last executing test programs: 3m54.802860848s ago: executing program 1 (id=2731): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0026bd7000fddbdf2503000000040008000800"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/effective_affinity_list\x00', 0x2000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xb4300, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) r5 = io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000000)={@_si_pad}, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80047453, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=0x5, 0x4, 0x5c}) setsockopt$auto(0x3, 0x1, 0x2d, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x7f, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x8000000000000018, 0xfffffffffffffffe, 0x0) 3m52.469048881s ago: executing program 1 (id=2733): r0 = fanotify_init$auto(0x4, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c08, 0x0) r2 = socket(0x10, 0x1802, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x840, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyz8/power/autosuspend_delay_ms\x00', 0x521080, 0x0) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) ioctl$auto_VHOST_SET_VRING_BASE2(r0, 0x4008af12, &(0x7f00000000c0)={0xffff, 0x5}) 3m52.329589024s ago: executing program 1 (id=2734): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfb, 0x9) madvise$auto(0x800, 0x7ffffffffffffffc, 0x1) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x5, 0x2, 0x36) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) mremap$auto(0x100000001, 0xa6f4, 0x8, 0x0, 0x7) 3m52.105511628s ago: executing program 1 (id=2736): close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x88880, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r0, 0x0, 0x200) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/memory/drivers_probe\x00', 0x1e3b43, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x58, 0x1, 0x41fffe, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, r1, 0x28000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x103800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x5, 0x0) socket(0x1, 0x3, 0x0) socket(0xa, 0x5, 0x84) close_range$auto(0x0, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) 3m51.842572826s ago: executing program 1 (id=2738): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/kvm/guest_mode\x00', 0x420000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001240)='4', 0x1) mmap$auto(0x8, 0x6, 0x9, 0x8011, r1, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00000000000000000000000000008655b9729220fc2ecf73596cd0d7"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 3m48.339447104s ago: executing program 1 (id=2740): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycd\x00', 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 3m32.910525762s ago: executing program 32 (id=2740): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycd\x00', 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 56.048463072s ago: executing program 4 (id=3231): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x5) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x1d, 0x2, 0x7) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) (async, rerun: 32) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) (rerun: 32) 55.806646606s ago: executing program 4 (id=3235): bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) futex$auto(&(0x7f00000000c0)=0x6, 0x1, 0x1, &(0x7f0000000100)={0x6, 0x1}, &(0x7f0000000140)=0x8, 0x0) r1 = socket(0x1d, 0x2, 0x7) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b62, 0x8000000000038) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) write$auto(r6, 0x0, 0x9) 55.113011166s ago: executing program 4 (id=3236): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0xa3, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x307082, 0x0) recvmmsg$auto(r3, 0x0, 0xd, 0xc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7bdb, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x84, 0x7f, 0x0, &(0x7f0000000040)=0x400) madvise$auto(0x700000000000000, 0x200007, 0x19) prctl$auto(0x43, 0x0, 0x0, 0xfffffffffffffffe, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) 52.631886211s ago: executing program 4 (id=3240): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa02, 0x1a5) (async) open(0x0, 0xa02, 0x1a5) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) (async) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa0200, 0x155) (async) open(0x0, 0xa0200, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x1, 0x3a) socket(0x10, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x6a080, 0x0) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x6a080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x72fc00, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc0e85667, 0x38) 52.41578088s ago: executing program 4 (id=3241): r0 = socket(0x28, 0x2, 0x10000000000002) ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x1, 0x177d, 0x1, 0x7fffffff, 0x1fb, 0x9}) mmap$auto(0xa, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x4) finit_module$auto(0xffffffffffffffff, &(0x7f0000000080)='/+\x00', 0x9) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/lowpan0/flags\x00', 0xa8002, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) setitimer$auto(0x2, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)=0x7c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xd66c5e3, 0x1, &(0x7f00000002c0)={{0x1000006, 0xee00, 0xee00, 0x9, 0x4de4, 0x7, 0x10b}, 0xff, 0xf, 0x4d, 0xf0f, @raw=0x1, @inferred, 0x3, 0x0, &(0x7f0000000400)="956d39861f2d7d663151dcbdf8558228f64babb751e0309251e0eff4b7fd8a619705bbffa98e0bef64caf37cabd2bbc9975cd580812dee2dbccf95915d050783374ec5a48bb6f43e5cf52abc568d98c37dd99cc8ef8982cf0bd6ba0da4679c7835173416", &(0x7f00000001c0)="c3e97ac7eb311c0206e671e3d91fabfeb3bd203148592d497bb5a1451b80d2ac3a6b9a75d7e9071a487ae5f223d02fed2cb389d91cfa148cdcf4a00a36942ad7f8f78dd726ea1e247ed53df53b841e38544f7b31a41dba916cf2f66bb6fb3ac8e00a3c3cc22999854f3643c1d0c9f327a39715cbf5f392558054bf044caa5ad39d7ef27da708017d43ef6202a4dba8b5676fa34a88de2552ae8e1b4e3a401893d2270f104ccabf052027fba9b1175ddd8474ad232994c3df60e08f609fa55831115dffc2e9ed0a32ed387b526a4a6a1cc9c1bf26bb695a2723252952801bb87dc469f4631677d2a942ea4c9a"}) r3 = setfsuid$auto(0x0) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r3, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x15, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x8, 0x80000000, 0x17ed, 0x80000000000709c, 0x80, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x4, 0x10000080000005, 0x0, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000001880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000018c0)=ANY=[@ANYBLOB="c8130000", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c8}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x91d2, r0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100fe) io_submit$auto(0x0, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x0, 0x145) socket(0x2, 0x2, 0x0) socket(0x1a, 0x800, 0x0) 52.265262297s ago: executing program 4 (id=3244): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) 36.749757772s ago: executing program 33 (id=3244): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) 10.519193239s ago: executing program 5 (id=3381): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) semctl$auto(0x7, 0x2, 0x13, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x100000000020204, 0x1ff, 0xebd, r1, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) r2 = getsockopt$auto(r1, 0x84, 0x85, 0x0, &(0x7f0000000000)=0x7ffe) unshare$auto(0x40000080) getsockopt$auto_SO_BROADCAST(r0, 0x5, 0x6, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pim6reg1\x00'}) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/page_reporting/parameters/page_reporting_order\x00', 0x2202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) write$auto(r3, &(0x7f0000000500)='%[.[`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa3\xa7\xf2M\xd1(h\xa51T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x3, 0x1) 10.452751407s ago: executing program 3 (id=3382): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x22, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000440), r0) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0xe2054b76c099dec) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r3, 0x0, 0x400) r4 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(r4, &(0x7f00000000c0)='/dev/sequencer\x00', 0x7) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r5, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000680)={0xa, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x9, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffff7effffd11, &(0x7f00000001c0)) read$auto(0xffffffffffffffff, 0x0, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) 10.011623146s ago: executing program 3 (id=3383): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x1c, 0x3, 0x0, 0x1, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x70, 0x0, 0x0, @ipv6=@empty}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@remote}]}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc884) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) (async) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socketcall$auto(0x8000, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto(0x3, 0x40a0ae49, 0x38) mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322d53) close_range$auto(0x2, 0x8, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 9.538451402s ago: executing program 5 (id=3386): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x2, 0x3, 0x1) getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000100)={0x92}) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000c80)="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", 0x144) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) mmap$auto(0x1002, 0xb63, 0x2, 0x1c, 0x401, 0x701cf82d) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio25/dev\x00', 0x509481, 0x0) sendfile$auto(r4, r4, 0x0, 0x6) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x200000, 0x0) prctl$auto(0x3e, 0x3, 0x0, 0x1, 0x0) select$auto(0x2, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0x0, 0x948b, 0x9, 0x15f4da0a, 0x2, 0x400, 0xcd, 0x80000000, 0xe8, 0x10000000006d41, 0x8003, 0xa, 0xfffffffffffffdf7]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x8001000}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mlockall$auto(0x85) 9.367005073s ago: executing program 3 (id=3387): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec22\x00', 0xa0a40, 0x0) adjtimex$auto(&(0x7f0000000100)={0xfffffff5, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x5, 0x401, 0x0, 0x9, 0x94b, 0xc3, {0x8000000000000001, 0x10}, 0x1, 0x64d1, 0x7, 0x6, 0x0, 0x2, 0x6, 0x7f, 0x4, 0xc5, 0xfffffffe}) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x7fffffff, "9ba089084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) prctl$auto(0x10000000017, 0x28, 0x4, 0x8000000156, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000001c0)="0a1b9a3ce8040000cd1aec49ec53c2efa0149258607deb6e163bb15497886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9bdbcf3401910e7733aca465c9bd40a", 0x4a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) epoll_create$auto(0x3a) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video57\x00', 0x946c0, 0x0) ioctl$auto(0x3, 0x80885659, 0x38) madvise$auto(0x4, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) 8.540301459s ago: executing program 5 (id=3389): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x48100, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r2 = socket$nl_generic(0x10, 0x3, 0x10) msgsnd$auto(0x5, &(0x7f00000002c0)={0x0, 0xe}, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010024bd3000fedbdfa504"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) msgctl$auto(0x8, 0xffff, &(0x7f0000000140)={{0xfffffffe, 0x0, 0xee01, 0x9, 0x8e, 0x9, 0x2}, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x1, 0x8, 0x1, 0x8, 0x3, 0x7fffffffffffffff, 0x2fe6, 0x1, 0x76, @raw=0x9}) setfsgid$auto(r5) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/card0\x00', 0x10040, 0x0) sendmsg$auto_KSMBD_EVENT_UNSPEC(r2, 0x0, 0x20000000) (async) sendmsg$auto_KSMBD_EVENT_UNSPEC(r2, 0x0, 0x20000000) 8.44727335s ago: executing program 0 (id=3390): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x1}) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x7) write$auto(r1, 0x0, 0xe) 8.275328515s ago: executing program 0 (id=3391): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x17, 0x10, 0x808, 0x9, &(0x7f0000000340)}) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) ioctl$auto(0x3, 0x80000541b, 0x38) bind$auto(r0, &(0x7f0000000000)=@generic={0x26, "c7ff7c7d6e31f78be6bde5886493"}, 0x7fffffff) 6.855492003s ago: executing program 0 (id=3393): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x7c, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e0054c9e474be535fd29da000000", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x40086203, 0xffffffffffffffff) setresuid$auto(0x2, 0x7, 0x8080) r4 = clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) tkill$auto(r4, 0x9) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r2) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r1) r6 = syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/time\x00') sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_PHY_CAPS={0x6c, 0x18, 0x0, 0x1, [@nested={0x8, 0x80, 0x0, 0x1, [@nested={0x4, 0x35}]}, @nested={0x60, 0x140, 0x0, 0x1, [@generic="253a4befdf5840d3e962979e568c61090f3875c5115a8491532df296d7d003a968e3c295e9735a7e762d3aada74518b7a75fd72c7203d1977bced9ad02dce331a56e50293955c730055c1db1582c023da25dac68c4bf8740", @nested={0x4, 0x3e}]}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x92}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xe9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000067}, 0x20008000) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) socket(0x1, 0x1, 0x8) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket(0x2, 0x1, 0x106) bind$auto(r7, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) 6.855266695s ago: executing program 5 (id=3394): timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ff9, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, 0x0, 0x8, 0x4008) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28341, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/ib_srp/parameters/fast_io_fail_tmo\x00', 0xa8282, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0x81) 6.006902437s ago: executing program 5 (id=3396): write$auto(0xffffffffffffffff, 0x0, 0x599) lstat$auto(0x0, &(0x7f00000003c0)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x8, 0x5, 0x6, 0x6, 0x200000100103}) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000001040)='/dev/cec24\x00', 0x183e02, 0x0) sendmsg$auto_NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400004145dc7d2503c36ff1aba700", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf2526000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000000", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4048800) mmap$auto(0x0, 0x400005, 0xe1, 0x9a72, 0xffffffffffffffff, 0x8000) r1 = socket(0x2a, 0x2, 0x6) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000138dc47be3f384426a919dffdcded382930676ab7cc16763952255ffcfec4ebfca2ee1a4697f5a5c02b8e5415ffe000311a478682e39d21c5fafb301c905c3349a178268e52640a144a4663c44c4d507d8dbb9c79fe72c1304fbe37a8dda85ff57350fb1bd3f52d2002507dd1f10cb1d839f7eb434c578b56271441a7253f06e2249bcd93ee7fe21e671db73c652879ee93dc6434b354dc8eaec610198c7a427dc946169bc1773ebea0a0719b1110aed7616a51ebaf4c268cfd4fe42e388cc82a2b68e24ab9513a243fbf72d9a", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0xc8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = socket(0x22, 0x2, 0x1) fstat$auto(r2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptyzd\x00', 0x39a13, 0x0) ioctl$auto_TCSBRK2(0xffffffffffffffff, 0x5409, &(0x7f0000000240)="8f5022c4597b87a2e0b2acad9ef5c1c748304b3021261054bedf6de6534fcc29de9b5325990a002bf3f3734e8ab9c97bbbc0fa1887cd4b48fddf9a2f212d9d4ed020cf7c203ee62e2558c8980a5e03577f34c2041f504c606f7e05ba18c4753b9d704a7c024e3fab23419db61c71") openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x843) move_pages$auto(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) socket(0xb, 0x1, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f00000002c0)="c6449591291d0ee2a43def01e585d6abe3980ea2e818aff1bfaf28dd4740c3e83401a0984ee9d11a532e4612e699e1", 0x1000}, 0x3) r4 = socket(0x18, 0x5, 0x1) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 5.743893693s ago: executing program 0 (id=3397): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x401, 0x0) (async) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) prctl$auto(0x9, 0x3, 0x0, 0x6, 0x100000001) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) fallocate$auto(r1, 0x1, 0x820, 0x7fff) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) bpf$auto(0x5, &(0x7f0000000200)=@info={0xffffffffffffffff, 0x9, 0x8}, 0x1) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) 5.739339076s ago: executing program 5 (id=3398): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/inflight\x00', 0x88040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000006c0)=""/4106, 0x100a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sethostname$auto(0x0, 0x1) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0xfffffff, 0x9, 0x7, 0xffffffffffffffff, 0x20010180, 0xa}, 0x10) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, 0x0, 0x1800) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/cgroup\x00', 0x800, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f00000000c0)=""/14, 0xe) write$auto(0xffffffffffffffff, 0x0, 0x81) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) unshare$auto(0x40000080) getpid() r4 = fcntl$auto_F_DUPFD(r2, 0x0, r0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r4, 0xc0884123, &(0x7f0000000100)={0x5, 0x0, @status={0x5, 0x0, {}, 0x2, {}, {}, 0x2, 0x0, {0x81, 0x5}}, @reserved="ad4e737c05c2b333fba57ec822926f27722c19caa752f4c97569d3acfb4bc9b5276e8096559b44ade72d56f194f1db175cbed69aa138f81789049d470a965bf2"}) socket(0xa, 0x2, 0x3a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mprotect$auto(0x110c230000, 0x1, 0x2) 4.553505414s ago: executing program 3 (id=3399): lstat$auto(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x810001, 0xffb, 0x8000000008011, r1, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000) r3 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000180), 0x5ea}, 0x7, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140) unshare$auto(0x40000080) 3.01671721s ago: executing program 0 (id=3401): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) map_shadow_stack$auto(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x3, 0x0) open(0x0, 0x108242, 0x78e22799f4a46f8e) mmap$auto(0x0, 0x202000a, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r1, 0x0, 0x10000006) write$auto(0x3, 0x0, 0x5) flock$auto(0xffffffffffffffff, 0x2) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x80000001, 0xffffffffffff0001, 0x15) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x202800, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) memfd_secret$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1.771176428s ago: executing program 3 (id=3403): close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mq_timedreceive$auto(r0, &(0x7f0000000040)='!