last executing test programs: 1m56.386105892s ago: executing program 1 (id=200): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x220801, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x2680, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(0x3, 0x541b, 0x38) 1m55.711350958s ago: executing program 1 (id=203): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x800, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4}, 0xb, 0x7) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) prctl$auto(0x10000, 0x2, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a", @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd3c, 0x1, 0x4, 0x5, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xa, 0x8, 0x6]}, 0x0) setgroups$auto(0xac2e, &(0x7f0000000180)=0x6) 1m53.893197649s ago: executing program 1 (id=208): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, 0x0, 0x10) r3 = io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001700)=""/4082, 0xff2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_nvmf_dev_fops_fabrics(r0, &(0x7f00000000c0)=""/12, 0xc) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x34, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x2, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x0, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r3, &(0x7f00000005c0)={{&(0x7f0000000380)="77a618de9e9dd3179a373e614b0f9a57fac2cf70f52261b679f254bb85a3fa758835fd88d6a3a68bdc77c1208aedc04beab45baae911ac5985bf19b52acc45f97dec506bf123b99b16071c3086a95ace489bb09d1ae3f3a2ba4035", 0x8a64, &(0x7f0000000480)={&(0x7f0000000400)="adb71f9f259d9f91a76eacb22ac017a8af979a83b8e57d5fd2cb02fd2320fb187b1186de1f17566f231e08dcd427a0a504746487571baff349e3ec9de3c717b979d40f675c8b9d21a6e3ed8ea41b0b71a34a416cdea2b924f0e71e8d5702cec38dc2a22740e0d6d59b5e9ba825ed9b9d2c8c95627a19ff08ebed17d6af0b58", 0x7}, 0x2, &(0x7f00000004c0)="5673e1c64d7f47e1a71678b74fe43440ac39ae36083d955e97be1ef0ee4332e535e7eb61e6ceec6140164ca2c1d607a9c54549ea14bb613328777291350cad6e7e24e162b1081f6b0a8221d3305c2bcb2c5af7e261243c59357f46576f06ff236c1c652168980208170d6d57e5a0bc7984360023a41d5ef6cd6eec8726e5e0cc0c95d9f6e5db1ddbf50e9203589ad79acc936c79733061dce2a254884aefacd8561b9d7676ac8d4225b295fec0826500e1a7ce3a0cbf004878c0eeca24c2f50b725f2aa86e97a9", 0x1, 0x1}, 0x2}, 0xffffffff, 0x8) 1m50.902433836s ago: executing program 1 (id=218): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000004740), 0xffffffffffffffff) execve$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)='\'\x00', &(0x7f0000000140)=&(0x7f0000000100)='TIPCv2\x00') sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006880)={&(0x7f0000004780)={0x14, r0, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006880)={&(0x7f0000004780)={0x14, r0, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) 1m50.473086486s ago: executing program 1 (id=222): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0) (async) shmctl$auto_SHM_STAT(0xd, 0xd, 0x0) (async) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x48100, 0x0) (async) msgctl$auto_MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000140)={{0x7, 0xee01, 0xffffffffffffffff, 0x7fff, 0xd, 0x9, 0x6fac}, 0x0, 0x0, 0x8000000000000001, 0x464f, 0x5, 0x0, 0x2df2, 0x3, 0x8, 0xb}) rt_sigqueueinfo$auto(0x0, 0x1, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) r1 = fcntl$auto_F_UNLCK(r0, 0x4, 0x2) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002140)=""/64, 0x40) 1m50.159227558s ago: executing program 1 (id=223): mmap$auto(0x0, 0x624, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x122c3, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x181c02, 0x0) read$auto(r0, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x2, 0x200300) setsockopt$auto(r2, 0x107, 0x8, 0x0, 0x6) recvmmsg$auto(r2, 0x0, 0x8010001, 0x2, 0x0) mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r3 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll$auto(&(0x7f0000000280)={r3, 0x3}, 0x2, 0x2) execve$auto(0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x4b) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) prctl$auto_PR_SET_MM_END_DATA(0x80000000, 0x4, 0x0, 0x0, 0x2) read$auto(r4, 0x0, 0x80000000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x100110) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0xa}, 0x1) r6 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/printk_formats\x00', 0x50b000, 0x0) ioctl$auto_FICLONE(r1, 0x40049409, r6) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1m34.441169615s ago: executing program 32 (id=223): mmap$auto(0x0, 0x624, 0xfffffffffffffffb, 0x9b72, 0xffffffffffffffff, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x122c3, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x181c02, 0x0) read$auto(r0, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x2, 0x200300) setsockopt$auto(r2, 0x107, 0x8, 0x0, 0x6) recvmmsg$auto(r2, 0x0, 0x8010001, 0x2, 0x0) mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r3 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll$auto(&(0x7f0000000280)={r3, 0x3}, 0x2, 0x2) execve$auto(0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x4b) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) prctl$auto_PR_SET_MM_END_DATA(0x80000000, 0x4, 0x0, 0x0, 0x2) read$auto(r4, 0x0, 0x80000000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x100110) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0xa}, 0x1) r6 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/printk_formats\x00', 0x50b000, 0x0) ioctl$auto_FICLONE(r1, 0x40049409, r6) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 22.901498934s ago: executing program 0 (id=375): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40400, 0x0) read$auto_dfs_global_fops_debug(r2, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/maximum_speed\x00', 0x0, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x6, 0x1e, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540a, r4) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) r6 = socket(0xa, 0x3, 0x3a) ioctl$auto(r6, 0x890c, 0x1) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) 16.269942273s ago: executing program 0 (id=390): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000000140)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/notify_on_release\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="35835e537c55f4575f497a96d44c47e0ec338cb6e4c7bebf5d4acbcaed33cd28e3a9a4857198aa18de571287ab143171ddbca4f6a4f7e94145f727fac9fba4bed807439c4026ff75d04c7f6b", 0x4c) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0) r3 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0xc, 0x3, 0x4}) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) capget$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/245, 0xf5) close_range$auto(0x2, 0xffffffffffffffff, 0x20000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x80, 0x0) 13.54668846s ago: executing program 4 (id=393): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000003}, 0x6, 0x5, 0x4, 0x2a) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, 0x0, 0x2, 0x800000d) open(0x0, 0x101300, 0x147) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) remap_file_pages$auto(0x6a24, 0x100000000, 0x0, 0xb73, 0x66a) mmap$auto(0x0, 0xe983, 0x9, 0xeb1, 0x401, 0x7ffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) msgctl$auto_MSG_STAT_ANY(0xffffff80, 0xd, &(0x7f00000001c0)={{0x6, 0xee01, 0x0, 0x5, 0xfec, 0x4, 0x7}, &(0x7f0000000140)=0x5, &(0x7f0000000180), 0x17c, 0x7, 0x1ffe0, 0x2, 0xbd4, 0x7ff, 0x1, 0x400, @raw=0x4, @raw=0xfffffffd}) capget$auto(&(0x7f0000000240)={0xffffffc0}, &(0x7f00000002c0)={0x0, 0x5, 0x80}) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x0, 0x8000, 0x403000}, 0x4) 10.847976234s ago: executing program 3 (id=397): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) fanotify_init$auto(0x602, 0x1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) (async) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) (async) fanotify_init$auto(0x602, 0x1) (async) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) (async) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r3, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) (async) 9.728668129s ago: executing program 3 (id=398): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a401, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x5, 0x63, 0x0, 0x0, 0x0, 0x49, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xfffffffffffffffe, 0x2, 0x19, 0x2000000000d, 0x7}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xffd}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000180)="3bb52db856f2ba82c1461bc3adb87f16f1af6bc87fe3d0661749cbfd96367a9d17814b162df12acbf18ca85216b13a5aa9e1a6a39e0722ddd1e881", 0x1ffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x20006, 0x4000000000dc, 0x16, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = socket(0xa, 0x3, 0x6) getsockopt$auto(r4, 0x40000000029, 0x20, 0xfffffffffffffffe, 0x0) 9.183980901s ago: executing program 4 (id=399): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1a5940, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb3, r0, 0x2ffffffffffe) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r1 = prctl$auto(0xe, 0x2, 0x0, 0x1, 0x0) r2 = socket(0x5, 0x5, 0xe) setsockopt$auto(r2, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, r2, 0x7ffa) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) r5 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x30140, 0x0) read$auto_transaction_log_fops_(r5, &(0x7f00000001c0), 0x1) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) write$auto(r6, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) write$auto(r3, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x100000000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.056648921s ago: executing program 2 (id=401): unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)=[0x1003, 0xfff]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) pread64$auto(r0, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000009c0)="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", 0xe68) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r2, 0xc0e85667, r2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x7f5e3af84b92e506, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r0, @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_TIOCGEXCL(0xffffffffffffffff, 0x80045440, &(0x7f0000000000)=0x1) select$auto(0xe, &(0x7f00000000c0)={[0xc04c, 0x1, 0x6, 0x100000000003, 0x400, 0x3, 0x9, 0x1, 0x1, 0x407, 0x40000000001, 0x7, 0x3, 0x0, 0x2, 0x1]}, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 7.565380599s ago: executing program 3 (id=402): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$auto_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xa, 0x0, [{0x1d0, 0x4, 0x3}]}) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC0\x00', 0x40001, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) 7.022708844s ago: executing program 3 (id=403): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x25, 0x2, 0x0) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x2a4c0, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x80) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x66) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) uname$auto(0x0) r1 = getsockopt$auto(r0, 0x84, 0x1f, 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) sysfs$auto(0x2, 0x44, 0x0) bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x4, 0x8000000000000000}, 0x9) mmap$auto(0x800, 0x400008, 0x1, 0x9b7e, r1, 