last executing test programs: 23.431261706s ago: executing program 0 (id=2428): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x101000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x10, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x6, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x104000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x10, 0xfffffffffffffffe, 0x3563, 0x7fffffff, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) close_range$auto(0x0, 0x5, 0x0) r5 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r7 = socket(0x2, 0x1, 0x106) setsockopt$auto(r7, 0x6, 0x19, 0x0, 0x4) 22.944135688s ago: executing program 0 (id=2430): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.4/usb17/17-0:1.0/usb17-port7/power/control\x00', 0x4c8280, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x20000000000005b, 0xeb1, 0x404, 0x8000) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) (async) socket(0x10, 0x2, 0x4) (async) socket(0x1d, 0x2, 0x7) (async) socket(0x2, 0x2, 0xed) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socketcall$auto(0xa, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zram0\x00', 0x0, 0x0) r4 = socket(0x2, 0x1, 0x106) io_cancel$auto(0x1, &(0x7f0000000140)={0x9, 0x0, 0xe, 0x7, 0x1e, r3, 0x7fffffffffffffff, 0x7, 0xb5, 0x0, 0x8000, r4}, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x10004801) (async) ioctl$auto(0x3, 0xae41, r0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) pread64$auto(r2, 0x0, 0x100000002, 0x100000001) (async) close_range$auto(0x2, 0x8, 0x0) (async) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/018/001\x00', 0x502, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB]) ioctl$auto(0xffffffffffffffff, 0x92106405, r5) close_range$auto(0x2, 0xa, 0x0) 22.35081495s ago: executing program 0 (id=2432): bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x401) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) write$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) io_uring_setup$auto(0x3, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(0xffffffffffffffff, 0x1, &(0x7f0000000240)='#!\xe3#\x00', &(0x7f0000000280)="8c875fc81d0c5373713e8f14c4d9249b170fef686676b9796338e2e4e4fb12e61535c21f979e53394c9b4cf8092fb02ed7d5d990ac0804b5535e1c6c98366a00fe1a0ab4575aafd7732a7476ef4660df7d4a26c3d37a6ff287899e418b9bfbb4e1392c57a92cdee6e2a1a0b12e6e1c4c6edb50a377049e5d054342f1183a6e18da76a0fdac083262cd12507343d392d6560ebdf03bf5857be039aeaa695a3170f7b9a73f50240d4d313986", 0x5) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xa, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 12.253901254s ago: executing program 1 (id=2460): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3f, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) 7.712996166s ago: executing program 1 (id=2468): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x200000000001, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10000000eb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 6.354594515s ago: executing program 1 (id=2470): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x5, 0x6, 0xa, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c4b, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x0, 0x52, 0x5, 0x0, 0x42, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x4, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach, 0x40) 5.67319446s ago: executing program 3 (id=2474): r0 = socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x52) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0xa, 0x1, 0x84) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0300, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x80111500, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) gettid() openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x1c, 0x20000000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r5, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) syz_clone(0x30004400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.54857162s ago: executing program 1 (id=2475): prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7fff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket(0x10, 0x2, 0xc) r1 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x97253d5c24a95d78, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) r3 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) pread64$auto(r3, &(0x7f00000001c0)='\x00', 0xca31, 0x4) write$auto(r2, 0x0, 0xe) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002340)='/dev/tty8\x00', 0x20342, 0x0) pwrite64$auto(r1, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x00\x00\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x9bo\xdc\xf7e\x0e0\xd2r\r_\x1d', 0xfdef, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f00000021c0)={0x3, &(0x7f0000002140)={0x10, 0x3, 0x81, @raw=0xfb}}) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8001) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r9) sendmsg$auto_TIPC_NL_NET_SET(r9, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000002180)=ANY=[@ANYRES64=r5, @ANYRESDEC=r4, @ANYBLOB="010027bd7000fcdbdf060f0000000c00078008000100e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x4002) lstat$auto(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x9b9, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0xee00, 0x0, 0x84, 0x2, 0x2, 0x7, 0x9, 0x7, 0x7, 0x40, 0x1, 0x1ff}) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r5, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4040050) sendmsg$auto_TIPC_NL_MON_SET(r7, &(0x7f0000002000)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5d150000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="04006b80a48cb5436420e5b222d1227f38bc87e8ae11d2bf33834d2dfa9764f9bacee4630d6c7d7b5f559f4aefca07064a4085ac10b1a2c270b346e381ab5d7faf065e3a1172b98b77c43cfd75cdd2e8c011a5ef016037c683aa98528ad5c251a602ca9ae7f550451e4d48b32d76d91f5608c99a9ba0a2abbed41565768d382e30fcf12843025f803fbbc9fc5053ed48182f94cd4a0e728af148181c4b341139c950d716b3000000"], 0x1568}, 0x1, 0x0, 0x0, 0x4000004}, 0x44840) sendmsg$auto_HANDSHAKE_CMD_DONE(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0xd4) 4.168632961s ago: executing program 3 (id=2478): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$auto(0x3, 0x0, 0x6a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r3 = socket(0x2, 0x3, 0x100) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x40010) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) r4 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto_mtd_fops_mtdchar(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x12, r4, 0xe93) (async) syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r4) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r3) (async) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r3, 0x0, 0x4040005) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, r0) 4.152896683s ago: executing program 1 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000300)={r0, 0x7}) getsockopt$auto_SO_TIMESTAMP_OLD(r1, 0x0, 0x1d, &(0x7f0000000340)='\x00', &(0x7f0000000380)=0x400) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x100000000001, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x8, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xfffffffd}, 0x7, 0x0) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) socket(0x2, 0x3, 0x6) socket(0x10, 0x2, 0x0) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_I2C_FUNCS(r4, 0x705, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="1254ba63f614000018", @ANYRES16, @ANYBLOB="3f10f6e2eb"], 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) clock_getres$auto(0xfffffffffffffff5, 0xffffffffffffffff) mmap$auto(0x2, 0x80, 0x80, 0x10, r0, 0x6) recvmmsg$auto(r0, &(0x7f0000001480)={{&(0x7f00000001c0)="78c806fb2db58d1ac662df163f319bb6b75ef28f1f8846a4e0b2c7cc18a300acd2ed12d0ab53", 0xffff, &(0x7f0000000440)={&(0x7f0000000400)="062c", 0x100000001}, 0x4c1ac43f, &(0x7f0000000480)="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", 0x8, 0x507}, 0xc}, 0xffffff54, 0x101, &(0x7f00000014c0)={0x7fffffffffffffff}) nanosleep$auto(&(0x7f0000001540)={0x1}, &(0x7f0000001600)={0x3, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000180), r0) socket$nl_generic(0x10, 0x3, 0x10) 3.664023952s ago: executing program 3 (id=2480): r0 = socket(0x2a, 0x5, 0x808001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff}, 0xb3c) clock_gettime$auto(0x7, &(0x7f0000000100)={0x8000, 0x10}) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x8, 0x311) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000180)="4fc962754c7f37befb6cdc55697634f7f11af49173aadc1894eebde91753947996adcbd8378db4cd26cea830357e6e4cf3cf061626db756b4409a3cbcce6a6bacd9dcd2f75611d7d8587f189f42fc13e394b809425cde06bd17cbbae115f646da83aa95438f88a66fe592615a8b4df974bd2b456b192bc38405894305070d9406ca35e5735c92608ffaf145f2ddeeb43e84cf0a124a428477f3704104eecce356c000f1ddb965e117bed4ce0ec0175", 0x5) select$auto(0x7, &(0x7f0000000240)={[0x4, 0xfffffffffffffffd, 0x7, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) (async) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r1, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f00000000c0)={0x0, 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x1ef) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) (async) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0x3, 0xa, 0x4) landlock_restrict_self$auto(r2, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) (async) write$auto(0xffffffffffffffff, 0x0, 0x1) bpf$auto(0x0, &(0x7f0000000780)=@link_create={@map_fd=r0, @target_ifindex, 0x9, 0x2, @uprobe_multi={0x6, 0x6, 0x5, 0x20000000000ffff, 0x4f22, 0x9c5}}, 0xa3) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_create={@map_fd=r0, @target_ifindex, 0x9, 0x2, @uprobe_multi={0x6, 0x6, 0x5, 0x20000000000ffff, 0x4f22, 0x9c5}}, 0xa3) prctl$auto(0x42, 0x4, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) (async) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) socket(0x3, 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 3.646322783s ago: executing program 2 (id=2481): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x8905, 0x38) 3.330864054s ago: executing program 2 (id=2482): bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x401) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) write$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) io_uring_setup$auto(0x3, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(0xffffffffffffffff, 0x1, &(0x7f0000000240)='#!\xe3#\x00', &(0x7f0000000280)="8c875fc81d0c5373713e8f14c4d9249b170fef686676b9796338e2e4e4fb12e61535c21f979e53394c9b4cf8092fb02ed7d5d990ac0804b5535e1c6c98366a00fe1a0ab4575aafd7732a7476ef4660df7d4a26c3d37a6ff287899e418b9bfbb4e1392c57a92cdee6e2a1a0b12e6e1c4c6edb50a377049e5d054342f1183a6e18da76a0fdac083262cd12507343d392d6560ebdf03bf5857be039aeaa695a3170f7b9a73f50240d4d313986", 0x5) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xa, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3.017100304s ago: executing program 1 (id=2483): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000000)='./file0\x00') ptrace$auto(0x10, r0, 0x1, 0x7ff) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket(0x22, 0x3, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) ioctl$auto(r1, 0x901064ac, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80002, 0x73) close_range$auto(r2, r2, 0x7) socket(0x10, 0x2, 0x4) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ram3\x00', 0x448800, 0x0) socket(0x2, 0x1, 0x0) setfsuid$auto(0xee00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) mlock$auto(0x81, 0xffff) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) cachestat$auto(r3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.858164929s ago: executing program 0 (id=2437): socket(0x11, 0x3, 0x9) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x22b80, 0x0) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)={@padding, 0xbb}) mmap$auto(0x0, 0x4020009, 0xde, 0xebe, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) sendfile$auto(0x1, 0x3, 0x0, 0xfffffffffffffff8) mmap$auto(0x0, 0x2020809, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/usb/usbmon/17u\x00', 0x60f00, 0x0) msync$auto(0x200000, 0x2000000005, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/mtu\x00', 0x2062, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) 2.617257822s ago: executing program 0 (id=2484): syz_clone(0x0, 0x0, 0xfffffffffffffd21, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) uname$auto(0x0) 2.341056146s ago: executing program 2 (id=2485): socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_MSG_INFO(0x0, 0xc, &(0x7f0000000180)={{0xfffffffc, 0x0, 0x0, 0x5, 0x5f, 0xcf, 0x5}, &(0x7f0000000100)=0xd, 0x0, 0x7, 0x7, 0x6, 0x3, 0x14cd21ec, 0x3, 0x7, 0x4, @inferred=0xffffffffffffffff}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x2, 0x3, 0x100) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x20000010) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r2, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.066715549s ago: executing program 2 (id=2486): mmap$auto(0x0, 0x6, 0x80000000080001, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x3) socket(0x2a, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) pidfd_open$auto(0x1, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) setrlimit$auto(0x1000000007, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) 1.996130869s ago: executing program 3 (id=2487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) statx$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x10001, 0x2, 0xffffffffffffffff, 0x0, 0x8000, 0xb7, 0xfff, 0x5, 0x0, 0x9, {0x1, 0x7}, {0x5, 0x40f}, {0x7, 0xfffffffc}, {0x82, 0xcfc}, 0x7f, 0x5, 0x7c, 0x9, 0x4, 0x5, 0x0, 0x2, 0x8001, 0x4, 0x1000, 0x2, [0x7, 0x3, 0xffffffffffffffb9, 0x5, 0xb, 0x2, 0x8001, 0x1, 0x1]}) shmctl$auto_IPC_RMID(0x6173, 0x0, &(0x7f00000003c0)={{0xcfb, 0xee01, 0x0, 0xd, 0x101, 0x1000, 0x6}, 0x0, 0x5, 0x80000001, 0x5, @raw=0x5c7, @inferred=0x0, 0x9, 0x0, &(0x7f00000001c0)="44f72b4aaab7a7d7c3b4de2bd8314935e7e82b0abede364372d7ac7a80b520907f5ae84124be13e2234ddcef9081edd5ef8fd08ebf4d51569de0b5fccdebd7f3a28ccf78fa2ef41dc50a2ff04f47beaf0cdda1752dcb64b71315be557c07292c25315c69889472bf545d1141f9174dc8539d7bb5b10f976575793298b5242a6b3c3c9284efc9e315ba5131aef1cd6615300f62d4180ee8235628b752cf8f350482da989a5954b373882b42d9ac67974b7053dc6a5c0a10d4d6228766db9382c7b36ed164d25ef6a12f5601b492d8b8bd3ca4235ac6dcd5182f234e1b5b8dd9", &(0x7f00000002c0)="84ff5810c52650eb732001930443a027d273a0a5006754582ea5ce25576c160b965feb9d0c5727cc2089896dc31ee64ffa53e2dd1dea39307b3b126da01134679a51d38d9b56c8139937f714c1b4ef95f2457b936439577479a55cce43ef1e3887760ecef61cda3b1f7bc5653cff286ed2561eaff049ddc29f323242620dc1d7ab9fde59cf83734a62e82071e79bc82a6ae43e82bac2d5979cc44a4d5c3f88c5343cd38b1d4684cea1a8455de97313317bfe29b3af4e3a728f11be6157344149478cb3fafe954a23"}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={"fa3d509a9cebc72fe611b624c655b6b9e02d8407feb72779ef982ac828be1533", 0x9, 0x4, 0x4, 0x84, 0x6, 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000001940)={&(0x7f00000004c0)={0x1454, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_OFFLOAD={0x117a, 0x9, 0x0, 0x1, [@generic="b394ed1e48c7d4183fd32fe44fddd9a6142afd5b695cfc05f4f75089c06a49557ff08c36fe8bde932f631e41c5a4e3b6a1765d77addd4b85a1e5fa6dc834951367072ba09870907048cf966badf2dba0fff423164e4f86f8f7ec891d036d43e33b06a3fac26922ad422fe4c9a79db4358dbbe964cdcfadbd0a1da75e53e85418b1d4", @typed={0x4, 0xda}, @nested={0x10e8, 0x117, 0x0, 0x1, [@typed={0x8, 0x10a, 0x0, 0x0, @uid=r2}, @generic, @nested={0x4, 0x92}, @typed={0x8, 0xef, 0x0, 0x0, @u32=0xff}, @generic="2f08a043a185d222c8f3ee0bc456ce8697e4d4269d1eab558bd36c145ad6bda7bcd1821a242bb0bd36c61cc967596443ee8e56d56edc4f3bf7dbb35e92c9db011f407fc4b6587ab2d2f9eb73ce6f3dbe522aaf2a0263cb017f1f672eebfd0df8361b1d0b89258568a15aed9e1bf0e24ca53d981d72e026f45c2bf196bf13208832144f7a20a55f7a3886d03c428ee49170a93cab64a7da332685d548dc35dc8a7be2ea7fca954e4cadc0253551a2ffd50d51791054b1cd110476fcf0638d9468dafea603f79566dbc0f1098419a25b8a", @generic="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"]}, @typed={0x8, 0x45, 0x0, 0x0, @uid=r3}]}, @MACSEC_ATTR_OFFLOAD={0x2c4, 0x9, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @u32=0x1ff}, @generic="168d685fcfd1145d0a67d86603fcfcd395a7c4ec7a1853f89be20f6a0674d4a0716c46a4a2c07cbe79a9f08a2d27d54e574d44d709df846f4d992aa48514de17ff4bcc560465a801d9028912db2d40e0c729db74fb9adb7eeedc7263c3ffef63d156746547588574e90e8948ae2798b35a38f2b6bd6334ca8da6398d8c7016f3392c02e5f6e3a0e0987f8343eec27091fea360ea673c1b441f9a1c00d556c80d92a0ca0b648b97f5aa02b5", @nested={0x4b, 0x38, 0x0, 0x1, [@nested={0x4, 0x98}, @generic="322f1896c3fb20dc74e365849d753134dd169f01f3f958a8cc1345a28060062006401febbcb97f5eb6a95fe2913b323196810c4b34c58056855d20", @typed={0x8, 0x153, 0x0, 0x0, @pid=r5}]}, @typed={0xc, 0x16b, 0x0, 0x0, @u64=0x2f2}, @nested={0x104, 0x123, 0x0, 0x1, [@nested={0x4, 0xda}, @nested={0x4, 0x1e}, @typed={0xf7, 0x111, 0x0, 0x0, @binary="c56e22dffb283c62faac77f86b204f45e93cb2882ccdad85226b3e727cf91ec090f889ceb338ab75bffe90fbd542fa1459268f82edf22a89810d0e688e3e6d36ed115fc7d15a99ba596ab68fa492f23db6b002e04902b2315d4ce8f620a2eaa2868eb277d4c2c314e1deebbfc9168902d2000c47020322cdfac1ebf18ab680422b1dfae4b73df9926f41b1e2c4566f20882fc1ce8f8308f70d6fcb99c69f767e2084463685b70dee2276cb94b2b2260f39bb668753c67f90b3b3c9d6fd2810e8a3f60c1dd5c0a567a9a00b62f4708358420042a3e58179fee437c3481269596da66417fcb45986a0acf2fa327c3ead1339898b"}]}, @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x101}, @generic="cbf46c0bc4baee35ff8de564d4ae010a474d9026b0668dfc286889041147b0d640f90d23614ffd34fa9130eaa90d1a44836a92c8b35f8138ab555e540fb447f61aaf8429273e62acc73e3a9bf2ea39d2925462cfb55362cab13fcd757ce605f6f6f9b2af192f7d82384e5a098ce0a01d87a69df71cf6e9b0d7959ae91dd497fa874c1d284d91863a83792bc188d874dee533e304eeb45e43c1b7e60eac71bf921f48429166"]}]}, 0x1454}, 0x1, 0x0, 0x0, 0x24000814}, 0x40000) r6 = socketpair$auto(0x3, 0x50dd, 0x40, &(0x7f00000019c0)=0x7fffffff) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001a40), r6) r8 = syz_clone3(&(0x7f0000001cc0)={0x800, &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)=0x0, {0x12}, &(0x7f0000001b40)=""/58, 0x3a, &(0x7f0000001b80)=""/217, &(0x7f0000001c80)=[r5, r4, r5, r5], 0x4, {r6}}, 0x58) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001d40)={'bond0\x00', 0x0}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000001f00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x140, r7, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x102, 0x2e, 0x0, 0x1, [@generic="7b1a1c005d7845fb49dcbfa127237ee916d9102caa82c1cc271be67fe39274b45257e315f02d9906f2ac58bbf110fa26840e75f24c06398ae92a38e613ea555922d83d9f813e803078376238b3ef63ff15b689ab38e8e2b62dae0e599a88", @nested={0xc, 0xfa, 0x0, 0x1, [@typed={0x6, 0x95, 0x0, 0x0, @str='+\x00'}]}, @generic="7d06d022ea9407cefe61f6f21532f7a391617cc1cfd044", @typed={0x8, 0x105, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x4a, 0x0, 0x0, @pid=r9}, @typed={0x4, 0x135}, @generic="d2aca4dd63e830ed101e6bf3051d917fb7e8c08017592c9e81e988b29b5aa0bd972a139ab77746d65c96f9b576ce060876367ab3e65c7fdc6b311ca8b0b9b5c61af0193aad3a3c3818ce8f0d9514f49ca7b2feee060e3aa898023b748064c6a4f822daebfa361cdd47"]}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x5bd}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3942}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x140}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r11 = ioctl$auto_TUNGETIFF2(r6, 0x800454d2, &(0x7f0000001f40)) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r0, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x8}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000020c0), r0) sendmsg$auto_NL80211_CMD_SET_KEY(r6, &(0x7f0000002500)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002100)={0x3b8, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x38d, 0x7f, "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"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@nested={0x8, 0x53, 0x0, 0x1, [@nested={0x4, 0x15a}]}, @typed={0x8, 0x103, 0x0, 0x0, @pid=r4}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) r13 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000002580)='/sys/kernel/debug/netdevsim/netdevsim5/ports/1/pp_hold\x00', 0x20000, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000003c40)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003c00)={&(0x7f00000025c0)={0x1614, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1291, 0x3, 0x0, 0x1, [@nested={0x10, 0x4b, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x13e}]}, @typed={0x8, 0x124, 0x0, 0x0, @pid=r5}, @nested={0x59, 0x1, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x114}, @typed={0xd, 0xd6, 0x0, 0x0, @str='nl802154\x00'}, @generic="3d5213a58a98573ef57f5d9bfc7a281d360877726a916ca890b619529f379dcbb171b512cafca5dd701d9aa80736ea1af5fbf9c2a57d853a33"]}, @nested={0x89, 0x128, 0x0, 0x1, [@nested={0x4, 0x115}, @generic="8742d2a3c37c032ea824c791bd65646d9866a6f89880708fea204aa2605709971d3912522b03c562938e85d36d9dad66f8eb1cbfe5c75af796d242ad7a7039eb0a9a78dc5f50d746d1164fd8ea7aa6a7612f676638a0157d69b30a90c859ac2237c5064bb09e0d7965cff7ad37da8b8d48ac31f4854ad8cef902b93ec45b80d717"]}, @nested={0xd3, 0xf9, 0x0, 0x1, [@generic="707065ec4720b258a312adf243955023810849bfba23c4ea1c1c8ad1b52103921bd8fbf5e58c35592a47756415656ff2393f7dbc994aa0507dde34b06b2e940ac02aa242b1e16b2b58e79130f8d06d91226a745805d07aa4dc4da7714d868f86b906887abab5b34e40c53c1def885dfc67927b6c3a18477e988f800a73fc301500e53db036fd21c805e77f2b44398c31173a0a429462759b5859b6e6586a0a73aebde627bd63e5be99c8f837a1cb35b4aac2fe3dd981584c995b74b85edb94c7e8a41950c11fac69563ce2cb316996"]}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@remote}, @nested={0x34, 0x49, 0x0, 0x1, [@nested={0x4, 0xe3}, @typed={0xc, 0x7, 0x0, 0x0, @str='nl80211\x00'}, @typed={0xa, 0xfb, 0x0, 0x0, @str='bond0\x00'}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @generic="d98684a3a387948e279f", @generic="a894adcabe1521a0aefb8c448cff4782652f6335eb36af9aa56e1848620c130f8f4c4a4d6a7ceff3e7e67a6eccd92b6a36021e52c64dcd1d50665b", @nested={0x1036, 0x7f, 0x0, 0x1, [@typed={0xc, 0x57, 0x0, 0x0, @u64=0xffffffffffffffd9}, @nested={0x4, 0x85}, @generic="73673d844adcb6ee9efc13dfe8b2b2fd1ea28f44d0db", @typed={0x7, 0x2e, 0x0, 0x0, @str='-[\x00'}, @nested={0x4, 0xb5}, @generic="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"]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa7, 0x3, 0x0, 0x1, [@generic="ac7b73b0cb139a874dd909c399e2108fc57bd886ed255f79649e26ed127dce98b58487330253d267b6978b7f3eb3eaf90e71ebbca9e7836b93ca7a5482e7364317f77359bbf74a56f1cd03d4552c2a38bd1f7fb41b2a62f4b507cba24e337d20d27da688f21231e7c7573af0aa0e194951d7a3097684126c15607617b094aeae8ca62dab938f3cbbf59e078ef6862116b5015b7765af438ea10c75613bfa2f86612424"]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x224, 0x3, 0x0, 0x1, [@generic="037e7b1247b11bcfde7d4282e1f50599d945b4e1db008e45369b929b5ea7fb9df236468feb7ec20234afbfb9c88ad3c3da59fc3d3e44f467e10641b616e987157be76f7d597cd68fe3c2e70132cca763324562b94195cefab2217d017ab28283a31db51f8fc00cf1239920512737981932e5b83d0dcf25206a7ae52b94bc170e93478875ba642ea44e9c1f4070558b043da1b2dec1744f341dfd47e10bdb3913a60518548dcbcf11dc44525739688f4c301a352a79680bdf6a728c31d860c887e15886071a0c5cf576cfa84c39b704470a2021d9254ce3df4076f18922690ef68e42e8f4734eb1ef4f4335fc875451d71ed9d660", @typed={0x4, 0x57}, @nested={0x127, 0x56, 0x0, 0x1, [@generic="3d410598c09fa79e352cca0a3f81947f7fab0c670e73c2f07d61829263d3bcf4230908c9e07f8afb2664105a6e1615c1d12276259ace9f718f04a156ef85b0e08bf64eeb472963c5f7339ca596d9f84962909cc1779b7bff9b36d277805e69c0264d4d", @typed={0xc, 0x149, 0x0, 0x0, @u64=0x7ff}, @nested={0x4, 0xe}, @typed={0x7d, 0x15e, 0x0, 0x0, @binary="6e915b9b18cf97e17deb7717fdc1a9c354bba74dae2e53f15e5165b2216b0ace2fbf55b5aba97fd451677a89ad022811b90b621c5a490f1d939a4a0fe070dd1938f660eccb76b3ec537acfca16838ee9fd7c250540e433b6f848a4dd198800547b3b6f7b3a138ede2bed79d5581046e80f9439adb746b9f07d"}, @typed={0x8, 0x72, 0x0, 0x0, @fd=r13}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@private0}, @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@loopback}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x1614}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c800) r14 = open(&(0x7f0000003c80)='./file0\x00', 0x311100, 0x52) r15 = waitid$auto_P_PIDFD(0x3, r6, &(0x7f0000003d80)={@siginfo_0_0={0xf, 0x5, 0x0, @_rt={r8, r3, @sival_ptr=&(0x7f0000003cc0)="fc729ca978ee5e8fb1aa47d6e33c06ab6152b82fe897c5e5543d1903b9b72ee1e75cd5e30f4120060cee25ea93cfd030b4e0b0f6d69dfa03199d24406c780deb47c6706135fe9faeb53d0dd28454133fb031e80aab7a1013ad4f7814c9f84d2f1274a90f7f194bb18ee618dbd8cd78dd8b9cfe4ca804d6abd6d25d1a7537a27fba1ab6efd94087ddac75450545771f0e3ef071174b5012c7"}}}, 0x68a, &(0x7f0000003e00)={{0xfffffffffffffffe, 0x6}, {0x1, 0x400}, 0x9, 0x2, 0x2, 0x3, 0x69f, 0x4, 0x2, 0x7286, 0x3, 0xffffffffffffff14, 0x5de, 0x4, 0x7, 0xe7f}) madvise$auto(0x4, 0x2, 0x6) mprotect$auto(0x7, 0x9, 0x1) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003f00), r11) sendmsg$auto_OVS_METER_CMD_DEL(r16, &(0x7f0000004000)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f40)={0x5c, r17, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x6}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x5, 0x2}}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x8}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x9}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x6}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x3}]}, 0x5c}}, 0x90) mq_timedreceive$auto(r13, &(0x7f0000004040)='/,(:([\x00', 0x3, &(0x7f0000004080)=0x76, &(0x7f00000040c0)={0x4}) r18 = syz_clone3(&(0x7f0000004300)={0x2000800, &(0x7f0000004100)=0xffffffffffffffff, &(0x7f0000004140), &(0x7f0000004180), {0x9}, &(0x7f00000041c0)=""/116, 0x74, &(0x7f0000004240)=""/126, &(0x7f00000042c0)=[r15, 0x0, r15, r5, 0xffffffffffffffff], 0x5, {r14}}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r14, 0x40405515, &(0x7f0000004380)={@inferred=r8, 0x4, 0x7ff, 0x1, "61b930a8f9e1c99be8a0a2acf00399d2f40af02e17457f48f2f189bcc66bbc772b8a7dc7418b38f3fa45c99f", @inferred=r18}) r20 = ioctl$auto_SW_SYNC_GET_DEADLINE(r11, 0xc0105702, &(0x7f00000043c0)={0x4, 0x0, r19}) ioctl$auto_TUNSETFILTEREBPF(r20, 0x800454e1, &(0x7f0000004400)) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000004440), 0x400000, 0x0) 1.92475694s ago: executing program 2 (id=2488): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) madvise$auto(0x8, 0x2049a0, 0x9) mmap$auto(0x0, 0xe000000000000000, 0xe2, 0x2000000009b72, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x3, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = getpid() syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r0], 0x1}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'macvlan1\x00'}) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) mmap$auto(0x3, 0x20005, 0x4000000000e3, 0x100000011, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_DEBUG(r3, 0x6, 0x1, 0x0, 0xda3) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1d, 0x1, 0x2, {0x2, 0x0, 0x4}}, 0x36) sendto$auto(0x3, 0x0, 0x13, 0xffffffdb, 0x0, 0x22) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x80ffa, 0x16, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/stat\x00', 0x103282, 0x0) 1.863277651s ago: executing program 3 (id=2489): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 32) pread64$auto(r0, 0x0, 0x1, 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) (async) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) socket(0x2b, 0xf, 0x6) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) mknod$auto(0x0, 0xc9, 0xfffffffa) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async, rerun: 32) ioctl$auto_SNDCTL_DSP_MAPINBUF(r1, 0x80105013, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0x100082) (async) sendfile$auto(r4, r3, 0x0, 0x10000) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x4c8d0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 64) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) (async) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) 451.485953ms ago: executing program 2 (id=2491): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x0, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x40000000000401bf, 0x7352, 0x31, 0x8000, 0x9, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, 0x4]}, 0x1, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x24048000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 418.833927ms ago: executing program 0 (id=2492): r0 = socket(0x2, 0x80000, 0x400) close_range$auto(0x2, 0x8, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram10\x00', 0x14be02, 0x0) mmap$auto(0xfffffffffffffff8, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x4, 0x7, 0x7, 0x4, 0xee00, 0xffffffffffffffff, 0x0, 0x8, 0x3, 0x6, 0x1, 0x5d3c, 0x6, 0xfffffffffffff801, 0x1, 0x80, 0x10001}, 0xce55) shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000001440)={{0x1, 0x0, 0xee00, 0x5, 0x4, 0xf, 0xffff}, 0x0, 0x78, 0x2, 0x4, @inferred=r1, @inferred=r1, 0x9, 0x0, &(0x7f0000000380)="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", &(0x7f0000001380)="888a0d9db7b1ffb2a426f1609a438bc12f89256c6dd2cddeb4210b99b0c275ee29b63d0dc8759a5b648eb1871cd1560537fcb083f8fb8e65750e00c9018907af76b04619dc5a1a1c18167d87e70eb0fa94d41f083bd8ba15129f0235c8b006435e0039ec64c57fcfdc400754b7186bda844111f690ec315a99d01c8c052fb8fbd4df895f79fc4bc7d3499d1609f57ee5"}) setresuid$auto(0x0, 0x0, r4) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x2000, 0x7ffffffffffffffb, 0x3, 0x2000000000eb1, r0, 0x2000000000008001) r5 = socket(0x1d, 0x80000, 0xfffffffe) rt_sigsuspend$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) close_range$auto(r5, r3, 0x3) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x5c602, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x68) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r6, 0x0, 0x400000000006) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) 0s ago: executing program 3 (id=2493): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x20002}, 0x41e) socket(0x1a, 0x80000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x1) getsockopt$auto(r1, 0x0, 0x34, 0x0, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x9, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x8, 0x8001, 0xffffe7fffffffffb, 0x100000004, 0x2c2, 0x800002017d, 0x4, 0x102000000000000, 0xd, 0x80000000000d59, 0xfb, 0xff, 0xffffffffffffffff, 0x100000005]}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): qsave+0x52/0x60 [ 525.411632][T15191] __pm_runtime_resume+0xb6/0x170 [ 525.411647][T15191] usb_autoresume_device+0x23/0xe0 [ 525.411670][T15191] usbdev_open+0x228/0x870 [ 525.411691][T15191] ? kobject_get_unless_zero+0x156/0x200 [ 525.411714][T15191] ? __pfx_usbdev_open+0x10/0x10 [ 525.411732][T15191] ? chrdev_open+0x10b/0x6a0 [ 525.411749][T15191] ? chrdev_open+0x10b/0x6a0 [ 525.411770][T15191] ? __pfx_usbdev_open+0x10/0x10 [ 525.411789][T15191] chrdev_open+0x234/0x6a0 [ 525.411806][T15191] ? __pfx_apparmor_file_open+0x10/0x10 [ 525.411823][T15191] ? __pfx_chrdev_open+0x10/0x10 [ 525.411842][T15191] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 525.411877][T15191] do_dentry_open+0x6ab/0x14d0 [ 525.411895][T15191] ? __pfx_chrdev_open+0x10/0x10 [ 525.411919][T15191] vfs_open+0x82/0x3f0 [ 525.411942][T15191] path_openat+0x208c/0x31a0 [ 525.411968][T15191] ? __pfx_path_openat+0x10/0x10 [ 525.411994][T15191] do_file_open+0x20e/0x430 [ 525.412013][T15191] ? __pfx_do_file_open+0x10/0x10 [ 525.412046][T15191] ? alloc_fd+0x476/0x790 [ 525.412066][T15191] ? do_getname+0x191/0x390 [ 525.412088][T15191] do_sys_openat2+0x10d/0x1e0 [ 525.412110][T15191] ? __pfx_do_sys_openat2+0x10/0x10 [ 525.412139][T15191] __x64_sys_openat+0x12d/0x210 [ 525.412162][T15191] ? __pfx___x64_sys_openat+0x10/0x10 [ 525.412183][T15191] ? ksys_read+0x1ac/0x250 [ 525.412201][T15191] ? rcu_is_watching+0x12/0xc0 [ 525.412221][T15191] do_syscall_64+0x115/0x840 [ 525.412240][T15191] ? clear_bhb_loop+0x40/0x90 [ 525.412258][T15191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.412273][T15191] RIP: 0033:0x7f13feb9ce59 [ 525.412287][T15191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.412301][T15191] RSP: 002b:00007f13ffac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 525.412318][T15191] RAX: ffffffffffffffda RBX: 00007f13fee15fa0 RCX: 00007f13feb9ce59 [ 525.412328][T15191] RDX: 0000000000040a02 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 525.412338][T15191] RBP: 00007f13fec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 525.412347][T15191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.412356][T15191] R13: 00007f13fee16038 R14: 00007f13fee15fa0 R15: 00007fff1371c0b8 [ 525.412377][T15191] [ 525.418357][T15191] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 526.260989][T15203] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1774'. [ 527.409533][T15219] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 527.442792][ T9797] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 527.442816][ T9797] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 527.458018][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 527.464974][ T9797] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 527.464996][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 527.479726][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 527.486574][ T9797] Bluetooth: hci1: Malformed LE Event: 0x02 [ 528.331166][T15236] FAULT_INJECTION: forcing a failure. [ 528.331166][T15236] name failslab, interval 1, probability 0, space 0, times 0 [ 528.433750][T15236] CPU: 0 UID: 0 PID: 15236 Comm: syz.0.1781 Tainted: G U L syzkaller #0 PREEMPT(full) [ 528.433780][T15236] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 528.433786][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 528.433795][T15236] Call Trace: [ 528.433801][T15236] [ 528.433806][T15236] dump_stack_lvl+0x100/0x190 [ 528.433827][T15236] should_fail_ex.cold+0x5/0xa [ 528.433848][T15236] should_failslab+0xc2/0x120 [ 528.433866][T15236] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 528.433888][T15236] ? posix_lock_inode+0x5b2/0x2420 [ 528.433908][T15236] ? lockdep_init_map_type+0x5c/0x250 [ 528.433934][T15236] posix_lock_inode+0x5b2/0x2420 [ 528.433959][T15236] ? __pfx_posix_lock_inode+0x10/0x10 [ 528.433984][T15236] vfs_lock_file+0xfb/0x150 [ 528.434003][T15236] fcntl_setlk+0x768/0xe20 [ 528.434025][T15236] ? __pfx_fcntl_setlk+0x10/0x10 [ 528.434047][T15236] ? __might_fault+0xc5/0x140 [ 528.434068][T15236] ? __might_fault+0xc5/0x140 [ 528.434096][T15236] do_fcntl+0xf39/0x1670 [ 528.434118][T15236] ? __pfx_do_fcntl+0x10/0x10 [ 528.434138][T15236] ? __fget_files+0x215/0x3d0 [ 528.434161][T15236] ? tomoyo_file_fcntl+0x6c/0xc0 [ 528.434177][T15236] __x64_sys_fcntl+0x163/0x200 [ 528.434201][T15236] do_syscall_64+0x115/0x840 [ 528.434231][T15236] ? clear_bhb_loop+0x40/0x90 [ 528.434250][T15236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.434265][T15236] RIP: 0033:0x7f10e639ce59 [ 528.434279][T15236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.434293][T15236] RSP: 002b:00007f10e722e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 528.434307][T15236] RAX: ffffffffffffffda RBX: 00007f10e6616090 RCX: 00007f10e639ce59 [ 528.434317][T15236] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000005 [ 528.434325][T15236] RBP: 00007f10e6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 528.434334][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.434343][T15236] R13: 00007f10e6616128 R14: 00007f10e6616090 R15: 00007ffc8e705998 [ 528.434362][T15236] [ 529.059167][T15251] openvswitch: HfR: Dropping previously announced user features [ 529.071097][T15251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1787'. [ 529.583560][ T9797] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 529.866125][T15247] Process accounting resumed [ 529.979584][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 529.979609][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 529.994668][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 530.003070][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 530.003093][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 530.026557][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 530.033354][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 530.306858][T15278] openvswitch: HfR: Dropping previously announced user features [ 530.359096][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 530.407907][T15278] HfR: left promiscuous mode [ 531.608455][T10052] Bluetooth: hci2: command 0x0c1a tx timeout [ 532.523285][T15320] bond0: option slaves: interface -Ãô¾ does not exist! [ 532.794353][T15331] bond0: no command found in slaves file - use +ifname or -ifname [ 533.213814][T15337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1804: iget: checksum invalid [ 533.260028][T15337] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 533.305863][T10052] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 533.305889][T10052] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 533.320756][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 533.327445][T10052] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 533.327466][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 533.341299][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 533.348061][T10052] Bluetooth: hci2: Malformed LE Event: 0x02 [ 533.360796][T15337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1804: iget: checksum invalid [ 533.406462][T15337] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 533.446417][T15337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1804: iget: checksum invalid [ 533.490321][T15337] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 533.526463][T15337] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1804: iget: checksum invalid [ 533.572700][T15337] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 533.631127][T15337] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 533.676905][T10052] Bluetooth: hci2: command 0x0c1a tx timeout [ 533.712239][T15337] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 534.210212][T15371] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1809'. [ 534.308579][T15377] nvme_fcloop: unknown parameter or missing value '7=j' [ 534.368333][T15379] futex_wake_op: syz.2.1810 tries to shift op by -2048; fix this program [ 534.412759][T15379] futex_wake_op: syz.2.1810 tries to shift op by -2048; fix this program [ 534.457637][T15382] 