%@%({}\'}-U)\x00', 0x23, &(0x7f0000000080)=0x7de9, &(0x7f00000000c0)={0x6, 0xd1}) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0x5000aea5, 0x20) 1.674218979s ago: executing program 2 (id=3404): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x101040, 0x18b) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop9\x00', 0x105202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c06, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2501000000180002800c0001003f0000000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000100e62348a1b0ae78ecbc4c915b397e4c9c3f5c782dcfa78e6dbe83c6fcfdee1ac1fdf870d7febc1cb1d69d9922b4eadd25affc0f98c1c07fd8e02b0b02052c3b90c4a4145841c8177c7c57d92d88345ee6e5c5a25d092f092befbb69d9b28a14f45e284a6dddacfc404666732e8b294168e583049494ee82c5d1fbee86034f9bd8a72dfc22b5e8edb8e4", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) 1.284881552s ago: executing program 2 (id=3405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r1, 0x301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setsockopt$auto_SO_RCVPRIORITY(r0, 0x1, 0x52, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa201, 0x0) write$auto(0x3, 0x0, 0x100082) 1.187384721s ago: executing program 3 (id=3406): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x7c, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e0054c9e474be535fd29da000000", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x40086203, 0xffffffffffffffff) setresuid$auto(0x2, 0x7, 0x8080) r4 = clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) tkill$auto(r4, 0x9) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r2) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r1) r6 = syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/time\x00') sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_PHY_CAPS={0x6c, 0x18, 0x0, 0x1, [@nested={0x8, 0x80, 0x0, 0x1, [@nested={0x4, 0x35}]}, @nested={0x60, 0x140, 0x0, 0x1, [@generic="253a4befdf5840d3e962979e568c61090f3875c5115a8491532df296d7d003a968e3c295e9735a7e762d3aada74518b7a75fd72c7203d1977bced9ad02dce331a56e50293955c730055c1db1582c023da25dac68c4bf8740", @nested={0x4, 0x3e}]}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x92}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xe9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000067}, 0x20008000) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) socket(0x1, 0x1, 0x8) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket(0x2, 0x1, 0x106) bind$auto(r7, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) 1.105541945s ago: executing program 0 (id=3407): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x2c, 0x2, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_DISABLE_SE(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0xc08, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) sendmsg$auto_NFC_CMD_VENDOR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '/^'}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x1}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x6}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0xa4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="38020000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf25110000000c00018008000300ff0f00005000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200726f736530000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1f0d9807", @ANYRES32=0x0, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030010a20000140002006970365f7674693000000000000000006000018008000300ff03000014000200687372300000000000000000000000001400020068737230000000000000000000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300c30000003c000180140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007767300000000000000000000000000004000180500001801400020076657468315f746f5f627269646765001400020074756e6c3000000000000000000000000800030002000000140002006d6163766c616e3100000000000000000800030006000000580001801400020069705f767469300000000000000000001400020076657468315f746f5f7465616d000000080003000900000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006e72300000000000000000000000000014000200626f6e645f736c6176655f3100000000140002006873723000"/60], 0x238}, 0x1, 0x0, 0x0, 0x804}, 0x20040894) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r10 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r10, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x6, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ffff02a0005885fa849d00", @ANYRES16=r9, @ANYBLOB="080027bd7000fddbdf2569000000060065000900000006004f01090000001700130013c366f9244357d432f6e44cc4bf4e5878fe5d00080002002f247b0005006000080000000500a3000200000045001f00ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e90000005c007580ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b08003800000400000800e600", @ANYRES32=r0, @ANYBLOB="05008a00080000000500f60007000000"], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) 990.214837ms ago: executing program 2 (id=3408): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) ioctl$auto(0x3, 0xae41, 0x38) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40400, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) read$auto_dfs_global_fops_debug(r2, 0x0, 0x0) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x62) 634.19626ms ago: executing program 2 (id=3409): r0 = socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) (async) msgctl$auto(0x0, 0x0, 0x0) (async) userfaultfd$auto(0x1) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pnp0/00:00/resources\x00', 0x82302, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f0000000140)) (async) connect$auto(0x3, 0x0, 0x55) (async) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) ioctl$auto_RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x5, 0xfe8, 0xa, 0xa, 0xb828, 0x66, 0x7, 0x2, 0xfff}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) 319.146142ms ago: executing program 2 (id=3410): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x2008000) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) open(0x0, 0x163340, 0x2a) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x480, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/244, 0xf4) connect$auto(0xffffffffffffffff, 0x0, 0x57) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/corrected_bits\x00', 0x540, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size\x00', 0x181002, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) write$auto(0x3, 0x0, 0xfdef) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x9, 0x7ff) fcntl$auto(r4, 0x0, r5) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) 0s ago: executing program 2 (id=3411): unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x1a9282, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) setsockopt$auto_SO_MARK(r1, 0x5, 0x24, &(0x7f00000000c0)=',)$$\\\v)[-\'\x00', 0x3) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x800) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x3, 0xa) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x7f) r5 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r5, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55) kernel console output (not intermixed with test programs): _pfx_dvb_demux_ioctl+0x10/0x10 [ 983.678709][T19951] __x64_sys_ioctl+0x18e/0x210 [ 983.678727][T19951] do_syscall_64+0xcd/0xf80 [ 983.678742][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.678755][T19951] RIP: 0033:0x7f2a2198f7c9 [ 983.678768][T19951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.678783][T19951] RSP: 002b:00007f2a22740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 983.678797][T19951] RAX: ffffffffffffffda RBX: 00007f2a21be6090 RCX: 00007f2a2198f7c9 [ 983.678807][T19951] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 983.678815][T19951] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 983.678823][T19951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.678831][T19951] R13: 00007f2a21be6128 R14: 00007f2a21be6090 R15: 00007ffe0ceee168 [ 983.678851][T19951] [ 984.645877][T19976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2812'. [ 984.888570][T19976] veth1_macvtap: left promiscuous mode [ 985.110276][ T1086] bridge_slave_1: left allmulticast mode [ 985.131935][ T1086] bridge_slave_1: left promiscuous mode [ 985.179418][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.389312][ T1086] bridge_slave_0: left allmulticast mode [ 985.389364][ T1086] bridge_slave_0: left promiscuous mode [ 985.389533][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.453717][T19994] input: ¶š9ã%v”ûJ,6Ö‘ as /devices/virtual/input/input34 [ 987.987183][T20023] zswap: compressor  not available [ 988.195564][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.232918][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.277969][ T1086] bond0 (unregistering): Released all slaves [ 990.230701][ T1086] hsr_slave_0: left promiscuous mode [ 990.363907][ T1086] hsr_slave_1: left promiscuous mode [ 990.398354][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.466417][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.538804][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.597142][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.731188][ T1086] veth1_macvtap: left promiscuous mode [ 990.775059][ T1086] veth0_macvtap: left promiscuous mode [ 990.780660][ T1086] veth1_vlan: left promiscuous mode [ 990.843368][ T1086] veth0_vlan: left promiscuous mode [ 991.923096][T20077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2831'. [ 992.496621][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 992.542076][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 993.541876][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 995.664207][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.670768][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.355274][T20144] Invalid ELF header magic: != ELF [ 1000.495025][T20179] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1000.589328][T20180] usb usb15: usbfs: process 20180 (syz.0.2844) did not claim interface 0 before use [ 1005.633722][T20250] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1005.691308][T20254] NFSD: Failed to start, no listeners configured. [ 1007.132198][T20291] NFSD: Failed to start, no listeners configured. [ 1007.921763][T20316] FAULT_INJECTION: forcing a failure. [ 1007.921763][T20316] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.019537][T20316] CPU: 0 UID: 0 PID: 20316 Comm: syz.3.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.019564][T20316] Tainted: [L]=SOFTLOCKUP [ 1008.019569][T20316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1008.019578][T20316] Call Trace: [ 1008.019584][T20316] [ 1008.019590][T20316] dump_stack_lvl+0x16c/0x1f0 [ 1008.019623][T20316] should_fail_ex+0x512/0x640 [ 1008.019641][T20316] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1008.019660][T20316] should_failslab+0xc2/0x120 [ 1008.019683][T20316] __kmalloc_cache_noprof+0x80/0x800 [ 1008.019697][T20316] ? do_user_addr_fault+0x829/0x1370 [ 1008.019714][T20316] ? system_heap_allocate+0xe8/0x10a0 [ 1008.019733][T20316] ? system_heap_allocate+0xe8/0x10a0 [ 1008.019748][T20316] system_heap_allocate+0xe8/0x10a0 [ 1008.019762][T20316] ? irqentry_exit+0x1dd/0x8c0 [ 1008.019775][T20316] ? lockdep_hardirqs_on+0x7c/0x110 [ 1008.019795][T20316] ? irqentry_exit+0x1dd/0x8c0 [ 1008.019805][T20316] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 1008.019829][T20316] ? __pfx_system_heap_allocate+0x10/0x10 [ 1008.019850][T20316] ? rep_movs_alternative+0x4a/0x90 [ 1008.019869][T20316] dma_heap_ioctl+0x385/0x610 [ 1008.019885][T20316] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1008.019898][T20316] ? rcu_is_watching+0x12/0xc0 [ 1008.019925][T20316] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1008.019940][T20316] __x64_sys_ioctl+0x18e/0x210 [ 1008.019958][T20316] do_syscall_64+0xcd/0xf80 [ 1008.019972][T20316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.019985][T20316] RIP: 0033:0x7f2a2198f7c9 [ 1008.019997][T20316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.020011][T20316] RSP: 002b:00007f2a22740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.020024][T20316] RAX: ffffffffffffffda RBX: 00007f2a21be6090 RCX: 00007f2a2198f7c9 [ 1008.020033][T20316] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 1008.020041][T20316] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1008.020049][T20316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.020057][T20316] R13: 00007f2a21be6128 R14: 00007f2a21be6090 R15: 00007ffe0ceee168 [ 1008.020076][T20316] [ 1008.500483][T20322] usb usb15: usbfs: process 20322 (syz.2.2868) did not claim interface 0 before use [ 1009.142267][T20316] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1011.079988][T20366] random: crng reseeded on system resumption [ 1012.250308][T20392] FAULT_INJECTION: forcing a failure. [ 1012.250308][T20392] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.385485][T20392] CPU: 0 UID: 0 PID: 20392 Comm: syz.2.2876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.385512][T20392] Tainted: [L]=SOFTLOCKUP [ 1012.385518][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1012.385526][T20392] Call Trace: [ 1012.385532][T20392] [ 1012.385538][T20392] dump_stack_lvl+0x16c/0x1f0 [ 1012.385565][T20392] should_fail_ex+0x512/0x640 [ 1012.385581][T20392] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1012.385601][T20392] should_failslab+0xc2/0x120 [ 1012.385622][T20392] kmem_cache_alloc_noprof+0x83/0x770 [ 1012.385638][T20392] ? __proc_create+0x2c8/0x8d0 [ 1012.385660][T20392] ? __proc_create+0x2c8/0x8d0 [ 1012.385676][T20392] __proc_create+0x2c8/0x8d0 [ 1012.385694][T20392] ? __pfx___proc_create+0x10/0x10 [ 1012.385719][T20392] _proc_mkdir+0xb9/0x210 [ 1012.385737][T20392] ? __pfx__proc_mkdir+0x10/0x10 [ 1012.385758][T20392] ? __pfx_netfilter_net_init+0x10/0x10 [ 1012.385778][T20392] netfilter_net_init+0x37b/0x4b0 [ 1012.385796][T20392] ? sysctl_net_init+0x27/0x30 [ 1012.385810][T20392] ops_init+0x1e2/0x5f0 [ 1012.385833][T20392] setup_net+0x11d/0x3a0 [ 1012.385852][T20392] ? __pfx_setup_net+0x10/0x10 [ 1012.385869][T20392] ? lockdep_init_map_type+0x5c/0x270 [ 1012.385884][T20392] ? mutex_init_lockep+0x110/0x150 [ 1012.385901][T20392] copy_net_ns+0x351/0x7c0 [ 1012.385915][T20392] create_new_namespaces+0x3ea/0xab0 [ 1012.385937][T20392] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1012.385957][T20392] ksys_unshare+0x45b/0xa40 [ 1012.385971][T20392] ? __pfx_ksys_unshare+0x10/0x10 [ 1012.385992][T20392] ? xfd_validate_state+0x61/0x180 [ 1012.386010][T20392] __x64_sys_unshare+0x31/0x40 [ 1012.386022][T20392] do_syscall_64+0xcd/0xf80 [ 1012.386037][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.386051][T20392] RIP: 0033:0x7f1a9558f7c9 [ 1012.386063][T20392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.386076][T20392] RSP: 002b:00007f1a9649f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1012.386090][T20392] RAX: ffffffffffffffda RBX: 00007f1a957e6090 RCX: 00007f1a9558f7c9 [ 1012.386099][T20392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1012.386107][T20392] RBP: 00007f1a95613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.386115][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.386123][T20392] R13: 00007f1a957e6128 R14: 00007f1a957e6090 R15: 00007ffe9831b718 [ 1012.386142][T20392] [ 1012.386148][T20392] cannot create netfilter proc entry [ 1015.459648][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'. [ 1016.270819][T20471] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1016.420046][T16448] Bluetooth: hci0: unexpected event 0x01 length: 124 > 1 [ 1017.293179][T20509] Invalid ELF header magic: != ELF [ 1017.842593][T20519] FAULT_INJECTION: forcing a failure. [ 1017.842593][T20519] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.011938][T20519] CPU: 0 UID: 0 PID: 20519 Comm: syz.2.2894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.011964][T20519] Tainted: [L]=SOFTLOCKUP [ 1018.011970][T20519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1018.011979][T20519] Call Trace: [ 1018.011984][T20519] [ 1018.011990][T20519] dump_stack_lvl+0x16c/0x1f0 [ 1018.012018][T20519] should_fail_ex+0x512/0x640 [ 1018.012035][T20519] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1018.012053][T20519] should_failslab+0xc2/0x120 [ 1018.012073][T20519] kmem_cache_alloc_noprof+0x83/0x770 [ 1018.012090][T20519] ? __proc_create+0x2c8/0x8d0 [ 1018.012111][T20519] ? __proc_create+0x2c8/0x8d0 [ 1018.012128][T20519] __proc_create+0x2c8/0x8d0 [ 1018.012146][T20519] ? __pfx___proc_create+0x10/0x10 [ 1018.012170][T20519] _proc_mkdir+0xb9/0x210 [ 1018.012200][T20519] ? __pfx__proc_mkdir+0x10/0x10 [ 1018.012223][T20519] ? __pfx_netfilter_net_init+0x10/0x10 [ 1018.012244][T20519] netfilter_net_init+0x37b/0x4b0 [ 1018.012262][T20519] ? sysctl_net_init+0x27/0x30 [ 1018.012276][T20519] ops_init+0x1e2/0x5f0 [ 1018.012298][T20519] setup_net+0x11d/0x3a0 [ 1018.012317][T20519] ? __pfx_setup_net+0x10/0x10 [ 1018.012336][T20519] ? lockdep_init_map_type+0x5c/0x270 [ 1018.012351][T20519] ? mutex_init_lockep+0x110/0x150 [ 1018.012368][T20519] copy_net_ns+0x351/0x7c0 [ 1018.012382][T20519] create_new_namespaces+0x3ea/0xab0 [ 1018.012404][T20519] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1018.012428][T20519] ksys_unshare+0x45b/0xa40 [ 1018.012442][T20519] ? __pfx_ksys_unshare+0x10/0x10 [ 1018.012465][T20519] ? xfd_validate_state+0x61/0x180 [ 1018.012484][T20519] __x64_sys_unshare+0x31/0x40 [ 1018.012496][T20519] do_syscall_64+0xcd/0xf80 [ 1018.012511][T20519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.012524][T20519] RIP: 0033:0x7f1a9558f7c9 [ 1018.012536][T20519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.012550][T20519] RSP: 002b:00007f1a9649f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1018.012564][T20519] RAX: ffffffffffffffda RBX: 00007f1a957e6090 RCX: 00007f1a9558f7c9 [ 1018.012573][T20519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1018.012581][T20519] RBP: 00007f1a95613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1018.012589][T20519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.012598][T20519] R13: 00007f1a957e6128 R14: 00007f1a957e6090 R15: 00007ffe9831b718 [ 1018.012616][T20519] [ 1018.012624][T20519] cannot create netfilter proc entry [ 1018.314660][T20528] FAULT_INJECTION: forcing a failure. [ 1018.314660][T20528] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1018.393222][T20528] CPU: 0 UID: 0 PID: 20528 Comm: syz.4.2896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.393246][T20528] Tainted: [L]=SOFTLOCKUP [ 1018.393251][T20528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1018.393260][T20528] Call Trace: [ 1018.393266][T20528] [ 1018.393272][T20528] dump_stack_lvl+0x16c/0x1f0 [ 1018.393299][T20528] should_fail_ex+0x512/0x640 [ 1018.393318][T20528] get_futex_key+0x1d0/0x15f0 [ 1018.393337][T20528] ? __pfx_get_futex_key+0x10/0x10 [ 1018.393354][T20528] ? mmap_region+0x1ee/0x3f0 [ 1018.393371][T20528] ? __get_unmapped_area+0x267/0x3f0 [ 1018.393397][T20528] futex_wake+0xea/0x530 [ 1018.393417][T20528] ? __pfx_futex_wake+0x10/0x10 [ 1018.393438][T20528] ? up_write+0x282/0x4e0 [ 1018.393457][T20528] do_futex+0x1e3/0x350 [ 1018.393476][T20528] ? __pfx_do_futex+0x10/0x10 [ 1018.393496][T20528] __x64_sys_futex+0x1e0/0x4c0 [ 1018.393514][T20528] ? __pfx___x64_sys_futex+0x10/0x10 [ 1018.393528][T20528] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1018.393549][T20528] ? xfd_validate_state+0x61/0x180 [ 1018.393563][T20528] ? __pfx_do_writev+0x10/0x10 [ 1018.393587][T20528] do_syscall_64+0xcd/0xf80 [ 1018.393602][T20528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.393616][T20528] RIP: 0033:0x7fa44ed8f7c9 [ 1018.393628][T20528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.393642][T20528] RSP: 002b:00007fa44fbe00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1018.393656][T20528] RAX: ffffffffffffffda RBX: 00007fa44efe5fa8 RCX: 00007fa44ed8f7c9 [ 1018.393664][T20528] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa44efe5fac [ 1018.393673][T20528] RBP: 00007fa44efe5fa0 R08: 00007fa44fbe1000 R09: 0000000000000000 [ 1018.393682][T20528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.393689][T20528] R13: 00007fa44efe6038 R14: 00007fff07b881f0 R15: 00007fff07b882d8 [ 1018.393708][T20528] [ 1018.597380][T20541] futex_wake_op: syz.3.2898 tries to shift op by -2048; fix this program [ 1018.608231][T20541] futex_wake_op: syz.3.2898 tries to shift op by -2048; fix this program [ 1018.617063][T20541] 0x000000000001-0x000000020000 : "" [ 1018.752176][T20541] ftl_cs: FTL header corrupt! [ 1019.620964][T20576] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1019.767598][T20576] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1019.798797][T20570] random: crng reseeded on system resumption [ 1020.699155][ T30] audit: type=1326 audit(4294969861.789:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20591 comm="syz.2.2905" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a9558f7c9 code=0x0 [ 1022.235461][ T30] audit: type=1326 audit(4294969863.337:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.2.2910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a9558f7c9 code=0x0 [ 1023.167118][T20640] FAULT_INJECTION: forcing a failure. [ 1023.167118][T20640] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.216988][T20640] CPU: 0 UID: 0 PID: 20640 Comm: syz.0.2914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.217016][T20640] Tainted: [L]=SOFTLOCKUP [ 1023.217021][T20640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.217030][T20640] Call Trace: [ 1023.217036][T20640] [ 1023.217043][T20640] dump_stack_lvl+0x16c/0x1f0 [ 1023.217070][T20640] should_fail_ex+0x512/0x640 [ 1023.217086][T20640] ? fs_reclaim_acquire+0xae/0x150 [ 1023.217109][T20640] should_failslab+0xc2/0x120 [ 1023.217130][T20640] kmem_cache_alloc_noprof+0x83/0x770 [ 1023.217146][T20640] ? __pfx_map_id_range_down+0x10/0x10 [ 1023.217165][T20640] ? security_inode_alloc+0x3b/0x2b0 [ 1023.217183][T20640] ? security_inode_alloc+0x3b/0x2b0 [ 1023.217196][T20640] security_inode_alloc+0x3b/0x2b0 [ 1023.217212][T20640] inode_init_always_gfp+0xced/0x1040 [ 1023.217235][T20640] alloc_inode+0x86/0x240 [ 1023.217249][T20640] sock_alloc+0x40/0x280 [ 1023.217270][T20640] sock_create_lite+0x82/0x120 [ 1023.217298][T20640] __netlink_kernel_create+0xbd/0x750 [ 1023.217321][T20640] ? __lock_acquire+0x436/0x2890 [ 1023.217335][T20640] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1023.217362][T20640] rtnetlink_net_init+0xb9/0x140 [ 1023.217379][T20640] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1023.217396][T20640] ? lockdep_init_map_type+0x5c/0x270 [ 1023.217409][T20640] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 1023.217424][T20640] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1023.217441][T20640] ? mutex_init_lockep+0x110/0x150 [ 1023.217457][T20640] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1023.217472][T20640] ops_init+0x1e2/0x5f0 [ 1023.217493][T20640] setup_net+0x11d/0x3a0 [ 1023.217512][T20640] ? __pfx_setup_net+0x10/0x10 [ 1023.217529][T20640] ? lockdep_init_map_type+0x5c/0x270 [ 1023.217543][T20640] ? mutex_init_lockep+0x110/0x150 [ 1023.217559][T20640] copy_net_ns+0x351/0x7c0 [ 1023.217573][T20640] create_new_namespaces+0x3ea/0xab0 [ 1023.217596][T20640] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1023.217616][T20640] ksys_unshare+0x45b/0xa40 [ 1023.217629][T20640] ? __pfx_ksys_unshare+0x10/0x10 [ 1023.217650][T20640] ? xfd_validate_state+0x61/0x180 [ 1023.217668][T20640] __x64_sys_unshare+0x31/0x40 [ 1023.217680][T20640] do_syscall_64+0xcd/0xf80 [ 1023.217703][T20640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.217718][T20640] RIP: 0033:0x7f21c0d8f7c9 [ 1023.217732][T20640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.217746][T20640] RSP: 002b:00007f21c1ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1023.217759][T20640] RAX: ffffffffffffffda RBX: 00007f21c0fe6090 RCX: 00007f21c0d8f7c9 [ 1023.217769][T20640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1023.217777][T20640] RBP: 00007f21c0e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1023.217785][T20640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.217801][T20640] R13: 00007f21c0fe6128 R14: 00007f21c0fe6090 R15: 00007ffd12c45748 [ 1023.217821][T20640] [ 1023.528651][T20648] FAULT_INJECTION: forcing a failure. [ 1023.528651][T20648] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.541388][T20648] CPU: 0 UID: 0 PID: 20648 Comm: syz.3.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.541414][T20648] Tainted: [L]=SOFTLOCKUP [ 1023.541420][T20648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.541429][T20648] Call Trace: [ 1023.541436][T20648] [ 1023.541443][T20648] dump_stack_lvl+0x16c/0x1f0 [ 1023.541470][T20648] should_fail_ex+0x512/0x640 [ 1023.541486][T20648] ? fs_reclaim_acquire+0xae/0x150 [ 1023.541509][T20648] should_failslab+0xc2/0x120 [ 1023.541530][T20648] __kmalloc_noprof+0xeb/0x910 [ 1023.541546][T20648] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1023.541569][T20648] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1023.541587][T20648] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1023.541608][T20648] ? tomoyo_profile+0x47/0x60 [ 1023.541630][T20648] tomoyo_mkdev_perm+0x22b/0x570 [ 1023.541644][T20648] ? tomoyo_mkdev_perm+0x217/0x570 [ 1023.541662][T20648] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1023.541678][T20648] ? do_raw_spin_lock+0x12c/0x2b0 [ 1023.541698][T20648] ? do_raw_spin_unlock+0x172/0x230 [ 1023.541723][T20648] ? __pfx_current_check_access_path+0x10/0x10 [ 1023.541743][T20648] ? simple_lookup+0x105/0x1d0 [ 1023.541765][T20648] tomoyo_path_mknod+0x12a/0x190 [ 1023.541779][T20648] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1023.541792][T20648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1023.541815][T20648] security_path_mknod+0x161/0x310 [ 1023.541833][T20648] do_mknodat+0x24e/0x6f0 [ 1023.541853][T20648] ? __pfx_do_mknodat+0x10/0x10 [ 1023.541881][T20648] ? getname_flags.part.0+0x1c5/0x550 [ 1023.541901][T20648] __x64_sys_mknod+0x87/0xb0 [ 1023.541922][T20648] do_syscall_64+0xcd/0xf80 [ 1023.541937][T20648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.541952][T20648] RIP: 0033:0x7f2a2198f7c9 [ 1023.541964][T20648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.541977][T20648] RSP: 002b:00007f2a22761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1023.541991][T20648] RAX: ffffffffffffffda RBX: 00007f2a21be5fa0 RCX: 00007f2a2198f7c9 [ 1023.542000][T20648] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1023.542009][T20648] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1023.542017][T20648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.542025][T20648] R13: 00007f2a21be6038 R14: 00007f2a21be5fa0 R15: 00007ffe0ceee168 [ 1023.542046][T20648] [ 1023.542053][T20648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1024.608573][T20663] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1025.225074][T20674] Process accounting resumed [ 1025.885820][T20693] random: crng reseeded on system resumption [ 1027.566619][T20712] FAULT_INJECTION: forcing a failure. [ 1027.566619][T20712] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.636450][T20718] usb usb15: usbfs: process 20718 (syz.4.2927) did not claim interface 0 before use [ 1027.711314][T20712] CPU: 0 UID: 0 PID: 20712 Comm: syz.4.2927 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.711339][T20712] Tainted: [L]=SOFTLOCKUP [ 1027.711345][T20712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1027.711354][T20712] Call Trace: [ 1027.711359][T20712] [ 1027.711365][T20712] dump_stack_lvl+0x16c/0x1f0 [ 1027.711393][T20712] should_fail_ex+0x512/0x640 [ 1027.711410][T20712] ? __kmalloc_noprof+0xca/0x910 [ 1027.711428][T20712] should_failslab+0xc2/0x120 [ 1027.711450][T20712] __kmalloc_noprof+0xeb/0x910 [ 1027.711465][T20712] ? memcg_list_lru_alloc+0x4e9/0x740 [ 1027.711485][T20712] ? memcg_list_lru_alloc+0x4e9/0x740 [ 1027.711505][T20712] memcg_list_lru_alloc+0x4e9/0x740 [ 1027.711526][T20712] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1027.711551][T20712] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1027.711579][T20712] __memcg_slab_post_alloc_hook+0x133/0x880 [ 1027.711597][T20712] ? kasan_save_track+0x14/0x30 [ 1027.711618][T20712] kmem_cache_alloc_lru_noprof+0x58f/0x770 [ 1027.711637][T20712] ? __d_alloc+0x35/0xa80 [ 1027.711652][T20712] ? __d_alloc+0x35/0xa80 [ 1027.711662][T20712] __d_alloc+0x35/0xa80 [ 1027.711673][T20712] ? inode_set_ctime_current+0x29a/0x7f0 [ 1027.711695][T20712] d_alloc_pseudo+0x1c/0xc0 [ 1027.711711][T20712] alloc_file_pseudo+0xcf/0x230 [ 1027.711727][T20712] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1027.711747][T20712] dma_buf_export+0x325/0xa90 [ 1027.711764][T20712] ? sg_alloc_table+0x4c/0x1c0 [ 1027.711786][T20712] system_heap_allocate+0xb03/0x10a0 [ 1027.711806][T20712] ? __pfx_system_heap_allocate+0x10/0x10 [ 1027.711828][T20712] ? rep_movs_alternative+0x4a/0x90 [ 1027.711847][T20712] dma_heap_ioctl+0x385/0x610 [ 1027.711864][T20712] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1027.711887][T20712] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1027.711902][T20712] __x64_sys_ioctl+0x18e/0x210 [ 1027.711920][T20712] do_syscall_64+0xcd/0xf80 [ 1027.711933][T20712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.711947][T20712] RIP: 0033:0x7fa44ed8f7c9 [ 1027.711959][T20712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.711973][T20712] RSP: 002b:00007fa44fbbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.711986][T20712] RAX: ffffffffffffffda RBX: 00007fa44efe6090 RCX: 00007fa44ed8f7c9 [ 1027.711995][T20712] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 1027.712005][T20712] RBP: 00007fa44ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1027.712013][T20712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.712022][T20712] R13: 00007fa44efe6128 R14: 00007fa44efe6090 R15: 00007fff07b882d8 [ 1027.712041][T20712] [ 1028.251431][T16448] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1028.318264][T16448] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1028.326958][T16448] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 1028.892558][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1028.915376][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1028.963662][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1029.562884][T20750] FAULT_INJECTION: forcing a failure. [ 1029.562884][T20750] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.607666][T20750] CPU: 0 UID: 0 PID: 20750 Comm: syz.0.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.607692][T20750] Tainted: [L]=SOFTLOCKUP [ 1029.607698][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1029.607706][T20750] Call Trace: [ 1029.607712][T20750] [ 1029.607719][T20750] dump_stack_lvl+0x16c/0x1f0 [ 1029.607745][T20750] should_fail_ex+0x512/0x640 [ 1029.607762][T20750] ? __kmalloc_node_noprof+0xcd/0x930 [ 1029.607782][T20750] should_failslab+0xc2/0x120 [ 1029.607802][T20750] __kmalloc_node_noprof+0xee/0x930 [ 1029.607820][T20750] ? lockdep_init_map_type+0x5c/0x270 [ 1029.607834][T20750] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 1029.607856][T20750] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 1029.607872][T20750] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 1029.607890][T20750] ? __pfx_idr_alloc+0x10/0x10 [ 1029.607914][T20750] loop_add+0x3b2/0xb70 [ 1029.607929][T20750] ? __pfx_loop_add+0x10/0x10 [ 1029.607954][T20750] ? find_held_lock+0x2b/0x80 [ 1029.607973][T20750] loop_control_ioctl+0x13e/0x640 [ 1029.607987][T20750] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1029.608003][T20750] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1029.608017][T20750] __x64_sys_ioctl+0x18e/0x210 [ 1029.608035][T20750] do_syscall_64+0xcd/0xf80 [ 1029.608050][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.608063][T20750] RIP: 0033:0x7f21c0d8f7c9 [ 1029.608075][T20750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.608088][T20750] RSP: 002b:00007f21c1ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.608102][T20750] RAX: ffffffffffffffda RBX: 00007f21c0fe6090 RCX: 00007f21c0d8f7c9 [ 1029.608111][T20750] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1029.608119][T20750] RBP: 00007f21c0e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.608127][T20750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.608134][T20750] R13: 00007f21c0fe6128 R14: 00007f21c0fe6090 R15: 00007ffd12c45748 [ 1029.608152][T20750] [ 1029.942510][T20752] FAULT_INJECTION: forcing a failure. [ 1029.942510][T20752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.955662][T20752] CPU: 0 UID: 0 PID: 20752 Comm: syz.0.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.955685][T20752] Tainted: [L]=SOFTLOCKUP [ 1029.955689][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1029.955698][T20752] Call Trace: [ 1029.955705][T20752] [ 1029.955711][T20752] dump_stack_lvl+0x16c/0x1f0 [ 1029.955739][T20752] should_fail_ex+0x512/0x640 [ 1029.955758][T20752] _copy_to_user+0x32/0xd0 [ 1029.955776][T20752] syslog_print_all+0x1cb/0x400 [ 1029.955794][T20752] ? __pfx_syslog_print_all+0x10/0x10 [ 1029.955817][T20752] ? bpf_lsm_capable+0x9/0x10 [ 1029.955835][T20752] ? security_capable+0x7e/0x260 [ 1029.955851][T20752] do_syslog+0x32c/0x6c0 [ 1029.955867][T20752] ? __pfx_do_syslog+0x10/0x10 [ 1029.955889][T20752] ? xfd_validate_state+0x61/0x180 [ 1029.955906][T20752] __x64_sys_syslog+0x74/0xb0 [ 1029.955922][T20752] ? lockdep_hardirqs_on+0x7c/0x110 [ 1029.955944][T20752] do_syscall_64+0xcd/0xf80 [ 1029.955958][T20752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.955972][T20752] RIP: 0033:0x7f21c0d8f7c9 [ 1029.955985][T20752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.955998][T20752] RSP: 002b:00007f21c1c83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1029.956012][T20752] RAX: ffffffffffffffda RBX: 00007f21c0fe6180 RCX: 00007f21c0d8f7c9 [ 1029.956022][T20752] RDX: 00000000000000f4 RSI: 0000200000000040 RDI: 0000000000000004 [ 1029.956030][T20752] RBP: 00007f21c0e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.956039][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.956047][T20752] R13: 00007f21c0fe6218 R14: 00007f21c0fe6180 R15: 00007ffd12c45748 [ 1029.956066][T20752] [ 1030.790902][T20770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1030.837073][T20770] bridge_slave_1: left allmulticast mode [ 1030.842737][T20770] bridge_slave_1: left promiscuous mode [ 1030.883867][T20770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.061862][T20770] bridge_slave_0: left allmulticast mode [ 1031.126372][T20770] bridge_slave_0: left promiscuous mode [ 1031.159533][T20770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.354582][T20800] random: crng reseeded on system resumption [ 1033.016923][T20813] random: crng reseeded on system resumption [ 1033.073432][T20813] hub 1-0:1.0: USB hub found [ 1033.105537][T20813] hub 1-0:1.0: 1 port detected [ 1033.348817][T20819] Invalid ELF header magic: != ELF [ 1033.423969][T20829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2950'. [ 1033.533088][T20816] zswap: compressor not available [ 1033.830205][T20837] FAULT_INJECTION: forcing a failure. [ 1033.830205][T20837] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.865826][T20837] CPU: 0 UID: 0 PID: 20837 Comm: syz.0.2951 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.865851][T20837] Tainted: [L]=SOFTLOCKUP [ 1033.865856][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.865870][T20837] Call Trace: [ 1033.865876][T20837] [ 1033.865882][T20837] dump_stack_lvl+0x16c/0x1f0 [ 1033.865909][T20837] should_fail_ex+0x512/0x640 [ 1033.865925][T20837] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1033.865945][T20837] should_failslab+0xc2/0x120 [ 1033.865966][T20837] kmem_cache_alloc_noprof+0x83/0x770 [ 1033.865983][T20837] ? __proc_create+0x2c8/0x8d0 [ 1033.866005][T20837] ? __proc_create+0x2c8/0x8d0 [ 1033.866021][T20837] __proc_create+0x2c8/0x8d0 [ 1033.866039][T20837] ? __pfx___proc_create+0x10/0x10 [ 1033.866064][T20837] _proc_mkdir+0xb9/0x210 [ 1033.866082][T20837] ? __pfx__proc_mkdir+0x10/0x10 [ 1033.866103][T20837] ? __pfx_netfilter_net_init+0x10/0x10 [ 1033.866123][T20837] netfilter_net_init+0x37b/0x4b0 [ 1033.866146][T20837] ? sysctl_net_init+0x27/0x30 [ 1033.866162][T20837] ops_init+0x1e2/0x5f0 [ 1033.866184][T20837] setup_net+0x11d/0x3a0 [ 1033.866204][T20837] ? __pfx_setup_net+0x10/0x10 [ 1033.866230][T20837] ? lockdep_init_map_type+0x5c/0x270 [ 1033.866245][T20837] ? mutex_init_lockep+0x110/0x150 [ 1033.866263][T20837] copy_net_ns+0x351/0x7c0 [ 1033.866277][T20837] create_new_namespaces+0x3ea/0xab0 [ 1033.866303][T20837] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1033.866323][T20837] ksys_unshare+0x45b/0xa40 [ 1033.866336][T20837] ? __pfx_ksys_unshare+0x10/0x10 [ 1033.866358][T20837] ? xfd_validate_state+0x61/0x180 [ 1033.866376][T20837] __x64_sys_unshare+0x31/0x40 [ 1033.866388][T20837] do_syscall_64+0xcd/0xf80 [ 1033.866402][T20837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.866416][T20837] RIP: 0033:0x7f21c0d8f7c9 [ 1033.866429][T20837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.866442][T20837] RSP: 002b:00007f21c1ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1033.866456][T20837] RAX: ffffffffffffffda RBX: 00007f21c0fe6090 RCX: 00007f21c0d8f7c9 [ 1033.866466][T20837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1033.866475][T20837] RBP: 00007f21c0e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1033.866484][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.866493][T20837] R13: 00007f21c0fe6128 R14: 00007f21c0fe6090 R15: 00007ffd12c45748 [ 1033.866512][T20837] [ 1033.866518][T20837] cannot create netfilter proc entry [ 1034.574589][T20847] usb usb15: usbfs: process 20847 (syz.2.2952) did not claim interface 0 before use [ 1035.702034][T20859] vivid-007: ================= START STATUS ================= [ 1036.172973][T20859] vivid-007: Generate PTS: true [ 1036.204423][T20859] vivid-007: Generate