0x7ffd) capget$auto(0x0, 0xfffffffffffffffe) prctl$auto_PR_SET_VMA(0x53564d41, 0x4, 0x4, 0x20000000000000, 0x8001) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="a606737700022b", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) socket(0xa, 0x1, 0x84) clone$auto(0x3, 0x6, 0x0, 0x0, 0xfffffffc) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fsopen$auto(0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) 6.978598867s ago: executing program 4 (id=404): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio22\x00', 0x1cb502, 0x0) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) ioctl$auto(r0, 0x5646, r0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0xf7ff}, 0x40000001) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x3}, 0x100000000006) socket(0xa, 0x3, 0x3b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f00000005c0)={{0x1, 0xee00, 0xee01, 0x8, 0x5d, 0x0, 0xd1}, 0xffff46e6, 0x8, 0x8, 0x8, @raw=0x8, @raw=0x400, 0x7a, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0xfffffbfffffffff9, 0xa, 0x15, 0xfffffffffffffffa, 0xffffffffffff86bb) io_uring_setup$auto(0x206, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 6.869613252s ago: executing program 0 (id=405): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0xef1, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7e91, 0x7fffffff) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x1000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f0000000280)=0x22a) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0xa, 0x801, 0x84) socketcall$auto_SYS_RECVMSG(0x11, 0x0) r1 = socket(0xa, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/acpi/wakeup\x00', 0x141880, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001840)=""/4087, 0xff7) r3 = getsockopt$auto(r1, 0x29, 0x3d, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)="e2a234df07dfa5d65b0d517e3ae7fbcc95dee0e445bc2e651706e4ed3c0689885678d863c8b324cfee0fdb57c89bfec54507badd8f8517d636f10bf644b6aee2b505d391dd5a6fafd783fe913a550bbdb67947814452cca75e9534b54fd9c15cf2c5f4322a1ac59e6d771a559816da11cd208247b5afe66989cf8225a6c48811580d355d29ccd3582fe43f0224e71a724f427786c1390d", 0x8) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000ffdbdf2503000000058986000200a600000005000200000000000500050009007c196f75c3e2e35a11223bbedba475fe8e371926f839164f13e10328e734c51e11b7c19182e224"], 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x40) setsockopt$auto_SO_RESERVE_MEM(r3, 0x5, 0x49, &(0x7f00000000c0)='ethtool\x00', 0x3) 6.224365931s ago: executing program 2 (id=406): timer_settime$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x309b80, 0x0) r1 = socket(0xa, 0x3, 0x8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto(0xffffffffffffffff, 0x4bfa, 0x9) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0xe) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) r3 = socket(0xa, 0x3, 0x3b) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1, @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x7cc, 0x4000000000020009, 0x1, 0xeb1, r1, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x481, 0x351, 0x9}]}) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)=@link_detach, 0x8) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) mmap$auto(0x40000000, 0x2000d, 0x7, 0x14, 0x401, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x40854) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r6, 0x0, 0x0) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x1) 6.01393414s ago: executing program 0 (id=407): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101681, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x2, 0xffffffff7ffffffc, 0x8009, 0xb, 0x200000100106}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEuZy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', 0x81) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0xa, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000825bd7040ffdbdf2509"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0x24044034) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) getcwd$auto(0x0, 0xffffffffffffffff) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x60000, 0x28, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r1, 0x0, 0x800000008) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000100), r0) sendmsg$auto_NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c626389ab6c3c000000", @ANYRES16=r2, @ANYBLOB="200027bd7000fbdbdf2502000000080004000a010101"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) 5.446250336s ago: executing program 3 (id=408): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32=r1], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) mmap$auto(0x0, 0x2000a, 0x4000004000df, 0x18, 0x401, 0x7fff) r2 = socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ptyd4\x00', 0x40000, 0x0) getsockopt$auto(r2, 0x6, 0x2, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 5.280378054s ago: executing program 2 (id=409): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x2000000000, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x8000) landlock_restrict_self$auto(0xffffffffffffffff, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x2) open(0x0, 0x26940, 0x0) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4dcd, 0x0, 0x0) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5 1 [ 98.745514][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.756559][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.766802][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.776057][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.777732][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.790463][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.796754][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.805437][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.807708][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.819794][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.820929][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.836129][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.847254][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.854578][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.856082][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.869197][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.869623][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.878566][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.893192][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.631967][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.640199][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.647600][ T5632] bridge_slave_0: entered allmulticast mode [ 100.655325][ T5632] bridge_slave_0: entered promiscuous mode [ 100.676353][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.683509][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.690974][ T5632] bridge_slave_1: entered allmulticast mode [ 100.698629][ T5632] bridge_slave_1: entered promiscuous mode [ 100.759429][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.766803][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.774004][ T5631] bridge_slave_0: entered allmulticast mode [ 100.782190][ T5631] bridge_slave_0: entered promiscuous mode [ 100.790915][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.798839][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.806580][ T5631] bridge_slave_1: entered allmulticast mode [ 100.813993][ T5631] bridge_slave_1: entered promiscuous mode [ 100.886591][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.931582][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.943978][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.953755][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.962600][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.963254][ T5639] Bluetooth: hci0: command tx timeout [ 100.971101][ T5630] bridge_slave_0: entered allmulticast mode [ 100.977127][ T5634] Bluetooth: hci1: command tx timeout [ 100.987805][ T5630] bridge_slave_0: entered promiscuous mode [ 100.987932][ T5642] Bluetooth: hci3: command tx timeout [ 100.999978][ T4942] Bluetooth: hci2: command tx timeout [ 101.030656][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.063169][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.070633][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.077960][ T5630] bridge_slave_1: entered allmulticast mode [ 101.085684][ T5630] bridge_slave_1: entered promiscuous mode [ 101.119382][ T5631] team0: Port device team_slave_0 added [ 101.138243][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.145625][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.153081][ T5633] bridge_slave_0: entered allmulticast mode [ 101.160886][ T5633] bridge_slave_0: entered promiscuous mode [ 101.171003][ T5632] team0: Port device team_slave_0 added [ 101.178872][ T5631] team0: Port device team_slave_1 added [ 101.200928][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.208339][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.215745][ T5633] bridge_slave_1: entered allmulticast mode [ 101.223329][ T5633] bridge_slave_1: entered promiscuous mode [ 101.232760][ T5632] team0: Port device team_slave_1 added [ 101.265446][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.278696][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.347295][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.354418][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.381074][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.394440][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.401911][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.428214][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.455501][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.466434][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.473826][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.499888][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.512090][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.521686][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.549419][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.563137][ T5630] team0: Port device team_slave_0 added [ 101.571315][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.599276][ T5630] team0: Port device team_slave_1 added [ 101.645735][ T5633] team0: Port device team_slave_0 added [ 101.664689][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.671758][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.697936][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.711013][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.718484][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.744487][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.758030][ T5633] team0: Port device team_slave_1 added [ 101.837238][ T5631] hsr_slave_0: entered promiscuous mode [ 101.844144][ T5631] hsr_slave_1: entered promiscuous mode [ 101.870777][ T5632] hsr_slave_0: entered promiscuous mode [ 101.877320][ T5632] hsr_slave_1: entered promiscuous mode [ 101.883522][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 101.890358][ T5632] Cannot create hsr debugfs directory [ 101.899862][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.906929][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.933009][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.981416][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.988698][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.014721][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.067901][ T5630] hsr_slave_0: entered promiscuous mode [ 102.074556][ T5630] hsr_slave_1: entered promiscuous mode [ 102.081343][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 102.087316][ T5630] Cannot create hsr debugfs directory [ 102.241175][ T5633] hsr_slave_0: entered promiscuous mode [ 102.248165][ T5633] hsr_slave_1: entered promiscuous mode [ 102.254342][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 102.260448][ T5633] Cannot create hsr debugfs directory [ 102.650434][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.663930][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.672529][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.686976][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.696551][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.707442][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.718508][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.731026][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.805475][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.823231][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.832289][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.843350][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.853171][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.864405][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.881645][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.892464][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.003663][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.021538][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.035945][ T5639] Bluetooth: hci0: command tx timeout [ 103.041705][ T5634] Bluetooth: hci1: command tx timeout [ 103.047299][ T4942] Bluetooth: hci2: command tx timeout [ 103.056507][ T5642] Bluetooth: hci3: command tx timeout [ 103.063399][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.074185][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.082702][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.095763][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.104480][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.114451][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.242868][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.254434][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.263522][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.275402][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.283587][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.293446][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.302157][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.313054][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.391586][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.439141][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.478151][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.512537][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.520139][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.540437][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.557118][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.564673][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.596950][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.604384][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.617382][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.624558][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.683507][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.760953][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.783924][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.829010][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.836270][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.866634][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.873864][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.920767][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.991030][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.998309][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.057058][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.064256][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.969140][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.113459][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.115668][ T5642] Bluetooth: hci3: command tx timeout [ 105.127172][ T5634] Bluetooth: hci1: command tx timeout [ 105.127587][ T4942] Bluetooth: hci2: command tx timeout [ 105.132678][ T5634] Bluetooth: hci0: command tx timeout [ 105.192221][ T5631] veth0_vlan: entered promiscuous mode [ 105.272531][ T5631] veth1_vlan: entered promiscuous mode [ 105.321850][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.374207][ T5632] veth0_vlan: entered promiscuous mode [ 105.396954][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.428571][ T5632] veth1_vlan: entered promiscuous mode [ 105.451002][ T5631] veth0_macvtap: entered promiscuous mode [ 105.476198][ T5631] veth1_macvtap: entered promiscuous mode [ 105.537299][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.553530][ T5630] veth0_vlan: entered promiscuous mode [ 105.567728][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.619354][ T5632] veth0_macvtap: entered promiscuous mode [ 105.634285][ T5630] veth1_vlan: entered promiscuous mode [ 105.643599][ T3275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.653677][ T3275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.662959][ T5633] veth0_vlan: entered promiscuous mode [ 105.680710][ T5632] veth1_macvtap: entered promiscuous mode [ 105.688889][ T3275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.700971][ T3275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.720238][ T5633] veth1_vlan: entered promiscuous mode [ 105.801239][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.839484][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.887760][ T773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.900068][ T5630] veth0_macvtap: entered promiscuous mode [ 105.929565][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.930821][ T773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.956321][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.970327][ T773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990437][ T5630] veth1_macvtap: entered promiscuous mode [ 106.006066][ T5633] veth0_macvtap: entered promiscuous mode [ 106.013419][ T773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.085922][ T5633] veth1_macvtap: entered promiscuous mode [ 106.089467][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.100828][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.159286][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.201587][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.241652][ T773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.271283][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.282601][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.298984][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.314539][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.323055][ T773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.332542][ T773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.359031][ T773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.398658][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.428319][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.453961][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.499403][ T3275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.524345][ T3275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.566355][ T3275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.578092][ T3275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.746778][ T5778] sd 0:0:1:0: PR command failed: 1026 [ 106.771089][ T5778] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 106.780264][ T3275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.786883][ T5778] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 106.801249][ T3275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.864395][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.884436][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.942081][ T3275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.974559][ T3275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.021630][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.060232][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.195527][ T4942] Bluetooth: hci2: command tx timeout [ 107.195626][ T5634] Bluetooth: hci0: command tx timeout [ 107.201015][ T4942] Bluetooth: hci3: command tx timeout [ 107.201042][ T4942] Bluetooth: hci1: command tx timeout [ 107.652088][ T5788] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.682402][ T5778] Zero length message leads to an empty skb [ 107.743054][ T5782] mmap: syz.1.2 (5782) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.687977][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.695327][ T5884] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 118.118059][ T5884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.619907][ T5884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.894622][ T5884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.009379][ T5884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.214191][ T5884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.358738][ T5884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.377484][ T5884] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.489697][ T5884] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.601903][ T5884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.629420][ T5884] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.717168][ T5884] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.755478][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.784288][ T5634] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 120.411252][ T5940] netlink: 186 bytes leftover after parsing attributes in process `syz.1.26'. [ 120.955368][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.436398][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.675029][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.844933][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.035245][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.520657][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.756104][ T5642] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.117584][ T5642] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.605500][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.835568][ T5642] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.653377][ T6018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.665844][ T6018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.699125][ T6018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.743798][ T6018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.994995][ T5642] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.666354][ T6066] process 'syz.0.42' launched './file0' with NULL argv: empty string added [ 128.716020][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.722324][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.789931][ T6069] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 128.789931][ T6069] program syz.1.43 not setting count and/or reply_len properly [ 