last executing test programs: 9.202111161s ago: executing program 3 (id=380): unshare$auto(0x40000080) socket(0x10, 0xa, 0x4) socket(0x11, 0x3, 0x9) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x27, 0xa, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x8a880, 0x0) pread64$auto(r1, 0x0, 0x7fff, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x543a01, 0x0) 8.753523116s ago: executing program 3 (id=383): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)={0x6f4, r2, 0x202, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_BEACON_TAIL={0x6d0, 0xf, "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"}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xfffffff9}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004004) sendfile$auto(r1, r1, 0x0, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) statmount$auto(0x0, 0x0, 0x81, 0x40968c) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) unshare$auto(0x1) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) fstatfs$auto(0x3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/queue_id\x00', 0x2, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x200040, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)="df17a9b40a44aaecc53d1ec9d7cb635b08307d97d0fc334d28849c592787e7a54b9e5f5df0e5fc01710ea52fb7aa6c4a7b6b27e22dd58149889f6d87cbf7de0944781c7471d39d27e7485f7209724f9b26ca07c8b7b5c020c55c398aae66cfca10f44b93e81facc95b47665a1d1f22ea4e4a51f6c5428a57d84d16f91c7ab33ead3120f137fe01fd73972a4de53a", 0x8e) ioctl$auto(r3, 0x4b66, 0x1) 7.678802979s ago: executing program 3 (id=386): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ptrace$auto(0x4206, r0, 0x0, 0x200005) rt_sigtimedwait$auto(0x0, &(0x7f0000000280)={@siginfo_0_0={0x101, 0x5, 0xa4af, @_sigchld={r0, 0x0, 0x8, 0x5, 0xfffffffffffffffa}}}, 0x0, 0x8) process_vm_readv$auto(r0, &(0x7f0000000340)={&(0x7f0000000240)="0e10703cddaaf6a5180a0893c65cf0358adef508ab1088842532cdb151bccdd2d0cd2d42aeea7d55987f44cf820158c38e9afe93f6488622d7eca5791e6afcd6007ab2fe02422319f878678bd96b0873d7e7046ba64202e2d874b7d9b964f799432601b3824a5a5b5585f7e2fa9f5b8dfa515143a5022c84c10bf3b0eb6d7627f501c60ff96b50a59285cdb36f87b15b4ed6307355c6a8efda6e53d36b75843600164413cd989325b46aaf1121268bae13ed79de865ce16397a7bab021d6b9f0a6ec7290", 0x6}, 0xb, &(0x7f00000003c0)={&(0x7f0000000380)="535e0a5cf9b4f50456ef9846a1f7e4", 0x8}, 0x4, 0x9) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) setrlimit$auto(0x1000000007, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x5) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_pid\x00', 0x8000, 0x0) mmap$auto(0x1, 0x400008, 0x1, 0x1ff, r1, 0x800008000) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xd4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_mr_vif\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/229, 0xe5) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000006) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) splice$auto(r1, &(0x7f0000000080)=0x8, r1, &(0x7f0000000100)=0xadad, 0x9, 0x5) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd2b, 0x25dddbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xe00}, @OVS_VPORT_ATTR_NAME={0x8, 0x3, '})[\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) close_range$auto(0x2, r5, 0x9) ioctl$auto_BLKGETSIZE(r2, 0x1260, 0x0) 6.544267562s ago: executing program 2 (id=392): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) timer_settime$auto(0x0, 0x519a, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0xfdef) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x88, 0x0, 0x14) close_range$auto(0x2, 0xa, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x100) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 5.600648009s ago: executing program 2 (id=395): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) socket(0x29, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) (async) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) (async) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, r3, 0x99, 0x8, 0x1, @relative_id=0x4, 0x9}, 0x8a4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) 5.404013912s ago: executing program 3 (id=396): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x1, 0x8, 0xffff, 0xc, 0x2, 0x2]}, 0x0) sync_file_range$auto(r0, 0x4, 0x100000000, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x2, 0x2003f2, 0x15) getsockopt$auto(r1, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) 4.41914571s ago: executing program 0 (id=400): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7e1b, 0x0) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/004/001\x00', 0x0, 0x0) ioctl$auto(r0, 0x4008550c, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async, rerun: 32) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) (rerun: 32) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000001, 0x0) (async, rerun: 32) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) r6 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x131203, 0x0) (async, rerun: 64) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/002/001\x00', 0x10002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r7 = getpid() read$auto(r3, &(0x7f0000000100)='/dev/bus/usb/002/001\x00', 0x1) (async, rerun: 32) process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x40, 0x3, 0x0, 0x1, [@nested={0x23, 0x92, 0x0, 0x1, [@generic, @generic="abb78dfe9989b8960bc79c2f6943d725f8625f9801ee25f46a584f876980ab"]}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0xe0}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0xffff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mlock$auto(0x112, 0x80006) (async) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) 4.194936294s ago: executing program 1 (id=401): socket(0x29, 0x0, 0x1) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000200)={{0x8, 0xee01, 0x0, 0x333, 0x1, 0xdc66, 0xfff9}, 0x80006, 0xffffffffffffffff, 0x1ff, 0xc74, @inferred, @raw=0x8387, 0x408, 0x0, &(0x7f0000000440)="09020028946ab0e4cd5082fae10a675ec32b84ba05aabbb841b77ef33ee138468abd3ba1ba44875f0090fab7d2a99db586778cf5490a52cca1170d07983591d67d8c5edff2098f3f5944b31c39eac924cd279d0a87d8734ff86874ad780848ff51e756a1741eef586bcad6002be2f1eca1f961f5371e9305a1ce0b923b7ea29f783495b7b297f2ba1758766282e756853c81d4164e7e0ddae6f001a118511b9f5e76c517", &(0x7f00000000c0)}) shmctl$auto(0x0, 0x1, &(0x7f00000003c0)={{0x17bc, 0xffffffffffffffff, r0, 0x0, 0x7, 0x6, 0xfffc}, 0x83b, 0x0, 0x200000000000002, 0xfffffffffffffffd, @raw=0x4, @raw=0x50, 0x5, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x400) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto_full_fops_mem(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x1) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40104d0e, 0xe) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/nfs/exports\x00', 0x680, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x17) recvmmsg$auto(r4, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) socket(0x2a, 0x2, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) 3.51507536s ago: executing program 1 (id=402): socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2=0x7f000001, 0x4}, 0x6b) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) 3.514466658s ago: executing program 2 (id=403): write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) close_range$auto(0x0, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x7) fsopen$auto(&(0x7f0000000180)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0x7) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x15, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x7fe, 0xb2, 0x9, 0x10, 0xffffffffffffffff, 0x8000000008000) r0 = socket(0x11, 0x80003, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x6f0, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@nested={0x4, 0x116}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x6c4, 0x2, 0x0, 0x1, [@nested={0x6be, 0xda, 0x0, 0x1, [@typed={0x34, 0x9f, 0x0, 0x0, @binary="4d8b3c4267089464b4aa1bab29ba85b4292fed2f8b900e0101096d00fcf9c595552d54be4ebe3d547ff067f1a26893f5"}, @generic="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"]}]}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) setsockopt$auto(r0, 0x107, 0x2, 0x0, 0x28) r2 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000080)=""/202, 0xca) 2.999170416s ago: executing program 0 (id=405): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xd4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000006) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) fcntl$auto(r0, 0x402, 0xffffffffffffffff) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) getpid() r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x8c80, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000100)=""/240, 0xf0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r3 = socket(0x28, 0x800, 0x200) getsockopt$auto_SO_DEBUG(r3, 0x4, 0x1, 0x0, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x2140, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) epoll_create$auto(0x8) 2.173582729s ago: executing program 3 (id=406): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 32) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(r0, r0, 0x591) (async) socket(0x6, 0xa, 0x2) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) close_range$auto(0xffffffffffffffff, r1, 0x7) (async) mmap$auto(0x8, 0x3a02, 0xde, 0x10, 0xffffffffffffffff, 0x4000000000000008) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (rerun: 64) r3 = socket(0xf, 0xa, 0xf) setsockopt$auto(r3, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) (async) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async, rerun: 32) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) (async, rerun: 32) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000200)=""/53, 0x35) (async) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') (async) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) write$auto(0xca, &(0x7f0000000000)='\x04\x01\x00\x01\x00\x00\x00\x00\x00_\x9e\x99:R\xcc\x98\b\'\x02\xb0\x92l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') (async, rerun: 32) inotify_init1$auto(0x0) (async, rerun: 32) r5 = socket(0x22, 0x800, 0x5) connect$auto(r5, &(0x7f00000018c0)=@generic={0xa}, 0x55) 1.950660951s ago: executing program 0 (id=407): open_tree$auto(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0) ioctl$auto_OTPSELECT(r2, 0x80044d0d, &(0x7f00000000c0)=0x10009) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) setitimer$auto(0x0, &(0x7f0000001a00)={{0x80, 0x9}, {0x6, 0x100}}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x102) 1.77761976s ago: executing program 2 (id=408): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ptyp4/dev\x00', 0x8fa982, 0x0) pipe2$auto(0x0, 0x200000) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) read$auto(0xca, 0x0, 0x6) socket(0x1d, 0x1, 0x7fff) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r1, 0x110, 0x1, 0x0, 0x8) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0045520, r0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x3, 0x6, 0x7fff, 0x7, 0xee01, 0xffffffffffffffff, 0x0, 0x3, 0x7ff, 0x4, 0x7fffffff, 0xffff, 0x8f, 0x100000000, 0x200, 0x2, 0x7}) newfstatat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2, 0x8, 0x2, 0x7, 0xee00, 0x0, 0x0, 0x9bfa, 0x4, 0x6, 0xf, 0x8001, 0xffffffffffff7fff, 0x81, 0x100, 0xffff, 0x4}, 0x5) capset$auto(&(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)={0xfffffffa, 0x9, 0x9}) r8 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xffffd034, 0x4, 0x0, @_timer={r8, 0x0, @sival_int=0x7, 0xd5ba}}}, 0x3) wait4$auto(0x0, 0x0, 