SCR: true [ 1036.288159][T20859] tpg source WxH: 320x240 (Y'CbCr) [ 1036.387663][T20859] tpg field: 1 [ 1036.391052][T20859] tpg crop: (0,0)/320x240 [ 1036.445922][T20859] tpg compose: (0,0)/320x240 [ 1036.516938][T20859] tpg colorspace: 8 [ 1036.564321][T20859] tpg transfer function: 0/0 [ 1036.637855][T20859] tpg Y'CbCr encoding: 0/0 [ 1036.642385][T20859] tpg quantization: 0/0 [ 1036.759179][T20859] tpg RGB range: 0/2 [ 1036.763095][T20859] vivid-007: ================== END STATUS ================== [ 1037.304521][T20878] Invalid ELF header magic: != ELF [ 1039.712376][T20905] NFSD: Failed to start, no listeners configured. [ 1041.289563][T20948] usb usb15: usbfs: process 20948 (syz.0.2970) did not claim interface 0 before use [ 1042.240132][T20991] usb usb15: usbfs: process 20991 (syz.2.2973) did not claim interface 0 before use [ 1044.190921][T16868] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 1044.225835][T21018] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1044.293147][T21018] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1044.338122][T21018] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1048.956028][T21058] zswap: compressor û not available [ 1049.402220][T21065] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1049.773711][T21070] usb usb15: usbfs: process 21070 (syz.3.2986) did not claim interface 0 before use [ 1050.300295][T21080] ima: policy update failed [ 1050.319071][ T30] audit: type=1802 audit(4294969891.563:28): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2987" res=0 errno=0 [ 1050.336414][T21079] FAULT_INJECTION: forcing a failure. [ 1050.336414][T21079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1050.407007][T21079] CPU: 0 UID: 0 PID: 21079 Comm: syz.0.2988 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.407034][T21079] Tainted: [L]=SOFTLOCKUP [ 1050.407040][T21079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1050.407049][T21079] Call Trace: [ 1050.407054][T21079] [ 1050.407061][T21079] dump_stack_lvl+0x16c/0x1f0 [ 1050.407089][T21079] should_fail_ex+0x512/0x640 [ 1050.407108][T21079] should_fail_alloc_page+0xe7/0x130 [ 1050.407131][T21079] prepare_alloc_pages+0x401/0x670 [ 1050.407156][T21079] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1050.407175][T21079] ? stack_trace_save+0x8e/0xc0 [ 1050.407195][T21079] ? __pfx_stack_trace_save+0x10/0x10 [ 1050.407214][T21079] ? do_raw_spin_lock+0x12c/0x2b0 [ 1050.407229][T21079] ? stack_depot_save_flags+0x29/0x9b0 [ 1050.407245][T21079] ? find_held_lock+0x2b/0x80 [ 1050.407264][T21079] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1050.407280][T21079] ? __kasan_kmalloc+0xaa/0xb0 [ 1050.407297][T21079] ? copy_splice_read+0x1a8/0xc20 [ 1050.407315][T21079] ? splice_direct_to_actor+0x2a1/0xa30 [ 1050.407332][T21079] ? do_splice_direct+0x174/0x240 [ 1050.407356][T21079] ? do_sendfile+0xb06/0xe50 [ 1050.407374][T21079] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1050.407387][T21079] ? do_syscall_64+0xcd/0xf80 [ 1050.407400][T21079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.407427][T21079] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1050.407449][T21079] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1050.407470][T21079] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1050.407489][T21079] ? copy_splice_read+0x1a8/0xc20 [ 1050.407511][T21079] copy_splice_read+0x1e1/0xc20 [ 1050.407529][T21079] ? __pfx_pipe_to_null+0x10/0x10 [ 1050.407553][T21079] ? __pfx_copy_splice_read+0x10/0x10 [ 1050.407570][T21079] ? pipe_unlock+0x4a/0x70 [ 1050.407590][T21079] ? __pfx_splice_from_pipe+0x10/0x10 [ 1050.407613][T21079] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1050.407633][T21079] ? __pfx_copy_splice_read+0x10/0x10 [ 1050.407651][T21079] do_splice_read+0x285/0x370 [ 1050.407671][T21079] splice_direct_to_actor+0x2a1/0xa30 [ 1050.407692][T21079] ? __pfx_direct_splice_actor+0x10/0x10 [ 1050.407714][T21079] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1050.407739][T21079] do_splice_direct+0x174/0x240 [ 1050.407758][T21079] ? __pfx_do_splice_direct+0x10/0x10 [ 1050.407777][T21079] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1050.407797][T21079] ? bpf_lsm_file_permission+0x9/0x10 [ 1050.407813][T21079] ? security_file_permission+0x71/0x210 [ 1050.407831][T21079] ? rw_verify_area+0xcf/0x6c0 [ 1050.407850][T21079] do_sendfile+0xb06/0xe50 [ 1050.407870][T21079] ? __pfx_do_sendfile+0x10/0x10 [ 1050.407891][T21079] ? __x64_sys_futex+0x1e0/0x4c0 [ 1050.407906][T21079] ? __x64_sys_futex+0x1e9/0x4c0 [ 1050.407923][T21079] __x64_sys_sendfile64+0x1d8/0x220 [ 1050.407937][T21079] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1050.407949][T21079] ? syscall_user_dispatch+0x78/0x140 [ 1050.407971][T21079] do_syscall_64+0xcd/0xf80 [ 1050.407988][T21079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.408003][T21079] RIP: 0033:0x7f21c0d8f7c9 [ 1050.408017][T21079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.408030][T21079] RSP: 002b:00007f21c1cc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1050.408044][T21079] RAX: ffffffffffffffda RBX: 00007f21c0fe5fa0 RCX: 00007f21c0d8f7c9 [ 1050.408053][T21079] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 1050.408062][T21079] RBP: 00007f21c0e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1050.408070][T21079] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1050.408078][T21079] R13: 00007f21c0fe6038 R14: 00007f21c0fe5fa0 R15: 00007ffd12c45748 [ 1050.408098][T21079] [ 1052.295542][T21090] usb usb15: usbfs: process 21090 (syz.0.2990) did not claim interface 0 before use [ 1055.386099][T20977] syz.4.2969 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1055.935700][T20977] CPU: 0 UID: 0 PID: 20977 Comm: syz.4.2969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.935729][T20977] Tainted: [L]=SOFTLOCKUP [ 1055.935734][T20977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1055.935746][T20977] Call Trace: [ 1055.935756][T20977] [ 1055.935763][T20977] dump_stack_lvl+0x16c/0x1f0 [ 1055.935791][T20977] dump_header+0x101/0x960 [ 1055.935810][T20977] oom_kill_process+0x176/0x910 [ 1055.935827][T20977] out_of_memory+0x350/0x1700 [ 1055.935842][T20977] ? __lock_acquire+0x436/0x2890 [ 1055.935862][T20977] ? __pfx_out_of_memory+0x10/0x10 [ 1055.935888][T20977] mem_cgroup_out_of_memory+0x118/0x130 [ 1055.935906][T20977] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1055.935929][T20977] ? do_raw_spin_unlock+0x172/0x230 [ 1055.935948][T20977] try_charge_memcg+0x695/0xd30 [ 1055.935973][T20977] ? __pfx_try_charge_memcg+0x10/0x10 [ 1055.935995][T20977] ? __print_lock_name+0x31/0xe0 [ 1055.936013][T20977] ? rcu_read_unlock+0x17/0x60 [ 1055.936031][T20977] charge_memcg+0x8a/0x230 [ 1055.936052][T20977] __mem_cgroup_charge+0x2b/0x1e0 [ 1055.936067][T20977] shmem_alloc_and_add_folio+0x50c/0xc20 [ 1055.936095][T20977] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1055.936112][T20977] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1055.936132][T20977] shmem_get_folio_gfp+0x67f/0x1610 [ 1055.936152][T20977] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1055.936174][T20977] shmem_write_begin+0x1a4/0x3b0 [ 1055.936191][T20977] ? __pfx_shmem_write_begin+0x10/0x10 [ 1055.936208][T20977] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1055.936228][T20977] ? lockdep_hardirqs_on+0x7c/0x110 [ 1055.936252][T20977] generic_perform_write+0x3c4/0x900 [ 1055.936272][T20977] ? __pfx_generic_perform_write+0x10/0x10 [ 1055.936289][T20977] ? file_update_time_flags+0x35c/0x520 [ 1055.936306][T20977] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1055.936324][T20977] shmem_file_write_iter+0x10e/0x140 [ 1055.936344][T20977] __kernel_write_iter+0x31a/0xb10 [ 1055.936366][T20977] ? __pfx___kernel_write_iter+0x10/0x10 [ 1055.936384][T20977] ? __up_read+0x2d1/0x700 [ 1055.936402][T20977] ? dump_user_range+0x756/0xb70 [ 1055.936426][T20977] dump_user_range+0x413/0xb70 [ 1055.936450][T20977] ? __pfx_dump_user_range+0x10/0x10 [ 1055.936472][T20977] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1055.936490][T20977] ? __pfx_writenote+0x10/0x10 [ 1055.936508][T20977] elf_core_dump+0x29c3/0x3c10 [ 1055.936530][T20977] ? __pfx_elf_core_dump+0x10/0x10 [ 1055.936543][T20977] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1055.936563][T20977] ? rcu_is_watching+0x12/0xc0 [ 1055.936584][T20977] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1055.936603][T20977] ? 0xffffffffff600000 [ 1055.936616][T20977] ? __schedule+0x114c/0x6150 [ 1055.936635][T20977] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1055.936684][T20977] ? vfs_coredump+0x2b85/0x55e0 [ 1055.936703][T20977] vfs_coredump+0x2b85/0x55e0 [ 1055.936730][T20977] ? __pfx_vfs_coredump+0x10/0x10 [ 1055.936749][T20977] ? __lock_acquire+0x436/0x2890 [ 1055.936766][T20977] ? __lock_acquire+0x436/0x2890 [ 1055.936780][T20977] ? lock_acquire+0x179/0x330 [ 1055.936797][T20977] ? lock_acquire+0x179/0x330 [ 1055.936822][T20977] ? arch_stack_walk+0xa6/0x100 [ 1055.936846][T20977] ? stack_trace_save+0x8e/0xc0 [ 1055.936866][T20977] ? __pfx_stack_trace_save+0x10/0x10 [ 1055.936887][T20977] ? stack_depot_save_flags+0x29/0x9b0 [ 1055.936904][T20977] ? __lock_acquire+0x436/0x2890 [ 1055.936919][T20977] ? kasan_save_stack+0x42/0x60 [ 1055.936969][T20977] ? proc_coredump_connector+0x2d1/0x4f0 [ 1055.936983][T20977] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1055.937001][T20977] ? rcu_is_watching+0x12/0xc0 [ 1055.937022][T20977] get_signal+0x22e1/0x26d0 [ 1055.937048][T20977] ? __pfx_get_signal+0x10/0x10 [ 1055.937072][T20977] arch_do_signal_or_restart+0x8f/0x7a0 [ 1055.937098][T20977] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1055.937124][T20977] ? do_user_addr_fault+0x926/0x1370 [ 1055.937144][T20977] irqentry_exit+0x38a/0x8c0 [ 1055.937160][T20977] asm_exc_page_fault+0x26/0x30 [ 1055.937174][T20977] RIP: 0033:0xc8 [ 1055.937190][T20977] Code: Unable to access opcode bytes at 0x9e. [ 1055.937196][T20977] RSP: 002b:000000000000000a EFLAGS: 00010286 [ 1055.937207][T20977] RAX: 0000000000000000 RBX: 00007fa44efe6360 RCX: 00007fa44ed8c0c9 [ 1055.937217][T20977] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1055.937225][T20977] RBP: 00007fa44ee13f91 R08: 0000000000000002 R09: 0000000000000000 [ 1055.937234][T20977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.937242][T20977] R13: 00007fa44efe63f8 R14: 00007fa44efe6360 R15: 00007fff07b882d8 [ 1055.937262][T20977] [ 1056.803523][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.809849][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.832970][T21088] Process accounting paused [ 1056.991602][T20977] memory: usage 307200kB, limit 307200kB, failcnt 28512 [ 1057.041982][T20977] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 1057.075039][T20977] kmem: usage 2624kB, limit 9007199254740988kB, failcnt 0 [ 1057.083505][T21118] futex_wake_op: syz.0.2995 tries to shift op by -2048; fix this program [ 1057.116271][T20977] Memory cgroup stats for /syz4: [ 1057.116492][T20977] cache 309207040 [ 1057.154216][T20977] rss 2674688 [ 1057.157515][T20977] rss_huge 0 [ 1057.189260][T20977] shmem 309207040 [ 1057.207688][T20977] mapped_file 23621632 [ 1057.234990][T20977] dirty 0 [ 1057.257966][T20977] writeback 0 [ 1057.272561][T20977] workingset_refault_anon 166 [ 1057.291728][T20977] workingset_refault_file 0 [ 1057.336369][T20977] swap 127991808 [ 1057.358625][T20977] swapcached 4096 [ 1057.378061][T20977] pgpgin 201006 [ 1057.395553][T20977] pgpgout 125884 [ 1057.432346][T20977] pgfault 75489 [ 1057.435827][T20977] pgmajfault 114 [ 1057.460125][T20977] inactive_anon 134168576 [ 1057.486129][T20977] active_anon 177717248 [ 1057.519610][T20977] inactive_file 0 [ 1057.523261][T20977] active_file 0 [ 1057.526697][T20977] unevictable 0 [ 1057.565855][T20977] hierarchical_memory_limit 314572800 [ 1057.595885][T20977] hierarchical_memsw_limit 9223372036854771712 [ 1057.625073][T20977] total_cache 309207040 [ 1057.648408][T20977] total_rss 2674688 [ 1057.652231][T20977] total_rss_huge 0 [ 1057.695786][T20977] total_shmem 309207040 [ 1057.717462][T20977] total_mapped_file 23621632 [ 1057.745882][T20977] total_dirty 0 [ 1057.765073][T20977] total_writeback 0 [ 1057.784713][T20977] total_workingset_refault_anon 166 [ 1057.816863][T20977] total_workingset_refault_file 0 [ 1057.840898][T20977] total_swap 127991808 [ 1057.860182][T20977] total_swapcached 4096 [ 1057.879152][T20977] total_pgpgin 201006 [ 1057.904022][T20977] total_pgpgout 125884 [ 1057.927440][T20977] total_pgfault 75489 [ 1057.931439][T20977] total_pgmajfault 114 [ 1057.967057][T20977] total_inactive_anon 134168576 [ 1057.994942][T20977] total_active_anon 177717248 [ 1058.014440][T20977] total_inactive_file 0 [ 1058.039485][T20977] total_active_file 0 [ 1058.043490][T20977] total_unevictable 0 [ 1058.084647][T20977] anon_cost 0 [ 1058.108786][T20977] file_cost 0 [ 1058.136518][T20977] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2969,pid=20987,uid=0 [ 1058.226538][T20977] Memory cgroup out of memory: Killed process 20987 (syz.4.2969) total-vm:131620kB, anon-rss:3840kB, file-rss:42792kB, shmem-rss:23168kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 1058.260319][T21136] futex_wake_op: syz.0.2999 tries to shift op by -2048; fix this program [ 1058.413530][T21136] futex_wake_op: syz.0.2999 tries to shift op by -2048; fix this program [ 1059.599325][T21159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3003'. [ 1059.683797][T21159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.704852][T21159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.894963][T21159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.935280][T21159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.772780][ T32] oom_reaper: reaped process 20987 (syz.4.2969), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1062.259643][T21183] futex_wake_op: syz.3.3008 tries to shift op by -2048; fix this program [ 1062.301522][T21183] futex_wake_op: syz.3.3008 tries to shift op by -2048; fix this program [ 1062.375123][T21183] 0x000000000001-0x000000020000 : "" [ 1062.408474][T21178] zswap: compressor not available [ 1062.487758][T21183] ftl_cs: FTL header corrupt! [ 1062.958584][T20973] syz.4.2969 (20973) used greatest stack depth: 19112 bytes left [ 1064.442153][T21216] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1064.518853][T21216] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1064.633327][T21216] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1064.706046][T21216] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1064.821498][T21216] page dumped because: unmovable page [ 1064.875452][T21216] page_owner info is not present (never set?) [ 1065.224172][T21228] can: request_module (can-proto-4) failed. [ 1065.674501][T21252] usb usb15: usbfs: process 21252 (syz.2.3017) did not claim interface 0 before use [ 1065.948579][T21253] netlink: 326 bytes leftover after parsing attributes in process `syz.4.3018'. [ 1065.960385][T21257] FAULT_INJECTION: forcing a failure. [ 1065.960385][T21257] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.997398][T21257] CPU: 0 UID: 7 PID: 21257 Comm: syz.0.3020 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.997421][T21257] Tainted: [L]=SOFTLOCKUP [ 1065.997427][T21257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1065.997435][T21257] Call Trace: [ 1065.997441][T21257] [ 1065.997446][T21257] dump_stack_lvl+0x16c/0x1f0 [ 1065.997473][T21257] should_fail_ex+0x512/0x640 [ 1065.997490][T21257] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1065.997510][T21257] should_failslab+0xc2/0x120 [ 1065.997538][T21257] kmem_cache_alloc_noprof+0x83/0x770 [ 1065.997554][T21257] ? seq_open+0x55/0x170 [ 1065.997573][T21257] ? seq_open+0x55/0x170 [ 1065.997587][T21257] ? mutex_init_lockep+0x110/0x150 [ 1065.997600][T21257] seq_open+0x55/0x170 [ 1065.997615][T21257] kernfs_fop_open+0x59f/0xda0 [ 1065.997640][T21257] do_dentry_open+0x748/0x1590 [ 1065.997660][T21257] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1065.997685][T21257] vfs_open+0x82/0x3f0 [ 1065.997703][T21257] path_openat+0x2078/0x3140 [ 1065.997729][T21257] ? __pfx_path_openat+0x10/0x10 [ 1065.997757][T21257] do_filp_open+0x20b/0x470 [ 1065.997778][T21257] ? __pfx_do_filp_open+0x10/0x10 [ 1065.997811][T21257] ? alloc_fd+0x471/0x7d0 [ 1065.997836][T21257] do_sys_openat2+0x121/0x290 [ 1065.997851][T21257] ? __pfx_do_sys_openat2+0x10/0x10 [ 1065.997873][T21257] __x64_sys_openat+0x174/0x210 [ 1065.997889][T21257] ? __pfx___x64_sys_openat+0x10/0x10 [ 1065.997911][T21257] do_syscall_64+0xcd/0xf80 [ 1065.997926][T21257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.997940][T21257] RIP: 0033:0x7f21c0d8f7c9 [ 1065.997953][T21257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.997966][T21257] RSP: 002b:00007f21c1cc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1065.997979][T21257] RAX: ffffffffffffffda RBX: 00007f21c0fe5fa0 RCX: 00007f21c0d8f7c9 [ 1065.997988][T21257] RDX: 000000000010b142 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 1065.997997][T21257] RBP: 00007f21c0e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1065.998005][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.998016][T21257] R13: 00007f21c0fe6038 R14: 00007f21c0fe5fa0 R15: 00007ffd12c45748 [ 1065.998035][T21257] [ 1067.646213][T21279] KVM: debugfs: duplicate directory 21279-3 [ 1074.621116][T21359] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 1075.794732][T21390] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1075.839353][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3040'. [ 1076.380546][T21402] bridge_slave_1: left allmulticast mode [ 1076.451870][T21402] bridge_slave_1: left promiscuous mode [ 1076.536466][T21402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.704603][T21413] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1077.342143][T21408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1077.434563][T21408] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1077.804406][T21408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1077.830693][T21408] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1077.870301][T21408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1077.897571][T21408] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1077.938372][T21408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1077.974842][T21408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1078.043999][T21408] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1078.309807][T21431] usb usb15: usbfs: process 21431 (syz.3.3047) did not claim interface 0 before use [ 1078.450547][T21436] usb usb15: usbfs: process 21436 (syz.2.3048) did not claim interface 0 before use [ 1078.595255][ T5841] Process accounting resumed [ 1078.707905][T21435] zswap: compressor û not available [ 1079.384979][T16868] Bluetooth: hci2: command 0x0406 tx timeout [ 1079.865019][T16868] Bluetooth: hci0: command 0x0406 tx timeout [ 1079.879348][T16868] Bluetooth: hci3: command 0x0406 tx timeout [ 1079.942356][T16448] Bluetooth: hci1: command 0x0c1a tx timeout [ 1081.438635][T21483] Invalid ELF header magic: != ELF [ 1081.454470][T16448] Bluetooth: hci2: command 0x0406 tx timeout [ 