last executing test programs: 8.943726405s ago: executing program 2 (id=58): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000002f80)='/dev/fuse\x00', 0x60000, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x41}, 0x6, 0x0) timer_create$auto(0xfffffffc, 0x0, 0x0) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x400, 0xe983, 0xa3, 0xeb1, r0, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="0700000052c62b00f0832b65b22247fa521f79886c96273386c08736d8f82116c5cc642522721aff3abbed50a7f25f0af4854e26eb49a73fa84eb6e6a0485e893b8e0123ec7dc7edbb5b6ce82e0eafde2969bd83a8b0670bdaa7f8a2e781e25b28adae50533f6d4a2fd4d6751b37827f8f944b55d7e7e9eb0f", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r5, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x122, 0x10, 0x1}]}) socket(0xa, 0x2, 0x3a) semget$auto(0x5, 0x86c, 0x7) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$auto(0x7, 0x1, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) 7.504205793s ago: executing program 2 (id=68): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vgem/name\x00', 0xa8201, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x40aa2, 0x0) r1 = userfaultfd$auto(0x1) statx$auto(r1, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r4 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r4, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(r2, 0x5760, 0x10000000000402) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0xffffffffffffffff, 0x0, 0x4, 0x8, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) setsockopt$auto(0x3, 0x1000, 0x25, 0x0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, r5) sendmsg$auto_NFSD_CMD_VERSION_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) 5.997633351s ago: executing program 2 (id=71): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x0, r0) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_tracers\x00', 0x20800, 0x0) read$auto_show_traces_fops_trace(r1, &(0x7f0000000140)=""/202, 0xca) 5.499286123s ago: executing program 3 (id=73): setresuid$auto(0x2, 0x7, 0x8080) ptrace$auto(0x4206, 0x1, 0x0, 0x200005) r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) remap_file_pages$auto(0x9, 0x7, 0x9, 0x400, 0x6) r3 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)="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", 0x7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x200000000006, 0x8) r5 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) write$auto_fops_atomic_t_ro_(r5, &(0x7f0000001000)="540d6f6da2fbfb57ae1241cb52bd0be2a164f377efb4b49e16e7cf755274ce3b960fdd97cbae215903ece79b1b67f07d", 0x30) 5.297254414s ago: executing program 3 (id=74): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mprotect$auto(0x110c230000, 0x41, 0xc) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x6, 0xffffffffffffffff}) write$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000140)="505575e7d25048bbb01f78dafa0ba8ea07e8e7b72171199fa7226e3c0bb2eb801588aec482dd21e4871d0d39f3841b5abfb196d21d2071a59e158f4c76c6f8f6cbae1e97f12fd86fd53d7108b86e503d9cdc88f665493fac1a3a98eebf3cb740fc1d73e4368c9c4c252b0b6f5f633acb44ddd276b489aef03b294d3270a66cc850b2", 0x82) mknod$auto(0x0, 0xc46e, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x18, 0xfffffffffffffffd, 0x0, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) r3 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r3, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r4) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000200)=ANY=[@ANYBLOB="78eba834", @ANYRES16=r0, @ANYBLOB="210027bd7000fedbdf250100000004000880bd0004009c3fbb453d5d1f9bbe32dfc7393bc66081d89e9db3affa0d9af19803b41e88cdf9e462e9bd513fcf7cc4a584efa136572b412ddf1a1dee2304fc39553405048a2166945fcde6d9ad282df32c8163e1b61a78a6205750c19fe17d98b0fc19a7765d6b182498d030c9c456cc2a6858759318870d8b4c597cb1b5aa7035b8af1892ea5dca8894001fbd32f0a75257bcad2bf3adc272e189ad4bb2dad3ff920150e1384f7661c1aeb33d47aaca1e8bda9773fb5cecc60960c0a78f000000"], 0xd8}}, 0x40080) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x103, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r5, 0x4008af00, 0x0) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r7 = eventfd2$auto(0x401, 0x6) utimensat$auto(r7, 0x0, 0x0, 0x3) ioctl$auto(r6, 0xc0104d08, r6) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/stats/anon_fault_fallback_charge\x00', 0x0, 0x0) 5.261481413s ago: executing program 2 (id=75): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x8004550f, 0xffffffffffffffff) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0xc2}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}, @NL80211_ATTR_HE_OBSS_PD={0x24, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x81}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x40}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80a5}, 0x2000a800) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, 0x0, 0x0) ioctl$auto_VHOST_SET_VRING_CALL2(r1, 0x4008af21, &(0x7f00000001c0)={0x10001, r0}) 4.648121854s ago: executing program 3 (id=76): syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) ioctl$auto(0xffffffffffffffff, 0x40044620, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) syslog$auto(0x9, &(0x7f00000000c0)='\xb4\'::\x00', 0x10001) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x101001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8e, r0) write$auto(0x6, 0x0, 0x100000001) 4.375173688s ago: executing program 2 (id=79): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clock_getres$auto(0xa, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\x87\x03\x00W\x88\xc8L\xc7\xdde\xb7\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5\x1b\xd0\xa4\xde\xdeG\xef\xb0\x85fvL.w\x83\n\x93\x04\'SA\xf7$\x91~\xc2\xd6\xc8\xa6TG\xbb\xe3\xcc{\xcf\xc7V\xd8\x92\x04\xb4\xfe\xd8\xf7\x04\x1dSfA\xc9GI\xb2_\xcb\xf1H-\xd4:>\xda\x7f\xe1\xa9\xb1\x98y\xcbR97\xc4l\xa1\xaa-\xc8c\x1e\xfc\n\xe8\x90\xf3|\x12Fo\xc1\xb9\xb4\x8dJ\xec}\x85\x1aV\xa8\"\xcb\x00\x00\x00\x00\x00\x00\x00\x00', 0x10000100000a3d9) mmap$auto(0x0, 0x1000020009, 0x3, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x7fffffff, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x45f, 0x1ff) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) socket(0x10, 0x5, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x850) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0xe5c, 0x3, 0x0, 0x0, 0x0, 0xac, 0x1, 0x2, 0x40000402, 0x9, 0x9, 0x1, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0x7}, 0x10001, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x7, 0x0, 0xf6, 0x100000000000000c) mmap$auto(0xf22, 0x6, 0xfd5, 0x9d, r2, 0x0) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy7/ht40allow_map\x00', 0x42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) 3.150882058s ago: executing program 3 (id=82): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) ftruncate$auto(r1, 0xa0) (async) ftruncate$auto(r1, 0xa0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a2d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) (async) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0xcb00, 0x0) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) getsockopt$auto_SO_MEMINFO(r3, 0x7, 0x37, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 2.99883749s ago: executing program 1 (id=83): r0 = open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000240)={{0xd, 0x8, 0x5, 0x6}, "a04bf46f39edd51588b59731202c07eda4afcffbc3e6cb015bc8b8f22bca543f654b8eb037d0126e2466e0907b97df6faa48fda0355afcdc1e1e856969a4c312fb9b3661a01cd927c147dcb6d14c8015", 0xc96}) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000004bc0)={{0x9, 0x9, 0x3, 0x80}, "4700000000937b9900000002000000cf8a7cc95e78f9ddfb3092ce744b2c65926cd378e62ea00a888d429187a459c01b4745fe9ce1c02246996a5d875e736477c7708d06000000000000005d5100", 0x8}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0xf, 0xa, 0xf) setsockopt$auto(r3, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (fail_nth: 7) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000200)=""/53, 0x35) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 2.178318495s ago: executing program 1 (id=84): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x0, r0) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_tracers\x00', 0x20800, 0x0) read$auto_show_traces_fops_trace(r1, &(0x7f0000000140)=""/202, 0xca) 2.029909046s ago: executing program 1 (id=86): r0 = socket(0x1e, 0x1, 0x0) getsockopt$auto_SO_BUF_LOCK(r0, 0x9, 0x48, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r3, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x3) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="130006000000dd000800030000000000008f", @ANYRES32=r2, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x5) r4 = getpid() io_uring_setup$auto(0x1, &(0x7f0000000000)={0x3, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [], {0x2, 