci2: command tx timeout [ 95.414918][ T5640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.425309][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.446001][ T5640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.457622][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.466191][ T5640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.476263][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.593115][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.606100][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.618726][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.635664][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.646888][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.665552][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.676073][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.684751][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.695275][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.738861][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.757491][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.790115][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.797795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.838176][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.845728][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.888116][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.925263][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.932894][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.982788][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.990036][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.036051][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.123223][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.153371][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.160642][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.197998][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.205296][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.306301][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.436161][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.464995][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.472270][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.558334][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.565607][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.107922][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.244423][ T50] Bluetooth: hci0: command tx timeout [ 97.295554][ T5631] veth0_vlan: entered promiscuous mode [ 97.320034][ T50] Bluetooth: hci1: command tx timeout [ 97.357418][ T5631] veth1_vlan: entered promiscuous mode [ 97.382430][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.479367][ T50] Bluetooth: hci2: command tx timeout [ 97.485440][ T4951] Bluetooth: hci3: command tx timeout [ 97.533296][ T5631] veth0_macvtap: entered promiscuous mode [ 97.546808][ T5631] veth1_macvtap: entered promiscuous mode [ 97.645630][ T5637] veth0_vlan: entered promiscuous mode [ 97.673603][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.692082][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.704171][ T5637] veth1_vlan: entered promiscuous mode [ 97.728600][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.770327][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781802][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.809186][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.820689][ T1127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.911499][ T5637] veth0_macvtap: entered promiscuous mode [ 97.945307][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.992589][ T5637] veth1_macvtap: entered promiscuous mode [ 98.002687][ T5640] veth0_vlan: entered promiscuous mode [ 98.055910][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.057110][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.076955][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.093879][ T5640] veth1_vlan: entered promiscuous mode [ 98.121146][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.166429][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.175232][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.184122][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.193364][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.208648][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.218894][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.312306][ T5639] veth0_vlan: entered promiscuous mode [ 98.326599][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.360020][ T5640] veth0_macvtap: entered promiscuous mode [ 98.375736][ T5640] veth1_macvtap: entered promiscuous mode [ 98.395230][ T5639] veth1_vlan: entered promiscuous mode [ 98.500542][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.522349][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.554314][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.571523][ T5783] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.624753][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.635732][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.645977][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.695573][ T1127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.718932][ T1127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.760995][ T1127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.772802][ T1127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.794063][ T5639] veth0_macvtap: entered promiscuous mode [ 98.854831][ T5639] veth1_macvtap: entered promiscuous mode [ 98.910503][ T5790] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.028059][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.126079][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.146579][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.180612][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.210079][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.230498][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.273374][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.287388][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.319221][ T4951] Bluetooth: hci0: command tx timeout [ 99.375301][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.396058][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.409605][ T4951] Bluetooth: hci1: command tx timeout [ 99.559764][ T4951] Bluetooth: hci3: command tx timeout [ 99.565527][ T50] Bluetooth: hci2: command tx timeout [ 99.853684][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.889142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.034316][ T5802] Zero length message leads to an empty skb [ 100.051442][ T50] Bluetooth: hci0: unexpected event 0x10 length: 124 > 1 [ 100.052245][ T50] Bluetooth: hci0: hardware error 0x00 [ 100.114025][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.159479][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.290497][ T5812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.777167][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 101.083600][ T5817] vivid-007: ================= START STATUS ================= [ 101.099223][ T5817] vivid-007: Generate PTS: true [ 101.120247][ T5817] vivid-007: Generate SCR: true [ 101.153169][ T5817] tpg source WxH: 320x240 (Y'CbCr) [ 101.188250][ T5817] tpg field: 1 [ 101.204549][ T5817] tpg crop: (0,0)/320x240 [ 101.204590][ T5817] tpg compose: (0,0)/320x240 [ 101.204613][ T5817] tpg colorspace: 8 [ 101.204626][ T5817] tpg transfer function: 0/0 [ 101.204654][ T5817] tpg Y'CbCr encoding: 0/0 [ 101.204671][ T5817] tpg quantization: 0/0 [ 101.204686][ T5817] tpg RGB range: 0/2 [ 101.204703][ T5817] vivid-007: ================== END STATUS ================== [ 101.294206][ T5812] FAULT_INJECTION: forcing a failure. [ 101.294206][ T5812] name failslab, interval 1, probability 0, space 0, times 1 [ 101.294302][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 101.294341][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.294368][ T5812] Call Trace: [ 101.294379][ T5812] [ 101.294391][ T5812] dump_stack_lvl+0x100/0x190 [ 101.294459][ T5812] should_fail_ex.cold+0x5/0xa [ 101.294503][ T5812] should_failslab+0xc2/0x120 [ 101.294562][ T5812] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 101.294618][ T5812] ? __d_alloc+0x34/0xa40 [ 101.294671][ T5812] __d_alloc+0x34/0xa40 [ 101.294718][ T5812] d_alloc+0x4a/0x1e0 [ 101.294763][ T5812] lookup_one_qstr_excl+0x171/0x250 [ 101.294815][ T5812] __start_renaming+0x16d/0x520 [ 101.294874][ T5812] filename_renameat2+0x538/0xa60 [ 101.294936][ T5812] ? __pfx_filename_renameat2+0x10/0x10 [ 101.294994][ T5812] ? __might_fault+0xc5/0x140 [ 101.295065][ T5812] ? do_getname+0x191/0x390 [ 101.295119][ T5812] __x64_sys_rename+0x81/0xb0 [ 101.295170][ T5812] do_syscall_64+0x115/0x840 [ 101.295217][ T5812] ? clear_bhb_loop+0x40/0x90 [ 101.295257][ T5812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.295292][ T5812] RIP: 0033:0x7f5b59b9ce59 [ 101.295318][ T5812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.295350][ T5812] RSP: 002b:00007f5b5aa1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 101.295390][ T5812] RAX: ffffffffffffffda RBX: 00007f5b59e15fa0 RCX: 00007f5b59b9ce59 [ 101.295411][ T5812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.295431][ T5812] RBP: 00007f5b59c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 101.295451][ T5812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.295471][ T5812] R13: 00007f5b59e16038 R14: 00007f5b59e15fa0 R15: 00007ffde6ab4aa8 [ 101.295523][ T5812] [ 102.120308][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 102.310893][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 102.347221][ T5845] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14'. [ 102.531572][ T5815] kexec: Could not allocate control_code_buffer [ 102.854413][ T5857] random: crng reseeded on system resumption [ 106.577580][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.965990][ T5897] loop6: detected capacity change from 0 to 8 [ 107.741817][ T5923] mmap: syz.1.28 (5923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.943345][ T5938] MTRR 1 not used [ 109.194192][ T5940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'. [ 110.577650][ T5960] ima: policy update failed [ 110.584367][ T30] audit: type=1802 audit(1781493415.961:2): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.38" res=0 errno=0 [ 110.849590][ T5961] random: crng reseeded on system resumption [ 111.332988][ T5975] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 113.653216][ T6009] netlink: 334 bytes leftover after parsing attributes in process `syz.0.48'. [ 113.747699][ T6003] syz.2.45 (6003) used greatest stack depth: 18808 bytes left [ 115.171058][ T6034] vivid-007: ================= START STATUS ================= [ 115.202242][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 115.309986][ T6034] vivid-007: Generate PTS: true [ 115.350195][ T6034] vivid-007: Generate SCR: true [ 115.394884][ T6034] tpg source WxH: 320x240 (Y'CbCr) [ 115.486066][ T6034] tpg field: 1 [ 115.520805][ T6034] tpg crop: (0,0)/320x240 [ 115.594199][ T6034] tpg compose: (0,0)/320x240 [ 115.634168][ T6034] tpg colorspace: 8 [ 115.707895][ T6034] tpg transfer function: 0/0 [ 115.759137][ T6034] tpg Y'CbCr encoding: 0/0 [ 115.809252][ T6034] tpg quantization: 0/0 [ 115.890673][ T6034] tpg RGB range: 0/2 [ 115.948639][ T6034] vivid-007: ================== END STATUS ================== [ 117.518459][ T6044] Process accounting resumed [ 117.975031][ T6061] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.582785][ T6059] FAULT_INJECTION: forcing a failure. [ 118.582785][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 118.632914][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT(full) [ 118.632950][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.632965][ T6059] Call Trace: [ 118.632973][ T6059] [ 118.632982][ T6059] dump_stack_lvl+0x100/0x190 [ 118.633030][ T6059] should_fail_ex.cold+0x5/0xa [ 118.633062][ T6059] should_failslab+0xc2/0x120 [ 118.633092][ T6059] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 118.633143][ T6059] ? seq_open+0x55/0x170 [ 118.633188][ T6059] seq_open+0x55/0x170 [ 118.633228][ T6059] blk_mq_debugfs_open+0x106/0x1b0 [ 118.633272][ T6059] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 118.633312][ T6059] full_proxy_open_regular+0x1b6/0x370 [ 118.633354][ T6059] do_dentry_open+0x6ab/0x14d0 [ 118.633387][ T6059] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 118.633461][ T6059] vfs_open+0x82/0x3f0 [ 118.633513][ T6059] path_openat+0x208c/0x31a0 [ 118.633556][ T6059] ? __pfx_path_openat+0x10/0x10 [ 118.633603][ T6059] do_file_open+0x20e/0x430 [ 118.633637][ T6059] ? __pfx_do_file_open+0x10/0x10 [ 118.633690][ T6059] ? alloc_fd+0x476/0x790 [ 118.633722][ T6059] ? do_getname+0x191/0x390 [ 118.633762][ T6059] do_sys_openat2+0x10d/0x1e0 [ 118.633802][ T6059] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.633843][ T6059] ? __fget_files+0x21f/0x3d0 [ 118.633878][ T6059] __x64_sys_openat+0x12d/0x210 [ 118.633918][ T6059] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.633963][ T6059] ? rcu_is_watching+0x12/0xc0 [ 118.633996][ T6059] do_syscall_64+0x115/0x840 [ 118.634031][ T6059] ? clear_bhb_loop+0x40/0x90 [ 118.634061][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.634086][ T6059] RIP: 0033:0x7f5b59b9ce59 [ 118.634106][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.634129][ T6059] RSP: 002b:00007f5b5aa1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.634152][ T6059] RAX: ffffffffffffffda RBX: 00007f5b59e15fa0 RCX: 00007f5b59b9ce59 [ 118.634168][ T6059] RDX: 0000000000189e42 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 118.634184][ T6059] RBP: 00007f5b59c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 118.634199][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.634213][ T6059] R13: 00007f5b59e16038 R14: 00007f5b59e15fa0 R15: 00007ffde6ab4aa8 [ 118.634244][ T6059] [ 119.818592][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 121.055524][ T6106] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 121.387527][ T6089] vivid-007: ================= START STATUS ================= [ 121.437556][ T6089] vivid-007: Generate PTS: true [ 121.446517][ T6089] vivid-007: Generate SCR: true [ 121.489546][ T6089] tpg source WxH: 320x240 (Y'CbCr) [ 121.518260][ T6089] tpg field: 1 [ 121.590315][ T6089] tpg crop: (0,0)/320x240 [ 121.637276][ T6089] tpg compose: (0,0)/320x240 [ 121.663398][ T6089] tpg colorspace: 8 [ 121.712456][ T6089] tpg transfer function: 0/0 [ 121.756856][ T6089] tpg Y'CbCr encoding: 0/0 [ 121.799032][ T6089] tpg quantization: 0/0 [ 121.835041][ T6089] tpg RGB range: 0/2 [ 121.887107][ T6089] vivid-007: ================== END STATUS ================== [ 123.525954][ T30] audit: type=1800 audit(1781493428.901:3): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.75" name="dbroot" dev="configfs" ino=9563 res=0 errno=0 [ 127.818434][ T6229] FAULT_INJECTION: forcing a failure. [ 127.818434][ T6229] name fail_futex, interval 1, probability 0, space 0, times 1 [ 127.832910][ T6229] CPU: 0 UID: 0 PID: 6229 Comm: syz.2.91 Not tainted syzkaller #0 PREEMPT(full) [ 127.832953][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.832971][ T6229] Call Trace: [ 127.832981][ T6229] [ 127.832997][ T6229] dump_stack_lvl+0x100/0x190 [ 127.833058][ T6229] should_fail_ex.cold+0x5/0xa [ 127.833100][ T6229] get_futex_key+0x295/0x1510 [ 127.833157][ T6229] ? __pfx_get_futex_key+0x10/0x10 [ 127.833209][ T6229] ? lock_acquire+0x1b1/0x370 [ 127.833271][ T6229] futex_wake+0xea/0x530 [ 127.833315][ T6229] ? __pfx_futex_wake+0x10/0x10 [ 127.833353][ T6229] ? exit_mm_release+0x19/0x30 [ 127.833411][ T6229] do_futex+0x32b/0x350 [ 127.833444][ T6229] ? __pfx_do_futex+0x10/0x10 [ 127.833474][ T6229] ? __might_fault+0xc5/0x140 [ 127.833534][ T6229] mm_release+0x24a/0x2f0 [ 127.833573][ T6229] do_exit+0x707/0x2af0 [ 127.833627][ T6229] ? __pfx_do_exit+0x10/0x10 [ 127.833681][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 127.833715][ T6229] ? find_held_lock+0x2b/0x80 [ 127.833754][ T6229] ? get_signal+0x7e5/0x2210 [ 127.833796][ T6229] do_group_exit+0xd5/0x2a0 [ 127.833848][ T6229] get_signal+0x20ff/0x2210 [ 127.833903][ T6229] ? __pfx_get_signal+0x10/0x10 [ 127.833946][ T6229] ? do_futex+0x192/0x350 [ 127.833982][ T6229] arch_do_signal_or_restart+0x91/0x7a0 [ 127.834034][ T6229] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 127.834092][ T6229] ? fput+0x79/0x100 [ 127.834137][ T6229] ? rcu_is_watching+0x12/0xc0 [ 127.834180][ T6229] exit_to_user_mode_loop+0x98/0x670 [ 127.834231][ T6229] ? rcu_is_watching+0x12/0xc0 [ 127.834271][ T6229] do_syscall_64+0x652/0x840 [ 127.834316][ T6229] ? clear_bhb_loop+0x40/0x90 [ 127.834355][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.834387][ T6229] RIP: 0033:0x7f5b59b9ce59 [ 127.834412][ T6229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.834456][ T6229] RSP: 002b:00007f5b5aa1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.834486][ T6229] RAX: fffffffffffffe00 RBX: 00007f5b59e15fa8 RCX: 00007f5b59b9ce59 [ 127.834506][ T6229] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5b59e15fa8 [ 127.834525][ T6229] RBP: 00007f5b59e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 127.834544][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.834562][ T6229] R13: 00007f5b59e16038 R14: 00007ffde6ab49c0 R15: 00007ffde6ab4aa8 [ 127.834604][ T6229] [ 129.121288][ T6256] udc dummy_udc.0: soft-connect without a gadget driver [ 129.856390][ T30] audit: type=1804 audit(1781493435.231:4): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.99" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=26 res=1 errno=0 [ 129.884248][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 130.029255][ T6269] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 130.251795][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 132.922598][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934337][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.397029][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 136.011308][ T6355] process 'syz.3.117' launched './file0' with NULL argv: empty string added [ 136.441168][ T4951] Bluetooth: hci1: command 0x2016 tx timeout [ 136.893882][ T6361] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 136.951510][ T6374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.979770][ T6374] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.129140][ T6374] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.172081][ T6374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.177106][ T6376] netlink: 350 bytes leftover after parsing attributes in process `syz.2.118'. [ 137.195698][ T6374] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 137.220393][ T6374] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 137.233766][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.687003][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.807948][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.822347][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.835139][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.853706][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.864155][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.897672][ T6380] netlink: zone id is out of range [ 137.940503][ T6380] netlink: zone id is out of range [ 137.950996][ T6380] netlink: zone id is out of range [ 138.009912][ T6380] netlink: zone id is out of range [ 138.030593][ T6380] netlink: zone id is out of range [ 138.065811][ T6380] netlink: zone id is out of range [ 138.082632][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.122766][ T6380] netlink: zone id is out of range [ 138.142752][ T6380] netlink: zone id is out of range [ 138.149292][ T6380] netlink: zone id is out of range [ 138.172751][ T6380] netlink: zone id is out of range [ 138.318310][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.999441][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.240609][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.386122][ T6415] block2mtd: too many arguments [ 139.969687][ T50] Bluetooth: hci1: command tx timeout [ 140.015696][ T12] bridge_slave_1: left allmulticast mode [ 140.027749][ T12] bridge_slave_1: left promiscuous mode [ 140.036180][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.064714][ T12] bridge_slave_0: left allmulticast mode [ 140.070728][ T12] bridge_slave_0: left promiscuous mode [ 140.079114][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.539313][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.583201][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.606048][ T12] bond0 (unregistering): Released all slaves [ 141.079334][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.319991][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.049273][ T50] Bluetooth: hci1: command tx timeout [ 142.271154][ T12] hsr_slave_0: left promiscuous mode [ 142.291267][ T12] hsr_slave_1: left promiscuous mode [ 142.319973][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.343864][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.385488][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.415227][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.495630][ T12] veth1_macvtap: left promiscuous mode [ 142.511217][ T12] veth0_macvtap: left promiscuous mode [ 142.524885][ T12] veth1_vlan: left promiscuous mode [ 142.546374][ T12] veth0_vlan: left promiscuous mode [ 143.160400][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.399160][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.454671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.483886][ T12] team0 (unregistering): Port device team_slave_0 removed [ 143.743846][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 143.806400][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.815170][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.825686][ T6395] bridge_slave_0: entered allmulticast mode [ 143.836548][ T6395] bridge_slave_0: entered promiscuous mode [ 143.878098][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.885538][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.893280][ T6395] bridge_slave_1: entered allmulticast mode [ 143.901258][ T6395] bridge_slave_1: entered promiscuous mode [ 143.956092][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.978318][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.096189][ T6395] team0: Port device team_slave_0 added [ 144.110721][ T6395] team0: Port device team_slave_1 added [ 144.129357][ T50] Bluetooth: hci1: command tx timeout [ 144.175642][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.190042][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.221031][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.237118][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.245734][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.273739][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.363436][ T6445] Process accounting resumed [ 144.558246][ T6395] hsr_slave_0: entered promiscuous mode [ 144.584524][ T6395] hsr_slave_1: entered promiscuous mode [ 144.609931][ T6395] debugfs: 'hsr0' already exists in 'hsr' [ 144.628715][ T6395] Cannot create hsr debugfs directory [ 145.471166][ T6517] Process accounting resumed [ 146.084432][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 146.199281][ T50] Bluetooth: hci1: command tx timeout [ 146.440748][ T6548] netlink: 25 bytes leftover after parsing attributes in process `syz.0.137'. [ 147.603272][ T6570] netlink: 338 bytes leftover after parsing attributes in process `syz.0.139'. [ 147.877740][ T6559] Process accounting paused [ 148.003590][ T6395] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.081263][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.117485][ T6395] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.206954][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.241355][ T6395] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.352033][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.361514][ T6395] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.393445][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.087755][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.409589][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.469081][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.476333][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.653916][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.661197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.277625][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.602459][ T6679] NFSD: Failed to start, no listeners configured. [ 153.263238][ T6395] veth0_vlan: entered promiscuous mode [ 153.378044][ T6395] veth1_vlan: entered promiscuous mode [ 154.123167][ T6395] veth0_macvtap: entered promiscuous mode [ 154.195135][ T6395] veth1_macvtap: entered promiscuous mode [ 154.267170][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.293763][ T6711] futex_wake_op: syz.2.154 tries to shift op by -2048; fix this program [ 154.324018][ T6711] 0x000000000001-0x000000020000 : "" [ 154.336223][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.415099][ T6711] ftl_cs: FTL header corrupt! [ 154.450977][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.736196][ T6722] syz.3.155 (6722): attempted to duplicate a private mapping with mremap. This is not supported. [ 154.798976][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.837628][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.870841][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.560447][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.570239][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.143101][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.160909][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.173029][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.158'. [ 156.408406][ T6743] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 156.745499][ T6754] random: crng reseeded on system resumption [ 158.671203][ T6796] sd 0:0:1:0: PR command failed: 1026 [ 158.705563][ T6796] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 158.726782][ T6796] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 161.022753][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 162.401013][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.410689][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.885126][ T6872] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 163.258044][ T6872] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 163.267732][ T6872] pci 0000:00:01.3: PCI INT A: no GSI [ 164.392562][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 164.434285][ T6902] veth0_macvtap: left promiscuous mode [ 166.935155][ T6956] zswap: compressor not available [ 166.965156][ T6965] netlink: 'syz.2.205': attribute type 11 has an invalid length. [ 168.121917][ T809] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 168.629284][ T7001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.679530][ T7001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.701280][ T7001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.711128][ T7001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.778953][ T7001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.811713][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 170.759844][ T4951] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.766320][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.145803][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880346ea800: rx timeout, send abort [ 171.158366][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880346ea800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.483162][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 171.525336][ T7041] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.554011][ T7041] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.660559][ T7041] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.689528][ T7041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.599154][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.435251][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 173.458739][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 173.719172][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.725293][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.063148][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 174.212429][ T7141] veth1_macvtap: left promiscuous mode [ 174.679480][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.801598][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.125517][ T7193] bridge0: port 3(dummy0) entered blocking state [ 177.165811][ T7193] bridge0: port 3(dummy0) entered disabled state [ 177.182857][ T7193] dummy0: entered allmulticast mode [ 177.192138][ T7193] dummy0: entered promiscuous mode [ 177.198377][ T7193] bridge0: port 3(dummy0) entered blocking state [ 177.206088][ T7193] bridge0: port 3(dummy0) entered forwarding state [ 177.721364][ T5644] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.773408][ T7209] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6395] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7209] [ 177.854455][ T7151] Process accounting paused [ 179.328869][ T7198] Process accounting resumed [ 179.765508][ T7232] netlink: 354 bytes leftover after parsing attributes in process `syz.3.249'. [ 182.416440][ T7284] netlink: 186 bytes leftover after parsing attributes in process `syz.1.257'. [ 185.346209][ T7334] netlink: 350 bytes leftover after parsing attributes in process `syz.0.266'. [ 185.673450][ T7351] random: crng reseeded on system resumption [ 185.767586][ T7352] Unrecognized hibernate image header format! [ 185.775966][ T7352] PM: hibernation: Image mismatch: architecture specific data [ 185.892608][ T1127] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.007403][ T7344] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 187.408649][ T7380] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7380] [ 187.737190][ T7363] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.749794][ T7363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.764929][ T7363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.087670][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.572060][ T7415] : Can't lookup blockdev [ 189.799166][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.805286][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.846950][ T7433] FAULT_INJECTION: forcing a failure. [ 190.846950][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 190.880992][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.3.