1081.932453][T21452] Bluetooth: hci0: command 0x0406 tx timeout [ 1081.938496][T16448] Bluetooth: hci3: command 0x0406 tx timeout [ 1082.010478][T21452] Bluetooth: hci1: command 0x0c1a tx timeout [ 1082.096135][T21487] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input36 [ 1083.209084][T21498] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1083.241653][T21514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 1083.844354][T21526] FAULT_INJECTION: forcing a failure. [ 1083.844354][T21526] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1083.899251][T21526] CPU: 0 UID: 0 PID: 21526 Comm: syz.2.3066 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.899276][T21526] Tainted: [L]=SOFTLOCKUP [ 1083.899282][T21526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1083.899291][T21526] Call Trace: [ 1083.899296][T21526] [ 1083.899303][T21526] dump_stack_lvl+0x16c/0x1f0 [ 1083.899330][T21526] should_fail_ex+0x512/0x640 [ 1083.899350][T21526] get_futex_key+0x1d0/0x15f0 [ 1083.899367][T21526] ? __pfx_get_futex_key+0x10/0x10 [ 1083.899380][T21526] ? __asan_memset+0x23/0x50 [ 1083.899397][T21526] ? _copy_from_user+0x59/0xd0 [ 1083.899413][T21526] ? __sys_bpf+0x175/0x4980 [ 1083.899427][T21526] futex_wake+0xea/0x530 [ 1083.899443][T21526] ? __pfx___sys_bpf+0x10/0x10 [ 1083.899455][T21526] ? __pfx_futex_wait+0x10/0x10 [ 1083.899473][T21526] ? __pfx_futex_wake+0x10/0x10 [ 1083.899498][T21526] do_futex+0x1e3/0x350 [ 1083.899513][T21526] ? __pfx_do_futex+0x10/0x10 [ 1083.899532][T21526] __x64_sys_futex+0x1e0/0x4c0 [ 1083.899552][T21526] ? fput+0x70/0xf0 [ 1083.899565][T21526] ? __pfx___x64_sys_futex+0x10/0x10 [ 1083.899580][T21526] ? xfd_validate_state+0x61/0x180 [ 1083.899593][T21526] ? __pfx_ksys_write+0x10/0x10 [ 1083.899617][T21526] do_syscall_64+0xcd/0xf80 [ 1083.899633][T21526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.899653][T21526] RIP: 0033:0x7f1a9558f7c9 [ 1083.899666][T21526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.899680][T21526] RSP: 002b:00007f1a964c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1083.899694][T21526] RAX: ffffffffffffffda RBX: 00007f1a957e5fa8 RCX: 00007f1a9558f7c9 [ 1083.899704][T21526] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1a957e5fac [ 1083.899713][T21526] RBP: 00007f1a957e5fa0 R08: 00007f1a964c1000 R09: 0000000000000000 [ 1083.899721][T21526] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1083.899729][T21526] R13: 00007f1a957e6038 R14: 00007ffe9831b630 R15: 00007ffe9831b718 [ 1083.899747][T21526] [ 1084.337914][T21452] Bluetooth: hci1: command 0x0c1a tx timeout [ 1086.432556][T21571] zswap: compressor not available [ 1086.717897][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 1087.045351][T21587] random: crng reseeded on system resumption [ 1088.605363][T21602] zswap: compressor not available [ 1088.662150][T21603] zswap: compressor not available [ 1089.855819][T21640] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1090.720871][T21665] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3089'. [ 1091.798276][T21682] hub 1-0:1.0: USB hub found [ 1091.894947][T21682] hub 1-0:1.0: 1 port detected [ 1092.834719][T21685] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 14 with max blocks 23 with error 74 [ 1092.865988][T21703] usb usb15: usbfs: process 21703 (syz.2.3101) did not claim interface 0 before use [ 1093.182372][T21685] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1093.182372][T21685] [ 1094.477899][T21729] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1094.985960][T21743] ima: policy update failed [ 1095.072801][ T30] audit: type=1802 audit(4294969936.556:29): pid=21743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3109" res=0 errno=0 [ 1095.913599][T21772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3116'. [ 1096.015156][T21765] zswap: compressor not available [ 1096.379779][T21783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1096.540383][T21787] hub 8-0:1.0: USB hub found [ 1096.640219][T21787] hub 8-0:1.0: 1 port detected [ 1096.693148][T21782] zswap: compressor 000 not available [ 1097.209986][T21798] netlink: 'syz.2.3123': attribute type 1 has an invalid length. [ 1097.636236][T21810] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3125'. [ 1097.884093][T21810] ›: renamed from bond_slave_0 (while UP) [ 1097.953417][T21810] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3125'. [ 1100.160550][T21857] FAULT_INJECTION: forcing a failure. [ 1100.160550][T21857] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.218553][T21858] FAULT_INJECTION: forcing a failure. [ 1100.218553][T21858] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.239357][T21857] CPU: 0 UID: 0 PID: 21857 Comm: syz.3.3137 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.239381][T21857] Tainted: [L]=SOFTLOCKUP [ 1100.239387][T21857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1100.239396][T21857] Call Trace: [ 1100.239401][T21857] [ 1100.239407][T21857] dump_stack_lvl+0x16c/0x1f0 [ 1100.239435][T21857] should_fail_ex+0x512/0x640 [ 1100.239452][T21857] ? __kmalloc_noprof+0xca/0x910 [ 1100.239479][T21857] ? __pfx_stats_fop_open+0x10/0x10 [ 1100.239497][T21857] should_failslab+0xc2/0x120 [ 1100.239519][T21857] __kmalloc_noprof+0xeb/0x910 [ 1100.239534][T21857] ? __seq_open_private+0x22/0xd0 [ 1100.239554][T21857] ? __pfx_stats_fop_open+0x10/0x10 [ 1100.239570][T21857] ? __seq_open_private+0x22/0xd0 [ 1100.239585][T21857] __seq_open_private+0x22/0xd0 [ 1100.239602][T21857] sc_common_open+0x6b/0x200 [ 1100.239619][T21857] full_proxy_open_regular+0x1b9/0x350 [ 1100.239641][T21857] do_dentry_open+0x748/0x1590 [ 1100.239660][T21857] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1100.239684][T21857] vfs_open+0x82/0x3f0 [ 1100.239708][T21857] path_openat+0x2078/0x3140 [ 1100.239735][T21857] ? __pfx_path_openat+0x10/0x10 [ 1100.239770][T21857] do_filp_open+0x20b/0x470 [ 1100.239792][T21857] ? __pfx_do_filp_open+0x10/0x10 [ 1100.239825][T21857] ? alloc_fd+0x471/0x7d0 [ 1100.239850][T21857] do_sys_openat2+0x121/0x290 [ 1100.239866][T21857] ? __pfx_do_sys_openat2+0x10/0x10 [ 1100.239888][T21857] __x64_sys_openat+0x174/0x210 [ 1100.239903][T21857] ? __pfx___x64_sys_openat+0x10/0x10 [ 1100.239925][T21857] do_syscall_64+0xcd/0xf80 [ 1100.239939][T21857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.239954][T21857] RIP: 0033:0x7f2a2198f7c9 [ 1100.239967][T21857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.239982][T21857] RSP: 002b:00007f2a22740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1100.239996][T21857] RAX: ffffffffffffffda RBX: 00007f2a21be6090 RCX: 00007f2a2198f7c9 [ 1100.240007][T21857] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1100.240017][T21857] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1100.240025][T21857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1100.240033][T21857] R13: 00007f2a21be6128 R14: 00007f2a21be6090 R15: 00007ffe0ceee168 [ 1100.240051][T21857] [ 1100.793519][T21858] CPU: 0 UID: 0 PID: 21858 Comm: syz.2.3135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.793541][T21858] Tainted: [L]=SOFTLOCKUP [ 1100.793547][T21858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1100.793556][T21858] Call Trace: [ 1100.793562][T21858] [ 1100.793568][T21858] dump_stack_lvl+0x16c/0x1f0 [ 1100.793596][T21858] should_fail_ex+0x512/0x640 [ 1100.793613][T21858] ? fs_reclaim_acquire+0xae/0x150 [ 1100.793636][T21858] should_failslab+0xc2/0x120 [ 1100.793656][T21858] __kmalloc_noprof+0xeb/0x910 [ 1100.793672][T21858] ? usb_alloc_urb+0x66/0xa0 [ 1100.793696][T21858] ? usb_alloc_urb+0x66/0xa0 [ 1100.793714][T21858] ? __kasan_kmalloc+0xaa/0xb0 [ 1100.793731][T21858] usb_alloc_urb+0x66/0xa0 [ 1100.793750][T21858] usb_control_msg+0x1d3/0x4a0 [ 1100.793765][T21858] ? __pfx_usb_control_msg+0x10/0x10 [ 1100.793778][T21858] ? __lock_acquire+0x436/0x2890 [ 1100.793796][T21858] hub_ext_port_status+0x14e/0x670 [ 1100.793824][T21858] hub_activate+0x6e5/0x1d90 [ 1100.793843][T21858] ? __pfx_hub_activate+0x10/0x10 [ 1100.793856][T21858] ? find_held_lock+0x2b/0x80 [ 1100.793873][T21858] ? proc_do_submiturb+0x650/0x3b10 [ 1100.793890][T21858] hub_resume+0xa8/0x400 [ 1100.793904][T21858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1100.793919][T21858] ? __pfx_hub_resume+0x10/0x10 [ 1100.793932][T21858] ? __pfx_hcd_bus_resume+0x10/0x10 [ 1100.793963][T21858] usb_resume_interface.constprop.0.isra.0+0x2c5/0x400 [ 1100.793987][T21858] usb_resume_both+0x237/0x9b0 [ 1100.794006][T21858] ? __pfx_usb_resume_both+0x10/0x10 [ 1100.794026][T21858] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1100.794048][T21858] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1100.794068][T21858] __rpm_callback+0xc8/0x610 [ 1100.794086][T21858] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1100.794106][T21858] rpm_callback+0x1b7/0x200 [ 1100.794122][T21858] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1100.794141][T21858] rpm_resume+0xceb/0x12f0 [ 1100.794161][T21858] ? __pfx_rpm_resume+0x10/0x10 [ 1100.794177][T21858] ? do_raw_spin_lock+0x12c/0x2b0 [ 1100.794192][T21858] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1100.794214][T21858] __pm_runtime_resume+0xb6/0x170 [ 1100.794232][T21858] usb_autoresume_device+0x23/0xe0 [ 1100.794252][T21858] usbdev_open+0x228/0x8b0 [ 1100.794273][T21858] ? kobject_get_unless_zero+0x156/0x1e0 [ 1100.794287][T21858] ? __pfx_usbdev_open+0x10/0x10 [ 1100.794307][T21858] ? chrdev_open+0x10b/0x6a0 [ 1100.794329][T21858] ? __pfx_usbdev_open+0x10/0x10 [ 1100.794348][T21858] chrdev_open+0x234/0x6a0 [ 1100.794367][T21858] ? __pfx_apparmor_file_open+0x10/0x10 [ 1100.794383][T21858] ? __pfx_chrdev_open+0x10/0x10 [ 1100.794404][T21858] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1100.794428][T21858] do_dentry_open+0x748/0x1590 [ 1100.794448][T21858] ? __pfx_chrdev_open+0x10/0x10 [ 1100.794474][T21858] vfs_open+0x82/0x3f0 [ 1100.794491][T21858] path_openat+0x2078/0x3140 [ 1100.794517][T21858] ? __pfx_path_openat+0x10/0x10 [ 1100.794544][T21858] do_filp_open+0x20b/0x470 [ 1100.794564][T21858] ? __pfx_do_filp_open+0x10/0x10 [ 1100.794598][T21858] ? alloc_fd+0x471/0x7d0 [ 1100.794622][T21858] do_sys_openat2+0x121/0x290 [ 1100.794638][T21858] ? __pfx_do_sys_openat2+0x10/0x10 [ 1100.794660][T21858] __x64_sys_openat+0x174/0x210 [ 1100.794675][T21858] ? __pfx___x64_sys_openat+0x10/0x10 [ 1100.794698][T21858] do_syscall_64+0xcd/0xf80 [ 1100.794717][T21858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.794731][T21858] RIP: 0033:0x7f1a9558f7c9 [ 1100.794744][T21858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.794759][T21858] RSP: 002b:00007f1a9649f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1100.794773][T21858] RAX: ffffffffffffffda RBX: 00007f1a957e6090 RCX: 00007f1a9558f7c9 [ 1100.794784][T21858] RDX: 000000000018bd01 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1100.794793][T21858] RBP: 00007f1a95613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1100.794802][T21858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1100.794811][T21858] R13: 00007f1a957e6128 R14: 00007f1a957e6090 R15: 00007ffe9831b718 [ 1100.794831][T21858] [ 1100.794881][T21858] hub 15-0:1.0: hub_ext_port_status failed (err = -12) [ 1103.318286][T21891] zswap: compressor not available [ 1103.934453][T21912] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1104.243814][T21915] Invalid ELF header magic: != ELF [ 1104.484008][T21921] zswap: compressor not available [ 1105.102465][T21915] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input37 [ 1105.207328][T19963] udevd[19963]: setting owner of /dev/input/event2 to uid=0, gid=104 failed: No such file or directory [ 1106.708125][T21971] usb usb15: usbfs: process 21971 (syz.3.3160) did not claim interface 0 before use [ 1107.574136][ T6957] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1325 with max blocks 3 with error 117 [ 1107.664361][ T6957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1107.664361][ T6957] [ 1108.550497][T22000] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1108.712690][T22007] FAULT_INJECTION: forcing a failure. [ 1108.712690][T22007] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1108.759793][T22007] CPU: 0 UID: 0 PID: 22007 Comm: syz.2.3166 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.759824][T22007] Tainted: [L]=SOFTLOCKUP [ 1108.759830][T22007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1108.759839][T22007] Call Trace: [ 1108.759844][T22007] [ 1108.759850][T22007] dump_stack_lvl+0x16c/0x1f0 [ 1108.759877][T22007] should_fail_ex+0x512/0x640 [ 1108.759897][T22007] get_futex_key+0x1d0/0x15f0 [ 1108.759915][T22007] ? __pfx_get_futex_key+0x10/0x10 [ 1108.759929][T22007] ? find_held_lock+0x2b/0x80 [ 1108.759952][T22007] futex_wake+0xea/0x530 [ 1108.759973][T22007] ? __pfx_futex_wake+0x10/0x10 [ 1108.759994][T22007] ? kasan_quarantine_put+0x10a/0x240 [ 1108.760011][T22007] ? lockdep_hardirqs_on+0x7c/0x110 [ 1108.760036][T22007] do_futex+0x1e3/0x350 [ 1108.760051][T22007] ? __pfx_do_futex+0x10/0x10 [ 1108.760068][T22007] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1108.760089][T22007] __x64_sys_futex+0x1e0/0x4c0 [ 1108.760107][T22007] ? __pfx___x64_sys_futex+0x10/0x10 [ 1108.760123][T22007] ? __pfx___do_sys_prctl+0x10/0x10 [ 1108.760143][T22007] do_syscall_64+0xcd/0xf80 [ 1108.760156][T22007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.760170][T22007] RIP: 0033:0x7f1a9558f7c9 [ 1108.760183][T22007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.760196][T22007] RSP: 002b:00007f1a9649f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1108.760210][T22007] RAX: ffffffffffffffda RBX: 00007f1a957e6098 RCX: 00007f1a9558f7c9 [ 1108.760226][T22007] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1a957e609c [ 1108.760235][T22007] RBP: 00007f1a957e6090 R08: 00007f1a964c1000 R09: 0000000000000000 [ 1108.760244][T22007] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1108.760253][T22007] R13: 00007f1a957e6128 R14: 00007ffe9831b630 R15: 00007ffe9831b718 [ 1108.760272][T22007] [ 1109.213312][T22017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3168'. [ 1109.282218][T22019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3170'. [ 1109.308645][T22019] bridge_slave_1: left allmulticast mode [ 1109.324169][T22019] bridge_slave_1: left promiscuous mode [ 1109.337959][T22019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.447472][T22019] bridge_slave_0: left allmulticast mode [ 1109.514690][T22019] bridge_slave_0: left promiscuous mode [ 1109.573127][T22019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.918639][T22032] HfR: entered promiscuous mode [ 1109.954112][T22036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3172'. [ 1110.087501][T22036] HfR: left promiscuous mode [ 1110.954992][T22058] ovs_: entered promiscuous mode [ 1111.637825][T22077] bridge0: port 3(team0) entered blocking state [ 1111.667138][T22077] bridge0: port 3(team0) entered disabled state [ 1111.673552][T22077] team0: entered allmulticast mode [ 1111.723510][T22077] team_slave_0: entered allmulticast mode [ 1111.740328][T22074] netlink: 'syz.4.3180': attribute type 3 has an invalid length. [ 1111.755756][T22077] team_slave_1: entered allmulticast mode [ 1111.772197][T22077] team0: entered promiscuous mode [ 1111.801385][T22077] team_slave_0: entered promiscuous mode [ 1111.815994][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 1111.835394][T22077] team_slave_1: entered promiscuous mode [ 1111.857437][T22077] bridge0: port 3(team0) entered blocking state [ 1111.863768][T22077] bridge0: port 3(team0) entered forwarding state [ 1112.239909][T22090] FAULT_INJECTION: forcing a failure. [ 1112.239909][T22090] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.447538][T22090] CPU: 0 UID: 0 PID: 22090 Comm: syz.2.3183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.447563][T22090] Tainted: [L]=SOFTLOCKUP [ 1112.447568][T22090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1112.447577][T22090] Call Trace: [ 1112.447583][T22090] [ 1112.447589][T22090] dump_stack_lvl+0x16c/0x1f0 [ 1112.447615][T22090] should_fail_ex+0x512/0x640 [ 1112.447631][T22090] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1112.447650][T22090] should_failslab+0xc2/0x120 [ 1112.447671][T22090] kmem_cache_alloc_noprof+0x83/0x770 [ 1112.447688][T22090] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1112.447706][T22090] ? acpi_ps_alloc_op+0x29d/0x360 [ 1112.447727][T22090] ? acpi_ps_alloc_op+0x29d/0x360 [ 1112.447742][T22090] acpi_ps_alloc_op+0x29d/0x360 [ 1112.447758][T22090] ? acpi_ut_status_exit+0x103/0x1c0 [ 1112.447776][T22090] acpi_ps_create_op+0x4bd/0xd30 [ 1112.447795][T22090] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 1112.447812][T22090] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 1112.447829][T22090] ? acpi_ut_value_exit+0xff/0x180 [ 1112.447850][T22090] acpi_ps_parse_loop+0xf06/0x2470 [ 1112.447869][T22090] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 1112.447892][T22090] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1112.447908][T22090] ? acpi_ut_status_exit+0x103/0x1c0 [ 1112.447927][T22090] ? acpi_ds_call_control_method+0x435/0xab0 [ 1112.447944][T22090] acpi_ps_parse_aml+0x817/0x1170 [ 1112.447965][T22090] acpi_ps_execute_method+0x5c4/0xe90 [ 1112.447987][T22090] acpi_ns_evaluate+0x98c/0x16d0 [ 1112.448011][T22090] acpi_evaluate_object+0x4ca/0xdf0 [ 1112.448026][T22090] ? ksys_read+0x12a/0x250 [ 1112.448056][T22090] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1112.448075][T22090] ? __pfx___might_resched+0x10/0x10 [ 1112.448099][T22090] acpi_evaluate_integer+0xdd/0x230 [ 1112.448121][T22090] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1112.448150][T22090] ? __pfx_status_show+0x10/0x10 [ 1112.448164][T22090] status_show+0xa0/0x120 [ 1112.448179][T22090] ? __pfx_status_show+0x10/0x10 [ 1112.448198][T22090] dev_attr_show+0x56/0xe0 [ 1112.448218][T22090] ? __pfx_dev_attr_show+0x10/0x10 [ 1112.448235][T22090] sysfs_kf_seq_show+0x216/0x3e0 [ 1112.448253][T22090] seq_read_iter+0x50e/0x12d0 [ 1112.448280][T22090] kernfs_fop_read_iter+0x46c/0x610 [ 1112.448301][T22090] ? rw_verify_area+0xcf/0x6c0 [ 1112.448319][T22090] vfs_read+0x8bf/0xcf0 [ 1112.448342][T22090] ? __pfx_vfs_read+0x10/0x10 [ 1112.448373][T22090] ksys_read+0x12a/0x250 [ 1112.448391][T22090] ? __pfx_ksys_read+0x10/0x10 [ 1112.448415][T22090] do_syscall_64+0xcd/0xf80 [ 1112.448430][T22090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.448445][T22090] RIP: 0033:0x7f1a9558f7c9 [ 1112.448463][T22090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.448478][T22090] RSP: 002b:00007f1a9647e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1112.448492][T22090] RAX: ffffffffffffffda RBX: 00007f1a957e6180 RCX: 00007f1a9558f7c9 [ 1112.448502][T22090] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 1112.448511][T22090] RBP: 00007f1a95613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1112.448520][T22090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.448529][T22090] R13: 00007f1a957e6218 R14: 00007f1a957e6180 R15: 00007ffe9831b718 [ 1112.448549][T22090] syzkaller syzkaller login: [ 1112.448575][T22090] ACPI Error: [ 