last executing test programs: 7.319231508s ago: executing program 2 (id=575): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port7/power/pm_qos_no_power_off\x00', 0x440000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x1000006}, {0xe63c, 0x1, 0x52, 0x85, 0x53, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x9, 0x202000d, 0x101, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000900), 0xffffffffffffffff) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) fcntl$auto_F_SETLK(r1, 0x6, 0x6) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, r0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0xa, 0x1) r3 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r3, 0x8000) munmap$auto(0x0, 0xffffffff) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x20009, 0xe2, 0x30, 0x405, 0x8000) 5.867707137s ago: executing program 2 (id=579): close_range$auto(0x2, 0x8, 0x0) symlink$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0xd, 0x80000000, 0x1005, 0x8, 0x40000000000000, 0x3, 0x2, 0x0, 0xab, 0x2, 0x9]}, 0x0) mlockall$auto(0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0xed1) 5.61171633s ago: executing program 2 (id=580): migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x8000000000000000, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800008c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) memfd_create$auto(0x0, 0xe) write$auto(0xffffffffffffffff, 0x0, 0x7ffffffd) dup2$auto(0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x3, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x101, 0x810004, 0x2400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000240)="48db6bd805b269c38eeeaf125665d3e3e0a357eb282c50596d0fbcd0f63275c65e718c37084046a2316b60365c4569ad187e1e019c2c3263a5fc1ae5c5acd878f24a0463aedaea6d29df21ce592abd16430819a25aedce6499488f70ea81838c7b4eb72ab5a5b74fb8167351c360d0326e3ef797e50755a49f4b2209a04f86b702000000000000008f372ed5befd288523ecac14993b0143d2a4ae44da89680cde759b4bfaf8575f2d1a9b052ec6e1306477", 0x12, 0x0, 0x5, 0x0, 0x2, 0xe}, 0x801009}, 0x80005, 0x20000000) msync$auto(0x6, 0x2, 0x294d) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port8/location\x00', 0x248980, 0x0) pread64$auto(r2, 0x0, 0x3f87e220, 0x200009) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000000c0)="eff845967b5df7faec33b73a2c10757a3ead77d50e305b42393252", 0x1b) r3 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x20a241, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000001c0)={0x1, 0xffffffff, [{r3, 0x0, 0x682, 0x9}]}) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x0) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setresgid$auto(0x0, 0x0, 0x0) 5.12442111s ago: executing program 3 (id=583): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) socket(0x11, 0x3, 0x300) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)={0xa, 0xf6d5, 0x6, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) write$auto(r1, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mount$auto(0x0, 0x0, 0x0, 0xc, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) memfd_create$auto(0x0, 0xe) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x80000001) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 4.232403501s ago: executing program 0 (id=588): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x7, 0x0, 0x5, 0xb}, 0xffb}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x89ef, 0x74) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25010000000a000300232f5b082e0000005b000500c59dd41b9ed2eb39ad99459bbb1241c9102f1a95a30b23acef5e9122df81a8aa0ee9acc8aded94579b4c77a4e31e98f50f9a6df9ebb31ecf8a1286abb44a31f4e523941e325331aa0c85f2279c4769e679ee072e7358c1000c00048008002000", @ANYRES32=0x0, @ANYBLOB="8c000500424508dab6921bf843e82dba23f2d21888ec5edd0b591ee5ebe7c2e233085d3e823faae0da120413aa52fe58560abed9ee8e004e9c36f86dadffe1fe7fa52de3a4622e2ec316eabf390c1edccf02d561c6e7fdb5f9a083ce66a8acf16e874fefb2f77374a2627ac1af3349480181fef58c88e03a021cdaa616aac3055a79bc3a5c8ef5cf0b98a78c8fe934659a0f028d"], 0x11c}}, 0xc880) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4042, 0x0) socket(0x2d, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) write$auto(0x3, 0x0, 0xfdf3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x5408, 0x0) 3.554184738s ago: executing program 0 (id=590): ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d4}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x48a82, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xda9d, 0x1, 0x7}, 0x9, 0xfffffffc) landlock_restrict_self$auto(r0, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, 0x0, 0x24000880) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0xe42b, 0x4c0, 0x4100eb7, 0x401, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000280)='\adev/audio\x921\r$D\xa8g\xe8$n\xeep\xd9\xdbU\x87M\xe3}\x1a\xdf\xec\x94Y\xc3\xcf\xb0\xa4\x90\xdat\x16\x03\xf16\x16W\xff\x03\xd2^\x00p\xb3\xfc\x9e&FZ\x1b\aFr\xc6\x92', 0x2) write$auto(0x3, 0x0, 0xffd8) madvise$auto(0x6, 0x1, 0x19) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/laptop_mode\x00', 0x183102, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000000140)="00de14d1", 0x4) sysfs$auto(0x2, 0x23, 0x0) mknod$auto(&(0x7f0000000180)='./file0\x00', 0xf800, 0x6) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x1, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/vlan/vlan1\x00', 0x18b202, 0x0) pread64$auto(r4, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto_IPC_INFO(0xa94, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x105242, 0x9) semctl$auto_IPC_SET(0x2, 0xab08, 0x1, 0x10001) 3.523174077s ago: executing program 1 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0xfe}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 3.516691282s ago: executing program 2 (id=592): socket(0x1e, 0x80805, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/206, 0xce) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_NVRAM_INIT(r2, 0x7040, 0x0) 3.410197779s ago: executing program 3 (id=593): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000200)='J\xb2^JJL\x0e\xa2=\x97\xa9\x9a\xd3Mu\xc4\xfao7\xb7P\xd0\xa8\x9b\xe8\x96\xccA\xc5\xdd\xb3\x18\x89\xcf\xdf1 c\xdbgI\x93\x8d(\xf4\xe8\xeft\xa7\"D\xa9/\xf5J\v\xb58Y\xabG[\xaaK\x01tq!\x85\xd5Y\xbb\xe7\xd0\x17\xe2', 0x10000) mmap$auto(0x0, 0x810004, 0xffffffff, 0x8000000008011, 0x3, 0x8000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x28700, 0x0) (async) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKPBSZGET(r1, 0x127b, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) inotify_init1$auto(0x39) (async) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000dd, 0xeb2, 0x401, 0x8000) (async) mseal$auto(0x0, 0x7dda, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) write$auto_def_blk_fops_fs(r3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create$auto(0x20009) (async) r5 = epoll_create$auto(0x3e) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) (async) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(0xffffffffffffffff, 0x0, 0x20040804) (async) r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x3b72, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) (async) epoll_ctl$auto(r5, 0x1, r4, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x11, 0x401}, {0xe48, 0x5}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.315658959s ago: executing program 1 (id=594): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x7, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0) read$auto_tracing_pipe_fops_trace(r3, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) setsockopt$auto(r2, 0x0, 0x22, 0x0, 0x28) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x9, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0x59, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e15f334a572cad539da201096bbbc2ce7db19c429b3f", 0x35) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 3.124638381s ago: executing program 2 (id=595): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x7, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0) read$auto_tracing_pipe_fops_trace(r3, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) setsockopt$auto(r2, 0x0, 0x22, 0x0, 0x28) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x9, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0x59, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e15f334a572cad539da201096bbbc2ce7db19c42", 0x33) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 2.727514826s ago: executing program 3 (id=596): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x111442, 0x0) r0 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x95ee, 0x9, 0x0, 0x6, 0xffffffffffffffff, 0xee01, 0x0, 0x3, 0x8, 0x3e, 0x2, 0x40, 0x5, 0xa, 0xfffffffffffffe00, 0x2, 0x7}) stat$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xa778000000000, 0xe, 0x8, 0x401, 0xee00, 0x0, 0x0, 0xfff, 0x200000000000000, 0x9, 0x1, 0x402, 0x3, 0x7, 0x1b, 0x8000000000000001, 0x3}) shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000000380)={{0x7, 0xee01, 0xffffffffffffffff, 0x6, 0xf9, 0xbb5b}, 0x3, 0x1, 0x100, 0x80000, @raw=0x8, @inferred=r0, 0x2, 0x0, &(0x7f0000000240)="4bab35e272ad0a55cd0b8913e88bfcdd54996e64de64c1bf014086527b37c9f97b59601afe8f73c3a6f215f5bfe292825c1e370a86ed0465eb366daef34e56d80c79ce9d035c0d09c2dcb9dff1e9ea91420878fb546470873c57559486891af4cf61932a719f15d1da77738e46122bb6bdec150c68e4ac81a5e71ab26fdb15203897759ecc97ebd7a09ea1770d5cff372490cd5e1d25a3f8ef070872981275658e172d38b212d00422b1693319f6b31f3ce74841f6f4cc0d09593aa03b20410d34f9aefe60ef66735a9e1f0d6004", &(0x7f0000000340)="baf098d16b42b9bbe24950159724283829ec5d744c6905d8a72b7a5b600ecab0baf83de26d7e26dcf31035dd679bbd77a7d3b58496b6"}) keyctl$auto(0x8, r1, r2, r3, 0x3) mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = socket(0x1d, 0x2, 0x6) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x6, 0x2ba, 0xe77b, 0x9) fstatfs$auto(0x3, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, &(0x7f0000000400)={@_si_pad}, 0x1) setsockopt$auto(r4, 0x6a, 0x1, 0x0, 0xc) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x101080, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r6, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(r5, 0x80204518, r5) r7 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x88882, 0x0) pread64$auto(r7, &(0x7f0000000140)='\xe8\xaa\n\x99\x92\x0eP\xf1\f\xf5\xba|\xd1\xa5\x15 \xb2\x9b`\xf9\x9e\xd9Q\xd2\xe3\xe9\xf7\xcf\xbd\xba\x8a\xbb\x8b\xe3\xdaj\xfe\x85\x8a*FS\xdfi\x0eD\x10\xcdBz\xa8\x06\xe0\x14\xcc*\xad{\xb2\xf8\xb6\xbb>\x1fO\x96k5\xd1M9\xf0\x9a\xda\xa1\xaa~X\xd7&\xde\xa3\rI\xad\xc4A\x12\xeae*/\x8f}\xb6\xe7\v\xaa\xe5c\x88\x03\xf9\xe8S\xd4\xe2<\x88\xc4+\xf4w\x0e\xfe\x13|\x05\xf0\xfc\xa4\xb4\xf5\xf8\xb1\xf2\x8dyE\xf4\xfc\xf4\x99\x00\xfb\xc9\x7f\x142d\x99U$^\xbc\xf6`\x9b=bC\xb4uME#\xc4\x99\x87\xb9~\x8cv\x84\xd6M/j>j\xd5j\xb2\xb1\xf7\xcbL\xfe\xd6\xce\xf1\x81\xea\xfc@\xd4\xbb\xd6\xf4\xad\xc4\xf0\xfd\x8f\xbc?