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.881031][ T7433] Tainted: [L]=SOFTLOCKUP [ 190.881040][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.881054][ T7433] Call Trace: [ 190.881062][ T7433] [ 190.881071][ T7433] dump_stack_lvl+0x100/0x190 [ 190.881128][ T7433] should_fail_ex.cold+0x5/0xa [ 190.881159][ T7433] should_failslab+0xc2/0x120 [ 190.881189][ T7433] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 190.881229][ T7433] ? security_inode_alloc+0x3b/0x2c0 [ 190.881256][ T7433] ? lockdep_init_map_type+0x5c/0x250 [ 190.881302][ T7433] security_inode_alloc+0x3b/0x2c0 [ 190.881346][ T7433] inode_init_always_gfp+0xc77/0xfb0 [ 190.881382][ T7433] alloc_inode+0x8e/0x250 [ 190.881422][ T7433] new_inode+0x22/0x1c0 [ 190.881464][ T7433] debugfs_create_dir+0xc4/0x440 [ 190.881491][ T7433] drm_debugfs_clients_add+0x6f/0x210 [ 190.881524][ T7433] drm_file_alloc+0x5c6/0xb40 [ 190.881561][ T7433] drm_open_helper+0x1fc/0x540 [ 190.881598][ T7433] drm_open+0x1a0/0x3e0 [ 190.881629][ T7433] ? __pfx_drm_open+0x10/0x10 [ 190.881661][ T7433] drm_stub_open+0x20f/0x380 [ 190.881694][ T7433] ? __pfx_drm_stub_open+0x10/0x10 [ 190.881726][ T7433] chrdev_open+0x234/0x6a0 [ 190.881757][ T7433] ? __pfx_apparmor_file_open+0x10/0x10 [ 190.881784][ T7433] ? __pfx_chrdev_open+0x10/0x10 [ 190.881817][ T7433] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 190.881859][ T7433] do_dentry_open+0x6ab/0x14d0 [ 190.881889][ T7433] ? __pfx_chrdev_open+0x10/0x10 [ 190.881927][ T7433] vfs_open+0x82/0x3f0 [ 190.881967][ T7433] path_openat+0x208c/0x31a0 [ 190.882009][ T7433] ? __pfx_path_openat+0x10/0x10 [ 190.882051][ T7433] do_file_open+0x20e/0x430 [ 190.882085][ T7433] ? __pfx_do_file_open+0x10/0x10 [ 190.882137][ T7433] ? alloc_fd+0x476/0x790 [ 190.882170][ T7433] ? do_getname+0x191/0x390 [ 190.882210][ T7433] do_sys_openat2+0x10d/0x1e0 [ 190.882249][ T7433] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.882290][ T7433] ? __fget_files+0x21f/0x3d0 [ 190.882331][ T7433] __x64_sys_openat+0x12d/0x210 [ 190.882374][ T7433] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.882420][ T7433] ? rcu_is_watching+0x12/0xc0 [ 190.882452][ T7433] do_syscall_64+0x115/0x840 [ 190.882488][ T7433] ? clear_bhb_loop+0x40/0x90 [ 190.882518][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.882543][ T7433] RIP: 0033:0x7f771b79ce59 [ 190.882568][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.882591][ T7433] RSP: 002b:00007f77199f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.882618][ T7433] RAX: ffffffffffffffda RBX: 00007f771ba16090 RCX: 00007f771b79ce59 [ 190.882634][ T7433] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 190.882649][ T7433] RBP: 00007f771b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.882664][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.882678][ T7433] R13: 00007f771ba16128 R14: 00007f771ba16090 R15: 00007fffdf905dc8 [ 190.882709][ T7433] [ 191.197738][ T7433] debugfs: out of free dentries, can not create directory 'client-18' [ 193.079455][ T7467] net_ratelimit: 47 callbacks suppressed [ 193.079479][ T7467] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 194.300598][ T7497] mmap: syz.1.298 (7497): VmData 45805568 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 194.362154][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375838][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.648001][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 195.820487][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 195.916501][ T7542] FAULT_INJECTION: forcing a failure. [ 195.916501][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 195.947350][ T7531] can: request_module (can-proto-5) failed. [ 195.982687][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.1.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.982736][ T7542] Tainted: [L]=SOFTLOCKUP [ 195.982747][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.982765][ T7542] Call Trace: [ 195.982775][ T7542] [ 195.982786][ T7542] dump_stack_lvl+0x100/0x190 [ 195.982845][ T7542] should_fail_ex.cold+0x5/0xa [ 195.982886][ T7542] should_failslab+0xc2/0x120 [ 195.982933][ T7542] __kmalloc_cache_noprof+0x7a/0x6f0 [ 195.982980][ T7542] ? alloc_pipe_info+0x10e/0x590 [ 195.983020][ T7542] ? find_held_lock+0x2b/0x80 [ 195.983065][ T7542] alloc_pipe_info+0x10e/0x590 [ 195.983110][ T7542] splice_direct_to_actor+0x78f/0xa30 [ 195.983155][ T7542] ? __lock_acquire+0x4a5/0x2630 [ 195.983204][ T7542] ? __pfx_direct_splice_actor+0x10/0x10 [ 195.983248][ T7542] ? __pfx_aa_file_perm+0x10/0x10 [ 195.983296][ T7542] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 195.983357][ T7542] do_splice_direct+0x174/0x240 [ 195.983400][ T7542] ? __pfx_do_splice_direct+0x10/0x10 [ 195.983441][ T7542] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 195.983488][ T7542] ? rw_verify_area+0xce/0x6d0 [ 195.983523][ T7542] do_sendfile+0xadc/0xe20 [ 195.983567][ T7542] ? __pfx_do_sendfile+0x10/0x10 [ 195.983602][ T7542] ? __fget_files+0x21f/0x3d0 [ 195.983650][ T7542] __x64_sys_sendfile64+0x1d8/0x220 [ 195.983693][ T7542] ? ksys_write+0x1ac/0x250 [ 195.983728][ T7542] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 195.983775][ T7542] ? rcu_is_watching+0x12/0xc0 [ 195.983817][ T7542] do_syscall_64+0x115/0x840 [ 195.983860][ T7542] ? clear_bhb_loop+0x40/0x90 [ 195.983899][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.983940][ T7542] RIP: 0033:0x7efe8599ce59 [ 195.983965][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.983996][ T7542] RSP: 002b:00007efe86890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 195.984025][ T7542] RAX: ffffffffffffffda RBX: 00007efe85c15fa0 RCX: 00007efe8599ce59 [ 195.984045][ T7542] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 195.984063][ T7542] RBP: 00007efe86890090 R08: 0000000000000000 R09: 0000000000000000 [ 195.984086][ T7542] R10: 00000020000041fd R11: 0000000000000246 R12: 0000000000000001 [ 195.984105][ T7542] R13: 00007efe85c16038 R14: 00007efe85c15fa0 R15: 00007ffdf909bb38 [ 195.984145][ T7542] [ 196.474454][ T7531] netlink: 342 bytes leftover after parsing attributes in process `syz.2.303'. [ 197.573907][ T7561] FAULT_INJECTION: forcing a failure. [ 197.573907][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 197.624612][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.0.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.624664][ T7561] Tainted: [L]=SOFTLOCKUP [ 197.624677][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.624696][ T7561] Call Trace: [ 197.624707][ T7561] [ 197.624718][ T7561] dump_stack_lvl+0x100/0x190 [ 197.624784][ T7561] should_fail_ex.cold+0x5/0xa [ 197.624826][ T7561] should_failslab+0xc2/0x120 [ 197.624874][ T7561] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 197.624940][ T7561] ? security_inode_alloc+0x3b/0x2c0 [ 197.624980][ T7561] ? lockdep_init_map_type+0x5c/0x250 [ 197.625044][ T7561] security_inode_alloc+0x3b/0x2c0 [ 197.625085][ T7561] inode_init_always_gfp+0xc77/0xfb0 [ 197.625134][ T7561] alloc_inode+0x8e/0x250 [ 197.625189][ T7561] path_from_stashed+0x25b/0x750 [ 197.625245][ T7561] pidfs_alloc_file+0xf8/0x290 [ 197.625292][ T7561] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 197.625344][ T7561] pidfd_prepare+0x10c/0x1b0 [ 197.625393][ T7561] __x64_sys_pidfd_open+0x105/0x1a0 [ 197.625448][ T7561] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 197.625506][ T7561] ? rcu_is_watching+0x12/0xc0 [ 197.625552][ T7561] do_syscall_64+0x115/0x840 [ 197.625600][ T7561] ? clear_bhb_loop+0x40/0x90 [ 197.625643][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.625677][ T7561] RIP: 0033:0x7fa963d9ce59 [ 197.625706][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.625743][ T7561] RSP: 002b:00007fa964b83028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 197.625776][ T7561] RAX: ffffffffffffffda RBX: 00007fa964016090 RCX: 00007fa963d9ce59 [ 197.625797][ T7561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 197.625816][ T7561] RBP: 00007fa963e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 197.625836][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.625856][ T7561] R13: 00007fa964016128 R14: 00007fa964016090 R15: 00007fff493895a8 [ 197.625900][ T7561] [ 198.764654][ T7584] netlink: 'syz.1.315': attribute type 33 has an invalid length. [ 198.776165][ T7584] netlink: 322 bytes leftover after parsing attributes in process `syz.1.315'. [ 199.600758][ T7596] capability: warning: `syz.3.317' uses 32-bit capabilities (legacy support in use) [ 199.936648][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.320'. [ 200.015232][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.321'. [ 200.423186][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.320'. [ 200.573670][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 200.604968][ T7617] veth1_macvtap: left promiscuous mode [ 200.612475][ T7617] macsec0: entered promiscuous mode [ 200.623430][ T7617] macsec0: entered allmulticast mode [ 201.693431][ T7642] MTRR 1 not used [ 205.020310][ T7688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.057237][ T7688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.088059][ T7688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.039149][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.997084][ T7731] netlink: 3 bytes leftover after parsing attributes in process `syz.3.345'. [ 207.054028][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 207.080372][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.159447][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.412733][ T7733] Process accounting resumed [ 208.724915][ T7757] random: crng reseeded on system resumption [ 208.912347][ T7757] hub 1-0:1.0: USB hub found [ 208.938861][ T7757] hub 1-0:1.0: 1 port detected [ 209.304090][ T7770] random: crng reseeded on system resumption [ 209.362169][ T7768] Process accounting paused [ 210.335873][ T7784] netlink: 'syz.3.357': attribute type 11 has an invalid length. [ 210.910444][ T7784] ieee80211 phy19: Failed to add default virtual iface [ 214.733271][ T7851] program syz.0.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.876258][ T7847] Process accounting resumed [ 215.142039][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 216.922260][ T7893] can: request_module (can-proto-0) failed. [ 217.992080][ T7887] bond0: option slaves: interface -]=,Do does not exist! [ 218.988839][ T7922] netlink: 17 bytes leftover after parsing attributes in process `syz.2.385'. [ 219.022264][ T30] audit: type=1800 audit(2147483678.320:5): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.385" name="dbroot" dev="configfs" ino=22616 res=0 errno=0 [ 219.251569][ T7932] kafs: addr_prefs: Invalid Command [ 219.864640][ T7938] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 220.583654][ T7919] kexec: Could not allocate control_code_buffer [ 221.167927][ T7943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.750974][ T7966] FAULT_INJECTION: forcing a failure. [ 221.750974][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 221.776955][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.1.391 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.777011][ T7966] Tainted: [L]=SOFTLOCKUP [ 221.777023][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.777042][ T7966] Call Trace: [ 221.777053][ T7966] [ 221.777066][ T7966] dump_stack_lvl+0x100/0x190 [ 221.777132][ T7966] should_fail_ex.cold+0x5/0xa [ 221.777176][ T7966] should_failslab+0xc2/0x120 [ 221.777216][ T7966] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 221.777272][ T7966] ? sock_alloc_inode+0x26/0x290 [ 221.777311][ T7966] ? unix_create1+0x517/0x700 [ 221.777361][ T7966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 221.777405][ T7966] sock_alloc_inode+0x26/0x290 [ 221.777456][ T7966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 221.777496][ T7966] alloc_inode+0x68/0x250 [ 221.777551][ T7966] sock_alloc+0x44/0x280 [ 221.777585][ T7966] ? security_socket_create+0x7f/0x250 [ 221.777624][ T7966] __sock_create+0xc2/0x860 [ 221.777677][ T7966] __sys_socketpair+0x261/0x5b0 [ 221.777728][ T7966] ? __pfx___sys_socketpair+0x10/0x10 [ 221.777779][ T7966] ? xfd_validate_state+0x129/0x190 [ 221.777815][ T7966] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 221.777873][ T7966] __x64_sys_socketpair+0x96/0x100 [ 221.777926][ T7966] ? lockdep_hardirqs_on+0x78/0x100 [ 221.777977][ T7966] do_syscall_64+0x115/0x840 [ 221.778025][ T7966] ? clear_bhb_loop+0x40/0x90 [ 221.778067][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.778104][ T7966] RIP: 0033:0x7efe8599ce59 [ 221.778134][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.778167][ T7966] RSP: 002b:00007efe86890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 221.778204][ T7966] RAX: ffffffffffffffda RBX: 00007efe85c15fa0 RCX: 00007efe8599ce59 [ 221.778226][ T7966] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 221.778246][ T7966] RBP: 00007efe85a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 221.778265][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.778284][ T7966] R13: 00007efe85c16038 R14: 00007efe85c15fa0 R15: 00007ffdf909bb38 [ 221.778327][ T7966] [ 221.996523][ T7966] socket: no more sockets [ 222.276099][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 224.522671][ T8016] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.706566][ T8023] futex_wake_op: syz.0.403 tries to shift op by -2048; fix this program [ 224.761052][ T8023] futex_wake_op: syz.0.403 tries to shift op by -2048; fix this program [ 224.815076][ T8023] 0x000000000001-0x000000020000 : "" [ 224.977580][ T8023] ftl_cs: FTL header corrupt! [ 225.365345][ T8027] hub 1-0:1.0: USB hub found [ 225.399812][ T8027] hub 1-0:1.0: 1 port detected [ 226.058530][ T8052] random: crng reseeded on system resumption [ 226.517035][ T8058] binder: 8056:8058 ioctl c0046209 ffffffffffffffff returned -22 [ 227.586316][ T8077] smpboot: CPU 1 is now offline [ 227.650953][ T8086] dyndbg: bad flag-op , at start of  [ 227.699543][ T8086] dyndbg: flags parse failed [ 228.071547][ C0] sd 0:0:1:0: [sda] tag#2517 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 228.082038][ C0] sd 0:0:1:0: [sda] tag#2517 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 228.364889][ T30] audit: type=1800 audit(2147483687.660:6): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.416" name="discovery_nqn" dev="configfs" ino=22304 res=0 errno=0 [ 228.412097][ T8102] netlink: 252 bytes leftover after parsing attributes in process `syz.2.417'. [ 228.652917][ T8103] netlink: 252 bytes leftover after parsing attributes in process `syz.2.417'. [ 229.020045][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 229.125410][ T8125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.421'. [ 229.958199][ T8138] netlink: Failed to add  helper -22 [ 231.719421][ T8190] FAULT_INJECTION: forcing a failure. [ 231.719421][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 231.818698][ T8183] FAULT_INJECTION: forcing a failure. [ 231.818698][ T8183] name fail_futex, interval 1, probability 0, space 0, times 0 [ 231.846159][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.2.