1113.145277][T22101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3186'. [ 1113.178042][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.188128][T22101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.216445][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.258098][T22101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.984150][T22090] Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 1114.182013][T22090] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 1116.238352][T22163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1116.399594][T22163] input: f¬ as /devices/virtual/input/input39 [ 1116.410193][T22167] Unable to find swap-space signature [ 1116.885166][T22183] FAULT_INJECTION: forcing a failure. [ 1116.885166][T22183] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.929686][T22183] CPU: 0 UID: 0 PID: 22183 Comm: syz.2.3206 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.929713][T22183] Tainted: [L]=SOFTLOCKUP [ 1116.929718][T22183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.929728][T22183] Call Trace: [ 1116.929733][T22183] [ 1116.929739][T22183] dump_stack_lvl+0x16c/0x1f0 [ 1116.929768][T22183] should_fail_ex+0x512/0x640 [ 1116.929785][T22183] ? fs_reclaim_acquire+0xae/0x150 [ 1116.929810][T22183] should_failslab+0xc2/0x120 [ 1116.929832][T22183] __kmalloc_noprof+0xeb/0x910 [ 1116.929847][T22183] ? mempool_init_node+0x11b/0x6e0 [ 1116.929865][T22183] ? mempool_init_node+0x2f7/0x6e0 [ 1116.929894][T22183] ? __pfx_mempool_kmalloc+0x10/0x10 [ 1116.929911][T22183] ? mempool_init_node+0x2f7/0x6e0 [ 1116.929929][T22183] ? __pfx_mempool_kmalloc+0x10/0x10 [ 1116.929945][T22183] mempool_init_node+0x2f7/0x6e0 [ 1116.929968][T22183] ? __pfx_mempool_kmalloc+0x10/0x10 [ 1116.929984][T22183] ? __pfx_mempool_kfree+0x10/0x10 [ 1116.930001][T22183] mempool_init_noprof+0x3a/0x50 [ 1116.930025][T22183] do_fanotify_mark+0x2ebd/0x3a30 [ 1116.930052][T22183] ? __pfx_do_fanotify_mark+0x10/0x10 [ 1116.930071][T22183] ? __x64_sys_futex+0x1e9/0x4c0 [ 1116.930091][T22183] ? xfd_validate_state+0x61/0x180 [ 1116.930103][T22183] ? __pfx_ksys_write+0x10/0x10 [ 1116.930125][T22183] __x64_sys_fanotify_mark+0xbd/0x160 [ 1116.930143][T22183] ? do_syscall_64+0x91/0xf80 [ 1116.930156][T22183] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.930176][T22183] do_syscall_64+0xcd/0xf80 [ 1116.930190][T22183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.930204][T22183] RIP: 0033:0x7f1a9558f7c9 [ 1116.930217][T22183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.930230][T22183] RSP: 002b:00007f1a964c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 1116.930244][T22183] RAX: ffffffffffffffda RBX: 00007f1a957e5fa0 RCX: 00007f1a9558f7c9 [ 1116.930254][T22183] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 1116.930263][T22183] RBP: 00007f1a95613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1116.930271][T22183] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1116.930279][T22183] R13: 00007f1a957e6038 R14: 00007f1a957e5fa0 R15: 00007ffe9831b718 [ 1116.930298][T22183] [ 1117.198594][T22187] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1117.205394][T22187] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1117.250747][T22175] FAULT_INJECTION: forcing a failure. [ 1117.250747][T22175] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1117.263861][T22175] CPU: 0 UID: 0 PID: 22175 Comm: syz.4.3202 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.263886][T22175] Tainted: [L]=SOFTLOCKUP [ 1117.263892][T22175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.263901][T22175] Call Trace: [ 1117.263906][T22175] [ 1117.263912][T22175] dump_stack_lvl+0x16c/0x1f0 [ 1117.263939][T22175] should_fail_ex+0x512/0x640 [ 1117.263958][T22175] get_futex_key+0x1085/0x15f0 [ 1117.263976][T22175] ? __pfx_get_futex_key+0x10/0x10 [ 1117.263997][T22175] futex_wake+0xea/0x530 [ 1117.264021][T22175] ? __pfx_futex_wake+0x10/0x10 [ 1117.264049][T22175] do_futex+0x1e3/0x350 [ 1117.264065][T22175] ? __pfx_do_futex+0x10/0x10 [ 1117.264079][T22175] ? __might_fault+0xe3/0x190 [ 1117.264100][T22175] mm_release+0x24e/0x300 [ 1117.264119][T22175] do_exit+0x69e/0x2bd0 [ 1117.264136][T22175] ? __pfx_do_exit+0x10/0x10 [ 1117.264149][T22175] ? do_raw_spin_lock+0x12c/0x2b0 [ 1117.264164][T22175] ? find_held_lock+0x2b/0x80 [ 1117.264184][T22175] do_group_exit+0xd3/0x2a0 [ 1117.264199][T22175] get_signal+0x2671/0x26d0 [ 1117.264221][T22175] ? __pfx_do_recvmmsg+0x10/0x10 [ 1117.264239][T22175] ? __lock_acquire+0x436/0x2890 [ 1117.264253][T22175] ? __pfx_get_signal+0x10/0x10 [ 1117.264272][T22175] ? do_futex+0x122/0x350 [ 1117.264289][T22175] arch_do_signal_or_restart+0x8f/0x7a0 [ 1117.264310][T22175] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1117.264335][T22175] ? __pfx___x64_sys_futex+0x10/0x10 [ 1117.264353][T22175] exit_to_user_mode_loop+0x8c/0x540 [ 1117.264372][T22175] do_syscall_64+0x4ee/0xf80 [ 1117.264387][T22175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.264401][T22175] RIP: 0033:0x7fa44ed8f7c9 [ 1117.264413][T22175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.264426][T22175] RSP: 002b:00007fa44fb9e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1117.264440][T22175] RAX: fffffffffffffe00 RBX: 00007fa44efe6188 RCX: 00007fa44ed8f7c9 [ 1117.264448][T22175] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa44efe6188 [ 1117.264457][T22175] RBP: 00007fa44efe6180 R08: 0000000000000000 R09: 0000000000000000 [ 1117.264465][T22175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.264473][T22175] R13: 00007fa44efe6218 R14: 00007fff07b881f0 R15: 00007fff07b882d8 [ 1117.264492][T22175] [ 1117.766013][T22198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1117.772222][T22198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1117.779720][T22198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1117.790037][T22198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1117.910307][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.916961][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.034533][T22205] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1118.777673][T22225] FAULT_INJECTION: forcing a failure. [ 1118.777673][T22225] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.851191][T22225] CPU: 0 UID: 0 PID: 22225 Comm: syz.3.3216 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.851216][T22225] Tainted: [L]=SOFTLOCKUP [ 1118.851222][T22225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1118.851231][T22225] Call Trace: [ 1118.851237][T22225] [ 1118.851243][T22225] dump_stack_lvl+0x16c/0x1f0 [ 1118.851270][T22225] should_fail_ex+0x512/0x640 [ 1118.851287][T22225] ? fs_reclaim_acquire+0xae/0x150 [ 1118.851311][T22225] should_failslab+0xc2/0x120 [ 1118.851332][T22225] __kmalloc_cache_noprof+0x80/0x800 [ 1118.851347][T22225] ? lockdep_init_map_type+0x5c/0x270 [ 1118.851361][T22225] ? tomoyo_open_control+0x415/0xa30 [ 1118.851374][T22225] ? lockdep_init_map_type+0x5c/0x270 [ 1118.851389][T22225] ? tomoyo_open_control+0x415/0xa30 [ 1118.851401][T22225] tomoyo_open_control+0x415/0xa30 [ 1118.851416][T22225] do_dentry_open+0x748/0x1590 [ 1118.851435][T22225] ? __pfx_tomoyo_open+0x10/0x10 [ 1118.851458][T22225] vfs_open+0x82/0x3f0 [ 1118.851475][T22225] path_openat+0x2078/0x3140 [ 1118.851501][T22225] ? __pfx_path_openat+0x10/0x10 [ 1118.851527][T22225] do_filp_open+0x20b/0x470 [ 1118.851546][T22225] ? __pfx_do_filp_open+0x10/0x10 [ 1118.851578][T22225] ? alloc_fd+0x471/0x7d0 [ 1118.851603][T22225] do_sys_openat2+0x121/0x290 [ 1118.851618][T22225] ? __pfx_do_sys_openat2+0x10/0x10 [ 1118.851640][T22225] __x64_sys_openat+0x174/0x210 [ 1118.851655][T22225] ? __pfx___x64_sys_openat+0x10/0x10 [ 1118.851677][T22225] do_syscall_64+0xcd/0xf80 [ 1118.851700][T22225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.851715][T22225] RIP: 0033:0x7f2a2198f7c9 [ 1118.851728][T22225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.851743][T22225] RSP: 002b:00007f2a22761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1118.851757][T22225] RAX: ffffffffffffffda RBX: 00007f2a21be5fa0 RCX: 00007f2a2198f7c9 [ 1118.851767][T22225] RDX: 0000000000062402 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1118.851775][T22225] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1118.851784][T22225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.851792][T22225] R13: 00007f2a21be6038 R14: 00007f2a21be5fa0 R15: 00007ffe0ceee168 [ 1118.851811][T22225] [ 1119.825209][T21452] Bluetooth: hci1: command 0x0c1a tx timeout [ 1119.832839][T21452] Bluetooth: hci3: command 0x0406 tx timeout [ 1119.841431][T16448] Bluetooth: hci0: command 0x0406 tx timeout [ 1119.847544][T21452] Bluetooth: hci2: command 0x0406 tx timeout [ 1120.063873][T16868] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1120.157594][T22254] FAULT_INJECTION: forcing a failure. [ 1120.157594][T22254] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.228351][T22254] CPU: 0 UID: 0 PID: 22254 Comm: syz.4.3223 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.228375][T22254] Tainted: [L]=SOFTLOCKUP [ 1120.228381][T22254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.228390][T22254] Call Trace: [ 1120.228396][T22254] [ 1120.228402][T22254] dump_stack_lvl+0x16c/0x1f0 [ 1120.228429][T22254] should_fail_ex+0x512/0x640 [ 1120.228446][T22254] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1120.228465][T22254] should_failslab+0xc2/0x120 [ 1120.228485][T22254] kmem_cache_alloc_noprof+0x83/0x770 [ 1120.228503][T22254] ? __proc_create+0x2c8/0x8d0 [ 1120.228525][T22254] ? __proc_create+0x2c8/0x8d0 [ 1120.228541][T22254] __proc_create+0x2c8/0x8d0 [ 1120.228559][T22254] ? __pfx___proc_create+0x10/0x10 [ 1120.228578][T22254] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1120.228603][T22254] proc_create_reg+0x7d/0x180 [ 1120.228623][T22254] proc_create_net_data+0x8e/0x1c0 [ 1120.228642][T22254] ? __pfx_proc_create_net_data+0x10/0x10 [ 1120.228660][T22254] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1120.228687][T22254] ? ops_init+0x77/0x5f0 [ 1120.228709][T22254] ? __pfx_proto_init_net+0x10/0x10 [ 1120.228724][T22254] proto_init_net+0x53/0x70 [ 1120.228738][T22254] ops_init+0x1e2/0x5f0 [ 1120.228759][T22254] setup_net+0x11d/0x3a0 [ 1120.228778][T22254] ? __pfx_setup_net+0x10/0x10 [ 1120.228795][T22254] ? lockdep_init_map_type+0x5c/0x270 [ 1120.228810][T22254] ? mutex_init_lockep+0x110/0x150 [ 1120.228826][T22254] copy_net_ns+0x351/0x7c0 [ 1120.228840][T22254] create_new_namespaces+0x3ea/0xab0 [ 1120.228863][T22254] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1120.228883][T22254] ksys_unshare+0x45b/0xa40 [ 1120.228896][T22254] ? __pfx_ksys_unshare+0x10/0x10 [ 1120.228917][T22254] ? xfd_validate_state+0x61/0x180 [ 1120.228935][T22254] __x64_sys_unshare+0x31/0x40 [ 1120.228947][T22254] do_syscall_64+0xcd/0xf80 [ 1120.228962][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.228975][T22254] RIP: 0033:0x7fa44ed8f7c9 [ 1120.228988][T22254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.229001][T22254] RSP: 002b:00007fa44fbbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1120.229015][T22254] RAX: ffffffffffffffda RBX: 00007fa44efe6090 RCX: 00007fa44ed8f7c9 [ 1120.229024][T22254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1120.229033][T22254] RBP: 00007fa44ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1120.229043][T22254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.229051][T22254] R13: 00007fa44efe6128 R14: 00007fa44efe6090 R15: 00007fff07b882d8 [ 1120.229071][T22254] [ 1121.085480][T22267] Invalid ELF header magic: != ELF [ 1122.856755][ T5841] Process accounting resumed [ 1123.559818][T22305] usb usb15: usbfs: process 22305 (syz.2.3233) did not claim interface 0 before use [ 1123.569630][T22302] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1126.440978][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 1126.696382][T22340] Invalid ELF header magic: != ELF [ 1127.450807][T22357] usb usb15: usbfs: process 22357 (syz.2.3245) did not claim interface 0 before use [ 1132.036502][T22407] phram: not enough arguments [ 1132.071442][T22407] phram: not enough arguments [ 1132.337999][T22421] FAULT_INJECTION: forcing a failure. [ 1132.337999][T22421] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.380627][T22421] CPU: 0 UID: 0 PID: 22421 Comm: syz.3.3259 Tainted: G L syzkaller #0 PREEMPT(full) [ 1132.380652][T22421] Tainted: [L]=SOFTLOCKUP [ 1132.380658][T22421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1132.380666][T22421] Call Trace: [ 1132.380672][T22421] [ 1132.380679][T22421] dump_stack_lvl+0x16c/0x1f0 [ 1132.380706][T22421] should_fail_ex+0x512/0x640 [ 1132.380722][T22421] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1132.380742][T22421] should_failslab+0xc2/0x120 [ 1132.380764][T22421] kmem_cache_alloc_noprof+0x83/0x770 [ 1132.380780][T22421] ? __kernfs_new_node+0xd2/0x9b0 [ 1132.380800][T22421] ? __kernfs_new_node+0xd2/0x9b0 [ 1132.380814][T22421] __kernfs_new_node+0xd2/0x9b0 [ 1132.380832][T22421] ? __pfx___kernfs_new_node+0x10/0x10 [ 1132.380853][T22421] ? find_held_lock+0x2b/0x80 [ 1132.380870][T22421] ? kernfs_root+0xee/0x2a0 [ 1132.380889][T22421] kernfs_new_node+0x13c/0x1e0 [ 1132.380910][T22421] __kernfs_create_file+0x53/0x350 [ 1132.380932][T22421] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1132.380952][T22421] sysfs_merge_group+0x1aa/0x340 [ 1132.380969][T22421] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1132.380996][T22421] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1132.381018][T22421] ? bus_to_subsys+0x131/0x160 [ 1132.381035][T22421] dpm_sysfs_add+0x237/0x280 [ 1132.381056][T22421] device_add+0x9cc/0x1980 [ 1132.381077][T22421] ? __pfx_device_add+0x10/0x10 [ 1132.381104][T22421] nfc_register_device+0x41/0x410 [ 1132.381126][T22421] nci_register_device+0x7f1/0xb80 [ 1132.381144][T22421] ? __pfx_nci_register_device+0x10/0x10 [ 1132.381164][T22421] ? lockdep_init_map_type+0x5c/0x270 [ 1132.381181][T22421] virtual_ncidev_open+0x141/0x220 [ 1132.381196][T22421] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1132.381209][T22421] misc_open+0x26d/0x450 [ 1132.381226][T22421] ? __pfx_misc_open+0x10/0x10 [ 1132.381241][T22421] chrdev_open+0x234/0x6a0 [ 1132.381260][T22421] ? __pfx_apparmor_file_open+0x10/0x10 [ 1132.381276][T22421] ? __pfx_chrdev_open+0x10/0x10 [ 1132.381297][T22421] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1132.381322][T22421] do_dentry_open+0x748/0x1590 [ 1132.381340][T22421] ? __pfx_chrdev_open+0x10/0x10 [ 1132.381365][T22421] vfs_open+0x82/0x3f0 [ 1132.381382][T22421] path_openat+0x2078/0x3140 [ 1132.381407][T22421] ? __pfx_path_openat+0x10/0x10 [ 1132.381434][T22421] do_filp_open+0x20b/0x470 [ 1132.381454][T22421] ? __pfx_do_filp_open+0x10/0x10 [ 1132.381487][T22421] ? alloc_fd+0x471/0x7d0 [ 1132.381511][T22421] do_sys_openat2+0x121/0x290 [ 1132.381526][T22421] ? __pfx_do_sys_openat2+0x10/0x10 [ 1132.381541][T22421] ? find_held_lock+0x2b/0x80 [ 1132.381563][T22421] __x64_sys_openat+0x174/0x210 [ 1132.381578][T22421] ? __pfx___x64_sys_openat+0x10/0x10 [ 1132.381601][T22421] do_syscall_64+0xcd/0xf80 [ 1132.381616][T22421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.381630][T22421] RIP: 0033:0x7f2a2198f7c9 [ 1132.381642][T22421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.381656][T22421] RSP: 002b:00007f2a22761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1132.381671][T22421] RAX: ffffffffffffffda RBX: 00007f2a21be5fa0 RCX: 00007f2a2198f7c9 [ 1132.381680][T22421] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1132.381690][T22421] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1132.381698][T22421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.381707][T22421] R13: 00007f2a21be6038 R14: 00007f2a21be5fa0 R15: 00007ffe0ceee168 [ 1132.381726][T22421] [ 1133.378420][T22419] FAULT_INJECTION: forcing a failure. [ 1133.378420][T22419] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.423145][T22419] CPU: 0 UID: 0 PID: 22419 Comm: syz.0.3258 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.423171][T22419] Tainted: [L]=SOFTLOCKUP [ 1133.423176][T22419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.423185][T22419] Call Trace: [ 1133.423191][T22419] [ 1133.423197][T22419] dump_stack_lvl+0x16c/0x1f0 [ 1133.423223][T22419] should_fail_ex+0x512/0x640 [ 1133.423240][T22419] ? __kmalloc_noprof+0xca/0x910 [ 1133.423256][T22419] should_failslab+0xc2/0x120 [ 1133.423278][T22419] __kmalloc_noprof+0xeb/0x910 [ 1133.423293][T22419] ? lsm_blob_alloc+0x68/0x90 [ 1133.423316][T22419] ? lsm_blob_alloc+0x68/0x90 [ 1133.423334][T22419] lsm_blob_alloc+0x68/0x90 [ 1133.423353][T22419] security_sk_alloc+0x2f/0x270 [ 1133.423368][T22419] sk_prot_alloc+0x1c7/0x2a0 [ 1133.423383][T22419] sk_alloc+0x36/0xe30 [ 1133.423401][T22419] __netlink_create+0x5e/0x2c0 [ 1133.423417][T22419] ? __wake_up+0x3f/0x60 [ 1133.423437][T22419] netlink_create+0x39e/0x620 [ 1133.423454][T22419] ? __pfx_genl_bind+0x10/0x10 [ 1133.423466][T22419] ? __pfx_genl_unbind+0x10/0x10 [ 1133.423477][T22419] ? __pfx_genl_release+0x10/0x10 [ 1133.423492][T22419] __sock_create+0x339/0x8a0 [ 1133.423510][T22419] __sys_socket+0x14d/0x260 [ 1133.423524][T22419] ? __pfx___sys_socket+0x10/0x10 [ 1133.423539][T22419] ? do_user_addr_fault+0x843/0x1370 [ 1133.423559][T22419] __x64_sys_socket+0x72/0xb0 [ 1133.423572][T22419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1133.423592][T22419] do_syscall_64+0xcd/0xf80 [ 1133.423606][T22419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.423620][T22419] RIP: 0033:0x7f21c0d916e7 [ 1133.423632][T22419] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.423647][T22419] RSP: 002b:00007f21c1cc3fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1133.423661][T22419] RAX: ffffffffffffffda RBX: 00007f21c0fe5fa0 RCX: 00007f21c0d916e7 [ 1133.423671][T22419] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1133.423680][T22419] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1133.423688][T22419] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 1133.423696][T22419] R13: 00007f21c0fe6038 R14: 00007f21c0fe5fa0 R15: 00007ffd12c45748 [ 1133.423714][T22419] [ 1134.441317][ T30] audit: type=1800 audit(4294969976.131:30): pid=22455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3265" name="lu_gp_id" dev="configfs" ino=107601 res=0 errno=0 [ 1135.523926][T22473] random: crng reseeded on system resumption [ 1135.879382][T22488] FAULT_INJECTION: forcing a failure. [ 1135.879382][T22488] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.952780][T22488] CPU: 0 UID: 0 PID: 22488 Comm: syz.3.3273 Tainted: G L syzkaller #0 PREEMPT(full) [ 1135.952805][T22488] Tainted: [L]=SOFTLOCKUP [ 1135.952811][T22488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1135.952820][T22488] Call Trace: [ 1135.952826][T22488] [ 1135.952833][T22488] dump_stack_lvl+0x16c/0x1f0 [ 1135.952864][T22488] should_fail_ex+0x512/0x640 [ 1135.952882][T22488] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1135.952901][T22488] should_failslab+0xc2/0x120 [ 1135.952922][T22488] __kmalloc_cache_noprof+0x80/0x800 [ 1135.952938][T22488] ? alloc_fdtable+0xbd/0x2d0 [ 1135.952959][T22488] ? alloc_fdtable+0xbd/0x2d0 [ 1135.952976][T22488] alloc_fdtable+0xbd/0x2d0 [ 