last executing test programs: 1m39.164898084s ago: executing program 2 (id=2008): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) r1 = socket(0x10, 0x2, 0x0) bind$auto(r1, 0x0, 0x68) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) close_range$auto(0x2, 0x8, 0x0) timer_create$auto(0x0, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto(r0, 0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m38.481309102s ago: executing program 2 (id=2011): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}, @NETDEV_A_QUEUE_TYPE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) connect$auto(r0, &(0x7f0000000040)=@xdp={0x2c, 0x6, r4, 0x25}, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_names\x00', 0x40, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x62, 0x27dd) ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, 0x0, 0x1000, 0xfff) process_vm_readv$auto(0x0, &(0x7f00000001c0)={&(0x7f0000000180)="77d87c0e9a9ccce885045dc4a827b49f", 0x9}, 0x776, &(0x7f0000000200)={&(0x7f0000000280)="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", 0x80000000}, 0x1ff, 0x2) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\b\x00\x00\x00\x00\x00\x00\x00\x01\x88\v\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\b\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) 1m38.319659215s ago: executing program 2 (id=2012): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_make_request/space\x00', 0x48981, 0x0) write$auto(r0, &(0x7f0000000200)='0\x00\xa6C\x1b\xad\xb1\x9e\xc8Tt\xa8\x87\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\xaf\x14\x8a\xcf\xe8\xe8,-d\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xf6\xf1\xe9\x17\xb3\xc1\x13\x00\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3Ch\x03&\x1c\r&\xf9i\xa8\x01\xdbBr\'\x83\'d`\x05\x10\x9d\x8f*E\xfb\x9c\rTD\xa3\xc5\x1bWZ\xb8Q7]E\x84v\x17M\xd3\xf3\x1c\xd4.\vA\xad\x88\x85\xe3vi\xd6', 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sysfs$auto(0x1, 0x4, 0x41) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0x7, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/xfrm0/router_solicitation_max_interval\x00', 0x80080, 0x0) ioctl$auto(0xffffffffffffffff, 0x40a0ae49, 0xffffffffffffffff) 1m37.749251106s ago: executing program 2 (id=2013): open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) socket(0x2, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x181040, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/maximum_speed\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 1m37.563162296s ago: executing program 2 (id=2014): mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0xda45, &(0x7f0000000080)={0xd2, 0x4, 0x800, @raw=0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r0 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r0, &(0x7f0000000040)={{&(0x7f0000000140), 0xff, &(0x7f0000000280)={0x0, 0x4e}, 0x7, 0x0, 0x0, 0x3}, 0x5}, 0x9, 0xf0) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = seccomp$auto(0x9, 0x1ff, &(0x7f0000000180)="24936d9b9c97233586e0c7733b2a5a8b25e2f5329e4f6bc509c62ace8cb26081c6dc40d671ec9a4ab431b89a011100309abbd2eef41d4cd2f1ebc0fa6d23557d7599a2b9d847c90409b455cab31989cf8c55bb640a8f909f6a83acb5a800dfaf7ec9ace013d0b608ba34fd57c7f887ed4ceeb002bd61861ff8444c6e63473f71b67689eeba2a8cfee900c1dce66055de7c1e6fbb8584b1f2d30321a75cbf21fc57e36ccaf1fcfd610d7a1ec848c3e4323af84dc079689574c36e0d35a93790202faf0257f4fa4045936606bcc744302a332e2077da3e366f16a998f6ac31b67c5da5ebe637c467ef18ae6e298bdc54e7b4535ebb0d154695d5") fsconfig$auto_FSCONFIG_CMD_CREATE(r2, 0x6, &(0x7f0000000280)='&$^\x00', &(0x7f00000002c0)="a812f3d649456d5cc1b56cd709d737c923e1d27c7d2a551a0923e1573371b1907a1ddb197af237da5e5833746eea44e68a6389e4e6c72c5119a724573384915b66040831b43815ebd6f2cb981fb6a947135894dab3c0b6003597ac5f57280ceadf0504293af26959ad", 0xa) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket(0x2c, 0x80003, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev7\x00', 0x141083, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x6, 0xd, 0x8fd6, 0x948b, 0x4, 0xe, 0x100000000003, 0x3, 0x62, 0x80000001, 0x40000000000007, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) 1m36.434815912s ago: executing program 2 (id=2017): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={0x0, 0x500000}, 0x9) socket(0xa, 0x1, 0x84) 1m21.125393213s ago: executing program 32 (id=2017): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={0x0, 0x500000}, 0x9) socket(0xa, 0x1, 0x84) 38.751136734s ago: executing program 3 (id=2257): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 38.044983372s ago: executing program 3 (id=2261): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r3}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}, @NETDEV_A_QUEUE_TYPE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_names\x00', 0x40, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x1, 0x7ff) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x62, 0x27dd) ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, r4, 0x1000, 0xfff) process_vm_readv$auto(r4, &(0x7f00000001c0)={&(0x7f0000000180)="77d87c0e9a9ccce885045dc4a827b49f", 0x9}, 0x776, &(0x7f0000000200)={&(0x7f0000000280)="74eb8469d321e7ed8717f7e3048ac924163fa56155f90e7a645d50eef54310aaa34a4a977ed2a0a7050e2cea57aa393405b0a0f56fb790263247491df86ec83e4b865ee98dce871a70b8025a6a6bc06fd175a1981cb84d63bd5abe1a4dfc29b230c4ffebc7688f3e4ec0395409b76d1c4402ca264a59031555713550991ed14b1dc7223adfdceafe89f94d39ab91f74543472735eeccc7ca5097d8c701f2450ee5ab99d67562469bf408d45793d5d033f31bde0da95d32f1ffed80a66ab2bd92dd1f61363438f470e9b33db7c640e1160193b18ed110b30875e31707419934c8aaa2efa4342d9a0d05612ff8a9b0da06af1c4613a0cf850c5e528a548bdb92bfbdef536b1175db3433129db33f40fa6c73e89c78fe6aac3d71bc85b79fb2208a941416b1b70da8d3e25a090bfe8827e86c18e6838dd95c6d735679c65575bd21ab7fc58695a78e7e5606c22a361b10f84f7b98c9b53843c49da31702d51115ea376eb69780d0ac89e946a2be19fa1878c6785012d031b1e6d5e3d02fab6341a6c569af0e3d9716966c0cfc67705b6f9a578d623f88b0b41bda6869117da31de48eb27dc3394297802311ef4229cc6a3746d8ccfe2aeb010d8f6501987135c29ea2a9672af9646a6d7c6d1a6a1687ea731cbef55260b5781a2c194023b17b3fa0ccba6d6a0e3bb9467e9f37ca991aa310bfc064a88e2061ead900f8c387efe0c5953bccab6cab7202bdb868a337501c475f85118d23ae4300c79a9c050819fb264c8d389f588771ea0e396b5ffc9d1b9bf9fc515edb84266567f6b6a0361a999fc1e826812059c2e271d01a22ee0915c101f29e1421a1d5683d375d21dd5b0e85e4d4e56beb9d26cbdb94861c8d9e362c29dcd00c918e4b10e73a3497022aa4bbc31010cfe571d8b7f501ce27dae5984757665f1ec5cebe49deb62af5d63899bb20b577f00e0fca25d3ddc2d37c3d13ee592f4b9a7c87a655dae12b3c3e537e9afb45c49367b9294fcdc8b90b4fdf5107a06dd0b283fd79bfdeb2beb389e7d3073a3ef8d42f4bb301147a52ecb5a9c082e7f4f05b36d60609dd576638bddf2888bc5997da0bd5bc55f2ad588c995822d4e0744976089f9d72f03d5ed256f5e2fa66c0bc45c5171e2db404516245e930fcb9fd1b0aaf0c90e6ce2541acf93165c63ee9a0868b76912cc697ef5f51112148bc07fcc750a5662034fc24a5fd80c9d2b1555db089fcd6087adbea9c61d7c8816e804ce4d698da9887604b26cead29ca413f8e881939622e6bf14632202a1310d4a9949da841df4b0d6ec7239d980643c61decf4c5534c1450a0e06111e631e937b97e2c2851d368c8ebdf97e592274b5d10c7cb6a29118f9b7da0453757cb45134c5895c519a0fe329ef7656f908517714f7b0d499a94e6ccdb192e0ff8822a959d7e8185e3668e697e8bcf90d28e4e3565b8299ece56291acc9a900427176f618958c1c50ce24bbbf446c9c15bf6c57d489e43da730c19e00aa7745a4068ffb85b131dfa3d324b46f52803de848afcb626682a4569530e8505f0dbc79c412586a2922fa7ed606b2cbf5a774f31d6b68488b36873c2a823d99c9f5cf619c72857c2e2815eccfd9da316e0f3b65cfd140fa620a56c4782e8d1f3c048c3ea4823c6939e690c409fca2521917c4db9c9d4f9fb2ab4f76b23501c2890b62db259083665310e969abb8a4cadc1bdbc206c15bd1c246ac94f1caffd4f076c351bbf51282e1c585ab639f8cad015a36fdb138f56231b3d079ed195ff00c5d24a07d7dd7dd06e40db08e3729cf7d1ef67a8b4a2e00c8d8c9050093a6b2b52080da3c1e77e81ff35b04423310a4609d9e383c213b4261cbf7bef5bb01374ff96a9136296324efa22405433ebcc9ebe315c2e48a33db1304268ae3f47c599e1ddac9e0771f0a6829f004b733065ec3dadbaf025fe7e1e7d9d0563435318854bf4cf7205b72bcdffbb0710349960386ff552d9142de81407a7987cf9b2a2f47925dde658b7112bb0cfb2fc2e500e13a0b97928b0860c67192ae09e6c66611481e38d6e0186dcf5c27a5a5d8c584c41cd8d36f6850b5d9416ba0a6ca33665374a229584a1da960900fb02a3e7a4104975d6195fe60191b6b63692bde4a5e9100236cd83ece739eac1c47ee6eade04c724636a514b9efa6ac53494271d33127d59e2d69991eb5b5f38b6dd64b8d1264bc3379b35ef1ef7454d6a5ec1d4beaeab8b4130afc8d55f0cbbe2d91bed8e4e0bda6e272f2bd4e6ae5b44bcd43affc7e5cdcd2ade59de41bc32b626cf3da9c5516971af3aed3cd6a8cf206d56748efd007d42d4d25f8787d6df43aae8aefe475f4e0d4fc53783ffc910d92f142a15a408adc936bbd8cc89fc3102e5cbc840a7caf757aa67e30edd7955f639050bb456feee6756bb4d37299e96c01840099925bc8bd0156425850f8f5d363d038165f4ec9ec4a7fd1fddcd3f157487070a464c452a017e9398b180b6af6d43848cb997d09138c06282ac943020c276318709c67b