\xf1\x80\xb5J\nn|*\x81\x96\xe1M\xebS\'\x85\xcd\xc1\x95\n\x8a>\xd6\xf8\xf3\x11\xc6{\xba\x1f\xd7qK\x92\x95\x109\x80\x8c\x8f\x86j\xac\xdc\xb6\xe0\x88\xab}\xb3\xd6\xa3\x0f\xb4\xcd\x1f\xb1\x98\f=', 0x3ff) getcpu$auto(&(0x7f00000000c0)=0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000080)="1c") close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x80003, 0xeb0, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710}, 0x7a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xf}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffbfff, 0xb00) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(r3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x55) fchmod$auto(0xffffffffffffffff, 0xa) 873.452726ms ago: executing program 3 (id=603): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_accept\x00', 0x5, 0x0) (async, rerun: 64) write$auto(r0, 0x0, 0x200000) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x00\xf6\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x100, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x3fffffffff, 0x3}, 0x6f4) (async) bpf$auto(0x100000001, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) close_range$auto(0x0, 0xffffeffe, 0x2) (async, rerun: 32) mount$auto(0x0, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3p\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) (async) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) 630.38156ms ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x150}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 431.662981ms ago: executing program 1 (id=605): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x7, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0) read$auto_tracing_pipe_fops_trace(r3, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) setsockopt$auto(r2, 0x0, 0x22, 0x0, 0x28) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x9, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0x59, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e15f334a572cad539da201096bbbc2ce7db19c42", 0x33) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 310.064284ms ago: executing program 0 (id=606): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x0, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) connect$auto(0x3, 0x0, 0x6) write$auto(0x3, 0x0, 0x1) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x805, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008854}, 0x8000) 242.980012ms ago: executing program 2 (id=607): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0xfffffffffffffffe, 0x400008, 0x8000000df, 0x9b72, r0, 0x7ffe) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x3a) bind$auto(r1, &(0x7f0000000040)=@generic={0xa}, 0x66) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7f, 0x0) mbind$auto(0xb, 0x9, 0x3, &(0x7f0000000080)=0x6, 0x98, 0xffffffff) io_uring_register$auto(0x2, 0x1, &(0x7f00000001c0), 0x10000) 0s ago: executing program 0 (id=608): mmap$auto(0x0, 0x400, 0x3ff, 0xeb4, 0x401, 0x800000000008000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) keyctl$auto(0x7, 0xffffffffffffffff, 0x5, 0xee00, 0x5) (async, rerun: 64) keyctl$auto(0x18, 0xffffffffffffffff, 0x0, 0x0, 0x8) (async, rerun: 64) pidfd_send_signal$auto_SIGCONT(r0, 0x12, &(0x7f0000000000)={@_si_pad}, 0x4) (async, rerun: 32) read$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) (async, rerun: 32) mmap$auto(0x40, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x3, 0x6, 0x1000) (async) fsopen$auto(0x0, 0x5) (async, rerun: 32) r1 = epoll_create$auto(0x20009) (async, rerun: 32) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) (async, rerun: 64) epoll_ctl$auto(r1, 0x1, r2, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 94.293389][ T5615] cgroup: Unknown subsys name 'net' [ 94.411666][ T5615] cgroup: Unknown subsys name 'cpuset' [ 94.421342][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.246502][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.300200][ T24] cfg80211: failed to load regulatory.db [ 98.643660][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.653071][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.661763][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.671097][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.680144][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.773528][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.784492][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.796853][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.807958][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.820602][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.861283][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.884902][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.893027][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.904903][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.912745][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.921412][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.929880][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.938264][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.948533][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.956150][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.382473][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.391623][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.400288][ T5632] bridge_slave_0: entered allmulticast mode [ 100.409861][ T5632] bridge_slave_0: entered promiscuous mode [ 100.434327][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.441954][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.451670][ T5632] bridge_slave_1: entered allmulticast mode [ 100.461101][ T5632] bridge_slave_1: entered promiscuous mode [ 100.593702][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.607555][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.701148][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.708955][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.716215][ T5638] bridge_slave_0: entered allmulticast mode [ 100.724333][ T5638] bridge_slave_0: entered promiscuous mode [ 100.737929][ T50] Bluetooth: hci0: command tx timeout [ 100.756679][ T5632] team0: Port device team_slave_0 added [ 100.767525][ T5632] team0: Port device team_slave_1 added [ 100.773620][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.782672][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.790352][ T5638] bridge_slave_1: entered allmulticast mode [ 100.798900][ T5638] bridge_slave_1: entered promiscuous mode [ 100.897261][ T50] Bluetooth: hci1: command tx timeout [ 100.908434][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.925654][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.932931][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.959384][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.985536][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.005438][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.012740][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.039024][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.057982][ T4944] Bluetooth: hci2: command tx timeout [ 101.064366][ T50] Bluetooth: hci3: command tx timeout [ 101.139666][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.146981][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.154690][ T5636] bridge_slave_0: entered allmulticast mode [ 101.162532][ T5636] bridge_slave_0: entered promiscuous mode [ 101.179497][ T5638] team0: Port device team_slave_0 added [ 101.186465][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.193859][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.201329][ T5636] bridge_slave_1: entered allmulticast mode [ 101.209094][ T5636] bridge_slave_1: entered promiscuous mode [ 101.244681][ T5638] team0: Port device team_slave_1 added [ 101.343993][ T5632] hsr_slave_0: entered promiscuous mode [ 101.351155][ T5632] hsr_slave_1: entered promiscuous mode [ 101.359655][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.366760][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.393175][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.408347][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.418253][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.425605][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.433406][ T5639] bridge_slave_0: entered allmulticast mode [ 101.441342][ T5639] bridge_slave_0: entered promiscuous mode [ 101.450448][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.458088][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.465363][ T5639] bridge_slave_1: entered allmulticast mode [ 101.473201][ T5639] bridge_slave_1: entered promiscuous mode [ 101.481867][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.489085][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.515312][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.529109][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.596977][ T5636] team0: Port device team_slave_0 added [ 101.627268][ T5636] team0: Port device team_slave_1 added [ 101.636165][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.685474][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.729082][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.736118][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.762285][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.792438][ T5638] hsr_slave_0: entered promiscuous mode [ 101.799162][ T5638] hsr_slave_1: entered promiscuous mode [ 101.805427][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 101.811981][ T5638] Cannot create hsr debugfs directory [ 101.826819][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.834081][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.860376][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.886189][ T5639] team0: Port device team_slave_0 added [ 101.929401][ T5639] team0: Port device team_slave_1 added [ 101.975034][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.982250][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.008237][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.054422][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.061835][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.088196][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.165510][ T5636] hsr_slave_0: entered promiscuous mode [ 102.172082][ T5636] hsr_slave_1: entered promiscuous mode [ 102.178636][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 102.184423][ T5636] Cannot create hsr debugfs directory [ 102.304688][ T5639] hsr_slave_0: entered promiscuous mode [ 102.311446][ T5639] hsr_slave_1: entered promiscuous mode [ 102.318020][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 102.323814][ T5639] Cannot create hsr debugfs directory [ 102.611269][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.626941][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.635218][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.645676][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.653922][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.667928][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.699059][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.713586][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.817728][ T50] Bluetooth: hci0: command tx timeout [ 102.836433][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.850499][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.860647][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.872938][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.881107][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.893492][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.915557][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.927719][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.977559][ T50] Bluetooth: hci1: command tx timeout [ 103.031616][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.044698][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.055353][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.066919][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.075789][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.086687][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.094882][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.105888][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.138517][ T50] Bluetooth: hci3: command tx timeout [ 103.138528][ T4944] Bluetooth: hci2: command tx timeout [ 