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.846199][ T8190] Tainted: [L]=SOFTLOCKUP [ 231.846207][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.846222][ T8190] Call Trace: [ 231.846229][ T8190] [ 231.846238][ T8190] dump_stack_lvl+0x100/0x190 [ 231.846285][ T8190] should_fail_ex.cold+0x5/0xa [ 231.846317][ T8190] should_failslab+0xc2/0x120 [ 231.846347][ T8190] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 231.846373][ T8190] ? kstrdup_const+0x63/0x80 [ 231.846398][ T8190] ? find_held_lock+0x2b/0x80 [ 231.846434][ T8190] kstrdup+0x51/0xe0 [ 231.846460][ T8190] kstrdup_const+0x63/0x80 [ 231.846485][ T8190] __kernfs_new_node+0x9b/0x9f0 [ 231.846516][ T8190] ? __pfx___kernfs_new_node+0x10/0x10 [ 231.846551][ T8190] ? find_held_lock+0x2b/0x80 [ 231.846586][ T8190] ? kernfs_root+0xee/0x2a0 [ 231.846611][ T8190] ? kernfs_root+0xee/0x2a0 [ 231.846644][ T8190] kernfs_new_node+0x11b/0x1a0 [ 231.846680][ T8190] kernfs_create_link+0xcc/0x240 [ 231.846722][ T8190] sysfs_do_create_link_sd+0x90/0x140 [ 231.846752][ T8190] sysfs_create_link+0x61/0xc0 [ 231.846782][ T8190] device_add+0xb5d/0x1950 [ 231.846812][ T8190] ? __pfx_device_add+0x10/0x10 [ 231.846836][ T8190] ? __pfx___might_resched+0x10/0x10 [ 231.846861][ T8190] ? lockdep_hardirqs_on+0x78/0x100 [ 231.846913][ T8190] __add_disk+0x518/0xe40 [ 231.846947][ T8190] add_disk_fwnode+0x118/0x5c0 [ 231.846979][ T8190] loop_add+0x90b/0xb60 [ 231.847011][ T8190] ? __pfx_loop_add+0x10/0x10 [ 231.847062][ T8190] ? find_held_lock+0x2b/0x80 [ 231.847092][ T8190] ? __fget_files+0x215/0x3d0 [ 231.847125][ T8190] loop_control_ioctl+0xae/0x620 [ 231.847161][ T8190] ? __pfx_loop_control_ioctl+0x10/0x10 [ 231.847200][ T8190] ? __pfx_loop_control_ioctl+0x10/0x10 [ 231.847237][ T8190] __x64_sys_ioctl+0x18e/0x210 [ 231.847263][ T8190] do_syscall_64+0x115/0x840 [ 231.847298][ T8190] ? clear_bhb_loop+0x40/0x90 [ 231.847328][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.847354][ T8190] RIP: 0033:0x7f5b59b9ce59 [ 231.847373][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.847397][ T8190] RSP: 002b:00007f5b5aa1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.847419][ T8190] RAX: ffffffffffffffda RBX: 00007f5b59e15fa0 RCX: 00007f5b59b9ce59 [ 231.847436][ T8190] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 231.847451][ T8190] RBP: 00007f5b59c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 231.847466][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.847481][ T8190] R13: 00007f5b59e16038 R14: 00007f5b59e15fa0 R15: 00007ffde6ab4aa8 [ 231.847512][ T8190] [ 232.415559][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.1.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.415596][ T8183] Tainted: [L]=SOFTLOCKUP [ 232.415604][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.415618][ T8183] Call Trace: [ 232.415625][ T8183] [ 232.415633][ T8183] dump_stack_lvl+0x100/0x190 [ 232.415679][ T8183] should_fail_ex.cold+0x5/0xa [ 232.415707][ T8183] get_futex_key+0xf78/0x1510 [ 232.415749][ T8183] ? __pfx_get_futex_key+0x10/0x10 [ 232.415785][ T8183] ? do_user_addr_fault+0x7de/0x12f0 [ 232.415812][ T8183] ? do_user_addr_fault+0x7de/0x12f0 [ 232.415846][ T8183] futex_wake+0xea/0x530 [ 232.415886][ T8183] ? __pfx_futex_wake+0x10/0x10 [ 232.415915][ T8183] ? exit_mm_release+0x19/0x30 [ 232.415955][ T8183] do_futex+0x32b/0x350 [ 232.415979][ T8183] ? __pfx_do_futex+0x10/0x10 [ 232.416000][ T8183] ? __might_fault+0xc5/0x140 [ 232.416044][ T8183] mm_release+0x24a/0x2f0 [ 232.416072][ T8183] do_exit+0x707/0x2af0 [ 232.416111][ T8183] ? __pfx_do_exit+0x10/0x10 [ 232.416145][ T8183] ? do_raw_spin_lock+0x128/0x260 [ 232.416170][ T8183] ? find_held_lock+0x2b/0x80 [ 232.416210][ T8183] ? get_signal+0x7e5/0x2210 [ 232.416239][ T8183] do_group_exit+0xd5/0x2a0 [ 232.416295][ T8183] get_signal+0x20ff/0x2210 [ 232.416333][ T8183] ? __pfx_get_signal+0x10/0x10 [ 232.416363][ T8183] ? do_futex+0x192/0x350 [ 232.416388][ T8183] arch_do_signal_or_restart+0x91/0x7a0 [ 232.416424][ T8183] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 232.416466][ T8183] ? fput+0x79/0x100 [ 232.416498][ T8183] ? rcu_is_watching+0x12/0xc0 [ 232.416528][ T8183] exit_to_user_mode_loop+0x98/0x670 [ 232.416564][ T8183] ? rcu_is_watching+0x12/0xc0 [ 232.416593][ T8183] do_syscall_64+0x652/0x840 [ 232.416626][ T8183] ? clear_bhb_loop+0x40/0x90 [ 232.416654][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.416677][ T8183] RIP: 0033:0x7efe8599ce59 [ 232.416696][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.416717][ T8183] RSP: 002b:00007efe8682d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.416738][ T8183] RAX: fffffffffffffe00 RBX: 00007efe85c16278 RCX: 00007efe8599ce59 [ 232.416753][ T8183] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe85c16278 [ 232.416767][ T8183] RBP: 00007efe85c16270 R08: 0000000000000000 R09: 0000000000000000 [ 232.416780][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.416794][ T8183] R13: 00007efe85c16308 R14: 00007ffdf909ba50 R15: 00007ffdf909bb38 [ 232.416823][ T8183] [ 233.884609][ T8210] ======================================================= [ 233.884609][ T8210] WARNING: The mand mount option has been deprecated and [ 233.884609][ T8210] and is ignored by this kernel. Remove the mand [ 233.884609][ T8210] option from the mount to silence this warning. [ 233.884609][ T8210] ======================================================= [ 234.196934][ T8215] kexec: Could not allocate control_code_buffer [ 239.742861][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.752241][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 242.737133][ T8267] Process accounting resumed [ 243.584128][ T8338] random: crng reseeded on system resumption [ 247.142985][ T8347] Process accounting paused [ 249.251129][ T8411] random: crng reseeded on system resumption [ 251.393465][ T8440] futex_wake_op: syz.0.483 tries to shift op by -2048; fix this program [ 254.412282][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 254.524100][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.533363][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.124496][ T8461] Process accounting resumed [ 255.584163][ T8499] FAULT_INJECTION: forcing a failure. [ 255.584163][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 255.666962][ T8499] CPU: 0 UID: 0 PID: 8499 Comm: syz.3.494 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.667001][ T8499] Tainted: [L]=SOFTLOCKUP [ 255.667009][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 255.667027][ T8499] Call Trace: [ 255.667035][ T8499] [ 255.667044][ T8499] dump_stack_lvl+0x100/0x190 [ 255.667091][ T8499] should_fail_ex.cold+0x5/0xa [ 255.667122][ T8499] should_failslab+0xc2/0x120 [ 255.667151][ T8499] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 255.667193][ T8499] ? __d_alloc+0x34/0xa40 [ 255.667232][ T8499] __d_alloc+0x34/0xa40 [ 255.667268][ T8499] d_alloc_pseudo+0x1c/0xc0 [ 255.667291][ T8499] alloc_file_pseudo+0xcf/0x230 [ 255.667331][ T8499] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 255.667369][ T8499] ? alloc_fd+0x476/0x790 [ 255.667404][ T8499] sock_alloc_file+0x50/0x210 [ 255.667432][ T8499] __sys_socket+0x1c0/0x260 [ 255.667467][ T8499] ? __pfx___sys_socket+0x10/0x10 [ 255.667511][ T8499] __x64_sys_socket+0x72/0xb0 [ 255.667544][ T8499] ? lockdep_hardirqs_on+0x78/0x100 [ 255.667580][ T8499] do_syscall_64+0x115/0x840 [ 255.667615][ T8499] ? clear_bhb_loop+0x40/0x90 [ 255.667644][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.667669][ T8499] RIP: 0033:0x7f771b79ce59 [ 255.667688][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.667712][ T8499] RSP: 002b:00007f771c577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 255.667734][ T8499] RAX: ffffffffffffffda RBX: 00007f771ba15fa0 RCX: 00007f771b79ce59 [ 255.667750][ T8499] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 255.667764][ T8499] RBP: 00007f771b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 255.667779][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.667793][ T8499] R13: 00007f771ba16038 R14: 00007f771ba15fa0 R15: 00007fffdf905dc8 [ 255.667824][ T8499] [ 255.991333][ T8504] FAULT_INJECTION: forcing a failure. [ 255.991333][ T8504] name failslab, interval 1, probability 0, space 0, times 0 [ 256.004258][ T8504] CPU: 0 UID: 0 PID: 8504 Comm: syz.2.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.004292][ T8504] Tainted: [L]=SOFTLOCKUP [ 256.004300][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.004313][ T8504] Call Trace: [ 256.004321][ T8504] [ 256.004330][ T8504] dump_stack_lvl+0x100/0x190 [ 256.004374][ T8504] should_fail_ex.cold+0x5/0xa [ 256.004403][ T8504] should_failslab+0xc2/0x120 [ 256.004431][ T8504] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 256.004470][ T8504] ? __d_alloc+0x34/0xa40 [ 256.004501][ T8504] ? __pfx_stack_trace_save+0x10/0x10 [ 256.004537][ T8504] __d_alloc+0x34/0xa40 [ 256.004571][ T8504] d_alloc_parallel+0x111/0x14e0 [ 256.004602][ T8504] ? find_held_lock+0x2b/0x80 [ 256.004632][ T8504] ? __d_lookup+0x25c/0x4a0 [ 256.004654][ T8504] ? __pfx_d_alloc_parallel+0x10/0x10 [ 256.004681][ T8504] ? __d_lookup+0x266/0x4a0 [ 256.004710][ T8504] lookup_open.isra.0+0x57c/0x11b0 [ 256.004740][ T8504] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 256.004781][ T8504] ? lookup_fast+0x2da/0x600 [ 256.004807][ T8504] path_openat+0xa98/0x31a0 [ 256.004845][ T8504] ? __pfx_path_openat+0x10/0x10 [ 256.004890][ T8504] do_file_open+0x20e/0x430 [ 256.004922][ T8504] ? __pfx_do_file_open+0x10/0x10 [ 256.004972][ T8504] ? alloc_fd+0x476/0x790 [ 256.005003][ T8504] ? do_getname+0x191/0x390 [ 256.005041][ T8504] do_sys_openat2+0x10d/0x1e0 [ 256.005077][ T8504] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.005116][ T8504] ? fput+0x79/0x100 [ 256.005153][ T8504] __x64_sys_openat+0x12d/0x210 [ 256.005190][ T8504] ? __pfx___x64_sys_openat+0x10/0x10 [ 256.005232][ T8504] ? rcu_is_watching+0x12/0xc0 [ 256.005262][ T8504] do_syscall_64+0x115/0x840 [ 256.005295][ T8504] ? clear_bhb_loop+0x40/0x90 [ 256.005323][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.005347][ T8504] RIP: 0033:0x7f5b59b9ce59 [ 256.005367][ T8504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.005388][ T8504] RSP: 002b:00007f5b5a9fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.005409][ T8504] RAX: ffffffffffffffda RBX: 00007f5b59e16090 RCX: 00007f5b59b9ce59 [ 256.005424][ T8504] RDX: 0000000000101000 RSI: 0000200000001500 RDI: ffffffffffffff9c [ 256.005438][ T8504] RBP: 00007f5b59c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 256.005451][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.005464][ T8504] R13: 00007f5b59e16128 R14: 00007f5b59e16090 R15: 00007ffde6ab4aa8 [ 256.005494][ T8504] [ 258.253884][ T8518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.294606][ T8518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.338901][ T8518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.731568][ T5644] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 259.040711][ T8553] program syz.2.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.039542][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.359820][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.366781][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 260.662871][ T185] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.085702][ T185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.142560][ T8578] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 261.234086][ T8578] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 261.325656][ T8578] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 261.380419][ T185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.634300][ T185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.893184][ T185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.088149][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.101332][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.112019][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.124347][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.138090][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.014382][ T185] dummy0: left allmulticast mode [ 263.078181][ T185] dummy0: left promiscuous mode [ 263.122969][ T185] bridge0: port 3(dummy0) entered disabled state [ 263.194469][ T185] bridge_slave_1: left allmulticast mode [ 263.233124][ T185] bridge_slave_1: left promiscuous mode [ 263.263757][ T185] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.331998][ T185] bridge_slave_0: left allmulticast mode [ 263.377532][ T185] bridge_slave_0: left promiscuous mode [ 263.412107][ T185] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.179976][ T185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.202186][ T5644] Bluetooth: hci2: command tx timeout [ 264.260880][ T185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.324617][ T185] bond0 (unregistering): Released all slaves [ 264.724561][ T8639] hub 1-0:1.0: USB hub found [ 264.796735][ T8639] hub 1-0:1.0: 1 port detected [ 265.144534][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 265.519790][ T185] hsr_slave_0: left promiscuous mode [ 265.531361][ T8565] Process accounting resumed [ 265.544457][ T185] hsr_slave_1: left promiscuous mode [ 265.586377][ T185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.633946][ T185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.686098][ T185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.727808][ T185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.854847][ T185] veth1_macvtap: left promiscuous mode [ 265.887799][ T185] veth0_macvtap: left promiscuous mode [ 265.918434][ T185] veth1_vlan: left promiscuous mode [ 265.953098][ T185] veth0_vlan: left promiscuous mode [ 266.279790][ T5644] Bluetooth: hci2: command tx timeout [ 267.264427][ T185] team0 (unregistering): Port device team_slave_1 removed [ 267.318567][ T185] team0 (unregistering): Port device team_slave_0 removed [ 267.637009][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 268.359483][ T5644] Bluetooth: hci2: command tx timeout [ 269.246439][ T8705] random: crng reseeded on system resumption [ 269.317468][ T8705] FAULT_INJECTION: forcing a failure. [ 269.317468][ T8705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.395240][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: syz.0.