0x2005, 0x2, 0x8, 0x400, 0xb533, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x86fe, 0x0, 0x0, 0xb1}}) r5 = waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x9, 0x0) rt_tgsigqueueinfo$auto_SIGCONT(r4, r5, 0x12, &(0x7f0000000180)={@_si_pad}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) write$auto(r6, &(0x7f0000000140)='\x00\n\x00\x00\x00\x00\x00\x00', 0x2) close_range$auto(0xffffffffffffffff, 0x8, 0x8) socket(0x2c, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) write$auto(r7, 0x0, 0x2fb) r9 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r10, r10, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r9, 0x3305, 0x0) socket(0x2b, 0x1, 0x1) r11 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) close_range$auto(r11, r3, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) 1.718890783s ago: executing program 0 (id=87): r0 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x40042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40000) r3 = open(&(0x7f0000000100)='./file1\x00', 0x86000, 0xe1d2b27bdc14aabc) r4 = epoll_create$auto(0x4) epoll_pwait$auto(r4, 0x0, 0x800, 0x4d, 0x0, 0x8) fallocate$auto(r3, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0xc, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r5) r9 = socket(0x2, 0x3, 0xa) connect$auto(r9, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r0, &(0x7f0000000000)='/sy\x00\x80\x00\x00\x00\x00\x00\x00/de`ug/kfence/\x00\x00\x00\x00cts\x00', 0x1000000008, 0x800) ppoll$auto(&(0x7f0000000040)={r0, 0x9, 0x2}, 0x8, &(0x7f0000000080)={0x8, 0xb}, &(0x7f00000000c0)={0x50}, 0x8) 1.492439921s ago: executing program 1 (id=88): r0 = open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000240)={{0xd, 0x8, 0x5, 0x6}, "a04bf46f39edd51588b59731202c07eda4afcffbc3e6cb015bc8b8f22bca543f654b8eb037d0126e2466e0907b97df6faa48fda0355afcdc1e1e856969a4c312fb9b3661a01cd927c147dcb6d14c8015", 0xc96}) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000004bc0)={{0x9, 0x9, 0x3, 0x80}, "4700000000937b9900000002000000cf8a7cc95e78f9ddfb3092ce744b2c65926cd378e62ea00a888d429187a459c01b4745fe9ce1c02246996a5d875e736477c7708d06000000000000005d5100", 0x8}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x6c9380, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0xf, 0xa, 0xf) setsockopt$auto(r3, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000200)=""/53, 0x35) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 1.325246371s ago: executing program 0 (id=89): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = getsockopt$auto(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) mmap$auto(0x6, 0x5, 0xeac, 0x40eb1, r0, 0x300000000000) unshare$auto(0x15) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') (async) read$auto(r1, 0x0, 0x8) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000180)="c3f210201404067a452381c3eecf3071b4d306ae3ce0892695a99ed980c1187cae0b9dd4d5a8e7326cb633a87e7a6d0e2e5df24500d9affd43dbc578663567e3b66ca1d8be075ceeca6f2db5b6e21d7525f3e4", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xc4}, 0x17b6827d, 0x0, 0x0, 0x9}, 0x2005}, 0x3, 0x1f1f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$auto_SO_PREFER_BUSY_POLL(r2, 0x0, 0x45, 0x0, 0x2) (async) r3 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r3, 0x8000) (async) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0xc0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/logsyscall\x00', 0x20a42, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r4, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80002001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0x3, 0x8000) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), 0xffffffffffffffff) 1.019518545s ago: executing program 0 (id=90): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24fff000", @ANYRES16=r0, @ANYBLOB="13002ebd7000dddb6f3451dd000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) 1.018750399s ago: executing program 1 (id=91): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') (fail_nth: 19) 996.514127ms ago: executing program 2 (id=92): syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) ioctl$auto(0xffffffffffffffff, 0x40044620, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) syslog$auto(0x9, &(0x7f00000000c0)='\xb4\'::\x00', 0x10001) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x101001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8e, r0) write$auto(0x6, 0x0, 0x100000001) 767.281577ms ago: executing program 0 (id=94): mmap$auto(0x7f, 0x3, 0x82, 0x2000000000c03d, 0x401, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x3, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d0100"}, 0x66) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r1, 0x6a, 0x3, 0x0, 0x4) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r2, 0x401070cd, 0x5) mmap$auto(0x0, 0x200006, 0x400000002, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xee01, 0xee00, 0x0, 0x4, 0x80000000, 0x9, 0x123c80000000000, 0xff, 0x5, 0x7, 0x401, 0x2, 0x6}) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f00000004c0)={0x42c, r1, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0xf8, 0x3, 0x0, 0x1, [@nested={0xf1, 0x37, 0x0, 0x1, [@generic="d56134b29ca54c2b2f846e3f62e85cb4ce0e5bf6e8d780ffbf9564a7276a531561abe29a52df2cdfb552affe4d939be3432c020dd904f613ba8b65b022c296c963cf1171926823a992a79ece14d3158ad6dbff3dc489c856916c79d9acd6b5c2872e7c94e0642210a412a8d00db72c0d5113f14b8311b34173a8b5a32269b795df13411e1c5ef1a40b2b3654ae02f626d7b8a8c859db2330f45643211da9b362872927dd264a9ba2ef78a8f0d292dc313f6146d0a6bdb5b150f67ec7a3989504d65ed0ddd434d03f9aa99d40eb8816c1d050d49363ac6dcd46aaa107603c3e458b0fe5511d498dafed", @nested={0x4, 0x4c}]}]}, @IPVS_CMD_ATTR_DEST={0x184, 0x2, 0x0, 0x1, [@typed={0x9c, 0x2b, 0x0, 0x0, @binary="47e317b53effcd92149e8238d913105be41f8923157c2018da896e4188e75615cdc13ce64e69856b353949d095cf3a79d9fffc25eed85127ad88389bff07659542a6949ff40e82732727b8a8afa5cec13c93f9e191d7d1d96d80e4f03f1b1b0f608802cf763c3c488f6743c003c701d66a45addc8fc78cd7fee00e9e96686d2d365f14e126ca03234c0e68759457e21920ef78c1e3b750c5"}, @nested={0xa3, 0x14a, 0x0, 0x1, [@nested={0x4, 0xfa}, @generic="ba102e75e6a3e28dd11d935b2d6a67e965086db52965197c0d0d3a9239761d0161302b6ddbe8f50deecf4b409a63c27006b3cb899c10fa47087abaf2c101dd38599ed9b12de0091649b2dcbcedae8dd2aeafaad202a5668dc595d32f5abc00aa3f2d00303f817c3fa87f9ce89ceaf0cdf8f7d2435f0cc92bafd90ef37dcdbce7a7b97d434bb102dd2c8a5839a49909fdd8c93f16e58841b9d75d8a"]}, @typed={0x8, 0x59, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="43793385a87bdbdbd9169c1acff5ecaaf7e09051aa3b49dd12e2f3e18cbdf4ab292362701b2ae31c789a5e80e8c2c5c404e960cc861c20da"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20000000}, @IPVS_CMD_ATTR_SERVICE={0x16c, 0x1, 0x0, 0x1, [@nested={0x14, 0x11c, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x150, 0x0, 0x0, @uid=r3}]}, @typed={0xc, 0x113, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0xce, 0x0, 0x0, @u64=0x86d}, @nested={0x127, 0x10e, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x95}, @nested={0x4, 0xa1}, @generic="c4cf7fd6bdb81fa5a91f1ea6903b5b800930a1acee5239003709368ff424a8f673a86c206b4ddeda7fd452aabea0d5039415850ed246cef1f1c6d32efab9ce", @typed={0xd, 0x67, 0x0, 0x0, @binary="1b6d2ef3a1f3097b0a"}, @typed={0x8, 0x133, 0x0, 0x0, @u32=0xb}, @generic="570f70ebf188f1758604da88648cbe2b7ca9808389d19934a37e1d9ab8da74edf3723c0e409d5e7c7cac18da374e3a89f41f7deca054cbf4b9595e6414a84ec0058f559d205d1d3dd653c5b7312249823ed13ad206ca4a413ff9b2a3868f1b4f436c4180b24a5d1e1b3fa0a31171b65b15715c39bff0cc5740fde85183c6597f602e4fa4b67e641851e766cab85122f969048cc9cfb14ffbd5417a0506817febfff2a5114faa0a2471cfad7821deed99512c38b6375ce2463ec7be4826aa2eea"]}, @typed={0x8, 0xa4, 0x0, 0x0, @u32=0xe}, @generic="b0e48eba0993b6f6af34fb81"]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x20000800}, 0x850) r4 = socket(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0xf8, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe1, 0x3, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b6cdd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014", @nested={0x10, 0x5, 0x0, 0x1, [@typed={0xc, 0xc5, 0x0, 0x0, @u64=0x3}]}, @generic="21aadf3f78e2cd52d7f733c38da99fe8ec1ead"]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r6, 0x40045568, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 89.505490][ T5818] cgroup: Unknown subsys name 'net' [ 89.678716][ T5818] cgroup: Unknown subsys name 'cpuset' [ 