0x000000000001-0x000000020000 : "" [ 534.529026][T15382] ftl_cs: FTL header corrupt! [ 535.018206][T15406] ubi0: attaching mtd0 [ 535.075364][T15406] ubi0: scanning is finished [ 535.127402][T15406] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 535.656860][T15406] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 535.700798][T15405] ubi0: attaching mtd0 [ 535.753534][T15405] ubi0: scanning is finished [ 535.790132][T15405] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 536.023327][T15405] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 536.756162][ T9797] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 536.756187][ T9797] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 536.773684][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 536.781233][ T9797] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 536.781256][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 536.796131][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 536.803655][ T9797] Bluetooth: hci3: Malformed LE Event: 0x02 [ 538.297381][T15473] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1825'. [ 538.619044][T15481] CIFS mount error: No usable UNC path provided in device string! [ 538.619044][T15481] [ 538.663550][T15481] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 540.047030][T15514] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 541.013381][T15511] ima: policy update failed [ 541.050144][ T29] audit: type=1802 audit(4294967411.969:21): pid=15511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1832" res=0 errno=0 [ 541.509062][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 541.686086][T15555] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 541.713325][ T9797] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 541.713349][ T9797] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 541.728584][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 541.735430][ T9797] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 541.737947][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 541.752849][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 541.759758][ T9797] Bluetooth: hci0: Malformed LE Event: 0x02 [ 542.274243][T15575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 542.348751][T15575] bridge0: port 3(gretap0) entered disabled state [ 542.355389][T15575] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.362616][T15575] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.457841][T15575] bridge0: entered promiscuous mode [ 542.497392][T15582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 543.636050][T15605] random: crng reseeded on system resumption [ 543.876961][T15604] hub 1-0:1.0: USB hub found [ 543.932901][T15604] hub 1-0:1.0: 1 port detected [ 544.965364][ T9797] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 544.965390][ T9797] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 544.980753][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 544.987616][ T9797] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 544.987637][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 545.004365][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 545.013051][ T9797] Bluetooth: hci3: Malformed LE Event: 0x02 [ 545.900230][T15633] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 546.003902][T15587] Process accounting resumed [ 546.193378][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1858'. [ 546.431368][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1858'. [ 546.562524][T15641] veth0_macvtap: left promiscuous mode [ 549.507250][T15696] FAULT_INJECTION: forcing a failure. [ 549.507250][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 549.641472][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.0.1866 Tainted: G U L syzkaller #0 PREEMPT(full) [ 549.641500][T15696] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 549.641505][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.641515][T15696] Call Trace: [ 549.641520][T15696] [ 549.641526][T15696] dump_stack_lvl+0x100/0x190 [ 549.641547][T15696] should_fail_ex.cold+0x5/0xa [ 549.641566][T15696] ? ops_init+0x77/0x5f0 [ 549.641583][T15696] should_failslab+0xc2/0x120 [ 549.641601][T15696] __kmalloc_noprof+0xe0/0x850 [ 549.641615][T15696] ? brnf_init_net+0x2bc/0x450 [ 549.641711][T15696] ops_init+0x77/0x5f0 [ 549.641734][T15696] setup_net+0x118/0x3a0 [ 549.641750][T15696] ? __pfx_setup_net+0x10/0x10 [ 549.641766][T15696] ? mutex_init_lockdep+0xf1/0x120 [ 549.641785][T15696] copy_net_ns+0x46f/0x7c0 [ 549.641804][T15696] create_new_namespaces+0x3ea/0xac0 [ 549.641827][T15696] unshare_nsproxy_namespaces+0xf2/0x220 [ 549.641847][T15696] ksys_unshare+0x438/0xab0 [ 549.641870][T15696] ? __pfx_ksys_unshare+0x10/0x10 [ 549.641889][T15696] ? xfd_validate_state+0x129/0x190 [ 549.641903][T15696] ? exit_to_user_mode_loop+0xf3/0x670 [ 549.641933][T15696] __x64_sys_unshare+0x31/0x40 [ 549.641953][T15696] do_syscall_64+0x115/0x840 [ 549.641974][T15696] ? clear_bhb_loop+0x40/0x90 [ 549.641992][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.642007][T15696] RIP: 0033:0x7f10e639ce59 [ 549.642021][T15696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.642035][T15696] RSP: 002b:00007f10e722e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 549.642049][T15696] RAX: ffffffffffffffda RBX: 00007f10e6616090 RCX: 00007f10e639ce59 [ 549.642062][T15696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 549.642071][T15696] RBP: 00007f10e6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 549.642079][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.642088][T15696] R13: 00007f10e6616128 R14: 00007f10e6616090 R15: 00007ffc8e705998 [ 549.642107][T15696] [ 551.760609][T15724] vivid-007: ================= START STATUS ================= [ 551.797118][T15724] vivid-007: Generate PTS: true [ 551.810156][T15724] vivid-007: Generate SCR: true [ 551.826660][T15724] tpg source WxH: 320x240 (Y'CbCr) [ 551.843740][T15724] tpg field: 1 [ 551.864311][T15724] tpg crop: (0,0)/320x240 [ 551.883001][T15724] tpg compose: (0,0)/320x240 [ 551.906262][T15724] tpg colorspace: 8 [ 551.924236][T15724] tpg transfer function: 0/0 [ 551.946882][T15724] tpg Y'CbCr encoding: 0/0 [ 551.966273][T15724] tpg quantization: 0/0 [ 551.999762][T15724] tpg RGB range: 0/2 [ 552.020176][T15724] vivid-007: ================== END STATUS ================== [ 552.261842][ T9797] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 552.261867][ T9797] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 552.277147][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 552.284115][ T9797] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 552.284137][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 552.298219][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 552.308190][ T9797] Bluetooth: hci3: Malformed LE Event: 0x02 [ 553.046933][T15762] HfR: entered promiscuous mode [ 553.256860][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 553.302634][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 553.362176][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 553.439536][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 553.492010][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 553.536959][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 553.612800][T15780] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1882'. [ 554.374933][T15804] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 554.394975][T15806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1888'. [ 554.922586][ T9797] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 554.922612][ T9797] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 554.937620][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 554.944604][ T9797] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 554.944626][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 554.958471][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 554.965164][ T9797] Bluetooth: hci0: Malformed LE Event: 0x02 [ 555.020705][T15818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1890: iget: checksum invalid [ 555.057165][T15818] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 555.098377][T15818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1890: iget: checksum invalid [ 555.142093][T15818] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 555.179670][T15818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1890: iget: checksum invalid [ 555.221363][T15818] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 555.262526][T15818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1890: iget: checksum invalid [ 555.292542][T15823] random: crng reseeded on system resumption [ 555.299980][T15818] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 555.322561][T15818] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 555.345537][T15818] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 558.156027][T15845] usbip-vudc usbip-vudc.0: gadget not bound [ 558.205335][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054d5a400: rx timeout, send abort [ 558.589818][T15846] Process accounting resumed [ 558.711026][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054d5a400: abort rx timeout. Force session deactivation [ 558.809661][ T9797] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 558.809688][ T9797] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 558.824738][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 558.832729][ T9797] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 558.832752][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 558.848682][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 558.856849][ T9797] Bluetooth: hci0: Malformed LE Event: 0x02 [ 559.068427][T15873] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1903'. [ 559.969986][T15896] random: crng reseeded on system resumption [ 560.254205][T15881] Process accounting paused [ 561.173711][ T9797] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 561.173737][ T9797] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 561.188569][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 561.195919][ T9797] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 561.195941][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 561.209748][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 561.216926][ T9797] Bluetooth: hci1: Malformed LE Event: 0x02 [ 561.347261][T15893] kexec: Could not allocate control_code_buffer [ 562.691273][T15961] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 563.534878][T15948] kexec: Could not allocate control_code_buffer [ 563.714840][ T9797] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 563.714866][ T9797] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 563.730497][ T9797] Bluetooth: hci2: Dropping invalid advertising data [ 563.737246][ T9797] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 563.737267][ T9797] Bluetooth: hci2: Dropping invalid advertising data [ 563.752190][ T9797] Bluetooth: hci2: Dropping invalid advertising data [ 563.760315][ T9797] Bluetooth: hci2: Malformed LE Event: 0x02 [ 563.796474][T15993] FAULT_INJECTION: forcing a failure. [ 563.796474][T15993] name failslab, interval 1, probability 0, space 0, times 0 [ 563.843230][T15993] CPU: 0 UID: 0 PID: 15993 Comm: syz.0.1927 Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.843259][T15993] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.843266][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.843277][T15993] Call Trace: [ 563.843282][T15993] [ 563.843288][T15993] dump_stack_lvl+0x100/0x190 [ 563.843310][T15993] should_fail_ex.cold+0x5/0xa [ 563.843331][T15993] should_failslab+0xc2/0x120 [ 563.843350][T15993] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 563.843373][T15993] ? __pmd_alloc+0xbf/0x950 [ 563.843396][T15993] __pmd_alloc+0xbf/0x950 [ 563.843417][T15993] __handle_mm_fault+0xa9c/0x2a00 [ 563.843441][T15993] ? mt_find+0x45e/0x8e0 [ 563.843467][T15993] ? __pfx___handle_mm_fault+0x10/0x10 [ 563.843487][T15993] ? __pfx_mt_find+0x10/0x10 [ 563.843519][T15993] ? find_vma+0xbf/0x140 [ 563.843535][T15993] ? __pfx_find_vma+0x10/0x10 [ 563.843554][T15993] handle_mm_fault+0x37b/0xa30 [ 563.843579][T15993] do_user_addr_fault+0x74c/0x12f0 [ 563.843599][T15993] ? trace_page_fault_kernel+0x7a/0x200 [ 563.843617][T15993] exc_page_fault+0x6f/0xd0 [ 563.843638][T15993] asm_exc_page_fault+0x26/0x30 [ 563.843653][T15993] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 563.843670][T15993] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 563.843684][T15993] RSP: 0018:ffffc900049e7e70 EFLAGS: 00050202 [ 563.843696][T15993] RAX: 73666769666e6f63 RBX: 0000000000000009 RCX: 0000000000000009 [ 563.843724][T15993] RDX: 0000000000000001 RSI: ffffffff8bca4a20 RDI: 0000000000000072 [ 563.843734][T15993] RBP: 0000000000000072 R08: 0000000000000000 R09: fffffbfff1794945 [ 563.843744][T15993] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8bca4a20 [ 563.843754][T15993] R13: 000000000000007b R14: 00007ffffffff000 R15: 0000000000000000 [ 563.843773][T15993] _copy_to_user+0xa4/0xd0 [ 563.843796][T15993] fs_name+0x144/0x220 [ 563.843817][T15993] __x64_sys_sysfs+0x14f/0x190 [ 563.843839][T15993] do_syscall_64+0x115/0x840 [ 563.843858][T15993] ? clear_bhb_loop+0x40/0x90 [ 563.843876][T15993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.843891][T15993] RIP: 0033:0x7f10e639ce59 [ 563.843904][T15993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.843917][T15993] RSP: 002b:00007f10e724f028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 563.843931][T15993] RAX: ffffffffffffffda RBX: 00007f10e6615fa0 RCX: 00007f10e639ce59 [ 563.843940][T15993] RDX: 0000000000000072 RSI: 0000000000000008 RDI: 0000000000000002 [ 563.843949][T15993] RBP: 00007f10e6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 563.843957][T15993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.843966][T15993] R13: 00007f10e6616038 R14: 00007f10e6615fa0 R15: 00007ffc8e705998 [ 563.843985][T15993] [ 565.718048][T16055] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 565.815425][T16054] Process accounting resumed [ 565.935696][ T9797] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 565.935720][ T9797] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 565.950994][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 565.959372][ T9797] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 565.959394][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 565.973340][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 565.980246][ T9797] Bluetooth: hci1: Malformed LE Event: 0x02 [ 566.155884][T16068] __vm_enough_memory: pid: 16068, comm: syz.2.1943, bytes: 9223372036854775808 not enough memory for the allocation [ 566.939253][ T29] audit: type=1800 audit(4294967443.996:22): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1949" name="dbroot" dev="configfs" ino=66476 res=0 errno=0 [ 566.966924][T16096] db_root: cannot open: /sy] [ 567.185362][T16098] kafs: addr_prefs: Invalid Command [ 567.250057][ T29] audit: type=1800 audit(4294967444.307:23): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1951" name="lu_gp_id" dev="configfs" ino=66515 res=0 errno=0 [ 567.507472][T16107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1952'. [ 568.748561][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1960'. [ 569.176681][T16154] veth1_macvtap (unregistering): left allmulticast mode [ 569.434834][T16171] [U] [ 569.437553][T16171] [U] [ 569.924327][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1965'. [ 569.970302][T16178] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 570.334587][T16169] [U] [ 570.392550][T16178] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 570.507720][T16178] pci 0000:00:01.3: PCI INT A: no GSI [ 571.254945][ T9797] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 572.179646][T16228] random: crng reseeded on system resumption [ 573.310911][T10052] Bluetooth: hci3: command 0x2016 tx timeout [ 573.409255][T10751] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:38: bg 1: bad block bitmap checksum [ 573.431442][T16250] random: crng reseeded on system resumption [ 573.563419][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'. [ 573.574623][T10751] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 890 with max blocks 6 with error 74 [ 573.700511][T10751] EXT4-fs (sda1): This should not happen!! Data will be lost [ 573.700511][T10751] [ 575.381236][ T9797] Bluetooth: hci3: command 0x2016 tx timeout [ 576.013720][T16266] Process accounting paused [ 576.773940][T16297] FAULT_INJECTION: forcing a failure. [ 576.773940][T16297] name fail_futex, interval 1, probability 0, space 0, times 0 [ 576.860597][T16297] CPU: 0 UID: 0 PID: 16297 Comm: syz.2.1988 Tainted: G U L syzkaller #0 PREEMPT(full) [ 576.860631][T16297] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 576.860637][T16297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.860647][T16297] Call Trace: [ 576.860653][T16297] [ 576.860658][T16297] dump_stack_lvl+0x100/0x190 [ 576.860680][T16297] should_fail_ex.cold+0x5/0xa [ 576.860701][T16297] get_futex_key+0x1d2/0x1510 [ 576.860728][T16297] ? __pfx_get_futex_key+0x10/0x10 [ 576.860751][T16297] ? tcx_prog_query+0x175/0x370 [ 576.860769][T16297] ? __sys_bpf+0x173/0x4b90 [ 576.860788][T16297] futex_wake+0xea/0x530 [ 576.860812][T16297] ? __pfx___sys_bpf+0x10/0x10 [ 576.860826][T16297] ? __pfx_futex_wait+0x10/0x10 [ 576.860845][T16297] ? __pfx_futex_wake+0x10/0x10 [ 576.860872][T16297] do_futex+0x32b/0x350 [ 576.860888][T16297] ? __pfx_do_futex+0x10/0x10 [ 576.860908][T16297] __x64_sys_futex+0x34f/0x4d0 [ 576.860927][T16297] ? __pfx___x64_sys_futex+0x10/0x10 [ 576.860942][T16297] ? exit_to_user_mode_loop+0xf3/0x670 [ 576.860967][T16297] ? rcu_is_watching+0x12/0xc0 [ 576.860987][T16297] do_syscall_64+0x115/0x840 [ 576.861007][T16297] ? clear_bhb_loop+0x40/0x90 [ 576.861025][T16297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.861040][T16297] RIP: 0033:0x7f13feb9ce59 [ 576.861053][T16297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.861068][T16297] RSP: 002b:00007f13ffac70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 576.861082][T16297] RAX: ffffffffffffffda RBX: 00007f13fee15fa8 RCX: 00007f13feb9ce59 [ 576.861092][T16297] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f13fee15fac [ 576.861101][T16297] RBP: 00007f13fee15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 576.861110][T16297] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 576.861119][T16297] R13: 00007f13fee16038 R14: 00007fff1371bfd0 R15: 00007fff1371c0b8 [ 576.861139][T16297] [ 577.072365][T16294] FAULT_INJECTION: forcing a failure. [ 577.072365][T16294] name failslab, interval 1, probability 0, space 0, times 0 [ 577.086306][T16294] CPU: 0 UID: 0 PID: 16294 Comm: syz.3.1987 Tainted: G U L syzkaller #0 PREEMPT(full) [ 577.086334][T16294] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 577.086340][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.086350][T16294] Call Trace: [ 577.086355][T16294] [ 577.086360][T16294] dump_stack_lvl+0x100/0x190 [ 577.086382][T16294] should_fail_ex.cold+0x5/0xa [ 577.086402][T16294] should_failslab+0xc2/0x120 [ 577.086421][T16294] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 