8d50ef9758e5e2649eb92fa2360606947d5116c45981042b785bcf50b169e1d43b160242ae4f0780c90205fa13b6202db7f9535b86174c149ea72097ba9e8fc44efb1c433f1ef97a49c280aab1ed8f14dd2575ff0ca8a455ee364c9f47d7f798d53576de8139eacf48c3062f09a8d5175a771570226cbed6dd806590877fd407d961c596e514aea4965a320698c27246f5f821b25c6ad1faeb512d62fff6b3623909f87f5f167eba3e9ab125128dda88a7a4f6b1d9d3b55f185642ac3671a194aba9587cb9cc55a73c9b235b94221e71b05b431a1b51530e4b6546729ce29d63e2f09ebb2b08f1d5e7aef181b9ad3bc66b07e7d74baadc3186616972d59acc37890b6170e88e14ad5b0060e398e91e485e1bbff11d34dba5dff917bbfa8347d422b4489bcfb6161ae682c8728617a12cf6d09ba41d4458087ccba5ed9e23ff9603d158395c18cd034a3165053da3af92fa1c7f082b7809bb3ec8a86a89b5b5b3784876c09e07126989825e6ad35954507babce08c9dd9823852627bf002ff3984ff5ac048f1ab20b403c42394f362b604809108e6c442069866f761f95e7ce4db41c274c8643182d3ea8266861c7dc813063e8515da0d3b0716569efced8df44fa57dfe4eeb07c858086acb73a33711ed6807cb70341a335eae683d259dc816d7f00207a9e1b1a63e77a79708740eb4a2d19ab7788b50423d8cc7ab9c26177321e166fcae528233228bf6775262c98bb9fe0c6afa8122daa6d73416a7cbda5a919737fe5772cc438db1cfc9821ef70e599cab267799df62c8f6d8ad3b9d35ccc2d756434569efb0876c05031a636f490cec433dbe6f048edc5c063ec0e041f3ce2eab3d7ee0ddca8746e6bdf70904932058e0cd042a2328bc558d310d3b42e8f677eee7d57d15d61258b203b75215dab91a250331bdc2e50b261d4fcd8defa7a5c654d50ad66bf6a2c071a270d24fbac72291b34f52b9807638b476d3f5960b1b7a6426a8b486f1c7378947397a3ef39bb0fc80250ac865a05e51634370f3b4a809c1661cbb2e539901ced1c94cc227665a0b37de5701506b415dc79673ba3245426980a8e067042bd8af18c479cea1fd714c7489e9b883c886a6c9de6c7c04465f75c807bfeb9694691ced58c9b2f56045c8e9b36ca3a0f9e228f997abf5353d53785dd6f6a72ddda80ef4480f499c8d4154cafde33cf8269df3225cb736d7e9b2f351c6afa9da3ee26a4fbd52c4c7e57a1dcd10cc9b3bba18b2a6663b8656ce74d2adb8658bd190e8dcb592775e0256002230bc1afdada2cca78be5e74b7617ceadcad4be9df78821766119f8870f596db6e78c8b621fe33d571a3ddc2d773f4e8eab93b0895228ac2f51bc793aadc5d85ae0b47246bf5429a3795a28b3b3f2e6814571c03b8c696471f666a626f8353912b83a6ec1b6ca9063c8203631ad7938ded3ac0fd9d54afda7d3e4043bdd4883d78f6ab61b7e1a82679bf6426e0e477b7f9b6f81b2008c23521a6d157e697c4e1af60c11f33a350ca6328b20d09ae5625d72db6512e228a189317da650a816c81ae0e93738d4ba9543ab1a6f827b8de43e032d80265f741d0545852642f0d5e62dfdd2e97a50b162f9021b97bd665f2d78753fdd0028fd89e234b55d49efe3699b4a3787c844c869860842c84410e9ac4367aa9bdb7509a7dfc1ff453058625b0c5c29d93d7a539e5047515bfc453df49b25c86a45e956c9eb5e23327f5dc0200b82c5c6d935a7a5dd2c9cff522115a4b0206dda585918162d6adb60037cde17f9b30344b546a276a43f74565dccbe8a1e1d8ea65574773c42e49a6ff0f8c01afc1e265590500dff648bc98a0f4747bcba7033f1b7d2a593c991163545f9cf43fb94a637f7526eed96958b60ca16733db437a12a759c3c03de7f8f5d5846f4f0aa2bc9dcb57e3376791fa537e8a5fa7058c3c1403b64bd59be1814d9018ffcca68b7ecd613eee62ae6e3b2012a99404bae35bdce801eb9ce5051cbce8d1dbc28072bd1e38e0a1b167379e0ba9277336bc76240eeb595fcd76dde079c64c1523e77414ad783f2130cca3c89262d1a1b55acc30bd3b37c5cbdde0daa1613d1cf5bb1bbf26396000219604189a9893dc292cdb3f851987a1e746b6fa3fb01a82137e56c4b5b87fb25cfa2134226e61b4b7be2de61913c4d6828e7be380b65a72a65719a98f0b638a1de4670c0b7d720375eb68fcebfb7b8fc3d5120f4f427d51fa2ad6ee27ab11bfc591d23c9d9e938e040897d64d1b450b6e0d3fd4bb2590f5f85e5fe9672d1303cafdbfea5b0fac18fc3c4463ba3b1f07bdb4a5d23d1052139c20fc379ecce55e724f5b46a72e748fb6c65d8499ee6a012383553f9207a96d76b41aa57a0f8b51b5000eb72ac597280099ae280e4c5a6bb9447e1204152a93f5e4ca0a979c3603b4072783d8a07e2b58031a4d16137081f28525f52cc1702f049538fbc762464df55cfe995578c72ff47c0f189029c8389e44e25aed3897ca75ded053bc0a660e3a48cae37e80beb4474af8ff826d08192f5819168827f487647d81ca7af0b9fdbb870390a345093abc59b3a04eeea1cf29d2c79b33015a74032e18c56a7f55f6ec959fe1047254d79dfd30b494ad3c92229b3e883cd46c750e9f38cc21a1866d76b205853997f17996d937494ebe7586c7f94766e96b9baec7be1faabdbf3cfffd05713d733184cdde43233b531bf63f9b0c60be9a07ca69cf7010c1030f1458da8ddc0b4b346edd48b92e2d4cd3d34c8e9cf9038caf35e632a3564cf3662f92d24a3ed1908e74d2998121df0e4ee70c9e96897513f19f4bd1e482e8ae5501d32f60c04507d65675eae7f014e3c94de333fa79bb82265389b0663a2d5170ca7aa0d6e3ed0314accd86ec02de3f16693384182843a9cb96e29cbb5ea678c18f39e6d220ac7959c9aae231ad3e06b1b684db9c61a5f2e061fff5d718dad9aeefc2662eeb6234c7dd84a1de6d9ddff1203d3ca38fdf921ef46856f3c1e66c1360988c44d061f79e8824333b8652dfe57809fcf295853b940a98d0b083c754b149936b2e0553e35c6e119a30ba0ba5384fffd50f14c080f0837ff7b5324be664dbbcd06d48fd5d2e95cf7267475edd491b83651a619831db29663ca8a3965b5fd69e494e87551339c7312376071187136ded47781c7be2e2a111f295b9c0abf3ac595bfadc30a4888056112f691cd618572556859f524cb143cd29058c6a246f1a03e442b2a3811a4f54235f8e487aac", 0x80000000}, 0x1ff, 0x2) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\b\x00\x00\x00\x00\x00\x00\x00\x01\x88\v\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\b\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) 37.738797094s ago: executing program 3 (id=2264): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40081}, 0x20000c50) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x804) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80a040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x8, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80009, 0x0, 0x1, 0x0, 0x4, 0x9}, 0x3}, 0x3, 0x9) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008060}, 0x9c1e69dda35d178a) shutdown$auto(0x200000003, 0x2) recvfrom$auto(r0, 0x0, 0x800000000c, 0x1003, 0x0, 0xfffffffffffffffd) 37.619054022s ago: executing program 3 (id=2265): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket(0x10, 0x2, 0x0) bind$auto(r1, 0x0, 0x68) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) close_range$auto(0x2, 0x8, 0x0) timer_create$auto(0x0, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) mmap$auto(0x40, 0x400008, 0xdf, 0x18, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto(r0, 0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 37.120713374s ago: executing program 3 (id=2267): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101040, 0x33903f3ada88772b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0x11, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty36\x00', 0x80000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x161342, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80900, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 36.883714454s ago: executing program 3 (id=2272): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) 21.546900832s ago: executing program 33 (id=2272): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) 10.253284189s ago: executing program 0 (id=2361): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) r1 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r1, 0x11) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 8.769574524s ago: executing program 0 (id=2367): bpf$auto(0xaa0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x3, 0xfd0, 0xa0, 0x2878, 0x8, 0x7, 0x0, 0xfffffffd, 0x1000, 0x2, 0xa, 0xfffffff8, 0x7, 0xf}, 0x660e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0) pread64$auto(r2, 0x0, 0xd00, 0x2) ioctl$auto_AUTOFS_IOC_SETTIMEOUT32(r0, 0xc0049364, &(0x7f0000000080)=0xfffffffb) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x82002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKDISCARDZEROES(r4, 0x127c, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x1000060}, 0x400c080) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r7, 0x320, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 8.358292905s ago: executing program 0 (id=2368): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0xdd, 0x1a, 0x5) r1 = socket(0x25, 0x1, 0x0) sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8400) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x100, 0x4, 0xffffffffffff8001, 0x18, r2, 0xd3d) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) bind$auto(0x3, 0x0, 0x6d) 7.239877451s ago: executing program 0 (id=2376): bpf$auto(0xaa0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x3, 0xfd0, 0xa0, 0x2878, 0x8, 0x7, 0x0, 0xfffffffd, 0x1000, 0x2, 0xa, 0xfffffff8, 0x7, 0xf}, 0x660e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0) pread64$auto(r2, 0x0, 0xd00, 0x2) ioctl$auto_AUTOFS_IOC_SETTIMEOUT32(r0, 0xc0049364, &(0x7f0000000080)=0xfffffffb) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x82002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKDISCARDZEROES(r4, 0x127c, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x1000060}, 0x400c080) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, 0x0, 0x320, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 6.847391274s ago: executing program 0 (id=2378): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}, @NETDEV_A_QUEUE_TYPE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_names\x00', 