103.244398][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.255389][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.275591][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.285649][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.294043][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.307893][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.316918][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.328513][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.364870][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.432688][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.456995][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.481578][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.489326][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.524876][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.532107][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.561335][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.598204][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.605411][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.632702][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.639919][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.655099][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.744963][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.792580][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.799835][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.832164][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.839452][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.863600][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.957012][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.005361][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.012665][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.083222][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.090488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.898783][ T50] Bluetooth: hci0: command tx timeout [ 104.954964][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.036226][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.058935][ T50] Bluetooth: hci1: command tx timeout [ 105.175035][ T5632] veth0_vlan: entered promiscuous mode [ 105.227932][ T50] Bluetooth: hci3: command tx timeout [ 105.230170][ T4944] Bluetooth: hci2: command tx timeout [ 105.263526][ T5638] veth0_vlan: entered promiscuous mode [ 105.294695][ T5632] veth1_vlan: entered promiscuous mode [ 105.333913][ T5638] veth1_vlan: entered promiscuous mode [ 105.374317][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.471316][ T5632] veth0_macvtap: entered promiscuous mode [ 105.500142][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.513400][ T5638] veth0_macvtap: entered promiscuous mode [ 105.534459][ T5638] veth1_macvtap: entered promiscuous mode [ 105.543456][ T5632] veth1_macvtap: entered promiscuous mode [ 105.581191][ T5639] veth0_vlan: entered promiscuous mode [ 105.614780][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.629350][ T5639] veth1_vlan: entered promiscuous mode [ 105.651968][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.668406][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.686832][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.722195][ T3024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.732442][ T3024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.752623][ T3024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.767969][ T5636] veth0_vlan: entered promiscuous mode [ 105.784748][ T3024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.795762][ T3024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.818764][ T3024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.828688][ T3024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.853209][ T3024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.908232][ T5636] veth1_vlan: entered promiscuous mode [ 105.917450][ T5639] veth0_macvtap: entered promiscuous mode [ 105.964805][ T5639] veth1_macvtap: entered promiscuous mode [ 106.046696][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.064484][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.077880][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.082664][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.136225][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.145284][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.172180][ T3024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.182778][ T3024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.209892][ T5636] veth0_macvtap: entered promiscuous mode [ 106.221288][ T3024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.230394][ T3024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.255604][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.270224][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.294687][ T5636] veth1_macvtap: entered promiscuous mode [ 106.332870][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.358308][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.420454][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.472366][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.507509][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.556797][ T2997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.568876][ T2997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.587894][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.612195][ T2997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.622880][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.644344][ T2997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.783313][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.825491][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.849004][ T5778] syz.2.3 (5778) used obsolete PPPIOCDETACH ioctl [ 106.978640][ T4944] Bluetooth: hci0: command tx timeout [ 107.025322][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.067557][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.136050][ T5777] NFSD: Failed to start, no listeners configured. [ 107.144419][ T4944] Bluetooth: hci1: command tx timeout [ 107.176553][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.191564][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.300903][ T4944] Bluetooth: hci2: command tx timeout [ 107.300989][ T50] Bluetooth: hci3: command tx timeout [ 108.412302][ T5798] Zero length message leads to an empty skb [ 109.442176][ T5811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'. [ 116.415789][ T5870] NFSD: Failed to start, no listeners configured. [ 116.985439][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.408743][ T5912] NFSD: Failed to start, no listeners configured. [ 120.293048][ T5919] syz.0.28 (5919) used greatest stack depth: 19176 bytes left [ 120.342955][ T5922] NFSD: Failed to start, no listeners configured. [ 120.779648][ T5926] NFSD: Failed to start, no listeners configured. [ 121.779893][ T5937] NFSD: Failed to start, no listeners configured. [ 122.223082][ T5941] NFSD: Failed to start, no listeners configured. [ 125.765201][ T29] audit: type=1804 audit(1784097327.041:2): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.39" name="/newroot/10/file0" dev="tmpfs" ino=69 res=1 errno=0 [ 125.886516][ T29] audit: type=1804 audit(1784097327.161:3): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.39" name="/newroot/10/file0" dev="tmpfs" ino=69 res=1 errno=0 [ 126.293890][ T5986] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.552233][ T5996] NFSD: Failed to start, no listeners configured. [ 132.761339][ T6056] NFSD: Failed to start, no listeners configured. [ 133.154423][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162381][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.194250][ T6057] NFSD: Failed to start, no listeners configured. [ 134.035212][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 134.204586][ T6072] NFSD: Failed to start, no listeners configured. [ 134.411678][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.451997][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.496475][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.512873][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.751060][ T6076] NFSD: Failed to start, no listeners configured. [ 136.260417][ T6099] HfR: entered promiscuous mode [ 137.411132][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 137.532407][ T6100] openvswitch: HfR: Dropping previously announced user features [ 137.737357][ T6118] process 'syz.0.62' launched './file0' with NULL argv: empty string added [ 138.273353][ T6120] NFSD: Failed to start, no listeners configured. [ 138.659769][ T6122] NFSD: Failed to start, no listeners configured. [ 139.100054][ T6130] NFSD: Failed to start, no listeners configured. [ 139.501361][ T6134] NFSD: Failed to start, no listeners configured. [ 141.502565][ T6174] NFSD: Failed to start, no listeners configured. [ 141.843468][ T6175] NFSD: Failed to start, no listeners configured. [ 142.965537][ T6193] NFSD: Failed to start, no listeners configured. [ 143.401356][ T6196] NFSD: Failed to start, no listeners configured. [ 144.117850][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 144.152517][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.178226][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.215123][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.295760][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.315224][ T6217] NFSD: Failed to start, no listeners configured. [ 144.649554][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.88'. [ 144.672905][ T6218] NFSD: Failed to start, no listeners configured. [ 145.945031][ T6236] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.523953][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 147.546188][ T6251] HfR: entered promiscuous mode [ 147.571853][ T6249] netlink: 13 bytes leftover after parsing attributes in process `syz.3.92'. [ 148.336426][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 148.658040][ T6270] NFSD: Failed to start, no listeners configured. [ 148.696960][ T6251] openvswitch: HfR: Dropping previously announced user features [ 149.178807][ T6272] NFSD: Failed to start, no listeners configured. [ 150.281425][ T6287] random: crng reseeded on system resumption [ 150.939607][ T6293] NFSD: Failed to start, no listeners configured. [ 151.299820][ T6294] NFSD: Failed to start, no listeners configured. [ 151.496107][ T6296] NFSD: Failed to start, no listeners configured. [ 151.781153][ T6298] NFSD: Failed to start, no listeners configured. [ 151.849191][ T29] audit: type=1800 audit(4294967318.550:4): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.102" name="lu_gp_id" dev="configfs" ino=11467 res=0 errno=0 [ 152.969970][ T6318] NFSD: Failed to start, no listeners configured. [ 152.984502][ T6327] capability: warning: `syz.0.106' uses 32-bit capabilities (legacy support in use) [ 153.012406][ T6327] sd 0:0:1:0: PR command failed: 1026 [ 153.024386][ T6327] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 153.042315][ T6327] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 153.326817][ T6325] NFSD: Failed to start, no listeners configured. [ 155.869288][ T29] audit: type=1800 audit(4294967322.570:5): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.114" name="lu_gp_id" dev="configfs" ino=11617 res=0 errno=0 [ 155.930055][ T6355] NFSD: Failed to start, no listeners configured. [ 156.294989][ T6357] NFSD: Failed to start, no listeners configured. [ 163.377282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.407751][ T6466] NFSD: Failed to start, no listeners configured. [ 194.579363][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.586123][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.195657][ T6891] Unable to find swap-space signature [ 201.589807][ T6894] ceph: Failed to parse sending metrics switch value 'P^' [ 203.821554][ T6919] NFSD: Failed to start, no listeners configured. [ 204.013027][ T6922] FAULT_INJECTION: forcing a failure. [ 204.013027][ T6922] name failslab, interval 1, probability 0, space 0, times 1 [ 204.053320][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.3.230 Not tainted syzkaller #0 PREEMPT(full) [ 204.053363][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 204.053391][ T6922] Call Trace: [ 204.053401][ T6922] [ 204.053412][ T6922] dump_stack_lvl+0x100/0x190 [ 204.053453][ T6922] should_fail_ex.cold+0x5/0xa [ 204.053492][ T6922] should_failslab+0xc2/0x120 [ 204.053529][ T6922] __kmalloc_cache_noprof+0x91/0x6c0 [ 204.053581][ T6922] ? proc_thread_self_get_link+0x1a6/0x210 [ 204.053636][ T6922] proc_thread_self_get_link+0x1a6/0x210 [ 204.053685][ T6922] pick_link+0xac2/0x13c0 [ 204.053728][ T6922] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 204.053790][ T6922] step_into_slowpath+0x9ba/0xf90 [ 204.053843][ T6922] ? __pfx_step_into_slowpath+0x10/0x10 [ 204.053895][ T6922] ? lookup_fast+0x2da/0x600 [ 204.053934][ T6922] ? inode_permission+0x374/0x620 [ 204.053978][ T6922] link_path_walk+0xf28/0x1cc0 [ 204.054038][ T6922] path_openat+0x1c9/0x4280 [ 204.054087][ T6922] ? __kasan_slab_alloc+0x89/0x90 [ 204.054124][ T6922] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 204.054157][ T6922] ? do_getname+0x35/0x390 [ 204.054192][ T6922] ? __x64_sys_openat+0x12d/0x210 [ 204.054242][ T6922] ? __pfx_path_openat+0x10/0x10 [ 204.054304][ T6922] do_file_open+0x20e/0x430 [ 204.054371][ T6922] ? __pfx_do_file_open+0x10/0x10 [ 204.054456][ T6922] ? alloc_fd+0x471/0x7a0 [ 204.054511][ T6922] ? do_getname+0x191/0x390 [ 204.054554][ T6922] do_sys_openat2+0x10f/0x1e0 [ 204.054595][ T6922] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.054637][ T6922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.054704][ T6922] __x64_sys_openat+0x12d/0x210 [ 204.054746][ T6922] ? __pfx___x64_sys_openat+0x10/0x10 [ 204.054795][ T6922] ? ksys_write+0x1ac/0x250 [ 204.054859][ T6922] do_syscall_64+0x115/0x840 [ 204.054887][ T6922] ? clear_bhb_loop+0x40/0x90 [ 204.054929][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.054963][ T6922] RIP: 0033:0x7fa94435e68e [ 204.055001][ T6922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.055033][ T6922] RSP: 002b:00007fa9425f5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.055065][ T6922] RAX: ffffffffffffffda RBX: 00007fa9425f66c0 RCX: 00007fa94435e68e [ 204.055088][ T6922] RDX: 0000000000000002 RSI: 00007fa944433776 RDI: ffffffffffffff9c [ 204.055109][ T6922] RBP: 00007fa944433e6f R08: 0000000000000000 R09: 0000000000000000 [ 204.055128][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.055148][ T6922] R13: 00007fa944626038 R14: 00007fa944625fa0 R15: 00007ffd7ace9958 [ 204.055193][ T6922] [ 204.056026][ T6922] FAULT_INJECTION: forcing a failure. [ 204.056026][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.348173][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.3.230 Not tainted syzkaller #0 PREEMPT(full) [ 204.348217][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 204.348236][ T6922] Call Trace: [ 204.348247][ T6922] [ 204.348260][ T6922] dump_stack_lvl+0x100/0x190 [ 204.348309][ T6922] should_fail_ex.cold+0x5/0xa [ 204.348346][ T6922] _copy_from_user+0x2e/0xd0 [ 204.348393][ T6922] memdup_user+0x6b/0xe0 [ 204.348441][ T6922] strndup_user+0x78/0xe0 [ 204.348479][ T6922] __x64_sys_fsopen+0x9e/0x220 [ 204.348523][ T6922] do_syscall_64+0x115/0x840 [ 204.348553][ T6922] ? clear_bhb_loop+0x40/0x90 [ 204.348594][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.348628][ T6922] RIP: 0033:0x7fa94439de59 [ 204.348662][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.348694][ T6922] RSP: 002b:00007fa9425f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 204.348729][ T6922] RAX: ffffffffffffffda RBX: 00007fa944625fa0 RCX: 00007fa94439de59 [ 204.348751][ T6922] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 204.348769][ T6922] RBP: 00007fa9425f6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.348789][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.348808][ T6922] R13: 00007fa944626038 R14: 00007fa944625fa0 R15: 00007ffd7ace9958 [ 204.348851][ T6922] [ 213.036227][ T7027] FAULT_INJECTION: forcing a failure. [ 213.036227][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 213.087295][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(full) [ 213.087344][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 213.087363][ T7027] Call Trace: [ 213.087374][ T7027] [ 213.087387][ T7027] dump_stack_lvl+0x100/0x190 [ 213.087426][ T7027] should_fail_ex.cold+0x5/0xa [ 213.087452][ T7027] should_failslab+0xc2/0x120 [ 213.087481][ T7027] __kmalloc_cache_noprof+0x91/0x6c0 [ 213.087519][ T7027] ? proc_thread_self_get_link+0x1a6/0x210 [ 213.087558][ T7027] proc_thread_self_get_link+0x1a6/0x210 [ 213.087593][ T7027] pick_link+0xac2/0x13c0 [ 213.087623][ T7027] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 213.087660][ T7027] step_into_slowpath+0x9ba/0xf90 [ 213.087698][ T7027] ? __pfx_step_into_slowpath+0x10/0x10 [ 213.087734][ T7027] ? lookup_fast+0x2da/0x600 [ 213.087761][ T7027] ? inode_permission+0x374/0x620 [ 213.087792][ T7027] link_path_walk+0xf28/0x1cc0 [ 213.087836][ T7027] path_openat+0x1c9/0x4280 [ 213.087871][ T7027] ? __kasan_slab_alloc+0x89/0x90 [ 213.087898][ T7027] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 213.087922][ T7027] ? do_getname+0x35/0x390 [ 213.087946][ T7027] ? __x64_sys_openat+0x12d/0x210 [ 213.087983][ T7027] ? __pfx_path_openat+0x10/0x10 [ 213.088028][ T7027] do_file_open+0x20e/0x430 [ 213.088066][ T7027] ? __pfx_do_file_open+0x10/0x10 [ 213.088123][ T7027] ? alloc_fd+0x471/0x7a0 [ 213.088160][ T7027] ? do_getname+0x191/0x390 [ 213.088191][ T7027] do_sys_openat2+0x10f/0x1e0 [ 213.088219][ T7027] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.088254][ T7027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.088302][ T7027] __x64_sys_openat+0x12d/0x210 [ 213.088344][ T7027] ? __pfx___x64_sys_openat+0x10/0x10 [ 213.088389][ T7027] do_syscall_64+0x115/0x840 [ 213.088408][ T7027] ? clear_bhb_loop+0x40/0x90 [ 213.088436][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.088459][ T7027] RIP: 0033:0x7fa94435e68e [ 213.088478][ T7027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.088499][ T7027] RSP: 002b:00007fa9425f5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.088521][ T7027] RAX: ffffffffffffffda RBX: 00007fa9425f66c0 RCX: 00007fa94435e68e [ 213.088536][ T7027] RDX: 0000000000000002 RSI: 00007fa944433776 RDI: ffffffffffffff9c [ 213.088550][ T7027] RBP: 00007fa944433e6f R08: 0000000000000000 R09: 0000000000000000 [ 213.088563][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 213.088576][ T7027] R13: 00007fa944626038 R14: 00007fa944625fa0 R15: 00007ffd7ace9958 [ 213.088605][ T7027] [ 213.273303][ T7027] FAULT_INJECTION: forcing a failure. [ 213.273303][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 213.369019][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(full) [ 213.369061][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 213.369080][ T7027] Call Trace: [ 213.369090][ T7027] [ 213.369102][ T7027] dump_stack_lvl+0x100/0x190 [ 213.369144][ T7027] should_fail_ex.cold+0x5/0xa [ 213.369181][ T7027] should_failslab+0xc2/0x120 [ 213.369223][ T7027] __kmalloc_cache_noprof+0x91/0x6c0 [ 213.369275][ T7027] ? alloc_fs_context+0x57/0xf40 [ 213.369319][ T7027] alloc_fs_context+0x57/0xf40 [ 213.369353][ T7027] ? __get_fs_type+0xe3/0x200 [ 213.369391][ T7027] __x64_sys_fsopen+0xed/0x220 [ 213.369433][ T7027] do_syscall_64+0x115/0x840 [ 213.369462][ T7027] ? clear_bhb_loop+0x40/0x90 [ 213.369502][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.369553][ T7027] RIP: 0033:0x7fa94439de59 [ 213.369578][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.369609][ T7027] RSP: 002b:00007fa9425f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 213.369638][ T7027] RAX: ffffffffffffffda RBX: 00007fa944625fa0 RCX: 00007fa94439de59 [ 213.369665][ T7027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 213.369683][ T7027] RBP: 00007fa9425f6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.369703][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.369725][ T7027] R13: 00007fa944626038 R14: 00007fa944625fa0 R15: 00007ffd7ace9958 [ 213.369767][ T7027] [ 213.886727][ T7029] NFSD: Failed to start, no listeners configured. [ 215.560486][ T7046] FAULT_INJECTION: forcing a failure. [ 215.560486][ T7046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.587212][ T7046] CPU: 1 UID: 0 PID: 7046 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(full) [ 215.587255][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 215.587273][ T7046] Call Trace: [ 215.587284][ T7046] [ 215.587296][ T7046] dump_stack_lvl+0x100/0x190 [ 215.587337][ T7046] should_fail_ex.cold+0x5/0xa [ 215.587373][ T7046] _copy_to_user+0x32/0xd0 [ 215.587420][ T7046] simple_read_from_buffer+0xcb/0x170 [ 215.587473][ T7046] proc_fail_nth_read+0x1af/0x230 [ 215.587513][ T7046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.587565][ T7046] ? rw_verify_area+0xce/0x6d0 [ 215.587607][ T7046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.587647][ T7046] vfs_read+0x1e4/0xb40 [ 215.587700][ T7046] ? __pfx_vfs_read+0x10/0x10 [ 215.587747][ T7046] ? __fget_files+0x215/0x3d0 [ 215.587803][ T7046] ? __fget_files+0x21f/0x3d0 [ 215.587861][ T7046] ksys_read+0x12a/0x250 [ 215.587906][ T7046] ? __pfx_ksys_read+0x10/0x10 [ 215.587963][ T7046] do_syscall_64+0x115/0x840 [ 215.587993][ T7046] ? clear_bhb_loop+0x40/0x90 [ 215.588034][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.588068][ T7046] RIP: 0033:0x7f377a15e68e [ 215.588094][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.588124][ T7046] RSP: 002b:00007f377b139fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.588154][ T7046] RAX: ffffffffffffffda RBX: 00007f377b13a6c0 RCX: 00007f377a15e68e [ 215.588174][ T7046] RDX: 000000000000000f RSI: 00007f377b13a0a0 RDI: 0000000000000004 [ 215.588193][ T7046] RBP: 00007f377b13a090 R08: 0000000000000000 R09: 0000000000000000 [ 215.588213][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.588231][ T7046] R13: 00007f377a426038 R14: 00007f377a425fa0 R15: 00007ffca5479888 [ 215.588274][ T7046] [ 216.060128][ T7048] NFSD: Failed to start, no listeners configured. [ 216.297972][ T7051] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 216.403155][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 216.549202][ T7052] FAULT_INJECTION: forcing a failure. [ 216.549202][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 216.567839][ T7055] netlink: 342 bytes leftover after parsing attributes in process `syz.0.266'. [ 216.602191][ T7052] CPU: 1 UID: 0 PID: 7052 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT(full) [ 216.602236][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 216.602256][ T7052] Call Trace: [ 216.602267][ T7052] [ 216.602279][ T7052] dump_stack_lvl+0x100/0x190 [ 216.602325][ T7052] should_fail_ex.cold+0x5/0xa [ 216.602363][ T7052] should_failslab+0xc2/0x120 [ 216.602408][ T7052] kmem_cache_alloc_noprof+0x91/0x6a0 [ 216.602447][ T7052] ? trace_kmem_cache_alloc+0xdd/0x100 [ 216.602492][ T7052] ? security_file_alloc+0x34/0x2c0 [ 216.602540][ T7052] security_file_alloc+0x34/0x2c0 [ 216.602582][ T7052] init_file+0x95/0x480 [ 216.602619][ T7052] alloc_empty_file+0x79/0x1c0 [ 216.602661][ T7052] alloc_file_pseudo+0x183/0x290 [ 216.602704][ T7052] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 216.602745][ T7052] ? alloc_fd+0x471/0x7a0 [ 216.602803][ T7052] sock_alloc_file+0x50/0x210 [ 216.602864][ T7052] __sys_socket+0x1c0/0x260 [ 216.602924][ T7052] ? __pfx___sys_socket+0x10/0x10 [ 216.602988][ T7052] __x64_sys_socket+0x72/0xb0 [ 216.603040][ T7052] ? lockdep_hardirqs_on+0x78/0x100 [ 216.603095][ T7052] do_syscall_64+0x115/0x840 [ 216.603124][ T7052] ? clear_bhb_loop+0x40/0x90 [ 216.603167][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.603202][ T7052] RIP: 0033:0x7f377a19de59 [ 216.603229][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.603263][ T7052] RSP: 002b:00007f377b119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 216.603295][ T7052] RAX: ffffffffffffffda RBX: 00007f377a426090 RCX: 00007f377a19de59 [ 216.603323][ T7052] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 