128.795181][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.795021][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.084378][ T6092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.038340][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.053640][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.796722][ T6168] Process accounting resumed [ 138.370901][ T6187] hub 1-0:1.0: USB hub found [ 138.401544][ T6187] hub 1-0:1.0: 1 port detected [ 138.416759][ T6191] FAULT_INJECTION: forcing a failure. [ 138.416759][ T6191] name failslab, interval 1, probability 0, space 0, times 1 [ 138.521828][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 138.521874][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.521903][ T6191] Call Trace: [ 138.521922][ T6191] [ 138.521935][ T6191] dump_stack_lvl+0x100/0x190 [ 138.521993][ T6191] should_fail_ex.cold+0x5/0xa [ 138.522032][ T6191] should_failslab+0xc2/0x120 [ 138.522077][ T6191] kmem_cache_alloc_noprof+0x91/0x6a0 [ 138.522116][ T6191] ? __pfx_map_id_range_down+0x10/0x10 [ 138.522162][ T6191] ? security_inode_alloc+0x3b/0x2c0 [ 138.522203][ T6191] security_inode_alloc+0x3b/0x2c0 [ 138.522239][ T6191] inode_init_always_gfp+0xc77/0xfb0 [ 138.522297][ T6191] alloc_inode+0x8e/0x250 [ 138.522338][ T6191] sock_alloc+0x44/0x280 [ 138.522378][ T6191] ? security_socket_create+0x7f/0x250 [ 138.522436][ T6191] sock_create_lite+0x82/0x120 [ 138.522484][ T6191] __netlink_kernel_create+0xbd/0x750 [ 138.522539][ T6191] ? __pfx___netlink_kernel_create+0x10/0x10 [ 138.522602][ T6191] ? __pfx_genl_pernet_init+0x10/0x10 [ 138.522635][ T6191] genl_pernet_init+0xbd/0x160 [ 138.522668][ T6191] ? __pfx_genl_pernet_init+0x10/0x10 [ 138.522700][ T6191] ? lockdep_init_map_type+0x5c/0x250 [ 138.522752][ T6191] ? __pfx_genl_rcv+0x10/0x10 [ 138.522780][ T6191] ? __pfx_genl_bind+0x10/0x10 [ 138.522809][ T6191] ? __pfx_genl_unbind+0x10/0x10 [ 138.522860][ T6191] ? __pfx_genl_release+0x10/0x10 [ 138.522893][ T6191] ? mutex_init_lockdep+0xf1/0x120 [ 138.522962][ T6191] ops_init+0x1e2/0x5f0 [ 138.523007][ T6191] setup_net+0x118/0x3a0 [ 138.523050][ T6191] ? __pfx_setup_net+0x10/0x10 [ 138.523090][ T6191] ? mutex_init_lockdep+0xf1/0x120 [ 138.523149][ T6191] copy_net_ns+0x46f/0x7c0 [ 138.523198][ T6191] create_new_namespaces+0x3ea/0xac0 [ 138.523267][ T6191] unshare_nsproxy_namespaces+0xf2/0x220 [ 138.523306][ T6191] ksys_unshare+0x438/0xab0 [ 138.523348][ T6191] ? __pfx_ksys_unshare+0x10/0x10 [ 138.523405][ T6191] __x64_sys_unshare+0x31/0x40 [ 138.523444][ T6191] do_syscall_64+0x115/0x840 [ 138.523474][ T6191] ? clear_bhb_loop+0x40/0x90 [ 138.523516][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.523551][ T6191] RIP: 0033:0x7fb6e899de59 [ 138.523589][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.523623][ T6191] RSP: 002b:00007fb6e98cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 138.523667][ T6191] RAX: ffffffffffffffda RBX: 00007fb6e8c26180 RCX: 00007fb6e899de59 [ 138.523690][ T6191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 138.523710][ T6191] RBP: 00007fb6e8a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 138.523730][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.523750][ T6191] R13: 00007fb6e8c26218 R14: 00007fb6e8c26180 R15: 00007ffcf026e868 [ 138.523801][ T6191] [ 138.986808][ T6200] bridge0: port 3(batadv0) entered blocking state [ 139.091893][ T6200] bridge0: port 3(batadv0) entered disabled state [ 139.147834][ T6200] batadv0: entered allmulticast mode [ 139.164085][ T6200] batadv0: entered promiscuous mode [ 139.213186][ T6200] bridge0: port 3(batadv0) entered blocking state [ 139.220957][ T6200] bridge0: port 3(batadv0) entered forwarding state [ 139.519925][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 139.530116][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 142.550832][ T6258] netlink: 338 bytes leftover after parsing attributes in process `syz.2.75'. [ 142.629199][ T30] audit: type=1806 audit(1784009049.088:2): xattr="." res=0 [ 142.642001][ T6258] netlink: 338 bytes leftover after parsing attributes in process `syz.2.75'. [ 142.693753][ T6225] kexec: Could not allocate control_code_buffer [ 143.720133][ T6253] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 146.902779][ T6321] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 147.018369][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 147.864455][ T6345] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 149.022944][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 149.378013][ T6370] pim6reg: entered allmulticast mode [ 150.195311][ T6389] netlink: 186 bytes leftover after parsing attributes in process `syz.0.97'. [ 150.213727][ T6392] FAULT_INJECTION: forcing a failure. [ 150.213727][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 150.268095][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.2.98 Not tainted syzkaller #0 PREEMPT(full) [ 150.268141][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.268161][ T6392] Call Trace: [ 150.268171][ T6392] [ 150.268183][ T6392] dump_stack_lvl+0x100/0x190 [ 150.268225][ T6392] should_fail_ex.cold+0x5/0xa [ 150.268283][ T6392] should_failslab+0xc2/0x120 [ 150.268329][ T6392] kmem_cache_alloc_noprof+0x91/0x6a0 [ 150.268370][ T6392] ? create_new_namespaces+0x30/0xac0 [ 150.268433][ T6392] create_new_namespaces+0x30/0xac0 [ 150.268489][ T6392] ? bpf_lsm_capable+0x9/0x10 [ 150.268522][ T6392] ? security_capable+0x80/0x260 [ 150.268580][ T6392] unshare_nsproxy_namespaces+0xf2/0x220 [ 150.268619][ T6392] ksys_unshare+0x438/0xab0 [ 150.268662][ T6392] ? __pfx_ksys_unshare+0x10/0x10 [ 150.268717][ T6392] __x64_sys_unshare+0x31/0x40 [ 150.268757][ T6392] do_syscall_64+0x115/0x840 [ 150.268787][ T6392] ? clear_bhb_loop+0x40/0x90 [ 150.268836][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.268873][ T6392] RIP: 0033:0x7fb6e899de59 [ 150.268900][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.268933][ T6392] RSP: 002b:00007fb6e9911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 150.268966][ T6392] RAX: ffffffffffffffda RBX: 00007fb6e8c25fa0 RCX: 00007fb6e899de59 [ 150.268989][ T6392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 150.269010][ T6392] RBP: 00007fb6e8a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 150.269030][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.269051][ T6392] R13: 00007fb6e8c26038 R14: 00007fb6e8c25fa0 R15: 00007ffcf026e868 [ 150.269093][ T6392] [ 151.233963][ T6404] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 152.025192][ T6404] random: crng reseeded on system resumption [ 152.720709][ T6424] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0f01a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 152.737137][ T6424] Call Trace: [ 152.740438][ T6424] [ 152.743480][ T6424] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 152.750200][ T6424] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 152.756738][ T6424] mce_cpu_restart+0xd5/0x1f0 [ 152.761444][ T6424] ? __pfx_mce_cpu_restart+0x10/0x10 [ 152.766850][ T6424] smp_call_function_many_cond+0x139d/0x16c0 [ 152.772872][ T6424] ? __pfx_mce_cpu_restart+0x10/0x10 [ 152.778192][ T6424] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 152.784116][ T6424] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 152.790470][ T6424] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 152.796494][ T6424] ? __timer_delete_sync+0x151/0x1c0 [ 152.801806][ T6424] ? __pfx_mce_cpu_restart+0x10/0x10 [ 152.807117][ T6424] on_each_cpu_cond_mask+0x40/0x90 [ 152.812264][ T6424] set_bank+0x240/0x3a0 [ 152.816435][ T6424] ? __pfx_set_bank+0x10/0x10 [ 152.821128][ T6424] ? find_held_lock+0x2b/0x80 [ 152.825830][ T6424] ? sysfs_file_kobj+0xe4/0x290 [ 152.830723][ T6424] ? sysfs_file_kobj+0xe4/0x290 [ 152.835621][ T6424] ? __pfx_set_bank+0x10/0x10 [ 152.840433][ T6424] dev_attr_store+0x58/0x80 [ 152.844977][ T6424] ? __pfx_dev_attr_store+0x10/0x10 [ 152.850213][ T6424] sysfs_kf_write+0xf2/0x150 [ 152.854865][ T6424] kernfs_fop_write_iter+0x3e0/0x5f0 [ 152.860186][ T6424] ? __pfx_sysfs_kf_write+0x10/0x10 [ 152.865440][ T6424] vfs_write+0x6ac/0x1050 [ 152.869848][ T6424] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 152.875687][ T6424] ? __pfx_vfs_write+0x10/0x10 [ 152.880531][ T6424] ksys_write+0x12a/0x250 [ 152.884914][ T6424] ? __pfx_ksys_write+0x10/0x10 [ 152.889819][ T6424] do_syscall_64+0x115/0x840 [ 152.894433][ T6424] ? clear_bhb_loop+0x40/0x90 [ 152.899152][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.905153][ T6424] RIP: 0033:0x7f4b85f9de59 [ 152.909584][ T6424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.929303][ T6424] RSP: 002b:00007f4b86f28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.937824][ T6424] RAX: ffffffffffffffda RBX: 00007f4b86225fa0 RCX: 00007f4b85f9de59 [ 152.945812][ T6424] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 152.953795][ T6424] RBP: 00007f4b86033e6f R08: 0000000000000000 R09: 0000000000000000 [ 152.961873][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.969866][ T6424] R13: 00007f4b86226038 R14: 00007f4b86225fa0 R15: 00007fff94b276a8 [ 152.977875][ T6424] [ 159.337989][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'. [ 160.804015][ T6588] input: f as /devices/virtual/input/input5 [ 161.188569][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 162.891750][ T5634] Bluetooth: hci2: unexpected event 0x03 length: 123 > 11 [ 164.583541][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'. [ 167.731478][ T6709] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 167.817577][ T6709] input: f as /devices/virtual/input/input6 [ 168.491648][ T6714] Process accounting paused [ 170.038232][ T6741] netlink: 186 bytes leftover after parsing attributes in process `syz.1.166'. [ 172.272808][ T6787] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5632] was attempted by "_>eUWI껵\x09zWX\x0aS,hqG3kC u?40yMh' #.9mLj]hQVJ`&vyuUn!Y܇V \x0dֈG-Ĕk9\x0d\x22!P9]s|%bI\x09%r=P'~Cl]k|x֮0w<&AlP\x22ε}!IH 8{8<.iz|>!}Bm p_fS$gEny,Z,ug.ǛU;+@OW0Ɵ[شQ'Hξ{pYZLn:mkUZoi/4Ze\x22,nN0\x0a5!{6ʦ*;e0d.KwyJ4q'[SP\x5cd8)_u#h(VY̘'5jϧ%\x0b~CG'%M [ 176.509200][ T6868] dump_stack_lvl+0x100/0x190 [ 176.509248][ T6868] should_fail_ex.cold+0x5/0xa [ 176.509287][ T6868] should_failslab+0xc2/0x120 [ 176.509332][ T6868] __kmalloc_cache_noprof+0x91/0x6c0 [ 176.509396][ T6868] ? do_raw_spin_lock+0x128/0x260 [ 176.509429][ T6868] ? alloc_fdtable+0xbd/0x2d0 [ 176.509483][ T6868] alloc_fdtable+0xbd/0x2d0 [ 176.509533][ T6868] dup_fd+0x995/0xd10 [ 176.509590][ T6868] ? apparmor_task_alloc+0x2c1/0x3b0 [ 176.509649][ T6868] copy_process+0x2c94/0x8030 [ 176.509709][ T6868] ? __pfx_copy_process+0x10/0x10 [ 176.509746][ T6868] ? futex_wake+0x4ea/0x5e0 [ 176.509801][ T6868] kernel_clone+0x176/0x9d0 [ 176.509841][ T6868] ? __pfx_kernel_clone+0x10/0x10 [ 176.509899][ T6868] __do_sys_clone+0xd9/0x120 [ 176.509937][ T6868] ? __pfx___do_sys_clone+0x10/0x10 [ 176.509972][ T6868] ? do_raw_spin_lock+0x128/0x260 [ 176.510037][ T6868] do_syscall_64+0x115/0x840 [ 176.510067][ T6868] ? clear_bhb_loop+0x40/0x90 [ 176.510108][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.510142][ T6868] RIP: 0033:0x7fb6e899de59 [ 176.510170][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.510201][ T6868] RSP: 002b:00007fb6e98cefd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 176.510233][ T6868] RAX: ffffffffffffffda RBX: 00007fb6e8c26180 RCX: 00007fb6e899de59 [ 176.510255][ T6868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.510275][ T6868] RBP: 00007fb6e8a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 176.510296][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.510316][ T6868] R13: 00007fb6e8c26218 R14: 00007fb6e8c26180 R15: 00007ffcf026e868 [ 176.510360][ T6868] [ 178.352221][ T6899] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3876674917.824609428.3737196078), cmd(7) [ 179.343368][ T6896] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 180.919899][ T6944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.201'. getty: ttyS0: read error: Resource temporarily unavailable [ 184.471696][ T7004] netlink: 186 bytes leftover after parsing attributes in process `syz.3.211'. [ 185.369396][ T7012] FAULT_INJECTION: forcing a failure. [ 185.369396][ T7012] name fail_futex, interval 1, probability 0, space 0, times 1 [ 185.421035][ T7012] CPU: 1 UID: 0 PID: 7012 Comm: syz.2.