0x5, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001680)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c130000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="85d5448ea91de796bc4e7701f35faa70fa533d1034c09fd9bd9b5ea8061fc29c3a0561cf54ce04944e40e14d9d543cfe5bcd2759f917c6822a9475f7a55c727afb541887033ac3f42842c6d2c1c2c4994a5df70f5936a328af76f90b2666cef3b72c628a3f3e34099e7aaca34f87a287954ba9ef10e00431cfd1223965a9013bff13f4f556b69bb0f1a385968b3a3b22f51ea1af797ad1754244a55aff1f53ee58bc0e47849bbf0400028014001200fe8000000000000000000000000000aa08000000", @ANYRES32=r6, @ANYBLOB="6dae2d4c2fd183a0f3a7938091d388b1a56388369a3a2bd08f85bdf95cd1d9d2e8dfcea99b9d18c6f2553a6394373c03210cb4ff0e1bff93b06e8b51c3e5a278ec11d9d634bf5915acf80205d2b2dd667f074e56c74794fecfc6aecb2c6a7448116bf3cd53520b03cd1d26710da49daca4b63ba5d75934f170bd5bc4cf6644bc6c915fc48f859d966581d05c78ce9ada1f45aeb0808fda96e693834eee15df75ffcda0e57a8b1ddbe39c37fc10cdbd1ba523cb9808f477513a1a0ec6d5c9b04a5d804b638587f76acfee906decc8b5000008007b00", @ANYRES32=r7, @ANYBLOB="04007600080004008f00000008004600ff03000008000500000000003c01038044003e8008002b00", @ANYRES32=r8, @ANYBLOB="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"], 0x132c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4040810) socket(0xa, 0x3, 0x3b) futex$auto(0x0, 0x81, 0x1ffb, 0x0, 0x0, 0xa2) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clock_gettime$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) lsm_get_self_attr$auto(0x64, &(0x7f0000000080)={0x1010, 0x1, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1fb, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1.652024273s ago: executing program 0 (id=409): readlinkat$auto(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x3) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3d) setsockopt$auto(r0, 0x0, 0x484, 0xfffffffffffffffe, 0x20) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) socket(0x23, 0xa, 0x2) unshare$auto(0x40000080) dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) unshare$auto(0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/ipip/parameters/log_ecn_error\x00', 0x141100, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x8000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT322(r3, 0xc06c4124, &(0x7f0000000100)={0x7fff, 0x0, 0xfffffff8, 0xcf2, 0x6, 0x0, 0x2, 0x8, 0x7, 0x8001, 0x80, 0xffff6d95, 0x8a7, 0x200, 0x9, 0xc, 0x8, 0x7, "6f3fc12a97c113911de91a997ed02c547a297406e22cc59920accd5954199b7d7bc6ddc6"}) 1.488684195s ago: executing program 1 (id=410): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xd4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000006) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) close_range$auto(0x2, 0x8, 0xfdff) 1.451302814s ago: executing program 2 (id=411): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000031b0e7a0f7c5a787be7dec00", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d0000000c001a800800048004000180"], 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, 0x0, 0x4000) socket(0x11, 0xa, 0x300) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x101440, 0x0) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) r4 = waitid$auto(0xc, 0xffffffffffffffff, &(0x7f0000000200)={@_si_pad}, 0x2, &(0x7f0000000340)={{0x77402c}, {0x4, 0x5}, 0x5, 0x401, 0x2, 0xf13, 0x4, 0xfffffffffffffff6, 0xfffffffffffffff6, 0x100000001, 0x2, 0x9, 0x6, 0x9, 0xd441, 0x400}) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8004, 0x3, r4, 0x7, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1dfbdb30) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) socket(0x0, 0x1, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffffc, 0x400007, 0x8, 0x9b72, r3, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 1.213780628s ago: executing program 1 (id=412): r0 = socketpair$auto(0x3, 0xa6, 0x5, &(0x7f0000000100)=0xfffff3b8) socket(0x21, 0x2, 0x5) mmap$auto(0x0, 0x103, 0xdf, 0x17, r0, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x8000000000000006, 0x19, 0x0, 0x7ffffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio29/dev_debug\x00', 0x80002, 0x0) socket(0x21, 0x2, 0xa) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r4) 1.080714044s ago: executing program 1 (id=413): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7f}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xb}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xfffb}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0xf}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "03"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x18, 0x0, &(0x7f0000000000)=0x7ffd) 779.032834ms ago: executing program 1 (id=414): openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)="03", 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/kernel/parameters/panic_print\x00', 0x80862, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) sendfile$auto(r1, 0x3, 0x0, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0xffff7fff, 0x1, 0x6, 0x0, 0x5, 0x1007181, 0xd1, 0xb, 0x7, 0x7ff, 0xc, 0x80000001, 0x5, 0x80200000000001, 0x800000000fbf, 0xde3, 0x9809588, 0xfffffffd, 0x5, 0x0, 0x864, 0x6, 0x22000, 0x200, 0x0, 0xc3f, 0xc9, 0x0, 0x0, 0x58b, 0x0, [0x0, 0x0, 0x0, 0x7fdf, 0x47, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0x0, 0x0, 0x0, 0x8000020000000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6, 0x27, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfff]}, 0xa, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) pread64$auto(r2, &(0x7f0000000080)='\x00', 0x5, 0x402) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) add_key$auto_KEY_SPEC_USER_SESSION_KEYRING(0x0, 0x0, 0x0, 0x74, 0xfffffffffffffffb) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x80c42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) 532.098524ms ago: executing program 0 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400108, 0x3, 0x9b72, r0, 0x8000) sysfs$auto(0x2, 0x3, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = fsopen$auto(0x0, 0x2) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) 135.477742ms ago: executing program 2 (id=416): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x10, 0x2, 0x6) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc19e07d5b40000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25110000002c001e8028005e80080046800400f7801c0010801800278014003f0000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) r3 = socket(0x11, 0x80003, 0x300) mmap$auto(0x3, 0x8001, 0x62, 0x10, r2, 0x7) socketpair$auto(0xfffffffb, 0x7f27, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 43.827656ms ago: executing program 3 (id=417): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000004c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8-\xf2\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};+t\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff}\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05\x00p\x1b\xce\xc9\x89f\x90v`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0`q\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc|1\x00\x00R+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00c\xa4\xa5\x8d\xc0\x96\xd3', 0xa) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x6, &(0x7f0000000000)={@siginfo_0_0={0xb, 0x0, 0xffffffc4, @_sigfault={0x0, @_addr_bnd={"b1c8b3c204762259", 0x0, 0x0}}}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event1\x00', 0x2, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, 0xffffffffffffffff) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x100000000000000, 0x5, 0x7, 0x80000011, 0xffffffffffffffff, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4) sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r6 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1a000, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f00000006c0)="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", 0x1000) 0s ago: executing program 0 (id=425): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0xe503, 0x0) ptrace$auto_PTRACE_SETOPTIONS(0x4200, r0, 0x8, 0x7) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x6, 0x28, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)="fc1c4959ff21a2458364a2b1590d19513f344e1b39f1cffdd87c4ba311042e1012") r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0) sendfile$auto(r3, r3, 0x0, 0x4f64a1d2) write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f0000000080)="33f5a7fc33", 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 81.079395][ T5818] cgroup: Unknown subsys name 'net' [ 81.213306][ T5818] cgroup: Unknown subsys name 'cpuset' [ 81.221868][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.759464][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.432132][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.444383][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.451950][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.471094][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.481429][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.490620][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.497869][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.502516][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.506510][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.521815][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.522540][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.531540][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.538469][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.543611][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.557165][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.565049][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.573482][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.581331][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.591542][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.611304][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.112021][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.192651][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.243888][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.273063][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.434730][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.442130][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.449824][ T5829] bridge_slave_0: entered allmulticast mode [ 85.457745][ T5829] bridge_slave_0: entered promiscuous mode [ 85.481870][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.489054][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.496786][ T5832] bridge_slave_0: entered allmulticast mode [ 85.503898][ T5832] bridge_slave_0: entered promiscuous mode [ 85.512154][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.519512][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.526775][ T5829] bridge_slave_1: entered allmulticast mode [ 85.534243][ T5829] bridge_slave_1: entered promiscuous mode [ 85.560459][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.567623][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.575172][ T5832] bridge_slave_1: entered allmulticast mode [ 85.582220][ T5832] bridge_slave_1: entered promiscuous mode [ 85.616229][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.623502][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.631107][ T5836] bridge_slave_0: entered allmulticast mode [ 85.638239][ T5836] bridge_slave_0: entered promiscuous mode [ 85.666657][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.673952][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.681209][ T5830] bridge_slave_0: entered allmulticast mode [ 85.688166][ T5830] bridge_slave_0: entered promiscuous mode [ 85.696101][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.703480][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.711010][ T5836] bridge_slave_1: entered allmulticast mode [ 85.718096][ T5836] bridge_slave_1: entered promiscuous mode [ 85.728395][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.741168][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.750458][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.757727][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.765366][ T5830] bridge_slave_1: entered allmulticast mode [ 85.772653][ T5830] bridge_slave_1: entered promiscuous mode [ 85.790272][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.802349][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.871670][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.893326][ T5829] team0: Port device team_slave_0 