89.688701][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.567182][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.518436][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.527686][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.535965][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.544387][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.552929][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.589370][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.598870][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.607957][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.616771][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.624960][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.663524][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.679803][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.688167][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.696901][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.704972][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.755887][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.765405][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.773805][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.785941][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.799032][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.286877][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 94.340952][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 94.517930][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 94.531419][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 94.623298][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.632519][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.640842][ T5829] bridge_slave_0: entered allmulticast mode [ 94.648654][ T5829] bridge_slave_0: entered promiscuous mode [ 94.679673][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.687268][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.696030][ T5833] bridge_slave_0: entered allmulticast mode [ 94.703570][ T5833] bridge_slave_0: entered promiscuous mode [ 94.712787][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.720666][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.728970][ T5829] bridge_slave_1: entered allmulticast mode [ 94.736744][ T5829] bridge_slave_1: entered promiscuous mode [ 94.757960][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.766794][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.775378][ T5833] bridge_slave_1: entered allmulticast mode [ 94.782943][ T5833] bridge_slave_1: entered promiscuous mode [ 94.865791][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.878723][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.912652][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.926187][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.982550][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.991873][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.000854][ T5841] bridge_slave_0: entered allmulticast mode [ 95.008776][ T5841] bridge_slave_0: entered promiscuous mode [ 95.019364][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.028055][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.037688][ T5837] bridge_slave_0: entered allmulticast mode [ 95.046548][ T5837] bridge_slave_0: entered promiscuous mode [ 95.081178][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.090160][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.099571][ T5841] bridge_slave_1: entered allmulticast mode [ 95.108965][ T5841] bridge_slave_1: entered promiscuous mode [ 95.118593][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.127624][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.136280][ T5837] bridge_slave_1: entered allmulticast mode [ 95.145721][ T5837] bridge_slave_1: entered promiscuous mode [ 95.156188][ T5833] team0: Port device team_slave_0 added [ 95.166687][ T5829] team0: Port device team_slave_0 added [ 95.198260][ T5833] team0: Port device team_slave_1 added [ 95.207218][ T5829] team0: Port device team_slave_1 added [ 95.261534][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.282843][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.318478][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.331532][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.343576][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.351951][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.379594][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.393259][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.401114][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.428628][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.462644][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.471911][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.501634][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.515805][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.524742][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.554280][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.610741][ T5841] team0: Port device team_slave_0 added [ 95.620860][ T5837] team0: Port device team_slave_0 added [ 95.636301][ T5151] Bluetooth: hci0: command tx timeout [ 95.661028][ T5841] team0: Port device team_slave_1 added [ 95.669591][ T5837] team0: Port device team_slave_1 added [ 95.725189][ T5151] Bluetooth: hci1: command tx timeout [ 95.726924][ T5833] hsr_slave_0: entered promiscuous mode [ 95.742134][ T5833] hsr_slave_1: entered promiscuous mode [ 95.755988][ T5829] hsr_slave_0: entered promiscuous mode [ 95.766793][ T5829] hsr_slave_1: entered promiscuous mode [ 95.776921][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 95.784685][ T5829] Cannot create hsr debugfs directory [ 95.794915][ T5151] Bluetooth: hci2: command tx timeout [ 95.820233][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.829800][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.860754][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.874890][ T5151] Bluetooth: hci3: command tx timeout [ 95.875719][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.890449][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.920195][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.935623][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.943525][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.974261][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.004530][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.013414][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.046948][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.245146][ T5841] hsr_slave_0: entered promiscuous mode [ 96.253129][ T5841] hsr_slave_1: entered promiscuous mode [ 96.260105][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 96.266502][ T5841] Cannot create hsr debugfs directory [ 96.279459][ T5837] hsr_slave_0: entered promiscuous mode [ 96.286489][ T5837] hsr_slave_1: entered promiscuous mode [ 96.293087][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 96.300831][ T5837] Cannot create hsr debugfs directory [ 96.703897][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.726560][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.760623][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.781236][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.825909][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.846870][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.872053][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.889988][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.997670][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.028132][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.046350][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.081810][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.161328][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.174181][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.200899][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.239502][ T24] cfg80211: failed to load regulatory.db [ 97.246460][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.302018][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.338139][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.381328][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.418395][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.425989][ T4199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.448219][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.468200][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.478206][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.518919][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.526801][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.549887][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.557790][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.626209][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.679459][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.702859][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.715149][ T5151] Bluetooth: hci0: command tx timeout [ 