216.603344][ T7052] RBP: 00007f377a233e6f R08: 0000000000000000 R09: 0000000000000000 [ 216.603364][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.603384][ T7052] R13: 00007f377a426128 R14: 00007f377a426090 R15: 00007ffca5479888 [ 216.603429][ T7052] [ 216.995003][ T7062] i2c i2c-0: delete_device: Can't find device in list [ 217.508655][ T7070] random: crng reseeded on system resumption [ 217.549602][ T7069] NFSD: Failed to start, no listeners configured. [ 218.089913][ T7078] NFSD: Failed to start, no listeners configured. [ 218.427102][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 218.590533][ T7085] FAULT_INJECTION: forcing a failure. [ 218.590533][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.604746][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.0.273 Not tainted syzkaller #0 PREEMPT(full) [ 218.604787][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 218.604806][ T7085] Call Trace: [ 218.604816][ T7085] [ 218.604828][ T7085] dump_stack_lvl+0x100/0x190 [ 218.604871][ T7085] should_fail_ex.cold+0x5/0xa [ 218.604908][ T7085] _copy_from_iter+0x1f4/0x1690 [ 218.604957][ T7085] ? __asan_memset+0x23/0x50 [ 218.604995][ T7085] ? __pfx__copy_from_iter+0x10/0x10 [ 218.605039][ T7085] ? __pfx___alloc_skb+0x10/0x10 [ 218.605090][ T7085] netlink_sendmsg+0x808/0xda0 [ 218.605145][ T7085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.605201][ T7085] ? apparmor_socket_sendmsg+0x15b/0x270 [ 218.605260][ T7085] ____sys_sendmsg+0xa4d/0xbe0 [ 218.605305][ T7085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.605358][ T7085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.605424][ T7085] ___sys_sendmsg+0x190/0x1e0 [ 218.605482][ T7085] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.605529][ T7085] ? __lock_acquire+0x49f/0x1a40 [ 218.605577][ T7085] ? get_pid_task+0x106/0x250 [ 218.605657][ T7085] __sys_sendmsg+0x160/0x210 [ 218.605696][ T7085] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.605754][ T7085] do_syscall_64+0x115/0x840 [ 218.605782][ T7085] ? clear_bhb_loop+0x40/0x90 [ 218.605820][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.605853][ T7085] RIP: 0033:0x7f14a4f9de59 [ 218.605884][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.605912][ T7085] RSP: 002b:00007f14a5f54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.605942][ T7085] RAX: ffffffffffffffda RBX: 00007f14a5225fa0 RCX: 00007f14a4f9de59 [ 218.605962][ T7085] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 218.605982][ T7085] RBP: 00007f14a5f54090 R08: 0000000000000000 R09: 0000000000000000 [ 218.605999][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.606018][ T7085] R13: 00007f14a5226038 R14: 00007f14a5225fa0 R15: 00007ffceef80d08 [ 218.606057][ T7085] [ 219.471828][ T7098] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 220.088140][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 220.331373][ T7110] ptp ptp0: only physical clock in use now [ 220.497422][ T7114] Bluetooth: hci2: command 0x2016 tx timeout [ 220.750625][ T7125] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 221.375485][ T7139] NFSD: Failed to start, no listeners configured. [ 222.259441][ T4944] Bluetooth: hci0: command 0x0406 tx timeout [ 222.265026][ T7114] Bluetooth: hci1: command 0x0406 tx timeout [ 222.269919][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 222.618913][ T5640] Bluetooth: hci2: command 0x2016 tx timeout [ 223.284507][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059632c00: rx timeout, send abort [ 223.297243][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059632c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 223.710945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 224.284936][ T5640] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 224.396238][ T7179] netlink: 342 bytes leftover after parsing attributes in process `syz.2.290'. [ 225.210633][ T7193] FAULT_INJECTION: forcing a failure. [ 225.210633][ T7193] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 225.273177][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 225.273223][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 225.273243][ T7193] Call Trace: [ 225.273254][ T7193] [ 225.273266][ T7193] dump_stack_lvl+0x100/0x190 [ 225.273309][ T7193] should_fail_ex.cold+0x5/0xa [ 225.273341][ T7193] ? prepare_alloc_pages+0x16d/0x5f0 [ 225.273390][ T7193] should_fail_alloc_page+0xeb/0x140 [ 225.273436][ T7193] prepare_alloc_pages+0x1f0/0x5f0 [ 225.273487][ T7193] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 225.273526][ T7193] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 225.273578][ T7193] ? __lock_acquire+0x49f/0x1a40 [ 225.273631][ T7193] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 225.273668][ T7193] ? __css_rstat_updated+0x1ce/0x5a0 [ 225.273725][ T7193] ? do_raw_spin_lock+0x128/0x260 [ 225.273759][ T7193] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.273793][ T7193] ? find_held_lock+0x2b/0x80 [ 225.273844][ T7193] ? __lock_acquire+0x49f/0x1a40 [ 225.273892][ T7193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.273949][ T7193] ? policy_nodemask+0xed/0x4f0 [ 225.273996][ T7193] alloc_pages_mpol+0x1fb/0x540 [ 225.274043][ T7193] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 225.274090][ T7193] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 225.274152][ T7193] folio_alloc_mpol_noprof+0x36/0x260 [ 225.274209][ T7193] shmem_alloc_folio+0x135/0x160 [ 225.274260][ T7193] shmem_alloc_and_add_folio+0x371/0xd40 [ 225.274324][ T7193] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 225.274383][ T7193] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 225.274449][ T7193] shmem_get_folio_gfp+0x6ad/0x1910 [ 225.274514][ T7193] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 225.274568][ T7193] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 225.274623][ T7193] ? lockdep_hardirqs_on+0x78/0x100 [ 225.274683][ T7193] shmem_fault+0x1f9/0xa20 [ 225.274714][ T7193] ? __lock_acquire+0x49f/0x1a40 [ 225.274764][ T7193] ? __pfx_shmem_fault+0x10/0x10 [ 225.274817][ T7193] ? rcu_is_watching+0x12/0xc0 [ 225.274871][ T7193] ? __pfx_filemap_map_pages+0x10/0x10 [ 225.274927][ T7193] __do_fault+0x10b/0x440 [ 225.274961][ T7193] ? find_held_lock+0x2b/0x80 [ 225.275000][ T7193] do_fault+0x2db/0x1750 [ 225.275049][ T7193] __handle_mm_fault+0x187d/0x2a00 [ 225.275105][ T7193] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.275141][ T7193] ? __pfx___handle_mm_fault+0x10/0x10 [ 225.275197][ T7193] ? pte_offset_map_lock+0x174/0x320 [ 225.275237][ T7193] ? find_held_lock+0x2b/0x80 [ 225.275286][ T7193] ? follow_page_pte+0x4d0/0x13f0 [ 225.275337][ T7193] handle_mm_fault+0x37b/0xa30 [ 225.275397][ T7193] __get_user_pages+0x1178/0x32a0 [ 225.275449][ T7193] ? down_read_killable+0x35e/0x520 [ 225.275491][ T7193] ? __pfx___get_user_pages+0x10/0x10 [ 225.275530][ T7193] faultin_page_range+0x1f1/0x9e0 [ 225.275568][ T7193] madvise_do_behavior+0x354/0x510 [ 225.275605][ T7193] ? __pfx_madvise_do_behavior+0x10/0x10 [ 225.275641][ T7193] ? __pfx_futex_wait+0x10/0x10 [ 225.275683][ T7193] do_madvise+0x238/0x290 [ 225.275716][ T7193] ? __pfx_do_madvise+0x10/0x10 [ 225.275748][ T7193] ? do_futex+0x190/0x440 [ 225.275777][ T7193] ? fput+0x79/0x100 [ 225.275819][ T7193] __x64_sys_madvise+0xa9/0x110 [ 225.275853][ T7193] ? lockdep_hardirqs_on+0x78/0x100 [ 225.275890][ T7193] do_syscall_64+0x115/0x840 [ 225.275916][ T7193] ? clear_bhb_loop+0x40/0x90 [ 225.275945][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.275969][ T7193] RIP: 0033:0x7f14a4f9de59 [ 225.275988][ T7193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.276011][ T7193] RSP: 002b:00007f14a5f54028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 225.276033][ T7193] RAX: ffffffffffffffda RBX: 00007f14a5225fa0 RCX: 00007f14a4f9de59 [ 225.276049][ T7193] RDX: 0000000000000017 RSI: fffffffffffefffd RDI: 0000000000000000 [ 225.276063][ T7193] RBP: 00007f14a5033e6f R08: 0000000000000000 R09: 0000000000000000 [ 225.276077][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.276090][ T7193] R13: 00007f14a5226038 R14: 00007f14a5225fa0 R15: 00007ffceef80d08 [ 225.276119][ T7193] [ 226.338293][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 226.709483][ T7224] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 228.436763][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 229.400236][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a9a8800: rx timeout, send abort [ 229.408828][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a9a8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.129469][ T5634] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 231.231990][ T7264] NFSD: Failed to start, no listeners configured. [ 231.338615][ T7265] netlink: 342 bytes leftover after parsing attributes in process `syz.1.306'. [ 231.699066][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'. [ 232.152783][ T7275] veth0_macvtap: left promiscuous mode [ 232.234003][ T7275] macvtap0: entered promiscuous mode [ 232.296022][ T7275] macvtap0: entered allmulticast mode [ 233.226351][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 235.295815][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 237.768438][ T7328] mmap: syz.3.323 (7328): VmData 38117376 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 238.520568][ T7340] hub 1-0:1.0: USB hub found [ 238.547400][ T7340] hub 1-0:1.0: 1 port detected [ 238.646152][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 238.766720][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.891243][ T7360] bridge_slave_0 (unregistering): left allmulticast mode [ 238.935837][ T7360] bridge_slave_0 (unregistering): left promiscuous mode [ 238.969203][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.258687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 250.341359][ T7475] size and base must be multiples of 4 kiB [ 250.389656][ T7475] CPU: 1 UID: 0 PID: 7475 Comm: syz.0.352 Not tainted syzkaller #0 PREEMPT(full) [ 250.389701][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 250.389721][ T7475] Call Trace: [ 250.389731][ T7475] [ 250.389743][ T7475] dump_stack_lvl+0x100/0x190 [ 250.389791][ T7475] mtrr_add.cold+0x74/0x87 [ 250.389829][ T7475] mtrr_ioctl+0x25a/0xcf0 [ 250.389865][ T7475] ? __pfx_mtrr_ioctl+0x10/0x10 [ 250.389907][ T7475] ? find_held_lock+0x2b/0x80 [ 250.389959][ T7475] ? __fget_files+0x21f/0x3d0 [ 250.390013][ T7475] ? __pfx_mtrr_ioctl+0x10/0x10 [ 250.390049][ T7475] proc_reg_unlocked_ioctl+0x229/0x320 [ 250.390101][ T7475] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 250.390158][ T7475] __x64_sys_ioctl+0x18e/0x210 [ 250.390205][ T7475] do_syscall_64+0x115/0x840 [ 250.390235][ T7475] ? clear_bhb_loop+0x40/0x90 [ 250.390276][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.390311][ T7475] RIP: 0033:0x7f14a4f9de59 [ 250.390338][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.390369][ T7475] RSP: 002b:00007f14a5f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.390400][ T7475] RAX: ffffffffffffffda RBX: 00007f14a5225fa0 RCX: 00007f14a4f9de59 [ 250.390434][ T7475] RDX: 0000000000000005 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 250.390453][ T7475] RBP: 00007f14a5033e6f R08: 0000000000000000 R09: 0000000000000000 [ 250.390472][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.390490][ T7475] R13: 00007f14a5226038 R14: 00007f14a5225fa0 R15: 00007ffceef80d08 [ 250.390531][ T7475] [ 254.048888][ T7516] NFSD: Failed to start, no listeners configured. [ 254.979766][ T29] audit: type=1400 audit(4294967421.691:6): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7542 comm="syz.1.368" [ 256.016952][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.025919][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.044904][ T7536] __kmem_cache_create_args(nfsd_file) failed with error -12 [ 256.058409][ T7536] CPU: 1 UID: 0 PID: 7536 Comm: syz.2.367 Not tainted