added [ 85.902442][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.915284][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.926289][ T5832] team0: Port device team_slave_0 added [ 85.934199][ T5829] team0: Port device team_slave_1 added [ 85.943047][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.965094][ T5832] team0: Port device team_slave_1 added [ 86.036443][ T5836] team0: Port device team_slave_0 added [ 86.060589][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.067549][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.093939][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.107185][ T5830] team0: Port device team_slave_0 added [ 86.114858][ T5836] team0: Port device team_slave_1 added [ 86.122246][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.129295][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.155466][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.167700][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.174836][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.201537][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.214370][ T5830] team0: Port device team_slave_1 added [ 86.237991][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.245085][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.271548][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.321236][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.328213][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.359037][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.371481][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.378819][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.405358][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.420418][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.427376][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.453836][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.465867][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.472919][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.499028][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.568897][ T5832] hsr_slave_0: entered promiscuous mode [ 86.576296][ T5832] hsr_slave_1: entered promiscuous mode [ 86.580965][ T5831] Bluetooth: hci2: command tx timeout [ 86.601839][ T5829] hsr_slave_0: entered promiscuous mode [ 86.608338][ T5829] hsr_slave_1: entered promiscuous mode [ 86.615019][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 86.621018][ T5829] Cannot create hsr debugfs directory [ 86.660399][ T5831] Bluetooth: hci1: command tx timeout [ 86.660404][ T5839] Bluetooth: hci3: command tx timeout [ 86.673375][ T5831] Bluetooth: hci0: command tx timeout [ 86.687503][ T5830] hsr_slave_0: entered promiscuous mode [ 86.694341][ T5830] hsr_slave_1: entered promiscuous mode [ 86.700846][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 86.706784][ T5830] Cannot create hsr debugfs directory [ 86.763953][ T5836] hsr_slave_0: entered promiscuous mode [ 86.770531][ T5836] hsr_slave_1: entered promiscuous mode [ 86.776789][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 86.782652][ T5836] Cannot create hsr debugfs directory [ 87.322502][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.347107][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.358451][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.375862][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.436092][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.452032][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.466702][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.488076][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.564257][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.578070][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.597193][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.618609][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.715195][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.727351][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.744189][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.758261][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.804927][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.871606][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.880189][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.913451][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.921052][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.948537][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.955983][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.975393][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.002435][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.017780][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.024951][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.048388][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.055880][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.098680][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.128609][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.135843][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.165435][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.172817][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.324623][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.396485][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.456118][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.463456][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.496058][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.503450][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.591582][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.662781][ T5831] Bluetooth: hci2: command tx timeout [ 88.734113][ T5829] veth0_vlan: entered promiscuous mode [ 88.745978][ T5831] Bluetooth: hci0: command tx timeout [ 88.746019][ T5838] Bluetooth: hci3: command tx timeout [ 88.760097][ T5839] Bluetooth: hci1: command tx timeout [ 88.787325][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.812933][ T5829] veth1_vlan: entered promiscuous mode [ 88.929627][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.942359][ T5829] veth0_macvtap: entered promiscuous mode [ 88.975952][ T5830] veth0_vlan: entered promiscuous mode [ 88.984251][ T5829] veth1_macvtap: entered promiscuous mode [ 89.040180][ T5830] veth1_vlan: entered promiscuous mode [ 89.058098][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.079063][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.104757][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.135621][ T5832] veth0_vlan: entered promiscuous mode [ 89.155956][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.166300][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.186075][ T5830] veth0_macvtap: entered promiscuous mode [ 89.194884][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.219019][ T5832] veth1_vlan: entered promiscuous mode [ 89.234985][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.264962][ T5830] veth1_macvtap: entered promiscuous mode [ 89.367521][ T5836] veth0_vlan: entered promiscuous mode [ 89.375642][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.393495][ T5832] veth0_macvtap: entered promiscuous mode [ 89.419041][ T5832] veth1_macvtap: entered promiscuous mode [ 89.438338][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.455516][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.471798][ T5836] veth1_vlan: entered promiscuous mode [ 89.478511][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.487294][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.498038][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520517][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.540773][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.562680][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.579602][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.588540][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.604832][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.647352][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.662564][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.674050][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.697550][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.700901][ T5836] veth0_macvtap: entered promiscuous mode [ 89.724347][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.776739][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.779241][ T5836] veth1_macvtap: entered promiscuous mode [ 89.800903][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.904790][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.913019][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.917589][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.929511][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.018308][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.046646][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.067091][ T144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.103705][ T144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.113995][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.134986][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.227675][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.252571][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.400191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 90.429133][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.461844][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.740147][ T5838] Bluetooth: hci2: command tx timeout [ 90.820481][ T5838] Bluetooth: hci0: command tx timeout [ 90.830858][ T5838] Bluetooth: hci3: command tx timeout [ 90.832101][ T5839] Bluetooth: hci1: command tx timeout [ 90.851884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.900476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.995783][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.020000][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.051958][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.278777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.877181][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.960618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.970041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.042675][ T10] cfg80211: failed to load regulatory.db [ 92.130667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.142350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.552064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.821343][ T5839] Bluetooth: hci2: command tx timeout [ 92.900681][ T5839] Bluetooth: hci3: command tx timeout [ 92.900710][ T5831] Bluetooth: hci1: command tx timeout [ 92.900749][ T5838] Bluetooth: hci0: command tx timeout [ 92.960893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 93.681982][ T5976] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.266888][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 94.568192][ T6006] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrơ£̉„yù*›"¤l-ư¤ôy–ú„ [ 96.553711][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'. [ 96.660734][ T6047] team0: Port device team_slave_1 removed [ 96.703060][ T6055] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 96.759898][ T6053] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[6053] [ 97.169733][ T6063] syz.0.44 uses obsolete (PF_INET,SOCK_PACKET) [ 97.443107][ T6069] serio: Serial port pty6 [ 97.742266][ T6089] syz.1.46: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 97.792423][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT(full) [ 97.792457][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.792476][ T6089] Call Trace: [ 97.792484][ T6089] [ 97.792498][ T6089] dump_stack_lvl+0x16c/0x1f0 [ 97.792548][ T6089] warn_alloc+0x248/0x3a0 [ 97.792579][ T6089] ? __pfx_warn_alloc+0x10/0x10 [ 97.792610][ T6089] ? __lock_acquire+0x12c2/0x2890 [ 97.792660][ T6089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 97.792687][ T6089] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 