97.760000][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.768235][ T4199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.799308][ T5151] Bluetooth: hci1: command tx timeout [ 97.833229][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.848836][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.856520][ T4199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.875161][ T5151] Bluetooth: hci2: command tx timeout [ 97.928858][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.936688][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.959470][ T5151] Bluetooth: hci3: command tx timeout [ 98.017651][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.025261][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.241035][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.411653][ T5833] veth0_vlan: entered promiscuous mode [ 98.459509][ T5833] veth1_vlan: entered promiscuous mode [ 98.492054][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.601681][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.640483][ T5833] veth0_macvtap: entered promiscuous mode [ 98.648033][ T5829] veth0_vlan: entered promiscuous mode [ 98.668815][ T5833] veth1_macvtap: entered promiscuous mode [ 98.707091][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.724414][ T5829] veth1_vlan: entered promiscuous mode [ 98.744103][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.771705][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.794032][ T3544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.806644][ T3544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.827387][ T3544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.837582][ T3544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.889130][ T5837] veth0_vlan: entered promiscuous mode [ 98.941822][ T5837] veth1_vlan: entered promiscuous mode [ 98.954460][ T5829] veth0_macvtap: entered promiscuous mode [ 99.017044][ T5829] veth1_macvtap: entered promiscuous mode [ 99.052325][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.052334][ T5841] veth0_vlan: entered promiscuous mode [ 99.052381][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.074402][ T5841] veth1_vlan: entered promiscuous mode [ 99.121654][ T5837] veth0_macvtap: entered promiscuous mode [ 99.139770][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.176432][ T5837] veth1_macvtap: entered promiscuous mode [ 99.191815][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.220639][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.239917][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.254169][ T4199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.267063][ T4199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.282942][ T4199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.302719][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.333012][ T4199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.366679][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.387294][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.392131][ T5841] veth0_macvtap: entered promiscuous mode [ 99.451672][ T5841] veth1_macvtap: entered promiscuous mode [ 99.514361][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.557972][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.571567][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.598653][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.608272][ T5916] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4'. [ 99.626206][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.652414][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.669365][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.737563][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.777703][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.797868][ T5151] Bluetooth: hci0: command tx timeout [ 99.806424][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.815729][ T4217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.835542][ T4217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.865960][ T4217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.886105][ T5151] Bluetooth: hci1: command tx timeout [ 99.895269][ T4217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.956402][ T5151] Bluetooth: hci2: command tx timeout [ 100.029991][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.044131][ T5151] Bluetooth: hci3: command tx timeout [ 100.087187][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.225323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.235325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.263906][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.283859][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.309527][ T5916] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4'. [ 100.321105][ T5916] Zero length message leads to an empty skb [ 100.342865][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.396330][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.406052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.466930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.485835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 100.516114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 100.536932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.595277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.614115][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.656590][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.732530][ T5928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.765350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.775616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.098499][ T5934] FAULT_INJECTION: forcing a failure. [ 101.098499][ T5934] name failslab, interval 1, probability 0, space 0, times 1 [ 101.098550][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 101.098585][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.098602][ T5934] Call Trace: [ 101.098613][ T5934] [ 101.098624][ T5934] dump_stack_lvl+0x16c/0x1f0 [ 101.098669][ T5934] should_fail_ex+0x512/0x640 [ 101.098716][ T5934] ? kmem_cache_alloc_noprof+0x62/0x770 [ 101.098757][ T5934] should_failslab+0xc2/0x120 [ 101.098803][ T5934] kmem_cache_alloc_noprof+0x83/0x770 [ 101.098846][ T5934] ? create_new_namespaces+0x30/0xab0 [ 101.098894][ T5934] ? create_new_namespaces+0x30/0xab0 [ 101.098934][ T5934] create_new_namespaces+0x30/0xab0 [ 101.098973][ T5934] ? bpf_lsm_capable+0x9/0x10 [ 101.099010][ T5934] ? security_capable+0x7e/0x260 [ 101.099056][ T5934] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 101.099099][ T5934] ksys_unshare+0x45b/0xa40 [ 101.099157][ T5934] ? __pfx_ksys_unshare+0x10/0x10 [ 101.099204][ T5934] ? xfd_validate_state+0x61/0x180 [ 101.099243][ T5934] __x64_sys_unshare+0x31/0x40 [ 101.099285][ T5934] do_syscall_64+0xcd/0xf80 [ 101.099326][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.099356][ T5934] RIP: 0033:0x7f8f4558f7c9 [ 101.099380][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.099410][ T5934] RSP: 002b:00007f8f464e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.099440][ T5934] RAX: ffffffffffffffda RBX: 00007f8f457e5fa0 RCX: 00007f8f4558f7c9 [ 101.099459][ T5934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 101.099476][ T5934] RBP: 00007f8f45613f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.099493][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.099511][ T5934] R13: 00007f8f457e6038 R14: 00007f8f457e5fa0 R15: 00007fff7eb30818 [ 101.099551][ T5934] [ 101.346280][ T5941] netlink: 342 bytes leftover after parsing attributes in process `syz.0.7'. [ 101.876827][ T5151] Bluetooth: hci0: command tx timeout [ 101.952800][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.975869][ T5151] Bluetooth: hci1: command tx timeout [ 102.045552][ T5151] Bluetooth: hci2: command tx timeout [ 102.116404][ T5151] Bluetooth: hci3: command tx timeout [ 102.609357][ T5961] netlink: 342 bytes leftover after parsing attributes in process `syz.1.10'. [ 103.707646][ T30] audit: type=1800 audit(1765574822.788:2): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12" name="lu_gp_id" dev="configfs" ino=8322 res=0 errno=0 [ 104.080915][ T5979] zswap: compressor not available [ 104.320987][ T5987] FAULT_INJECTION: forcing a failure. [ 104.320987][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 104.376215][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.376259][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.376277][ T5987] Call Trace: [ 104.376287][ T5987] [ 104.376299][ T5987] dump_stack_lvl+0x16c/0x1f0 [ 104.376344][ T5987] should_fail_ex+0x512/0x640 [ 104.376401][ T5987] ? __kmalloc_cache_noprof+0x5f/0x800 [ 104.376442][ T5987] should_failslab+0xc2/0x120 [ 104.376489][ T5987] __kmalloc_cache_noprof+0x80/0x800 [ 104.376525][ T5987] ? allocate_file_region_entries+0x1a0/0x620 [ 104.376566][ T5987] ? trace_mm_page_alloc+0x11b/0x180 [ 104.376616][ T5987] ? allocate_file_region_entries+0x1a0/0x620 [ 104.376656][ T5987] ? _raw_spin_unlock+0x28/0x50 [ 104.376690][ T5987] allocate_file_region_entries+0x1a0/0x620 [ 104.376740][ T5987] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 104.376795][ T5987] region_chg+0x85/0x140 [ 104.376836][ T5987] __vma_reservation_common+0x43b/0x740 [ 104.376882][ T5987] ? __pfx___vma_reservation_common+0x10/0x10 [ 104.376921][ T5987] ? filemap_get_entry+0x1a7/0x3b0 [ 104.376971][ T5987] alloc_hugetlb_folio+0x8ff/0x14c0 [ 104.377028][ T5987] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 104.377084][ T5987] ? __filemap_get_folio_mpol+0x32f/0xc60 [ 104.377132][ T5987] hugetlb_no_page+0x10fa/0x2140 [ 104.377180][ T5987] hugetlb_fault+0x5ed/0x1730 [ 104.377218][ T5987] ? __pfx_hugetlb_fault+0x10/0x10 [ 104.377262][ T5987] ? find_vma+0xbf/0x140 [ 104.377302][ T5987] ? __pfx_find_vma+0x10/0x10 [ 104.377345][ T5987] handle_mm_fault+0x95d/0xad0 [ 104.377394][ T5987] do_user_addr_fault+0x7a6/0x1370 [ 104.377435][ T5987] ? rcu_is_watching+0x12/0xc0 [ 104.377481][ T5987] exc_page_fault+0x64/0xc0 [ 104.377521][ T5987] asm_exc_page_fault+0x26/0x30 [ 104.377550][ T5987] RIP: 0010:__put_user_4+0xd/0x20 [ 104.377587][ T5987] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 104.377614][ T5987] RSP: 0018:ffffc90004fdfd78 EFLAGS: 00050246 [ 104.377639][ T5987] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 104.377657][ T5987] RDX: 0000000000080000 RSI: ffffffff8900ecf2 RDI: ffffffff8bf2a980 [ 104.377675][ T5987] RBP: 1ffff920009fbfb1 R08: 00000000ffffffff R09: 00000000ffffffff [ 104.377694][ T5987] R10: 0000000000000001 R11: ffff88802614c830 R12: 0000000000000000 [ 104.377710][ T5987] R13: 00000000800455d1 R14: ffff888078b68410 R15: ffff888078b68400 [ 104.377741][ T5987] ? snd_ctl_ioctl+0x322/0x13e0 [ 104.377781][ T5987] snd_ctl_ioctl+0x32c/0x13e0 [ 104.377820][ T5987] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 104.377859][ T5987] ? find_held_lock+0x2b/0x80 [ 104.377899][ T5987] ? hook_file_ioctl_common+0x144/0x410 [ 104.377940][ T5987] ? __fget_files+0x20e/0x3c0 [ 104.377994][ T5987] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 104.378033][ T5987] __x64_sys_ioctl+0x18e/0x210 [ 104.378073][ T5987] do_syscall_64+0xcd/0xf80 [ 104.378114][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.378143][ T5987] RIP: 0033:0x7f4c36b8f7c9 [ 104.378167][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.378194][ T5987] RSP: 002b:00007f4c37ae5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.378222][ T5987] RAX: ffffffffffffffda RBX: 00007f4c36de6090 RCX: 00007f4c36b8f7c9 [ 104.378241][ T5987] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 000000000000000b [ 104.378259][ T5987] RBP: 00007f4c36c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.378277][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.378294][ T5987] R13: 00007f4c36de6128 R14: 00007f4c36de6090 R15: 00007ffed6f759b8 [ 104.378335][ T5987] [ 104.857552][ T5979] FAULT_INJECTION: forcing a failure. [ 104.857552][ T5979] name failslab, interval 1, probability 0, space 0, times 0 [ 104.925962][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT(full) [ 104.926007][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.926026][ T5979] Call Trace: [ 104.926036][ T5979] [ 104.926048][ T5979] dump_stack_lvl+0x16c/0x1f0 [ 104.926096][ T5979] should_fail_ex+0x512/0x640 [ 104.926154][ T5979] ? __kmalloc_cache_noprof+0x5f/0x800 [ 104.926194][ T5979] should_failslab+0xc2/0x120 [ 104.926242][ T5979] __kmalloc_cache_noprof+0x80/0x800 [ 104.926276][ T5979] ? __might_fault+0xe3/0x190 [ 104.926312][ T5979] ? __might_fault+0xe3/0x190 [ 104.926345][ T5979] ? do_signalfd4+0x169/0x520 [ 104.926384][ T5979] ? do_signalfd4+0x169/0x520 [ 104.926415][ T5979] do_signalfd4+0x169/0x520 [ 104.926451][ T5979] __x64_sys_signalfd+0x120/0x1a0 [ 104.926486][ T5979] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 104.926532][ T5979] do_syscall_64+0xcd/0xf80 [ 104.926575][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.926606][ T5979] RIP: 0033:0x7f0f4818f7c9 [ 104.926632][ T5979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.926661][ T5979] RSP: 002b:00007f0f48f4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 104.926692][ T5979] RAX: ffffffffffffffda RBX: 00007f0f483e5fa0 RCX: 00007f0f4818f7c9 [ 104.926713][ T5979] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 00000000ffffffff [ 104.926733][ T5979] RBP: 00007f0f48213f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.926751][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.926769][ T5979] R13: 00007f0f483e6038 R14: 00007f0f483e5fa0 R15: 00007ffd735ca2a8 [ 104.926810][ T5979] [ 105.427517][ T5996] hub 1-0:1.0: USB hub found [ 105.472888][ T5996] hub 1-0:1.0: 1 port detected [ 106.729282][ T6003] openvswitch: netlink: IP tunnel dst address not specified [ 106.773379][ T6003] ima: policy update failed [ 106.780600][ T30] audit: type=1802 audit(1765574825.868:3): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.19" res=0 errno=0 [ 106.784205][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.283971][ T6005] syz.3.20 (6005) used greatest stack depth: 19688 bytes left [ 108.008147][ T6023] netlink: 342 bytes leftover after parsing attributes in process `syz.3.25'. [ 108.996225][ T6037] openvswitch: netlink: IP tunnel dst address not specified [ 109.071550][ T6037] ima: policy update failed [ 109.080231][ T30] audit: type=1802 audit(1765574828.168:4): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.30" res=0 errno=0 [ 109.377028][ T6048] FAULT_INJECTION: forcing a failure. [ 109.377028][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.475566][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(full) [ 109.475608][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.475627][ T6048] Call Trace: [ 109.475637][ T6048] [ 109.475649][ T6048] dump_stack_lvl+0x16c/0x1f0 [ 109.475693][ T6048] should_fail_ex+0x512/0x640 [ 109.475747][ T6048] _copy_from_user+0x2e/0xd0 [ 109.475794][ T6048] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 109.475855][ T6048] snd_rawmidi_write+0x26e/0xc10 [ 109.475909][ T6048] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 109.475954][ T6048] ? common_file_perm+0x1b1/0x500 [ 109.475988][ T6048] ? bpf_lsm_file_permission+0x9/0x10 [ 109.476025][ T6048] ? security_file_permission+0x71/0x210 [ 109.476058][ T6048] ? rw_verify_area+0xcf/0x6c0 [ 109.476097][ T6048] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 109.476141][ T6048] vfs_write+0x2a0/0x11d0 [ 109.476190][ T6048] ? __pfx_vfs_write+0x10/0x10 [ 109.476228][ T6048] ? find_held_lock+0x2b/0x80 [ 109.476268][ T6048] ? __fget_files+0x204/0x3c0 [ 109.476314][ T6048] ? __fget_files+0x20e/0x3c0 [ 109.476368][ T6048] ksys_write+0x1f8/0x250 [ 109.476419][ T6048] ? __pfx_ksys_write+0x10/0x10 [ 109.476475][ T6048] do_syscall_64+0xcd/0xf80 [ 109.476517][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.476548][ T6048] RIP: 0033:0x7f8f4558f7c9 [ 109.476573][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.476601][ T6048] RSP: 002b:00007f8f46483038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.476631][ T6048] RAX: ffffffffffffffda RBX: 00007f8f457e6270 RCX: 00007f8f4558f7c9 [ 109.476650][ T6048] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 000000000000000a [ 109.476669][ T6048] RBP: 00007f8f45613f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.476687][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.476705][ T6048] R13: 00007f8f457e6308 R14: 00007f8f457e6270 R15: 00007fff7eb30818 [ 109.476744][ T6048] [ 109.848470][ T30] audit: type=1800 audit(1765574828.918:5): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.27" name="lu_gp_id" dev="configfs" ino=7988 res=0 errno=0 [ 110.507026][ T6051] zswap: compressor not available [ 110.829442][ T6051] FAULT_INJECTION: forcing a failure. [ 110.829442][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 110.850139][ T6051] CPU: 1 UID: 0 PID: 6051 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT(full) [ 110.850185][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.850203][ T6051] Call Trace: [ 110.850213][ T6051] [ 110.850224][ T6051] dump_stack_lvl+0x16c/0x1f0 [ 110.850269][ T6051] should_fail_ex+0x512/0x640 [ 110.850314][ T6051] ? __kmalloc_cache_noprof+0x5f/0x800 [ 110.850362][ T6051] should_failslab+0xc2/0x120 [ 110.850407][ T6051] __kmalloc_cache_noprof+0x80/0x800 [ 110.850438][ T6051] ? __might_fault+0xe3/0x190 [ 110.850470][ T6051] ? __might_fault+0xe3/0x190 [ 110.850501][ T6051] ? do_signalfd4+0x169/0x520 [ 110.850538][ T6051] ? do_signalfd4+0x169/0x520 [ 110.850569][ T6051] do_signalfd4+0x169/0x520 [ 110.850604][ T6051] __x64_sys_signalfd+0x120/0x1a0 [ 