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.421088][ T7012] Tainted: [L]=SOFTLOCKUP [ 185.421100][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.421120][ T7012] Call Trace: [ 185.421131][ T7012] [ 185.421144][ T7012] dump_stack_lvl+0x100/0x190 [ 185.421188][ T7012] should_fail_ex.cold+0x5/0xa [ 185.421229][ T7012] get_futex_key+0x1d2/0x14f0 [ 185.421289][ T7012] ? __pfx_get_futex_key+0x10/0x10 [ 185.421340][ T7012] ? __pfx_futex_hash+0x10/0x10 [ 185.421394][ T7012] ? get_pid_task+0xfc/0x250 [ 185.421432][ T7012] ? get_pid_task+0xfc/0x250 [ 185.421477][ T7012] futex_wake+0xf4/0x5e0 [ 185.421514][ T7012] ? futex_wait+0x11e/0x370 [ 185.421559][ T7012] ? __pfx_futex_wake+0x10/0x10 [ 185.421605][ T7012] ? __lock_acquire+0x49f/0x1a40 [ 185.421662][ T7012] ? vfs_write+0x15d/0x1050 [ 185.421721][ T7012] do_futex+0x2b2/0x440 [ 185.421756][ T7012] ? __pfx_do_futex+0x10/0x10 [ 185.421800][ T7012] __x64_sys_futex+0x34f/0x4d0 [ 185.421838][ T7012] ? fput+0x79/0x100 [ 185.421871][ T7012] ? __pfx___x64_sys_futex+0x10/0x10 [ 185.421904][ T7012] ? ksys_write+0x1ac/0x250 [ 185.421953][ T7012] ? __pfx_ksys_write+0x10/0x10 [ 185.422014][ T7012] do_syscall_64+0x115/0x840 [ 185.422044][ T7012] ? clear_bhb_loop+0x40/0x90 [ 185.422084][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.422120][ T7012] RIP: 0033:0x7fb6e899de59 [ 185.422149][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.422182][ T7012] RSP: 002b:00007fb6e99110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.422214][ T7012] RAX: ffffffffffffffda RBX: 00007fb6e8c25fa8 RCX: 00007fb6e899de59 [ 185.422237][ T7012] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb6e8c25fac [ 185.422258][ T7012] RBP: 00007fb6e8c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 185.422279][ T7012] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 185.422299][ T7012] R13: 00007fb6e8c26038 R14: 00007ffcf026e780 R15: 00007ffcf026e868 [ 185.422343][ T7012] syzkaller syzkaller login: [ 187.032527][ T7054] FAULT_INJECTION: forcing a failure. [ 187.032527][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 187.109296][ T7054] CPU: 1 UID: 0 PID: 7054 Comm: syz.1.223 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.109343][ T7054] Tainted: [L]=SOFTLOCKUP [ 187.109351][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.109364][ T7054] Call Trace: [ 187.109372][ T7054] [ 187.109381][ T7054] dump_stack_lvl+0x100/0x190 [ 187.109418][ T7054] should_fail_ex.cold+0x5/0xa [ 187.109447][ T7054] should_failslab+0xc2/0x120 [ 187.109478][ T7054] kmem_cache_alloc_noprof+0x91/0x6a0 [ 187.109507][ T7054] ? mas_preallocate+0x1105/0x14a0 [ 187.109541][ T7054] mas_preallocate+0x1105/0x14a0 [ 187.109576][ T7054] ? __pfx_mas_preallocate+0x10/0x10 [ 187.109613][ T7054] ? anon_vma_name+0x5a/0x250 [ 187.109653][ T7054] __split_vma+0x33d/0xda0 [ 187.109695][ T7054] ? __pfx___split_vma+0x10/0x10 [ 187.109731][ T7054] ? __pfx_stack_trace_save+0x10/0x10 [ 187.109761][ T7054] ? crypto_sha256_init+0x16/0x20 [ 187.109800][ T7054] ? kasan_save_stack+0x3f/0x50 [ 187.109825][ T7054] ? kasan_save_stack+0x30/0x50 [ 187.109850][ T7054] ? kasan_save_track+0x14/0x30 [ 187.109876][ T7054] ? __kasan_kmalloc+0xaa/0xb0 [ 187.109900][ T7054] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 187.109944][ T7054] vms_gather_munmap_vmas+0x1d2/0x1720 [ 187.109986][ T7054] ? mtree_range_walk+0x72b/0xb70 [ 187.110024][ T7054] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 187.110073][ T7054] ? mas_walk+0x6ef/0x9b0 [ 187.110103][ T7054] __mmap_region+0x4a7/0x2db0 [ 187.110142][ T7054] ? integrity_audit_message+0x426/0x4f0 [ 187.110178][ T7054] ? __mutex_unlock_slowpath+0x35d/0x930 [ 187.110218][ T7054] ? __pfx___mmap_region+0x10/0x10 [ 187.110258][ T7054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.110318][ T7054] ? __pfx_ima_add_template_entry+0x10/0x10 [ 187.110391][ T7054] ? ima_calc_field_array_hash+0x378/0x440 [ 187.110453][ T7054] ? process_measurement+0x109c/0x2350 [ 187.110477][ T7054] ? process_measurement+0x109c/0x2350 [ 187.110506][ T7054] ? __mutex_unlock_slowpath+0x35d/0x930 [ 187.110551][ T7054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.110593][ T7054] ? process_measurement+0x10a9/0x2350 [ 187.110616][ T7054] ? rcu_is_watching+0x12/0xc0 [ 187.110685][ T7054] mmap_region+0x527/0x620 [ 187.110712][ T7054] ? __pfx_mmap_region+0x10/0x10 [ 187.110736][ T7054] ? shmem_get_unmapped_area+0x141/0x960 [ 187.110774][ T7054] ? mtree_load+0x311/0xa90 [ 187.110820][ T7054] ? cap_mmap_addr+0x4b/0x120 [ 187.110857][ T7054] ? bpf_lsm_mmap_addr+0x9/0x30 [ 187.110892][ T7054] ? security_mmap_addr+0x71/0x1e0 [ 187.110924][ T7054] ? __get_unmapped_area+0x255/0x3e0 [ 187.110958][ T7054] do_mmap+0xc63/0x12f0 [ 187.110994][ T7054] ? __pfx_do_mmap+0x10/0x10 [ 187.111024][ T7054] ? __pfx_down_write_killable+0x10/0x10 [ 187.111056][ T7054] __do_sys_remap_file_pages+0x8d4/0xa10 [ 187.111100][ T7054] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 187.111134][ T7054] ? __x64_sys_futex+0x34f/0x4d0 [ 187.111156][ T7054] ? __x64_sys_futex+0x358/0x4d0 [ 187.111183][ T7054] ? xfd_validate_state+0x129/0x190 [ 187.111219][ T7054] do_syscall_64+0x115/0x840 [ 187.111239][ T7054] ? clear_bhb_loop+0x40/0x90 [ 187.111268][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.111292][ T7054] RIP: 0033:0x7f16e6f9de59 [ 187.111312][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.111335][ T7054] RSP: 002b:00007f16e7db3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 187.111357][ T7054] RAX: ffffffffffffffda RBX: 00007f16e7226090 RCX: 00007f16e6f9de59 [ 187.111373][ T7054] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 187.111387][ T7054] RBP: 00007f16e7033e6f R08: 0000000000000004 R09: 0000000000000000 [ 187.111401][ T7054] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 187.111435][ T7054] R13: 00007f16e7226128 R14: 00007f16e7226090 R15: 00007ffd01edcd58 [ 187.111478][ T7054] [ 188.631554][ T7059] netlink: 186 bytes leftover after parsing attributes in process `syz.0.224'. [ 192.540520][ T7104] netlink: 186 bytes leftover after parsing attributes in process `syz.3.235'. [ 194.477111][ T7124] smpboot: CPU 1 is now offline [ 194.599161][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606331][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.463127][ T7129] syz.3.239 (7129) used greatest stack depth: 19768 bytes left [ 197.900302][ T7159] bridge0: port 3(dummy0) entered blocking state [ 197.932640][ T7159] bridge0: port 3(dummy0) entered disabled state [ 197.969179][ T7159] dummy0: entered allmulticast mode [ 198.013960][ T7159] dummy0: entered promiscuous mode [ 198.038795][ T7159] bridge0: port 3(dummy0) entered blocking state [ 198.045338][ T7159] bridge0: port 3(dummy0) entered forwarding state [ 198.698988][ T7165] bond0: invalid ARP target specified [ 198.876359][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'. [ 199.264265][ T7164] Process accounting resumed [ 199.553363][ T7179] netlink: 'syz.0.251': attribute type 2 has an invalid length. [ 200.178663][ T7188] zram: Removed device: zram0 [ 202.957944][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.970684][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.980098][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.989567][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.000888][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.035741][ T5642] Bluetooth: hci4: command tx timeout [ 206.633621][ T7236] ima: policy update failed [ 206.657228][ T30] audit: type=1802 audit(3225407.240:3): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.261" res=0 errno=0 [ 207.114977][ T5642] Bluetooth: hci4: command tx timeout [ 207.686472][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.733211][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.778235][ T7211] bridge_slave_0: entered allmulticast mode [ 207.819332][ T7211] bridge_slave_0: entered promiscuous mode [ 207.892854][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.946459][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.998566][ T7211] bridge_slave_1: entered allmulticast mode [ 208.062221][ T7211] bridge_slave_1: entered promiscuous mode [ 208.549122][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.637388][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.099259][ T7266] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 209.195479][ T5642] Bluetooth: hci4: command tx timeout [ 209.250542][ T7211] team0: Port device team_slave_0 added [ 209.296789][ T7211] team0: Port device team_slave_1 added [ 209.369700][ T7266] File: /dev/nullb0 PID: 7266 Comm: syz.3.263 [ 209.948167][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.997803][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.145650][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.415455][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.467113][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.616361][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.754514][ T7278] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 210.968248][ T7211] hsr_slave_0: entered promiscuous mode [ 211.021818][ T7211] hsr_slave_1: entered promiscuous mode [ 211.062014][ T7211] debugfs: 'hsr0' already exists in 'hsr' [ 211.108264][ T7211] Cannot create hsr debugfs directory [ 211.116749][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'. [ 211.274949][ T5642] Bluetooth: hci4: command tx timeout [ 213.579174][ T770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.761141][ T7211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.896761][ T7211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.940839][ T7211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.035367][ T7211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.080579][ T7211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.161823][ T7211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.220784][ T7211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.296607][ T7211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.467566][ T770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.962022][ T770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.456084][ T7307] HSR: entered promiscuous mode [ 215.707762][ T770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.980487][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.346810][ T7211] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.497960][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.505158][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.615081][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.622275][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.986989][ T770] bridge_slave_1: left allmulticast mode [ 217.018739][ T770] bridge_slave_1: left promiscuous mode [ 217.054559][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.330626][ T770] bridge_slave_0: left allmulticast mode [ 217.403053][ T770] bridge_slave_0: left promiscuous mode [ 217.434257][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.470714][ T30] audit: type=1400 audit(3225419.040:4): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7336 comm="syz.3.275" [ 218.545928][ T770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.582190][ T770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.607718][ T770] bond0 (unregistering): Released all slaves [ 218.639206][ T7322] netlink: 346 bytes leftover after parsing attributes in process `syz.0.273'. [ 218.690955][ T7338] &#$@\]\-: entered promiscuous mode [ 218.727724][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.397967][ T770] hsr_slave_0: left promiscuous mode [ 220.473006][ T770] hsr_slave_1: left promiscuous mode [ 220.517133][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.607810][ T770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.712906][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.777577][ T770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.012375][ T770] veth1_macvtap: left promiscuous mode [ 221.061998][ T770] veth0_macvtap: left promiscuous mode [ 221.106740][ T770] veth1_vlan: left promiscuous mode [ 221.150244][ T770] veth0_vlan: left promiscuous mode [ 221.165647][ T7387] openvswitch: netlink: IP tunnel dst address not specified [ 221.306535][ T7390] netlink: 'syz.0.281': attribute type 4 has an invalid length. [ 222.247615][ T770] team0 (unregistering): Port device team_slave_1 removed [ 222.287248][ T770] team0 (unregistering): Port device team_slave_0 removed [ 222.592304][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 222.682788][ T7389] FAULT_INJECTION: forcing a failure. [ 222.682788][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 222.912273][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.2.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.912311][ T7389] Tainted: [L]=SOFTLOCKUP [ 222.912319][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.912333][ T7389] Call Trace: [ 222.912341][ T7389] [ 222.912350][ T7389] dump_stack_lvl+0x100/0x190 [ 222.912381][ T7389] should_fail_ex.cold+0x5/0xa [ 222.912407][ T7389] should_failslab+0xc2/0x120 [ 222.912439][ T7389] kmem_cache_alloc_noprof+0x91/0x6a0 [ 222.912466][ T7389] ? __proc_create+0xc1/0x8f0 [ 222.912504][ T7389] ? __proc_create+0xc1/0x8f0 [ 222.912541][ T7389] ? __proc_create+0x247/0x8f0 [ 222.912584][ T7389] __proc_create+0x247/0x8f0 [ 222.912623][ T7389] ? __pfx___proc_create+0x10/0x10 [ 222.912662][ T7389] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 222.912685][ T7389] ? bpf_lsm_socket_post_create+0x9/0x10 [ 222.912719][ T7389] ? find_held_lock+0x2b/0x80 [ 222.912746][ T7389] ? inet_ctl_sock_create+0x1ab/0x230 [ 222.912770][ T7389] ? inet_ctl_sock_create+0x1ab/0x230 [ 222.912796][ T7389] proc_create_reg+0x75/0x170 [ 222.912823][ T7389] proc_create_net_data+0x8e/0x1c0 [ 222.912863][ T7389] ? __pfx_proc_create_net_data+0x10/0x10 [ 222.912904][ T7389] ? __asan_memcpy+0x3c/0x60 [ 222.912930][ T7389] ? __pfx_ping_v6_proc_init_net+0x10/0x10 [ 222.912956][ T7389] ping_v6_proc_init_net+0x53/0x80 [ 222.912980][ T7389] ops_init+0x1e2/0x5f0 [ 222.913012][ T7389] setup_net+0x118/0x3a0 [ 222.913042][ T7389] ? __pfx_setup_net+0x10/0x10 [ 222.913071][ T7389] ? mutex_init_lockdep+0xf1/0x120 [ 222.913114][ T7389] copy_net_ns+0x46f/0x7c0 [ 222.913149][ T7389] create_new_namespaces+0x3ea/0xac0 [ 222.913202][ T7389] unshare_nsproxy_namespaces+0xf2/0x220 [ 222.913229][ T7389] ksys_unshare+0x438/0xab0 [ 222.913260][ T7389] ? __pfx_ksys_unshare+0x10/0x10 [ 222.913299][ T7389] __x64_sys_unshare+0x31/0x40 [ 222.913327][ T7389] do_syscall_64+0x115/0x840 [ 222.913348][ T7389] ? clear_bhb_loop+0x40/0x90 [ 222.913377][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.913402][ T7389] RIP: 0033:0x7fb6e899de59 [ 222.913421][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.913444][ T7389] RSP: 002b:00007fb6e9911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 222.913467][ T7389] RAX: ffffffffffffffda RBX: 00007fb6e8c25fa0 RCX: 00007fb6e899de59 [ 222.913482][ T7389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 222.913497][ T7389] RBP: 00007fb6e8a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 222.913511][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.913525][ T7389] R13: 00007fb6e8c26038 R14: 00007fb6e8c25fa0 R15: 00007ffcf026e868 [ 222.913555][ T7389] [ 224.233767][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.933299][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.553559][ T7211] veth0_vlan: entered promiscuous mode [ 228.028685][ T7211] veth1_vlan: entered promiscuous mode [ 228.216712][ T7211] veth0_macvtap: entered promiscuous mode [ 228.753860][ T7211] veth1_macvtap: entered promiscuous mode [ 229.400378][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.728176][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.900773][ T770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.967253][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.011226][ T770] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.088204][ T770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.133689][ T7490] Process accounting paused [ 230.150581][ T770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.047967][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.117564][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.481173][ T6579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.519470][ T6579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.612781][ T7533] netlink: 330 bytes leftover after parsing attributes in process `syz.4.257'. [ 235.638919][ T7584] netlink: 93 bytes leftover after parsing attributes in process `syz.4.306'. [ 235.808457][ T7576] netlink: 93 bytes leftover after parsing attributes in process `syz.4.306'. [ 236.550166][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 236.623671][ T7607] syz.4.310 uses obsolete (PF_INET,SOCK_PACKET) [ 236.763156][ T7603] : entered promiscuous mode [ 238.068516][ T7595] ubi0: attaching mtd0 [ 238.503739][ T7595] ubi0: scanning is finished [ 238.724938][ T7595] ubi0: empty MTD device detected [ 239.493138][ T7595] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 241.693868][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.319'. [ 242.562368][ T7681] dyndbg: expected <4096 bytes into control [ 242.639890][ T7681] FAULT_INJECTION: forcing a failure. [ 242.639890][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 242.749381][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.2.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.749419][ T7681] Tainted: [L]=SOFTLOCKUP [ 242.749427][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.749448][ T7681] Call Trace: [ 242.749456][ T7681] [ 242.749465][ T7681] dump_stack_lvl+0x100/0x190 [ 242.749503][ T7681] should_fail_ex.cold+0x5/0xa [ 242.749529][ T7681] should_failslab+0xc2/0x120 [ 242.749561][ T7681] __kmalloc_noprof+0xfc/0x820 [ 242.749588][ T7681] ? __fput+0x68d/0xb50 [ 242.749611][ T7681] ? inotify_handle_inode_event+0x1a5/0x6a0 [ 242.749649][ T7681] inotify_handle_inode_event+0x1a5/0x6a0 [ 242.749687][ T7681] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 242.749719][ T7681] fsnotify_handle_inode_event.isra.0+0x1e3/0x480 [ 242.749765][ T7681] fsnotify+0x1b45/0x3240 [ 242.749799][ T7681] ? __pfx_fsnotify+0x10/0x10 [ 242.749834][ T7681] __fsnotify_parent+0x74f/0xd00 [ 242.749864][ T7681] ? __pfx___fsnotify_parent+0x10/0x10 [ 242.749894][ T7681] ? __pfx___might_resched+0x10/0x10 [ 242.749934][ T7681] ? __fput+0x30d/0xb50 [ 242.749957][ T7681] __fput+0x30d/0xb50 [ 242.749988][ T7681] task_work_run+0x150/0x240 [ 242.750023][ T7681] ? __pfx_task_work_run+0x10/0x10 [ 242.750063][ T7681] exit_to_user_mode_loop+0x1d8/0x6f0 [ 242.750101][ T7681] ? rcu_is_watching+0x12/0xc0 [ 242.750129][ T7681] do_syscall_64+0x652/0x840 [ 242.750149][ T7681] ? clear_bhb_loop+0x40/0x90 [ 242.750178][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.750202][ T7681] RIP: 0033:0x7fb6e899de59 [ 242.750222][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.750244][ T7681] RSP: 002b:00007fb6e9911028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 242.750266][ T7681] RAX: 0000000000000000 RBX: 00007fb6e8c25fa0 RCX: 00007fb6e899de59 [ 242.750280][ T7681] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 242.750294][ T7681] RBP: 00007fb6e8a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 242.750308][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.750322][ T7681] R13: 00007fb6e8c26038 R14: 00007fb6e8c25fa0 R15: 00007ffcf026e868 [ 242.750351][ T7681] [ 243.576862][ T7690] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 244.264287][ T7690] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 244.328486][ T7690] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 244.392834][ T7690] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 244.447492][ T7690] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 244.503143][ T7690] page dumped because: unmovable page [ 244.526666][ T7690] page_owner info is not present (never set?) [ 251.368691][ T5642] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 251.606785][ T5634] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 251.617027][ T5634] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 251.626772][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.626809][ T5634] Tainted: [L]=SOFTLOCKUP [ 251.626817][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.626842][ T5634] Workqueue: hci2 hci_rx_work [ 251.626883][ T5634] Call Trace: [ 251.626891][ T5634] [ 251.626900][ T5634] dump_stack_lvl+0x100/0x190 [ 251.626929][ T5634] sysfs_warn_dup.cold+0x1c/0x28 [ 251.626966][ T5634] sysfs_create_dir_ns+0x24b/0x2b0 [ 251.626999][ T5634] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 251.627030][ T5634] ? find_held_lock+0x2b/0x80 [ 251.627057][ T5634] ? kobject_add_internal+0x25f/0x930 [ 251.627087][ T5634] ? kobject_add_internal+0x25f/0x930 [ 251.627119][ T5634] ? do_raw_spin_unlock+0x145/0x1e0 [ 251.627145][ T5634] kobject_add_internal+0x2c8/0x930 [ 251.627179][ T5634] kobject_add+0x16a/0x1e0 [ 251.627208][ T5634] ? __pfx_kobject_add+0x10/0x10 [ 251.627237][ T5634] ? class_to_subsys+0x10f/0x150 [ 251.627276][ T5634] ? kobject_put+0xb9/0x640 [ 251.627302][ T5634] ? _raw_spin_unlock+0x28/0x50 [ 251.627342][ T5634] device_add+0x294/0x1970 [ 251.627376][ T5634] ? __pfx_dev_set_name+0x10/0x10 [ 251.627415][ T5634] ? __pfx_device_add+0x10/0x10 [ 251.627449][ T5634] ? mgmt_send_event_skb+0x2fb/0x460 [ 251.627495][ T5634] hci_conn_add_sysfs+0x1a3/0x260 [ 251.627523][ T5634] le_conn_complete_evt+0x11eb/0x1f60 [ 251.627569][ T5634] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 251.627606][ T5634] ? __pfx_bt_warn+0x10/0x10 [ 251.627625][ T5634] ? hci_event_packet+0x186/0xcd0 [ 251.627675][ T5634] hci_le_conn_complete_evt+0x23c/0x3a0 [ 251.627716][ T5634] ? skb_pull_data+0x15f/0x1e0 [ 251.627755][ T5634] hci_le_meta_evt+0x34a/0x5f0 [ 251.627778][ T5634] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 251.627821][ T5634] hci_event_packet+0x51c/0xcd0 [ 251.627860][ T5634] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 