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.395277][ T8705] Tainted: [L]=SOFTLOCKUP [ 269.395285][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.395300][ T8705] Call Trace: [ 269.395307][ T8705] [ 269.395316][ T8705] dump_stack_lvl+0x100/0x190 [ 269.395363][ T8705] should_fail_ex.cold+0x5/0xa [ 269.395388][ T8705] ? prepare_alloc_pages+0x16d/0x5f0 [ 269.395422][ T8705] should_fail_alloc_page+0xeb/0x140 [ 269.395453][ T8705] prepare_alloc_pages+0x1f0/0x5f0 [ 269.395488][ T8705] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 269.395531][ T8705] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 269.395580][ T8705] ? stack_trace_save+0x8e/0xc0 [ 269.395612][ T8705] ? __pfx_stack_trace_save+0x10/0x10 [ 269.395643][ T8705] ? arch_stack_walk+0xa6/0xf0 [ 269.395672][ T8705] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.395723][ T8705] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.395767][ T8705] ? kasan_save_stack+0x30/0x50 [ 269.395789][ T8705] ? kasan_save_track+0x14/0x30 [ 269.395812][ T8705] ? __kasan_kmalloc+0xaa/0xb0 [ 269.395834][ T8705] ? memory_bm_create+0x14d/0xba0 [ 269.395870][ T8705] ? do_syscall_64+0x115/0x840 [ 269.395904][ T8705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.395932][ T8705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.395968][ T8705] ? policy_nodemask+0xed/0x4f0 [ 269.395999][ T8705] alloc_pages_mpol+0x1fb/0x540 [ 269.396029][ T8705] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 269.396059][ T8705] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 269.396092][ T8705] alloc_pages_noprof+0x1a/0x160 [ 269.396125][ T8705] get_zeroed_page_noprof+0x18/0xb0 [ 269.396155][ T8705] get_image_page+0x18/0x1a0 [ 269.396184][ T8705] alloc_rtree_node+0x3c/0xb0 [ 269.396213][ T8705] memory_bm_create+0x65e/0xba0 [ 269.396255][ T8705] create_basic_memory_bitmaps+0xbd/0x350 [ 269.396292][ T8705] snapshot_open+0x230/0x2a0 [ 269.396327][ T8705] ? __pfx_snapshot_open+0x10/0x10 [ 269.396363][ T8705] misc_open+0x26d/0x450 [ 269.396388][ T8705] ? __pfx_misc_open+0x10/0x10 [ 269.396411][ T8705] chrdev_open+0x234/0x6a0 [ 269.396441][ T8705] ? __pfx_apparmor_file_open+0x10/0x10 [ 269.396468][ T8705] ? __pfx_chrdev_open+0x10/0x10 [ 269.396500][ T8705] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 269.396539][ T8705] do_dentry_open+0x6ab/0x14d0 [ 269.396567][ T8705] ? __pfx_chrdev_open+0x10/0x10 [ 269.396604][ T8705] vfs_open+0x82/0x3f0 [ 269.396643][ T8705] path_openat+0x208c/0x31a0 [ 269.396683][ T8705] ? __pfx_path_openat+0x10/0x10 [ 269.396732][ T8705] do_file_open+0x20e/0x430 [ 269.396765][ T8705] ? __pfx_do_file_open+0x10/0x10 [ 269.396816][ T8705] ? alloc_fd+0x476/0x790 [ 269.396849][ T8705] ? do_getname+0x191/0x390 [ 269.396888][ T8705] do_sys_openat2+0x10d/0x1e0 [ 269.396926][ T8705] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.396966][ T8705] ? __pfx_restore_altstack+0x10/0x10 [ 269.397009][ T8705] __x64_sys_openat+0x12d/0x210 [ 269.397048][ T8705] ? __pfx___x64_sys_openat+0x10/0x10 [ 269.397085][ T8705] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 269.397126][ T8705] ? rcu_is_watching+0x12/0xc0 [ 269.397157][ T8705] do_syscall_64+0x115/0x840 [ 269.397190][ T8705] ? clear_bhb_loop+0x40/0x90 [ 269.397220][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.397244][ T8705] RIP: 0033:0x7fa963d9ce59 [ 269.397263][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.397285][ T8705] RSP: 002b:00007fa964b83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.397307][ T8705] RAX: ffffffffffffffda RBX: 00007fa964016090 RCX: 00007fa963d9ce59 [ 269.397323][ T8705] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 269.397337][ T8705] RBP: 00007fa963e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.397351][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.397365][ T8705] R13: 00007fa964016128 R14: 00007fa964016090 R15: 00007fff493895a8 [ 269.397395][ T8705] [ 270.204576][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 270.376129][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.392441][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.408232][ T8590] bridge_slave_0: entered allmulticast mode [ 270.425133][ T8590] bridge_slave_0: entered promiscuous mode [ 270.445564][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.460866][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.471247][ T5644] Bluetooth: hci2: command tx timeout [ 270.484437][ T8590] bridge_slave_1: entered allmulticast mode [ 270.500986][ T8590] bridge_slave_1: entered promiscuous mode [ 270.637029][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.729945][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.886105][ T8590] team0: Port device team_slave_0 added [ 270.925081][ T8590] team0: Port device team_slave_1 added [ 271.127854][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.180047][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.315194][ T8590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.944614][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.990602][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.182482][ T8590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.698973][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 272.720591][ T8590] hsr_slave_0: entered promiscuous mode [ 272.726473][ T8590] hsr_slave_1: entered promiscuous mode [ 272.729493][ T8590] debugfs: 'hsr0' already exists in 'hsr' [ 272.729513][ T8590] Cannot create hsr debugfs directory [ 274.421037][ T8754] FAULT_INJECTION: forcing a failure. [ 274.421037][ T8754] name failslab, interval 1, probability 0, space 0, times 0 [ 274.514200][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.1.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.514239][ T8754] Tainted: [L]=SOFTLOCKUP [ 274.514247][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.514278][ T8754] Call Trace: [ 274.514286][ T8754] [ 274.514294][ T8754] dump_stack_lvl+0x100/0x190 [ 274.514341][ T8754] should_fail_ex.cold+0x5/0xa [ 274.514373][ T8754] should_failslab+0xc2/0x120 [ 274.514402][ T8754] __kmalloc_cache_noprof+0x7a/0x6f0 [ 274.514438][ T8754] ? single_open+0x4d/0x1d0 [ 274.514459][ T8754] ? __pfx___debugfs_file_get+0x10/0x10 [ 274.514497][ T8754] ? __pfx_edid_show+0x10/0x10 [ 274.514524][ T8754] ? __pfx_edid_open+0x10/0x10 [ 274.514547][ T8754] single_open+0x4d/0x1d0 [ 274.514570][ T8754] full_proxy_open_regular+0x1b6/0x370 [ 274.514611][ T8754] do_dentry_open+0x6ab/0x14d0 [ 274.514641][ T8754] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 274.514686][ T8754] vfs_open+0x82/0x3f0 [ 274.514726][ T8754] path_openat+0x208c/0x31a0 [ 274.514769][ T8754] ? __pfx_path_openat+0x10/0x10 [ 274.514812][ T8754] do_file_open+0x20e/0x430 [ 274.514845][ T8754] ? __pfx_do_file_open+0x10/0x10 [ 274.514897][ T8754] ? alloc_fd+0x476/0x790 [ 274.514930][ T8754] ? do_getname+0x191/0x390 [ 274.514970][ T8754] do_sys_openat2+0x10d/0x1e0 [ 274.515008][ T8754] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.515050][ T8754] ? __fget_files+0x21f/0x3d0 [ 274.515084][ T8754] __x64_sys_openat+0x12d/0x210 [ 274.515124][ T8754] ? __pfx___x64_sys_openat+0x10/0x10 [ 274.515176][ T8754] ? rcu_is_watching+0x12/0xc0 [ 274.515208][ T8754] do_syscall_64+0x115/0x840 [ 274.515246][ T8754] ? clear_bhb_loop+0x40/0x90 [ 274.515282][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.515307][ T8754] RIP: 0033:0x7efe8599ce59 [ 274.515326][ T8754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.515349][ T8754] RSP: 002b:00007efe86890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.515373][ T8754] RAX: ffffffffffffffda RBX: 00007efe85c15fa0 RCX: 00007efe8599ce59 [ 274.515389][ T8754] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 274.515404][ T8754] RBP: 00007efe85a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 274.515420][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.515434][ T8754] R13: 00007efe85c16038 R14: 00007efe85c15fa0 R15: 00007ffdf909bb38 [ 274.515464][ T8754] [ 276.908372][ T8590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.022624][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.073038][ T8590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.130383][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.193570][ T8590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.234146][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.277436][ T8590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.326134][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.146178][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.274904][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.345149][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.352357][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.456934][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.464150][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.238367][ T8863] zram: Removed device: zram0 [ 281.125968][ T8590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.804957][ T8590] veth0_vlan: entered promiscuous mode [ 282.113603][ T8590] veth1_vlan: entered promiscuous mode [ 282.565321][ T8909] vhci_hcd vhci_hcd.3: invalid port number 21 [ 282.595851][ T8909] vhci_hcd vhci_hcd.3: invalid port number 21 [ 282.639727][ T8590] veth0_macvtap: entered promiscuous mode [ 282.688753][ T8590] veth1_macvtap: entered promiscuous mode [ 282.807076][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.872392][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.954391][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.003990][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.014780][ T10] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 283.091205][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.134399][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.866774][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.922637][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.111558][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.177164][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.230422][ T8926] Process accounting paused [ 285.913547][ T8940] kexec: Could not allocate control_code_buffer [ 286.613322][ T8941] Process accounting resumed [ 288.587491][ T5644] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 289.664160][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 289.814567][ T9029] Unable to find swap-space signature [ 289.851923][ T9017] ubi0: attaching mtd0 [ 289.894697][ T30] audit: type=1806 audit(8277292045.040:7): xattr="" res=-22 [ 289.941431][ T9017] ubi0: scanning is finished [ 289.970363][ T9017] ubi0: empty MTD device detected [ 290.563733][ T9017] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 290.631149][ T9017] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 290.681230][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.704646][ T9017] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 290.769848][ T9017] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 290.826674][ T9017] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 290.872548][ T9017] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 290.939837][ T9017] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2838533680 [ 291.041493][ T9017] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 291.104208][ T9057] netlink: 334 bytes leftover after parsing attributes in process `syz.1.571'. [ 291.119734][ T9046] ubi0: background thread "ubi_bgt0d" started, PID 9046 [ 291.137920][ T9020] ubi0: detaching mtd0 [ 291.194205][ T9020] ubi0: mtd0 is detached [ 292.759367][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.062355][ T9083] Line length is too long: Should be less than 4094 [ 293.854438][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'. [ 293.893915][ T9101] input: f as /devices/virtual/input/input9 [ 294.445012][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 295.195728][ T9106] Process accounting resumed [ 295.338786][ T9117] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 295.394566][ T9118] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 296.383901][ T9112] Process accounting paused [ 296.736128][ T9145] nbd: couldn't find a device at index 2542 [ 297.583095][ T9161] random: crng reseeded on system resumption [ 298.185255][ T9153] Process accounting resumed [ 298.798252][ T9185] random: crng reseeded on system resumption [ 298.836076][ T9183] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 300.641593][ T9201] slcan: can't register candev [ 300.802259][ T9205] random: crng reseeded on system resumption [ 302.492260][ T9227] hub 1-0:1.0: USB hub found [ 302.601152][ T9227] hub 1-0:1.0: 1 port detected [ 305.040515][ T9246] Process accounting resumed [ 305.072689][ T9266] : entered promiscuous mode [ 305.660112][ T9283] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 305.667757][ T9283] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.476249][ T9291] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 306.531447][ T9291] pci 0000:00:01.3: PCI INT A: no GSI [ 307.055365][ T9275] Process accounting resumed [ 307.867576][ T9299] FAULT_INJECTION: forcing a failure. [ 307.867576][ T9299] name failslab, interval 1, probability 0, space 0, times 0 [ 307.964055][ T9299] CPU: 0 UID: 0 PID: 9299 Comm: syz.2.618 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.964094][ T9299] Tainted: [L]=SOFTLOCKUP [ 307.964102][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.964120][ T9299] Call Trace: [ 307.964128][ T9299] [ 307.964137][ T9299] dump_stack_lvl+0x100/0x190 [ 307.964185][ T9299] should_fail_ex.cold+0x5/0xa [ 307.964216][ T9299] should_failslab+0xc2/0x120 [ 307.964245][ T9299] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 307.964286][ T9299] ? security_inode_alloc+0x3b/0x2c0 [ 307.964313][ T9299] ? lockdep_init_map_type+0x5c/0x250 [ 307.964358][ T9299] security_inode_alloc+0x3b/0x2c0 [ 307.964389][ T9299] inode_init_always_gfp+0xc77/0xfb0 [ 307.964424][ T9299] alloc_inode+0x8e/0x250 [ 307.964464][ T9299] path_from_stashed+0x25b/0x750 [ 307.964504][ T9299] pidfs_alloc_file+0xf8/0x290 [ 307.964534][ T9299] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 307.964572][ T9299] pidfd_prepare+0x10c/0x1b0 [ 307.964613][ T9299] __x64_sys_pidfd_open+0x105/0x1a0 [ 307.964655][ T9299] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 307.964699][ T9299] ? rcu_is_watching+0x12/0xc0 [ 307.964731][ T9299] do_syscall_64+0x115/0x840 [ 307.964766][ T9299] ? clear_bhb_loop+0x40/0x90 [ 307.964796][ T9299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.964821][ T9299] RIP: 0033:0x7f368019ce59 [ 307.964841][ T9299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.964864][ T9299] RSP: 002b:00007f3681077028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 307.964894][ T9299] RAX: ffffffffffffffda RBX: 00007f3680415fa0 RCX: 00007f368019ce59 [ 307.964910][ T9299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 307.964924][ T9299] RBP: 