0x40, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x1, 0x7ff) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x62, 0x27dd) ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, r5, 0x1000, 0xfff) process_vm_readv$auto(r5, &(0x7f00000001c0)={&(0x7f0000000180)="77d87c0e9a9ccce885045dc4a827b49f", 0x9}, 0x776, &(0x7f0000000200)={&(0x7f0000000280)="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", 0x80000000}, 0x1ff, 0x2) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\b\x00\x00\x00\x00\x00\x00\x00\x01\x88\v\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\b\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) 6.333281367s ago: executing program 0 (id=2380): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r0, 0x540a, 0x0) unshare$auto(0x40000080) unshare$auto(0x6) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0) link$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0xa, 0x5, 0x84) init_module$auto(0x0, 0xffff9, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000180), r2) geteuid() sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3b0, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSLVL={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xa4}]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}, @NLBL_CIPSOV4_A_MLSCAT={0x379, 0xb, 0x0, 0x1, [@nested={0xed, 0x54, 0x0, 0x1, [@generic="c59492b8140338fc96668b8962b60a2c1b2c3915f2819ae1f209e0d34d8087b768d08f3d70681b62f2b182932ee7471b82054d707b2c2e78adb1e1e8b68a4a355bfab256fcda4490437a208de344641d0ae1b8cea697aae2c4093d6645bfd09d3e2ce25452e57ca1e747006b83cddc0d9b8e1d2a899728d870bdecd9d3bb5d1d264687d661550ff383f6481975c28fc1848447cf55d4338c68ece658dcd306d6cb5f4c6caaaf7430fd6ad8e42ec49424417dee25b7cc4b55f94addfa69c3af0e243409d5d44a6eb01c8fce0ff2872a26be0abc61f5cd6647c49ef761617d62c8d1b57234bef0658a7c"]}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x5}, @generic="de11a9d8ca9a5b677adeedc536e97b8ff8815c51b22adaf5d838c7d11f1228ac0f203c0aab5130d702e94bef9f5b83f4acf778ba12a143100d1c5bc28178bd349e606afbf84b30a87c0ad677c3c7a8abc0ab982727338195450a68d4cd118500ec1459eb65be3893", @generic="9e43c1f484e62390f6ab6ab5b8515ae566c7", @generic="4bb5d8af2baabd94de14e3384654cb72d10e54934e45e1daffdb45aa10445ab0c4724738889dd76bac362c8287613285ee6a4cdc76614ed74700c0b7c9e6877d8322c3b6ae00213cab74ed806276863fb41f6f3056920719562cffc082f09c32ef68dd962f9b6314cc59d0e49639adac30fae6b87e410d3b29097ef8e566d582026eb4f71b2fa610d8f3d3e8af7ad49902595e1fb7eef233590ed7d19de1e41616df157732ab91774d3c7d41efc76ac10a7b47a955e946a8a2fe9170e50a3f7498c1f1b47996da", @generic="87ac1491d9c012bd7ae0347b637d21d6a3fd5eec369270553d503c2a6b7e2bab96f236841cb11c194e6fdde7581a850dcfe6ecc348abecb7b2ce66148517aa03dc7994aec148495002482b57d935418ff5cceed09f01cecbc0aa8f2889721d79fcd28d55a977baa52b16de1f48ba", @typed={0x4, 0x65}, @generic="8e012c3b96c294191240ee404528f9ad6961c7531ed3a365faa74691aca2fa9c4d75183645805db774b0adeb03ceef7db83f28c16a3f83788f4753632db53e3893e16326a9fbf9c3805dd9afe77afb0922d1cd527329e3bd376333f4025ca34fe9dce7c3240c0bd4219b776dff11d93bec33dfa36c2a3292c0ed7c67454fd1246b1c7ceb5ba4cc63e4febd7ad25c57cbabc2ca991bf9b7d2bc96457b8fe3dd5c0e9bd9e7da7b2e14cda6f07b161f43b7f37db5045f302bd25824f9c00dbe", @typed={0x8, 0x32, 0x0, 0x0, @fd=r1}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000081) setgroups$auto(0xe32, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) 5.585528109s ago: executing program 5 (id=2381): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, 0x0, 0xa3) bpf$auto(0x2, 0x0, 0xc) r0 = socket(0xa, 0x1, 0x84) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x4000000) socket(0x23, 0x2, 0x0) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) fanotify_init$auto(0x5, 0x2000000000002) sysfs$auto(0x2, 0x48, 0x0) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x20018810) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) ptrace$auto_PTRACE_GETFPREGS(0xe, r1, 0x8001, 0x9) 5.476904485s ago: executing program 4 (id=2382): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x32, 0x0, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) rseq$auto(0x0, 0x8000, 0x0, 0x6) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) pread64$auto(r2, 0x0, 0x3, 0x5ef6) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), 0xffffffffffffffff) 5.254692819s ago: executing program 5 (id=2383): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0xfdf3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, 0x0) prctl$auto(0x7, 0x3f7, r2, 0xffffffffffffffff, 0x6) write$auto(0x3, 0x0, 0x100082) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x11) 4.609901843s ago: executing program 4 (id=2385): connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x5, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x1ef) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030581e, 0xffffffffffff0001) r4 = socket(0xa, 0x801, 0x84) connect$auto(r4, 0x0, 0x54) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod$auto(0x0, 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) write$auto(r5, 0x0, 0x8e5) 3.472243575s ago: executing program 4 (id=2387): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) r1 = socket(0x10, 0x2, 0x0) bind$auto(r1, 0x0, 0x68) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) close_range$auto(0x2, 0x8, 0x0) timer_create$auto(0x0, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) mmap$auto(0x40, 0x400008, 0xdf, 0x18, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto(r0, 0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 3.088369716s ago: executing program 4 (id=2389): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x80000) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x84) ioperm$auto(0x7, 0x6, 0x2) 2.513191384s ago: executing program 5 (id=2390): r0 = socket(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x804) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80a040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x8, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80009, 0x0, 0x1, 0x0, 0x4, 0x9}, 0x3}, 0x3, 0x9) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008060}, 0x9c1e69dda35d178a) shutdown$auto(0x200000003, 0x2) recvfrom$auto(r0, 0x0, 0x800000000c, 0x1003, 0x0, 0xfffffffffffffffd) 2.237719162s ago: executing program 5 (id=2391): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) write$auto(r1, 0x0, 0x3) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x100102, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84L\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xff\a\x00\x00\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2.141912739s ago: executing program 1 (id=2392): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x14f, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x2b242, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) semctl$auto(0x0, 0xfffffffe, 0x3, 0x7) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 2.034270774s ago: executing program 4 (id=2393): socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}, @NETDEV_A_QUEUE_TYPE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) connect$auto(r0, &(0x7f0000000040)=@xdp={0x2c, 0x6, r4, 0x25}, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_names\x00', 0x40, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x1, 0x7ff) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x62, 0x27dd) ptrace$auto_PTRACE_GET_RSEQ_CONFIGURATION(0x420f, r5, 0x1000, 0xfff) process_vm_readv$auto(r5, &(0x7f00000001c0)={&(0x7f0000000180)="77d87c0e9a9ccce885045dc4a827b49f", 0x9}, 0x776, &(0x7f0000000200)={&(0x7f0000000280)="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", 0x80000000}, 0x1ff, 0x2) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\b\x00\x00\x00\x00\x00\x00\x00\x01\x88\v\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\b\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) 2.021273879s ago: executing program 1 (id=2394): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) r1 = socket(0x10, 0x2, 0x0) bind$auto(r1, 0x0, 0x68) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) close_range$auto(0x2, 0x8, 0x0) timer_create$auto(0x0, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) mmap$auto(0x40, 0x400008, 0xdf, 0x18, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto(r0, 0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1.683071938s ago: executing program 4 (id=2395): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r1, 0x0, 0x5) r3 = socket(0x11, 0xa, 0x9) bind$auto(r3, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 1.330824287s ago: executing program 1 (id=2396): bpf$auto(0xaa0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x3, 0xfd0, 0xa0, 0x2878, 