577.086444][T16294] ? __proc_create+0x2cb/0x8c0 [ 577.086468][T16294] __proc_create+0x2cb/0x8c0 [ 577.086488][T16294] ? __pfx___proc_create+0x10/0x10 [ 577.086509][T16294] ? _raw_write_unlock+0x28/0x50 [ 577.086532][T16294] proc_create_reg+0x75/0x170 [ 577.086552][T16294] ? __pfx_sockstat6_seq_show+0x10/0x10 [ 577.086635][T16294] proc_create_net_single+0x86/0x180 [ 577.086656][T16294] ? __pfx_proc_create_net_single+0x10/0x10 [ 577.086676][T16294] ? __pfx_proc_create_net_data+0x10/0x10 [ 577.086695][T16294] ? ndisc_net_init+0x1b1/0x230 [ 577.086763][T16294] ? __pfx_ndisc_net_init+0x10/0x10 [ 577.086792][T16294] ? __pfx_ipv6_proc_init_net+0x10/0x10 [ 577.086813][T16294] ipv6_proc_init_net+0x58/0x1f0 [ 577.086833][T16294] ops_init+0x1e2/0x5f0 [ 577.086853][T16294] setup_net+0x118/0x3a0 [ 577.086870][T16294] ? __pfx_setup_net+0x10/0x10 [ 577.086886][T16294] ? mutex_init_lockdep+0xf1/0x120 [ 577.086905][T16294] copy_net_ns+0x46f/0x7c0 [ 577.086924][T16294] create_new_namespaces+0x3ea/0xac0 [ 577.086947][T16294] unshare_nsproxy_namespaces+0xf2/0x220 [ 577.086967][T16294] ksys_unshare+0x438/0xab0 [ 577.086988][T16294] ? __pfx_ksys_unshare+0x10/0x10 [ 577.087007][T16294] ? xfd_validate_state+0x129/0x190 [ 577.087021][T16294] ? exit_to_user_mode_loop+0xf3/0x670 [ 577.087050][T16294] __x64_sys_unshare+0x31/0x40 [ 577.087070][T16294] do_syscall_64+0x115/0x840 [ 577.087090][T16294] ? clear_bhb_loop+0x40/0x90 [ 577.087108][T16294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.087124][T16294] RIP: 0033:0x7f2f74d9ce59 [ 577.087138][T16294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.087152][T16294] RSP: 002b:00007f2f75bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 577.087167][T16294] RAX: ffffffffffffffda RBX: 00007f2f75015fa0 RCX: 00007f2f74d9ce59 [ 577.087178][T16294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 577.087187][T16294] RBP: 00007f2f74e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 577.087196][T16294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.087205][T16294] R13: 00007f2f75016038 R14: 00007f2f75015fa0 R15: 00007fffeba5e008 [ 577.087225][T16294] [ 577.712159][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 577.712183][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 577.730742][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 577.738844][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 577.738867][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 577.754498][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 577.761562][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 578.080360][T16304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1988'. [ 578.436649][T16312] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1992'. [ 579.862342][T10052] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 580.178597][T16350] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1998'. [ 581.300779][T16386] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2004'. [ 581.366837][T16388] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2004'. [ 581.775313][T16384] vivid-007: ================= START STATUS ================= [ 581.821501][T16384] vivid-007: Generate PTS: true [ 581.856601][T16384] vivid-007: Generate SCR: true [ 581.879419][T16384] tpg source WxH: 320x240 (Y'CbCr) [ 581.903121][T16384] tpg field: 1 [ 581.907063][T10052] Bluetooth: hci0: command 0x2016 tx timeout [ 581.933654][T16384] tpg crop: (0,0)/320x240 [ 581.955554][T16384] tpg compose: (0,0)/320x240 [ 581.974066][T16384] tpg colorspace: 8 [ 582.023595][T16384] tpg transfer function: 0/0 [ 582.050755][T16384] tpg Y'CbCr encoding: 0/0 [ 582.071835][T16384] tpg quantization: 0/0 [ 582.092903][T16384] tpg RGB range: 0/2 [ 582.116859][T16384] vivid-007: ================== END STATUS ================== [ 583.397842][T16410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'. [ 583.697209][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 583.697235][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 583.712771][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 583.719524][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 583.719547][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 583.733932][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 583.741624][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 583.768555][T16410] bond0: entered promiscuous mode [ 583.805882][T16410] bond_slave_0: entered promiscuous mode [ 583.866741][T16410] bond_slave_1: entered promiscuous mode [ 583.977182][T10052] Bluetooth: hci0: command 0x2016 tx timeout [ 585.336741][T16437] netlink: 'syz.2.2016': attribute type 3 has an invalid length. [ 585.393435][T16437] netlink: 94 bytes leftover after parsing attributes in process `syz.2.2016'. [ 585.461293][T16437] netlink: 'syz.2.2016': attribute type 1 has an invalid length. [ 585.513733][ T9797] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 585.571866][T16437] netlink: 'syz.2.2016': attribute type 2 has an invalid length. [ 585.666854][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'. [ 585.790168][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2019'. [ 588.024511][T16493] zswap: compressor û not available [ 588.090404][T16494] block2mtd: illegal erase size [ 589.301342][T10052] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 589.813300][T16491] Process accounting paused [ 590.872210][T16525] Process accounting resumed [ 593.657432][T16608] netlink: 'syz.3.2046': attribute type 1 has an invalid length. [ 593.772404][T16608] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2046'. [ 594.014584][T16615] FAULT_INJECTION: forcing a failure. [ 594.014584][T16615] name failslab, interval 1, probability 0, space 0, times 0 [ 594.077684][T16615] CPU: 0 UID: 0 PID: 16615 Comm: syz.2.2050 Tainted: G U L syzkaller #0 PREEMPT(full) [ 594.077710][T16615] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 594.077716][T16615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.077725][T16615] Call Trace: [ 594.077729][T16615] [ 594.077735][T16615] dump_stack_lvl+0x100/0x190 [ 594.077757][T16615] should_fail_ex.cold+0x5/0xa [ 594.077778][T16615] should_failslab+0xc2/0x120 [ 594.077796][T16615] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 594.077819][T16615] ? mas_preallocate+0x1105/0x14a0 [ 594.077838][T16615] mas_preallocate+0x1105/0x14a0 [ 594.077855][T16615] ? __pfx_mas_preallocate+0x10/0x10 [ 594.077873][T16615] ? vm_area_alloc+0x1f/0x160 [ 594.077895][T16615] ? lockdep_init_map_type+0x5c/0x250 [ 594.077921][T16615] __mmap_region+0x124a/0x2dd0 [ 594.077947][T16615] ? __pfx___mmap_region+0x10/0x10 [ 594.077983][T16615] ? __lock_acquire+0x4a5/0x2630 [ 594.078009][T16615] ? __lock_acquire+0x4a5/0x2630 [ 594.078040][T16615] ? find_held_lock+0x2b/0x80 [ 594.078065][T16615] ? __kernel_text_address+0xd/0x30 [ 594.078080][T16615] ? unwind_get_return_address+0x59/0xa0 [ 594.078099][T16615] ? arch_stack_walk+0xa6/0xf0 [ 594.078146][T16615] mmap_region+0x35d/0x620 [ 594.078162][T16615] ? __pfx_mmap_region+0x10/0x10 [ 594.078178][T16615] ? cap_mmap_addr+0x4b/0x120 [ 594.078193][T16615] ? bpf_lsm_mmap_addr+0x9/0x30 [ 594.078206][T16615] ? security_mmap_addr+0x71/0x1e0 [ 594.078225][T16615] ? __get_unmapped_area+0x255/0x3e0 [ 594.078246][T16615] do_mmap+0xc63/0x12f0 [ 594.078267][T16615] ? __pfx_do_mmap+0x10/0x10 [ 594.078285][T16615] ? __pfx_down_write_killable+0x10/0x10 [ 594.078312][T16615] vm_mmap_pgoff+0x29e/0x470 [ 594.078335][T16615] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 594.078352][T16615] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 594.078383][T16615] ksys_mmap_pgoff+0x285/0x610 [ 594.078403][T16615] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 594.078420][T16615] ? xfd_validate_state+0x129/0x190 [ 594.078438][T16615] __x64_sys_mmap+0x125/0x190 [ 594.078456][T16615] do_syscall_64+0x115/0x840 [ 594.078476][T16615] ? clear_bhb_loop+0x40/0x90 [ 594.078494][T16615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.078509][T16615] RIP: 0033:0x7f13feb9ce59 [ 594.078522][T16615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.078541][T16615] RSP: 002b:00007f13ffaa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 594.078556][T16615] RAX: ffffffffffffffda RBX: 00007f13fee16090 RCX: 00007f13feb9ce59 [ 594.078565][T16615] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 594.078574][T16615] RBP: 00007f13fec32d6f R08: 000000000000000d R09: 0000300000000000 [ 594.078583][T16615] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 594.078591][T16615] R13: 00007f13fee16128 R14: 00007f13fee16090 R15: 00007fff1371c0b8 [ 594.078610][T16615] [ 595.797126][T16633] Process accounting paused [ 596.662761][T16660] FAULT_INJECTION: forcing a failure. [ 596.662761][T16660] name failslab, interval 1, probability 0, space 0, times 0 [ 596.786606][T16660] CPU: 0 UID: 0 PID: 16660 Comm: syz.0.2061 Tainted: G U L syzkaller #0 PREEMPT(full) [ 596.786635][T16660] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 596.786641][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.786650][T16660] Call Trace: [ 596.786656][T16660] [ 596.786662][T16660] dump_stack_lvl+0x100/0x190 [ 596.786684][T16660] should_fail_ex.cold+0x5/0xa [ 596.786705][T16660] should_failslab+0xc2/0x120 [ 596.786722][T16660] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 596.786744][T16660] ? __kernfs_new_node+0xd2/0x9f0 [ 596.786765][T16660] __kernfs_new_node+0xd2/0x9f0 [ 596.786783][T16660] ? __pfx___kernfs_new_node+0x10/0x10 [ 596.786804][T16660] ? find_held_lock+0x2b/0x80 [ 596.786821][T16660] ? kernfs_root+0xee/0x2a0 [ 596.786836][T16660] ? kernfs_root+0xee/0x2a0 [ 596.786856][T16660] kernfs_new_node+0x11b/0x1a0 [ 596.786877][T16660] __kernfs_create_file+0x53/0x350 [ 596.786904][T16660] sysfs_add_file_mode_ns+0x207/0x3c0 [ 596.786925][T16660] sysfs_merge_group+0x194/0x340 [ 596.786942][T16660] ? __pfx_sysfs_merge_group+0x10/0x10 [ 596.786959][T16660] ? bus_add_device+0x368/0x6b0 [ 596.786981][T16660] ? __pfx_bus_add_device+0x10/0x10 [ 596.787000][T16660] ? __pfx_dev_add_physical_location+0x10/0x10 [ 596.787022][T16660] dpm_sysfs_add+0x237/0x280 [ 596.787039][T16660] device_add+0x9ef/0x1950 [ 596.787058][T16660] ? __pfx_device_add+0x10/0x10 [ 596.787073][T16660] ? lockdep_init_map_type+0x5c/0x250 [ 596.787096][T16660] ? __init_waitqueue_head+0xca/0x150 [ 596.787118][T16660] rfkill_register+0x1ad/0xb30 [ 596.787208][T16660] nfc_register_device+0x11f/0x3e0 [ 596.787285][T16660] nci_register_device+0x7f1/0xb80 [ 596.787350][T16660] ? __pfx_nci_register_device+0x10/0x10 [ 596.787369][T16660] ? lockdep_init_map_type+0x5c/0x250 [ 596.787397][T16660] virtual_ncidev_open+0x141/0x220 [ 596.787443][T16660] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 596.787459][T16660] misc_open+0x26d/0x450 [ 596.787515][T16660] ? __pfx_misc_open+0x10/0x10 [ 596.787530][T16660] chrdev_open+0x234/0x6a0 [ 596.787549][T16660] ? __pfx_apparmor_file_open+0x10/0x10 [ 596.787566][T16660] ? __pfx_chrdev_open+0x10/0x10 [ 596.787585][T16660] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 596.787609][T16660] do_dentry_open+0x6ab/0x14d0 [ 596.787628][T16660] ? __pfx_chrdev_open+0x10/0x10 [ 596.787650][T16660] vfs_open+0x82/0x3f0 [ 596.787674][T16660] path_openat+0x208c/0x31a0 [ 596.787699][T16660] ? __pfx_path_openat+0x10/0x10 [ 596.787724][T16660] do_file_open+0x20e/0x430 [ 596.787744][T16660] ? __pfx_do_file_open+0x10/0x10 [ 596.787776][T16660] ? alloc_fd+0x476/0x790 [ 596.787796][T16660] ? do_getname+0x191/0x390 [ 596.787819][T16660] do_sys_openat2+0x10d/0x1e0 [ 596.787841][T16660] ? __pfx_do_sys_openat2+0x10/0x10 [ 596.787864][T16660] ? __fget_files+0x21f/0x3d0 [ 596.787884][T16660] __x64_sys_openat+0x12d/0x210 [ 596.787907][T16660] ? __pfx___x64_sys_openat+0x10/0x10 [ 596.787932][T16660] ? rcu_is_watching+0x12/0xc0 [ 596.787952][T16660] do_syscall_64+0x115/0x840 [ 596.787971][T16660] ? clear_bhb_loop+0x40/0x90 [ 596.787989][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.788005][T16660] RIP: 0033:0x7f10e639ce59 [ 596.788018][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.788033][T16660] RSP: 002b:00007f10e720d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 596.788048][T16660] RAX: ffffffffffffffda RBX: 00007f10e6616180 RCX: 00007f10e639ce59 [ 596.788059][T16660] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 596.788069][T16660] RBP: 00007f10e6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 596.788078][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.788087][T16660] R13: 00007f10e6616218 R14: 00007f10e6616180 R15: 00007ffc8e705998 [ 596.788107][T16660] [ 597.739038][T16668] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2062'. [ 598.295760][ T9797] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 598.295785][ T9797] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 598.311022][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 598.317726][ T9797] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 598.317748][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 598.333302][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 598.340212][ T9797] Bluetooth: hci1: Malformed LE Event: 0x02 [ 598.691151][T16683] vivid-007: ================= START STATUS ================= [ 598.724343][T16683] vivid-007: Generate PTS: true [ 598.741019][T16683] vivid-007: Generate SCR: true [ 598.756508][T16683] tpg source WxH: 320x240 (Y'CbCr) [ 598.784248][T16683] tpg field: 1 [ 598.801355][T16683] tpg crop: (0,0)/320x240 [ 598.824371][T16683] tpg compose: (0,0)/320x240 [ 598.846521][T16683] tpg colorspace: 8 [ 598.859569][T16683] tpg transfer function: 0/0 [ 598.874137][T16683] tpg Y'CbCr encoding: 0/0 [ 598.891911][T16683] tpg quantization: 0/0 [ 598.906443][T16683] tpg RGB range: 0/2 [ 598.919295][T16683] vivid-007: ================== END STATUS ================== [ 599.585682][T16707] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2072'. [ 599.666986][T16707] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2072'. [ 600.025547][ T9797] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 602.040420][ T9797] Bluetooth: hci3: command 0x2016 tx timeout [ 602.124405][T16767] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 603.309953][T16786] IPVS: length: 537396514 != 24 [ 604.110275][ T9797] Bluetooth: hci3: command 0x2016 tx timeout [ 604.169793][T10052] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 604.177562][T10052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 604.187708][T10052] CPU: 0 UID: 0 PID: 10052 Comm: kworker/u11:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 604.187735][T10052] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 604.187741][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.187752][T10052] Workqueue: hci1 hci_rx_work [ 604.187861][T10052] Call Trace: [ 604.187867][T10052] [ 604.187874][T10052] dump_stack_lvl+0x100/0x190 [ 604.187894][T10052] sysfs_warn_dup.cold+0x1c/0x28 [ 604.187925][T10052] sysfs_create_dir_ns+0x24b/0x2b0 [ 604.187942][T10052] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 604.187957][T10052] ? find_held_lock+0x2b/0x80 [ 604.187975][T10052] ? kobject_add_internal+0x25f/0x930 [ 604.187990][T10052] ? kobject_add_internal+0x25f/0x930 [ 604.188006][T10052] ? do_raw_spin_unlock+0x145/0x1e0 [ 604.188024][T10052] kobject_add_internal+0x2c8/0x930 [ 604.188042][T10052] kobject_add+0x16a/0x1e0 [ 604.188056][T10052] ? __pfx_kobject_add+0x10/0x10 [ 604.188069][T10052] ? class_to_subsys+0x10f/0x150 [ 604.188119][T10052] ? kobject_put+0xb9/0x640 [ 604.188141][T10052] ? _raw_spin_unlock+0x28/0x50 [ 604.188165][T10052] device_add+0x294/0x1950 [ 604.188183][T10052] ? __pfx_dev_set_name+0x10/0x10 [ 604.188230][T10052] ? __pfx_device_add+0x10/0x10 [ 604.188248][T10052] ? mgmt_send_event_skb+0x2fb/0x460 [ 604.188322][T10052] hci_conn_add_sysfs+0x1a3/0x260 [ 604.188367][T10052] le_conn_complete_evt+0x11eb/0x1f60 [ 604.188414][T10052] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 604.188433][T10052] ? __pfx_bt_warn+0x10/0x10 [ 604.188465][T10052] hci_le_conn_complete_evt+0x23c/0x3a0 [ 604.188485][T10052] ? skb_pull_data+0x15f/0x1e0 [ 604.188507][T10052] hci_le_meta_evt+0x34a/0x5f0 [ 604.188548][T10052] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 604.188571][T10052] hci_event_packet+0x51c/0xcd0 [ 604.188590][T10052] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 604.188611][T10052] ? __pfx_hci_event_packet+0x10/0x10 [ 604.188631][T10052] ? kcov_remote_start+0x374/0x660 [ 604.188652][T10052] ? lockdep_hardirqs_on+0x78/0x100 [ 604.188684][T10052] hci_rx_work+0x451/0xfc0 [ 604.188706][T10052] process_one_work+0xa0e/0x1980 [ 604.188731][T10052] ? __pfx_process_one_work+0x10/0x10 [ 604.188753][T10052] ? __pfx_hci_rx_work+0x10/0x10 [ 604.188772][T10052] worker_thread+0x5ef/0xe50 [ 604.188794][T10052] ? kthread+0x13a/0x450 [ 604.188813][T10052] ? __pfx_worker_thread+0x10/0x10 [ 604.188826][T10052] kthread+0x370/0x450 [ 604.188846][T10052] ? __pfx_kthread+0x10/0x10 [ 604.188869][T10052] ret_from_fork+0x72b/0xd50 [ 604.188885][T10052] ? __pfx_ret_from_fork+0x10/0x10 [ 604.188902][T10052] ? __switch_to+0x800/0x1100 [ 604.188926][T10052] ? __switch_to_asm+0x39/0x70 [ 604.188945][T10052] ? __pfx_kthread+0x10/0x10 [ 604.188967][T10052] ret_from_fork_asm+0x1a/0x30 [ 604.188995][T10052] [ 604.189040][T10052] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 604.492042][T10052] Bluetooth: hci1: failed to register connection device [ 604.949102][T16820] can: request_module (can-proto-4) failed. [ 605.290523][T16836] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2101'. [ 605.930841][T16855] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 606.038470][T16855] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2103'. [ 606.269833][T16853] Process accounting resumed [ 606.497317][ T9797] Bluetooth: hci1: command 0x2016 tx timeout [ 606.654062][T16829] Process accounting resumed [ 608.566452][T10052] Bluetooth: hci1: command 0x2016 tx timeout [ 608.805769][T16907] FAULT_INJECTION: forcing a failure. [ 608.805769][T16907] name failslab, interval 1, probability 0, space 0, times 0 [ 608.898239][T16907] CPU: 0 UID: 0 PID: 16907 Comm: syz.0.2115 Tainted: G U L syzkaller #0 PREEMPT(full) [ 608.898265][T16907] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 608.898271][T16907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.898280][T16907] Call Trace: [ 608.898290][T16907] [ 608.898296][T16907] dump_stack_lvl+0x100/0x190 [ 608.898317][T16907] should_fail_ex.cold+0x5/0xa [ 608.898336][T16907] should_failslab+0xc2/0x120 [ 608.898355][T16907] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 608.898378][T16907] ? ptlock_alloc+0x1f/0x70 [ 608.898399][T16907] ? __lock_acquire+0x4a5/0x2630 [ 608.898424][T16907] ptlock_alloc+0x1f/0x70 [ 608.898445][T16907] pte_alloc_one+0x82/0x3d0 [ 608.898465][T16907] __pte_alloc+0x6d/0x380 [ 608.898481][T16907] ? __pfx___pte_alloc+0x10/0x10 [ 608.898498][T16907] ? do_raw_spin_lock+0x128/0x260 [ 608.898513][T16907] ? find_held_lock+0x2b/0x80 [ 608.898532][T16907] do_anonymous_page+0x13c6/0x2050 [ 608.898556][T16907] ? __pmd_alloc+0x3fb/0x950 [ 608.898576][T16907] __handle_mm_fault+0x1d2c/0x2a00 [ 608.898601][T16907] ? mt_find+0x45e/0x8e0 [ 608.898623][T16907] ? __pfx___handle_mm_fault+0x10/0x10 [ 608.898644][T16907] ? __pfx_mt_find+0x10/0x10 [ 608.898680][T16907] handle_mm_fault+0x37b/0xa30 [ 608.898705][T16907] __get_user_pages+0x1178/0x32a0 [ 608.898730][T16907] ? __pfx___get_user_pages+0x10/0x10 [ 608.898753][T16907] populate_vma_page_range+0x267/0x3f0 [ 608.898773][T16907] ? __pfx_populate_vma_page_range+0x10/0x10 [ 608.898792][T16907] ? __pfx_find_vma_intersection+0x10/0x10 [ 608.898810][T16907] ? do_mmap+0x93f/0x12f0 [ 608.898830][T16907] __mm_populate+0x107/0x3a0 [ 608.898850][T16907] ? __pfx___mm_populate+0x10/0x10 [ 608.898870][T16907] ? up_write+0x28c/0x4f0 [ 608.898887][T16907] vm_mmap_pgoff+0x37f/0x470 [ 608.898908][T16907] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 608.898931][T16907] ? __pfx___might_resched+0x10/0x10 [ 608.898950][T16907] ksys_mmap_pgoff+0xe4/0x610 [ 608.898969][T16907] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 608.898986][T16907] ? xfd_validate_state+0x129/0x190 [ 608.899000][T16907] ? exit_to_user_mode_loop+0xf3/0x670 [ 608.899027][T16907] __x64_sys_mmap+0x125/0x190 [ 608.899045][T16907] do_syscall_64+0x115/0x840 [ 608.899065][T16907] ? clear_bhb_loop+0x40/0x90 [ 608.899083][T16907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.899098][T16907] RIP: 0033:0x7f10e639ce59 [ 608.899110][T16907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.899124][T16907] RSP: 002b:00007f10e724f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 608.899139][T16907] RAX: ffffffffffffffda RBX: 00007f10e6615fa0 RCX: 00007f10e639ce59 [ 608.899149][T16907] RDX: 00000000000000df RSI: 000000000000002a RDI: 0000000000000000 [ 608.899158][T16907] RBP: 00007f10e6432d6f R08: ffffffffffffffff R09: 0000000000028000 [ 608.899167][T16907] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 608.899175][T16907] R13: 00007f10e6616038 R14: 00007f10e6615fa0 R15: 00007ffc8e705998 [ 608.899195][T16907] [ 609.613400][T16908] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 610.402560][T16935] FAULT_INJECTION: forcing a failure. [ 610.402560][T16935] name failslab, interval 1, probability 0, space 0, times 0 [ 610.587206][T16935] CPU: 0 UID: 0 PID: 16935 Comm: syz.2.2119 Tainted: G U L syzkaller #0 PREEMPT(full) [ 610.587234][T16935] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 610.587241][T16935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.587251][T16935] Call Trace: [ 610.587256][T16935] [ 610.587262][T16935] dump_stack_lvl+0x100/0x190 [ 610.587288][T16935] should_fail_ex.cold+0x5/0xa [ 610.587310][T16935] should_failslab+0xc2/0x120 [ 610.587329][T16935] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 610.587353][T16935] ? anon_vma_clone+0x2ba/0xcd0 [ 610.587375][T16935] anon_vma_clone+0x2ba/0xcd0 [ 610.587401][T16935] __split_vma+0x51f/0xda0 [ 610.587424][T16935] ? is_bpf_text_address+0x8a/0x1a0 [ 610.587444][T16935] ? __pfx___split_vma+0x10/0x10 [ 610.587465][T16935] ? bpf_ksym_find+0x124/0x1c0 [ 610.587489][T16935] vma_modify+0x12ad/0x25c0 [ 610.587514][T16935] ? trace_ignore_this_task+0x10/0x100 [ 610.587535][T16935] ? __pfx_vma_modify+0x10/0x10 [ 610.587556][T16935] ? trace_pid_list_is_set+0x11a/0x390 [ 610.587574][T16935] ? trace_pid_list_is_set+0x22c/0x390 [ 610.587602][T16935] vma_modify_flags+0x257/0x3d0 [ 610.587627][T16935] ? __pfx_vma_modify_flags+0x10/0x10 [ 610.587648][T16935] ? try_to_wake_up+0x5ec/0x1900 [ 610.587675][T16935] ? __pfx_try_to_wake_up+0x10/0x10 [ 610.587698][T16935] madvise_update_vma+0x21c/0xce0 [ 610.587720][T16935] ? __pfx_madvise_update_vma+0x10/0x10 [ 610.587743][T16935] ? __khugepaged_enter+0x2ed/0x380 [ 610.587764][T16935] ? khugepaged_enter_vma+0x8b/0x2c0 [ 610.587786][T16935] madvise_vma_behavior+0x2a3/0x2240 [ 610.587808][T16935] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 610.587833][T16935] ? find_vma_prev+0xd8/0x150 [ 610.587851][T16935] ? __pfx_find_vma_prev+0x10/0x10 [ 610.587872][T16935] ? preempt_schedule_thunk+0x16/0x30 [ 610.587895][T16935] ? preempt_schedule_common+0x42/0xc0 [ 610.587918][T16935] madvise_walk_vmas+0x2fe/0xa90 [ 610.587941][T16935] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 610.587965][T16935] madvise_do_behavior+0x1ea/0x510 [ 610.587986][T16935] ? __pfx_madvise_do_behavior+0x10/0x10 [ 610.588012][T16935] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.588036][T16935] do_madvise+0x195/0x240 [ 610.588055][T16935] ? __pfx_do_madvise+0x10/0x10 [ 610.588074][T16935] ? do_futex+0x192/0x350 [ 610.588092][T16935] ? __sys_sendmsg+0x18f/0x220 [ 610.588120][T16935] __x64_sys_madvise+0xa9/0x110 [ 610.588140][T16935] ? lockdep_hardirqs_on+0x78/0x100 [ 610.588160][T16935] do_syscall_64+0x115/0x840 [ 610.588180][T16935] ? clear_bhb_loop+0x40/0x90 [ 610.588198][T16935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.588213][T16935] RIP: 0033:0x7f13feb9ce59 [ 610.588227][T16935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.588241][T16935] RSP: 002b:00007f13ffaa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 610.588256][T16935] RAX: ffffffffffffffda RBX: 00007f13fee16090 RCX: 00007f13feb9ce59 [ 610.588272][T16935] RDX: 000000000000000e RSI: 0000000000004081 RDI: 0000000000000000 [ 610.588281][T16935] RBP: 00007f13fec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 610.588291][T16935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.588299][T16935] R13: 00007f13fee16128 R14: 00007f13fee16090 R15: 00007fff1371c0b8 [ 610.588319][T16935] [ 611.948684][T16949] can: request_module (can-proto-5) failed. [ 612.272351][T10052] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 613.751674][T16994] MTRR 1 not used [ 613.804096][T16994] openvswitch: netlink: IP tunnel TTL not specified. [ 614.405919][T17026] FAULT_INJECTION: forcing a failure. [ 614.405919][T17026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.561898][T17026] CPU: 0 UID: 0 PID: 17026 Comm: syz.2.2138 Tainted: G U L syzkaller #0 PREEMPT(full) [ 614.561930][T17026] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 614.561936][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.561946][T17026] Call Trace: [ 614.561951][T17026] [ 614.561957][T17026] dump_stack_lvl+0x100/0x190 [ 614.561978][T17026] should_fail_ex.cold+0x5/0xa [ 614.561999][T17026] _copy_from_user+0x2e/0xd0 [ 614.562022][T17026] copy_msghdr_from_user+0x9f/0x4f0 [ 614.562044][T17026] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 614.562069][T17026] ? __pfx_futex_wake_mark+0x10/0x10 [ 614.562091][T17026] ___sys_sendmsg+0x106/0x1e0 [ 614.562112][T17026] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.562153][T17026] __sys_sendmsg+0x170/0x220 [ 614.562169][T17026] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.562184][T17026] ? __x64_sys_futex+0x34f/0x4d0 [ 614.562206][T17026] ? rcu_is_watching+0x12/0xc0 [ 614.562225][T17026] do_syscall_64+0x115/0x840 [ 614.562245][T17026] ? clear_bhb_loop+0x40/0x90 [ 614.562263][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.562278][T17026] RIP: 0033:0x7f13feb9ce59 [ 614.562291][T17026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.562307][T17026] RSP: 002b:00007f13ffaa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.562322][T17026] RAX: ffffffffffffffda RBX: 00007f13fee16090 RCX: 00007f13feb9ce59 [ 614.562332][T17026] RDX: 0000000020040080 RSI: 0000200000004240 RDI: 000000000000000c [ 614.562341][T17026] RBP: 00007f13fec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 614.562350][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.562358][T17026] R13: 00007f13fee16128 R14: 00007f13fee16090 R15: 00007fff1371c0b8 [ 614.562377][T17026] [ 615.512221][T17061] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2143'. [ 615.681934][T17061] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2143'. [ 615.738014][T17061] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2143'. [ 615.841810][T17068] netlink: 170 bytes leftover after parsing attributes in process `syz.2.2143'. [ 616.068603][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2144'. [ 616.243340][ T29] audit: type=1800 audit(2147483661.786:24): pid=17063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2144" name="features" dev="configfs" ino=71910 res=0 errno=0 [ 617.648764][T17123] FAULT_INJECTION: forcing a failure. [ 617.648764][T17123] name failslab, interval 1, probability 0, space 0, times 0 [ 617.709273][T17123] CPU: 0 UID: 0 PID: 17123 Comm: syz.3.2153 Tainted: G U L syzkaller #0 PREEMPT(full) [ 617.709302][T17123] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 617.709308][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.709317][T17123] Call Trace: [ 617.709323][T17123] [ 617.709329][T17123] dump_stack_lvl+0x100/0x190 [ 617.709350][T17123] should_fail_ex.cold+0x5/0xa [ 617.709371][T17123] ? tomoyo_encode2+0xfb/0x3c0 [ 617.709391][T17123] should_failslab+0xc2/0x120 [ 617.709409][T17123] __kmalloc_noprof+0xe0/0x850 [ 617.709423][T17123] ? rcu_is_watching+0x12/0xc0 [ 617.709443][T17123] tomoyo_encode2+0xfb/0x3c0 [ 617.709466][T17123] tomoyo_encode+0x29/0x50 [ 617.709485][T17123] tomoyo_realpath_from_path+0x18c/0x690 [ 617.709509][T17123] ? putname+0xb6/0x110 [ 617.709529][T17123] tomoyo_realpath_nofollow+0xe0/0x100 [ 617.709550][T17123] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 617.709572][T17123] ? tomoyo_profile+0x47/0x60 [ 617.709594][T17123] ? tomoyo_init_request_info+0x101/0x370 [ 617.709673][T17123] tomoyo_find_next_domain+0x2a8/0x2010 [ 617.709699][T17123] ? __pfx___kernel_read+0x10/0x10 [ 617.709715][T17123] ? __pfx___might_resched+0x10/0x10 [ 617.709736][T17123] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 617.709763][T17123] tomoyo_bprm_check_security+0x12d/0x1d0 [ 617.709778][T17123] ? tomoyo_bprm_check_security+0x11f/0x1d0 [ 617.709794][T17123] security_bprm_check+0x87/0x1e0 [ 617.709809][T17123] bprm_execve+0x845/0x1740 [ 617.709829][T17123] ? __pfx_bprm_execve+0x10/0x10 [ 617.709844][T17123] ? copy_string_kernel+0x339/0x3f0 [ 617.709863][T17123] do_execveat_common.isra.0+0x4a5/0x580 [ 617.709883][T17123] __x64_sys_execveat+0xdf/0x130 [ 617.709902][T17123] do_syscall_64+0x115/0x840 [ 617.709922][T17123] ? clear_bhb_loop+0x40/0x90 [ 617.709941][T17123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.709957][T17123] RIP: 0033:0x7f2f74d9ce59 [ 617.709971][T17123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.709985][T17123] RSP: 002b:00007f2f75bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 617.710001][T17123] RAX: ffffffffffffffda RBX: 00007f2f75015fa0 RCX: 00007f2f74d9ce59 [ 617.710011][T17123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 617.710021][T17123] RBP: 00007f2f74e32d6f R08: 0000000000001000 R09: 0000000000000000 [ 617.710030][T17123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.710040][T17123] R13: 00007f2f75016038 R14: 00007f2f75015fa0 R15: 00007fffeba5e008 [ 617.710060][T17123] [ 617.714702][T17123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 618.104731][T17112] Process accounting resumed [ 618.176833][T17125] HfR: entered promiscuous mode [ 618.261022][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 618.281808][T17126] HfR: left promiscuous mode [ 619.064139][T17152] random: crng reseeded on system resumption [ 619.503436][T10052] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 619.503472][T10052] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 619.518560][T10052] Bluetooth: hci1: Dropping invalid advertising data [ 619.527283][T10052] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 619.527312][T10052] Bluetooth: hci1: Dropping invalid advertising data [ 619.541270][T10052] Bluetooth: hci1: Dropping invalid advertising data [ 619.548250][T10052] Bluetooth: hci1: Malformed LE Event: 0x02 [ 620.673738][T10052] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 620.673763][T10052] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 620.689133][T10052] Bluetooth: hci0: Dropping invalid advertising data [ 620.697004][T10052] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 620.697029][T10052] Bluetooth: hci0: Dropping invalid advertising data [ 620.710784][T10052] Bluetooth: hci0: Dropping invalid advertising data [ 620.717490][T10052] Bluetooth: hci0: Malformed LE Event: 0x02 [ 621.235916][T17186] Process accounting paused [ 622.319102][T10052] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 622.319129][T10052] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 622.334496][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 622.342333][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 622.349062][T10052] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 622.349078][T10052] Bluetooth: hci2: Malformed LE Event: 0x02 [ 622.641654][ T29] audit: type=1800 audit(2147483668.209:25): pid=17235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2179" name="dbroot" dev="configfs" ino=72514 res=0 errno=0 [ 622.701272][T17237] futex_wake_op: syz.3.2180 tries to shift op by -2048; fix this program [ 622.776935][T17237] futex_wake_op: syz.3.2180 tries to shift op by -2048; fix this program [ 622.966665][T10052] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 622.966692][T10052] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 622.984891][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 622.991805][T10052] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 622.991826][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 623.005883][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 623.012960][T10052] Bluetooth: hci2: Malformed LE Event: 0x02 [ 623.436853][T10744] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:31: bg 2: bad block bitmap checksum [ 623.476796][T17258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2185'. [ 623.495630][T10744] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 3517 with max blocks 67 with error 74 [ 623.551397][T10744] EXT4-fs (sda1): This should not happen!! Data will be lost [ 623.551397][T10744] [ 624.974778][T17297] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2194'. [ 626.533985][T17348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2206'. [ 627.450324][T17376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2210'. [ 627.680862][T17376] veth1_macvtap: left promiscuous mode [ 628.346422][T17392] random: crng reseeded on system resumption [ 628.905002][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 628.905027][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 628.923580][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 628.930356][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 628.930379][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 628.946311][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 628.953726][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 629.526062][T10052] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 631.715106][T17467] Â: entered promiscuous mode [ 632.117083][T17478] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2228'. [ 632.207248][ T29] audit: type=1800 audit(2147483677.829:26): pid=17478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2228" name="discovery_nqn" dev="configfs" ino=74038 res=0 errno=0 [ 634.580708][T17522] random: crng reseeded on system resumption [ 635.327564][T10052] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 635.335329][T10052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 635.344764][T10052] CPU: 0 UID: 0 PID: 10052 Comm: kworker/u11:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 635.344790][T10052] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 635.344796][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.344807][T10052] Workqueue: hci2 hci_rx_work [ 635.344834][T10052] Call Trace: [ 635.344838][T10052] [ 635.344845][T10052] dump_stack_lvl+0x100/0x190 [ 635.344866][T10052] sysfs_warn_dup.cold+0x1c/0x28 [ 635.344890][T10052] sysfs_create_dir_ns+0x24b/0x2b0 [ 635.344908][T10052] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 635.344924][T10052] ? find_held_lock+0x2b/0x80 [ 635.344943][T10052] ? kobject_add_internal+0x25f/0x930 [ 635.344959][T10052] ? kobject_add_internal+0x25f/0x930 [ 635.344975][T10052] ? do_raw_spin_unlock+0x145/0x1e0 [ 635.344992][T10052] kobject_add_internal+0x2c8/0x930 [ 635.345010][T10052] kobject_add+0x16a/0x1e0 [ 635.345025][T10052] ? __pfx_kobject_add+0x10/0x10 [ 635.345038][T10052] ? class_to_subsys+0x10f/0x150 [ 635.345060][T10052] ? kobject_put+0xb9/0x640 [ 635.345081][T10052] ? _raw_spin_unlock+0x28/0x50 [ 635.345104][T10052] device_add+0x294/0x1950 [ 635.345120][T10052] ? __pfx_dev_set_name+0x10/0x10 [ 635.345139][T10052] ? __pfx_device_add+0x10/0x10 [ 635.345155][T10052] ? mgmt_send_event_skb+0x2fb/0x460 [ 635.345180][T10052] hci_conn_add_sysfs+0x1a3/0x260 [ 635.345202][T10052] le_conn_complete_evt+0x11eb/0x1f60 [ 635.345226][T10052] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 635.345243][T10052] ? __pfx_bt_warn+0x10/0x10 [ 635.345269][T10052] hci_le_conn_complete_evt+0x23c/0x3a0 [ 635.345289][T10052] ? skb_pull_data+0x15f/0x1e0 [ 635.345311][T10052] hci_le_meta_evt+0x34a/0x5f0 [ 635.345331][T10052] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 635.345352][T10052] hci_event_packet+0x51c/0xcd0 [ 635.345371][T10052] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 635.345392][T10052] ? __pfx_hci_event_packet+0x10/0x10 [ 635.345413][T10052] ? kcov_remote_start+0x374/0x660 [ 635.345433][T10052] ? lockdep_hardirqs_on+0x78/0x100 [ 635.345469][T10052] hci_rx_work+0x451/0xfc0 [ 635.345492][T10052] process_one_work+0xa0e/0x1980 [ 635.345516][T10052] ? __pfx_process_one_work+0x10/0x10 [ 635.345537][T10052] ? __pfx_hci_rx_work+0x10/0x10 [ 635.345557][T10052] worker_thread+0x5ef/0xe50 [ 635.345578][T10052] ? kthread+0x13a/0x450 [ 635.345598][T10052] ? __pfx_worker_thread+0x10/0x10 [ 635.345611][T10052] kthread+0x370/0x450 [ 635.345630][T10052] ? __pfx_kthread+0x10/0x10 [ 635.345653][T10052] ret_from_fork+0x72b/0xd50 [ 635.345669][T10052] ? __pfx_ret_from_fork+0x10/0x10 [ 635.345686][T10052] ? __switch_to+0x800/0x1100 [ 635.345704][T10052] ? __switch_to_asm+0x39/0x70 [ 635.345722][T10052] ? __pfx_kthread+0x10/0x10 [ 635.345745][T10052] ret_from_fork_asm+0x1a/0x30 [ 635.345772][T10052] [ 635.345791][T10052] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 635.647075][T10052] Bluetooth: hci2: failed to register connection device [ 636.769969][T17535] Process accounting paused [ 637.061153][T17547] Process accounting paused [ 637.674341][T17573] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2248'. [ 637.695270][T10052] Bluetooth: hci2: command 0x0c1a tx timeout [ 638.959758][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 639.001994][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 639.764342][ T9797] Bluetooth: hci2: command 0x0c1a tx timeout [ 641.151501][T17622] random: crng reseeded on system resumption [ 641.725842][T17622] hub 1-0:1.0: USB hub found [ 641.809967][T17622] hub 1-0:1.0: 1 port detected [ 641.910674][ T9797] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 641.910700][ T9797] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 641.925616][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 641.932299][ T9797] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 641.932320][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 641.946582][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 641.953866][ T9797] Bluetooth: hci0: Malformed LE Event: 