1135.952995][T22488] dup_fd+0x803/0xc70 [ 1135.953019][T22488] __do_sys_close_range+0x4ca/0x730 [ 1135.953041][T22488] ? __pfx___do_sys_close_range+0x10/0x10 [ 1135.953067][T22488] do_syscall_64+0xcd/0xf80 [ 1135.953081][T22488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.953095][T22488] RIP: 0033:0x7f2a2198f7c9 [ 1135.953108][T22488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.953125][T22488] RSP: 002b:00007f2a22740038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1135.953139][T22488] RAX: ffffffffffffffda RBX: 00007f2a21be6090 RCX: 00007f2a2198f7c9 [ 1135.953148][T22488] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000003 [ 1135.953157][T22488] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1135.953165][T22488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.953174][T22488] R13: 00007f2a21be6128 R14: 00007f2a21be6090 R15: 00007ffe0ceee168 [ 1135.953193][T22488] [ 1136.777643][T22499] can0: slcan on ttyS2. [ 1136.846436][T22499] can0 (unregistered): slcan off ttyS2. [ 1137.132448][T22511] __vm_enough_memory: pid: 22511, comm: syz.2.3277, bytes: 4398046511104 not enough memory for the allocation [ 1137.529165][T22521] nfsd: Unknown parameter 'MAC80211_HWSIM' [ 1138.198790][T20565] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1325 with max blocks 3 with error 117 [ 1138.257213][T20565] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1138.257213][T20565] [ 1138.651231][T22552] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1140.771125][T22581] FAULT_INJECTION: forcing a failure. [ 1140.771125][T22581] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1140.784440][T22581] CPU: 0 UID: 0 PID: 22581 Comm: syz.0.3286 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.784464][T22581] Tainted: [L]=SOFTLOCKUP [ 1140.784469][T22581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1140.784478][T22581] Call Trace: [ 1140.784483][T22581] [ 1140.784489][T22581] dump_stack_lvl+0x16c/0x1f0 [ 1140.784514][T22581] should_fail_ex+0x512/0x640 [ 1140.784533][T22581] get_futex_key+0x1d0/0x15f0 [ 1140.784550][T22581] ? __pfx_get_futex_key+0x10/0x10 [ 1140.784579][T22581] futex_wait_setup+0x9d/0x570 [ 1140.784605][T22581] __futex_wait+0x193/0x2f0 [ 1140.784624][T22581] ? __pfx___futex_wait+0x10/0x10 [ 1140.784648][T22581] ? __pfx_futex_wake_mark+0x10/0x10 [ 1140.784668][T22581] ? futex_hash+0x2c5/0x380 [ 1140.784684][T22581] ? futex_private_hash_put+0x160/0x1b0 [ 1140.784699][T22581] futex_wait+0xe8/0x380 [ 1140.784716][T22581] ? __pfx_futex_wait+0x10/0x10 [ 1140.784745][T22581] do_futex+0x229/0x350 [ 1140.784762][T22581] ? __pfx_do_futex+0x10/0x10 [ 1140.784776][T22581] ? __fget_files+0x204/0x3c0 [ 1140.784799][T22581] __x64_sys_futex+0x1e0/0x4c0 [ 1140.784817][T22581] ? __pfx___x64_sys_futex+0x10/0x10 [ 1140.784832][T22581] ? __sys_setsockopt+0x140/0x1a0 [ 1140.784856][T22581] do_syscall_64+0xcd/0xf80 [ 1140.784870][T22581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.784891][T22581] RIP: 0033:0x7f21c0d8f7c9 [ 1140.784904][T22581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.784917][T22581] RSP: 002b:00007f21c1cc50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1140.784931][T22581] RAX: ffffffffffffffda RBX: 00007f21c0fe5fa8 RCX: 00007f21c0d8f7c9 [ 1140.784941][T22581] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f21c0fe5fa8 [ 1140.784949][T22581] RBP: 00007f21c0fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.784957][T22581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.784965][T22581] R13: 00007f21c0fe6038 R14: 00007ffd12c45660 R15: 00007ffd12c45748 [ 1140.784984][T22581] [ 1142.585133][T22618] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1142.673781][T21452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1142.686553][T21452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1142.694344][T21452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1142.702828][T21452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1142.710443][T21452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1142.814427][T16868] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1143.468389][T22624] chnl_net:caif_netlink_parms(): no params data found [ 1143.792086][T22624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.824290][T22624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.963732][T22624] bridge_slave_0: entered allmulticast mode [ 1144.177368][T22624] bridge_slave_0: entered promiscuous mode [ 1144.218621][T22624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.239739][T22624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.261614][T22624] bridge_slave_1: entered allmulticast mode [ 1144.287279][T22624] bridge_slave_1: entered promiscuous mode [ 1144.429921][T22624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.477380][T22624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.727615][T16868] Bluetooth: hci5: command tx timeout [ 1144.769736][T22624] team0: Port device team_slave_0 added [ 1144.805630][T22624] team0: Port device team_slave_1 added [ 1144.988798][T22624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.032099][T22624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.160929][T22624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.242997][T22624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.280117][T22624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.402519][T22624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.554105][T22624] hsr_slave_0: entered promiscuous mode [ 1145.589498][T22624] hsr_slave_1: entered promiscuous mode [ 1145.609312][T22624] debugfs: 'hsr0' already exists in 'hsr' [ 1145.646404][T22624] Cannot create hsr debugfs directory [ 1145.836552][T16868] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1145.900011][T16868] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1146.186335][T22696] random: crng reseeded on system resumption [ 1146.560171][T22696] Restarting kernel threads ... [ 1146.578506][T22624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1146.590694][T22696] Done restarting kernel threads. [ 1146.718601][T22624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1146.766311][T22624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1146.796922][T16868] Bluetooth: hci5: command tx timeout [ 1146.928263][T22624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1147.586439][T22624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.723630][T22624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.933812][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.941052][ T9923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.021984][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.029145][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.872803][T16868] Bluetooth: hci5: command tx timeout [ 1148.980262][T22624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.500919][T22789] FAULT_INJECTION: forcing a failure. [ 1149.500919][T22789] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.624565][T22789] CPU: 0 UID: 0 PID: 22789 Comm: syz.3.3322 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.624590][T22789] Tainted: [L]=SOFTLOCKUP [ 1149.624595][T22789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1149.624604][T22789] Call Trace: [ 1149.624610][T22789] [ 1149.624616][T22789] dump_stack_lvl+0x16c/0x1f0 [ 1149.624643][T22789] should_fail_ex+0x512/0x640 [ 1149.624660][T22789] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1149.624680][T22789] should_failslab+0xc2/0x120 [ 1149.624700][T22789] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1149.624718][T22789] ? alloc_inode+0x64/0x240 [ 1149.624737][T22789] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1149.624749][T22789] ? alloc_inode+0x64/0x240 [ 1149.624763][T22789] alloc_inode+0x64/0x240 [ 1149.624778][T22789] new_inode+0x22/0x1c0 [ 1149.624794][T22789] debugfs_create_symlink+0xd1/0x260 [ 1149.624809][T22789] ref_tracker_dir_symlink+0x255/0x3c0 [ 1149.624828][T22789] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 1149.624845][T22789] ? __lock_acquire+0x436/0x2890 [ 1149.624874][T22789] ? lockdep_hardirqs_on+0x7c/0x110 [ 1149.624895][T22789] ? crng_make_state+0x48e/0x6c0 [ 1149.624915][T22789] ? __pfx_net_ns_net_init+0x10/0x10 [ 1149.624935][T22789] net_ns_net_init+0xd2/0x120 [ 1149.624958][T22789] ops_init+0x1e2/0x5f0 [ 1149.624979][T22789] setup_net+0x11d/0x3a0 [ 1149.624999][T22789] ? __pfx_setup_net+0x10/0x10 [ 1149.625017][T22789] ? lockdep_init_map_type+0x5c/0x270 [ 1149.625031][T22789] ? mutex_init_lockep+0x110/0x150 [ 1149.625049][T22789] copy_net_ns+0x351/0x7c0 [ 1149.625064][T22789] create_new_namespaces+0x3ea/0xab0 [ 1149.625095][T22789] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1149.625116][T22789] ksys_unshare+0x45b/0xa40 [ 1149.625130][T22789] ? __pfx_ksys_unshare+0x10/0x10 [ 1149.625153][T22789] ? xfd_validate_state+0x61/0x180 [ 1149.625172][T22789] __x64_sys_unshare+0x31/0x40 [ 1149.625184][T22789] do_syscall_64+0xcd/0xf80 [ 1149.625198][T22789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.625212][T22789] RIP: 0033:0x7f2a2198f7c9 [ 1149.625224][T22789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.625238][T22789] RSP: 002b:00007f2a22740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1149.625252][T22789] RAX: ffffffffffffffda RBX: 00007f2a21be6090 RCX: 00007f2a2198f7c9 [ 1149.625261][T22789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1149.625269][T22789] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1149.625277][T22789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.625286][T22789] R13: 00007f2a21be6128 R14: 00007f2a21be6090 R15: 00007ffe0ceee168 [ 1149.625306][T22789] [ 1149.625333][T22789] debugfs: out of free dentries, can not create symlink 'netns-73b-4026533674-notrefcnt' [ 1150.803554][T22624] veth0_vlan: entered promiscuous mode [ 1150.847143][T22624] veth1_vlan: entered promiscuous mode [ 1150.936224][T16868] Bluetooth: hci5: command tx timeout [ 1150.951642][T22624] veth0_macvtap: entered promiscuous mode [ 1151.005311][T22624] veth1_macvtap: entered promiscuous mode [ 1151.085391][T22624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.131831][T22624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.177104][ T1004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.208323][ T1004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.254017][ T1004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.336671][ T1004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.848230][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.891876][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.118858][ T8053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.156091][ T8053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.041255][T22821] netlink: zone id is out of range [ 1153.046383][T22821] netlink: zone id is out of range [ 1153.217049][T22817] nvme_fabrics: missing parameter 'transport=%s' [ 1153.281123][T22817] nvme_fabrics: missing parameter 'nqn=%s' [ 1153.295029][T22821] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1155.820540][T22872] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.299194][T16868] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1157.537816][T22881] ecryptfs_miscdev_write: Invalid packet size [447] [ 1157.565027][T22885] vivid-009: ================= START STATUS ================= [ 1157.672423][T22885] vivid-009: Radio HW Seek Mode: Bounded [ 1157.722227][T22885] vivid-009: Radio Programmable HW Seek: false [ 1157.803640][T22885] vivid-009: RDS Rx I/O Mode: Block I/O [ 1157.926606][T22885] vivid-009: Generate RBDS Instead of RDS: false [ 1157.977127][T22885] vivid-009: RDS Reception: true [ 1158.010836][T22885] vivid-009: RDS Program Type: 0 inactive [ 1158.065517][T22885] vivid-009: RDS PS Name: inactive [ 1158.089692][T22885] vivid-009: RDS Radio Text: inactive [ 1158.120972][T22885] vivid-009: RDS Traffic Announcement: false inactive [ 1158.161471][T22885] vivid-009: RDS Traffic Program: false inactive [ 1158.192574][T22885] vivid-009: RDS Music: false inactive [ 1158.217684][T22885] vivid-009: ================== END STATUS ================== [ 1158.602262][T22916] futex_wake_op: syz.5.3349 tries to shift op by -2048; fix this program [ 1158.629629][T22916] futex_wake_op: syz.5.3349 tries to shift op by -2048; fix this program [ 1158.661871][T22916] 0x000000000001-0x000000020000 : "" [ 1158.694436][T22916] ftl_cs: FTL header corrupt! [ 1158.807387][T22911] hub 3-0:1.0: USB hub found [ 1158.827566][T22914] FAULT_INJECTION: forcing a failure. [ 1158.827566][T22914] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.936914][T22914] CPU: 0 UID: 0 PID: 22914 Comm: syz.3.3348 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.936939][T22914] Tainted: [L]=SOFTLOCKUP [ 1158.936944][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1158.936953][T22914] Call Trace: [ 1158.936959][T22914] [ 1158.936965][T22914] dump_stack_lvl+0x16c/0x1f0 [ 1158.936992][T22914] should_fail_ex+0x512/0x640 [ 1158.937009][T22914] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1158.937032][T22914] should_failslab+0xc2/0x120 [ 1158.937053][T22914] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1158.937073][T22914] ? ip_vs_control_net_init+0x84b/0x1d20 [ 1158.937090][T22914] ? __pfx_proc_create_net_single+0x10/0x10 [ 1158.937113][T22914] ? kmemdup_noprof+0x29/0x60 [ 1158.937128][T22914] kmemdup_noprof+0x29/0x60 [ 1158.937144][T22914] ip_vs_control_net_init+0x84b/0x1d20 [ 1158.937166][T22914] __ip_vs_init+0x217/0x520 [ 1158.937184][T22914] ? __pfx___ip_vs_init+0x10/0x10 [ 1158.937201][T22914] ops_init+0x1e2/0x5f0 [ 1158.937222][T22914] setup_net+0x11d/0x3a0 [ 1158.937241][T22914] ? __pfx_setup_net+0x10/0x10 [ 1158.937258][T22914] ? lockdep_init_map_type+0x5c/0x270 [ 1158.937273][T22914] ? mutex_init_lockep+0x110/0x150 [ 1158.937290][T22914] copy_net_ns+0x351/0x7c0 [ 1158.937304][T22914] create_new_namespaces+0x3ea/0xab0 [ 1158.937326][T22914] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1158.937346][T22914] ksys_unshare+0x45b/0xa40 [ 1158.937359][T22914] ? __pfx_ksys_unshare+0x10/0x10 [ 1158.937379][T22914] ? xfd_validate_state+0x61/0x180 [ 1158.937398][T22914] __x64_sys_unshare+0x31/0x40 [ 1158.937410][T22914] do_syscall_64+0xcd/0xf80 [ 1158.937424][T22914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.937438][T22914] RIP: 0033:0x7f2a2198f7c9 [ 1158.937450][T22914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.937463][T22914] RSP: 002b:00007f2a22761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1158.937476][T22914] RAX: ffffffffffffffda RBX: 00007f2a21be5fa0 RCX: 00007f2a2198f7c9 [ 1158.937485][T22914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1158.937494][T22914] RBP: 00007f2a21a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1158.937502][T22914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.937510][T22914] R13: 00007f2a21be6038 R14: 00007f2a21be5fa0 R15: 00007ffe0ceee168 [ 1158.937528][T22914] [ 1159.417974][T22911] hub 3-0:1.0: 1 port detected [ 1159.468967][T22911] usb usb3: authorized to connect [ 1160.001438][T22942] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1162.252021][T22987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1162.282266][T22987] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1162.309144][T22990] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1162.398342][T22987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1162.440769][T22987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1162.614536][T22987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1162.641848][T22987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1162.669583][T22987] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1162.704147][T22987] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1162.763912][T22987] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1163.084312][T22994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3362'. [ 1163.209755][T22996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3363'. [ 1164.058202][T23022] usb usb15: usbfs: process 23022 (syz.3.3367) did not claim interface 0 before use [ 1164.303494][T16868] Bluetooth: hci2: command 0x0406 tx timeout [ 1164.461640][T16868] Bluetooth: hci3: command 0x0406 tx timeout [ 1164.620996][T16868] Bluetooth: hci0: command 0x0406 tx timeout [ 1164.700958][T21452] Bluetooth: hci1: command 0x0c1a tx timeout [ 1164.707120][T16868] Bluetooth: hci5: command 0x0c1a tx timeout [ 1166.531444][T16868] Bluetooth: hci3: command 0x0406 tx timeout [ 1166.770503][T16868] Bluetooth: hci5: command 0x0c1a tx timeout [ 1166.805676][T23044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1166.837832][T23044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1166.872927][T23044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1166.897219][T23044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1166.915691][T23044] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1167.334314][T23064] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1167.383768][T23055] FAULT_INJECTION: forcing a failure. [ 1167.383768][T23055] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.441459][T23055] CPU: 0 UID: 0 PID: 23055 Comm: syz.5.3375 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.441484][T23055] Tainted: [L]=SOFTLOCKUP [ 1167.441490][T23055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.441500][T23055] Call Trace: [ 1167.441505][T23055] [ 1167.441511][T23055] dump_stack_lvl+0x16c/0x1f0 [ 1167.441537][T23055] should_fail_ex+0x512/0x640 [ 1167.441553][T23055] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1167.441572][T23055] should_failslab+0xc2/0x120 [ 1167.441593][T23055] kmem_cache_alloc_noprof+0x83/0x770 [ 1167.441609][T23055] ? unwind_get_return_address+0x59/0xa0 [ 1167.441626][T23055] ? alloc_empty_file+0x55/0x1e0 [ 1167.441644][T23055] ? alloc_empty_file+0x55/0x1e0 [ 1167.441658][T23055] alloc_empty_file+0x55/0x1e0 [ 1167.441673][T23055] path_openat+0xde/0x3140 [ 1167.441693][T23055] ? stack_trace_save+0x8e/0xc0 [ 1167.441714][T23055] ? __pfx_stack_trace_save+0x10/0x10 [ 1167.441736][T23055] ? stack_depot_save_flags+0x29/0x9b0 [ 1167.441753][T23055] ? __pfx_path_openat+0x10/0x10 [ 1167.441774][T23055] ? kasan_save_stack+0x42/0x60 [ 1167.441791][T23055] ? kasan_save_stack+0x33/0x60 [ 1167.441808][T23055] ? kasan_save_track+0x14/0x30 [ 1167.441824][T23055] ? __kasan_slab_alloc+0x89/0x90 [ 1167.441842][T23055] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1167.441857][T23055] ? getname_kernel+0x52/0x370 [ 1167.441869][T23055] ? filp_open+0x1d/0x80 [ 1167.441882][T23055] ? vfs_coredump+0x180f/0x55e0 [ 1167.441904][T23055] do_filp_open+0x20b/0x470 [ 1167.441924][T23055] ? __pfx_do_filp_open+0x10/0x10 [ 1167.441965][T23055] file_open_name+0x2a3/0x450 [ 1167.441981][T23055] ? __pfx_file_open_name+0x10/0x10 [ 1167.442000][T23055] ? getname_kernel+0x52/0x370 [ 1167.442015][T23055] ? __asan_memcpy+0x3c/0x60 [ 1167.442033][T23055] filp_open+0x4b/0x80 [ 1167.442048][T23055] vfs_coredump+0x180f/0x55e0 [ 1167.442075][T23055] ? __pfx_vfs_coredump+0x10/0x10 [ 1167.442094][T23055] ? __lock_acquire+0x436/0x2890 [ 1167.442116][T23055] ? __lock_acquire+0x436/0x2890 [ 