00007f3680232d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.964939][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.964953][ T9299] R13: 00007f3680416038 R14: 00007f3680415fa0 R15: 00007ffd51e04918 [ 307.964984][ T9299] [ 308.660687][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 310.286190][ T9341] ubi9: attaching mtd2 [ 310.307490][ T9341] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74) [ 310.532607][ T9339] ima: policy update failed [ 310.580042][ T30] audit: type=1802 audit(8277292065.730:8): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.625" res=0 errno=0 [ 311.761487][ T9357] vivid-011: ================= START STATUS ================= [ 311.810315][ T9357] vivid-011: Radio HW Seek Mode: Bounded [ 311.884363][ T9357] vivid-011: Radio Programmable HW Seek: false [ 311.914286][ T9357] vivid-011: RDS Rx I/O Mode: Block I/O [ 311.991984][ T9357] vivid-011: Generate RBDS Instead of RDS: false [ 312.094527][ T9357] vivid-011: RDS Reception: true [ 312.134798][ T9357] vivid-011: RDS Program Type: 0 inactive [ 312.182987][ T9357] vivid-011: RDS PS Name: inactive [ 312.224737][ T9357] vivid-011: RDS Radio Text: inactive [ 312.261437][ T9357] vivid-011: RDS Traffic Announcement: false inactive [ 312.295361][ T9357] vivid-011: RDS Traffic Program: false inactive [ 312.325636][ T9357] vivid-011: RDS Music: false inactive [ 312.349402][ T9357] vivid-011: ================== END STATUS ================== [ 312.537125][ T9346] Process accounting resumed [ 312.882989][ T9383] netlink: 334 bytes leftover after parsing attributes in process `syz.3.634'. [ 314.334357][ T9414] random: crng reseeded on system resumption [ 317.243225][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.252325][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.126849][ T9] Process accounting resumed [ 320.240932][ T9] Process accounting resumed [ 320.252367][ T9548] Process accounting resumed [ 322.085761][ T9549] Process accounting resumed [ 322.469109][ T9572] warning: `syz.0.662' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 323.415136][ T9594] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 323.415136][ T9594] program syz.3.667 not setting count and/or reply_len properly [ 323.767795][ T9598] sg_read: process 786 (syz.3.667) changed security contexts after opening file descriptor, this is not allowed. [ 329.161548][ T30] audit: type=1800 audit(8277292084.310:9): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.683" name="lu_gp_id" dev="configfs" ino=32137 res=0 errno=0 [ 330.723572][ T9719] MTRR 1 not used [ 331.916232][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.692'. [ 335.212625][ T9749] Process accounting resumed [ 335.581727][ T9777] Process accounting paused [ 336.466918][ T9797] Process accounting resumed [ 338.795551][ T9813] Process accounting resumed [ 340.202029][ T9842] Process accounting resumed [ 340.565394][ T9821] Process accounting resumed [ 340.776497][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'. [ 345.218159][ T9905] kAFS: unparsable volume name [ 345.812841][ T9908] nbd: must specify at least one socket [ 350.486029][ T9952] Process accounting paused [ 352.731505][T10016] FAULT_INJECTION: forcing a failure. [ 352.731505][T10016] name failslab, interval 1, probability 0, space 0, times 0 [ 352.836611][T10016] CPU: 0 UID: 0 PID: 10016 Comm: syz.0.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.836649][T10016] Tainted: [L]=SOFTLOCKUP [ 352.836658][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.836673][T10016] Call Trace: [ 352.836681][T10016] [ 352.836690][T10016] dump_stack_lvl+0x100/0x190 [ 352.836806][T10016] should_fail_ex.cold+0x5/0xa [ 352.836854][T10016] should_failslab+0xc2/0x120 [ 352.836900][T10016] __kmalloc_cache_noprof+0x7a/0x6f0 [ 352.836941][T10016] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 352.837064][T10016] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 352.837102][T10016] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 352.837138][T10016] vidtv_channel_si_init+0x1365/0x18f0 [ 352.837186][T10016] vidtv_mux_init+0x526/0xbf0 [ 352.837228][T10016] vidtv_start_feed+0x34e/0x500 [ 352.837256][T10016] ? __pfx_vidtv_start_feed+0x10/0x10 [ 352.837284][T10016] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 352.837328][T10016] dmx_section_feed_start_filtering+0x3a8/0x660 [ 352.837398][T10016] dvb_dmxdev_filter_start+0x767/0xdd0 [ 352.837434][T10016] dvb_demux_do_ioctl+0xe64/0x1200 [ 352.837470][T10016] dvb_usercopy+0x167/0x340 [ 352.837524][T10016] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 352.837552][T10016] ? __pfx_dvb_usercopy+0x10/0x10 [ 352.837604][T10016] ? __fget_files+0x21f/0x3d0 [ 352.837650][T10016] dvb_demux_ioctl+0x29/0x40 [ 352.837671][T10016] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 352.837695][T10016] __x64_sys_ioctl+0x18e/0x210 [ 352.837728][T10016] do_syscall_64+0x115/0x840 [ 352.837815][T10016] ? clear_bhb_loop+0x40/0x90 [ 352.837853][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.837878][T10016] RIP: 0033:0x7fa963d9ce59 [ 352.837898][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.837921][T10016] RSP: 002b:00007fa961ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.837945][T10016] RAX: ffffffffffffffda RBX: 00007fa964016180 RCX: 00007fa963d9ce59 [ 352.837961][T10016] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 352.837976][T10016] RBP: 00007fa963e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 352.837991][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.838005][T10016] R13: 00007fa964016218 R14: 00007fa964016180 R15: 00007fff493895a8 [ 352.838036][T10016] [ 356.016136][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.745'. [ 356.767042][T10053] Process accounting resumed [ 358.558721][T10066] Process accounting resumed [ 360.067614][T10084] Process accounting resumed [ 360.565377][T10092] Process accounting resumed [ 360.825159][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 361.056540][T10089] Process accounting resumed [ 361.972743][T10135] netlink: 330 bytes leftover after parsing attributes in process `syz.1.759'. [ 362.006328][T10130] cgroup: fork rejected by pids controller in /syz2 [ 363.769267][T10226] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(32769.0.87751119), cmd(12) [ 365.149538][T10211] Process accounting resumed [ 366.686407][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 367.264993][T10235] Process accounting resumed [ 367.844300][ T30] audit: type=1800 audit(8277292122.990:10): pid=10268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.773" name="lu_gp_id" dev="configfs" ino=35578 res=0 errno=0 [ 368.293351][T10274] netlink: 5 bytes leftover after parsing attributes in process `syz.1.774'. [ 369.288359][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 369.300994][T10280] FAULT_INJECTION: forcing a failure. [ 369.300994][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 369.369907][T10280] CPU: 0 UID: 0 PID: 10280 Comm: syz.0.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.369946][T10280] Tainted: [L]=SOFTLOCKUP [ 369.369954][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.369969][T10280] Call Trace: [ 369.369977][T10280] [ 369.369986][T10280] dump_stack_lvl+0x100/0x190 [ 369.370033][T10280] should_fail_ex.cold+0x5/0xa [ 369.370064][T10280] should_failslab+0xc2/0x120 [ 369.370094][T10280] __kmalloc_cache_noprof+0x7a/0x6f0 [ 369.370131][T10280] ? ip6addrlbl_add+0xe0/0xdb0 [ 369.370272][T10280] ip6addrlbl_add+0xe0/0xdb0 [ 369.370322][T10280] ip6addrlbl_net_init+0x10a/0x330 [ 369.370371][T10280] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 369.370412][T10280] ops_init+0x1e2/0x5f0 [ 369.370476][T10280] setup_net+0x118/0x3a0 [ 369.370509][T10280] ? __pfx_setup_net+0x10/0x10 [ 369.370536][T10280] ? mutex_init_lockdep+0xf1/0x120 [ 369.370570][T10280] copy_net_ns+0x46f/0x7c0 [ 369.370602][T10280] create_new_namespaces+0x3ea/0xac0 [ 369.370647][T10280] unshare_nsproxy_namespaces+0xf2/0x220 [ 369.370681][T10280] ksys_unshare+0x438/0xab0 [ 369.370724][T10280] ? __pfx_ksys_unshare+0x10/0x10 [ 369.370758][T10280] ? xfd_validate_state+0x129/0x190 [ 369.370791][T10280] ? ksys_read+0x1ac/0x250 [ 369.370832][T10280] __x64_sys_unshare+0x31/0x40 [ 369.370871][T10280] do_syscall_64+0x115/0x840 [ 369.370907][T10280] ? clear_bhb_loop+0x40/0x90 [ 369.370940][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.370965][T10280] RIP: 0033:0x7fa963d9ce59 [ 369.370985][T10280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.371008][T10280] RSP: 002b:00007fa964ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 369.371031][T10280] RAX: ffffffffffffffda RBX: 00007fa964015fa0 RCX: 00007fa963d9ce59 [ 369.371047][T10280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 369.371062][T10280] RBP: 00007fa963e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 369.371077][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.371091][T10280] R13: 00007fa964016038 R14: 00007fa964015fa0 R15: 00007fff493895a8 [ 369.371122][T10280] [ 369.600026][T10288] HfR: entered promiscuous mode [ 371.725558][T10318] FAULT_INJECTION: forcing a failure. [ 371.725558][T10318] name (null), interval 1, probability 0, space 0, times 1 [ 371.805676][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.2.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.805715][T10318] Tainted: [L]=SOFTLOCKUP [ 371.805723][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.805738][T10318] Call Trace: [ 371.805745][T10318] [ 371.805754][T10318] dump_stack_lvl+0x100/0x190 [ 371.805804][T10318] should_fail_ex.cold+0x5/0xa [ 371.805835][T10318] null_queue_rq+0x2ed/0xfb0 [ 371.805924][T10318] null_queue_rqs+0xe9/0x2f0 [ 371.805965][T10318] ? __pfx_null_queue_rqs+0x10/0x10 [ 371.806014][T10318] __blk_mq_flush_list+0x9a/0xc0 [ 371.806081][T10318] blk_mq_dispatch_queue_requests+0x184/0x7c0 [ 371.806132][T10318] blk_mq_flush_plug_list+0x1f2/0x600 [ 371.806186][T10318] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 371.806237][T10318] __blk_flush_plug+0x2c4/0x4b0 [ 371.806279][T10318] ? __pfx___blk_flush_plug+0x10/0x10 [ 371.806315][T10318] ? folio_batch_move_lru+0x344/0x7d0 [ 371.806346][T10318] ? __pfx_lru_add+0x10/0x10 [ 371.806370][T10318] ? lock_acquire+0x1b1/0x370 [ 371.806412][T10318] blk_finish_plug+0x5c/0xa0 [ 371.806450][T10318] read_pages+0x5f7/0xdf0 [ 371.806495][T10318] ? __pfx_read_pages+0x10/0x10 [ 371.806546][T10318] page_cache_ra_order+0x76b/0xf10 [ 371.806598][T10318] page_cache_async_ra+0x7bb/0xd30 [ 371.806643][T10318] filemap_fault+0xf77/0x2e90 [ 371.806675][T10318] ? __pfx_filemap_fault+0x10/0x10 [ 371.806704][T10318] ? blk_cgroup_congested+0x136/0x270 [ 371.806743][T10318] ? blk_cgroup_congested+0x136/0x270 [ 371.806788][T10318] ? __pfx_filemap_map_pages+0x10/0x10 [ 371.806827][T10318] __do_fault+0x10b/0x440 [ 371.806855][T10318] do_fault+0xeb2/0x1750 [ 371.806891][T10318] __handle_mm_fault+0x187d/0x2a00 [ 371.806932][T10318] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 371.806963][T10318] ? __pfx___handle_mm_fault+0x10/0x10 [ 371.807003][T10318] ? pte_offset_map_lock+0x174/0x320 [ 371.807031][T10318] ? find_held_lock+0x2b/0x80 [ 371.807071][T10318] ? follow_page_pte+0x4d0/0x13f0 [ 371.807107][T10318] handle_mm_fault+0x37b/0xa30 [ 371.807150][T10318] __get_user_pages+0x1178/0x32a0 [ 371.807198][T10318] ? __pfx___get_user_pages+0x10/0x10 [ 371.807238][T10318] populate_vma_page_range+0x267/0x3f0 [ 371.807273][T10318] ? __pfx_populate_vma_page_range+0x10/0x10 [ 371.807306][T10318] ? __pfx_find_vma_intersection+0x10/0x10 [ 371.807337][T10318] ? do_mmap+0x93f/0x12f0 [ 371.807371][T10318] __mm_populate+0x107/0x3a0 [ 371.807405][T10318] ? __pfx___mm_populate+0x10/0x10 [ 371.807440][T10318] ? up_write+0x28c/0x4f0 [ 371.807468][T10318] vm_mmap_pgoff+0x37f/0x470 [ 371.807503][T10318] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 371.807533][T10318] ? __fget_files+0x215/0x3d0 [ 371.807568][T10318] ? __fget_files+0x21f/0x3d0 [ 371.807602][T10318] ksys_mmap_pgoff+0x3cb/0x610 [ 371.807633][T10318] ? __x64_sys_futex+0x358/0x4d0 [ 371.807659][T10318] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 371.807688][T10318] ? xfd_validate_state+0x129/0x190 [ 371.807726][T10318] __x64_sys_mmap+0x125/0x190 [ 371.807755][T10318] do_syscall_64+0x115/0x840 [ 371.807790][T10318] ? clear_bhb_loop+0x40/0x90 [ 371.807821][T10318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.807852][T10318] RIP: 0033:0x7f368019ce59 [ 371.807871][T10318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.807895][T10318] RSP: 002b:00007f3681056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 371.807917][T10318] RAX: ffffffffffffffda RBX: 00007f3680416090 RCX: 00007f368019ce59 [ 371.807934][T10318] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 371.807948][T10318] RBP: 00007f3680232d6f R08: 0000000000000005 R09: 0000000000008000 [ 371.807963][T10318] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 371.807978][T10318] R13: 00007f3680416128 R14: 00007f3680416090 R15: 00007ffd51e04918 [ 371.808009][T10318] [ 373.066689][T10325] random: crng reseeded on system resumption [ 374.265364][T10334] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 377.981014][T10377] [U] ^H [ 377.984176][T10377] [U] [ 377.986886][T10377] [U] [ 377.989599][T10377] [U] [ 378.136370][T10377] [U] [ 378.139128][T10377] [U] [ 378.141842][T10377] [U] [ 378.144552][T10377] [U] [ 378.331178][T10377] [U] [ 378.333941][T10377] [U] [ 378.336661][T10377] [U] [ 378.339390][T10377] [U] [ 378.501779][T10367] Process accounting resumed [ 378.623708][T10377] [U] [ 378.626490][T10377] [U] [ 378.629205][T10377] [U] [ 378.631912][T10377] [U] [ 378.687145][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.695916][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.806123][T10377] [U] [ 379.861699][T10394] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 380.161977][T10398] syz.1.798(10398): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 380.592594][T10402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.894113][T10402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.108581][T10402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.198069][T10402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.867493][T10420] can: request_module (can-proto-5) failed. [ 383.220078][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 384.140702][T10430] Process accounting resumed [ 384.733342][T10453] bridge0: port 3(team0) entered blocking state [ 384.792889][T10453] bridge0: port 3(team0) entered disabled state [ 384.817374][T10453] team0: entered allmulticast mode [ 384.850651][T10453] team_slave_0: entered allmulticast mode [ 384.892620][T10453] team_slave_1: entered allmulticast mode [ 384.936150][T10453] team0: entered promiscuous mode [ 384.958563][T10453] team_slave_0: entered promiscuous mode [ 384.993394][T10453] team_slave_1: entered promiscuous mode [ 385.022994][T10453] bridge0: port 3(team0) entered blocking state [ 385.029454][T10453] bridge0: port 3(team0) entered forwarding state [ 385.879962][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 