0x02 [ 642.228836][T17649] FAULT_INJECTION: forcing a failure. [ 642.228836][T17649] name failslab, interval 1, probability 0, space 0, times 0 [ 642.331565][T17649] CPU: 0 UID: 0 PID: 17649 Comm: syz.2.2263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 642.331593][T17649] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 642.331598][T17649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.331607][T17649] Call Trace: [ 642.331612][T17649] [ 642.331617][T17649] dump_stack_lvl+0x100/0x190 [ 642.331639][T17649] should_fail_ex.cold+0x5/0xa [ 642.331659][T17649] should_failslab+0xc2/0x120 [ 642.331678][T17649] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 642.331702][T17649] ? sk_prot_alloc+0x60/0x2a0 [ 642.331724][T17649] sk_prot_alloc+0x60/0x2a0 [ 642.331744][T17649] sk_alloc+0x36/0xe80 [ 642.331758][T17649] inet_create+0x3a0/0x1060 [ 642.331783][T17649] ? inet_create+0x94/0x1060 [ 642.331809][T17649] __sock_create+0x339/0x860 [ 642.331833][T17649] smc_create+0x163/0x290 [ 642.331854][T17649] __sock_create+0x339/0x860 [ 642.331881][T17649] __sys_socket+0x14d/0x260 [ 642.331902][T17649] ? __pfx___sys_socket+0x10/0x10 [ 642.331927][T17649] __x64_sys_socket+0x72/0xb0 [ 642.331946][T17649] ? lockdep_hardirqs_on+0x78/0x100 [ 642.331966][T17649] do_syscall_64+0x115/0x840 [ 642.331986][T17649] ? clear_bhb_loop+0x40/0x90 [ 642.332004][T17649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.332019][T17649] RIP: 0033:0x7f13feb9ce59 [ 642.332032][T17649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.332047][T17649] RSP: 002b:00007f13ffaa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 642.332062][T17649] RAX: ffffffffffffffda RBX: 00007f13fee16090 RCX: 00007f13feb9ce59 [ 642.332072][T17649] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 642.332080][T17649] RBP: 00007f13fec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 642.332089][T17649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.332097][T17649] R13: 00007f13fee16128 R14: 00007f13fee16090 R15: 00007fff1371c0b8 [ 642.332116][T17649] [ 643.064633][T17664] futex_wake_op: syz.0.2266 tries to shift op by -1; fix this program [ 645.727959][T17737] FAULT_INJECTION: forcing a failure. [ 645.727959][T17737] name failslab, interval 1, probability 0, space 0, times 0 [ 645.919128][T17737] CPU: 0 UID: 0 PID: 17737 Comm: syz.2.2279 Tainted: G U L syzkaller #0 PREEMPT(full) [ 645.919157][T17737] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 645.919163][T17737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.919172][T17737] Call Trace: [ 645.919177][T17737] [ 645.919184][T17737] dump_stack_lvl+0x100/0x190 [ 645.919205][T17737] should_fail_ex.cold+0x5/0xa [ 645.919225][T17737] should_failslab+0xc2/0x120 [ 645.919243][T17737] __kmalloc_cache_noprof+0x7a/0x6f0 [ 645.919264][T17737] ? qrtr_tun_open+0x47/0x220 [ 645.919353][T17737] ? __pfx_qrtr_tun_open+0x10/0x10 [ 645.919370][T17737] qrtr_tun_open+0x47/0x220 [ 645.919385][T17737] ? __pfx_qrtr_tun_open+0x10/0x10 [ 645.919401][T17737] misc_open+0x26d/0x450 [ 645.919418][T17737] ? __pfx_misc_open+0x10/0x10 [ 645.919433][T17737] chrdev_open+0x234/0x6a0 [ 645.919453][T17737] ? __pfx_apparmor_file_open+0x10/0x10 [ 645.919471][T17737] ? __pfx_chrdev_open+0x10/0x10 [ 645.919490][T17737] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 645.919514][T17737] do_dentry_open+0x6ab/0x14d0 [ 645.919531][T17737] ? __pfx_chrdev_open+0x10/0x10 [ 645.919554][T17737] vfs_open+0x82/0x3f0 [ 645.919578][T17737] path_openat+0x208c/0x31a0 [ 645.919603][T17737] ? __pfx_path_openat+0x10/0x10 [ 645.919636][T17737] do_file_open+0x20e/0x430 [ 645.919657][T17737] ? __pfx_do_file_open+0x10/0x10 [ 645.919690][T17737] ? alloc_fd+0x476/0x790 [ 645.919711][T17737] ? do_getname+0x191/0x390 [ 645.919735][T17737] do_sys_openat2+0x10d/0x1e0 [ 645.919761][T17737] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.919790][T17737] __x64_sys_openat+0x12d/0x210 [ 645.919813][T17737] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.919838][T17737] ? rcu_is_watching+0x12/0xc0 [ 645.919858][T17737] do_syscall_64+0x115/0x840 [ 645.919878][T17737] ? clear_bhb_loop+0x40/0x90 [ 645.919896][T17737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.919911][T17737] RIP: 0033:0x7f13feb9ce59 [ 645.919926][T17737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.919940][T17737] RSP: 002b:00007f13ffac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.919956][T17737] RAX: ffffffffffffffda RBX: 00007f13fee15fa0 RCX: 00007f13feb9ce59 [ 645.919966][T17737] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 645.919978][T17737] RBP: 00007f13fec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 645.919987][T17737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.919995][T17737] R13: 00007f13fee16038 R14: 00007f13fee15fa0 R15: 00007fff1371c0b8 [ 645.920015][T17737] [ 646.192269][T17709] kexec: Could not allocate control_code_buffer [ 646.439524][T17755] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2283'. [ 646.518523][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 647.076632][ T9797] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 647.076657][ T9797] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 647.093594][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 647.100537][ T9797] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 647.100558][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 647.114526][ T9797] Bluetooth: hci1: Dropping invalid advertising data [ 647.121414][ T9797] Bluetooth: hci1: Malformed LE Event: 0x02 [ 647.426439][T17780] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 648.969861][T17789] Process accounting paused [ 650.092122][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 650.628529][T17865] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2306'. [ 651.015702][T17874] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 651.107915][T17874] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 651.208278][T17874] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 651.921242][T10052] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 651.936115][T10052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 651.944719][T10052] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 651.956222][T10052] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 651.977268][T10052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 652.242178][T17875] Process accounting resumed [ 653.495136][T10461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.777546][T10455] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 899 with max blocks 6 with error 117 [ 653.857413][T10455] EXT4-fs (sda1): This should not happen!! Data will be lost [ 653.857413][T10455] [ 654.011644][T10052] Bluetooth: hci4: command tx timeout [ 654.106755][T10052] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 654.106780][T10052] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 654.123054][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 654.129995][T10052] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 654.130016][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 654.145699][T10052] Bluetooth: hci2: Dropping invalid advertising data [ 654.152441][T10052] Bluetooth: hci2: Malformed LE Event: 0x02 [ 654.319656][T10461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.583373][T10461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.834989][T10461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.909489][T10461] gretap0: left allmulticast mode [ 655.959008][T10461] gretap0: left promiscuous mode [ 656.004042][T10461] bridge0: port 3(gretap0) entered disabled state [ 656.030600][T17959] NFSD: Failed to start, no listeners configured. [ 656.063774][T10461] bridge_slave_1: left allmulticast mode [ 656.079955][T10052] Bluetooth: hci4: command tx timeout [ 656.103848][T10461] bridge_slave_1: left promiscuous mode [ 656.135135][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.192213][T10461] bridge_slave_0: left allmulticast mode [ 656.226021][T10461] bridge_slave_0: left promiscuous mode [ 656.253076][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.967432][T10461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.025762][T10461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.061108][T10461] bond0 (unregistering): Released all slaves [ 657.151932][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 657.192543][T10461] ovs_ÿþ: left promiscuous mode [ 657.353869][T10461] Â: left promiscuous mode [ 657.744761][T17884] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.784814][T17884] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.818691][T17884] bridge_slave_0: entered allmulticast mode [ 657.844029][T17884] bridge_slave_0: entered promiscuous mode [ 657.881910][T17884] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.911777][T17884] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.935041][T17884] bridge_slave_1: entered allmulticast mode [ 657.957020][T17884] bridge_slave_1: entered promiscuous mode [ 658.152001][T10052] Bluetooth: hci4: command tx timeout [ 658.201730][T17884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.244290][T17884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.422571][T17884] team0: Port device team_slave_0 added [ 658.472217][T17884] team0: Port device team_slave_1 added [ 658.534876][T10461] hsr_slave_0: left promiscuous mode [ 658.568857][T10461] hsr_slave_1: left promiscuous mode [ 658.584372][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.609822][T10461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.639324][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.668213][T10461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.818617][T10461] veth1_vlan: left promiscuous mode [ 658.852228][T10461] veth0_vlan: left promiscuous mode [ 659.194078][T17996] futex_wake_op: syz.2.2322 tries to shift op by -2048; fix this program [ 659.277969][T17993] 0x000000000001-0x000000020000 : "" [ 659.368866][T17993] ftl_cs: FTL header corrupt! [ 659.779992][T17996] ubi1: attaching mtd0 [ 659.825953][T17996] ubi1: scanning is finished [ 659.875770][T17996] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 659.991394][T10461] team0 (unregistering): Port device team_slave_1 removed [ 660.077831][T10461] team0 (unregistering): Port device team_slave_0 removed [ 660.099392][T17996] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 660.218317][T10052] Bluetooth: hci4: command tx timeout [ 660.510694][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 660.548506][T17884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.585115][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.704950][T17884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.760700][T17884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.792098][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.899448][T17884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.201440][T17884] hsr_slave_0: entered promiscuous mode [ 661.238250][T17884] hsr_slave_1: entered promiscuous mode [ 661.274868][T17884] debugfs: 'hsr0' already exists in 'hsr' [ 661.301309][T17884] Cannot create hsr debugfs directory [ 662.949102][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 663.107275][T18054] random: crng reseeded on system resumption [ 666.378814][T18065] Process accounting resumed [ 667.246985][T17884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 667.342136][T17884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.467268][T18138] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 667.489724][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2338'. [ 667.536672][T17884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 667.598407][T17884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.696038][T17884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 667.736533][T17884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.865966][T10052] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 667.918818][T17884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 667.987288][T17884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.324317][T17884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.484609][T17884] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.572937][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.580131][ T9798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.717580][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.724769][ T9798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.344171][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2345'. [ 670.439982][T18205] veth1_macvtap: left promiscuous mode [ 670.474285][T18205] macsec0: entered promiscuous mode [ 670.512132][T18205] macsec0: entered allmulticast mode [ 671.906770][T17884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.154646][T17884] veth0_vlan: entered promiscuous mode [ 672.209446][T17884] veth1_vlan: entered promiscuous mode [ 672.496374][T17884] veth0_macvtap: entered promiscuous mode [ 672.555547][T17884] veth1_macvtap: entered promiscuous mode [ 672.670713][T17884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.728321][T17884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.812190][ T9798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.867027][ T9798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.905166][ T9798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.983307][ T9798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.312226][T10747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.358717][T10747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.484114][T10747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.534732][T10747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.545302][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 673.545324][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 673.560454][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 673.567516][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 673.567538][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 673.581718][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 673.593760][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 673.961319][T10052] Bluetooth: hci4: unexpected event 0x10 length: 124 > 1 [ 673.965399][ T9797] Bluetooth: hci4: hardware error 0x00 [ 676.055790][ T9797] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 676.076380][T18347] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2362'. [ 678.363765][ T29] audit: type=1800 audit(2147491524.219:27): pid=18398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2371" name="dbroot" dev="configfs" ino=79698 res=0 errno=0 [ 680.350167][T18410] Process accounting resumed [ 680.485977][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'. [ 680.816138][T18448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2381'. [ 680.994688][ T9797] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 680.994716][ T9797] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 681.009884][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 681.016658][ T9797] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 681.016679][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 681.032209][ T9797] Bluetooth: hci3: Dropping invalid advertising data [ 681.038931][ T9797] Bluetooth: hci3: Malformed LE Event: 0x02 [ 681.067035][T18446] FAULT_INJECTION: forcing a failure. [ 681.067035][T18446] name fail_futex, interval 1, probability 0, space 0, times 0 [ 681.316943][T18446] CPU: 0 UID: 0 PID: 18446 Comm: syz.2.2379 Tainted: G U L syzkaller #0 PREEMPT(full) [ 681.316976][T18446] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 681.316983][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.316992][T18446] Call Trace: [ 681.316998][T18446] [ 681.317004][T18446] dump_stack_lvl+0x100/0x190 [ 681.317025][T18446] should_fail_ex.cold+0x5/0xa [ 681.317046][T18446] get_futex_key+0x1d2/0x1510 [ 681.317073][T18446] ? __pfx_get_futex_key+0x10/0x10 [ 681.317102][T18446] futex_wake+0xea/0x530 [ 681.317119][T18446] ? rcu_is_watching+0x12/0xc0 [ 681.317136][T18446] ? __pfx_futex_wake+0x10/0x10 [ 681.317156][T18446] ? putname+0xb1/0x110 [ 681.317174][T18446] ? kmem_cache_free+0x127/0x6c0 [ 681.317199][T18446] do_futex+0x32b/0x350 [ 681.317214][T18446] ? __pfx_do_futex+0x10/0x10 [ 681.317227][T18446] ? __pfx_do_sys_openat2+0x10/0x10 [ 681.317251][T18446] ? do_raw_spin_lock+0x128/0x260 [ 681.317269][T18446] __x64_sys_futex+0x34f/0x4d0 [ 681.317285][T18446] ? __x64_sys_openat+0x12d/0x210 [ 681.317308][T18446] ? __pfx___x64_sys_futex+0x10/0x10 [ 681.317326][T18446] ? rcu_is_watching+0x12/0xc0 [ 681.317345][T18446] do_syscall_64+0x115/0x840 [ 681.317366][T18446] ? clear_bhb_loop+0x40/0x90 [ 681.317385][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.317401][T18446] RIP: 0033:0x7f13feb9ce59 [ 681.317414][T18446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.317429][T18446] RSP: 002b:00007f13ffa640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 681.317444][T18446] RAX: ffffffffffffffda RBX: 00007f13fee16278 RCX: 00007f13feb9ce59 [ 681.317454][T18446] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f13fee1627c [ 681.317463][T18446] RBP: 00007f13fee16270 R08: 0000000000000001 R09: 0000000000000000 [ 681.317473][T18446] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 681.317482][T18446] R13: 00007f13fee16308 R14: 00007fff1371bfd0 R15: 00007fff1371c0b8 [ 681.317501][T18446] [ 681.589304][T18458] random: crng reseeded on system resumption [ 681.604470][T18458] FAULT_INJECTION: forcing a failure. [ 681.604470][T18458] name failslab, interval 1, probability 0, space 0, times 0 [ 681.618078][T18458] CPU: 0 UID: 0 PID: 18458 Comm: syz.3.2382 Tainted: G U L syzkaller #0 PREEMPT(full) [ 681.618106][T18458] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 681.618112][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.618121][T18458] Call Trace: [ 681.618128][T18458] [ 681.618134][T18458] dump_stack_lvl+0x100/0x190 [ 681.618155][T18458] should_fail_ex.cold+0x5/0xa [ 681.618177][T18458] should_failslab+0xc2/0x120 [ 681.618195][T18458] __kmalloc_cache_noprof+0x7a/0x6f0 [ 681.618216][T18458] ? ima_calc_file_hash_tfm+0x236/0x350 [ 681.618321][T18458] ? sha256_init+0xd/0xc0 [ 681.618391][T18458] ima_calc_file_hash_tfm+0x236/0x350 [ 681.618410][T18458] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 681.618448][T18458] ? look_up_lock_class+0x64/0x120 [ 681.618471][T18458] ? ima_alloc_tfm+0x21a/0x2e0 [ 681.618489][T18458] ima_calc_file_hash+0x1e3/0x380 [ 681.618506][T18458] ima_collect_measurement+0x94f/0xb30 [ 681.618528][T18458] ? __pfx_ima_collect_measurement+0x10/0x10 [ 681.618557][T18458] ? process_measurement+0x5ab/0x2350 [ 681.618573][T18458] ? is_bad_inode+0xd/0x40 [ 681.618588][T18458] ? xattr_resolve_name+0x27d/0x3f0 [ 681.618607][T18458] ? vfs_getxattr_alloc+0xec/0x350 [ 681.618630][T18458] ? ima_get_hash_algo+0x22d/0x400 [ 681.618651][T18458] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 681.618677][T18458] ? process_measurement+0xdfe/0x2350 [ 681.618691][T18458] process_measurement+0xdfe/0x2350 [ 681.618710][T18458] ? stack_trace_save+0x8e/0xc0 [ 681.618730][T18458] ? __pfx_process_measurement+0x10/0x10 [ 