97.792713][ T6089] ? __pfx___might_resched+0x10/0x10 [ 97.792748][ T6089] ? rcu_is_watching+0x12/0xc0 [ 97.792786][ T6089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 97.792809][ T6089] ? find_held_lock+0x2b/0x80 [ 97.792836][ T6089] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 97.792860][ T6089] ? tomoyo_path_number_perm+0x295/0x580 [ 97.792890][ T6089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.792914][ T6089] ? __pfx___mutex_lock+0x10/0x10 [ 97.792939][ T6089] ? tomoyo_path_number_perm+0x18d/0x580 [ 97.792973][ T6089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.793010][ T6089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 97.793036][ T6089] __vmalloc_node_noprof+0xad/0xf0 [ 97.793062][ T6089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 97.793093][ T6089] dvb_dvr_do_ioctl+0x15d/0x290 [ 97.793124][ T6089] dvb_usercopy+0x167/0x340 [ 97.793147][ T6089] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 97.793175][ T6089] ? __pfx_dvb_usercopy+0x10/0x10 [ 97.793215][ T6089] ? __fget_files+0x20e/0x3c0 [ 97.793256][ T6089] dvb_dvr_ioctl+0x29/0x40 [ 97.793278][ T6089] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 97.793304][ T6089] __x64_sys_ioctl+0x18e/0x210 [ 97.793336][ T6089] do_syscall_64+0xcd/0xf80 [ 97.793361][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.793382][ T6089] RIP: 0033:0x7f296fb8f7c9 [ 97.793404][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.793431][ T6089] RSP: 002b:00007f2970af0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.793455][ T6089] RAX: ffffffffffffffda RBX: 00007f296fde5fa0 RCX: 00007f296fb8f7c9 [ 97.793471][ T6089] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 97.793485][ T6089] RBP: 00007f296fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.793498][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.793512][ T6089] R13: 00007f296fde6038 R14: 00007f296fde5fa0 R15: 00007ffe3e85c968 [ 97.793547][ T6089] [ 97.793556][ T6089] Mem-Info: [ 97.841230][ T6094] FAULT_INJECTION: forcing a failure. [ 97.841230][ T6094] name failslab, interval 1, probability 0, space 0, times 1 [ 97.874558][ T6089] active_anon:6987 inactive_anon:0 isolated_anon:23 [ 97.874558][ T6089] active_file:2564 inactive_file:39876 isolated_file:0 [ 97.874558][ T6089] unevictable:768 dirty:1739 writeback:0 [ 97.874558][ T6089] slab_reclaimable:10360 slab_unreclaimable:91458 [ 97.874558][ T6089] mapped:24227 shmem:1356 pagetables:1046 [ 97.874558][ T6089] sec_pagetables:0 bounce:0 [ 97.874558][ T6089] kernel_misc_reclaimable:0 [ 97.874558][ T6089] free:1069649 free_pcp:22187 free_cma:0 [ 97.970181][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT(full) [ 97.970220][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.970235][ T6094] Call Trace: [ 97.970244][ T6094] [ 97.970254][ T6094] dump_stack_lvl+0x16c/0x1f0 [ 97.970300][ T6094] should_fail_ex+0x512/0x640 [ 97.970337][ T6094] ? __kmalloc_node_noprof+0xcd/0x930 [ 97.970374][ T6094] should_failslab+0xc2/0x120 [ 97.970412][ T6094] __kmalloc_node_noprof+0xee/0x930 [ 97.970447][ T6094] ? alloc_slab_obj_exts+0x43/0xf0 [ 97.970469][ T6094] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 97.970509][ T6094] ? alloc_slab_obj_exts+0x43/0xf0 [ 97.970533][ T6094] alloc_slab_obj_exts+0x43/0xf0 [ 97.970559][ T6094] new_slab+0x353/0x430 [ 97.970586][ T6094] ___slab_alloc+0xe18/0x1c90 [ 97.970613][ T6094] ? sk_prot_alloc+0x60/0x2a0 [ 97.970643][ T6094] ? sk_prot_alloc+0x60/0x2a0 [ 97.970663][ T6094] ? __slab_alloc.constprop.0+0x63/0x110 [ 97.970686][ T6094] __slab_alloc.constprop.0+0x63/0x110 [ 97.970728][ T6094] kmem_cache_alloc_noprof+0x44d/0x770 [ 97.970758][ T6094] ? sk_prot_alloc+0x60/0x2a0 [ 97.970786][ T6094] ? sk_prot_alloc+0x60/0x2a0 [ 97.970806][ T6094] ? find_held_lock+0x2b/0x80 [ 97.970835][ T6094] sk_prot_alloc+0x60/0x2a0 [ 97.970859][ T6094] sk_alloc+0x36/0xe30 [ 97.970889][ T6094] inet_create+0x3a1/0x1040 [ 97.970920][ T6094] ? inet_create+0x93/0x1040 [ 97.970953][ T6094] __sock_create+0x339/0x8a0 [ 97.970983][ T6094] __sys_socket+0x14d/0x260 [ 97.971006][ T6094] ? fput+0x70/0xf0 [ 97.971028][ T6094] ? __pfx___sys_socket+0x10/0x10 [ 97.971052][ T6094] ? xfd_validate_state+0x61/0x180 [ 97.971072][ T6094] ? __pfx_ksys_write+0x10/0x10 [ 97.971111][ T6094] __x64_sys_socket+0x72/0xb0 [ 97.971134][ T6094] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.971157][ T6094] do_syscall_64+0xcd/0xf80 [ 97.971181][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.971205][ T6094] RIP: 0033:0x7ff3f9d8f7c9 [ 97.971224][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.971245][ T6094] RSP: 002b:00007ff3fab78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 97.971267][ T6094] RAX: ffffffffffffffda RBX: 00007ff3f9fe5fa0 RCX: 00007ff3f9d8f7c9 [ 97.971283][ T6094] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 97.971297][ T6094] RBP: 00007ff3f9e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.971316][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.971330][ T6094] R13: 00007ff3f9fe6038 R14: 00007ff3f9fe5fa0 R15: 00007ffc6ef205a8 [ 97.971363][ T6094] [ 98.400035][ T6089] Node 0 active_anon:25772kB inactive_anon:0kB active_file:10256kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101208kB dirty:6948kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11956kB pagetables:4224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.466587][ T6089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.564175][ T6092] NFSD: Failed to start, no listeners configured. [ 98.570034][ T6089] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.610109][ T6089] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 98.617055][ T36] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.628156][ T6089] Node 0 DMA32 free:1407024kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30472kB inactive_anon:0kB active_file:10256kB inactive_file:159300kB unevictable:1536kB writepending:6948kB zspages:0kB present:3129332kB managed:2540988kB mlocked:0kB bounce:0kB free_pcp:75608kB local_pcp:23100kB free_cma:0kB [ 98.677560][ T6089] lowmem_reserve[]: 0 0 1 1 1 [ 98.702295][ T6089] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.744507][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 98.749324][ T6089] Node 1 Normal free:2860360kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4404kB local_pcp:2044kB free_cma:0kB [ 98.787267][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 98.792427][ T6089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.845738][ T6089] Node 0 DMA32: 518*4kB (UME) 137*8kB (UME) 37*16kB (UME) 7*32kB (UME) 7*64kB (ME) 4*128kB (M) 6*256kB (ME) 2*512kB (M) 2*1024kB (UM) 4*2048kB (UME) 339*4096kB (M) = 1406288kB [ 98.872540][ T6089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.888283][ T6089] Node 1 Normal: 74*4kB (UM) 44*8kB (UE) 36*16kB (UME) 252*32kB (UME) 118*64kB (UE) 37*128kB (UE) 9*256kB (U) 2*512kB (U) 3*1024kB (UME) 3*2048kB (UME) 690*4096kB (M) = 2860360kB [ 98.910517][ T6089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.923511][ T6089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.969769][ T6089] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 99.029466][ T6089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.041008][ T6089] 43794 total pagecache pages [ 99.046323][ T6089] 0 pages in swap cache [ 99.050760][ T6089] Free swap = 124996kB [ 99.055220][ T6089] Total swap = 124996kB [ 99.059433][ T6089] 2097051 pages RAM [ 99.064187][ T6089] 0 pages HighMem/MovableOnly [ 99.069227][ T6089] 429778 pages reserved [ 99.084436][ T6089] 0 pages cma reserved [ 100.388246][ T6136] zswap: compressor not available [ 100.463724][ T6136] Zero length message leads to an empty skb [ 100.735495][ T6150] FAULT_INJECTION: forcing a failure. [ 100.735495][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 100.784262][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(full) [ 100.784298][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.784313][ T6150] Call Trace: [ 100.784322][ T6150] [ 100.784332][ T6150] dump_stack_lvl+0x16c/0x1f0 [ 100.784387][ T6150] should_fail_ex+0x512/0x640 [ 100.784417][ T6150] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 100.784458][ T6150] should_failslab+0xc2/0x120 [ 100.784495][ T6150] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 100.784533][ T6150] ? v9fs_init_fs_context+0x133/0x590 [ 100.784575][ T6150] ? kstrdup+0x53/0x100 [ 100.784600][ T6150] kstrdup+0x53/0x100 [ 100.784631][ T6150] v9fs_init_fs_context+0x133/0x590 [ 100.784667][ T6150] ? __pfx_v9fs_init_fs_context+0x10/0x10 [ 100.784700][ T6150] alloc_fs_context+0x629/0xf50 [ 100.784733][ T6150] __x64_sys_fsopen+0xeb/0x240 [ 100.784764][ T6150] do_syscall_64+0xcd/0xf80 [ 100.784791][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.784815][ T6150] RIP: 0033:0x7fb76138f7c9 [ 100.784835][ T6150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.784857][ T6150] RSP: 002b:00007fb7622b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 100.784881][ T6150] RAX: ffffffffffffffda RBX: 00007fb7615e5fa0 RCX: 00007fb76138f7c9 [ 100.784897][ T6150] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 100.784912][ T6150] RBP: 00007fb761413f91 R08: 0000000000000000 R09: 0000000000000000 [ 100.784927][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.784942][ T6150] R13: 00007fb7615e6038 R14: 00007fb7615e5fa0 R15: 00007ffe83f589d8 [ 100.784978][ T6150] [ 102.789296][ T6188] FAULT_INJECTION: forcing a failure. [ 102.789296][ T6188] name fail_futex, interval 1, probability 0, space 0, times 1 [ 102.830351][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(full) [ 102.830384][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.830397][ T6188] Call Trace: [ 102.830405][ T6188] [ 102.830414][ T6188] dump_stack_lvl+0x16c/0x1f0 [ 102.830455][ T6188] should_fail_ex+0x512/0x640 [ 102.830487][ T6188] get_futex_key+0x1d0/0x15f0 [ 102.830517][ T6188] ? __pfx_get_futex_key+0x10/0x10 [ 102.830539][ T6188] ? lock_acquire+0x179/0x330 [ 102.830562][ T6188] ? find_held_lock+0x2b/0x80 [ 102.830600][ T6188] futex_wait_setup+0x9d/0x570 [ 102.830635][ T6188] __futex_wait+0x193/0x2f0 [ 102.830663][ T6188] ? __pfx___futex_wait+0x10/0x10 [ 102.830688][ T6188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.830712][ T6188] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.830745][ T6188] ? futex_hash+0x2c5/0x380 [ 102.830772][ T6188] ? futex_private_hash_put+0x160/0x1b0 [ 102.830797][ T6188] futex_wait+0xe8/0x380 [ 102.830827][ T6188] ? __pfx_futex_wait+0x10/0x10 [ 102.830865][ T6188] ? kasan_quarantine_put+0x10a/0x240 [ 102.830895][ T6188] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.830925][ T6188] do_futex+0x229/0x350 [ 102.830951][ T6188] ? __pfx_do_futex+0x10/0x10 [ 102.830976][ T6188] ? mntput+0x10/0x90 [ 102.831005][ T6188] ? do_handle_open+0x2bc/0xd10 [ 102.831042][ T6188] __x64_sys_futex+0x1e0/0x4c0 [ 102.831074][ T6188] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.831103][ T6188] ? syscall_user_dispatch+0x78/0x140 [ 102.831142][ T6188] do_syscall_64+0xcd/0xf80 [ 102.831166][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.831189][ T6188] RIP: 0033:0x7fb76138f7c9 [ 102.831208][ T6188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.831235][ T6188] RSP: 002b:00007fb7622b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.831257][ T6188] RAX: ffffffffffffffda RBX: 00007fb7615e5fa8 RCX: 00007fb76138f7c9 [ 102.831272][ T6188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb7615e5fa8 [ 102.831286][ T6188] RBP: 00007fb7615e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 102.831299][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.831312][ T6188] R13: 00007fb7615e6038 R14: 00007ffe83f588f0 R15: 00007ffe83f589d8 [ 102.831346][ T6188] [ 103.678697][ T6207] mkiss: ax0: crc mode is auto. [ 105.087685][ T6227] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.870055][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 106.494638][ T6243] kfence: disabled [ 106.527903][ T6243] kfence: re-enabled [ 109.652789][ T6299] FAULT_INJECTION: forcing a failure. [ 109.652789][ T6299] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.680631][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT(full) [ 109.680666][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.680681][ T6299] Call Trace: [ 109.680690][ T6299] [ 109.680701][ T6299] dump_stack_lvl+0x16c/0x1f0 [ 109.680755][ T6299] should_fail_ex+0x512/0x640 [ 109.680790][ T6299] _copy_from_user+0x2e/0xd0 [ 109.680821][ T6299] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 109.680866][ T6299] snd_rawmidi_write+0x26e/0xc10 [ 109.680905][ T6299] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 109.680938][ T6299] ? common_file_perm+0x1b1/0x500 [ 109.680968][ T6299] ? __pfx_default_wake_function+0x10/0x10 [ 109.681003][ T6299] ? bpf_lsm_file_permission+0x9/0x10 [ 109.681031][ T6299] ? security_file_permission+0x71/0x210 [ 109.681064][ T6299] ? rw_verify_area+0xcf/0x6c0 [ 109.681096][ T6299] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 109.681124][ T6299] vfs_write+0x2a0/0x11d0 [ 109.681165][ T6299] ? __pfx_vfs_write+0x10/0x10 [ 109.681195][ T6299] ? find_held_lock+0x2b/0x80 [ 109.681227][ T6299] ? __fget_files+0x204/0x3c0 [ 109.681266][ T6299] ? __fget_files+0x20e/0x3c0 [ 109.681310][ T6299] ksys_write+0x1f8/0x250 [ 109.681343][ T6299] ? __pfx_ksys_write+0x10/0x10 [ 109.681387][ T6299] do_syscall_64+0xcd/0xf80 [ 109.681413][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.681438][ T6299] RIP: 0033:0x7fb76138f7c9 [ 109.681457][ T6299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.681479][ T6299] RSP: 002b:00007fb762294038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.681502][ T6299] RAX: ffffffffffffffda RBX: 00007fb7615e6090 RCX: 00007fb76138f7c9 [ 109.681519][ T6299] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000009 [ 109.681534][ T6299] RBP: 00007fb761413f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.681548][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.681562][ T6299] R13: 00007fb7615e6128 R14: 00007fb7615e6090 R15: 00007ffe83f589d8 [ 109.681598][ T6299] [ 111.694428][ T6326] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 111.993053][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 112.020890][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 112.117704][ T6330] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 113.282018][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 113.442518][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 114.684709][ T6390] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.0.1), cmd(16) [ 114.737284][ T6395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 114.765416][ T6389] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.0.1), cmd(16) [ 115.031619][ T6396] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 115.086524][ T6403] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2) [ 115.186010][ T6403] ima: policy update failed [ 115.211866][ T30] audit: type=1802 audit(1768916223.207:2): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.110" res=0 errno=0 [ 117.300179][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 119.170720][ T6469] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.249601][ T6479] FAULT_INJECTION: forcing a failure. [ 119.249601][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 119.296625][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 119.296660][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.296674][ T6479] Call Trace: [ 119.296683][ T6479] [ 119.296692][ T6479] dump_stack_lvl+0x16c/0x1f0 [ 119.296752][ T6479] should_fail_ex+0x512/0x640 [ 119.296780][ T6479] ? kmem_cache_alloc_noprof+0x62/0x770 [ 119.296816][ T6479] should_failslab+0xc2/0x120 [ 119.296852][ T6479] kmem_cache_alloc_noprof+0x83/0x770 [ 119.296880][ T6479] ? vm_area_alloc+0x1f/0x160 [ 119.296911][ T6479] ? vm_area_alloc+0x1f/0x160 [ 119.296934][ T6479] vm_area_alloc+0x1f/0x160 [ 119.296959][ T6479] __mmap_region+0x1080/0x2a00 [ 119.296994][ T6479] ? __pfx___mmap_region+0x10/0x10 [ 119.297019][ T6479] ? __lock_acquire+0x436/0x2890 [ 119.297071][ T6479] ? finish_task_switch.isra.0+0x207/0xbd0 [ 119.297111][ T6479] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.297136][ T6479] ? finish_task_switch.isra.0+0x207/0xbd0 [ 119.297240][ T6479] ? rcu_is_watching+0x12/0xc0 [ 119.297285][ T6479] mmap_region+0x1ab/0x3f0 [ 119.297314][ T6479] ? __get_unmapped_area+0x267/0x3f0 [ 119.297353][ T6479] do_mmap+0xa3e/0x1210 [ 119.297395][ T6479] ? __pfx_do_mmap+0x10/0x10 [ 119.297430][ T6479] ? __pfx_down_write_killable+0x10/0x10 [ 119.297465][ T6479] vm_mmap_pgoff+0x29e/0x470 [ 119.297506][ T6479] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 119.297548][ T6479] ? __x64_sys_futex+0x1e0/0x4c0 [ 119.297574][ T6479] ? __x64_sys_futex+0x1e9/0x4c0 [ 119.297606][ T6479] ksys_mmap_pgoff+0x7d/0x5c0 [ 119.297639][ T6479] ? xfd_validate_state+0x61/0x180 [ 119.297661][ T6479] ? __pfx_ksys_write+0x10/0x10 [ 119.297699][ T6479] __x64_sys_mmap+0x125/0x190 [ 119.297728][ T6479] do_syscall_64+0xcd/0xf80 [ 119.297754][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.297778][ T6479] RIP: 0033:0x7ff3f9d8f7c9 [ 119.297808][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.297831][ T6479] RSP: 002b:00007ff3fab78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 119.297859][ T6479] RAX: ffffffffffffffda RBX: 00007ff3f9fe5fa0 RCX: 00007ff3f9d8f7c9 [ 119.297875][ T6479] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 119.297890][ T6479] RBP: 00007ff3f9e13f91 R08: 0000000000000002 R09: 0000000000008000 [ 119.297905][ T6479] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 119.297919][ T6479] R13: 00007ff3f9fe6038 R14: 00007ff3f9fe5fa0 R15: 00007ffc6ef205a8 [ 119.297954][ T6479] [ 119.821810][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 119.926094][ T30] audit: type=1806 audit(1768916227.917:3): xattr="." res=0 [ 120.358646][ T6502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 120.412827][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 120.611611][ T6502] veth1_macvtap: left promiscuous mode [ 121.289500][ T6521] can: request_module (can-proto-0) failed. [ 121.568501][ T6535] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.694679][ T6541] ptrace attach of "./syz-executor exec"[6543] was attempted by "./syz-executor exec"[6541] [ 121.777574][ T6541] FAULT_INJECTION: forcing a failure. [ 121.777574][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 121.820168][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT(full) [ 121.820201][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.820219][ T6541] Call Trace: [ 121.820227][ T6541] [ 121.820236][ T6541] dump_stack_lvl+0x16c/0x1f0 [ 121.820280][ T6541] should_fail_ex+0x512/0x640 [ 121.820307][ T6541] ? __kmalloc_cache_noprof+0x5f/0x800 [ 121.820340][ T6541] should_failslab+0xc2/0x120 [ 121.820377][ T6541] __kmalloc_cache_noprof+0x80/0x800 [ 121.820404][ T6541] ? do_raw_spin_lock+0x12c/0x2b0 [ 121.820430][ T6541] ? kobject_uevent_env+0x265/0x1920 [ 121.820464][ T6541] ? kobject_uevent_env+0x265/0x1920 [ 121.820492][ T6541] kobject_uevent_env+0x265/0x1920 [ 121.820518][ T6541] ? __pfx_dev_uevent_name+0x10/0x10 [ 121.820550][ T6541] ? bus_to_subsys+0x131/0x160 [ 121.820575][ T6541] device_add+0x1103/0x1980 [ 121.820615][ T6541] ? __pfx_device_add+0x10/0x10 [ 121.820648][ T6541] ? lockdep_init_map_type+0x5c/0x270 [ 121.820673][ T6541] ? __init_waitqueue_head+0xca/0x150 [ 121.820709][ T6541] rfkill_register+0x1ad/0xb40 [ 121.820740][ T6541] nfc_register_device+0x11f/0x410 [ 121.820777][ T6541] nci_register_device+0x7f1/0xb80 [ 121.820808][ T6541] ? __pfx_nci_register_device+0x10/0x10 [ 121.820845][ T6541] ? lockdep_init_map_type+0x5c/0x270 [ 121.820876][ T6541] virtual_ncidev_open+0x141/0x220 [ 121.820903][ T6541] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 121.820938][ T6541] misc_open+0x26d/0x450 [ 121.820969][ T6541] ? __pfx_misc_open+0x10/0x10 [ 121.820996][ T6541] chrdev_open+0x234/0x6a0 [ 121.821030][ T6541] ? __pfx_apparmor_file_open+0x10/0x10 [ 121.821055][ T6541] ? __pfx_chrdev_open+0x10/0x10 [ 121.821094][ T6541] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 121.821135][ T6541] do_dentry_open+0x748/0x1590 [ 121.821166][ T6541] ? __pfx_chrdev_open+0x10/0x10 [ 121.821208][ T6541] vfs_open+0x82/0x3f0 [ 121.821236][ T6541] path_openat+0x2078/0x3140 [ 121.821290][ T6541] ? __pfx_path_openat+0x10/0x10 [ 121.821339][ T6541] do_filp_open+0x20b/0x470 [ 121.821375][ T6541] ? __pfx_do_filp_open+0x10/0x10 [ 121.821437][ T6541] ? alloc_fd+0x471/0x7d0 [ 121.821481][ T6541] do_sys_openat2+0x121/0x290 [ 121.821506][ T6541] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.821546][ T6541] __x64_sys_openat+0x174/0x210 [ 121.821574][ T6541] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.821616][ T6541] do_syscall_64+0xcd/0xf80 [ 121.821643][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.821668][ T6541] RIP: 0033:0x7fb76138f7c9 [ 121.821686][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.821709][ T6541] RSP: 002b:00007fb7622b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.821734][ T6541] RAX: ffffffffffffffda RBX: 00007fb7615e5fa0 RCX: 00007fb76138f7c9 [ 121.821751][ T6541] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 121.821766][ T6541] RBP: 00007fb761413f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.821781][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.821795][ T6541] R13: 00007fb7615e6038 R14: 00007fb7615e5fa0 R15: 00007ffe83f589d8 [ 121.821832][ T6541] [ 122.606721][ T6558] process 'syz.1.140' launched ':,' with NULL argv: empty string added [ 123.494752][ T6593] zswap: compressor not available [ 123.846512][ T6612] netlink: 330 bytes leftover after parsing attributes in process `syz.1.151'. [ 127.738977][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 127.780960][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 128.589773][ T6737] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.940128][ T6780] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 131.338113][ T6788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.692483][ T6847] __vm_enough_memory: pid: 6847, comm: syz.1.191, bytes: 4398046511104 not enough memory for the allocation [ 132.995981][ T6869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.026249][ T6869] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.297957][ T6869] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.492860][ T6869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.502796][ T6884] Invalid ELF header magic: != ELF [ 133.580665][ T6869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.828632][ T6869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.880511][ T6869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.904936][ T6869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.070117][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.543949][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.940177][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.300935][ T6869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.371652][ T6869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.402099][ T6869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.443648][ T6869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.799465][ T6906] __vm_enough_memory: pid: 6906, comm: syz.0.202, bytes: 4398046511104 not enough memory for the allocation [ 137.150227][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.404280][ T6912] netlink: 330 bytes leftover after parsing attributes in process `syz.2.206'. [ 137.620357][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.021327][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.110422][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.117135][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.433359][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.220010][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.710812][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.100105][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.215259][ T6946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.522357][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.089350][ T6973] __vm_enough_memory: pid: 6973, comm: syz.2.216, bytes: 4398046511104 not enough memory for the allocation [ 142.158871][ T6968] can: request_module (can-proto-0) failed. [ 142.590191][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.696558][ T6991] blktrace: Concurrent blktraces are not allowed on loop5 [ 144.106987][ T7001] FAULT_INJECTION: forcing a failure. [ 144.106987][ T7001] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.151073][ T7001] CPU: 1 UID: 0 PID: 7001 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT(full) [ 144.151105][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.151118][ T7001] Call Trace: [ 144.151132][ T7001] [ 144.151141][ T7001] dump_stack_lvl+0x16c/0x1f0 [ 144.151180][ T7001] should_fail_ex+0x512/0x640 [ 144.151212][ T7001] get_futex_key+0x1085/0x15f0 [ 144.151242][ T7001] ? __pfx_get_futex_key+0x10/0x10 [ 144.151279][ T7001] futex_wake+0xea/0x530 [ 144.151313][ T7001] ? __pfx_futex_wake+0x10/0x10 [ 144.151358][ T7001] do_futex+0x1e3/0x350 [ 144.151385][ T7001] ? __pfx_do_futex+0x10/0x10 [ 144.151408][ T7001] ? __might_fault+0xe3/0x190 [ 144.151448][ T7001] mm_release+0x24e/0x300 [ 144.151479][ T7001] do_exit+0x69e/0x2bd0 [ 144.151507][ T7001] ? __pfx_do_exit+0x10/0x10 [ 144.151527][ T7001] ? do_raw_spin_lock+0x12c/0x2b0 [ 144.151551][ T7001] ? find_held_lock+0x2b/0x80 [ 144.151589][ T7001] do_group_exit+0xd3/0x2a0 [ 144.151614][ T7001] get_signal+0x2671/0x26d0 [ 144.151651][ T7001] ? vfs_write+0x15d/0x11d0 [ 144.151684][ T7001] ? __pfx_get_signal+0x10/0x10 [ 144.151716][ T7001] ? do_futex+0x122/0x350 [ 144.151744][ T7001] arch_do_signal_or_restart+0x8f/0x7a0 [ 144.151777][ T7001] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 144.151817][ T7001] ? fput+0x70/0xf0 [ 144.151837][ T7001] ? __pfx___x64_sys_futex+0x10/0x10 [ 144.151870][ T7001] exit_to_user_mode_loop+0x8c/0x540 [ 144.151902][ T7001] do_syscall_64+0x4ee/0xf80 [ 144.151927][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.151950][ T7001] RIP: 0033:0x7f7689b8f7c9 [ 144.151969][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.151989][ T7001] RSP: 002b:00007f7687d930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 144.152011][ T7001] RAX: fffffffffffffe00 RBX: 00007f7689de6458 RCX: 00007f7689b8f7c9 [ 144.152027][ T7001] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7689de6458 [ 144.152040][ T7001] RBP: 00007f7689de6450 R08: 0000000000000000 R09: 0000000000000000 [ 144.152054][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.152067][ T7001] R13: 00007f7689de64e8 R14: 00007ffebfe4c880 R15: 00007ffebfe4c968 [ 144.152101][ T7001] [ 146.393650][ T7054] __vm_enough_memory: pid: 7054, comm: syz.3.230, bytes: 4398046511104 not enough memory for the allocation [ 146.513876][ T7056] blktrace: Concurrent blktraces are not allowed on loop5 [ 149.957428][ T5839] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 150.744526][ T7104] blktrace: Concurrent blktraces are not allowed on loop5 [ 151.102282][ T7111] __vm_enough_memory: pid: 7111, comm: syz.0.246, bytes: 4398046511104 not enough memory for the allocation [ 151.852504][ T7122] netlink: 'syz.2.248': attribute type 2 has an invalid length. [ 152.020138][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.043297][ T7153] mmap: syz.2.258 (7153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.102527][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.256798][ T7178] aoe: invalid device specification [ 156.374895][ T5839] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 156.382658][ T5839] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 157.525831][ T7254] netlink: 'syz.1.279': attribute type 4 has an invalid length. [ 157.539350][ T7254] netlink: 314 bytes leftover after parsing attributes in process `syz.1.279'. [ 159.204074][ T7308] futex_wake_op: syz.0.290 tries to shift op by -2048; fix this program [ 159.224322][ T7308] futex_wake_op: syz.0.290 tries to shift op by -2048; fix this program [ 159.267641][ T7300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.301335][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 160.236568][ T7332] [U]  [ 161.148091][ T7379] FAULT_INJECTION: forcing a failure. [ 161.148091][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 161.179640][ T7362] Invalid ELF header magic: != ELF [ 161.229328][ T7379] CPU: 1 UID: 0 PID: 7379 Comm: syz.0.301 Not tainted syzkaller #0 PREEMPT(full) [ 161.229365][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.229380][ T7379] Call Trace: [ 161.229388][ T7379] [ 161.229397][ T7379] dump_stack_lvl+0x16c/0x1f0 [ 161.229443][ T7379] should_fail_ex+0x512/0x640 [ 161.229470][ T7379] ? __kmalloc_cache_noprof+0x5f/0x800 [ 161.229504][ T7379] should_failslab+0xc2/0x120 [ 161.229541][ T7379] __kmalloc_cache_noprof+0x80/0x800 [ 161.229569][ T7379] ? key_user_lookup+0x195/0x560 [ 161.229606][ T7379] ? key_user_lookup+0x195/0x560 [ 161.229636][ T7379] key_user_lookup+0x195/0x560 [ 161.229668][ T7379] ? __pfx_key_user_lookup+0x10/0x10 [ 161.229710][ T7379] key_alloc+0x18b/0x1330 [ 161.229749][ T7379] ? rcu_is_watching+0x12/0xc0 [ 161.229784][ T7379] ? __pfx_key_alloc+0x10/0x10 [ 161.229813][ T7379] ? lsm_blob_alloc+0x68/0x90 [ 161.229885][ T7379] keyring_alloc+0x44/0xc0 [ 161.229926][ T7379] install_thread_keyring_to_cred+0xc1/0x140 [ 161.229956][ T7379] keyctl_set_reqkey_keyring+0xcf/0x1c0 [ 161.229982][ T7379] __do_sys_keyctl+0x6d/0x590 [ 161.230008][ T7379] do_syscall_64+0xcd/0xf80 [ 161.230034][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.230059][ T7379] RIP: 0033:0x7f7689b8f7c9 [ 161.230079][ T7379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.230101][ T7379] RSP: 002b:00007f768a96b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 161.230124][ T7379] RAX: ffffffffffffffda RBX: 00007f7689de5fa0 RCX: 00007f7689b8f7c9 [ 161.230139][ T7379] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 161.230153][ T7379] RBP: 00007f7689c13f91 R08: 0000000000000008 R09: 0000000000000000 [ 161.230168][ T7379] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 161.230182][ T7379] R13: 00007f7689de6038 R14: 00007f7689de5fa0 R15: 00007ffebfe4c968 [ 161.230217][ T7379] [ 161.443223][ T7385] netlink: 342 bytes leftover after parsing attributes in process `syz.2.302'. [ 161.453159][ T7385] netlink: 342 bytes leftover after parsing attributes in process `syz.2.302'. [ 161.463035][ T7385] netlink: 342 bytes leftover after parsing attributes in process `syz.2.302'. [ 162.873571][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 164.394877][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 164.580656][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 165.024059][ T7484] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 165.397705][ T7483] syz.3.320 (7483) used greatest stack depth: 18664 bytes left [ 168.274952][ T7387] Process accounting resumed [ 168.532986][ T7585] FAULT_INJECTION: forcing a failure. [ 168.532986][ T7585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.551171][ T7585] CPU: 0 UID: 0 PID: 7585 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) [ 168.551202][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.551215][ T7585] Call Trace: [ 168.551223][ T7585] [ 168.551232][ T7585] dump_stack_lvl+0x16c/0x1f0 [ 168.551274][ T7585] should_fail_ex+0x512/0x640 [ 168.551307][ T7585] should_fail_alloc_page+0xe7/0x130 [ 168.551344][ T7585] prepare_alloc_pages+0x401/0x670 [ 168.551385][ T7585] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 168.551416][ T7585] ? __lock_acquire+0x436/0x2890 [ 168.551452][ T7585] ? rcu_is_watching+0x12/0xc0 [ 168.551491][ T7585] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.551522][ T7585] ? find_held_lock+0x2b/0x80 [ 168.551552][ T7585] ? page_table_check_set+0x7dd/0xa40 [ 168.551590][ T7585] ? __lock_acquire+0x436/0x2890 [ 168.551610][ T7585] ? look_up_lock_class+0x6b/0x130 [ 168.551634][ T7585] ? register_lock_class+0x41/0x4b0 [ 168.551656][ T7585] ? xas_find+0x303/0x890 [ 168.551675][ T7585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.551710][ T7585] ? policy_nodemask+0xea/0x4e0 [ 168.551747][ T7585] alloc_pages_mpol+0x1fb/0x550 [ 168.551782][ T7585] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 168.551826][ T7585] folio_alloc_mpol_noprof+0x36/0x2f0 [ 168.551853][ T7585] vma_alloc_folio_noprof+0xed/0x1e0 [ 168.551877][ T7585] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 168.551902][ T7585] ? rcu_read_unlock+0x2d/0xb0 [ 168.551936][ T7585] do_wp_page+0x202f/0x5010 [ 168.551980][ T7585] ? __pfx_do_wp_page+0x10/0x10 [ 168.552018][ T7585] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 168.552054][ T7585] __handle_mm_fault+0x1bd2/0x2bb0 [ 168.552086][ T7585] ? reacquire_held_locks+0xcd/0x1f0 [ 168.552110][ T7585] ? __pfx___handle_mm_fault+0x10/0x10 [ 168.552140][ T7585] ? lock_vma_under_rcu+0x176/0x580 [ 168.552176][ T7585] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 168.552217][ T7585] handle_mm_fault+0x3fe/0xad0 [ 168.552249][ T7585] do_user_addr_fault+0x60c/0x1370 [ 168.552281][ T7585] ? rcu_is_watching+0x12/0xc0 [ 168.552316][ T7585] exc_page_fault+0x64/0xc0 [ 168.552352][ T7585] asm_exc_page_fault+0x26/0x30 [ 168.552374][ T7585] RIP: 0033:0x7ff3f9d491e5 [ 168.552394][ T7585] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 168.552414][ T7585] RSP: 002b:00007ff3fab76de0 EFLAGS: 00010293 [ 168.552438][ T7585] RAX: 0000000000000008 RBX: 00007ff3fab17d60 RCX: 0000000000000000 [ 168.552452][ T7585] RDX: 0000000000000000 RSI: 00007ff3f9e51b9e RDI: 00007ff3fab17d60 [ 168.552466][ T7585] RBP: 00007ff3fab76f00 R08: 0000000000000000 R09: 0000000000000005 [ 168.552480][ T7585] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ff3f9e51740 [ 168.552494][ T7585] R13: 0000000000000016 R14: 00007ff3f9fba460 R15: 0000000000000000 [ 168.552528][ T7585] [ 168.552727][ T7585] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 169.143550][ T7596] netlink: 146 bytes leftover after parsing attributes in process `syz.3.348'. [ 169.177007][ T7597] FAULT_INJECTION: forcing a failure. [ 169.177007][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 169.193696][ T7597] CPU: 1 UID: 0 PID: 7597 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT(full) [ 169.193728][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.193741][ T7597] Call Trace: [ 169.193750][ T7597] [ 169.193759][ T7597] dump_stack_lvl+0x16c/0x1f0 [ 169.193802][ T7597] should_fail_ex+0x512/0x640 [ 169.193826][ T7597] ? __kmalloc_noprof+0xca/0x910 [ 169.193855][ T7597] should_failslab+0xc2/0x120 [ 169.193887][ T7597] __kmalloc_noprof+0xeb/0x910 [ 169.193910][ T7597] ? do_handle_open+0x554/0xd10 [ 169.193949][ T7597] ? do_handle_open+0x554/0xd10 [ 169.193981][ T7597] do_handle_open+0x554/0xd10 [ 169.194018][ T7597] ? __pfx_do_handle_open+0x10/0x10 [ 169.194050][ T7597] ? __x64_sys_futex+0x1e0/0x4c0 [ 169.194084][ T7597] ? xfd_validate_state+0x61/0x180 [ 169.194117][ T7597] ? do_syscall_64+0xcd/0xf80 [ 169.194137][ T7597] do_syscall_64+0xcd/0xf80 [ 169.194159][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.194182][ T7597] RIP: 0033:0x7ff3f9d8f7c9 [ 169.194200][ T7597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.194221][ T7597] RSP: 002b:00007ff3fab78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 169.194243][ T7597] RAX: ffffffffffffffda RBX: 00007ff3f9fe5fa0 RCX: 00007ff3f9d8f7c9 [ 169.194258][ T7597] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000006 [ 169.194273][ T7597] RBP: 00007ff3f9e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.194283][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.194295][ T7597] R13: 00007ff3f9fe6038 R14: 00007ff3f9fe5fa0 R15: 00007ffc6ef205a8 [ 169.194326][ T7597] [ 170.740141][ T7633] netlink: 342 bytes leftover after parsing attributes in process `syz.0.356'. [ 173.722910][ T7711] netlink: 330 bytes leftover after parsing attributes