386.056958][T10478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 386.234634][T10482] netlink: 330 bytes leftover after parsing attributes in process `syz.0.815'. [ 386.406546][T10482] mac80211_hwsim hwsim22 : renamed from wlan0 [ 387.089742][T10491] Process accounting paused [ 389.641263][T10544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.675089][T10544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.703820][T10544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.744560][T10544] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 390.020703][T10543] ima: policy update failed [ 390.031347][ T30] audit: type=1802 audit(8277292145.180:11): pid=10543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.829" res=0 errno=0 [ 390.292789][T10540] Process accounting paused [ 390.590099][T10562] ubi0: attaching mtd0 [ 390.675803][T10562] ubi0: scanning is finished [ 390.917174][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.830'. [ 391.318730][T10562] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 391.486802][T10562] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 391.638687][T10562] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 391.719235][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 391.725426][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.731803][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 391.847959][T10562] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 392.018015][T10562] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 392.166795][T10562] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 392.357183][T10562] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2838533680 [ 392.548002][T10562] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 392.765813][T10577] ubi0: background thread "ubi_bgt0d" started, PID 10577 [ 393.762509][T10593] ima: policy update failed [ 393.786687][ T30] audit: type=1802 audit(8277292148.930:12): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.836" res=0 errno=0 [ 393.811449][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 395.987261][T10625] tipc: Started in network mode [ 396.012169][T10625] tipc: Node identity ee00, cluster identity 4711 [ 396.055955][T10625] tipc: Node number set to 60928 [ 396.111299][T10612] Process accounting paused [ 396.392798][T10630] netlink: 'syz.2.842': attribute type 2 has an invalid length. [ 397.430829][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 397.814921][T10648] random: crng reseeded on system resumption [ 400.430092][T10701] netlink: 334 bytes leftover after parsing attributes in process `syz.2.856'. [ 402.215084][T10670] Process accounting resumed [ 402.825664][T10728] random: crng reseeded on system resumption [ 402.896372][ T30] audit: type=1800 audit(8277292158.040:13): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.863" name="trigger" dev="tracefs" ino=19680823 res=0 errno=0 [ 403.906472][T10746] netlink: 334 bytes leftover after parsing attributes in process `syz.3.866'. [ 405.166861][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 405.235337][T10757] netlink: 'syz.2.869': attribute type 2 has an invalid length. [ 405.282652][T10757] netlink: 'syz.2.869': attribute type 3 has an invalid length. [ 405.323031][T10757] netlink: 29149 bytes leftover after parsing attributes in process `syz.2.869'. [ 405.376932][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 406.186759][T10777] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 406.186759][T10777] program syz.1.873 not setting count and/or reply_len properly [ 407.830575][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 408.407299][T10768] Process accounting resumed [ 408.765570][ T5644] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 409.684136][T10826] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 410.839419][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.663758][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 412.920832][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.967561][T10879] netlink: 342 bytes leftover after parsing attributes in process `syz.3.891'. [ 414.409615][T10900] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 414.726861][T10904] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 416.236850][T10918] netlink: 338 bytes leftover after parsing attributes in process `syz.1.900'. [ 416.520053][T10932] random: crng reseeded on system resumption [ 416.706575][T10935] hub 1-0:1.0: USB hub found [ 416.769612][T10935] hub 1-0:1.0: 1 port detected [ 418.796304][T10925] Process accounting resumed [ 419.361333][T10961] netlink: 334 bytes leftover after parsing attributes in process `syz.1.908'. [ 419.802608][T10965] random: crng reseeded on system resumption [ 420.048002][T10965] hub 1-0:1.0: USB hub found [ 420.073720][T10965] hub 1-0:1.0: 1 port detected [ 420.466039][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 420.503464][T10974] netlink: 'syz.0.912': attribute type 2 has an invalid length. [ 420.534269][T10974] netlink: 'syz.0.912': attribute type 3 has an invalid length. [ 420.559287][T10974] netlink: 29149 bytes leftover after parsing attributes in process `syz.0.912'. [ 420.588056][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 420.952751][T10963] Process accounting resumed [ 421.669527][T10993] netlink: 334 bytes leftover after parsing attributes in process `syz.3.917'. [ 422.354147][T10992] input: jJǸ-9%vJ86 as /devices/virtual/input/input13 [ 422.712301][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.920'. [ 422.882382][T11006] veth1_macvtap: left promiscuous mode [ 423.696633][T11015] binder: 11012:11015 ioctl c00c620f 200000000000 returned -22 [ 424.198624][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 424.668295][T11030] netlink: 334 bytes leftover after parsing attributes in process `syz.1.927'. [ 426.906844][T11054] Process accounting resumed [ 427.851776][T11075] netlink: 334 bytes leftover after parsing attributes in process `syz.1.936'. [ 428.124887][T11079] FAULT_INJECTION: forcing a failure. [ 428.124887][T11079] name failslab, interval 1, probability 0, space 0, times 0 [ 428.236940][T11079] CPU: 0 UID: 0 PID: 11079 Comm: syz.2.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.236979][T11079] Tainted: [L]=SOFTLOCKUP [ 428.236987][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.237001][T11079] Call Trace: [ 428.237009][T11079] [ 428.237018][T11079] dump_stack_lvl+0x100/0x190 [ 428.237100][T11079] should_fail_ex.cold+0x5/0xa [ 428.237132][T11079] should_failslab+0xc2/0x120 [ 428.237162][T11079] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 428.237202][T11079] ? __kernfs_new_node+0xd2/0x9f0 [ 428.237256][T11079] ? __pfx_try_to_wake_up+0x10/0x10 [ 428.237293][T11079] __kernfs_new_node+0xd2/0x9f0 [ 428.237322][T11079] ? wake_up_q+0xae/0x130 [ 428.237352][T11079] ? __pfx___kernfs_new_node+0x10/0x10 [ 428.237387][T11079] ? find_held_lock+0x2b/0x80 [ 428.237418][T11079] ? kernfs_root+0xee/0x2a0 [ 428.237450][T11079] ? kernfs_root+0xee/0x2a0 [ 428.237484][T11079] kernfs_new_node+0x11b/0x1a0 [ 428.237520][T11079] __kernfs_create_file+0x53/0x350 [ 428.237563][T11079] sysfs_add_file_mode_ns+0x207/0x3c0 [ 428.237596][T11079] internal_create_group+0x593/0xfb0 [ 428.237632][T11079] ? __pfx_internal_create_group+0x10/0x10 [ 428.237664][T11079] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 428.237690][T11079] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 428.237715][T11079] ? find_held_lock+0x2b/0x80 [ 428.237745][T11079] ? kobject_add_internal+0x25f/0x930 [ 428.237828][T11079] internal_create_groups+0x9d/0x150 [ 428.237861][T11079] kobject_add_internal+0x317/0x930 [ 428.237891][T11079] kobject_init_and_add+0x121/0x180 [ 428.237919][T11079] ? __pfx_kobject_init_and_add+0x10/0x10 [ 428.237954][T11079] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 428.237996][T11079] do_kmem_cache_create+0x5b7/0x690 [ 428.238029][T11079] ? kstrdup+0xb3/0xe0 [ 428.238058][T11079] __kmem_cache_create_args+0x386/0x420 [ 428.238101][T11079] mon_text_open+0x333/0x510 [ 428.238144][T11079] ? __pfx_mon_text_open+0x10/0x10 [ 428.238171][T11079] ? __pfx_mon_text_ctor+0x10/0x10 [ 428.238196][T11079] ? __pfx_apparmor_file_open+0x10/0x10 [ 428.238236][T11079] ? lockdown_is_locked_down+0x3d/0x140 [ 428.238289][T11079] ? bpf_lsm_locked_down+0x9/0x10 [ 428.238327][T11079] ? __pfx_mon_text_open+0x10/0x10 [ 428.238348][T11079] full_proxy_open_regular+0x1b6/0x370 [ 428.238405][T11079] do_dentry_open+0x6ab/0x14d0 [ 428.238440][T11079] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 428.238484][T11079] vfs_open+0x82/0x3f0 [ 428.238525][T11079] path_openat+0x208c/0x31a0 [ 428.238565][T11079] ? __pfx_path_openat+0x10/0x10 [ 428.238607][T11079] do_file_open+0x20e/0x430 [ 428.238641][T11079] ? __pfx_do_file_open+0x10/0x10 [ 428.238693][T11079] ? alloc_fd+0x476/0x790 [ 428.238744][T11079] ? do_getname+0x191/0x390 [ 428.238784][T11079] do_sys_openat2+0x10d/0x1e0 [ 428.238830][T11079] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.238868][T11079] ? lapic_next_event+0x10/0x20 [ 428.238905][T11079] __x64_sys_openat+0x12d/0x210 [ 428.238946][T11079] ? __pfx___x64_sys_openat+0x10/0x10 [ 428.239000][T11079] ? do_raw_spin_unlock+0x145/0x1e0 [ 428.239030][T11079] ? rcu_is_watching+0x12/0xc0 [ 428.239062][T11079] do_syscall_64+0x115/0x840 [ 428.239098][T11079] ? clear_bhb_loop+0x40/0x90 [ 428.239128][T11079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.239154][T11079] RIP: 0033:0x7f368019ce59 [ 428.239174][T11079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.239199][T11079] RSP: 002b:00007f3681056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.239223][T11079] RAX: ffffffffffffffda RBX: 00007f3680416090 RCX: 00007f368019ce59 [ 428.239239][T11079] RDX: 0000000000000a00 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 428.239255][T11079] RBP: 00007f3680232d6f R08: 0000000000000000 R09: 0000000000000000 [ 428.239270][T11079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.239285][T11079] R13: 00007f3680416128 R14: 00007f3680416090 R15: 00007ffd51e04918 [ 428.239316][T11079] [ 429.063408][T11083] FAULT_INJECTION: forcing a failure. [ 429.063408][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 429.076245][T11083] CPU: 0 UID: 0 PID: 11083 Comm: syz.1.939 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.076284][T11083] Tainted: [L]=SOFTLOCKUP [ 429.076301][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.076316][T11083] Call Trace: [ 429.076325][T11083] [ 429.076334][T11083] dump_stack_lvl+0x100/0x190 [ 429.076383][T11083] should_fail_ex.cold+0x5/0xa [ 429.076414][T11083] should_failslab+0xc2/0x120 [ 429.076445][T11083] __kmalloc_cache_noprof+0x7a/0x6f0 [ 429.076481][T11083] ? proc_self_get_link+0x189/0x1f0 [ 429.076515][T11083] proc_self_get_link+0x189/0x1f0 [ 429.076544][T11083] pick_link+0xac2/0x13c0 [ 429.076569][T11083] ? __pfx_proc_self_get_link+0x10/0x10 [ 429.076600][T11083] step_into_slowpath+0x9ba/0xf90 [ 429.076633][T11083] ? __pfx_step_into_slowpath+0x10/0x10 [ 429.076663][T11083] ? lookup_fast+0x2da/0x600 [ 429.076686][T11083] ? inode_permission+0x374/0x620 [ 429.076729][T11083] link_path_walk+0xf28/0x1cc0 [ 429.076765][T11083] path_openat+0x1be/0x31a0 [ 429.076795][T11083] ? kasan_save_stack+0x3f/0x50 [ 429.076818][T11083] ? kasan_save_stack+0x30/0x50 [ 429.076842][T11083] ? kasan_save_track+0x14/0x30 [ 429.076865][T11083] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 429.076914][T11083] ? __pfx_path_openat+0x10/0x10 [ 429.076956][T11083] do_file_open+0x20e/0x430 [ 429.076990][T11083] ? __pfx_do_file_open+0x10/0x10 [ 429.077043][T11083] ? alloc_fd+0x476/0x790 [ 429.077076][T11083] ? do_getname+0x191/0x390 [ 429.077116][T11083] do_sys_openat2+0x10d/0x1e0 [ 429.077155][T11083] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.077205][T11083] __x64_sys_openat+0x12d/0x210 [ 429.077245][T11083] ? __pfx___x64_sys_openat+0x10/0x10 [ 429.077284][T11083] ? ksys_write+0x1ac/0x250 [ 429.077323][T11083] ? rcu_is_watching+0x12/0xc0 [ 429.077355][T11083] do_syscall_64+0x115/0x840 [ 429.077392][T11083] ? clear_bhb_loop+0x40/0x90 [ 429.077422][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.077448][T11083] RIP: 0033:0x7efe8599ce59 [ 429.077468][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.077492][T11083] RSP: 002b:00007efe86890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.077515][T11083] RAX: ffffffffffffffda RBX: 00007efe85c15fa0 RCX: 00007efe8599ce59 [ 429.077532][T11083] RDX: 0000000000000401 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 429.077548][T11083] RBP: 00007efe85a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 429.077563][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.077577][T11083] R13: 00007efe85c16038 R14: 00007efe85c15fa0 R15: 00007ffdf909bb38 [ 429.077609][T11083] [ 430.008518][T11079] kobject: kobject_add_internal failed for mon_text_ffff88805db0f000 (error: -12 parent: slab) [ 430.056531][T11098] futex_wake_op: syz.0.941 tries to shift op by -2048; fix this program [ 430.092761][T11079] SLUB: Unable to add cache mon_text_ffff88805db0f000 to sysfs [ 430.132993][T11098] futex_wake_op: syz.0.941 tries to shift op by -2048; fix this program [ 431.546145][T11116] Line length is too long: Should be less than 4094 [ 432.895064][T11133] netlink: 334 bytes leftover after parsing attributes in process `syz.1.947'. [ 433.263942][T11111] Process accounting resumed [ 433.533267][T11143] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 433.575218][T11143] netlink: 9 bytes leftover after parsing attributes in process `syz.2.950'. [ 433.926133][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 434.157969][T11117] Process accounting resumed [ 435.219452][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 435.887080][T11184] netlink: 334 bytes leftover after parsing attributes in process `syz.0.957'. [ 437.127916][T11203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.963'. [ 437.233617][T11205] netlink: 504 bytes leftover after parsing attributes in process `syz.2.962'. [ 437.287766][T11205] netlink: 504 bytes leftover after parsing attributes in process `syz.2.962'. [ 437.357547][T11205] netlink: 504 bytes leftover after parsing attributes in process `syz.2.962'. [ 437.412782][T11205] netlink: 504 bytes leftover after parsing attributes in process `syz.2.962'. [ 437.960894][T11211] capability: warning: `syz.2.964' uses deprecated v2 capabilities in a way that may be insecure [ 438.133447][T11211] syz.2.964 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 438.518335][T11214] Invalid ELF header magic: != ELF [ 440.121273][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.131191][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.988274][T11345] __nla_validate_parse: 61 callbacks suppressed [ 446.060874][T11345] netlink: 342 bytes leftover after parsing attributes in process `syz.2.988'. [ 448.984521][T11365] Process accounting paused [ 448.997113][T11393] FAULT_INJECTION: forcing a failure. [ 448.997113][T11393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.057464][T11393] CPU: 0 UID: 0 PID: 11393 Comm: syz.0.