681.618745][T18458] ? __lock_acquire+0x4a5/0x2630 [ 681.618767][T18458] ? __kasan_slab_alloc+0x89/0x90 [ 681.618782][T18458] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 681.618805][T18458] ? init_file+0x95/0x480 [ 681.618823][T18458] ? alloc_empty_file+0x79/0x1c0 [ 681.618843][T18458] ? alloc_file_pseudo+0x13a/0x230 [ 681.618862][T18458] ? ksys_mmap_pgoff+0x242/0x610 [ 681.618879][T18458] ? __x64_sys_mmap+0x125/0x190 [ 681.618893][T18458] ? do_syscall_64+0x115/0x840 [ 681.618930][T18458] ? __pfx_aa_file_perm+0x10/0x10 [ 681.618965][T18458] ima_file_mmap+0x1c4/0x1f0 [ 681.618982][T18458] ? __pfx_ima_file_mmap+0x10/0x10 [ 681.619002][T18458] security_mmap_file+0x278/0x9b0 [ 681.619025][T18458] vm_mmap_pgoff+0xec/0x470 [ 681.619046][T18458] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 681.619063][T18458] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 681.619085][T18458] ? hugetlbfs_get_inode+0x3f5/0x700 [ 681.619139][T18458] ksys_mmap_pgoff+0x285/0x610 [ 681.619159][T18458] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 681.619177][T18458] ? xfd_validate_state+0x129/0x190 [ 681.619197][T18458] __x64_sys_mmap+0x125/0x190 [ 681.619214][T18458] do_syscall_64+0x115/0x840 [ 681.619233][T18458] ? clear_bhb_loop+0x40/0x90 [ 681.619253][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.619268][T18458] RIP: 0033:0x7efcc119ce59 [ 681.619283][T18458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.619298][T18458] RSP: 002b:00007efcc1f99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 681.619313][T18458] RAX: ffffffffffffffda RBX: 00007efcc1416090 RCX: 00007efcc119ce59 [ 681.619323][T18458] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 681.619333][T18458] RBP: 00007efcc1232d6f R08: 0000000000000401 R09: 0000300000000000 [ 681.619342][T18458] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 681.619351][T18458] R13: 00007efcc1416128 R14: 00007efcc1416090 R15: 00007fff587e5a08 [ 681.619371][T18458] [ 682.035174][ T29] audit: type=1800 audit(2147491527.506:28): pid=18458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2382" name="anon_hugepage" dev="hugetlbfs" ino=80062 res=0 errno=0 [ 682.166430][T18461] Process accounting paused [ 682.235719][ T9797] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 682.235744][ T9797] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 682.251172][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 682.258122][ T9797] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 682.258143][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 682.273805][ T9797] Bluetooth: hci0: Dropping invalid advertising data [ 682.280579][ T9797] Bluetooth: hci0: Malformed LE Event: 0x02 [ 684.139165][T10052] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 684.160135][T10052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 684.197990][T10052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 684.213775][T10052] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 684.225016][T10052] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 684.529134][T18494] FAULT_INJECTION: forcing a failure. [ 684.529134][T18494] name failslab, interval 1, probability 0, space 0, times 0 [ 684.602735][T18494] CPU: 0 UID: 0 PID: 18494 Comm: syz.0.2391 Tainted: G U L syzkaller #0 PREEMPT(full) [ 684.602764][T18494] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 684.602770][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.602780][T18494] Call Trace: [ 684.602785][T18494] [ 684.602791][T18494] dump_stack_lvl+0x100/0x190 [ 684.602812][T18494] should_fail_ex.cold+0x5/0xa [ 684.602832][T18494] ? __blkdev_direct_IO_simple+0x112/0x890 [ 684.602921][T18494] should_failslab+0xc2/0x120 [ 684.602940][T18494] __kmalloc_noprof+0xe0/0x850 [ 684.602957][T18494] __blkdev_direct_IO_simple+0x112/0x890 [ 684.602984][T18494] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 684.603031][T18494] blkdev_direct_IO+0xc76/0x1fb0 [ 684.603061][T18494] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 684.603083][T18494] ? rcu_is_watching+0x12/0xc0 [ 684.603100][T18494] ? __mark_inode_dirty+0x55c/0x1720 [ 684.603115][T18494] ? filemap_check_errors+0xa9/0x150 [ 684.603138][T18494] blkdev_write_iter+0x703/0xd70 [ 684.603164][T18494] vfs_write+0x6ac/0x1070 [ 684.603182][T18494] ? __pfx_blkdev_write_iter+0x10/0x10 [ 684.603206][T18494] ? __pfx_vfs_write+0x10/0x10 [ 684.603221][T18494] ? find_held_lock+0x2b/0x80 [ 684.603250][T18494] ksys_write+0x12a/0x250 [ 684.603266][T18494] ? __pfx_ksys_write+0x10/0x10 [ 684.603284][T18494] ? rcu_is_watching+0x12/0xc0 [ 684.603303][T18494] do_syscall_64+0x115/0x840 [ 684.603323][T18494] ? clear_bhb_loop+0x40/0x90 [ 684.603340][T18494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.603356][T18494] RIP: 0033:0x7f10e639ce59 [ 684.603369][T18494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.603383][T18494] RSP: 002b:00007f10e724f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 684.603398][T18494] RAX: ffffffffffffffda RBX: 00007f10e6615fa0 RCX: 00007f10e639ce59 [ 684.603408][T18494] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000003 [ 684.603417][T18494] RBP: 00007f10e6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 684.603426][T18494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.603435][T18494] R13: 00007f10e6616038 R14: 00007f10e6615fa0 R15: 00007ffc8e705998 [ 684.603455][T18494] [ 685.221840][T10455] bridge_slave_1: left allmulticast mode [ 685.251368][T10455] bridge_slave_1: left promiscuous mode [ 685.296141][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.360435][T10455] bridge_slave_0: left allmulticast mode [ 685.390090][T10455] bridge_slave_0: left promiscuous mode [ 685.422625][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.098889][T10455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.108201][T10455] bond_slave_0: left promiscuous mode [ 686.117857][T10455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.128030][T10455] bond_slave_1: left promiscuous mode [ 686.139931][T10455] bond0 (unregistering): Released all slaves [ 686.212055][T10455] HSR: left promiscuous mode [ 686.322600][T10052] Bluetooth: hci1: command tx timeout [ 686.329491][T10455] HfR: left promiscuous mode [ 686.465635][T10455] tipc: Left network mode [ 687.084259][T18527] vivid-007: ================= START STATUS ================= [ 687.135289][T18527] vivid-007: Enable Output Cropping: true grabbed [ 687.168140][T18527] vivid-007: Enable Output Composing: true grabbed [ 687.241460][T18527] vivid-007: Enable Output Scaler: true grabbed [ 687.274377][T18527] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 687.327633][T18527] vivid-007: Transmit Mode: HDMI grabbed [ 687.348204][T18527] vivid-007: Hotplug Present: 0x00000000 [ 687.364955][T18527] vivid-007: RxSense Present: 0x00000000 [ 687.389670][T18527] vivid-007: EDID Present: 0x00000000 [ 687.415348][T18527] vivid-007: ================== END STATUS ================== [ 687.709777][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 687.709803][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 687.726964][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 687.733681][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 687.733703][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 687.747816][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 687.754498][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 687.843950][T10455] hsr_slave_0: left promiscuous mode [ 687.856197][T10455] hsr_slave_1: left promiscuous mode [ 687.866246][T10455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.882873][T10455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.912325][T10455] veth0_macvtap: left promiscuous mode [ 687.929716][T10455] veth1_vlan: left promiscuous mode [ 687.944334][T10455] veth0_vlan: left promiscuous mode [ 687.982247][T18542] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 688.256448][T10455] team0 (unregistering): Port device team_slave_1 removed [ 688.274549][T10455] team0 (unregistering): Port device team_slave_0 removed [ 688.391532][T10052] Bluetooth: hci1: command tx timeout [ 688.618094][T18545] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2399'. [ 688.657935][T18545] FAULT_INJECTION: forcing a failure. [ 688.657935][T18545] name failslab, interval 1, probability 0, space 0, times 0 [ 688.708089][T18545] CPU: 0 UID: 0 PID: 18545 Comm: syz.0.2399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 688.708120][T18545] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 688.708126][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 688.708135][T18545] Call Trace: [ 688.708140][T18545] [ 688.708147][T18545] dump_stack_lvl+0x100/0x190 [ 688.708168][T18545] should_fail_ex.cold+0x5/0xa [ 688.708189][T18545] should_failslab+0xc2/0x120 [ 688.708208][T18545] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 688.708231][T18545] ? do_getname+0x35/0x390 [ 688.708256][T18545] do_getname+0x35/0x390 [ 688.708278][T18545] do_sys_openat2+0xc5/0x1e0 [ 688.708301][T18545] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.708324][T18545] ? _raw_spin_unlock_irq+0x23/0x50 [ 688.708347][T18545] __x64_sys_openat+0x12d/0x210 [ 688.708369][T18545] ? __pfx___x64_sys_openat+0x10/0x10 [ 688.708391][T18545] ? exit_to_user_mode_loop+0xf3/0x670 [ 688.708425][T18545] ? rcu_is_watching+0x12/0xc0 [ 688.708446][T18545] do_syscall_64+0x115/0x840 [ 688.708466][T18545] ? clear_bhb_loop+0x40/0x90 [ 688.708484][T18545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.708499][T18545] RIP: 0033:0x7f10e639ce59 [ 688.708513][T18545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.708528][T18545] RSP: 002b:00007f10e724f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 688.708542][T18545] RAX: ffffffffffffffda RBX: 00007f10e6615fa0 RCX: 00007f10e639ce59 [ 688.708553][T18545] RDX: 0000000000204880 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 688.708562][T18545] RBP: 00007f10e6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 688.708572][T18545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.708581][T18545] R13: 00007f10e6616038 R14: 00007f10e6615fa0 R15: 00007ffc8e705998 [ 688.708600][T18545] [ 689.578407][T18488] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.624514][T18488] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.680754][T18488] bridge_slave_0: entered allmulticast mode [ 689.696186][T18555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'. [ 689.711534][T18488] bridge_slave_0: entered promiscuous mode [ 689.872039][T18488] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.905539][T18488] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.944874][T18488] bridge_slave_1: entered allmulticast mode [ 689.980592][T18488] bridge_slave_1: entered promiscuous mode [ 690.144383][T18488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.177199][T18577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2405'. [ 690.214590][T18488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.327601][T18488] team0: Port device team_slave_0 added [ 690.394669][T18488] team0: Port device team_slave_1 added [ 690.418270][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 690.460958][T10052] Bluetooth: hci1: command tx timeout [ 690.736061][T18583] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5644] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[18583] [ 691.133886][T18488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.170419][T18488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.711625][T18488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.531972][T10052] Bluetooth: hci1: command tx timeout [ 692.588648][T18488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.623929][T18488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.754106][T18488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.122056][T18488] hsr_slave_0: entered promiscuous mode [ 693.148234][T18488] hsr_slave_1: entered promiscuous mode [ 693.476084][T18617] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2411'. [ 693.619595][T18619] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2411'. [ 694.202306][T18488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 694.217826][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.228287][T18488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 694.243240][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.252956][T18488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 694.294847][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.335061][T18488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 694.406023][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.508002][T18488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.668268][T18488] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.711934][T10462] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.719128][T10462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.765174][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 695.765198][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 695.780641][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 695.787728][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 695.787749][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 695.801845][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 695.808748][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 695.940908][T10463] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.948099][T10463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.073948][T18709] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 697.160906][T18685] Process accounting paused [ 697.257101][T18712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2425'. [ 697.526041][T18488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.688413][T18488] veth0_vlan: entered promiscuous mode [ 697.732090][T18488] veth1_vlan: entered promiscuous mode [ 697.833633][T18488] veth0_macvtap: entered promiscuous mode [ 697.887273][T18488] veth1_macvtap: entered promiscuous mode [ 697.961241][T18488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.018480][T18488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.070256][T18721] bond0: invalid ARP target specified [ 698.115021][T10463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.151511][T10463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.168566][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2428'. [ 698.203656][T10463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.235669][T10463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.357464][T18724] can0: slcan on ttyS2. [ 698.629581][T18724] can0 (unregistered): slcan off ttyS2. [ 698.688079][T10462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.754552][T10462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.900419][T10462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.942009][T10462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.954665][T18739] futex_wake_op: syz.3.2431 tries to shift op by -2048; fix this program [ 699.024784][T18739] futex_wake_op: syz.3.2431 tries to shift op by -2048; fix this program [ 699.106414][T18746] 0x000000000001-0x000000020000 : "" [ 699.134816][T10052] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 699.134841][T10052] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 699.150835][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 699.157571][T10052] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 699.157593][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 699.171330][T10052] Bluetooth: hci3: Dropping invalid advertising data [ 699.178582][T10052] Bluetooth: hci3: Malformed LE Event: 0x02 [ 699.289499][T18746] ftl_cs: FTL header corrupt! [ 699.350052][ T29] audit: type=1800 audit(2147491545.318:29): pid=18739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2431" name="lu_gp_id" dev="configfs" ino=82024 res=0 errno=0 [ 699.419801][T18739] kstrtoul() returned -22 for lu_gp_id [ 699.451261][T18757] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2434'. [ 700.154176][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 700.172454][T18771] FAULT_INJECTION: forcing a failure. [ 700.172454][T18771] name failslab, interval 1, probability 0, space 0, times 0 [ 700.274062][T18771] CPU: 0 UID: 0 PID: 18771 Comm: syz.3.2435 Tainted: G U L syzkaller #0 PREEMPT(full) [ 700.274093][T18771] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 700.274099][T18771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.274108][T18771] Call Trace: [ 700.274114][T18771] [ 700.274121][T18771] dump_stack_lvl+0x100/0x190 [ 700.274143][T18771] should_fail_ex.cold+0x5/0xa [ 700.274164][T18771] ? tracepoint_add_func+0x3a8/0x1150 [ 700.274185][T18771] should_failslab+0xc2/0x120 [ 700.274202][T18771] __kmalloc_noprof+0xe0/0x850 [ 700.274220][T18771] ? __pfx_trace_event_raw_event_nfsd_cb_free_slot+0x10/0x10 [ 700.274284][T18771] tracepoint_add_func+0x3a8/0x1150 [ 700.274305][T18771] ? __pfx_trace_event_raw_event_nfsd_cb_free_slot+0x10/0x10 [ 700.274330][T18771] ? __pfx_trace_event_raw_event_nfsd_cb_free_slot+0x10/0x10 [ 700.274351][T18771] tracepoint_probe_register+0xc4/0x110 [ 700.274373][T18771] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 700.274395][T18771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.274417][T18771] ? __pfx_trace_event_raw_event_nfsd_cb_free_slot+0x10/0x10 [ 700.274437][T18771] ? __pfx_probe_sched_switch+0x10/0x10 [ 700.274459][T18771] ? __lock_acquire+0x4a5/0x2630 [ 700.274485][T18771] trace_event_reg+0x209/0x350 [ 700.274505][T18771] __ftrace_event_enable_disable+0x211/0x6f0 [ 700.274530][T18771] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 700.274560][T18771] ftrace_set_clr_event+0x1b7/0x3f0 [ 700.274578][T18771] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 700.274594][T18771] ? trace_get_user+0x3ae/0xa70 [ 700.274619][T18771] ftrace_event_write+0x259/0x2c0 [ 700.274643][T18771] ? __pfx_ftrace_event_write+0x10/0x10 [ 700.274668][T18771] vfs_write+0x2aa/0x1070 [ 700.274687][T18771] ? __pfx_ftrace_event_write+0x10/0x10 [ 700.274707][T18771] ? __pfx_vfs_write+0x10/0x10 [ 700.274723][T18771] ? __fget_files+0x215/0x3d0 [ 700.274746][T18771] ? __fget_files+0x21f/0x3d0 [ 700.274769][T18771] ksys_write+0x12a/0x250 [ 700.274785][T18771] ? __pfx_ksys_write+0x10/0x10 [ 700.274804][T18771] ? rcu_is_watching+0x12/0xc0 [ 700.274824][T18771] do_syscall_64+0x115/0x840 [ 700.274844][T18771] ? clear_bhb_loop+0x40/0x90 [ 700.274862][T18771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.274877][T18771] RIP: 0033:0x7efcc119ce59 [ 700.274890][T18771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.274904][T18771] RSP: 002b:00007efcc1fba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 700.274920][T18771] RAX: ffffffffffffffda RBX: 00007efcc1415fa0 RCX: 00007efcc119ce59 [ 700.274930][T18771] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000009 [ 700.274939][T18771] RBP: 00007efcc1232d6f R08: 0000000000000000 R09: 0000000000000000 [ 700.274948][T18771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.274957][T18771] R13: 00007efcc1416038 R14: 00007efcc1415fa0 R15: 00007fff587e5a08 [ 700.274978][T18771] [ 700.274993][T18771] event trace: Could not enable event nfsd_cb_free_slot [ 700.821688][ T9797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 