110.850636][ T6051] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 110.850681][ T6051] do_syscall_64+0xcd/0xf80 [ 110.850723][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.850754][ T6051] RIP: 0033:0x7f4c36b8f7c9 [ 110.850779][ T6051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.850808][ T6051] RSP: 002b:00007f4c37b06038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 110.850837][ T6051] RAX: ffffffffffffffda RBX: 00007f4c36de5fa0 RCX: 00007f4c36b8f7c9 [ 110.850857][ T6051] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 00000000ffffffff [ 110.850875][ T6051] RBP: 00007f4c36c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.850894][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.850911][ T6051] R13: 00007f4c36de6038 R14: 00007f4c36de5fa0 R15: 00007ffed6f759b8 [ 110.850951][ T6051] [ 110.855941][ T6063] hub 1-0:1.0: USB hub found [ 111.076321][ T6063] hub 1-0:1.0: 1 port detected [ 113.260138][ T6084] FAULT_INJECTION: forcing a failure. [ 113.260138][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 113.294999][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.1.44 Not tainted syzkaller #0 PREEMPT(full) [ 113.295039][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.295056][ T6084] Call Trace: [ 113.295067][ T6084] [ 113.295078][ T6084] dump_stack_lvl+0x16c/0x1f0 [ 113.295123][ T6084] should_fail_ex+0x512/0x640 [ 113.295178][ T6084] ? fs_reclaim_acquire+0xae/0x150 [ 113.295225][ T6084] should_failslab+0xc2/0x120 [ 113.295270][ T6084] __kmalloc_noprof+0xeb/0x910 [ 113.295301][ T6084] ? tomoyo_encode2+0x100/0x3e0 [ 113.295327][ T6084] ? tomoyo_encode2+0x100/0x3e0 [ 113.295346][ T6084] tomoyo_encode2+0x100/0x3e0 [ 113.295368][ T6084] tomoyo_encode+0x29/0x50 [ 113.295387][ T6084] tomoyo_realpath_from_path+0x18f/0x6e0 [ 113.295415][ T6084] tomoyo_check_open_permission+0x2ab/0x3c0 [ 113.295447][ T6084] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 113.295514][ T6084] ? do_raw_spin_lock+0x12c/0x2b0 [ 113.295543][ T6084] tomoyo_file_open+0x6b/0x90 [ 113.295568][ T6084] security_file_open+0x84/0x1e0 [ 113.295589][ T6084] do_dentry_open+0x597/0x1590 [ 113.295619][ T6084] ? security_inode_permission+0xbf/0x260 [ 113.295653][ T6084] vfs_open+0x82/0x3f0 [ 113.295675][ T6084] path_openat+0x2078/0x3140 [ 113.295710][ T6084] ? __pfx_path_openat+0x10/0x10 [ 113.295745][ T6084] do_filp_open+0x20b/0x470 [ 113.295773][ T6084] ? __pfx_do_filp_open+0x10/0x10 [ 113.295817][ T6084] ? alloc_fd+0x471/0x7d0 [ 113.295849][ T6084] do_sys_openat2+0x11f/0x280 [ 113.295869][ T6084] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.295889][ T6084] ? count_memcg_events+0x122/0x290 [ 113.295921][ T6084] __x64_sys_openat+0x174/0x210 [ 113.295941][ T6084] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.295971][ T6084] do_syscall_64+0xcd/0xf80 [ 113.295995][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.296019][ T6084] RIP: 0033:0x7f0f4818f7c9 [ 113.296036][ T6084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.296053][ T6084] RSP: 002b:00007f0f463d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.296071][ T6084] RAX: ffffffffffffffda RBX: 00007f0f483e6180 RCX: 00007f0f4818f7c9 [ 113.296083][ T6084] RDX: 0000000000109401 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 113.296094][ T6084] RBP: 00007f0f48213f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.296104][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.296114][ T6084] R13: 00007f0f483e6218 R14: 00007f0f483e6180 R15: 00007ffd735ca2a8 [ 113.296138][ T6084] [ 113.297338][ T6084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.533004][ T6090] netlink: 342 bytes leftover after parsing attributes in process `syz.2.38'. [ 115.221060][ T6098] hub 1-0:1.0: USB hub found [ 115.355553][ T6098] hub 1-0:1.0: 1 port detected [ 115.585693][ T6101] openvswitch: netlink: IP tunnel dst address not specified [ 115.675076][ T6101] ima: policy update failed [ 115.686910][ T30] audit: type=1802 audit(1765574834.778:6): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.40" res=0 errno=0 [ 116.986408][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 117.042909][ T30] audit: type=1800 audit(1765574836.128:7): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.43" name="lu_gp_id" dev="configfs" ino=8813 res=0 errno=0 [ 118.312098][ T6124] zswap: compressor not available [ 118.969097][ T6124] FAULT_INJECTION: forcing a failure. [ 118.969097][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 118.982338][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.2.46 Not tainted syzkaller #0 PREEMPT(full) [ 118.982365][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.982376][ T6124] Call Trace: [ 118.982382][ T6124] [ 118.982390][ T6124] dump_stack_lvl+0x16c/0x1f0 [ 118.982419][ T6124] should_fail_ex+0x512/0x640 [ 118.982448][ T6124] ? __kmalloc_cache_noprof+0x5f/0x800 [ 118.982472][ T6124] should_failslab+0xc2/0x120 [ 118.982500][ T6124] __kmalloc_cache_noprof+0x80/0x800 [ 118.982519][ T6124] ? __might_fault+0xe3/0x190 [ 118.982539][ T6124] ? __might_fault+0xe3/0x190 [ 118.982558][ T6124] ? do_signalfd4+0x169/0x520 [ 118.982580][ T6124] ? do_signalfd4+0x169/0x520 [ 118.982598][ T6124] do_signalfd4+0x169/0x520 [ 118.982618][ T6124] __x64_sys_signalfd+0x120/0x1a0 [ 118.982638][ T6124] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 118.982664][ T6124] do_syscall_64+0xcd/0xf80 [ 118.982688][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.982706][ T6124] RIP: 0033:0x7f8f4558f7c9 [ 118.982721][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.982738][ T6124] RSP: 002b:00007f8f464e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 118.982757][ T6124] RAX: ffffffffffffffda RBX: 00007f8f457e5fa0 RCX: 00007f8f4558f7c9 [ 118.982768][ T6124] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 00000000ffffffff [ 118.982779][ T6124] RBP: 00007f8f45613f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.982790][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.982800][ T6124] R13: 00007f8f457e6038 R14: 00007f8f457e5fa0 R15: 00007fff7eb30818 [ 118.982822][ T6124] [ 119.441954][ T6146] netlink: 252 bytes leftover after parsing attributes in process `syz.0.59'. [ 120.709677][ T6146] netlink: 252 bytes leftover after parsing attributes in process `syz.0.59'. [ 120.963473][ T6158] netlink: 342 bytes leftover after parsing attributes in process `syz.1.53'. [ 121.197120][ T6163] FAULT_INJECTION: forcing a failure. [ 121.197120][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 121.255005][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) [ 121.255048][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.255066][ T6163] Call Trace: [ 121.255076][ T6163] [ 121.255088][ T6163] dump_stack_lvl+0x16c/0x1f0 [ 121.255131][ T6163] should_fail_ex+0x512/0x640 [ 121.255176][ T6163] ? __kmalloc_cache_noprof+0x5f/0x800 [ 121.255214][ T6163] should_failslab+0xc2/0x120 [ 121.255269][ T6163] __kmalloc_cache_noprof+0x80/0x800 [ 121.255302][ T6163] ? ptrace_may_access+0x35/0x50 [ 121.255347][ T6163] ? sched_core_share_pid+0x3c1/0x9d0 [ 121.255391][ T6163] ? do_raw_spin_unlock+0x172/0x230 [ 121.255431][ T6163] ? sched_core_share_pid+0x3c1/0x9d0 [ 121.255473][ T6163] sched_core_share_pid+0x3c1/0x9d0 [ 121.255516][ T6163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.255566][ T6163] ? __pfx_sched_core_share_pid+0x10/0x10 [ 121.255608][ T6163] ? static_key_count+0x5a/0x70 [ 121.255649][ T6163] ? security_task_prctl+0x11c/0x160 [ 121.255693][ T6163] __do_sys_prctl+0x317/0x2220 [ 121.255728][ T6163] ? __pfx___do_sys_prctl+0x10/0x10 [ 121.255772][ T6163] do_syscall_64+0xcd/0xf80 [ 121.255814][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.255844][ T6163] RIP: 0033:0x7f624118f7c9 [ 121.255868][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.255896][ T6163] RSP: 002b:00007f623f3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 121.255926][ T6163] RAX: ffffffffffffffda RBX: 00007f62413e6180 RCX: 00007f624118f7c9 [ 121.255947][ T6163] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 121.255965][ T6163] RBP: 00007f6241213f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.255984][ T6163] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 121.256000][ T6163] R13: 00007f62413e6218 R14: 00007f62413e6180 R15: 00007ffc6c839c88 [ 121.256040][ T6163] [ 122.535024][ T6167] netlink: 252 bytes leftover after parsing attributes in process `syz.1.64'. [ 122.647778][ T6171] netlink: 342 bytes leftover after parsing attributes in process `syz.2.63'. [ 123.591878][ T6184] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.649143][ T6167] netlink: 252 bytes leftover after parsing attributes in process `syz.1.64'. [ 123.843854][ T6187] FAULT_INJECTION: forcing a failure. [ 123.843854][ T6187] name failslab, interval 1, probability 0, space 0, times 0 [ 123.870683][ T6187] CPU: 1 UID: 0 PID: 6187 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT(full) [ 123.870729][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.870758][ T6187] Call Trace: [ 123.870774][ T6187] [ 123.870787][ T6187] dump_stack_lvl+0x16c/0x1f0 [ 123.870834][ T6187] should_fail_ex+0x512/0x640 [ 123.870883][ T6187] ? __kmalloc_noprof+0xca/0x910 [ 123.870919][ T6187] should_failslab+0xc2/0x120 [ 123.870966][ T6187] __kmalloc_noprof+0xeb/0x910 [ 123.870998][ T6187] ? __pfx_inc_ucount+0x10/0x10 [ 123.871025][ T6187] ? net_alloc_generic+0x1e/0x70 [ 123.871066][ T6187] ? net_alloc_generic+0x1e/0x70 [ 123.871096][ T6187] net_alloc_generic+0x1e/0x70 [ 123.871131][ T6187] copy_net_ns+0xc6/0x7c0 [ 123.871165][ T6187] ? copy_cgroup_ns+0x71/0x980 [ 123.871199][ T6187] create_new_namespaces+0x3ea/0xab0 [ 123.871261][ T6187] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 123.871308][ T6187] ksys_unshare+0x45b/0xa40 [ 123.871358][ T6187] ? __pfx_ksys_unshare+0x10/0x10 [ 123.871406][ T6187] ? xfd_validate_state+0x61/0x180 [ 123.871447][ T6187] __x64_sys_unshare+0x31/0x40 [ 123.871669][ T6187] do_syscall_64+0xcd/0xf80 [ 123.871707][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.871740][ T6187] RIP: 0033:0x7f624118f7c9 [ 123.871762][ T6187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.871784][ T6187] RSP: 002b:00007f6241f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.871808][ T6187] RAX: ffffffffffffffda RBX: 00007f62413e5fa0 RCX: 00007f624118f7c9 [ 123.871823][ T6187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 123.871844][ T6187] RBP: 00007f6241213f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.871869][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.871887][ T6187] R13: 00007f62413e6038 R14: 00007f62413e5fa0 R15: 00007ffc6c839c88 [ 123.871930][ T6187] [ 124.539036][ T30] audit: type=1800 audit(1765574843.628:8): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.56" name="lu_gp_id" dev="configfs" ino=9487 res=0 errno=0 [ 126.910345][ T6240] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.199642][ T6246] mmap: syz.3.73 (6246) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.433630][ T6248] FAULT_INJECTION: forcing a failure. [ 127.433630][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 127.485149][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.3.74 Not tainted syzkaller #0 PREEMPT(full) [ 127.485180][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.485191][ T6248] Call Trace: [ 127.485198][ T6248] [ 127.485206][ T6248] dump_stack_lvl+0x16c/0x1f0 [ 127.485248][ T6248] should_fail_ex+0x512/0x640 [ 127.485277][ T6248] ? kmem_cache_alloc_noprof+0x62/0x770 [ 127.485301][ T6248] should_failslab+0xc2/0x120 [ 127.485339][ T6248] kmem_cache_alloc_noprof+0x83/0x770 [ 127.485361][ T6248] ? create_new_namespaces+0x30/0xab0 [ 127.485391][ T6248] ? create_new_namespaces+0x30/0xab0 [ 127.485415][ T6248] create_new_namespaces+0x30/0xab0 [ 127.485440][ T6248] ? bpf_lsm_capable+0x9/0x10 [ 127.485464][ T6248] ? security_capable+0x7e/0x260 [ 127.485495][ T6248] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 127.485533][ T6248] ksys_unshare+0x45b/0xa40 [ 127.485562][ T6248] ? __pfx_ksys_unshare+0x10/0x10 [ 127.485592][ T6248] ? xfd_validate_state+0x61/0x180 [ 127.485616][ T6248] __x64_sys_unshare+0x31/0x40 [ 127.485644][ T6248] do_syscall_64+0xcd/0xf80 [ 127.485669][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.485687][ T6248] RIP: 0033:0x7f4c36b8f7c9 [ 127.485703][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.485720][ T6248] RSP: 002b:00007f4c37b06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 127.485738][ T6248] RAX: ffffffffffffffda RBX: 00007f4c36de5fa0 RCX: 00007f4c36b8f7c9 [ 127.485750][ T6248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 127.485760][ T6248] RBP: 00007f4c36c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.485770][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.485781][ T6248] R13: 00007f4c36de6038 R14: 00007f4c36de5fa0 R15: 00007ffed6f759b8 [ 127.485803][ T6248] [ 128.126914][ T6262] process 'syz.0.85' launched './file0' with NULL argv: empty string added [ 128.732313][ T6273] FAULT_INJECTION: forcing a failure. [ 128.732313][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 128.784965][ T6273] CPU: 1 UID: 0 PID: 6273 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 128.785005][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.785022][ T6273] Call Trace: [ 128.785033][ T6273] [ 128.785045][ T6273] dump_stack_lvl+0x16c/0x1f0 [ 128.785087][ T6273] should_fail_ex+0x512/0x640 [ 128.785128][ T6273] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 128.785178][ T6273] should_failslab+0xc2/0x120 [ 128.785221][ T6273] kmem_cache_alloc_node_noprof+0x86/0x800 [ 128.785256][ T6273] ? __alloc_skb+0x156/0x410 [ 128.785308][ T6273] ? __alloc_skb+0x156/0x410 [ 128.785350][ T6273] __alloc_skb+0x156/0x410 [ 128.785391][ T6273] ? __alloc_skb+0x35d/0x410 [ 128.785432][ T6273] ? __pfx___alloc_skb+0x10/0x10 [ 128.785476][ T6273] ? find_held_lock+0x2b/0x80 [ 128.785515][ T6273] ? process_measurement+0x4a6/0x22d0 [ 128.785554][ T6273] ? down_write+0x14d/0x200 [ 128.785602][ T6273] alloc_skb_with_frags+0xe0/0x860 [ 128.785637][ T6273] ? process_measurement+0x1e6/0x22d0 [ 128.785680][ T6273] sock_alloc_send_pskb+0x7f9/0x980 [ 128.785725][ T6273] ? __lock_acquire+0x436/0x2890 [ 128.785765][ T6273] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 128.785830][ T6273] unix_dgram_sendmsg+0x3bc/0x1830 [ 128.785880][ T6273] ? tomoyo_socket_sendmsg_permission+0x14c/0x3c0 [ 128.785918][ T6273] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 128.785956][ T6273] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 128.786010][ T6273] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 128.786070][ T6273] ____sys_sendmsg+0xa5d/0xc30 [ 128.786109][ T6273] ? copy_msghdr_from_user+0x10a/0x160 [ 128.786139][ T6273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.786193][ T6273] ? __pfx__kstrtoull+0x10/0x10 [ 128.786234][ T6273] ___sys_sendmsg+0x134/0x1d0 [ 128.786267][ T6273] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.786317][ T6273] ? find_held_lock+0x2b/0x80 [ 128.786377][ T6273] __sys_sendmmsg+0x200/0x420 [ 128.786413][ T6273] ? __pfx___sys_sendmmsg+0x10/0x10 [ 128.786457][ T6273] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.786512][ T6273] ? fput+0x70/0xf0 [ 128.786541][ T6273] ? ksys_write+0x1ac/0x250 [ 128.786579][ T6273] ? __pfx_ksys_write+0x10/0x10 [ 128.786628][ T6273] __x64_sys_sendmmsg+0x9c/0x100 [ 128.786658][ T6273] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.786693][ T6273] do_syscall_64+0xcd/0xf80 [ 128.786732][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.786762][ T6273] RIP: 0033:0x7f0f4818f7c9 [ 128.786786][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.786813][ T6273] RSP: 002b:00007f0f463d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 128.786842][ T6273] RAX: ffffffffffffffda RBX: 00007f0f483e6180 RCX: 00007f0f4818f7c9 [ 128.786861][ T6273] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 128.786878][ T6273] RBP: 00007f0f463d5090 R08: 0000000000000000 R09: 0000000000000000 [ 128.786895][ T6273] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 128.786912][ T6273] R13: 00007f0f483e6218 R14: 00007f0f483e6180 R15: 00007ffd735ca2a8 [ 128.786952][ T6273] [ 129.590754][ T6282] FAULT_INJECTION: forcing a failure. [ 129.590754][ T6282] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 129.642783][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(full) [ 129.642823][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.642841][ T6282] Call Trace: [ 129.642851][ T6282] [ 129.642863][ T6282] dump_stack_lvl+0x16c/0x1f0 [ 129.642902][ T6282] should_fail_ex+0x512/0x640 [ 129.642953][ T6282] should_fail_alloc_page+0xe7/0x130 [ 129.643002][ T6282] prepare_alloc_pages+0x401/0x670 [ 129.643047][ T6282] ? __lock_acquire+0x436/0x2890 [ 129.643078][ T6282] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 129.643126][ T6282] ? __lock_acquire+0x436/0x2890 [ 129.643155][ T6282] ? css_rstat_updated+0x1c2/0x510 [ 129.643184][ T6282] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 129.643218][ T6282] ? __pfx_css_rstat_updated+0x10/0x10 [ 129.643262][ T6282] ? find_held_lock+0x2b/0x80 [ 129.643298][ T6282] ? local_lock_release+0x99/0x130 [ 129.643327][ T6282] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.643372][ T6282] ? policy_nodemask+0xea/0x4e0 [ 129.643417][ T6282] alloc_pages_mpol+0x1fb/0x550 [ 129.643460][ T6282] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 129.643517][ T6282] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 129.643569][ T6282] alloc_pages_noprof+0x131/0x390 [ 129.643612][ T6282] pgd_alloc+0x4b/0x630 [ 129.643654][ T6282] mm_init+0x734/0x1140 [ 129.643695][ T6282] mm_alloc+0x9f/0xc0 [ 129.643732][ T6282] alloc_bprm+0x2af/0x710 [ 129.643772][ T6282] do_execveat_common.isra.0+0x1ce/0x610 [ 129.643818][ T6282] __x64_sys_execve+0x8e/0xb0 [ 129.643857][ T6282] do_syscall_64+0xcd/0xf80 [ 129.643894][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.643923][ T6282] RIP: 0033:0x7f0f4818f7c9 [ 129.643947][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.643972][ T6282] RSP: 002b:00007f0f48f4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 129.643999][ T6282] RAX: ffffffffffffffda RBX: 00007f0f483e5fa0 RCX: 00007f0f4818f7c9 [ 129.644018][ T6282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 129.644034][ T6282] RBP: 00007f0f48f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 129.644051][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.644066][ T6282] R13: 00007f0f483e6038 R14: 00007f0f483e5fa0 R15: 00007ffd735ca2a8 [ 129.644104][ T6282] [ 130.508652][ T6293] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.945866][ T6299] random: crng reseeded on system resumption [ 130.979697][ T6299] hub 1-0:1.0: USB hub found [ 130.989068][ T6299] hub 1-0:1.0: 1 port detected [ 131.005330][ T6299] Restarting kernel threads ... [ 131.015826][ T6299] Done restarting kernel threads. [ 131.678190][ T6317] FAULT_INJECTION: forcing a failure. [ 131.678190][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.772078][ T6317] CPU: 1 UID: 0 PID: 6317 Comm: syz.1.91 Not tainted syzkaller #0 PREEMPT(full) [ 131.772119][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.772137][ T6317] Call Trace: [ 131.772146][ T6317] [ 131.772157][ T6317] dump_stack_lvl+0x16c/0x1f0 [ 131.772201][ T6317] should_fail_ex+0x512/0x640 [ 131.772250][ T6317] _copy_from_user+0x2e/0xd0 [ 131.772308][ T6317] copy_strings.isra.0+0x3a7/0x990 [ 131.772365][ T6317] do_execveat_common.isra.0+0x397/0x610 [ 131.772411][ T6317] __x64_sys_execve+0x8e/0xb0 [ 131.772452][ T6317] do_syscall_64+0xcd/0xf80 [ 131.772492][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.772520][ T6317] RIP: 0033:0x7f0f4818f7c9 [ 131.772544][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.772571][ T6317] RSP: 002b:00007f0f48f4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 131.772598][ T6317] RAX: ffffffffffffffda RBX: 00007f0f483e5fa0 RCX: 00007f0f4818f7c9 [ 131.772618][ T6317] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000180 [ 131.772638][ T6317] RBP: 00007f0f48f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 131.772656][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.772673][ T6317] R13: 00007f0f483e6038 R14: 00007f0f483e5fa0 R15: 00007ffd735ca2a8 [ 131.772713][ T6317] [ 132.548647][ T6332] Invalid ELF header magic: != ELF [ 132.598627][ T6335] [ 132.601366][ T6335] ====================================================== [ 132.608636][ T6335] WARNING: possible circular locking dependency detected [ 132.616036][ T6335] syzkaller #0 Not tainted [ 132.621151][ T6335] ------------------------------------------------------ [ 132.628635][ T6335] syz.3.98/6335 is trying to acquire lock: [ 132.634650][ T6335] ffff8880256516d8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 132.647062][ T6335] [ 132.647062][ T6335] but task is already holding lock: [ 132.654885][ T6335] ffff888025650260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 132.664415][ T6335] [ 132.664415][ T6335] which lock already depends on the new lock. [ 132.664415][ T6335] [ 132.675464][ T6335] [ 132.675464][ T6335] the existing dependency chain (in reverse order) is: [ 132.684681][ T6335] [ 132.684681][ T6335] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 132.692809][ T6335] lock_sock_nested+0x41/0xf0 [ 132.698656][ T6335] smc_listen_out+0x202/0x4a0 [ 132.703964][ T6335] smc_listen_work+0x5a3/0x50b0 [ 132.712841][ T6335] process_one_work+0x9ba/0x1b20 [ 132.719132][ T6335] worker_thread+0x6c8/0xf10 [ 132.724698][ T6335] kthread+0x3c5/0x780 [ 132.729821][ T6335] ret_from_fork+0x983/0xb10 [ 132.735766][ T6335] ret_from_fork_asm+0x1a/0x30 [ 132.742141][ T6335] [ 132.742141][ T6335] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 132.754225][ T6335] __lock_acquire+0x1669/0x2890 [ 132.760166][ T6335] lock_acquire+0x179/0x330 [ 132.765649][ T6335] __flush_work+0x4e4/0xcc0 [ 132.771283][ T6335] cancel_work_sync+0xd1/0xf0 [ 132.777472][ T6335] smc_clcsock_release+0x5f/0xe0 [ 132.783165][ T6335] __smc_release+0x5c2/0x880 [ 132.788397][ T6335] smc_close_non_accepted+0xda/0x200 [ 132.794517][ T6335] smc_close_active+0xc3c/0x1070 [ 132.800091][ T6335] __smc_release+0x634/0x880 [ 132.806174][ T6335] smc_release+0x1fc/0x620 [ 132.811220][ T6335] __sock_release+0xb3/0x270 [ 132.816614][ T6335] sock_close+0x1c/0x30 [ 132.821343][ T6335] __fput+0x402/0xb70 [ 132.826076][ T6335] task_work_run+0x150/0x240 [ 132.832033][ T6335] exit_to_user_mode_loop+0xfb/0x540 [ 132.838044][ T6335] do_syscall_64+0x4ee/0xf80 [ 132.843533][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.850415][ T6335] [ 132.850415][ T6335] other info that might help us debug this: [ 132.850415][ T6335] [ 132.861008][ T6335] Possible unsafe locking scenario: [ 132.861008][ T6335] [ 132.868812][ T6335] CPU0 CPU1 [ 132.875476][ T6335] ---- ---- [ 132.881400][ T6335] lock(sk_lock-AF_SMC/1); [ 132.886103][ T6335] lock((work_completion)(&new_smc->smc_listen_work)); [ 132.896022][ T6335] lock(sk_lock-AF_SMC/1); [ 132.903358][ T6335] lock((work_completion)(&new_smc->smc_listen_work)); [ 132.910603][ T6335] [ 132.910603][ T6335] *** DEADLOCK *** [ 132.910603][ T6335] [ 132.919134][ T6335] 3 locks held by syz.3.98/6335: [ 132.924353][ T6335] #0: ffff88805c02c148 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 132.935199][ T6335] #1: ffff888025650260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 132.944988][ T6335] #2: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 132.954586][ T6335] [ 132.954586][ T6335] stack backtrace: [ 132.960762][ T6335] CPU: 0 UID: 0 PID: 6335 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(full) [ 132.960794][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.960808][ T6335] Call Trace: [ 132.960819][ T6335] [ 132.960829][ T6335] dump_stack_lvl+0x116/0x1f0 [ 132.960863][ T6335] print_circular_bug+0x275/0x340 [ 132.960903][ T6335] check_noncircular+0x146/0x160 [ 132.960943][ T6335] __lock_acquire+0x1669/0x2890 [ 132.960965][ T6335] ? __debug_object_init+0x2de/0x3d0 [ 132.960998][ T6335] lock_acquire+0x179/0x330 [ 132.961018][ T6335] ? __flush_work+0x4d0/0xcc0 [ 132.961047][ T6335] ? mark_held_locks+0x49/0x80 [ 132.961067][ T6335] ? __flush_work+0x4d0/0xcc0 [ 132.961094][ T6335] __flush_work+0x4e4/0xcc0 [ 132.961120][ T6335] ? __flush_work+0x4d0/0xcc0 [ 132.961148][ T6335] ? __pfx___flush_work+0x10/0x10 [ 132.961177][ T6335] ? __pfx_wq_barrier_func+0x10/0x10 [ 132.961214][ T6335] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.961240][ T6335] ? __pfx___might_resched+0x10/0x10 [ 132.961276][ T6335] cancel_work_sync+0xd1/0xf0 [ 132.961307][ T6335] smc_clcsock_release+0x5f/0xe0 [ 132.961332][ T6335] __smc_release+0x5c2/0x880 [ 132.961354][ T6335] ? __pfx_sock_def_readable+0x10/0x10 [ 132.961391][ T6335] smc_close_non_accepted+0xda/0x200 [ 132.961416][ T6335] smc_close_active+0xc3c/0x1070 [ 132.961442][ T6335] __smc_release+0x634/0x880 [ 132.961463][ T6335] smc_release+0x1fc/0x620 [ 132.961483][ T6335] ? kmem_cache_free+0xfa/0x770 [ 132.961519][ T6335] __sock_release+0xb3/0x270 [ 132.961546][ T6335] ? __pfx_sock_close+0x10/0x10 [ 132.961570][ T6335] sock_close+0x1c/0x30 [ 132.961594][ T6335] __fput+0x402/0xb70 [ 132.961617][ T6335] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.961643][ T6335] task_work_run+0x150/0x240 [ 132.961668][ T6335] ? __pfx_task_work_run+0x10/0x10 [ 132.961691][ T6335] ? __do_sys_close_range+0x278/0x730 [ 132.961731][ T6335] exit_to_user_mode_loop+0xfb/0x540 [ 132.961761][ T6335] do_syscall_64+0x4ee/0xf80 [ 132.961790][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.961815][ T6335] RIP: 0033:0x7f4c36b8f7c9 [ 132.961835][ T6335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.961857][ T6335] RSP: 002b:00007ffed6f75b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 132.961881][ T6335] RAX: 0000000000000000 RBX: 0000000000020574 RCX: 00007f4c36b8f7c9 [ 132.961896][ T6335] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 132.961910][ T6335] RBP: 00007f4c36de7da0 R08: 0000000000000001 R09: 0000001ed6f75e0f [ 132.961924][ T6335] R10: 0000001b30420000 R11: 0000000000000246 R12: 00007f4c36de5fac [ 132.961939][ T6335] R13: 00007f4c36de5fa0 R14: ffffffffffffffff R15: 00007ffed6f75c30 [ 132.961961][ T6335] [ 133.346005][ T6339] caif:caif_disconnect_client(): nothing to disconnect [ 138.196939][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.204031][ T1301] ieee802154 phy1 wpan1: encryption failed: -22