syzkaller #0 PREEMPT(full) [ 256.058453][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 256.058472][ T7536] Call Trace: [ 256.058484][ T7536] [ 256.058497][ T7536] dump_stack_lvl+0x100/0x190 [ 256.058541][ T7536] __kmem_cache_create_args.cold+0x33/0x6e [ 256.058592][ T7536] nfsd_file_cache_init+0x138/0x400 [ 256.058635][ T7536] ? net_generic+0xf4/0x2a0 [ 256.058668][ T7536] nfsd_svc+0x5fa/0x840 [ 256.058713][ T7536] nfsd_nl_threads_set_doit+0x76b/0x1100 [ 256.058773][ T7536] genl_family_rcv_msg_doit+0x214/0x300 [ 256.058812][ T7536] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 256.058843][ T7536] ? genl_get_cmd+0x3e7/0x760 [ 256.058898][ T7536] ? bpf_lsm_capable+0x9/0x10 [ 256.058926][ T7536] ? security_capable+0x80/0x260 [ 256.058977][ T7536] genl_rcv_msg+0x560/0x800 [ 256.059008][ T7536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.059038][ T7536] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 256.059092][ T7536] netlink_rcv_skb+0x159/0x420 [ 256.059135][ T7536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.059166][ T7536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.059223][ T7536] ? netlink_deliver_tap+0x1ae/0xcc0 [ 256.059270][ T7536] genl_rcv+0x28/0x40 [ 256.059293][ T7536] netlink_unicast+0x585/0x850 [ 256.059342][ T7536] ? __pfx_netlink_unicast+0x10/0x10 [ 256.059403][ T7536] netlink_sendmsg+0x8b0/0xda0 [ 256.059453][ T7536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.059503][ T7536] ? apparmor_socket_sendmsg+0x15b/0x270 [ 256.059555][ T7536] ____sys_sendmsg+0xa4d/0xbe0 [ 256.059595][ T7536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.059642][ T7536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.059699][ T7536] ___sys_sendmsg+0x190/0x1e0 [ 256.059744][ T7536] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.059786][ T7536] ? __lock_acquire+0x49f/0x1a40 [ 256.059874][ T7536] __sys_sendmsg+0x160/0x210 [ 256.059911][ T7536] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.059964][ T7536] do_syscall_64+0x115/0x840 [ 256.059990][ T7536] ? clear_bhb_loop+0x40/0x90 [ 256.060025][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.060055][ T7536] RIP: 0033:0x7f570fd9de59 [ 256.060080][ T7536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.060107][ T7536] RSP: 002b:00007f5710c90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.060135][ T7536] RAX: ffffffffffffffda RBX: 00007f5710025fa0 RCX: 00007f570fd9de59 [ 256.060154][ T7536] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.060171][ T7536] RBP: 00007f570fe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 256.060188][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.060205][ T7536] R13: 00007f5710026038 R14: 00007f5710025fa0 R15: 00007fff1928df28 [ 256.060241][ T7536] [ 256.368149][ T7536] nfsd: unable to create nfsd_file_slab [ 257.257129][ T7570] NFSD: Failed to start, no listeners configured. [ 259.041373][ T7612] FAULT_INJECTION: forcing a failure. [ 259.041373][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 259.062088][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.3.384 Not tainted syzkaller #0 PREEMPT(full) [ 259.062136][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 259.062157][ T7612] Call Trace: [ 259.062168][ T7612] [ 259.062180][ T7612] dump_stack_lvl+0x100/0x190 [ 259.062224][ T7612] should_fail_ex.cold+0x5/0xa [ 259.062262][ T7612] should_failslab+0xc2/0x120 [ 259.062310][ T7612] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 259.062350][ T7612] ? __d_alloc+0x35/0xa50 [ 259.062390][ T7612] __d_alloc+0x35/0xa50 [ 259.062427][ T7612] d_alloc_parallel+0x105/0x14b0 [ 259.062487][ T7612] ? __pfx_d_alloc_parallel+0x10/0x10 [ 259.062532][ T7612] ? __pfx___might_resched+0x10/0x10 [ 259.062580][ T7612] ? find_held_lock+0x2b/0x80 [ 259.062624][ T7612] ? down_read+0x13b/0x4c0 [ 259.062661][ T7612] ? __pfx_down_read+0x10/0x10 [ 259.062701][ T7612] __lookup_slow+0x98/0x320 [ 259.062745][ T7612] lookup_slow+0x50/0x70 [ 259.062786][ T7612] link_path_walk+0x1377/0x1cc0 [ 259.062848][ T7612] path_openat+0x1c9/0x4280 [ 259.062905][ T7612] ? __kasan_slab_alloc+0x89/0x90 [ 259.062942][ T7612] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 259.062976][ T7612] ? do_getname+0x35/0x390 [ 259.063010][ T7612] ? __x64_sys_openat+0x12d/0x210 [ 259.063062][ T7612] ? __pfx_path_openat+0x10/0x10 [ 259.063124][ T7612] do_file_open+0x20e/0x430 [ 259.063176][ T7612] ? __pfx_do_file_open+0x10/0x10 [ 259.063254][ T7612] ? alloc_fd+0x471/0x7a0 [ 259.063306][ T7612] ? do_getname+0x191/0x390 [ 259.063346][ T7612] do_sys_openat2+0x10f/0x1e0 [ 259.063386][ T7612] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.063426][ T7612] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.063491][ T7612] __x64_sys_openat+0x12d/0x210 [ 259.063531][ T7612] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.063586][ T7612] do_syscall_64+0x115/0x840 [ 259.063615][ T7612] ? clear_bhb_loop+0x40/0x90 [ 259.063655][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.063687][ T7612] RIP: 0033:0x7fa94439de59 [ 259.063715][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.063746][ T7612] RSP: 002b:00007fa9425f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.063777][ T7612] RAX: ffffffffffffffda RBX: 00007fa944625fa0 RCX: 00007fa94439de59 [ 259.063798][ T7612] RDX: 0000000000141000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 259.063820][ T7612] RBP: 00007fa944433e6f R08: 0000000000000000 R09: 0000000000000000 [ 259.063840][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.063858][ T7612] R13: 00007fa944626038 R14: 00007fa944625fa0 R15: 00007ffd7ace9958 [ 259.063911][ T7612] [ 259.744303][ T7616] HfR: entered promiscuous mode [ 260.360953][ T7643] NFSD: Failed to start, no listeners configured. [ 263.185432][ T7692] zram0: detected capacity change from 0 to 16 [ 266.224240][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 269.754749][ T7811] FAULT_INJECTION: forcing a failure. [ 269.754749][ T7811] name failslab, interval 1, probability 0, space 0, times 0 [ 269.801741][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.0.429 Not tainted syzkaller #0 PREEMPT(full) [ 269.801783][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 269.801801][ T7811] Call Trace: [ 269.801819][ T7811] [ 269.801830][ T7811] dump_stack_lvl+0x100/0x190 [ 269.801868][ T7811] should_fail_ex.cold+0x5/0xa [ 269.801901][ T7811] should_failslab+0xc2/0x120 [ 269.801938][ T7811] kmem_cache_alloc_noprof+0x91/0x6a0 [ 269.801973][ T7811] ? __kernfs_new_node+0xd2/0xa10 [ 269.802023][ T7811] __kernfs_new_node+0xd2/0xa10 [ 269.802076][ T7811] ? kernfs_add_one+0x611/0xaa0 [ 269.802122][ T7811] ? __pfx___kernfs_new_node+0x10/0x10 [ 269.802179][ T7811] ? find_held_lock+0x2b/0x80 [ 269.802212][ T7811] ? kernfs_root+0xee/0x2a0 [ 269.802249][ T7811] ? kernfs_root+0xee/0x2a0 [ 269.802295][ T7811] kernfs_new_node+0x117/0x150 [ 269.802346][ T7811] __kernfs_create_file+0x53/0x350 [ 269.802382][ T7811] sysfs_add_file_mode_ns+0x207/0x3c0 [ 269.802428][ T7811] sysfs_create_file_ns+0x145/0x1e0 [ 269.802463][ T7811] ? rcu_is_watching+0x12/0xc0 [ 269.802494][ T7811] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 269.802532][ T7811] ? __pfx___up_read+0x10/0x10 [ 269.802558][ T7811] ? acpi_device_notify+0x464/0x500 [ 269.802599][ T7811] ? kobject_put+0xb9/0x640 [ 269.802638][ T7811] device_create_file+0xf2/0x1d0 [ 269.802689][ T7811] device_add+0x2cb/0x1970 [ 269.802729][ T7811] ? __pfx_dev_set_name+0x10/0x10 [ 269.802772][ T7811] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.802819][ T7811] ? __pfx_device_add+0x10/0x10 [ 269.802860][ T7811] ? lockdep_init_map_type+0x5c/0x250 [ 269.802906][ T7811] ? __init_waitqueue_head+0xca/0x150 [ 269.802940][ T7811] netdev_register_kobject+0x1a9/0x3d0 [ 269.802991][ T7811] register_netdevice+0x15b6/0x25a0 [ 269.803034][ T7811] ? __pfx_register_netdevice+0x10/0x10 [ 269.803068][ T7811] ? net_generic+0xea/0x2a0 [ 269.803121][ T7811] ppp_dev_configure+0x986/0xcb0 [ 269.803176][ T7811] ppp_ioctl+0x9d7/0x27c0 [ 269.803205][ T7811] ? find_held_lock+0x2b/0x80 [ 269.803237][ T7811] ? __pfx_ppp_ioctl+0x10/0x10 [ 269.803271][ T7811] ? __fget_files+0x21f/0x3d0 [ 269.803320][ T7811] ? __pfx_ppp_ioctl+0x10/0x10 [ 269.803349][ T7811] __x64_sys_ioctl+0x18e/0x210 [ 269.803389][ T7811] do_syscall_64+0x115/0x840 [ 269.803414][ T7811] ? clear_bhb_loop+0x40/0x90 [ 269.803449][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.803478][ T7811] RIP: 0033:0x7f14a4f9de59 [ 269.803501][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.803528][ T7811] RSP: 002b:00007f14a5f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.803555][ T7811] RAX: ffffffffffffffda RBX: 00007f14a5226180 RCX: 00007f14a4f9de59 [ 269.803573][ T7811] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 269.803591][ T7811] RBP: 00007f14a5033e6f R08: 0000000000000000 R09: 0000000000000000 [ 269.803608][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.803625][ T7811] R13: 00007f14a5226218 R14: 00007f14a5226180 R15: 00007ffceef80d08 [ 269.803661][ T7811] [ 269.805502][ T7815] NFSD: Failed to start, no listeners configured. [ 271.708522][ T7841] netlink: 330 bytes leftover after parsing attributes in process `syz.3.440'. [ 273.570799][ T7866] FAULT_INJECTION: forcing a failure. [ 273.570799][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 273.612610][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.0.447 Not tainted syzkaller #0 PREEMPT(full) [ 273.612645][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 273.612660][ T7866] Call Trace: [ 273.612668][ T7866] [ 273.612678][ T7866] dump_stack_lvl+0x100/0x190 [ 273.612712][ T7866] should_fail_ex.cold+0x5/0xa [ 273.612742][ T7866] should_failslab+0xc2/0x120 [ 273.612777][ T7866] kmem_cache_alloc_noprof+0x91/0x6a0 [ 273.612807][ T7866] ? __pfx_acct_collect+0x10/0x10 [ 273.612840][ T7866] ? taskstats_exit+0x6d3/0xca0 [ 273.612883][ T7866] taskstats_exit+0x6d3/0xca0 [ 273.612919][ T7866] ? __pfx_acct_update_integrals+0x10/0x10 [ 273.612956][ T7866] ? __pfx_taskstats_exit+0x10/0x10 [ 273.612996][ T7866] ? rcu_read_lock_any_held+0x6a/0xa0 [ 273.613035][ T7866] do_exit+0x65c/0x2ae0 [ 273.613074][ T7866] ? __pfx_do_exit+0x10/0x10 [ 273.613110][ T7866] ? do_raw_spin_lock+0x128/0x260 [ 273.613140][ T7866] ? find_held_lock+0x2b/0x80 [ 273.613172][ T7866] ? get_signal+0x7e0/0x21e0 [ 273.613205][ T7866] do_group_exit+0xd5/0x2a0 [ 273.613240][ T7866] get_signal+0x1ec7/0x21e0 [ 273.613277][ T7866] ? __pfx_get_signal+0x10/0x10 [ 273.613306][ T7866] ? do_futex+0x190/0x440 [ 273.613337][ T7866] arch_do_signal_or_restart+0x91/0x7a0 [ 273.613394][ T7866] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 273.613459][ T7866] exit_to_user_mode_loop+0x139/0x6f0 [ 273.613503][ T7866] ? rcu_is_watching+0x12/0xc0 [ 273.613539][ T7866] do_syscall_64+0x652/0x840 [ 273.613564][ T7866] ? clear_bhb_loop+0x40/0x90 [ 273.613600][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.613632][ T7866] RIP: 0033:0x7f14a4f9de59 [ 273.613656][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.613682][ T7866] RSP: 002b:00007f14a5f540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 273.613710][ T7866] RAX: fffffffffffffe00 RBX: 00007f14a5225fa8 RCX: 00007f14a4f9de59 [ 273.613730][ T7866] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f14a5225fa8 [ 273.613749][ T7866] RBP: 00007f14a5225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 273.613768][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.613786][ T7866] R13: 00007f14a5226038 R14: 00007ffceef80c20 R15: 00007ffceef80d08 [ 273.613827][ T7866] [ 275.833706][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 277.742431][ T7937] NFSD: Failed to start, no listeners configured. [ 278.470942][ T7908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.057674][ T7952] netlink: 330 bytes leftover after parsing attributes in process `syz.0.465'. [ 279.340809][ T7962] usb usb3: usbfs: process 7962 (syz.2.469) did not claim interface 0 before use [ 280.855502][ T5640] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 282.418805][ T8017] NFSD: Failed to start, no listeners configured. [ 284.872018][ T8057] NFSD: Failed to start, no listeners configured. [ 286.002948][ T8087] sg_write: process 537 (syz.3.498) changed security contexts after opening file descriptor, this is not allowed. [ 286.002970][ T8084] warning: `syz.0.497' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 286.092139][ T8084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 286.223214][ T8084] bond0: (slave bond_slave_0): Releasing backup interface [ 287.477445][ T8105] nvme_fabrics: missing parameter 'transport=%s' [ 287.505726][ T8105] nvme_fabrics: missing parameter 'nqn=%s' [ 288.633821][ T8127] netlink: 'syz.0.508': attribute type 7 has an invalid length. [ 289.223614][ T5640] Bluetooth: hci0: Malformed LE Event: 0x0b [ 290.953296][ T8155] NFSD: Failed to start, no listeners configured. [ 291.506026][ T8171] FAULT_INJECTION: forcing a failure. [ 291.506026][ T8171] name failslab, interval 1, probability 0, space 0, times 0 [ 291.582336][ T8171] CPU: 1 UID: 0 PID: 8171 Comm: syz.1.518 Not tainted syzkaller #0 PREEMPT(full) [ 291.582383][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 291.582403][ T8171] Call Trace: [ 291.582414][ T8171] [ 291.582427][ T8171] dump_stack_lvl+0x100/0x190 [ 291.582474][ T8171] should_fail_ex.cold+0x5/0xa [ 291.582513][ T8171] should_failslab+0xc2/0x120 [ 291.582558][ T8171] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 291.582610][ T8171] ? __d_alloc+0x35/0xa50 [ 291.582651][ T8171] __d_alloc+0x35/0xa50 [ 291.582691][ T8171] d_alloc+0x4a/0x1e0 [ 291.582728][ T8171] lookup_one_qstr_excl+0x171/0x250 [ 291.582773][ T8171] start_dirop+0x59/0xb0 [ 291.582824][ T8171] simple_start_creating+0xf9/0x110 [ 291.582879][ T8171] ? __pfx_simple_start_creating+0x10/0x10 [ 291.582932][ T8171] ? mntput+0x70/0xa0 [ 291.582978][ T8171] ? simple_pin_fs+0xa3/0x190 [ 291.583027][ T8171] debugfs_start_creating.part.0+0x82/0x170 [ 291.583074][ T8171] __debugfs_create_file+0xb3/0x4f0 [ 291.583125][ T8171] debugfs_create_file_full+0x41/0x60 [ 291.583174][ T8171] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 291.583226][ T8171] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 291.583276][ T8171] ? ida_alloc_range+0x70d/0x830 [ 291.583356][ T8171] ? kasan_save_track+0x14/0x30 [ 291.583391][ T8171] ? __kasan_kmalloc+0xaa/0xb0 [ 291.583427][ T8171] ? lockdep_init_map_type+0x5c/0x250 [ 291.583480][ T8171] preinit_net.part.0+0x252/0x920 [ 291.583522][ T8171] copy_net_ns+0x339/0x7c0 [ 291.583566][ T8171] create_new_namespaces+0x3ea/0xac0 [ 291.583634][ T8171] unshare_nsproxy_namespaces+0xf2/0x220 [ 291.583669][ T8171] ksys_unshare+0x438/0xab0 [ 291.583709][ T8171] ? __pfx_ksys_unshare+0x10/0x10 [ 291.583760][ T8171] __x64_sys_unshare+0x31/0x40 [ 291.583796][ T8171] do_syscall_64+0x115/0x840 [ 291.583822][ T8171] ? clear_bhb_loop+0x40/0x90 [ 291.583860][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.583893][ T8171] RIP: 0033:0x7f377a19de59 [ 291.583917][ T8171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.583947][ T8171] RSP: 002b:00007f377b119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 291.583977][ T8171] RAX: ffffffffffffffda RBX: 00007f377a426090 RCX: 00007f377a19de59 [ 291.583997][ T8171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 291.584015][ T8171] RBP: 00007f377a233e6f R08: 0000000000000000 R09: 0000000000000000 [ 291.584034][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.584052][ T8171] R13: 00007f377a426128 R14: 00007f377a426090 R15: 00007ffca5479888 [ 291.584092][ T8171] [ 293.161795][ T8189] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 294.531692][ T8209] NFSD: Failed to start, no listeners configured. [ 295.037955][ T8217] FAULT_INJECTION: forcing a failure. [ 295.037955][ T8217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.102235][ T8217] CPU: 0 UID: 0 PID: 8217 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) [ 295.102274][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 295.102289][ T8217] Call Trace: [ 295.102297][ T8217] [ 295.102306][ T8217] dump_stack_lvl+0x100/0x190 [ 295.102337][ T8217] should_fail_ex.cold+0x5/0xa [ 295.102359][ T8217] ? prepare_alloc_pages+0x16d/0x5f0 [ 295.102394][ T8217] should_fail_alloc_page+0xeb/0x140 [ 295.102427][ T8217] prepare_alloc_pages+0x1f0/0x5f0 [ 295.102464][ T8217] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 295.102489][ T8217] ? __pfx_stack_trace_save+0x10/0x10 [ 295.102521][ T8217] ? stack_depot_save_flags+0x27/0x9d0 [ 295.102559][ T8217] ? __lock_acquire+0x49f/0x1a40 [ 295.102602][ T8217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.102641][ T8217] ? find_held_lock+0x2b/0x80 [ 295.102714][ T8217] ? __lock_acquire+0x49f/0x1a40 [ 295.102750][ T8217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.102788][ T8217] ? policy_nodemask+0xed/0x4f0 [ 295.102822][ T8217] alloc_pages_mpol+0x1fb/0x540 [ 295.102855][ T8217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 295.102895][ T8217] alloc_pages_noprof+0x1a/0x160 [ 295.102931][ T8217] pte_alloc_one+0x1c/0x3d0 [ 295.102967][ T8217] __pte_alloc+0x6d/0x3e0 [ 295.102995][ T8217] ? __pfx___pte_alloc+0x10/0x10 [ 295.103022][ T8217] ? __pfx___might_resched+0x10/0x10 [ 295.103055][ T8217] ? copy_page_range+0x1c4a/0x5b20 [ 295.103097][ T8217] copy_page_range+0x3dd8/0x5b20 [ 295.103164][ T8217] ? mas_wr_store_entry+0xa1/0x1e80 [ 295.103194][ T8217] ? __pfx_copy_page_range+0x10/0x10 [ 295.103237][ T8217] ? mas_store+0x666/0xac0 [ 295.103283][ T8217] ? __pfx_mas_store+0x10/0x10 [ 295.103315][ T8217] ? __pfx___vma_start_write+0x10/0x10 [ 295.103359][ T8217] dup_mmap+0xd44/0x21b0 [ 295.103412][ T8217] ? __pfx_dup_mmap+0x10/0x10 [ 295.103440][ T8217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 295.103478][ T8217] ? __lock_acquire+0x49f/0x1a40 [ 295.103511][ T8217] ? find_held_lock+0x2b/0x80 [ 295.103534][ T8217] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 295.103582][ T8217] copy_process+0x4588/0x8030 [ 295.103604][ T8217] ? try_to_wake_up+0x70a/0x1c90 [ 295.103639][ T8217] ? __pfx_copy_process+0x10/0x10 [ 295.103662][ T8217] ? futex_wake+0x4ea/0x5e0 [ 295.103691][ T8217] ? futex_private_hash_put+0x115/0x1c0 [ 295.103729][ T8217] kernel_clone+0x176/0x9d0 [ 295.103753][ T8217] ? __pfx_futex_wake+0x10/0x10 [ 295.103780][ T8217] ? __pfx_kernel_clone+0x10/0x10 [ 295.103818][ T8217] __do_sys_clone+0xd9/0x120 [ 295.103842][ T8217] ? __pfx___do_sys_clone+0x10/0x10 [ 295.103888][ T8217] do_syscall_64+0x115/0x840 [ 295.103907][ T8217] ? clear_bhb_loop+0x40/0x90 [ 295.103933][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.103955][ T8217] RIP: 0033:0x7fa94439de59 [ 295.103973][ T8217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.103994][ T8217] RSP: 002b:00007fa9425f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 295.104015][ T8217] RAX: ffffffffffffffda RBX: 00007fa944625fa0 RCX: 00007fa94439de59 [ 295.104029][ T8217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 295.104041][ T8217] RBP: 00007fa944433e6f R08: 0000000000000000 R09: 0000000000000000 [ 295.104054][ T8217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 295.104067][ T8217] R13: 00007fa944626038 R14: 00007fa944625fa0 R15: 00007ffd7ace9958 [ 295.104094][ T8217] [ 296.201747][ T8214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.340114][ T8214] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 296.480884][ T8214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.494851][ T8214] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 296.601767][ T8214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.608507][ T8214] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 296.673679][ T8214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.682368][ T8214] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 297.114390][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 298.239299][ T8255] FAULT_INJECTION: forcing a failure. [ 298.239299][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.276250][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.0.538 Not tainted syzkaller #0 PREEMPT(full) [ 298.276292][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 298.276310][ T8255] Call Trace: [ 298.276321][ T8255] [ 298.276333][ T8255] dump_stack_lvl+0x100/0x190 [ 298.276374][ T8255] should_fail_ex.cold+0x5/0xa [ 298.276413][ T8255] _copy_from_user+0x2e/0xd0 [ 298.276461][ T8255] copy_msghdr_from_user+0x9f/0x4c0 [ 298.276516][ T8255] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 298.276600][ T8255] ___sys_sendmsg+0x106/0x1e0 [ 298.276655][ T8255] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.276702][ T8255] ? __lock_acquire+0x49f/0x1a40 [ 298.276806][ T8255] __sys_sendmsg+0x160/0x210 [ 298.276843][ T8255] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.276898][ T8255] do_syscall_64+0x115/0x840 [ 298.276925][ T8255] ? clear_bhb_loop+0x40/0x90 [ 298.276962][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.276993][ T8255] RIP: 0033:0x7f14a4f9de59 [ 298.277018][ T8255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.277048][ T8255] RSP: 002b:00007f14a5f33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.277076][ T8255] RAX: ffffffffffffffda RBX: 00007f14a5226090 RCX: 00007f14a4f9de59 [ 298.277096][ T8255] RDX: 0000000020040080 RSI: 0000200000004240 RDI: 0000000000000008 [ 298.277114][ T8255] RBP: 00007f14a5033e6f R08: 0000000000000000 R09: 0000000000000000 [ 298.277132][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.277150][ T8255] R13: 00007f14a5226128 R14: 00007f14a5226090 R15: 00007ffceef80d08 [ 298.277189][ T8255] [ 298.565380][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 298.624645][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 298.704276][ T5640] Bluetooth: hci2: command 0x2016 tx timeout [ 299.040566][ T8280] ecryptfs_miscdev_write: Invalid packet size [0] [ 299.061160][ T8273] binder: 8271:8273 ioctl c0046209 ffffffffffffffff returned -22 [ 299.193264][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 300.206671][ T8291] zswap: compressor not available [ 300.622544][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 300.703105][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 300.782478][ T5640] Bluetooth: hci2: command 0x2016 tx timeout [ 302.319530][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.558'. [ 305.013101][ T8378] NFSD: Failed to start, no listeners configured. [ 305.274890][ T8387] vivid-007: ================= START STATUS ================= [ 305.313054][ T8387] vivid-007: Enable Output Cropping: true [ 305.321552][ T8387] vivid-007: Enable Output Composing: true [ 305.328290][ T8387] vivid-007: Enable Output Scaler: true [ 305.335364][ T8387] vivid-007: Tx RGB Quantization Range: Automatic [ 305.342323][ T8387] vivid-007: Transmit Mode: HDMI [ 305.347468][ T8387] vivid-007: Hotplug Present: 0x00000000 [ 305.353842][ T8387] vivid-007: RxSense Present: 0x00000000 [ 305.361283][ T8387] vivid-007: EDID Present: 0x00000000 [ 305.366843][ T8387] vivid-007: ================== END STATUS ================== [ 305.428471][ T8386] NFSD: Failed to start, no listeners configured. [ 306.936265][ T8414] FAULT_INJECTION: forcing a failure. [ 306.936265][ T8414] name failslab, interval 1, probability 0, space 0, times 0 [ 307.009351][ T8414] CPU: 1 UID: 0 PID: 8414 Comm: syz.0.