700.861347][ T9797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 701.013942][ T9797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 701.259330][ T9797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 701.465757][T10053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 702.373648][ T9798] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.504020][T18815] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2442'. [ 702.848784][ T9798] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.042776][ T9798] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.413904][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2445'. [ 703.515733][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2444'. [ 703.832552][T10053] Bluetooth: hci2: command tx timeout [ 704.750406][ T9798] bridge_slave_1: left allmulticast mode [ 704.785670][ T9798] bridge_slave_1: left promiscuous mode [ 704.833215][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.922419][ T9798] bridge_slave_0: left allmulticast mode [ 704.960892][ T9798] bridge_slave_0: left promiscuous mode [ 705.024715][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.647637][ T9798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.659343][ T9798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.671074][ T9798] bond0 (unregistering): Released all slaves [ 705.713958][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 705.816927][ T9798] HfR: left promiscuous mode [ 705.900734][T10053] Bluetooth: hci2: command tx timeout [ 706.014285][ T9798] tipc: Left network mode [ 706.530439][T18779] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.533662][T18779] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.533794][T18779] bridge_slave_0: entered allmulticast mode [ 706.538788][T18779] bridge_slave_0: entered promiscuous mode [ 706.544611][T18779] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.544673][T18779] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.544760][T18779] bridge_slave_1: entered allmulticast mode [ 706.553758][T18779] bridge_slave_1: entered promiscuous mode [ 706.787929][T18779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.801779][T18779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.982359][T18779] team0: Port device team_slave_0 added [ 707.144750][T18779] team0: Port device team_slave_1 added [ 707.518388][T18779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.545737][T18779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.631141][T18779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.694990][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 707.720513][T18779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.774129][T18779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.879592][T18779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.970113][T10053] Bluetooth: hci2: command tx timeout [ 708.143586][ T9798] hsr_slave_0: left promiscuous mode [ 708.163147][ T9798] hsr_slave_1: left promiscuous mode [ 708.183319][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.207508][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.234739][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.269809][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.315634][ T9798] veth1_macvtap: left promiscuous mode [ 708.322898][ T9798] veth0_macvtap: left promiscuous mode [ 708.329859][ T9798] veth1_vlan: left promiscuous mode [ 708.336680][ T9798] veth0_vlan: left promiscuous mode [ 708.481686][T18950] futex_wake_op: syz.2.2458 tries to shift op by -2048; fix this program [ 708.829936][ T9798] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 708.988013][T18779] hsr_slave_0: entered promiscuous mode [ 709.013869][T18779] hsr_slave_1: entered promiscuous mode [ 709.047483][T18779] debugfs: 'hsr0' already exists in 'hsr' [ 709.077534][T18779] Cannot create hsr debugfs directory [ 710.040278][T10053] Bluetooth: hci2: command tx timeout [ 710.386068][T18983] futex_wake_op: syz.3.2463 tries to shift op by -2048; fix this program [ 710.422777][T18981] 0x000000000001-0x000000020000 : "" [ 710.457344][T18981] ftl_cs: FTL header corrupt! [ 712.087641][T18779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 712.276984][T18779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.308881][T18779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 712.538698][T18779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.589009][T18779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 712.640897][T18779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.980707][T18779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 713.211523][T18779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.017762][T19066] FAULT_INJECTION: forcing a failure. [ 714.017762][T19066] name failslab, interval 1, probability 0, space 0, times 0 [ 714.076376][T19066] CPU: 0 UID: 0 PID: 19066 Comm: syz.2.2469 Tainted: G U L syzkaller #0 PREEMPT(full) [ 714.076405][T19066] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 714.076411][T19066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.076420][T19066] Call Trace: [ 714.076426][T19066] [ 714.076433][T19066] dump_stack_lvl+0x100/0x190 [ 714.076457][T19066] should_fail_ex.cold+0x5/0xa [ 714.076478][T19066] should_failslab+0xc2/0x120 [ 714.076496][T19066] __kmalloc_cache_noprof+0x7a/0x6f0 [ 714.076518][T19066] ? sctp_add_bind_addr+0xae/0x3e0 [ 714.076637][T19066] ? __pfx_sctp_get_port_local+0x10/0x10 [ 714.076657][T19066] sctp_add_bind_addr+0xae/0x3e0 [ 714.076681][T19066] sctp_do_bind+0x36c/0x760 [ 714.076712][T19066] sctp_connect_new_asoc+0x5e7/0x770 [ 714.076733][T19066] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 714.076755][T19066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 714.076782][T19066] __sctp_connect+0x3e7/0xc70 [ 714.076806][T19066] ? __pfx___sctp_connect+0x10/0x10 [ 714.076826][T19066] ? __pfx_sctp_inet_connect+0x10/0x10 [ 714.076846][T19066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 714.076868][T19066] ? __pfx_sctp_inet_connect+0x10/0x10 [ 714.076885][T19066] sctp_inet_connect+0x15f/0x220 [ 714.076905][T19066] __sys_connect_file+0x141/0x1a0 [ 714.076930][T19066] __sys_connect+0x141/0x170 [ 714.076951][T19066] ? __pfx___sys_connect+0x10/0x10 [ 714.076984][T19066] __x64_sys_connect+0x72/0xb0 [ 714.077005][T19066] ? lockdep_hardirqs_on+0x78/0x100 [ 714.077025][T19066] do_syscall_64+0x115/0x840 [ 714.077044][T19066] ? clear_bhb_loop+0x40/0x90 [ 714.077062][T19066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.077077][T19066] RIP: 0033:0x7f5cc1f9ce59 [ 714.077090][T19066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.077105][T19066] RSP: 002b:00007f5cc2ecd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 714.077120][T19066] RAX: ffffffffffffffda RBX: 00007f5cc2215fa0 RCX: 00007f5cc1f9ce59 [ 714.077130][T19066] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 714.077138][T19066] RBP: 00007f5cc2032d6f R08: 0000000000000000 R09: 0000000000000000 [ 714.077148][T19066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.077157][T19066] R13: 00007f5cc2216038 R14: 00007f5cc2215fa0 R15: 00007fff664bba48 [ 714.077177][T19066] [ 715.054287][T18779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.142001][T18779] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.191634][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.198794][ T9798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.268168][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.275336][ T9798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.291166][T19085] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 716.158321][T19093] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2474: iget: checksum invalid [ 716.304526][T19093] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 716.439928][T19093] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2474: iget: checksum invalid [ 716.562290][T19093] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 716.675839][T19093] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2474: iget: checksum invalid [ 716.756054][T18779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.784770][T19093] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 716.905838][T18779] veth0_vlan: entered promiscuous mode [ 716.914087][T19093] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2474: iget: checksum invalid [ 716.941694][T18779] veth1_vlan: entered promiscuous mode [ 716.951387][T19093] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 716.991299][T19093] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 717.023243][T18779] veth0_macvtap: entered promiscuous mode [ 717.032155][T19093] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 717.057148][T18779] veth1_macvtap: entered promiscuous mode [ 717.434165][T18779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.489060][T18779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.565995][T10460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.604588][T10460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.761148][T10460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.826688][T10460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.049127][T10460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.092688][T10460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.124498][T10053] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 718.124523][T10053] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 718.140082][T10053] Bluetooth: hci1: Dropping invalid advertising data [ 718.152110][T10053] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 718.152135][T10053] Bluetooth: hci1: Dropping invalid advertising data [ 718.167048][T10053] Bluetooth: hci1: Dropping invalid advertising data [ 718.175811][T10053] Bluetooth: hci1: Malformed LE Event: 0x02 [ 718.262762][T10468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.291294][T10468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.489258][T10052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 720.508381][T10052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 720.516552][T10052] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 720.527383][T10052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 720.537485][T10052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 721.863775][T19119] ------------[ cut here ]------------ [ 721.869364][T19119] ODEBUG: free active (active state 0) object: ffff888079cd1438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 721.882480][T19119] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.1.2475/19119 [ 721.892930][T19119] Modules linked in: [ 721.896836][T19119] CPU: 0 UID: 0 PID: 19119 Comm: syz.1.2475 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.908176][T19119] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.913357][T19119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.924198][T19119] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 721.930543][T19119] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 04 e2 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 80 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 721.950798][T19119] RSP: 0018:ffffc90003f4f738 EFLAGS: 00010246 [ 721.957054][T19119] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 721.965013][T19119] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1f3e0 [ 721.973214][T19119] RBP: 0000000000000001 R08: ffff888079cd1438 R09: ffffffff8bb2c6a0 [ 721.981810][T19119] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 721.990002][T19119] R13: ffffffff8bb2c6e0 R14: ffffffff8a915ec0 R15: ffffc90003f4f838 [ 721.997997][T19119] FS: 0000000000000000(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 722.006955][T19119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.013523][T19119] CR2: 00007f7263a76e9c CR3: 000000000e596000 CR4: 00000000003526f0 [ 722.021563][T19119] Call Trace: [ 722.024839][T19119] [ 722.028264][T19119] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 722.033721][T19119] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 722.039889][T19119] debug_check_no_obj_freed+0x4da/0x630 [ 722.045433][T19119] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 722.051793][T19119] ? __page_table_check_zero+0x333/0x410 [ 722.057965][T19119] ? __page_table_check_zero+0x338/0x410 [ 722.063596][T19119] __free_frozen_pages+0x3fc/0x10a0 [ 722.069002][T19119] hci_release_dev+0x4ef/0x630 [ 722.073766][T19119] ? __pfx_hci_release_dev+0x10/0x10 [ 722.079377][T19119] ? device_release+0x97/0x270 [ 722.084135][T19119] ? rcu_is_watching+0x12/0xc0 [ 722.089118][T19119] ? device_release+0x97/0x270 [ 722.093881][T19119] bt_host_release+0x6a/0xb0 [ 722.098508][T19119] ? __pfx_bt_host_release+0x10/0x10 [ 722.103801][T19119] device_release+0xd2/0x270 [ 722.108414][T19119] kobject_put+0x1f7/0x640 [ 722.112826][T19119] put_device+0x1f/0x30 [ 722.116986][T19119] vhci_release+0x185/0x230 [ 722.121602][T19119] ? __pfx_vhci_release+0x10/0x10 [ 722.126675][T19119] __fput+0x3ff/0xb50 [ 722.131152][T19119] task_work_run+0x150/0x240 [ 722.136079][T19119] ? __pfx_task_work_run+0x10/0x10 [ 722.141179][T19119] ? free_uts_ns+0x16e/0x330 [ 722.146185][T19119] do_exit+0x951/0x2af0 [ 722.150772][T19119] ? __pfx_do_exit+0x10/0x10 [ 722.155357][T19119] ? __pfx_proc_coredump_connector+0x10/0x10 [ 722.161601][T19119] do_group_exit+0xd5/0x2a0 [ 722.166141][T19119] get_signal+0x20ff/0x2210 [ 722.170658][T19119] ? __pfx_get_signal+0x10/0x10 [ 722.175495][T19119] ? force_sig_fault+0xc3/0x100 [ 722.180624][T19119] arch_do_signal_or_restart+0x91/0x7a0 [ 722.186377][T19119] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 722.192545][T19119] ? fixup_vdso_exception+0x2d1/0x370 [ 722.197952][T19119] ? rcu_is_watching+0x12/0xc0 [ 722.202735][T19119] ? rcu_is_watching+0x12/0xc0 [ 722.207526][T19119] irqentry_exit+0x39e/0x970 [ 722.212110][T19119] asm_exc_invalid_op+0x1a/0x20 [ 722.217048][T19119] RIP: 0033:0x0 [ 722.220491][T19119] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 722.227865][T19119] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 722.234417][T19119] RAX: 0000000000000000 RBX: 00007f15e6215fa0 RCX: 00007f15e5f9ce59 [ 722.242721][T19119] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020003b11 [ 722.250993][T19119] RBP: 00007f15e6032d6f R08: 0000000000000007 R09: 0000000000000000 [ 722.259167][T19119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.267172][T19119] R13: 00007f15e6216038 R14: 00007f15e6215fa0 R15: 00007ffcccff2388 [ 722.275162][T19119] [ 722.278176][T19119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 722.285438][T19119] CPU: 0 UID: 0 PID: 19119 Comm: syz.1.2475 Tainted: G U L syzkaller #0 PREEMPT(full) [ 722.296356][T19119] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 722.301527][T19119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 722.311563][T19119] Call Trace: [ 722.314827][T19119] [ 722.317740][T19119] dump_stack_lvl+0x100/0x190 [ 722.322406][T19119] vpanic+0x552/0x970 [ 722.326369][T19119] ? __pfx_vpanic+0x10/0x10 [ 722.330855][T19119] panic+0xd1/0xe0 [ 722.334555][T19119] ? __pfx_panic+0x10/0x10 [ 722.338956][T19119] ? check_panic_on_warn+0x1f/0x90 [ 722.344061][T19119] check_panic_on_warn.cold+0x19/0x34 [ 722.349419][T19119] ? debug_print_object+0x18e/0x2a0 [ 722.354600][T19119] __warn.cold+0x191/0x328 [ 722.359001][T19119] __report_bug+0x296/0x3d0 [ 722.363567][T19119] ? debug_print_object+0x18e/0x2a0 [ 722.368754][T19119] ? __pfx___report_bug+0x10/0x10 [ 722.373768][T19119] ? __lock_acquire+0x4a5/0x2630 [ 722.378700][T19119] report_bug_entry+0xe1/0x290 [ 722.383448][T19119] ? debug_print_object+0x19b/0x2a0 [ 722.388631][T19119] handle_bug+0x1cd/0x2a0 [ 722.392941][T19119] exc_invalid_op+0x17/0x50 [ 722.397423][T19119] asm_exc_invalid_op+0x1a/0x20 [ 722.402254][T19119] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 722.408051][T19119] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 04 e2 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 80 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 722.427642][T19119] RSP: 0018:ffffc90003f4f738 EFLAGS: 00010246 [ 722.433692][T19119] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 722.441642][T19119] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1f3e0 [ 722.449612][T19119] RBP: 0000000000000001 R08: ffff888079cd1438 R09: ffffffff8bb2c6a0 [ 722.457564][T19119] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 722.465514][T19119] R13: ffffffff8bb2c6e0 R14: ffffffff8a915ec0 R15: ffffc90003f4f838 [ 722.473465][T19119] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 722.478921][T19119] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 722.484363][T19119] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 722.490159][T19119] debug_check_no_obj_freed+0x4da/0x630 [ 722.495698][T19119] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 722.501751][T19119] ? __page_table_check_zero+0x333/0x410 [ 722.507386][T19119] ? __page_table_check_zero+0x338/0x410 [ 722.513022][T19119] __free_frozen_pages+0x3fc/0x10a0 [ 722.518212][T19119] hci_release_dev+0x4ef/0x630 [ 722.522962][T19119] ? __pfx_hci_release_dev+0x10/0x10 [ 722.528229][T19119] ? device_release+0x97/0x270 [ 722.532977][T19119] ? rcu_is_watching+0x12/0xc0 [ 722.537722][T19119] ? device_release+0x97/0x270 [ 722.542471][T19119] bt_host_release+0x6a/0xb0 [ 722.547046][T19119] ? __pfx_bt_host_release+0x10/0x10 [ 722.552316][T19119] device_release+0xd2/0x270 [ 722.556890][T19119] kobject_put+0x1f7/0x640 [ 722.561300][T19119] put_device+0x1f/0x30 [ 722.565441][T19119] vhci_release+0x185/0x230 [ 722.569929][T19119] ? __pfx_vhci_release+0x10/0x10 [ 722.574938][T19119] __fput+0x3ff/0xb50 [ 722.578911][T19119] task_work_run+0x150/0x240 [ 722.583482][T19119] ? __pfx_task_work_run+0x10/0x10 [ 722.588572][T19119] ? free_uts_ns+0x16e/0x330 [ 722.593151][T19119] do_exit+0x951/0x2af0 [ 722.597295][T19119] ? __pfx_do_exit+0x10/0x10 [ 722.601881][T19119] ? __pfx_proc_coredump_connector+0x10/0x10 [ 722.607854][T19119] do_group_exit+0xd5/0x2a0 [ 722.612348][T19119] get_signal+0x20ff/0x2210 [ 722.616844][T19119] ? __pfx_get_signal+0x10/0x10 [ 722.621692][T19119] ? force_sig_fault+0xc3/0x100 [ 722.626529][T19119] arch_do_signal_or_restart+0x91/0x7a0 [ 722.632066][T19119] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 722.638209][T19119] ? fixup_vdso_exception+0x2d1/0x370 [ 722.643572][T19119] ? rcu_is_watching+0x12/0xc0 [ 722.648318][T19119] ? rcu_is_watching+0x12/0xc0 [ 722.653067][T19119] irqentry_exit+0x39e/0x970 [ 722.657656][T19119] asm_exc_invalid_op+0x1a/0x20 [ 722.662487][T19119] RIP: 0033:0x0 [ 722.665925][T19119] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 722.673267][T19119] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 722.679312][T19119] RAX: 0000000000000000 RBX: 00007f15e6215fa0 RCX: 00007f15e5f9ce59 [ 722.687265][T19119] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020003b11 [ 722.695213][T19119] RBP: 00007f15e6032d6f R08: 0000000000000007 R09: 0000000000000000 [ 722.703163][T19119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.711114][T19119] R13: 00007f15e6216038 R14: 00007f15e6215fa0 R15: 00007ffcccff2388 [ 722.719075][T19119] [ 722.722146][T19119] Kernel Offset: disabled [ 722.726457][T19119] Rebooting in 86400 seconds..