1167.442131][T23055] ? lock_acquire+0x179/0x330 [ 1167.442147][T23055] ? lock_acquire+0x179/0x330 [ 1167.442160][T23055] ? find_held_lock+0x2b/0x80 [ 1167.442179][T23055] ? is_bpf_text_address+0x8a/0x1a0 [ 1167.442197][T23055] ? bpf_ksym_find+0x124/0x1c0 [ 1167.442216][T23055] ? arch_stack_walk+0xa6/0x100 [ 1167.442239][T23055] ? stack_trace_save+0x8e/0xc0 [ 1167.442260][T23055] ? __pfx_stack_trace_save+0x10/0x10 [ 1167.442280][T23055] ? stack_depot_save_flags+0x29/0x9b0 [ 1167.442297][T23055] ? __lock_acquire+0x436/0x2890 [ 1167.442311][T23055] ? kasan_save_stack+0x42/0x60 [ 1167.442356][T23055] ? proc_coredump_connector+0x2d1/0x4f0 [ 1167.442374][T23055] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1167.442394][T23055] ? rcu_is_watching+0x12/0xc0 [ 1167.442415][T23055] get_signal+0x22e1/0x26d0 [ 1167.442441][T23055] ? __pfx_get_signal+0x10/0x10 [ 1167.442458][T23055] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1167.442484][T23055] ? force_sig_info_to_task+0x39f/0x660 [ 1167.442504][T23055] arch_do_signal_or_restart+0x8f/0x7a0 [ 1167.442525][T23055] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1167.442543][T23055] ? __pfx_force_exit_sig+0x10/0x10 [ 1167.442565][T23055] ? __do_sys_prctl+0x1e7/0x2220 [ 1167.442579][T23055] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 1167.442605][T23055] exit_to_user_mode_loop+0x8c/0x540 [ 1167.442624][T23055] do_syscall_64+0x4ee/0xf80 [ 1167.442639][T23055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.442653][T23055] RIP: 0033:0x7f5c4458f7c9 [ 1167.442665][T23055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.442679][T23055] RSP: 002b:00007f5c427f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1167.442692][T23055] RAX: ffffffffffffffda RBX: 00007f5c447e5fa8 RCX: 00007f5c4458f7c9 [ 1167.442702][T23055] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c447e5fac [ 1167.442710][T23055] RBP: 00007f5c447e5fa0 R08: 00007f5c4533c000 R09: 0000000000000000 [ 1167.442719][T23055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.442727][T23055] R13: 00007f5c447e6038 R14: 00007ffd02932b00 R15: 00007ffd02932be8 [ 1167.442745][T23055] [ 1168.283289][T21452] Bluetooth: hci2: command 0x0406 tx timeout [ 1168.699684][T23094] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(17) [ 1168.845173][T16868] Bluetooth: hci3: command 0x0406 tx timeout [ 1168.921887][T22243] Bluetooth: hci0: command 0x0406 tx timeout [ 1168.927999][T16868] Bluetooth: hci5: command 0x0c1a tx timeout [ 1168.936382][T21452] Bluetooth: hci1: command 0x0c1a tx timeout [ 1170.853984][T23134] FAULT_INJECTION: forcing a failure. [ 1170.853984][T23134] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.908611][T23134] CPU: 0 UID: 0 PID: 23134 Comm: syz.5.3389 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.908636][T23134] Tainted: [L]=SOFTLOCKUP [ 1170.908641][T23134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1170.908649][T23134] Call Trace: [ 1170.908655][T23134] [ 1170.908661][T23134] dump_stack_lvl+0x16c/0x1f0 [ 1170.908688][T23134] should_fail_ex+0x512/0x640 [ 1170.908705][T23134] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1170.908725][T23134] should_failslab+0xc2/0x120 [ 1170.908746][T23134] kmem_cache_alloc_noprof+0x83/0x770 [ 1170.908763][T23134] ? __kernfs_new_node+0xd2/0x9b0 [ 1170.908783][T23134] ? __kernfs_new_node+0xd2/0x9b0 [ 1170.908797][T23134] __kernfs_new_node+0xd2/0x9b0 [ 1170.908815][T23134] ? __pfx___kernfs_new_node+0x10/0x10 [ 1170.908836][T23134] ? find_held_lock+0x2b/0x80 [ 1170.908855][T23134] ? kernfs_root+0xee/0x2a0 [ 1170.908875][T23134] kernfs_new_node+0x13c/0x1e0 [ 1170.908897][T23134] __kernfs_create_file+0x53/0x350 [ 1170.908921][T23134] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1170.908949][T23134] internal_create_group+0x597/0xf70 [ 1170.908970][T23134] ? __pfx_internal_create_group+0x10/0x10 [ 1170.908990][T23134] ? kernfs_create_link+0x1bd/0x240 [ 1170.909005][T23134] internal_create_groups+0x9d/0x150 [ 1170.909024][T23134] device_add+0x6f7/0x1980 [ 1170.909047][T23134] ? __pfx_device_add+0x10/0x10 [ 1170.909066][T23134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1170.909088][T23134] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1170.909117][T23134] wiphy_register+0x1ea1/0x2cc0 [ 1170.909131][T23134] ? __rtnl_unlock+0x68/0xf0 [ 1170.909145][T23134] ? netdev_compute_master_upper_features+0x610/0xbb0 [ 1170.909172][T23134] ? __pfx_wiphy_register+0x10/0x10 [ 1170.909186][T23134] ? __asan_memset+0x23/0x50 [ 1170.909209][T23134] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 1170.909226][T23134] ieee80211_register_hw+0x2bb2/0x4160 [ 1170.909249][T23134] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1170.909264][T23134] ? __pfx___debug_object_init+0x10/0x10 [ 1170.909289][T23134] ? find_held_lock+0x2b/0x80 [ 1170.909306][T23134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1170.909327][T23134] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1170.909348][T23134] ? __hrtimer_setup+0x176/0x280 [ 1170.909367][T23134] mac80211_hwsim_new_radio+0x3323/0x5150 [ 1170.909395][T23134] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1170.909419][T23134] hwsim_new_radio_nl+0xba2/0x1330 [ 1170.909438][T23134] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1170.909461][T23134] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1170.909477][T23134] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1170.909496][T23134] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1170.909512][T23134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1170.909527][T23134] ? genl_get_cmd+0x194/0x580 [ 1170.909545][T23134] ? bpf_lsm_capable+0x9/0x10 [ 1170.909563][T23134] ? security_capable+0x7e/0x260 [ 1170.909577][T23134] ? ns_capable+0xd7/0x110 [ 1170.909596][T23134] genl_rcv_msg+0x55c/0x800 [ 1170.909616][T23134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1170.909631][T23134] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1170.909655][T23134] netlink_rcv_skb+0x158/0x420 [ 1170.909676][T23134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1170.909691][T23134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1170.909720][T23134] ? netlink_deliver_tap+0x1ae/0xd30 [ 1170.909743][T23134] genl_rcv+0x28/0x40 [ 1170.909755][T23134] netlink_unicast+0x5aa/0x870 [ 1170.909779][T23134] ? __pfx_netlink_unicast+0x10/0x10 [ 1170.909807][T23134] netlink_sendmsg+0x8c8/0xdd0 [ 1170.909831][T23134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1170.909854][T23134] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1170.909872][T23134] ____sys_sendmsg+0xa5d/0xc30 [ 1170.909888][T23134] ? copy_msghdr_from_user+0x10a/0x160 [ 1170.909906][T23134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1170.909918][T23134] ? preempt_schedule_thunk+0x16/0x30 [ 1170.909939][T23134] ? try_to_wake_up+0xa67/0x1860 [ 1170.909961][T23134] ___sys_sendmsg+0x134/0x1d0 [ 1170.909981][T23134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1170.909999][T23134] ? futex_private_hash_put+0x160/0x1b0 [ 1170.910037][T23134] __sys_sendmsg+0x16d/0x220 [ 1170.910056][T23134] ? __pfx___sys_sendmsg+0x10/0x10 [ 1170.910074][T23134] ? __x64_sys_futex+0x1e0/0x4c0 [ 1170.910102][T23134] do_syscall_64+0xcd/0xf80 [ 1170.910117][T23134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.910131][T23134] RIP: 0033:0x7f5c4458f7c9 [ 1170.910143][T23134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.910157][T23134] RSP: 002b:00007f5c427f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.910171][T23134] RAX: ffffffffffffffda RBX: 00007f5c447e5fa0 RCX: 00007f5c4458f7c9 [ 1170.910180][T23134] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 1170.910188][T23134] RBP: 00007f5c44613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1170.910196][T23134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.910205][T23134] R13: 00007f5c447e6038 R14: 00007f5c447e5fa0 R15: 00007ffd02932be8 [ 1170.910224][T23134] [ 1172.131545][T23147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1172.461383][T23162] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1173.020631][T23169] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1173.544892][T23179] FAULT_INJECTION: forcing a failure. [ 1173.544892][T23179] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.609155][T23179] CPU: 0 UID: 0 PID: 23179 Comm: syz.5.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.609180][T23179] Tainted: [L]=SOFTLOCKUP [ 1173.609185][T23179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1173.609195][T23179] Call Trace: [ 1173.609201][T23179] [ 1173.609210][T23179] dump_stack_lvl+0x16c/0x1f0 [ 1173.609239][T23179] should_fail_ex+0x512/0x640 [ 1173.609258][T23179] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1173.609279][T23179] should_failslab+0xc2/0x120 [ 1173.609300][T23179] kmem_cache_alloc_noprof+0x83/0x770 [ 1173.609316][T23179] ? ptlock_alloc+0x1f/0x70 [ 1173.609333][T23179] ? ptlock_alloc+0x1f/0x70 [ 1173.609346][T23179] ptlock_alloc+0x1f/0x70 [ 1173.609363][T23179] pte_alloc_one+0x84/0x3d0 [ 1173.609382][T23179] do_fault+0x8b8/0x1ad0 [ 1173.609400][T23179] ? __pfx_filemap_map_pages+0x10/0x10 [ 1173.609416][T23179] ? __pmd_alloc+0x6aa/0x9c0 [ 1173.609438][T23179] __handle_mm_fault+0x1919/0x2bb0 [ 1173.609462][T23179] ? __pfx___handle_mm_fault+0x10/0x10 [ 1173.609486][T23179] ? find_vma+0xbf/0x140 [ 1173.609503][T23179] ? __pfx_find_vma+0x10/0x10 [ 1173.609522][T23179] handle_mm_fault+0x3fe/0xad0 [ 1173.609540][T23179] do_user_addr_fault+0x7a6/0x1370 [ 1173.609557][T23179] ? rcu_is_watching+0x12/0xc0 [ 1173.609582][T23179] exc_page_fault+0x64/0xc0 [ 1173.609603][T23179] asm_exc_page_fault+0x26/0x30 [ 1173.609618][T23179] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1173.609636][T23179] Code: c4 10 e9 54 81 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 1173.609650][T23179] RSP: 0018:ffffc9000b537e10 EFLAGS: 00050202 [ 1173.609663][T23179] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 1173.609672][T23179] RDX: fffff520016a6fcd RSI: 0000000000000000 RDI: ffffc9000b537e60 [ 1173.609680][T23179] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff520016a6fcc [ 1173.609688][T23179] R10: ffffc9000b537e60 R11: ffff888027b48b30 R12: 0000000000000000 [ 1173.609697][T23179] R13: ffffc9000b537e60 R14: 0000000000000000 R15: dffffc0000000000 [ 1173.609718][T23179] _copy_from_user+0x98/0xd0 [ 1173.609735][T23179] __do_sys_sethostname+0x14d/0x2e0 [ 1173.609752][T23179] ? __pfx___do_sys_sethostname+0x10/0x10 [ 1173.609766][T23179] ? fput+0x70/0xf0 [ 1173.609787][T23179] do_syscall_64+0xcd/0xf80 [ 1173.609809][T23179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.609823][T23179] RIP: 0033:0x7f5c4458f7c9 [ 1173.609835][T23179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.609849][T23179] RSP: 002b:00007f5c427f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000aa [ 1173.609863][T23179] RAX: ffffffffffffffda RBX: 00007f5c447e5fa0 RCX: 00007f5c4458f7c9 [ 1173.609871][T23179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1173.609880][T23179] RBP: 00007f5c44613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1173.609887][T23179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.609895][T23179] R13: 00007f5c447e6038 R14: 00007f5c447e5fa0 R15: 00007ffd02932be8 [ 1173.609914][T23179] [ 1178.256472][T23235] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1179.035635][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.044802][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.053381][ T1302] ------------[ cut here ]------------ [ 1179.059262][ T1302] WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210, CPU#0: aoe_tx0/1302 [ 1179.069187][ T1302] Modules linked in: [ 1179.073428][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.084039][ T1302] Tainted: [L]=SOFTLOCKUP [ 1179.088370][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1179.098453][ T1302] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 1179.103736][ T1302] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 66 38 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 58 38 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 4a 38 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 1179.123463][ T1302] RSP: 0018:ffffc9000457f860 EFLAGS: 00010293 [ 1179.129573][ T1302] RAX: 0000000000000000 RBX: ffffc9000457f8e0 RCX: ffffffff8b2f1cac [ 1179.137572][ T1302] RDX: ffff8880280b0000 RSI: ffffffff8b2f2628 RDI: 0000000000000003 [ 1179.145549][ T1302] RBP: ffffc9000457f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 1179.153508][ T1302] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88807defd6f6 [ 1179.161506][ T1302] R13: 000000000000ffff R14: ffff888027dc0d90 R15: ffff88807defd640 [ 1179.169486][ T1302] FS: 0000000000000000(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 1179.178412][ T1302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1179.184979][ T1302] CR2: 00007f2a22740990 CR3: 000000007d652000 CR4: 00000000003526f0 [ 1179.192956][ T1302] Call Trace: [ 1179.196247][ T1302] [ 1179.199167][ T1302] ? __pfx_lowpan_xmit+0x10/0x10 [ 1179.204356][ T1302] ? lockdep_unlock+0x64/0xd0 [ 1179.209042][ T1302] ? __lock_acquire+0x12c2/0x2890 [ 1179.214054][ T1302] ? __pfx_netif_skb_features+0x10/0x10 [ 1179.219609][ T1302] ? dev_hard_start_xmit+0x97/0x6e0 [ 1179.224804][ T1302] dev_hard_start_xmit+0x97/0x6e0 [ 1179.229817][ T1302] __dev_queue_xmit+0x6d7/0x46c0 [ 1179.234782][ T1302] ? rcu_is_watching+0x12/0xc0 [ 1179.239538][ T1302] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1179.245439][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1179.250805][ T1302] ? __lock_acquire+0x436/0x2890 [ 1179.255748][ T1302] ? ref_tracker_free+0x37c/0x830 [ 1179.260761][ T1302] ? do_raw_spin_lock+0x12c/0x2b0 [ 1179.265786][ T1302] ? find_held_lock+0x2b/0x80 [ 1179.270451][ T1302] ? skb_dequeue+0x126/0x180 [ 1179.275041][ T1302] ? find_held_lock+0x2b/0x80 [ 1179.279723][ T1302] ? rcu_is_watching+0x12/0xc0 [ 1179.284536][ T1302] tx+0xcc/0x190 [ 1179.288079][ T1302] ? __pfx_tx+0x10/0x10 [ 1179.292220][ T1302] kthread+0x1e4/0x3e0 [ 1179.296313][ T1302] ? find_held_lock+0x2b/0x80 [ 1179.300984][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.305595][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 1179.311400][ T1302] ? lockdep_hardirqs_on+0x7c/0x110 [ 1179.316620][ T1302] ? __kthread_parkme+0x19e/0x250 [ 1179.321636][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.326232][ T1302] kthread+0x3c5/0x780 [ 1179.330290][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.334881][ T1302] ? rcu_is_watching+0x12/0xc0 [ 1179.339634][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.344227][ T1302] ret_from_fork+0x983/0xb10 [ 1179.348802][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 1179.353896][ T1302] ? __switch_to+0x7af/0x10d0 [ 1179.358584][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.363167][ T1302] ret_from_fork_asm+0x1a/0x30 [ 1179.367968][ T1302] [ 1179.370974][ T1302] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1179.378235][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.388818][ T1302] Tainted: [L]=SOFTLOCKUP [ 1179.393131][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1179.403183][ T1302] Call Trace: [ 1179.406467][ T1302] [ 1179.409400][ T1302] dump_stack_lvl+0x3d/0x1f0 [ 1179.414003][ T1302] vpanic+0x640/0x6f0 [ 1179.417980][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 1179.422644][ T1302] panic+0xca/0xd0 [ 1179.426374][ T1302] ? __pfx_panic+0x10/0x10 [ 1179.430789][ T1302] ? check_panic_on_warn+0x1f/0xb0 [ 1179.435885][ T1302] check_panic_on_warn+0xab/0xb0 [ 1179.440811][ T1302] __warn+0x108/0x3c0 [ 1179.444790][ T1302] __report_bug+0x2a0/0x520 [ 1179.449284][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 1179.453951][ T1302] ? __pfx___report_bug+0x10/0x10 [ 1179.458966][ T1302] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1179.465115][ T1302] ? arch_stack_walk+0x94/0x100 [ 1179.469955][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 1179.474613][ T1302] report_bug+0xb2/0x220 [ 1179.478844][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 1179.483502][ T1302] handle_bug+0x127/0x260 [ 1179.487817][ T1302] exc_invalid_op+0x17/0x50 [ 1179.492305][ T1302] asm_exc_invalid_op+0x1a/0x20 [ 1179.497134][ T1302] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 1179.502400][ T1302] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 66 38 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 58 38 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 4a 38 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 1179.522077][ T1302] RSP: 0018:ffffc9000457f860 EFLAGS: 00010293 [ 1179.528125][ T1302] RAX: 0000000000000000 RBX: ffffc9000457f8e0 RCX: ffffffff8b2f1cac [ 1179.536162][ T1302] RDX: ffff8880280b0000 RSI: ffffffff8b2f2628 RDI: 0000000000000003 [ 1179.544110][ T1302] RBP: ffffc9000457f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 1179.552069][ T1302] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88807defd6f6 [ 1179.560028][ T1302] R13: 000000000000ffff R14: ffff888027dc0d90 R15: ffff88807defd640 [ 1179.567987][ T1302] ? lowpan_xmit+0x52c/0x1210 [ 1179.572650][ T1302] ? lowpan_xmit+0xea8/0x1210 [ 1179.577318][ T1302] ? __pfx_lowpan_xmit+0x10/0x10 [ 1179.582240][ T1302] ? lockdep_unlock+0x64/0xd0 [ 1179.586903][ T1302] ? __lock_acquire+0x12c2/0x2890 [ 1179.591910][ T1302] ? __pfx_netif_skb_features+0x10/0x10 [ 1179.597471][ T1302] ? dev_hard_start_xmit+0x97/0x6e0 [ 1179.602652][ T1302] dev_hard_start_xmit+0x97/0x6e0 [ 1179.607665][ T1302] __dev_queue_xmit+0x6d7/0x46c0 [ 1179.612592][ T1302] ? rcu_is_watching+0x12/0xc0 [ 1179.617341][ T1302] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1179.623135][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1179.628544][ T1302] ? __lock_acquire+0x436/0x2890 [ 1179.633466][ T1302] ? ref_tracker_free+0x37c/0x830 [ 1179.638477][ T1302] ? do_raw_spin_lock+0x12c/0x2b0 [ 1179.643487][ T1302] ? find_held_lock+0x2b/0x80 [ 1179.648152][ T1302] ? skb_dequeue+0x126/0x180 [ 1179.652727][ T1302] ? find_held_lock+0x2b/0x80 [ 1179.657391][ T1302] ? rcu_is_watching+0x12/0xc0 [ 1179.662147][ T1302] tx+0xcc/0x190 [ 1179.665677][ T1302] ? __pfx_tx+0x10/0x10 [ 1179.669827][ T1302] kthread+0x1e4/0x3e0 [ 1179.673888][ T1302] ? find_held_lock+0x2b/0x80 [ 1179.678569][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.683147][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 1179.688942][ T1302] ? lockdep_hardirqs_on+0x7c/0x110 [ 1179.694132][ T1302] ? __kthread_parkme+0x19e/0x250 [ 1179.699168][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.703748][ T1302] kthread+0x3c5/0x780 [ 1179.707814][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.712387][ T1302] ? rcu_is_watching+0x12/0xc0 [ 1179.717133][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.721702][ T1302] ret_from_fork+0x983/0xb10 [ 1179.726283][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 1179.731375][ T1302] ? __switch_to+0x7af/0x10d0 [ 1179.736044][ T1302] ? __pfx_kthread+0x10/0x10 [ 1179.740655][ T1302] ret_from_fork_asm+0x1a/0x30 [ 1179.745426][ T1302] [ 1179.748479][ T1302] Kernel Offset: disabled [ 1179.752803][ T1302] Rebooting in 86400 seconds..