251.627885][ T5634] ? __pfx_hci_event_packet+0x10/0x10 [ 251.627926][ T5634] ? kcov_remote_start+0x384/0x670 [ 251.627957][ T5634] ? lockdep_hardirqs_on+0x78/0x100 [ 251.628002][ T5634] hci_rx_work+0x451/0xfc0 [ 251.628044][ T5634] process_one_work+0xa23/0x1940 [ 251.628089][ T5634] ? __pfx_process_one_work+0x10/0x10 [ 251.628131][ T5634] ? __pfx_hci_rx_work+0x10/0x10 [ 251.628171][ T5634] worker_thread+0x5ef/0xe50 [ 251.628214][ T5634] ? kthread+0x13a/0x450 [ 251.628242][ T5634] ? __pfx_worker_thread+0x10/0x10 [ 251.628273][ T5634] kthread+0x370/0x450 [ 251.628301][ T5634] ? __pfx_kthread+0x10/0x10 [ 251.628333][ T5634] ret_from_fork+0x72b/0xd50 [ 251.628361][ T5634] ? __pfx_ret_from_fork+0x10/0x10 [ 251.628389][ T5634] ? __switch_to+0x800/0x10f0 [ 251.628423][ T5634] ? __switch_to_asm+0x39/0x70 [ 251.628455][ T5634] ? __pfx_kthread+0x10/0x10 [ 251.628486][ T5634] ret_from_fork_asm+0x1a/0x30 [ 251.628532][ T5634] [ 251.628560][ T5634] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 251.950081][ T5634] Bluetooth: hci2: failed to register connection device [ 253.439825][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.346864][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.343'. [ 255.522645][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.583113][ T7842] veth1_macvtap: left promiscuous mode [ 255.704406][ T7842] macsec0: entered promiscuous mode [ 255.803478][ T7842] macsec0: entered allmulticast mode [ 255.916950][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.928035][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.494821][ T7841] NFSD: Failed to start, no listeners configured. [ 257.594847][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.675499][ T5642] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.072168][ T30] audit: type=1800 audit(4294967298.640:5): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.351" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 261.731854][ T7935] nvme_fabrics: missing parameter 'transport=%s' [ 261.858385][ T7935] nvme_fabrics: missing parameter 'nqn=%s' [ 263.011553][ T7926] Process accounting resumed [ 268.608742][ T8007] netlink: 186 bytes leftover after parsing attributes in process `syz.2.365'. [ 271.996220][ T8049] FAULT_INJECTION: forcing a failure. [ 271.996220][ T8049] name failslab, interval 1, probability 0, space 0, times 0 [ 272.098387][ T8050] [U] ^R [ 272.116928][ T8047] FAULT_INJECTION: forcing a failure. [ 272.116928][ T8047] name failslab, interval 1, probability 0, space 0, times 0 [ 272.209764][ T8049] CPU: 0 UID: 0 PID: 8049 Comm: syz.3.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.209807][ T8049] Tainted: [L]=SOFTLOCKUP [ 272.209815][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.209829][ T8049] Call Trace: [ 272.209836][ T8049] [ 272.209845][ T8049] dump_stack_lvl+0x100/0x190 [ 272.209881][ T8049] should_fail_ex.cold+0x5/0xa [ 272.209907][ T8049] should_failslab+0xc2/0x120 [ 272.209937][ T8049] __kmalloc_cache_noprof+0x91/0x6c0 [ 272.209973][ T8049] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 272.210004][ T8049] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 272.210035][ T8049] ? loopback_open+0x145/0x1370 [ 272.210067][ T8049] loopback_open+0x145/0x1370 [ 272.210100][ T8049] snd_pcm_open_substream+0xa76/0x1850 [ 272.210127][ T8049] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 272.210153][ T8049] ? snd_pcm_oss_open+0x5e5/0x1390 [ 272.210191][ T8049] snd_pcm_oss_open+0x735/0x1390 [ 272.210235][ T8049] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 272.210269][ T8049] ? __lock_acquire+0x49f/0x1a40 [ 272.210304][ T8049] ? __pfx_default_wake_function+0x10/0x10 [ 272.210339][ T8049] ? do_raw_spin_lock+0x128/0x260 [ 272.210363][ T8049] ? soundcore_open+0x231/0x5a0 [ 272.210396][ T8049] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 272.210430][ T8049] soundcore_open+0x2e3/0x5a0 [ 272.210462][ T8049] ? __pfx_soundcore_open+0x10/0x10 [ 272.210492][ T8049] chrdev_open+0x234/0x6a0 [ 272.210512][ T8049] ? __pfx_apparmor_file_open+0x10/0x10 [ 272.210535][ T8049] ? __pfx_chrdev_open+0x10/0x10 [ 272.210574][ T8049] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 272.210605][ T8049] do_dentry_open+0x6ab/0x14d0 [ 272.210641][ T8049] ? __pfx_chrdev_open+0x10/0x10 [ 272.210684][ T8049] vfs_open+0x82/0x3f0 [ 272.210714][ T8049] path_openat+0x2873/0x4280 [ 272.210764][ T8049] ? __pfx_path_openat+0x10/0x10 [ 272.210814][ T8049] do_file_open+0x20e/0x430 [ 272.210853][ T8049] ? __pfx_do_file_open+0x10/0x10 [ 272.210917][ T8049] ? alloc_fd+0x471/0x7a0 [ 272.210956][ T8049] ? do_getname+0x191/0x390 [ 272.210984][ T8049] do_sys_openat2+0x10f/0x1e0 [ 272.211012][ T8049] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.211041][ T8049] ? __fget_files+0x21f/0x3d0 [ 272.211080][ T8049] __x64_sys_openat+0x12d/0x210 [ 272.211108][ T8049] ? __pfx___x64_sys_openat+0x10/0x10 [ 272.211147][ T8049] do_syscall_64+0x115/0x840 [ 272.211169][ T8049] ? clear_bhb_loop+0x40/0x90 [ 272.211198][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.211223][ T8049] RIP: 0033:0x7f3a6c99de59 [ 272.211246][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.211268][ T8049] RSP: 002b:00007f3a6d8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.211289][ T8049] RAX: ffffffffffffffda RBX: 00007f3a6cc26180 RCX: 00007f3a6c99de59 [ 272.211304][ T8049] RDX: 0000000000080e42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 272.211318][ T8049] RBP: 00007f3a6ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 272.211331][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.211344][ T8049] R13: 00007f3a6cc26218 R14: 00007f3a6cc26180 R15: 00007ffc1f2ccf98 [ 272.211374][ T8049] [ 272.905969][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.3.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.906006][ T8047] Tainted: [L]=SOFTLOCKUP [ 272.906013][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.906027][ T8047] Call Trace: [ 272.906034][ T8047] [ 272.906042][ T8047] dump_stack_lvl+0x100/0x190 [ 272.906072][ T8047] should_fail_ex.cold+0x5/0xa [ 272.906098][ T8047] should_failslab+0xc2/0x120 [ 272.906128][ T8047] __kmalloc_noprof+0xfc/0x820 [ 272.906152][ T8047] ? rcu_is_watching+0x12/0xc0 [ 272.906178][ T8047] ? tomoyo_realpath_from_path+0xb6/0x690 [ 272.906216][ T8047] tomoyo_realpath_from_path+0xb6/0x690 [ 272.906253][ T8047] tomoyo_check_open_permission+0x2af/0x3c0 [ 272.906281][ T8047] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 272.906316][ T8047] ? hook_file_open+0x24f/0x8f0 [ 272.906362][ T8047] ? path_get+0x61/0x80 [ 272.906388][ T8047] tomoyo_file_open+0x6b/0x90 [ 272.906424][ T8047] security_file_open+0xb5/0x1e0 [ 272.906453][ T8047] do_dentry_open+0x588/0x14d0 [ 272.906497][ T8047] vfs_open+0x82/0x3f0 [ 272.906526][ T8047] path_openat+0x2873/0x4280 [ 272.906575][ T8047] ? __pfx_path_openat+0x10/0x10 [ 272.906619][ T8047] do_file_open+0x20e/0x430 [ 272.906657][ T8047] ? __pfx_do_file_open+0x10/0x10 [ 272.906713][ T8047] ? alloc_fd+0x471/0x7a0 [ 272.906751][ T8047] ? do_getname+0x191/0x390 [ 272.906784][ T8047] do_sys_openat2+0x10f/0x1e0 [ 272.906813][ T8047] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.906842][ T8047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.906888][ T8047] __x64_sys_openat+0x12d/0x210 [ 272.906917][ T8047] ? __pfx___x64_sys_openat+0x10/0x10 [ 272.906947][ T8047] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 272.906983][ T8047] ? syscall_user_dispatch+0x76/0x130 [ 272.907009][ T8047] do_syscall_64+0x115/0x840 [ 272.907029][ T8047] ? clear_bhb_loop+0x40/0x90 [ 272.907057][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.907080][ T8047] RIP: 0033:0x7f3a6c99de59 [ 272.907099][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.907121][ T8047] RSP: 002b:00007f3a6d908028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.907143][ T8047] RAX: ffffffffffffffda RBX: 00007f3a6cc26090 RCX: 00007f3a6c99de59 [ 272.907158][ T8047] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 272.907172][ T8047] RBP: 00007f3a6ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 272.907186][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.907199][ T8047] R13: 00007f3a6cc26128 R14: 00007f3a6cc26090 R15: 00007ffc1f2ccf98 [ 272.907228][ T8047] [ 272.907237][ T8047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 275.554629][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'. [ 275.788824][ T8081] ipvlan1: entered promiscuous mode [ 275.865630][ T8081] ipvlan1: entered allmulticast mode [ 275.953798][ T8081] veth0_vlan: entered allmulticast mode [ 279.231517][ T8117] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.386: bg 4: bad block bitmap checksum [ 279.450720][ T8117] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 279.585569][ T8117] EXT4-fs (sda1): This should not happen!! Data will be lost [ 279.585569][ T8117] [ 279.733916][ T5642] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 280.039410][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 281.755442][ T5642] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.835254][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 285.248487][ T8174] FAULT_INJECTION: forcing a failure. [ 285.248487][ T8174] name failslab, interval 1, probability 0, space 0, times 0 [ 285.384864][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.2.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.384903][ T8174] Tainted: [L]=SOFTLOCKUP [ 285.384911][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.384928][ T8174] Call Trace: [ 285.384935][ T8174] [ 285.384945][ T8174] dump_stack_lvl+0x100/0x190 [ 285.384976][ T8174] should_fail_ex.cold+0x5/0xa [ 285.385003][ T8174] should_failslab+0xc2/0x120 [ 285.385034][ T8174] __kmalloc_cache_noprof+0x91/0x6c0 [ 285.385073][ T8174] ? __pfx_proc_create_net_data+0x10/0x10 [ 285.385112][ T8174] ? seg6_net_init+0x49/0x1c0 [ 285.385149][ T8174] ? __pfx_seg6_net_init+0x10/0x10 [ 285.385181][ T8174] seg6_net_init+0x49/0x1c0 [ 285.385215][ T8174] ops_init+0x1e2/0x5f0 [ 285.385248][ T8174] setup_net+0x118/0x3a0 [ 285.385277][ T8174] ? __pfx_setup_net+0x10/0x10 [ 285.385307][ T8174] ? mutex_init_lockdep+0xf1/0x120 [ 285.385350][ T8174] copy_net_ns+0x46f/0x7c0 [ 285.385384][ T8174] create_new_namespaces+0x3ea/0xac0 [ 285.385432][ T8174] unshare_nsproxy_namespaces+0xf2/0x220 [ 285.385458][ T8174] ksys_unshare+0x438/0xab0 [ 285.385488][ T8174] ? __pfx_ksys_unshare+0x10/0x10 [ 285.385527][ T8174] __x64_sys_unshare+0x31/0x40 [ 285.385555][ T8174] do_syscall_64+0x115/0x840 [ 285.385576][ T8174] ? clear_bhb_loop+0x40/0x90 [ 285.385606][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.385631][ T8174] RIP: 0033:0x7fb6e899de59 [ 285.385650][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.385673][ T8174] RSP: 002b:00007fb6e98f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 285.385696][ T8174] RAX: ffffffffffffffda RBX: 00007fb6e8c26090 RCX: 00007fb6e899de59 [ 285.385712][ T8174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 285.385726][ T8174] RBP: 00007fb6e8a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 285.385747][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.385761][ T8174] R13: 00007fb6e8c26128 R14: 00007fb6e8c26090 R15: 00007ffcf026e868 [ 285.385792][ T8174] [ 287.894442][ T8190] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 287.954662][ T8190] EXT4-fs (sda1): This should not happen!! Data will be lost [ 287.954662][ T8190] [ 288.035459][ T8184] netlink: 186 bytes leftover after parsing attributes in process `syz.3.398'. [ 290.103486][ T8212] vivid-011: ================= START STATUS ================= [ 290.211151][ T8212] vivid-011: Radio HW Seek Mode: Bounded [ 290.319865][ T8200] netlink: 206 bytes leftover after parsing attributes in process `syz.2.401'. [ 290.330709][ T8212] vivid-011: Radio Programmable HW Seek: false [ 290.408927][ T8212] vivid-011: RDS Rx I/O Mode: Block I/O [ 290.509424][ T8212] vivid-011: Generate RBDS Instead of RDS: false [ 290.638959][ T8212] vivid-011: RDS Reception: true [ 290.743077][ T8212] vivid-011: RDS Program Type: 0 inactive [ 290.872634][ T8212] vivid-011: RDS PS Name: inactive [ 290.972343][ T8212] vivid-011: RDS Radio Text: inactive [ 291.083743][ T8212] vivid-011: RDS Traffic Announcement: false inactive [ 291.203238][ T8212] vivid-011: RDS Traffic Program: false inactive [ 291.308230][ T8212] vivid-011: RDS Music: false inactive [ 291.366387][ T8212] vivid-011: ================== END STATUS ================== [ 292.996536][ T8250] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 293.060343][ T8250] EXT4-fs (sda1): This should not happen!! Data will be lost [ 293.060343][ T8250] [ 294.396615][ T8273] FAULT_INJECTION: forcing a failure. [ 294.396615][ T8273] name failslab, interval 1, probability 0, space 0, times 0 [ 294.468547][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.0.