0x8, 0x7, 0x0, 0xfffffffd, 0x1000, 0x2, 0xa, 0xfffffff8, 0x7, 0xf}, 0x660e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0) pread64$auto(r2, 0x0, 0xd00, 0x2) ioctl$auto_AUTOFS_IOC_SETTIMEOUT32(r0, 0xc0049364, &(0x7f0000000080)=0xfffffffb) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x82002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKDISCARDZEROES(r4, 0x127c, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x1000060}, 0x400c080) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, 0x0, 0x320, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.142123691s ago: executing program 5 (id=2397): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, 0x0, 0xa3) bpf$auto(0x2, 0x0, 0xc) r0 = socket(0xa, 0x1, 0x84) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x4000000) socket(0x23, 0x2, 0x0) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) fanotify_init$auto(0x5, 0x2000000000002) sysfs$auto(0x2, 0x48, 0x0) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x20018810) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) ptrace$auto_PTRACE_GETFPREGS(0xe, r1, 0x8001, 0x9) 1.100570572s ago: executing program 1 (id=2398): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x7, 0x100) 751.600362ms ago: executing program 5 (id=2399): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x4) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x6801, 0x0) mmap$auto(0x8, 0x202, 0xdf, 0xeb1, 0x401, 0x4000000000000003) prctl$auto(0x200003b, 0x200000200800000, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x68006, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x0) 397.18319ms ago: executing program 1 (id=2400): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r1, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/105, 0x69) 0s ago: executing program 1 (id=2401): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580), 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) kernel console output (not intermixed with test programs): 0x20e/0x430 [ 251.114282][ T8031] ? __pfx_do_file_open+0x10/0x10 [ 251.114366][ T8031] ? alloc_fd+0x476/0x790 [ 251.114421][ T8031] ? do_getname+0x191/0x390 [ 251.114460][ T8031] do_sys_openat2+0x10d/0x1e0 [ 251.114507][ T8031] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.114562][ T8031] __x64_sys_openat+0x12d/0x210 [ 251.114603][ T8031] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.114660][ T8031] do_syscall_64+0x106/0xf80 [ 251.114696][ T8031] ? clear_bhb_loop+0x40/0x90 [ 251.114741][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.114777][ T8031] RIP: 0033:0x7f6d1319bf79 [ 251.114806][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.114839][ T8031] RSP: 002b:00007f6d14058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.114871][ T8031] RAX: ffffffffffffffda RBX: 00007f6d13415fa0 RCX: 00007f6d1319bf79 [ 251.114894][ T8031] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 251.114916][ T8031] RBP: 00007f6d132327e0 R08: 0000000000000000 R09: 0000000000000000 [ 251.114936][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.114954][ T8031] R13: 00007f6d13416038 R14: 00007f6d13415fa0 R15: 00007fff26076c58 [ 251.114999][ T8031] [ 251.656040][ T5142] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 253.760172][ T5142] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 254.551382][ T8054] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 255.244761][ T8067] openvswitch: HfR: Dropping previously announced user features [ 255.320369][ T8067] FAULT_INJECTION: forcing a failure. [ 255.320369][ T8067] name failslab, interval 1, probability 0, space 0, times 0 [ 255.404094][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.0.593 Not tainted syzkaller #0 PREEMPT(full) [ 255.404146][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.404167][ T8067] Call Trace: [ 255.404179][ T8067] [ 255.404192][ T8067] dump_stack_lvl+0x100/0x190 [ 255.404266][ T8067] should_fail_ex.cold+0x5/0xa [ 255.404307][ T8067] should_failslab+0xc2/0x120 [ 255.404374][ T8067] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 255.404438][ T8067] ? skb_clone+0x190/0x400 [ 255.404482][ T8067] skb_clone+0x190/0x400 [ 255.404520][ T8067] netlink_deliver_tap+0xaed/0xcc0 [ 255.404568][ T8067] netlink_unicast+0x70c/0x870 [ 255.404615][ T8067] ? __pfx_netlink_unicast+0x10/0x10 [ 255.404654][ T8067] ? __alloc_skb+0x5b7/0x710 [ 255.404687][ T8067] ? genl_rcv_msg+0x4be/0x800 [ 255.404743][ T8067] netlink_ack+0x655/0xb80 [ 255.404794][ T8067] netlink_rcv_skb+0x333/0x420 [ 255.404835][ T8067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.404883][ T8067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.404941][ T8067] ? netlink_deliver_tap+0x1ae/0xcc0 [ 255.404986][ T8067] genl_rcv+0x28/0x40 [ 255.405026][ T8067] netlink_unicast+0x5aa/0x870 [ 255.405073][ T8067] ? __pfx_netlink_unicast+0x10/0x10 [ 255.405142][ T8067] netlink_sendmsg+0x8b0/0xda0 [ 255.405190][ T8067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.405229][ T8067] ? __import_iovec+0x1d2/0x640 [ 255.405269][ T8067] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 255.405328][ T8067] ____sys_sendmsg+0xa54/0xc30 [ 255.405380][ T8067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.405433][ T8067] ? try_to_wake_up+0x644/0x1a80 [ 255.405499][ T8067] ___sys_sendmsg+0x190/0x1e0 [ 255.405552][ T8067] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.405601][ T8067] ? futex_private_hash_put+0x107/0x1c0 [ 255.405687][ T8067] __sys_sendmsg+0x170/0x220 [ 255.405725][ T8067] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.405760][ T8067] ? __x64_sys_futex+0x34f/0x4d0 [ 255.405826][ T8067] do_syscall_64+0x106/0xf80 [ 255.405862][ T8067] ? clear_bhb_loop+0x40/0x90 [ 255.405905][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.405941][ T8067] RIP: 0033:0x7f0fc459bf79 [ 255.405971][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.406001][ T8067] RSP: 002b:00007f0fc27d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.406034][ T8067] RAX: ffffffffffffffda RBX: 00007f0fc4816090 RCX: 00007f0fc459bf79 [ 255.406055][ T8067] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 255.406076][ T8067] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 255.406096][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.406115][ T8067] R13: 00007f0fc4816128 R14: 00007f0fc4816090 R15: 00007ffc67fc9418 [ 255.406166][ T8067] [ 255.849473][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.859598][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.161075][ T8074] FAULT_INJECTION: forcing a failure. [ 256.161075][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 256.193893][ T8074] CPU: 0 UID: 0 PID: 8074 Comm: syz.3.597 Not tainted syzkaller #0 PREEMPT(full) [ 256.193940][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.193961][ T8074] Call Trace: [ 256.193971][ T8074] [ 256.193984][ T8074] dump_stack_lvl+0x100/0x190 [ 256.194042][ T8074] should_fail_ex.cold+0x5/0xa [ 256.194081][ T8074] should_failslab+0xc2/0x120 [ 256.194137][ T8074] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 256.194186][ T8074] ? __alloc_skb+0x140/0x710 [ 256.194227][ T8074] __alloc_skb+0x140/0x710 [ 256.194257][ T8074] ? __alloc_skb+0x5b7/0x710 [ 256.194289][ T8074] ? __pfx___alloc_skb+0x10/0x10 [ 256.194327][ T8074] ? sk_page_frag_refill+0x6c/0x340 [ 256.194383][ T8074] kcm_sendmsg+0x1482/0x2fe0 [ 256.194443][ T8074] ? __pfx_kcm_sendmsg+0x10/0x10 [ 256.194482][ T8074] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 256.194540][ T8074] sock_sendmsg+0x3a1/0x430 [ 256.194590][ T8074] ? __pfx_sock_sendmsg+0x10/0x10 [ 256.194665][ T8074] splice_to_socket+0xb4c/0x11b0 [ 256.194715][ T8074] ? touch_atime+0xa5/0x7a0 [ 256.194774][ T8074] ? __pfx_splice_to_socket+0x10/0x10 [ 256.194887][ T8074] ? trace_kmalloc+0x101/0x130 [ 256.194946][ T8074] ? lockdep_init_map_type+0x5c/0x250 [ 256.194992][ T8074] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 256.195042][ T8074] ? __pfx_splice_to_socket+0x10/0x10 [ 256.195096][ T8074] direct_splice_actor+0x192/0x6c0 [ 256.195152][ T8074] splice_direct_to_actor+0x345/0xa30 [ 256.195205][ T8074] ? __pfx_direct_splice_actor+0x10/0x10 [ 256.195264][ T8074] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 256.195332][ T8074] do_splice_direct+0x174/0x240 [ 256.195383][ T8074] ? __pfx_do_splice_direct+0x10/0x10 [ 256.195429][ T8074] ? common_file_perm+0x1ab/0x4f0 [ 256.195464][ T8074] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 256.195515][ T8074] ? bpf_lsm_file_permission+0x9/0x10 [ 256.195562][ T8074] ? security_file_permission+0x76/0x210 [ 256.195600][ T8074] ? rw_verify_area+0xce/0x6d0 [ 256.195647][ T8074] do_sendfile+0xadc/0xe20 [ 256.195700][ T8074] ? __pfx_do_sendfile+0x10/0x10 [ 