in process `syz.2.370'. [ 174.504528][ T7728] capability: warning: `syz.3.378' uses 32-bit capabilities (legacy support in use) [ 174.553493][ T7728] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 174.899811][ T5838] Bluetooth: hci1: Malformed HCI Event [ 176.262248][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.077174][ T5839] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 177.085099][ T5839] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 178.642314][ T7808] block2mtd: device name too long [ 179.072087][ T7831] FAULT_INJECTION: forcing a failure. [ 179.072087][ T7831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.072122][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(full) [ 179.072147][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.072159][ T7831] Call Trace: [ 179.072166][ T7831] [ 179.072174][ T7831] dump_stack_lvl+0x16c/0x1f0 [ 179.072210][ T7831] should_fail_ex+0x512/0x640 [ 179.072238][ T7831] should_fail_alloc_page+0xe7/0x130 [ 179.072266][ T7831] prepare_alloc_pages+0x401/0x670 [ 179.072303][ T7831] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 179.072328][ T7831] ? stack_trace_save+0x8e/0xc0 [ 179.072355][ T7831] ? __pfx_stack_trace_save+0x10/0x10 [ 179.072388][ T7831] ? stack_depot_save_flags+0x29/0x9b0 [ 179.072413][ T7831] ? __lock_acquire+0x436/0x2890 [ 179.072441][ T7831] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.072465][ T7831] ? __kasan_kmalloc+0xaa/0xb0 [ 179.072492][ T7831] ? kvm_arch_vcpu_create+0x283/0xb20 [ 179.072519][ T7831] ? __x64_sys_ioctl+0x18e/0x210 [ 179.072544][ T7831] ? do_syscall_64+0xcd/0xf80 [ 179.072564][ T7831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.072602][ T7831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.072637][ T7831] ? policy_nodemask+0xea/0x4e0 [ 179.072671][ T7831] alloc_pages_mpol+0x1fb/0x550 [ 179.072704][ T7831] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.072746][ T7831] alloc_pages_noprof+0x131/0x390 [ 179.072779][ T7831] get_zeroed_page_noprof+0x18/0xb0 [ 179.072811][ T7831] kvm_create_lapic+0x38c/0x4d0 [ 179.072842][ T7831] kvm_arch_vcpu_create+0x283/0xb20 [ 179.072867][ T7831] ? lockdep_init_map_type+0x5c/0x270 [ 179.072895][ T7831] kvm_vm_ioctl+0x105e/0x4090 [ 179.072941][ T7831] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 179.072987][ T7831] ? kasan_quarantine_put+0x10a/0x240 [ 179.073015][ T7831] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.073042][ T7831] ? find_held_lock+0x2b/0x80 [ 179.073071][ T7831] ? tomoyo_path_number_perm+0x295/0x580 [ 179.073103][ T7831] ? tomoyo_path_number_perm+0x18d/0x580 [ 179.073132][ T7831] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.073158][ T7831] ? futex_wake+0x1ad/0x530 [ 179.073195][ T7831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.073229][ T7831] ? do_vfs_ioctl+0x128/0x14f0 [ 179.073255][ T7831] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.073292][ T7831] ? find_held_lock+0x2b/0x80 [ 179.073318][ T7831] ? hook_file_ioctl_common+0x144/0x410 [ 179.073353][ T7831] ? __fget_files+0x20e/0x3c0 [ 179.073388][ T7831] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 179.073416][ T7831] __x64_sys_ioctl+0x18e/0x210 [ 179.073445][ T7831] do_syscall_64+0xcd/0xf80 [ 179.073468][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.073490][ T7831] RIP: 0033:0x7f296fb8f7c9 [ 179.073509][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.073529][ T7831] RSP: 002b:00007f2970acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.073550][ T7831] RAX: ffffffffffffffda RBX: 00007f296fde6090 RCX: 00007f296fb8f7c9 [ 179.073565][ T7831] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000003 [ 179.073578][ T7831] RBP: 00007f296fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.073591][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.073603][ T7831] R13: 00007f296fde6128 R14: 00007f296fde6090 R15: 00007ffe3e85c968 [ 179.073635][ T7831] [ 179.073673][ T7831] malloc apic regs error for vcpu 0 [ 182.789177][ T5838] Bluetooth: hci1: unexpected event 0x01 length: 124 > 1 [ 183.290641][ T7884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.304382][ T7884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.311980][ T7884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.318192][ T7884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.718854][ T7906] zswap: compressor  not available [ 183.743036][ T7915] __vm_enough_memory: pid: 7915, comm: syz.1.414, bytes: 4398046511104 not enough memory for the allocation [ 183.766506][ T7908] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 184.237507][ T7920] binder: 7919:7920 ioctl c00c6211 0 returned -14 [ 184.277510][ T10] smpboot: CPU 1 is now offline [ 184.553243][ T7926] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 184.581282][ T7918] ------------[ cut here ]------------ [ 184.581946][ T7918] [ 184.581954][ T7918] ====================================================== [ 184.581961][ T7918] WARNING: possible circular locking dependency detected [ 184.581973][ T7918] syzkaller #0 Not tainted [ 184.581984][ T7918] ------------------------------------------------------ [ 184.581992][ T7918] syz.2.416/7918 is trying to acquire lock: [ 184.582003][ T7918] ffffffff8e2d6a40 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 184.582061][ T7918] [ 184.582061][ T7918] but task is already holding lock: [ 184.582068][ T7918] ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 184.582122][ T7918] [ 184.582122][ T7918] which lock already depends on the new lock. [ 184.582122][ T7918] [ 184.582129][ T7918] [ 184.582129][ T7918] the existing dependency chain (in reverse order) is: [ 184.582136][ T7918] [ 184.582136][ T7918] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 184.582164][ T7918] _raw_spin_lock_nested+0x31/0x40 [ 184.582193][ T7918] raw_spin_rq_lock_nested+0x29/0x130 [ 184.582219][ T7918] task_rq_lock+0xcf/0x490 [ 184.582244][ T7918] cgroup_move_task+0x81/0x2a0 [ 184.582273][ T7918] css_set_move_task+0x288/0x5f0 [ 184.582312][ T7918] cgroup_post_fork+0x201/0x9e0 [ 184.582343][ T7918] copy_process+0x56b6/0x7430 [ 184.582373][ T7918] kernel_clone+0xfc/0x910 [ 184.582403][ T7918] user_mode_thread+0xc8/0x110 [ 184.582434][ T7918] rest_init+0x23/0x2b0 [ 184.582456][ T7918] start_kernel+0x3ef/0x4d0 [ 184.582479][ T7918] x86_64_start_reservations+0x18/0x30 [ 184.582512][ T7918] x86_64_start_kernel+0x130/0x190 [ 184.582537][ T7918] common_startup_64+0x13e/0x148 [ 184.582562][ T7918] [ 184.582562][ T7918] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 184.582589][ T7918] _raw_spin_lock_irqsave+0x3a/0x60 [ 184.582617][ T7918] try_to_wake_up+0xb7/0x1860 [ 184.582641][ T7918] __wake_up_common+0x135/0x1f0 [ 184.582659][ T7918] __wake_up+0x31/0x60 [ 184.582685][ T7918] tty_port_default_wakeup+0x4d/0x60 [ 184.582716][ T7918] serial8250_tx_chars+0x68e/0x860 [ 184.582748][ T7918] serial8250_handle_irq+0x761/0xcb0 [ 184.582767][ T7918] serial8250_default_handle_irq+0x9e/0x270 [ 184.582788][ T7918] serial8250_interrupt+0xf8/0x1d0 [ 184.582809][ T7918] __handle_irq_event_percpu+0x236/0x890 [ 184.582836][ T7918] handle_irq_event+0xab/0x1e0 [ 184.582860][ T7918] handle_edge_irq+0x3ca/0x9e0 [ 184.582883][ T7918] __common_interrupt+0xd0/0x2f0 [ 184.582912][ T7918] common_interrupt+0xba/0xe0 [ 184.582935][ T7918] asm_common_interrupt+0x26/0x40 [ 184.582955][ T7918] __orc_find+0x4/0xf0 [ 184.582977][ T7918] unwind_next_frame+0x2ec/0x20b0 [ 184.583001][ T7918] arch_stack_walk+0x94/0x100 [ 184.583023][ T7918] stack_trace_save+0x8e/0xc0 [ 184.583052][ T7918] save_stack+0x160/0x1f0 [ 184.583078][ T7918] __reset_page_owner+0x84/0x1a0 [ 184.583106][ T7918] free_unref_folios+0xa22/0x1610 [ 184.583129][ T7918] folios_put_refs+0x4be/0x750 [ 184.583152][ T7918] folio_batch_move_lru+0x278/0x3a0 [ 184.583176][ T7918] __folio_batch_add_and_move+0x318/0xc30 [ 184.583201][ T7918] folio_add_lru_vma+0xb0/0x100 [ 184.583225][ T7918] do_wp_page+0x1763/0x5010 [ 184.583253][ T7918] __handle_mm_fault+0x1bd2/0x2bb0 [ 184.583273][ T7918] handle_mm_fault+0x3fe/0xad0 [ 184.583298][ T7918] do_user_addr_fault+0x60c/0x1370 [ 184.583322][ T7918] exc_page_fault+0x64/0xc0 [ 184.583353][ T7918] asm_exc_page_fault+0x26/0x30 [ 184.583372][ T7918] [ 184.583372][ T7918] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 184.583402][ T7918] _raw_spin_lock_irqsave+0x3a/0x60 [ 184.583431][ T7918] __wake_up+0x1c/0x60 [ 184.583457][ T7918] tty_port_default_wakeup+0x4d/0x60 [ 184.583487][ T7918] serial8250_tx_chars+0x68e/0x860 [ 184.583517][ T7918] serial8250_handle_irq+0x761/0xcb0 [ 184.583536][ T7918] serial8250_default_handle_irq+0x9e/0x270 [ 184.583557][ T7918] serial8250_interrupt+0xf8/0x1d0 [ 184.583578][ T7918] __handle_irq_event_percpu+0x236/0x890 [ 184.583604][ T7918] handle_irq_event+0xab/0x1e0 [ 184.583629][ T7918] handle_edge_irq+0x3ca/0x9e0 [ 184.583653][ T7918] __common_interrupt+0xd0/0x2f0 [ 184.583681][ T7918] common_interrupt+0xba/0xe0 [ 184.583704][ T7918] asm_common_interrupt+0x26/0x40 [ 184.583723][ T7918] pv_native_safe_halt+0xf/0x20 [ 184.583752][ T7918] default_idle+0x13/0x20 [ 184.583773][ T7918] default_idle_call+0x6c/0xb0 [ 184.583794][ T7918] do_idle+0x38d/0x510 [ 184.583818][ T7918] cpu_startup_entry+0x4f/0x60 [ 184.583842][ T7918] rest_init+0x16b/0x2b0 [ 184.583864][ T7918] start_kernel+0x3ef/0x4d0 [ 184.583886][ T7918] x86_64_start_reservations+0x18/0x30 [ 184.583909][ T7918] x86_64_start_kernel+0x130/0x190 [ 184.583933][ T7918] common_startup_64+0x13e/0x148 [ 184.583956][ T7918] [ 184.583956][ T7918] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 184.583983][ T7918] _raw_spin_lock_irqsave+0x3a/0x60 [ 184.584011][ T7918] serial8250_console_write+0x181/0x1890 [ 184.584032][ T7918] console_flush_one_record+0x796/0xc60 [ 184.584058][ T7918] console_unlock+0xef/0x240 [ 184.584081][ T7918] vprintk_emit+0x407/0x6b0 [ 184.584106][ T7918] _printk+0xc7/0x100 [ 184.584124][ T7918] register_console+0x823/0x1210 [ 184.584150][ T7918] univ8250_console_init+0x5f/0x90 [ 184.584177][ T7918] console_init+0x152/0x600 [ 184.584201][ T7918] start_kernel+0x298/0x4d0 [ 184.584222][ T7918] x86_64_start_reservations+0x18/0x30 [ 184.584246][ T7918] x86_64_start_kernel+0x130/0x190 [ 184.584269][ T7918] common_startup_64+0x13e/0x148 [ 184.584297][ T7918] [ 184.584297][ T7918] -> #0 (console_owner){-...