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.468585][ T8273] Tainted: [L]=SOFTLOCKUP [ 294.468593][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.468607][ T8273] Call Trace: [ 294.468615][ T8273] [ 294.468623][ T8273] dump_stack_lvl+0x100/0x190 [ 294.468653][ T8273] should_fail_ex.cold+0x5/0xa [ 294.468680][ T8273] should_failslab+0xc2/0x120 [ 294.468712][ T8273] kmem_cache_alloc_noprof+0x91/0x6a0 [ 294.468740][ T8273] ? mempool_init_node+0x2f7/0x6e0 [ 294.468775][ T8273] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 294.468802][ T8273] mempool_init_node+0x2f7/0x6e0 [ 294.468833][ T8273] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 294.468857][ T8273] ? __pfx_mempool_free_slab+0x10/0x10 [ 294.468881][ T8273] mempool_init_noprof+0x3a/0x50 [ 294.468910][ T8273] bioset_init+0x37e/0x8a0 [ 294.468936][ T8273] ? __pfx_bioset_init+0x10/0x10 [ 294.468959][ T8273] ? kasan_save_track+0x14/0x30 [ 294.468986][ T8273] ? __kasan_kmalloc+0xaa/0xb0 [ 294.469014][ T8273] ? __kmalloc_cache_node_noprof+0x2fe/0x6c0 [ 294.469045][ T8273] ? __alloc_disk_node+0x5a/0x6b0 [ 294.469077][ T8273] __alloc_disk_node+0x83/0x6b0 [ 294.469108][ T8273] __blk_mq_alloc_disk+0x89/0x120 [ 294.469133][ T8273] loop_add+0x498/0xb60 [ 294.469156][ T8273] ? __pfx_loop_add+0x10/0x10 [ 294.469214][ T8273] ? find_held_lock+0x2b/0x80 [ 294.469241][ T8273] ? __fget_files+0x215/0x3d0 [ 294.469280][ T8273] loop_control_ioctl+0xae/0x620 [ 294.469305][ T8273] ? __pfx_loop_control_ioctl+0x10/0x10 [ 294.469335][ T8273] ? __pfx_loop_control_ioctl+0x10/0x10 [ 294.469361][ T8273] __x64_sys_ioctl+0x18e/0x210 [ 294.469395][ T8273] do_syscall_64+0x115/0x840 [ 294.469416][ T8273] ? clear_bhb_loop+0x40/0x90 [ 294.469445][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.469469][ T8273] RIP: 0033:0x7f4b85f9de59 [ 294.469493][ T8273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.469515][ T8273] RSP: 002b:00007f4b86f28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.469538][ T8273] RAX: ffffffffffffffda RBX: 00007f4b86225fa0 RCX: 00007f4b85f9de59 [ 294.469554][ T8273] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 294.469568][ T8273] RBP: 00007f4b86033e6f R08: 0000000000000000 R09: 0000000000000000 [ 294.469583][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.469597][ T8273] R13: 00007f4b86226038 R14: 00007f4b86225fa0 R15: 00007fff94b276a8 [ 294.469626][ T8273] [ 295.572635][ T8256] Process accounting paused [ 296.975681][ T8300] ================================================================== [ 296.975703][ T8300] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 296.975745][ T8300] Write of size 8 at addr ffffc90004a11000 by task syz.0.417/8300 [ 296.975765][ T8300] [ 296.975778][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.0.417 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.975811][ T8300] Tainted: [L]=SOFTLOCKUP [ 296.975819][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.975833][ T8300] Call Trace: [ 296.975841][ T8300] [ 296.975849][ T8300] dump_stack_lvl+0x100/0x190 [ 296.975874][ T8300] print_report+0x13d/0x4b0 [ 296.975909][ T8300] ? _raw_spin_lock_irqsave+0x52/0x60 [ 296.975945][ T8300] ? sys_imageblit+0x19fb/0x1d60 [ 296.975971][ T8300] kasan_report+0xdf/0x1c0 [ 296.976002][ T8300] ? sys_imageblit+0x19fb/0x1d60 [ 296.976058][ T8300] sys_imageblit+0x19fb/0x1d60 [ 296.976090][ T8300] ? __pfx_sys_imageblit+0x10/0x10 [ 296.976119][ T8300] ? prb_read_valid+0x78/0xa0 [ 296.976157][ T8300] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 296.976197][ T8300] soft_cursor+0x524/0xa10 [ 296.976220][ T8300] ? atomic_notifier_call_chain+0x60/0x1c0 [ 296.976250][ T8300] ? fb_get_color_depth+0x120/0x250 [ 296.976286][ T8300] bit_cursor+0xca1/0x1490 [ 296.976331][ T8300] ? __pfx_bit_cursor+0x10/0x10 [ 296.976372][ T8300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.976412][ T8300] ? get_color+0x1da/0x450 [ 296.976444][ T8300] ? __pfx_bit_cursor+0x10/0x10 [ 296.976480][ T8300] fbcon_cursor+0x43c/0x5e0 [ 296.976512][ T8300] ? add_softcursor+0x1c0/0x290 [ 296.976537][ T8300] set_cursor+0x1db/0x250 [ 296.976559][ T8300] con_write+0x89/0xb0 [ 296.976587][ T8300] do_output_char+0x63b/0x850 [ 296.976620][ T8300] n_tty_write+0x4d6/0x1160 [ 296.976660][ T8300] ? __pfx_n_tty_write+0x10/0x10 [ 296.976700][ T8300] ? __kasan_kmalloc+0xaa/0xb0 [ 296.976727][ T8300] ? __pfx_woken_wake_function+0x10/0x10 [ 296.976751][ T8300] ? rcu_is_watching+0x12/0xc0 [ 296.976776][ T8300] ? file_tty_write.isra.0+0x694/0x890 [ 296.976820][ T8300] ? kfree+0x1e5/0x6c0 [ 296.976855][ T8300] ? __pfx_n_tty_write+0x10/0x10 [ 296.976890][ T8300] file_tty_write.isra.0+0x4d2/0x890 [ 296.976922][ T8300] redirected_tty_write+0xd4/0x120 [ 296.976950][ T8300] vfs_write+0x6ac/0x1050 [ 296.976985][ T8300] ? __pfx_redirected_tty_write+0x10/0x10 [ 296.977015][ T8300] ? __pfx_vfs_write+0x10/0x10 [ 296.977049][ T8300] ? find_held_lock+0x2b/0x80 [ 296.977085][ T8300] ksys_write+0x12a/0x250 [ 296.977119][ T8300] ? __pfx_ksys_write+0x10/0x10 [ 296.977159][ T8300] do_syscall_64+0x115/0x840 [ 296.977179][ T8300] ? clear_bhb_loop+0x40/0x90 [ 296.977206][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.977230][ T8300] RIP: 0033:0x7f4b85f9de59 [ 296.977248][ T8300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.977271][ T8300] RSP: 002b:00007f4b86f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.977293][ T8300] RAX: ffffffffffffffda RBX: 00007f4b86226090 RCX: 00007f4b85f9de59 [ 296.977309][ T8300] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 296.977324][ T8300] RBP: 00007f4b86033e6f R08: 0000000000000000 R09: 0000000000000000 [ 296.977339][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.977353][ T8300] R13: 00007f4b86226128 R14: 00007f4b86226090 R15: 00007fff94b276a8 [ 296.977376][ T8300] [ 296.977385][ T8300] [ 296.977391][ T8300] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004711000 allocated at drm_gem_shmem_vmap_locked+0x553/0x860 [ 296.977442][ T8300] Memory state around the buggy address: [ 296.977455][ T8300] ffffc90004a10f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 296.977473][ T8300] ffffc90004a10f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 296.977489][ T8300] >ffffc90004a11000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 296.977503][ T8300] ^ [ 296.977515][ T8300] ffffc90004a11080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 296.977532][ T8300] ffffc90004a11100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 296.977545][ T8300] ================================================================== [ 296.994310][ T8300] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 296.994336][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.0.417 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.994370][ T8300] Tainted: [L]=SOFTLOCKUP [ 296.994379][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.994393][ T8300] Call Trace: [ 296.994401][ T8300] [ 296.994410][ T8300] dump_stack_lvl+0x100/0x190 [ 296.994439][ T8300] vpanic+0x552/0x970 [ 296.994461][ T8300] ? __pfx_vpanic+0x10/0x10 [ 296.994484][ T8300] ? mark_held_locks+0x40/0x70 [ 296.994521][ T8300] ? sys_imageblit+0x19fb/0x1d60 [ 296.994549][ T8300] panic+0xd1/0xe0 [ 296.994570][ T8300] ? __pfx_panic+0x10/0x10 [ 296.994594][ T8300] ? sys_imageblit+0x19fb/0x1d60 [ 296.994621][ T8300] ? preempt_schedule_common+0x42/0xc0 [ 296.994665][ T8300] check_panic_on_warn.cold+0x19/0x34 [ 296.994697][ T8300] end_report.part.0+0x3a/0x90 [ 296.994732][ T8300] kasan_report.cold+0xe/0x18 [ 296.994767][ T8300] ? sys_imageblit+0x19fb/0x1d60 [ 296.994799][ T8300] sys_imageblit+0x19fb/0x1d60 [ 296.994831][ T8300] ? __pfx_sys_imageblit+0x10/0x10 [ 296.994862][ T8300] ? prb_read_valid+0x78/0xa0 [ 296.994901][ T8300] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 296.994941][ T8300] soft_cursor+0x524/0xa10 [ 296.994965][ T8300] ? atomic_notifier_call_chain+0x60/0x1c0 [ 296.994997][ T8300] ? fb_get_color_depth+0x120/0x250 [ 296.995034][ T8300] bit_cursor+0xca1/0x1490 [ 296.995076][ T8300] ? __pfx_bit_cursor+0x10/0x10 [ 296.995119][ T8300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.995153][ T8300] ? get_color+0x1da/0x450 [ 296.995185][ T8300] ? __pfx_bit_cursor+0x10/0x10 [ 296.995223][ T8300] fbcon_cursor+0x43c/0x5e0 [ 296.995256][ T8300] ? add_softcursor+0x1c0/0x290 [ 296.995282][ T8300] set_cursor+0x1db/0x250 [ 296.995305][ T8300] con_write+0x89/0xb0 [ 296.995334][ T8300] do_output_char+0x63b/0x850 [ 296.995368][ T8300] n_tty_write+0x4d6/0x1160 [ 296.995409][ T8300] ? __pfx_n_tty_write+0x10/0x10 [ 296.995443][ T8300] ? __kasan_kmalloc+0xaa/0xb0 [ 296.995470][ T8300] ? __pfx_woken_wake_function+0x10/0x10 [ 296.995494][ T8300] ? rcu_is_watching+0x12/0xc0 [ 296.995520][ T8300] ? file_tty_write.isra.0+0x694/0x890 [ 296.995548][ T8300] ? kfree+0x1e5/0x6c0 [ 296.995584][ T8300] ? __pfx_n_tty_write+0x10/0x10 [ 296.995619][ T8300] file_tty_write.isra.0+0x4d2/0x890 [ 296.995652][ T8300] redirected_tty_write+0xd4/0x120 [ 296.995688][ T8300] vfs_write+0x6ac/0x1050 [ 296.995725][ T8300] ? __pfx_redirected_tty_write+0x10/0x10 [ 296.995756][ T8300] ? __pfx_vfs_write+0x10/0x10 [ 296.995791][ T8300] ? find_held_lock+0x2b/0x80 [ 296.995828][ T8300] ksys_write+0x12a/0x250 [ 296.995864][ T8300] ? __pfx_ksys_write+0x10/0x10 [ 296.995905][ T8300] do_syscall_64+0x115/0x840 [ 296.995926][ T8300] ? clear_bhb_loop+0x40/0x90 [ 296.995954][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.995979][ T8300] RIP: 0033:0x7f4b85f9de59 [ 296.995999][ T8300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.996022][ T8300] RSP: 002b:00007f4b86f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.996046][ T8300] RAX: ffffffffffffffda RBX: 00007f4b86226090 RCX: 00007f4b85f9de59 [ 296.996062][ T8300] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 296.996077][ T8300] RBP: 00007f4b86033e6f R08: 0000000000000000 R09: 0000000000000000 [ 296.996092][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.996107][ T8300] R13: 00007f4b86226128 R14: 00007f4b86226090 R15: 00007fff94b276a8 [ 296.996130][ T8300] [ 296.996211][ T8300] Kernel Offset: disabled