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.009404][ T8414] Tainted: [L]=SOFTLOCKUP [ 307.009416][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 307.009451][ T8414] Call Trace: [ 307.009462][ T8414] [ 307.009475][ T8414] dump_stack_lvl+0x100/0x190 [ 307.009518][ T8414] should_fail_ex.cold+0x5/0xa [ 307.009562][ T8414] ? __pfx_rescuer_thread+0x10/0x10 [ 307.009607][ T8414] should_failslab+0xc2/0x120 [ 307.009650][ T8414] __kmalloc_cache_noprof+0x91/0x6c0 [ 307.009704][ T8414] ? __kthread_create_on_node+0xce/0x3f0 [ 307.009747][ T8414] ? __pfx_rescuer_thread+0x10/0x10 [ 307.009789][ T8414] __kthread_create_on_node+0xce/0x3f0 [ 307.009843][ T8414] ? __pfx___kthread_create_on_node+0x10/0x10 [ 307.009887][ T8414] ? __pfx_vsnprintf+0x10/0x10 [ 307.009941][ T8414] ? __pfx_rescuer_thread+0x10/0x10 [ 307.009984][ T8414] kthread_create_on_node+0xc7/0x100 [ 307.010017][ T8414] ? __pfx_kthread_create_on_node+0x10/0x10 [ 307.010050][ T8414] ? __pfx_scnprintf+0x10/0x10 [ 307.010122][ T8414] ? __kmalloc_cache_node_noprof+0x2fe/0x6c0 [ 307.010166][ T8414] ? init_rescuer+0x19f/0x550 [ 307.010213][ T8414] init_rescuer+0x321/0x550 [ 307.010254][ T8414] ? __pfx_init_rescuer+0x10/0x10 [ 307.010295][ T8414] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.010357][ T8414] ? wq_adjust_max_active+0x352/0x4a0 [ 307.010408][ T8414] __alloc_workqueue+0xe4e/0x1940 [ 307.010457][ T8414] alloc_workqueue_noprof+0xc7/0x130 [ 307.010495][ T8414] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 307.010550][ T8414] ? __pfx___debug_object_init+0x10/0x10 [ 307.010618][ T8414] nci_register_device+0x511/0xb80 [ 307.010665][ T8414] ? __pfx_nci_register_device+0x10/0x10 [ 307.010714][ T8414] ? lockdep_init_map_type+0x5c/0x250 [ 307.010769][ T8414] virtual_ncidev_open+0x141/0x220 [ 307.010814][ T8414] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 307.010857][ T8414] misc_open+0x26d/0x450 [ 307.010906][ T8414] ? __pfx_misc_open+0x10/0x10 [ 307.010954][ T8414] chrdev_open+0x234/0x6a0 [ 307.010981][ T8414] ? __pfx_apparmor_file_open+0x10/0x10 [ 307.011011][ T8414] ? __pfx_chrdev_open+0x10/0x10 [ 307.011063][ T8414] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 307.011103][ T8414] do_dentry_open+0x6ab/0x14d0 [ 307.011151][ T8414] ? __pfx_chrdev_open+0x10/0x10 [ 307.011208][ T8414] vfs_open+0x82/0x3f0 [ 307.011247][ T8414] path_openat+0x2873/0x4280 [ 307.011311][ T8414] ? __pfx_path_openat+0x10/0x10 [ 307.011371][ T8414] do_file_open+0x20e/0x430 [ 307.011421][ T8414] ? __pfx_do_file_open+0x10/0x10 [ 307.011497][ T8414] ? alloc_fd+0x471/0x7a0 [ 307.011558][ T8414] ? do_getname+0x191/0x390 [ 307.011597][ T8414] do_sys_openat2+0x10f/0x1e0 [ 307.011635][ T8414] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.011676][ T8414] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.011729][ T8414] __x64_sys_openat+0x12d/0x210 [ 307.011768][ T8414] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.011821][ T8414] do_syscall_64+0x115/0x840 [ 307.011848][ T8414] ? clear_bhb_loop+0x40/0x90 [ 307.011885][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.011922][ T8414] RIP: 0033:0x7f14a4f9de59 [ 307.011948][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.011996][ T8414] RSP: 002b:00007f14a5f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.012030][ T8414] RAX: ffffffffffffffda RBX: 00007f14a5225fa0 RCX: 00007f14a4f9de59 [ 307.012052][ T8414] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 307.012074][ T8414] RBP: 00007f14a5033e6f R08: 0000000000000000 R09: 0000000000000000 [ 307.012098][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.012117][ T8414] R13: 00007f14a5226038 R14: 00007f14a5225fa0 R15: 00007ffceef80d08 [ 307.012161][ T8414] [ 307.087337][ T8414] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -ENOMEM [ 307.792390][ T8429] syz.2.575 uses obsolete (PF_INET,SOCK_PACKET) [ 309.044868][ T8459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.566279][ T8496] NFSD: Failed to start, no listeners configured. [ 309.611715][ T8459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.848180][ T8459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.155140][ T8459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.949004][ T8512] zswap: compressor not available [ 312.707537][ T8559] NFSD: Failed to start, no listeners configured. [ 312.975339][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 313.009543][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 313.054714][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 313.074120][ T8566] bridge_slave_1: left allmulticast mode [ 313.106360][ T8566] bridge_slave_1: left promiscuous mode [ 313.118578][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.162098][ T8566] bridge_slave_0: left allmulticast mode [ 313.206307][ T8566] bridge_slave_0: left promiscuous mode [ 313.216552][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.349093][ T8569] [U] ^\ [ 314.113987][ T8574] ================================================================== [ 314.114008][ T8574] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 314.114041][ T8574] Write of size 8 at addr ffffc900047e1320 by task syz.3.603/8574 [ 314.114065][ T8574] [ 314.114078][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz.3.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.114127][ T8574] Tainted: [L]=SOFTLOCKUP [ 314.114136][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 314.114149][ T8574] Call Trace: [ 314.114156][ T8574] [ 314.114164][ T8574] dump_stack_lvl+0x100/0x190 [ 314.114188][ T8574] print_report+0x13d/0x4b0 [ 314.114220][ T8574] ? _raw_spin_lock_irqsave+0x52/0x60 [ 314.114255][ T8574] ? sys_imageblit+0x19fb/0x1d60 [ 314.114279][ T8574] kasan_report+0xdf/0x1c0 [ 314.114309][ T8574] ? sys_imageblit+0x19fb/0x1d60 [ 314.114338][ T8574] sys_imageblit+0x19fb/0x1d60 [ 314.114368][ T8574] ? __pfx_sys_imageblit+0x10/0x10 [ 314.114395][ T8574] ? prb_read_valid+0x78/0xa0 [ 314.114433][ T8574] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 314.114470][ T8574] soft_cursor+0x524/0xa10 [ 314.114492][ T8574] ? atomic_notifier_call_chain+0x60/0x1c0 [ 314.114528][ T8574] ? fb_get_color_depth+0x120/0x250 [ 314.114563][ T8574] bit_cursor+0xca1/0x1490 [ 314.114604][ T8574] ? __pfx_bit_cursor+0x10/0x10 [ 314.114644][ T8574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.114676][ T8574] ? get_color+0x1da/0x450 [ 314.114750][ T8574] ? __pfx_bit_cursor+0x10/0x10 [ 314.114786][ T8574] fbcon_cursor+0x43c/0x5e0 [ 314.114817][ T8574] ? add_softcursor+0x140/0x290 [ 314.114841][ T8574] set_cursor+0x1db/0x250 [ 314.114863][ T8574] con_write+0x89/0xb0 [ 314.114890][ T8574] n_tty_write+0x431/0x1160 [ 314.114929][ T8574] ? __pfx_n_tty_write+0x10/0x10 [ 314.114960][ T8574] ? __kasan_kmalloc+0xaa/0xb0 [ 314.115016][ T8574] ? __pfx_woken_wake_function+0x10/0x10 [ 314.115045][ T8574] ? rcu_is_watching+0x12/0xc0 [ 314.115069][ T8574] ? file_tty_write.isra.0+0x694/0x890 [ 314.115096][ T8574] ? kfree+0x1e5/0x6c0 [ 314.115129][ T8574] ? __pfx_n_tty_write+0x10/0x10 [ 314.115163][ T8574] file_tty_write.isra.0+0x4d2/0x890 [ 314.115194][ T8574] redirected_tty_write+0xd4/0x120 [ 314.115221][ T8574] vfs_write+0x6ac/0x1050 [ 314.115256][ T8574] ? __pfx_redirected_tty_write+0x10/0x10 [ 314.115285][ T8574] ? __pfx_vfs_write+0x10/0x10 [ 314.115330][ T8574] ? find_held_lock+0x2b/0x80 [ 314.115364][ T8574] ksys_write+0x12a/0x250 [ 314.115395][ T8574] ? __pfx_ksys_write+0x10/0x10 [ 314.115431][ T8574] do_syscall_64+0x115/0x840 [ 314.115450][ T8574] ? clear_bhb_loop+0x40/0x90 [ 314.115476][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.115498][ T8574] RIP: 0033:0x7fa94439de59 [ 314.115520][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.115542][ T8574] RSP: 002b:00007fa942593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.115563][ T8574] RAX: ffffffffffffffda RBX: 00007fa944626270 RCX: 00007fa94439de59 [ 314.115578][ T8574] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002 [ 314.115592][ T8574] RBP: 00007fa944433e6f R08: 0000000000000000 R09: 0000000000000000 [ 314.115605][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.115619][ T8574] R13: 00007fa944626308 R14: 00007fa944626270 R15: 00007ffd7ace9958 [ 314.115641][ T8574] [ 314.115648][ T8574] [ 314.115654][ T8574] The buggy address belongs to a vmalloc virtual mapping [ 314.115669][ T8574] Memory state around the buggy address: [ 314.115700][ T8574] ffffc900047e1200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.115729][ T8574] ffffc900047e1280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.115751][ T8574] >ffffc900047e1300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.115772][ T8574] ^ [ 314.115784][ T8574] ffffc900047e1380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.115799][ T8574] ffffc900047e1400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 314.115811][ T8574] ================================================================== [ 314.160742][ T8574] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.160766][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz.3.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.160798][ T8574] Tainted: [L]=SOFTLOCKUP [ 314.160806][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 314.160819][ T8574] Call Trace: [ 314.160826][ T8574] [ 314.160835][ T8574] dump_stack_lvl+0x100/0x190 [ 314.160863][ T8574] vpanic+0x552/0x970 [ 314.160883][ T8574] ? __pfx_vpanic+0x10/0x10 [ 314.160907][ T8574] ? sys_imageblit+0x19fb/0x1d60 [ 314.160933][ T8574] panic+0xd1/0xe0 [ 314.160952][ T8574] ? __pfx_panic+0x10/0x10 [ 314.160974][ T8574] ? sys_imageblit+0x19fb/0x1d60 [ 314.160999][ T8574] ? preempt_schedule_common+0x42/0xc0 [ 314.161040][ T8574] ? check_panic_on_warn+0x1f/0x90 [ 314.161072][ T8574] check_panic_on_warn.cold+0x19/0x34 [ 314.161095][ T8574] end_report.part.0+0x3a/0x90 [ 314.161127][ T8574] kasan_report.cold+0xe/0x18 [ 314.161160][ T8574] ? sys_imageblit+0x19fb/0x1d60 [ 314.161189][ T8574] sys_imageblit+0x19fb/0x1d60 [ 314.161219][ T8574] ? __pfx_sys_imageblit+0x10/0x10 [ 314.161246][ T8574] ? prb_read_valid+0x78/0xa0 [ 314.161283][ T8574] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 314.161320][ T8574] soft_cursor+0x524/0xa10 [ 314.161342][ T8574] ? atomic_notifier_call_chain+0x60/0x1c0 [ 314.161371][ T8574] ? fb_get_color_depth+0x120/0x250 [ 314.161405][ T8574] bit_cursor+0xca1/0x1490 [ 314.161445][ T8574] ? __pfx_bit_cursor+0x10/0x10 [ 314.161484][ T8574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.161521][ T8574] ? get_color+0x1da/0x450 [ 314.161552][ T8574] ? __pfx_bit_cursor+0x10/0x10 [ 314.161586][ T8574] fbcon_cursor+0x43c/0x5e0 [ 314.161616][ T8574] ? add_softcursor+0x140/0x290 [ 314.161640][ T8574] set_cursor+0x1db/0x250 [ 314.161661][ T8574] con_write+0x89/0xb0 [ 314.161688][ T8574] n_tty_write+0x431/0x1160 [ 314.161727][ T8574] ? __pfx_n_tty_write+0x10/0x10 [ 314.161758][ T8574] ? __kasan_kmalloc+0xaa/0xb0 [ 314.161794][ T8574] ? __pfx_woken_wake_function+0x10/0x10 [ 314.161815][ T8574] ? rcu_is_watching+0x12/0xc0 [ 314.161836][ T8574] ? file_tty_write.isra.0+0x694/0x890 [ 314.161860][ T8574] ? kfree+0x1e5/0x6c0 [ 314.161890][ T8574] ? __pfx_n_tty_write+0x10/0x10 [ 314.161920][ T8574] file_tty_write.isra.0+0x4d2/0x890 [ 314.161948][ T8574] redirected_tty_write+0xd4/0x120 [ 314.161973][ T8574] vfs_write+0x6ac/0x1050 [ 314.162005][ T8574] ? __pfx_redirected_tty_write+0x10/0x10 [ 314.162033][ T8574] ? __pfx_vfs_write+0x10/0x10 [ 314.162063][ T8574] ? find_held_lock+0x2b/0x80 [ 314.162102][ T8574] ksys_write+0x12a/0x250 [ 314.162152][ T8574] ? __pfx_ksys_write+0x10/0x10 [ 314.162211][ T8574] do_syscall_64+0x115/0x840 [ 314.162230][ T8574] ? clear_bhb_loop+0x40/0x90 [ 314.162257][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.162281][ T8574] RIP: 0033:0x7fa94439de59 [ 314.162299][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.162321][ T8574] RSP: 002b:00007fa942593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.162343][ T8574] RAX: ffffffffffffffda RBX: 00007fa944626270 RCX: 00007fa94439de59 [ 314.162359][ T8574] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002 [ 314.162374][ T8574] RBP: 00007fa944433e6f R08: 0000000000000000 R09: 0000000000000000 [ 314.162388][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.162402][ T8574] R13: 00007fa944626308 R14: 00007fa944626270 R15: 00007ffd7ace9958 [ 314.162425][ T8574] [ 314.162624][ T8574] Kernel Offset: disabled