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.057501][T11393] Tainted: [L]=SOFTLOCKUP [ 449.057509][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.057524][T11393] Call Trace: [ 449.057533][T11393] [ 449.057544][T11393] dump_stack_lvl+0x100/0x190 [ 449.057591][T11393] should_fail_ex.cold+0x5/0xa [ 449.057618][T11393] ? prepare_alloc_pages+0x16d/0x5f0 [ 449.057652][T11393] should_fail_alloc_page+0xeb/0x140 [ 449.057683][T11393] prepare_alloc_pages+0x1f0/0x5f0 [ 449.057718][T11393] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 449.057774][T11393] ? __lock_acquire+0x4a5/0x2630 [ 449.057816][T11393] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 449.057856][T11393] ? __lock_acquire+0x4a5/0x2630 [ 449.057907][T11393] ? find_held_lock+0x2b/0x80 [ 449.057935][T11393] ? is_bpf_text_address+0x8a/0x1a0 [ 449.057994][T11393] ? is_bpf_text_address+0x8a/0x1a0 [ 449.058024][T11393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 449.058060][T11393] ? policy_nodemask+0xed/0x4f0 [ 449.058090][T11393] alloc_pages_mpol+0x1fb/0x540 [ 449.058119][T11393] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 449.058148][T11393] ? arch_stack_walk+0xa6/0xf0 [ 449.058185][T11393] folio_alloc_mpol_noprof+0x36/0x260 [ 449.058219][T11393] shmem_alloc_folio+0x135/0x160 [ 449.058255][T11393] shmem_alloc_and_add_folio+0x371/0xd40 [ 449.058301][T11393] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 449.058342][T11393] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 449.058372][T11393] shmem_get_folio_gfp+0x6ab/0x1900 [ 449.058401][T11393] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 449.058424][T11393] ? filemap_map_pages+0x9c1/0x2140 [ 449.058468][T11393] shmem_fault+0x1f9/0xa20 [ 449.058492][T11393] ? __pfx_shmem_fault+0x10/0x10 [ 449.058515][T11393] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 449.058557][T11393] ? __pfx_filemap_map_pages+0x10/0x10 [ 449.058599][T11393] ? find_held_lock+0x2b/0x80 [ 449.058630][T11393] __do_fault+0x10b/0x440 [ 449.058656][T11393] do_fault+0xa99/0x1750 [ 449.058685][T11393] ? __pmd_alloc+0x3fb/0x950 [ 449.058717][T11393] __handle_mm_fault+0x187d/0x2a00 [ 449.058762][T11393] ? mt_find+0x45e/0x8e0 [ 449.058801][T11393] ? __pfx___handle_mm_fault+0x10/0x10 [ 449.058834][T11393] ? __pfx_mt_find+0x10/0x10 [ 449.058885][T11393] ? find_vma+0xbf/0x140 [ 449.058910][T11393] ? __pfx_find_vma+0x10/0x10 [ 449.058938][T11393] handle_mm_fault+0x37b/0xa30 [ 449.058979][T11393] do_user_addr_fault+0x74c/0x12f0 [ 449.059017][T11393] ? trace_page_fault_kernel+0x7a/0x200 [ 449.059046][T11393] exc_page_fault+0x6f/0xd0 [ 449.059126][T11393] asm_exc_page_fault+0x26/0x30 [ 449.059149][T11393] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 449.059174][T11393] Code: c4 10 e9 04 9d 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 [ 449.059197][T11393] RSP: 0018:ffffc900037efbd0 EFLAGS: 00050202 [ 449.059215][T11393] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 449.059229][T11393] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900037efcf0 [ 449.059243][T11393] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520006fdf9e [ 449.059257][T11393] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 449.059270][T11393] R13: ffffc900037efcf0 R14: 0000000000000000 R15: 000000000000010e [ 449.059299][T11393] _copy_from_user+0x98/0xd0 [ 449.059345][T11393] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 449.059407][T11393] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 449.059451][T11393] do_sock_getsockopt+0x530/0x6e0 [ 449.059479][T11393] ? __lock_acquire+0x4a5/0x2630 [ 449.059520][T11393] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 449.059568][T11393] ? ksys_write+0x190/0x250 [ 449.059600][T11393] ? find_held_lock+0x2b/0x80 [ 449.059637][T11393] ? __fget_files+0x21f/0x3d0 [ 449.059672][T11393] __sys_getsockopt+0x133/0x1d0 [ 449.059703][T11393] ? __x64_sys_getsockopt+0xbd/0x160 [ 449.059724][T11393] __x64_sys_getsockopt+0xbd/0x160 [ 449.059766][T11393] ? do_syscall_64+0x90/0x840 [ 449.059800][T11393] ? lockdep_hardirqs_on+0x78/0x100 [ 449.059833][T11393] do_syscall_64+0x115/0x840 [ 449.059865][T11393] ? clear_bhb_loop+0x40/0x90 [ 449.059894][T11393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.059917][T11393] RIP: 0033:0x7fa963d9ce59 [ 449.059935][T11393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.059957][T11393] RSP: 002b:00007fa964ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 449.059977][T11393] RAX: ffffffffffffffda RBX: 00007fa964015fa0 RCX: 00007fa963d9ce59 [ 449.059992][T11393] RDX: 0000000000000009 RSI: 000000000000010e RDI: 0000000000000003 [ 449.060006][T11393] RBP: 00007fa963e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 449.060020][T11393] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000000 [ 449.060034][T11393] R13: 00007fa964016038 R14: 00007fa964015fa0 R15: 00007fff493895a8 [ 449.060064][T11393] [ 450.988284][T11411] Process accounting paused [ 454.526727][T11433] Process accounting resumed [ 455.449333][T11498] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[11498] [ 455.815328][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 457.552409][T11525] FAULT_INJECTION: forcing a failure. [ 457.552409][T11525] name failslab, interval 1, probability 0, space 0, times 0 [ 457.588166][T11525] CPU: 0 UID: 0 PID: 11525 Comm: syz.3.1020 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.588208][T11525] Tainted: [L]=SOFTLOCKUP [ 457.588217][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.588232][T11525] Call Trace: [ 457.588239][T11525] [ 457.588248][T11525] dump_stack_lvl+0x100/0x190 [ 457.588297][T11525] should_fail_ex.cold+0x5/0xa [ 457.588327][T11525] ? tomoyo_encode2+0xfb/0x3c0 [ 457.588392][T11525] should_failslab+0xc2/0x120 [ 457.588423][T11525] __kmalloc_noprof+0xe0/0x850 [ 457.588463][T11525] ? d_absolute_path+0x136/0x1b0 [ 457.588491][T11525] tomoyo_encode2+0xfb/0x3c0 [ 457.588532][T11525] tomoyo_encode+0x29/0x50 [ 457.588566][T11525] tomoyo_realpath_from_path+0x18c/0x690 [ 457.588610][T11525] tomoyo_check_open_permission+0x2af/0x3c0 [ 457.588643][T11525] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 457.588686][T11525] ? hook_file_open+0x24e/0x7a0 [ 457.588738][T11525] ? path_get+0x61/0x80 [ 457.588775][T11525] tomoyo_file_open+0x6b/0x90 [ 457.588799][T11525] security_file_open+0xb5/0x1e0 [ 457.588834][T11525] do_dentry_open+0x588/0x14d0 [ 457.588899][T11525] vfs_open+0x82/0x3f0 [ 457.588941][T11525] path_openat+0x208c/0x31a0 [ 457.588983][T11525] ? __pfx_path_openat+0x10/0x10 [ 457.589027][T11525] do_file_open+0x20e/0x430 [ 457.589061][T11525] ? __pfx_do_file_open+0x10/0x10 [ 457.589114][T11525] ? alloc_fd+0x476/0x790 [ 457.589147][T11525] ? do_getname+0x191/0x390 [ 457.589187][T11525] do_sys_openat2+0x10d/0x1e0 [ 457.589226][T11525] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.589276][T11525] __x64_sys_openat+0x12d/0x210 [ 457.589317][T11525] ? __pfx___x64_sys_openat+0x10/0x10 [ 457.589362][T11525] ? rcu_is_watching+0x12/0xc0 [ 457.589396][T11525] do_syscall_64+0x115/0x840 [ 457.589436][T11525] ? clear_bhb_loop+0x40/0x90 [ 457.589466][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.589492][T11525] RIP: 0033:0x7f771b79ce59 [ 457.589512][T11525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.589537][T11525] RSP: 002b:00007f771c577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.589560][T11525] RAX: ffffffffffffffda RBX: 00007f771ba15fa0 RCX: 00007f771b79ce59 [ 457.589577][T11525] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 457.589592][T11525] RBP: 00007f771b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 457.589607][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.589622][T11525] R13: 00007f771ba16038 R14: 00007f771ba15fa0 R15: 00007fffdf905dc8 [ 457.589653][T11525] [ 458.625762][T11543] &#$@\]\-: entered promiscuous mode [ 458.676936][T11525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 459.964004][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 460.033082][ T30] audit: type=1806 audit(8277292215.180:14): xattr="." res=0 [ 460.462035][T11581] ------------[ cut here ]------------ [ 460.469190][T11581] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 460.469217][T11581] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#0: syz.1.1032/11581 [ 460.488571][T11581] Modules linked in: [ 460.492804][T11581] CPU: 0 UID: 0 PID: 11581 Comm: syz.1.1032 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.503798][T11581] Tainted: [L]=SOFTLOCKUP [ 460.508147][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.518325][T11581] RIP: 0010:path_noexec+0x1cf/0x230 [ 460.524104][T11581] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 ba 62 7e ff 83 e3 01 e8 d2 67 7e ff 89 d8 5b 5d 41 5c e9 07 a7 00 09 e8 c2 67 7e ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 54 eb ff e9 a3 fe ff ff e8 3a 54 eb [ 460.543869][T11581] RSP: 0018:ffffc90004dafbd8 EFLAGS: 00010293 [ 460.550260][T11581] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff828994e4 [ 460.558746][T11581] RDX: ffff888029d83e00 RSI: ffffffff8289959e RDI: ffff888029d83e00 [ 460.567044][T11581] RBP: ffff88801ced1de0 R08: 0000000000000007 R09: 0000000000000000 [ 460.575260][T11581] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 460.583344][T11581] R13: 0000000000000001 R14: ffff88807bcb6c88 R15: 0000000000000003 [ 460.591406][T11581] FS: 00007efe8686f6c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 460.600621][T11581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.607253][T11581] CR2: 0000200000177000 CR3: 0000000076baa000 CR4: 00000000003526f0 [ 460.615416][T11581] Call Trace: [ 460.618706][T11581] [ 460.621674][T11581] do_mmap+0x857/0x12f0 [ 460.625861][T11581] ? __pfx_do_mmap+0x10/0x10 [ 460.630576][T11581] ? __pfx_down_write_killable+0x10/0x10 [ 460.636307][T11581] vm_mmap_pgoff+0x29e/0x470 [ 460.640975][T11581] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 460.646102][T11581] ? __fget_files+0x215/0x3d0 [ 460.650838][T11581] ? __fget_files+0x21f/0x3d0 [ 460.655670][T11581] ksys_mmap_pgoff+0x3cb/0x610 [ 460.660922][T11581] ? __x64_sys_futex+0x358/0x4d0 [ 460.666091][T11581] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 460.671520][T11581] ? xfd_validate_state+0x129/0x190 [ 460.676732][T11581] ? ksys_read+0x1ac/0x250 [ 460.681206][T11581] __x64_sys_mmap+0x125/0x190 [ 460.685900][T11581] do_syscall_64+0x115/0x840 [ 460.690534][T11581] ? clear_bhb_loop+0x40/0x90 [ 460.695230][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.701195][T11581] RIP: 0033:0x7efe8599ce59 [ 460.705624][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.725286][T11581] RSP: 002b:00007efe8686f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 460.733749][T11581] RAX: ffffffffffffffda RBX: 00007efe85c16090 RCX: 00007efe8599ce59 [ 460.741792][T11581] RDX: 0000000000000003 RSI: 0000000000000068 RDI: 0000000000000000 [ 460.749802][T11581] RBP: 00007efe85a32d6f R08: 0000000000000003 R09: 0000000083000000 [ 460.757904][T11581] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 460.766385][T11581] R13: 00007efe85c16128 R14: 00007efe85c16090 R15: 00007ffdf909bb38 [ 460.774621][T11581] [ 460.777662][T11581] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 460.784949][T11581] CPU: 0 UID: 0 PID: 11581 Comm: syz.1.1032 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.795899][T11581] Tainted: [L]=SOFTLOCKUP [ 460.800235][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.810294][T11581] Call Trace: [ 460.813581][T11581] [ 460.816529][T11581] dump_stack_lvl+0x100/0x190 [ 460.821246][T11581] vpanic+0x552/0x970 [ 460.825243][T11581] ? __pfx_vpanic+0x10/0x10 [ 460.829764][T11581] panic+0xd1/0xe0 [ 460.833501][T11581] ? __pfx_panic+0x10/0x10 [ 460.837939][T11581] ? check_panic_on_warn+0x1f/0x90 [ 460.843076][T11581] check_panic_on_warn.cold+0x19/0x34 [ 460.848463][T11581] ? path_noexec+0x1cf/0x230 [ 460.853066][T11581] __warn.cold+0x191/0x328 [ 460.857499][T11581] __report_bug+0x296/0x3d0 [ 460.862108][T11581] ? path_noexec+0x1cf/0x230 [ 460.866716][T11581] ? __pfx___report_bug+0x10/0x10 [ 460.871765][T11581] ? __lock_acquire+0x4a5/0x2630 [ 460.876734][T11581] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 460.882996][T11581] ? path_noexec+0x1cf/0x230 [ 460.887606][T11581] report_bug+0xb2/0x220 [ 460.891874][T11581] ? path_noexec+0x1cf/0x230 [ 460.896473][T11581] handle_bug+0x16a/0x2a0 [ 460.900838][T11581] exc_invalid_op+0x17/0x50 [ 460.905370][T11581] asm_exc_invalid_op+0x1a/0x20 [ 460.910230][T11581] RIP: 0010:path_noexec+0x1cf/0x230 [ 460.915447][T11581] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 ba 62 7e ff 83 e3 01 e8 d2 67 7e ff 89 d8 5b 5d 41 5c e9 07 a7 00 09 e8 c2 67 7e ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 54 eb ff e9 a3 fe ff ff e8 3a 54 eb [ 460.935080][T11581] RSP: 0018:ffffc90004dafbd8 EFLAGS: 00010293 [ 460.941158][T11581] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff828994e4 [ 460.949134][T11581] RDX: ffff888029d83e00 RSI: ffffffff8289959e RDI: ffff888029d83e00 [ 460.957113][T11581] RBP: ffff88801ced1de0 R08: 0000000000000007 R09: 0000000000000000 [ 460.965088][T11581] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 460.973077][T11581] R13: 0000000000000001 R14: ffff88807bcb6c88 R15: 0000000000000003 [ 460.981059][T11581] ? path_noexec+0x114/0x230 [ 460.985681][T11581] ? path_noexec+0x1ce/0x230 [ 460.990286][T11581] ? path_noexec+0x1ce/0x230 [ 460.994888][T11581] do_mmap+0x857/0x12f0 [ 460.999065][T11581] ? __pfx_do_mmap+0x10/0x10 [ 461.003672][T11581] ? __pfx_down_write_killable+0x10/0x10 [ 461.009337][T11581] vm_mmap_pgoff+0x29e/0x470 [ 461.013950][T11581] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 461.019094][T11581] ? __fget_files+0x215/0x3d0 [ 461.023799][T11581] ? __fget_files+0x21f/0x3d0 [ 461.028508][T11581] ksys_mmap_pgoff+0x3cb/0x610 [ 461.033299][T11581] ? __x64_sys_futex+0x358/0x4d0 [ 461.038249][T11581] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 461.043551][T11581] ? xfd_validate_state+0x129/0x190 [ 461.048940][T11581] ? ksys_read+0x1ac/0x250 [ 461.053377][T11581] __x64_sys_mmap+0x125/0x190 [ 461.058067][T11581] do_syscall_64+0x115/0x840 [ 461.062679][T11581] ? clear_bhb_loop+0x40/0x90 [ 461.067373][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.073278][T11581] RIP: 0033:0x7efe8599ce59 [ 461.077700][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.097333][T11581] RSP: 002b:00007efe8686f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 461.105755][T11581] RAX: ffffffffffffffda RBX: 00007efe85c16090 RCX: 00007efe8599ce59 [ 461.113751][T11581] RDX: 0000000000000003 RSI: 0000000000000068 RDI: 0000000000000000 [ 461.121728][T11581] RBP: 00007efe85a32d6f R08: 0000000000000003 R09: 0000000083000000 [ 461.129704][T11581] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 461.137681][T11581] R13: 00007efe85c16128 R14: 00007efe85c16090 R15: 00007ffdf909bb38 [ 461.145690][T11581] [ 461.148790][T11581] Kernel Offset: disabled [ 461.153123][T11581] Rebooting in 86400 seconds..