256.195752][ T8074] ? __x64_sys_futex+0x34f/0x4d0 [ 256.195790][ T8074] ? __x64_sys_futex+0x358/0x4d0 [ 256.195842][ T8074] __x64_sys_sendfile64+0x1d8/0x220 [ 256.195899][ T8074] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 256.195969][ T8074] do_syscall_64+0x106/0xf80 [ 256.196008][ T8074] ? clear_bhb_loop+0x40/0x90 [ 256.196050][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.196084][ T8074] RIP: 0033:0x7f6d1319bf79 [ 256.196111][ T8074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.196142][ T8074] RSP: 002b:00007f6d14058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 256.196174][ T8074] RAX: ffffffffffffffda RBX: 00007f6d13415fa0 RCX: 00007f6d1319bf79 [ 256.196195][ T8074] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 256.196214][ T8074] RBP: 00007f6d132327e0 R08: 0000000000000000 R09: 0000000000000000 [ 256.196233][ T8074] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 256.196253][ T8074] R13: 00007f6d13416038 R14: 00007f6d13415fa0 R15: 00007fff26076c58 [ 256.196296][ T8074] [ 256.592251][ T8080] delete_channel: no stack [ 257.660781][ T8090] netlink: 13 bytes leftover after parsing attributes in process `syz.0.604'. [ 257.750566][ T8091] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 258.561782][ T8100] FAULT_INJECTION: forcing a failure. [ 258.561782][ T8100] name failslab, interval 1, probability 0, space 0, times 0 [ 258.618231][ T8100] CPU: 0 UID: 0 PID: 8100 Comm: syz.1.607 Not tainted syzkaller #0 PREEMPT(full) [ 258.618275][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.618294][ T8100] Call Trace: [ 258.618305][ T8100] [ 258.618318][ T8100] dump_stack_lvl+0x100/0x190 [ 258.618373][ T8100] should_fail_ex.cold+0x5/0xa [ 258.618412][ T8100] should_failslab+0xc2/0x120 [ 258.618466][ T8100] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 258.618513][ T8100] ? __alloc_skb+0x140/0x710 [ 258.618580][ T8100] __alloc_skb+0x140/0x710 [ 258.618612][ T8100] ? __pfx___alloc_skb+0x10/0x10 [ 258.618658][ T8100] tipc_buf_acquire+0x26/0xe0 [ 258.618716][ T8100] tipc_msg_create+0x39/0x1d0 [ 258.618777][ T8100] tipc_group_proto_xmit+0x150/0x7c0 [ 258.618832][ T8100] tipc_group_delete+0xf8/0x4a0 [ 258.618866][ T8100] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 258.618905][ T8100] ? kmem_cache_free+0x44b/0x6a0 [ 258.618942][ T8100] ? __fput+0x68a/0xb40 [ 258.618978][ T8100] ? __pfx_tipc_group_delete+0x10/0x10 [ 258.619025][ T8100] ? __tipc_shutdown+0x855/0xed0 [ 258.619074][ T8100] ? __lock_acquire+0x485/0x2630 [ 258.619125][ T8100] tipc_sk_leave+0x10e/0x1c0 [ 258.619166][ T8100] ? __pfx_tipc_sk_leave+0x10/0x10 [ 258.619206][ T8100] ? __pfx_woken_wake_function+0x10/0x10 [ 258.619262][ T8100] ? tipc_sk_filtering+0x47d/0x590 [ 258.619318][ T8100] tipc_release+0x11f/0x16b0 [ 258.619368][ T8100] ? down_write+0x146/0x1f0 [ 258.619411][ T8100] ? __pfx_down_write+0x10/0x10 [ 258.619454][ T8100] ? __pfx_locks_remove_file+0x10/0x10 [ 258.619509][ T8100] __sock_release+0xb3/0x260 [ 258.619549][ T8100] ? __pfx_sock_close+0x10/0x10 [ 258.619587][ T8100] sock_close+0x1c/0x30 [ 258.619622][ T8100] __fput+0x3ff/0xb40 [ 258.619658][ T8100] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.619719][ T8100] task_work_run+0x150/0x240 [ 258.619769][ T8100] ? __pfx_task_work_run+0x10/0x10 [ 258.619839][ T8100] exit_to_user_mode_loop+0x100/0x4a0 [ 258.619889][ T8100] do_syscall_64+0x668/0xf80 [ 258.619926][ T8100] ? clear_bhb_loop+0x40/0x90 [ 258.619969][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.620005][ T8100] RIP: 0033:0x7ffb74b9bf79 [ 258.620033][ T8100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.620067][ T8100] RSP: 002b:00007ffb75a18028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 258.620101][ T8100] RAX: 0000000000000000 RBX: 00007ffb74e15fa0 RCX: 00007ffb74b9bf79 [ 258.620123][ T8100] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 258.620143][ T8100] RBP: 00007ffb74c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 258.620163][ T8100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.620183][ T8100] R13: 00007ffb74e16038 R14: 00007ffb74e15fa0 R15: 00007ffee63c7078 [ 258.620227][ T8100] [ 259.099981][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 259.785132][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 259.796016][ T8112] netlink: 25 bytes leftover after parsing attributes in process `syz.1.612'. [ 259.871166][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 259.895187][ T8113] netlink: 25 bytes leftover after parsing attributes in process `syz.0.619'. [ 261.346577][ T8133] FAULT_INJECTION: forcing a failure. [ 261.346577][ T8133] name failslab, interval 1, probability 0, space 0, times 0 [ 261.362274][ T8133] CPU: 0 UID: 0 PID: 8133 Comm: syz.1.620 Not tainted syzkaller #0 PREEMPT(full) [ 261.362324][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.362342][ T8133] Call Trace: [ 261.362352][ T8133] [ 261.362362][ T8133] dump_stack_lvl+0x100/0x190 [ 261.362410][ T8133] should_fail_ex.cold+0x5/0xa [ 261.362441][ T8133] should_failslab+0xc2/0x120 [ 261.362483][ T8133] __kmalloc_cache_noprof+0x7a/0x6f0 [ 261.362514][ T8133] ? percpu_ref_init+0xec/0x3f0 [ 261.362555][ T8133] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 261.362623][ T8133] percpu_ref_init+0xec/0x3f0 [ 261.362664][ T8133] blk_alloc_queue+0x574/0x790 [ 261.362705][ T8133] ? __kmalloc_node_noprof+0x324/0x850 [ 261.362744][ T8133] blk_mq_alloc_queue+0x174/0x290 [ 261.362781][ T8133] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 261.362841][ T8133] ? blk_mq_alloc_tag_set+0xdc0/0x1260 [ 261.362895][ T8133] __blk_mq_alloc_disk+0x29/0x120 [ 261.362940][ T8133] loop_add+0x498/0xb60 [ 261.362976][ T8133] ? __pfx_loop_add+0x10/0x10 [ 261.363036][ T8133] ? find_held_lock+0x2b/0x80 [ 261.363086][ T8133] ? __fget_files+0x215/0x3d0 [ 261.363136][ T8133] loop_control_ioctl+0xae/0x620 [ 261.363177][ T8133] ? __pfx_loop_control_ioctl+0x10/0x10 [ 261.363223][ T8133] ? __pfx_loop_control_ioctl+0x10/0x10 [ 261.363266][ T8133] __x64_sys_ioctl+0x18e/0x210 [ 261.363310][ T8133] do_syscall_64+0x106/0xf80 [ 261.363374][ T8133] ? clear_bhb_loop+0x40/0x90 [ 261.363417][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.363453][ T8133] RIP: 0033:0x7ffb74b9bf79 [ 261.363481][ T8133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.363513][ T8133] RSP: 002b:00007ffb75a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.363545][ T8133] RAX: ffffffffffffffda RBX: 00007ffb74e15fa0 RCX: 00007ffb74b9bf79 [ 261.363566][ T8133] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 261.363589][ T8133] RBP: 00007ffb74c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 261.363609][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.363629][ T8133] R13: 00007ffb74e16038 R14: 00007ffb74e15fa0 R15: 00007ffee63c7078 [ 261.363673][ T8133] [ 263.482576][ T8163] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 263.718003][ T8170] cougar: G6 mapped to space [ 264.039293][ T8176] ubi: mtd0 is already attached to ubi31 [ 264.732413][ T8186] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 265.499148][ T8196] ptp ptp0: new virtual clock ptp1 [ 265.515406][ T8196] ptp ptp0: guarantee physical clock free running [ 267.293775][ T8214] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 269.347135][ T8246] FAULT_INJECTION: forcing a failure. [ 269.347135][ T8246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.408936][ T8246] CPU: 1 UID: 0 PID: 8246 Comm: syz.0.648 Not tainted syzkaller #0 PREEMPT(full) [ 269.408984][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.409004][ T8246] Call Trace: [ 269.409015][ T8246] [ 269.409027][ T8246] dump_stack_lvl+0x100/0x190 [ 269.409082][ T8246] should_fail_ex.cold+0x5/0xa [ 269.409128][ T8246] ? prepare_alloc_pages+0x16d/0x5f0 [ 269.409191][ T8246] should_fail_alloc_page+0xeb/0x140 [ 269.409247][ T8246] prepare_alloc_pages+0x1f0/0x5f0 [ 269.409309][ T8246] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 269.409358][ T8246] ? rcu_is_watching+0x12/0xc0 [ 269.409413][ T8246] ? trace_mm_page_alloc+0x17a/0x1d0 [ 269.409468][ T8246] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 269.409519][ T8246] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.409571][ T8246] ? find_held_lock+0x2b/0x80 [ 269.409633][ T8246] ? is_bpf_text_address+0x8a/0x1a0 [ 269.409681][ T8246] ? is_bpf_text_address+0x8a/0x1a0 [ 269.409733][ T8246] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 269.409792][ T8246] ? is_bpf_text_address+0x94/0x1a0 [ 269.409840][ T8246] ? kernel_text_address+0x8d/0x100 [ 269.409889][ T8246] ? __kernel_text_address+0xd/0x30 [ 269.409937][ T8246] ? unwind_get_return_address+0x59/0xa0 [ 269.409984][ T8246] alloc_pages_bulk_noprof+0x782/0x1490 [ 269.410047][ T8246] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 269.410097][ T8246] ? kasan_save_stack+0x30/0x50 [ 269.410153][ T8246] ? alloc_pages_noprof+0x233/0x390 [ 269.410211][ T8246] __kasan_populate_vmalloc+0xf0/0x210 [ 269.410266][ T8246] alloc_vmap_area+0x95d/0x2bd0 [ 269.410336][ T8246] ? __pfx_alloc_vmap_area+0x10/0x10 [ 269.410398][ T8246] __get_vm_area_node+0x1ca/0x330 [ 269.410459][ T8246] __vmalloc_node_range_noprof+0x213/0x1530 [ 269.410498][ T8246] ? kernel_clone+0xfc/0x9a0 [ 269.410535][ T8246] ? local_lock_release+0x99/0x130 [ 269.410577][ T8246] ? kernel_clone+0xfc/0x9a0 [ 269.410624][ T8246] ? find_held_lock+0x2b/0x80 [ 269.410678][ T8246] ? rcu_read_unlock+0x17/0x60 [ 269.410732][ T8246] ? rcu_read_unlock+0x17/0x60 [ 269.410786][ T8246] ? obj_cgroup_charge_account+0x46d/0x640 [ 269.410843][ T8246] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.410884][ T8246] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 269.410947][ T8246] ? rcu_is_watching+0x12/0xc0 [ 269.410997][ T8246] ? trace_kmem_cache_alloc+0xf3/0x120 [ 269.411055][ T8246] ? kernel_clone+0xfc/0x9a0 [ 269.411091][ T8246] __vmalloc_node_noprof+0xad/0xf0 [ 269.411126][ T8246] ? kernel_clone+0xfc/0x9a0 [ 269.411168][ T8246] copy_process+0x5ec/0x7a10 [ 269.411205][ T8246] ? futex_unqueue+0x133/0x2c0 [ 269.411262][ T8246] ? __pfx_copy_process+0x10/0x10 [ 269.411312][ T8246] ? _copy_from_user+0x59/0xd0 [ 269.411351][ T8246] kernel_clone+0xfc/0x9a0 [ 269.411393][ T8246] ? __pfx_kernel_clone+0x10/0x10 [ 269.411439][ T8246] ? __pfx_futex_wait+0x10/0x10 [ 269.411499][ T8246] __do_sys_clone3+0x214/0x290 [ 269.411539][ T8246] ? __pfx___do_sys_clone3+0x10/0x10 [ 269.411639][ T8246] do_syscall_64+0x106/0xf80 [ 269.411678][ T8246] ? clear_bhb_loop+0x40/0x90 [ 269.411722][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.411758][ T8246] RIP: 0033:0x7f0fc459bf79 [ 269.411788][ T8246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.411820][ T8246] RSP: 002b:00007f0fc27f5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 269.411853][ T8246] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0fc459bf79 [ 269.411874][ T8246] RDX: 00007f0fc27f5f10 RSI: 0000000000000058 RDI: 00007f0fc27f5f10 [ 269.411896][ T8246] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000058 [ 269.411916][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.411936][ T8246] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 269.411979][ T8246] [ 269.510410][ T8248] netlink: 29 bytes leftover after parsing attributes in process `syz.2.650'. [ 269.542949][ T8246] syz.0.648: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 269.818995][ T5142] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 269.858877][ T8246] ,cpuset=/,mems_allowed=0-1 [ 269.910079][ T8246] CPU: 0 UID: 0 PID: 8246 Comm: syz.0.648 Not tainted syzkaller #0 PREEMPT(full) [ 269.910126][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.910147][ T8246] Call Trace: [ 269.910158][ T8246] [ 269.910171][ T8246] dump_stack_lvl+0x100/0x190 [ 269.910229][ T8246] warn_alloc.cold+0x95/0x1c1 [ 269.910291][ T8246] ? __pfx_warn_alloc+0x10/0x10 [ 269.910333][ T8246] ? lockdep_hardirqs_on+0x78/0x100 [ 269.910375][ T8246] ? __get_vm_area_node+0x2c5/0x330 [ 269.910442][ T8246] ? __get_vm_area_node+0x208/0x330 [ 269.910507][ T8246] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 269.910545][ T8246] ? local_lock_release+0x99/0x130 [ 269.910587][ T8246] ? kernel_clone+0xfc/0x9a0 [ 269.910635][ T8246] ? find_held_lock+0x2b/0x80 [ 269.910689][ T8246] ? rcu_read_unlock+0x17/0x60 [ 269.910743][ T8246] ? rcu_read_unlock+0x17/0x60 [ 269.910798][ T8246] ? obj_cgroup_charge_account+0x46d/0x640 [ 269.910854][ T8246] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.910895][ T8246] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 269.910958][ T8246] ? rcu_is_watching+0x12/0xc0 [ 269.911008][ T8246] ? trace_kmem_cache_alloc+0xf3/0x120 [ 269.911071][ T8246] ? kernel_clone+0xfc/0x9a0 [ 269.911107][ T8246] __vmalloc_node_noprof+0xad/0xf0 [ 269.911143][ T8246] ? kernel_clone+0xfc/0x9a0 [ 269.911185][ T8246] copy_process+0x5ec/0x7a10 [ 269.911222][ T8246] ? futex_unqueue+0x133/0x2c0 [ 269.911282][ T8246] ? __pfx_copy_process+0x10/0x10 [ 269.911331][ T8246] ? _copy_from_user+0x59/0xd0 [ 269.911370][ T8246] kernel_clone+0xfc/0x9a0 [ 269.911411][ T8246] ? __pfx_kernel_clone+0x10/0x10 [ 269.911458][ T8246] ? __pfx_futex_wait+0x10/0x10 [ 269.911514][ T8246] __do_sys_clone3+0x214/0x290 [ 269.911551][ T8246] ? __pfx___do_sys_clone3+0x10/0x10 [ 269.911649][ T8246] do_syscall_64+0x106/0xf80 [ 269.911687][ T8246] ? clear_bhb_loop+0x40/0x90 [ 269.911729][ T8246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.911764][ T8246] RIP: 0033:0x7f0fc459bf79 [ 269.911792][ T8246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.911822][ T8246] RSP: 002b:00007f0fc27f5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 269.911854][ T8246] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0fc459bf79 [ 269.911875][ T8246] RDX: 00007f0fc27f5f10 RSI: 0000000000000058 RDI: 00007f0fc27f5f10 [ 269.911895][ T8246] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000058 [ 269.911915][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.911933][ T8246] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 269.911977][ T8246] [ 270.275044][ T8246] Mem-Info: [ 270.278244][ T8246] active_anon:27092 inactive_anon:0 isolated_anon:12 [ 270.278244][ T8246] active_file:17803 inactive_file:57975 isolated_file:0 [ 270.278244][ T8246] unevictable:768 dirty:655 writeback:0 [ 270.278244][ T8246] slab_reclaimable:13704 slab_unreclaimable:89476 [ 270.278244][ T8246] mapped:40069 shmem:19664 pagetables:1222 [ 270.278244][ T8246] sec_pagetables:0 bounce:0 [ 270.278244][ T8246] kernel_misc_reclaimable:0 [ 270.278244][ T8246] free:1295010 free_pcp:7866 free_cma:0 [ 270.578042][ T8246] Node 0 active_anon:95920kB inactive_anon:0kB active_file:71212kB inactive_file:231700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128636kB dirty:2688kB writeback:0kB shmem:69052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11432kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 270.659421][ T8246] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 270.804930][ T8246] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.943472][ T8246] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 270.989270][ T8246] Node 0 DMA32 free:1214840kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:90312kB inactive_anon:0kB active_file:71212kB inactive_file:231700kB unevictable:1536kB writepending:2688kB zspages:0kB present:3129332kB managed:2537656kB mlocked:0kB bounce:0kB free_pcp:58896kB local_pcp:31064kB free_cma:0kB [ 271.035759][ T8258] netlink: 'syz.2.651': attribute type 3 has an invalid length. [ 271.123086][ T8246] lowmem_reserve[]: 0 0 1 1 1 [ 271.127931][ T8246] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1068kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.159515][ T8246] lowmem_reserve[]: 0 0 0 0 0 [ 271.164447][ T8246] Node 1 Normal free:3944404kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.232265][ T8246] lowmem_reserve[]: 0 0 0 0 0 [ 271.268909][ T8246] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 271.348991][ T8246] Node 0 DMA32: 2053*4kB (UM) 1181*8kB (UM) 530*16kB (UME) 619*32kB (UME) 123*64kB (UME) 331*128kB (UME) 271*256kB (UM) 146*512kB (UME) 66*1024kB (UM) 17*2048kB (UME) 214*4096kB (M) = 1219260kB [ 271.410278][ T8246] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 271.511427][ T8246] Node 1 Normal: 5*4kB (UE) 8*8kB (UME) 14*16kB (UME) 11*32kB (UME) 9*64kB (UME) 4*128kB (UM) 7*256kB (UM) 5*512kB (UME) 4*1024kB (UM) 3*2048kB (ME) 959*4096kB (UM) = 3944404kB [ 271.578926][ T8246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.588560][ T8246] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 271.659735][ T8246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.708933][ T8246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 271.718300][ T8246] 84585 total pagecache pages [ 271.761402][ T8246] 0 pages in swap cache [ 271.765651][ T8246] Free swap = 116104kB [ 271.808903][ T8246] Total swap = 124996kB [ 271.818911][ T8246] 2097051 pages RAM [ 271.829440][ T8246] 0 pages HighMem/MovableOnly [ 271.846689][ T8246] 430755 pages reserved [ 271.851024][ T8246] 0 pages cma reserved [ 273.416742][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 273.458946][ T8269] bridge0: entered promiscuous mode [ 273.464286][ T8269] bridge0: entered allmulticast mode [ 273.525717][ T8273] lo: entered allmulticast mode [ 273.537529][ T8273] lo: left allmulticast mode [ 273.674865][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.656'. [ 