}-{0:0}: [ 184.584325][ T7918] __lock_acquire+0x1669/0x2890 [ 184.584344][ T7918] lock_acquire+0x179/0x330 [ 184.584363][ T7918] console_lock_spinning_enable+0x72/0x80 [ 184.584390][ T7918] console_flush_one_record+0x73f/0xc60 [ 184.584417][ T7918] console_unlock+0xef/0x240 [ 184.584442][ T7918] vprintk_emit+0x407/0x6b0 [ 184.584467][ T7918] _printk+0xc7/0x100 [ 184.584486][ T7918] __report_bug+0x3a6/0x520 [ 184.584512][ T7918] report_bug+0xb2/0x220 [ 184.584538][ T7918] handle_bug+0x127/0x260 [ 184.584558][ T7918] exc_invalid_op+0x17/0x50 [ 184.584581][ T7918] asm_exc_invalid_op+0x1a/0x20 [ 184.584600][ T7918] update_rq_clock+0x34a/0xc70 [ 184.584624][ T7918] __schedule+0x20fd/0x5ee0 [ 184.584651][ T7918] preempt_schedule_common+0x44/0xc0 [ 184.584679][ T7918] preempt_schedule_thunk+0x16/0x30 [ 184.584696][ T7918] _raw_spin_unlock_irq+0x44/0x50 [ 184.584723][ T7918] snd_rawmidi_write+0x48c/0xc10 [ 184.584745][ T7918] vfs_write+0x2a0/0x11d0 [ 184.584770][ T7918] ksys_write+0x1f8/0x250 [ 184.584795][ T7918] do_syscall_64+0xcd/0xf80 [ 184.584812][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.584831][ T7918] [ 184.584831][ T7918] other info that might help us debug this: [ 184.584831][ T7918] [ 184.584836][ T7918] Chain exists of: [ 184.584836][ T7918] console_owner --> &p->pi_lock --> &rq->__lock [ 184.584836][ T7918] [ 184.584868][ T7918] Possible unsafe locking scenario: [ 184.584868][ T7918] [ 184.584873][ T7918] CPU0 CPU1 [ 184.584878][ T7918] ---- ---- [ 184.584883][ T7918] lock(&rq->__lock); [ 184.584895][ T7918] lock(&p->pi_lock); [ 184.584909][ T7918] lock(&rq->__lock); [ 184.584922][ T7918] lock(console_owner); [ 184.584935][ T7918] [ 184.584935][ T7918] *** DEADLOCK *** [ 184.584935][ T7918] [ 184.584940][ T7918] 3 locks held by syz.2.416/7918: [ 184.584951][ T7918] #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 184.585005][ T7918] #1: ffffffff8e3b6e80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 184.585050][ T7918] #2: ffffffff8e3b6ef8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 184.585102][ T7918] [ 184.585102][ T7918] stack backtrace: [ 184.585113][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(full) [ 184.585137][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.585150][ T7918] Call Trace: [ 184.585157][ T7918] [ 184.585171][ T7918] dump_stack_lvl+0x116/0x1f0 [ 184.585202][ T7918] print_circular_bug+0x275/0x340 [ 184.585234][ T7918] check_noncircular+0x146/0x160 [ 184.585268][ T7918] __lock_acquire+0x1669/0x2890 [ 184.585298][ T7918] lock_acquire+0x179/0x330 [ 184.585317][ T7918] ? console_lock_spinning_enable+0x61/0x80 [ 184.585344][ T7918] ? console_lock_spinning_enable+0x4a/0x80 [ 184.585372][ T7918] console_lock_spinning_enable+0x72/0x80 [ 184.585397][ T7918] ? console_lock_spinning_enable+0x61/0x80 [ 184.585422][ T7918] console_flush_one_record+0x73f/0xc60 [ 184.585453][ T7918] ? __pfx_console_flush_one_record+0x10/0x10 [ 184.585479][ T7918] ? __lock_acquire+0x436/0x2890 [ 184.585502][ T7918] ? is_printk_cpu_sync_owner+0x32/0x40 [ 184.585532][ T7918] console_unlock+0xef/0x240 [ 184.585557][ T7918] ? __pfx_console_unlock+0x10/0x10 [ 184.585583][ T7918] ? do_raw_spin_unlock+0xb0/0x230 [ 184.585608][ T7918] ? _printk+0xc7/0x100 [ 184.585627][ T7918] ? __down_trylock_console_sem+0xb0/0x140 [ 184.585651][ T7918] vprintk_emit+0x407/0x6b0 [ 184.585677][ T7918] ? __pfx_vprintk_emit+0x10/0x10 [ 184.585705][ T7918] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 184.585735][ T7918] ? is_bpf_text_address+0x94/0x1a0 [ 184.585764][ T7918] _printk+0xc7/0x100 [ 184.585784][ T7918] ? __pfx__printk+0x10/0x10 [ 184.585807][ T7918] ? __report_bug+0x396/0x520 [ 184.585836][ T7918] __report_bug+0x3a6/0x520 [ 184.585861][ T7918] ? update_rq_clock+0x34a/0xc70 [ 184.585889][ T7918] ? __pfx___report_bug+0x10/0x10 [ 184.585917][ T7918] ? rcu_is_watching+0x12/0xc0 [ 184.585945][ T7918] ? trace_sched_set_need_resched_tp+0xf3/0x130 [ 184.585980][ T7918] ? update_rq_clock+0x34a/0xc70 [ 184.586007][ T7918] report_bug+0xb2/0x220 [ 184.586033][ T7918] ? update_rq_clock+0x34a/0xc70 [ 184.586060][ T7918] handle_bug+0x127/0x260 [ 184.586081][ T7918] exc_invalid_op+0x17/0x50 [ 184.586104][ T7918] asm_exc_invalid_op+0x1a/0x20 [ 184.586123][ T7918] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 184.586152][ T7918] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 184.586171][ T7918] RSP: 0018:ffffc90002fd79a0 EFLAGS: 00010046 [ 184.586187][ T7918] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 184.586200][ T7918] RDX: 0000000000000000 RSI: ffffffff8daa5da7 RDI: ffffffff8bf2b400 [ 184.586214][ T7918] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff2111fda [ 184.586227][ T7918] R10: ffffffff9088fed7 R11: 0000000000000001 R12: ffffffff90892f54 [ 184.586241][ T7918] R13: ffffffff8dd66620 R14: ffff88801dabbd00 R15: ffff8880b853adc0 [ 184.586265][ T7918] __schedule+0x20fd/0x5ee0 [ 184.586306][ T7918] ? __pfx___schedule+0x10/0x10 [ 184.586334][ T7918] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 184.586358][ T7918] ? preempt_schedule_thunk+0x16/0x30 [ 184.586378][ T7918] preempt_schedule_common+0x44/0xc0 [ 184.586408][ T7918] preempt_schedule_thunk+0x16/0x30 [ 184.586431][ T7918] _raw_spin_unlock_irq+0x44/0x50 [ 184.586459][ T7918] snd_rawmidi_write+0x48c/0xc10 [ 184.586486][ T7918] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 184.586510][ T7918] ? common_file_perm+0x1b1/0x500 [ 184.586535][ T7918] ? __pfx_default_wake_function+0x10/0x10 [ 184.586563][ T7918] ? bpf_lsm_file_permission+0x9/0x10 [ 184.586587][ T7918] ? security_file_permission+0x71/0x210 [ 184.586614][ T7918] ? rw_verify_area+0xcf/0x6c0 [ 184.586639][ T7918] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 184.586662][ T7918] vfs_write+0x2a0/0x11d0 [ 184.586692][ T7918] ? __pfx_vfs_write+0x10/0x10 [ 184.586718][ T7918] ? find_held_lock+0x2b/0x80 [ 184.586743][ T7918] ? __fget_files+0x204/0x3c0 [ 184.586773][ T7918] ? __fget_files+0x20e/0x3c0 [ 184.586804][ T7918] ksys_write+0x1f8/0x250 [ 184.586831][ T7918] ? __pfx_ksys_write+0x10/0x10 [ 184.586862][ T7918] do_syscall_64+0xcd/0xf80 [ 184.586882][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.586903][ T7918] RIP: 0033:0x7ff3f9d8f7c9 [ 184.586920][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.586938][ T7918] RSP: 002b:00007ff3fab78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.586957][ T7918] RAX: ffffffffffffffda RBX: 00007ff3f9fe5fa0 RCX: 00007ff3f9d8f7c9 [ 184.586971][ T7918] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000007 [ 184.586984][ T7918] RBP: 00007ff3f9e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.586996][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.587008][ T7918] R13: 00007ff3f9fe6038 R14: 00007ff3f9fe5fa0 R15: 00007ffc6ef205a8 [ 184.587030][ T7918] [ 185.850178][ T7918] WARNING: kernel/sched/sched.h:1571 at update_rq_clock+0x34a/0xc70, CPU#0: syz.2.416/7918 [ 185.860177][ T7918] Modules linked in: [ 185.864068][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(full) [ 185.873263][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.883321][ T7918] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 185.888875][ T7918] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 185.908479][ T7918] RSP: 0018:ffffc90002fd79a0 EFLAGS: 00010046 [ 185.914541][ T7918] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 185.922506][ T7918] RDX: 0000000000000000 RSI: ffffffff8daa5da7 RDI: ffffffff8bf2b400 [ 185.930472][ T7918] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff2111fda [ 185.938437][ T7918] R10: ffffffff9088fed7 R11: 0000000000000001 R12: ffffffff90892f54 [ 185.946512][ T7918] R13: ffffffff8dd66620 R14: ffff88801dabbd00 R15: ffff8880b853adc0 [ 185.954491][ T7918] FS: 00007ff3fab786c0(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 185.963508][ T7918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.970088][ T7918] CR2: 00002000001e5000 CR3: 0000000035222000 CR4: 00000000003526f0 [ 185.978066][ T7918] Call Trace: [ 185.981341][ T7918] [ 185.984267][ T7918] __schedule+0x20fd/0x5ee0 [ 185.988787][ T7918] ? __pfx___schedule+0x10/0x10 [ 185.993639][ T7918] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.999012][ T7918] ? preempt_schedule_thunk+0x16/0x30 [ 186.004380][ T7918] preempt_schedule_common+0x44/0xc0 [ 186.009669][ T7918] preempt_schedule_thunk+0x16/0x30 [ 186.014863][ T7918] _raw_spin_unlock_irq+0x44/0x50 [ 186.019890][ T7918] snd_rawmidi_write+0x48c/0xc10 [ 186.024829][ T7918] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 186.030291][ T7918] ? common_file_perm+0x1b1/0x500 [ 186.035752][ T7918] ? __pfx_default_wake_function+0x10/0x10 [ 186.041566][ T7918] ? bpf_lsm_file_permission+0x9/0x10 [ 186.046939][ T7918] ? security_file_permission+0x71/0x210 [ 186.052572][ T7918] ? rw_verify_area+0xcf/0x6c0 [ 186.057339][ T7918] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 186.062803][ T7918] vfs_write+0x2a0/0x11d0 [ 186.067140][ T7918] ? __pfx_vfs_write+0x10/0x10 [ 186.071903][ T7918] ? find_held_lock+0x2b/0x80 [ 186.076579][ T7918] ? __fget_files+0x204/0x3c0 [ 186.081274][ T7918] ? __fget_files+0x20e/0x3c0 [ 186.085954][ T7918] ksys_write+0x1f8/0x250 [ 186.090287][ T7918] ? __pfx_ksys_write+0x10/0x10 [ 186.095158][ T7918] do_syscall_64+0xcd/0xf80 [ 186.099678][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.105587][ T7918] RIP: 0033:0x7ff3f9d8f7c9 [ 186.110006][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.129616][ T7918] RSP: 002b:00007ff3fab78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.138032][ T7918] RAX: ffffffffffffffda RBX: 00007ff3f9fe5fa0 RCX: 00007ff3f9d8f7c9 [ 186.145998][ T7918] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000007 [ 186.153967][ T7918] RBP: 00007ff3f9e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.161936][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.169907][ T7918] R13: 00007ff3f9fe6038 R14: 00007ff3f9fe5fa0 R15: 00007ffc6ef205a8 [ 186.177886][ T7918] [ 186.180899][ T7918] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.188172][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(full) [ 186.197403][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.207457][ T7918] Call Trace: [ 186.210730][ T7918] [ 186.213659][ T7918] dump_stack_lvl+0x3d/0x1f0 [ 186.218267][ T7918] vpanic+0x640/0x6f0 [ 186.222251][ T7918] ? update_rq_clock+0x34a/0xc70 [ 186.227200][ T7918] panic+0xca/0xd0 [ 186.230920][ T7918] ? __pfx_panic+0x10/0x10 [ 186.235344][ T7918] check_panic_on_warn+0xab/0xb0 [ 186.240281][ T7918] __warn+0x108/0x3c0 [ 186.244287][ T7918] __report_bug+0x2a0/0x520 [ 186.248796][ T7918] ? update_rq_clock+0x34a/0xc70 [ 186.253738][ T7918] ? __pfx___report_bug+0x10/0x10 [ 186.258768][ T7918] ? rcu_is_watching+0x12/0xc0 [ 186.263537][ T7918] ? trace_sched_set_need_resched_tp+0xf3/0x130 [ 186.269789][ T7918] ? update_rq_clock+0x34a/0xc70 [ 186.274732][ T7918] report_bug+0xb2/0x220 [ 186.278982][ T7918] ? update_rq_clock+0x34a/0xc70 [ 186.283925][ T7918] handle_bug+0x127/0x260 [ 186.288255][ T7918] exc_invalid_op+0x17/0x50 [ 186.292760][ T7918] asm_exc_invalid_op+0x1a/0x20 [ 186.297607][ T7918] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 186.303158][ T7918] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 186.322765][ T7918] RSP: 0018:ffffc90002fd79a0 EFLAGS: 00010046 [ 186.328854][ T7918] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 186.336829][ T7918] RDX: 0000000000000000 RSI: ffffffff8daa5da7 RDI: ffffffff8bf2b400 [ 186.344795][ T7918] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff2111fda [ 186.352762][ T7918] R10: ffffffff9088fed7 R11: 0000000000000001 R12: ffffffff90892f54 [ 186.360727][ T7918] R13: ffffffff8dd66620 R14: ffff88801dabbd00 R15: ffff8880b853adc0 [ 186.368767][ T7918] __schedule+0x20fd/0x5ee0 [ 186.373289][ T7918] ? __pfx___schedule+0x10/0x10 [ 186.378144][ T7918] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.383516][ T7918] ? preempt_schedule_thunk+0x16/0x30 [ 186.388883][ T7918] preempt_schedule_common+0x44/0xc0 [ 186.394172][ T7918] preempt_schedule_thunk+0x16/0x30 [ 186.399367][ T7918] _raw_spin_unlock_irq+0x44/0x50 [ 186.404408][ T7918] snd_rawmidi_write+0x48c/0xc10 [ 186.409352][ T7918] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 186.414813][ T7918] ? common_file_perm+0x1b1/0x500 [ 186.419839][ T7918] ? __pfx_default_wake_function+0x10/0x10 [ 186.425648][ T7918] ? bpf_lsm_file_permission+0x9/0x10 [ 186.431024][ T7918] ? security_file_permission+0x71/0x210 [ 186.436656][ T7918] ? rw_verify_area+0xcf/0x6c0 [ 186.441423][ T7918] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 186.446882][ T7918] vfs_write+0x2a0/0x11d0 [ 186.451219][ T7918] ? __pfx_vfs_write+0x10/0x10 [ 186.455984][ T7918] ? find_held_lock+0x2b/0x80 [ 186.460661][ T7918] ? __fget_files+0x204/0x3c0 [ 186.465340][ T7918] ? __fget_files+0x20e/0x3c0 [ 186.470039][ T7918] ksys_write+0x1f8/0x250 [ 186.474384][ T7918] ? __pfx_ksys_write+0x10/0x10 [ 186.479273][ T7918] do_syscall_64+0xcd/0xf80 [ 186.483789][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.489695][ T7918] RIP: 0033:0x7ff3f9d8f7c9 [ 186.494107][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.513802][ T7918] RSP: 002b:00007ff3fab78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.522218][ T7918] RAX: ffffffffffffffda RBX: 00007ff3f9fe5fa0 RCX: 00007ff3f9d8f7c9 [ 186.530186][ T7918] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000007 [ 186.538155][ T7918] RBP: 00007ff3f9e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.546121][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.554175][ T7918] R13: 00007ff3f9fe6038 R14: 00007ff3f9fe5fa0 R15: 00007ffc6ef205a8 [ 186.562158][ T7918] [ 186.565630][ T7918] Kernel Offset: disabled [ 186.569989][ T7918] Rebooting in 86400 seconds..