273.872267][ T8273] zswap: compressor not available [ 273.895561][ T8280] Setting dangerous option i915.mitigations - tainting kernel [ 273.938513][ T8276] Setting dangerous option i915.mitigations - tainting kernel [ 275.344727][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 280.001164][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 280.045728][ T8386] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 280.094462][ T8386] netlink: 13 bytes leftover after parsing attributes in process `syz.2.685'. [ 280.123300][ T8385] netlink: 62 bytes leftover after parsing attributes in process `syz.1.687'. [ 280.136336][ T8387] netlink: 62 bytes leftover after parsing attributes in process `syz.1.687'. [ 280.163681][ T8387] netlink: 62 bytes leftover after parsing attributes in process `syz.1.687'. [ 280.195752][ T8387] netlink: 62 bytes leftover after parsing attributes in process `syz.1.687'. [ 280.225214][ T8387] netlink: 62 bytes leftover after parsing attributes in process `syz.1.687'. [ 280.259950][ T8387] netlink: 62 bytes leftover after parsing attributes in process `syz.1.687'. [ 280.288270][ T8387] netlink: 62 bytes leftover after parsing attributes in process `syz.1.687'. [ 281.156312][ T8395] zswap: compressor not available [ 281.466272][ T8406] FAULT_INJECTION: forcing a failure. [ 281.466272][ T8406] name fail_futex, interval 1, probability 0, space 0, times 1 [ 281.519037][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.0.691 Tainted: G U syzkaller #0 PREEMPT(full) [ 281.519088][ T8406] Tainted: [U]=USER [ 281.519099][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.519119][ T8406] Call Trace: [ 281.519129][ T8406] [ 281.519142][ T8406] dump_stack_lvl+0x100/0x190 [ 281.519197][ T8406] should_fail_ex.cold+0x5/0xa [ 281.519237][ T8406] get_futex_key+0x1d2/0x1620 [ 281.519280][ T8406] ? __pfx_get_futex_key+0x10/0x10 [ 281.519320][ T8406] ? kasan_quarantine_put+0x104/0x240 [ 281.519365][ T8406] ? lockdep_hardirqs_on+0x78/0x100 [ 281.519408][ T8406] futex_wake+0xea/0x530 [ 281.519454][ T8406] ? find_held_lock+0x2b/0x80 [ 281.519508][ T8406] ? __pfx_futex_wake+0x10/0x10 [ 281.519559][ T8406] ? ksys_write+0x190/0x250 [ 281.519604][ T8406] ? ksys_write+0x190/0x250 [ 281.519654][ T8406] do_futex+0x32b/0x350 [ 281.519692][ T8406] ? __pfx_do_futex+0x10/0x10 [ 281.519742][ T8406] __x64_sys_futex+0x34f/0x4d0 [ 281.519798][ T8406] ? fput+0x79/0x100 [ 281.519829][ T8406] ? __pfx___x64_sys_futex+0x10/0x10 [ 281.519870][ T8406] ? ksys_write+0x1ac/0x250 [ 281.519918][ T8406] ? __pfx_ksys_write+0x10/0x10 [ 281.519978][ T8406] do_syscall_64+0x106/0xf80 [ 281.520015][ T8406] ? clear_bhb_loop+0x40/0x90 [ 281.520058][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.520095][ T8406] RIP: 0033:0x7f0fc459bf79 [ 281.520124][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.520159][ T8406] RSP: 002b:00007f0fc27d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.520193][ T8406] RAX: ffffffffffffffda RBX: 00007f0fc4816098 RCX: 00007f0fc459bf79 [ 281.520216][ T8406] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0fc481609c [ 281.520238][ T8406] RBP: 00007f0fc4816090 R08: 0000000000000000 R09: 0000000000000000 [ 281.520260][ T8406] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 281.520281][ T8406] R13: 00007f0fc4816128 R14: 00007ffc67fc9330 R15: 00007ffc67fc9418 [ 281.520326][ T8406] [ 282.032848][ T8409] nvme_fabrics: missing parameter 'transport=%s' [ 282.056089][ T8409] nvme_fabrics: missing parameter 'nqn=%s' [ 282.167527][ T8409] nvme_fabrics: unknown parameter or missing value 'instance=-1' in ctrl creation request [ 282.263942][ T8417] FAULT_INJECTION: forcing a failure. [ 282.263942][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 282.309751][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.0.696 Tainted: G U syzkaller #0 PREEMPT(full) [ 282.309804][ T8417] Tainted: [U]=USER [ 282.309815][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.309835][ T8417] Call Trace: [ 282.309846][ T8417] [ 282.309858][ T8417] dump_stack_lvl+0x100/0x190 [ 282.309915][ T8417] should_fail_ex.cold+0x5/0xa [ 282.309956][ T8417] should_failslab+0xc2/0x120 [ 282.310009][ T8417] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 282.310053][ T8417] ? acpi_ut_create_generic_state+0x61/0xc0 [ 282.310111][ T8417] ? __pfx_acpi_ut_trace+0x10/0x10 [ 282.310152][ T8417] acpi_ut_create_generic_state+0x61/0xc0 [ 282.310209][ T8417] acpi_ps_init_scope+0x3a/0x240 [ 282.310245][ T8417] acpi_ds_init_aml_walk+0x1f6/0x680 [ 282.310309][ T8417] acpi_ps_execute_method+0x39d/0xe90 [ 282.310356][ T8417] acpi_ns_evaluate+0x640/0x1670 [ 282.310403][ T8417] acpi_evaluate_object+0x420/0xe00 [ 282.310465][ T8417] ? kasan_save_stack+0x30/0x50 [ 282.310511][ T8417] ? kasan_save_track+0x14/0x30 [ 282.310563][ T8417] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 282.310630][ T8417] acpi_evaluate_integer+0xdf/0x220 [ 282.310676][ T8417] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 282.310741][ T8417] ? __pfx_status_show+0x10/0x10 [ 282.310790][ T8417] status_show+0xa0/0x120 [ 282.310839][ T8417] ? __pfx_status_show+0x10/0x10 [ 282.310901][ T8417] dev_attr_show+0x52/0xa0 [ 282.310937][ T8417] ? __pfx_dev_attr_show+0x10/0x10 [ 282.310969][ T8417] sysfs_kf_seq_show+0x217/0x3a0 [ 282.311031][ T8417] seq_read_iter+0x32f/0x1270 [ 282.311096][ T8417] kernfs_fop_read_iter+0x46c/0x610 [ 282.311145][ T8417] ? rw_verify_area+0xce/0x6d0 [ 282.311187][ T8417] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 282.311239][ T8417] vfs_read+0x825/0xb30 [ 282.311292][ T8417] ? __pfx_vfs_read+0x10/0x10 [ 282.311366][ T8417] ksys_read+0x12a/0x250 [ 282.311421][ T8417] ? __pfx_ksys_read+0x10/0x10 [ 282.311483][ T8417] do_syscall_64+0x106/0xf80 [ 282.311520][ T8417] ? clear_bhb_loop+0x40/0x90 [ 282.311564][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.311600][ T8417] RIP: 0033:0x7f0fc459bf79 [ 282.311628][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.311662][ T8417] RSP: 002b:00007f0fc27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.311696][ T8417] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 282.311719][ T8417] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000005 [ 282.311740][ T8417] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 282.311761][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.311780][ T8417] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 282.311826][ T8417] [ 283.321344][ T8429] __nla_validate_parse: 9 callbacks suppressed [ 283.321374][ T8429] netlink: 9 bytes leftover after parsing attributes in process `syz.1.701'. [ 284.191106][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 284.568470][ T8450] can: request_module (can-proto-5) failed. [ 284.622847][ T8450] netlink: 186 bytes leftover after parsing attributes in process `syz.0.708'. [ 285.175843][ T8456] random: crng reseeded on system resumption [ 285.266429][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.710'. [ 286.328135][ T8477] [U] [ 286.331346][ T8477] [U] [ 286.334116][ T8477] [U] [ 286.336879][ T8477] [U] [ 286.340865][ T8477] [U] [ 286.343670][ T8477] [U] [ 286.346425][ T8477] [U] [ 286.349226][ T8477] [U] [ 286.357098][ T8477] [U] [ 287.323832][ T8487] FAULT_INJECTION: forcing a failure. [ 287.323832][ T8487] name failslab, interval 1, probability 0, space 0, times 0 [ 287.427056][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.2.720 Tainted: G U syzkaller #0 PREEMPT(full) [ 287.427114][ T8487] Tainted: [U]=USER [ 287.427125][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.427146][ T8487] Call Trace: [ 287.427158][ T8487] [ 287.427172][ T8487] dump_stack_lvl+0x100/0x190 [ 287.427242][ T8487] should_fail_ex.cold+0x5/0xa [ 287.427284][ T8487] should_failslab+0xc2/0x120 [ 287.427339][ T8487] __kmalloc_cache_noprof+0x7a/0x6f0 [ 287.427379][ T8487] ? create_filter_start.constprop.0+0x81/0x310 [ 287.427430][ T8487] ? rcu_is_watching+0x12/0xc0 [ 287.427490][ T8487] create_filter_start.constprop.0+0x81/0x310 [ 287.427548][ T8487] create_filter+0xb5/0x210 [ 287.427599][ T8487] ? __pfx_create_filter+0x10/0x10 [ 287.427653][ T8487] ? find_held_lock+0x2b/0x80 [ 287.427714][ T8487] apply_event_filter+0x220/0x500 [ 287.427767][ T8487] ? __pfx_apply_event_filter+0x10/0x10 [ 287.427832][ T8487] event_filter_write+0x16d/0x290 [ 287.427872][ T8487] vfs_write+0x2aa/0x1070 [ 287.427922][ T8487] ? __pfx_event_filter_write+0x10/0x10 [ 287.427964][ T8487] ? __pfx_vfs_write+0x10/0x10 [ 287.428013][ T8487] ? __fget_files+0x215/0x3d0 [ 287.428073][ T8487] ? __fget_files+0x21f/0x3d0 [ 287.428136][ T8487] ksys_write+0x12a/0x250 [ 287.428185][ T8487] ? __pfx_ksys_write+0x10/0x10 [ 287.428256][ T8487] do_syscall_64+0x106/0xf80 [ 287.428294][ T8487] ? clear_bhb_loop+0x40/0x90 [ 287.428338][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.428375][ T8487] RIP: 0033:0x7fd1e519bf79 [ 287.428405][ T8487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.428440][ T8487] RSP: 002b:00007fd1e60fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.428472][ T8487] RAX: ffffffffffffffda RBX: 00007fd1e5415fa0 RCX: 00007fd1e519bf79 [ 287.428497][ T8487] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 287.428517][ T8487] RBP: 00007fd1e52327e0 R08: 0000000000000000 R09: 0000000000000000 [ 287.428539][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.428560][ T8487] R13: 00007fd1e5416038 R14: 00007fd1e5415fa0 R15: 00007ffc9abf7868 [ 287.428608][ T8487] [ 289.982657][ T8534] FAULT_INJECTION: forcing a failure. [ 289.982657][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 290.031143][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.1.731 Tainted: G U syzkaller #0 PREEMPT(full) [ 290.031197][ T8534] Tainted: [U]=USER [ 290.031208][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.031229][ T8534] Call Trace: [ 290.031240][ T8534] [ 290.031253][ T8534] dump_stack_lvl+0x100/0x190 [ 290.031311][ T8534] should_fail_ex.cold+0x5/0xa [ 290.031351][ T8534] should_failslab+0xc2/0x120 [ 290.031405][ T8534] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 290.031457][ T8534] ? kasprintf+0xc7/0x100 [ 290.031492][ T8534] ? __lock_acquire+0x4a5/0x2630 [ 290.031540][ T8534] kvasprintf+0xbc/0x150 [ 290.031574][ T8534] ? __pfx_kvasprintf+0x10/0x10 [ 290.031625][ T8534] kasprintf+0xc7/0x100 [ 290.031658][ T8534] ? __pfx_kasprintf+0x10/0x10 [ 290.031695][ T8534] ? __is_module_percpu_address+0x1c2/0x430 [ 290.031759][ T8534] alloc_workqueue_noprof+0x114/0x200 [ 290.031800][ T8534] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 290.031850][ T8534] ? __pfx___debug_object_init+0x10/0x10 [ 290.031909][ T8534] nci_register_device+0x394/0xb80 [ 290.031966][ T8534] ? __pfx_nci_register_device+0x10/0x10 [ 290.032027][ T8534] ? lockdep_init_map_type+0x5c/0x250 [ 290.032079][ T8534] virtual_ncidev_open+0x141/0x220 [ 290.032120][ T8534] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 290.032157][ T8534] misc_open+0x26d/0x450 [ 290.032188][ T8534] ? __pfx_misc_open+0x10/0x10 [ 290.032218][ T8534] chrdev_open+0x234/0x6a0 [ 290.032269][ T8534] ? __pfx_apparmor_file_open+0x10/0x10 [ 290.032319][ T8534] ? __pfx_chrdev_open+0x10/0x10 [ 290.032373][ T8534] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 290.032435][ T8534] do_dentry_open+0x6d8/0x1660 [ 290.032484][ T8534] ? __pfx_chrdev_open+0x10/0x10 [ 290.032545][ T8534] vfs_open+0x82/0x3f0 [ 290.032585][ T8534] path_openat+0x208c/0x31a0 [ 290.032651][ T8534] ? __pfx_path_openat+0x10/0x10 [ 290.032728][ T8534] do_file_open+0x20e/0x430 [ 290.032781][ T8534] ? __pfx_do_file_open+0x10/0x10 [ 290.032863][ T8534] ? alloc_fd+0x476/0x790 [ 290.032917][ T8534] ? do_getname+0x191/0x390 [ 290.032955][ T8534] do_sys_openat2+0x10d/0x1e0 [ 290.032995][ T8534] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.033050][ T8534] __x64_sys_openat+0x12d/0x210 [ 290.033089][ T8534] ? __pfx___x64_sys_openat+0x10/0x10 [ 290.033143][ T8534] do_syscall_64+0x106/0xf80 [ 290.033175][ T8534] ? clear_bhb_loop+0x40/0x90 [ 290.033218][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.033255][ T8534] RIP: 0033:0x7ffb74b9bf79 [ 290.033284][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.033319][ T8534] RSP: 002b:00007ffb75a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.033352][ T8534] RAX: ffffffffffffffda RBX: 00007ffb74e15fa0 RCX: 00007ffb74b9bf79 [ 290.033373][ T8534] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 290.033394][ T8534] RBP: 00007ffb74c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 290.033415][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.033435][ T8534] R13: 00007ffb74e16038 R14: 00007ffb74e15fa0 R15: 00007ffee63c7078 [ 290.033479][ T8534] [ 290.081986][ T8523] zswap: compressor not available [ 292.422850][ T8571] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 297.223288][ T8617] netlink: 354 bytes leftover after parsing attributes in process `syz.3.753'. [ 298.640210][ T8654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.668400][ T8654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.701520][ T8654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.738143][ T8654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.779400][ T8654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.819372][ T8654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 298.903244][ T8657] [U] [ 298.906236][ T8657] [U] [ 298.909003][ T8657] [U] [ 298.911761][ T8657] [U] [ 298.970275][ T8657] [U] [ 298.973074][ T8657] [U] [ 298.975837][ T8657] [U] [ 298.978603][ T8657] [U] [ 299.018908][ T8657] [U] [ 300.340689][ T8677] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 302.002789][ T8691] netlink: 330 bytes leftover after parsing attributes in process `syz.0.772'. [ 303.589063][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 303.667792][ T8718] netlink: 354 bytes leftover after parsing attributes in process `syz.1.780'. [ 306.581974][ T8740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.632348][ T8740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.719665][ T8740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.727357][ T8740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.846556][ T8740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.907687][ T8740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.990121][ T8740] Dead loop on virtual device ip6_vti0, fix it urgently! [ 311.165620][ T8789] FAULT_INJECTION: forcing a failure. [ 311.165620][ T8789] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.284648][ T8789] CPU: 1 UID: 0 PID: 8789 Comm: syz.0.796 Tainted: G U syzkaller #0 PREEMPT(full) [ 311.284704][ T8789] Tainted: [U]=USER [ 311.284715][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.284735][ T8789] Call Trace: [ 311.284747][ T8789] [ 311.284760][ T8789] dump_stack_lvl+0x100/0x190 [ 311.284942][ T8789] should_fail_ex.cold+0x5/0xa [ 311.284983][ T8789] get_futex_key+0x1d2/0x1620 [ 311.285026][ T8789] ? __pfx_get_futex_key+0x10/0x10 [ 311.285060][ T8789] ? futex_hash+0x2c5/0x380 [ 311.285108][ T8789] futex_wake+0xea/0x530 [ 311.285156][ T8789] ? __pfx_futex_wait+0x10/0x10 [ 311.285206][ T8789] ? __pfx_futex_wake+0x10/0x10 [ 311.285260][ T8789] ? ksys_write+0x190/0x250 [ 311.285307][ T8789] ? ksys_write+0x190/0x250 [ 311.285368][ T8789] do_futex+0x32b/0x350 [ 311.285409][ T8789] ? __pfx_do_futex+0x10/0x10 [ 311.285451][ T8789] ? cap_task_prctl+0x104/0xa50 [ 311.285502][ T8789] ? __pfx_sched_core_share_pid+0x10/0x10 [ 311.285543][ T8789] __x64_sys_futex+0x34f/0x4d0 [ 311.285590][ T8789] ? __pfx___x64_sys_futex+0x10/0x10 [ 311.285637][ T8789] ? __pfx___do_sys_prctl+0x10/0x10 [ 311.285699][ T8789] do_syscall_64+0x106/0xf80 [ 311.285735][ T8789] ? clear_bhb_loop+0x40/0x90 [ 311.285779][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.285823][ T8789] RIP: 0033:0x7f0fc459bf79 [ 311.285852][ T8789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.285887][ T8789] RSP: 002b:00007f0fc27d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 311.285920][ T8789] RAX: ffffffffffffffda RBX: 00007f0fc4816098 RCX: 00007f0fc459bf79 [ 311.285943][ T8789] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0fc481609c [ 311.285965][ T8789] RBP: 00007f0fc4816090 R08: 0000000000000000 R09: 0000000000000000 [ 311.285986][ T8789] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 311.286007][ T8789] R13: 00007f0fc4816128 R14: 00007ffc67fc9330 R15: 00007ffc67fc9418 [ 311.286053][ T8789] [ 312.092036][ T8798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 312.136674][ T8798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 312.259486][ T8798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 312.300007][ T8798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 312.387005][ T8798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 312.446713][ T8798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 313.147310][ T8811] FAULT_INJECTION: forcing a failure. [ 313.147310][ T8811] name failslab, interval 1, probability 0, space 0, times 0 [ 313.297458][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.3.801 Tainted: G U syzkaller #0 PREEMPT(full) [ 313.297515][ T8811] Tainted: [U]=USER [ 313.297527][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.297547][ T8811] Call Trace: [ 313.297558][ T8811] [ 313.297571][ T8811] dump_stack_lvl+0x100/0x190 [ 313.297630][ T8811] should_fail_ex.cold+0x5/0xa [ 313.297669][ T8811] ? tomoyo_realpath_from_path+0xb6/0x690 [ 313.297719][ T8811] should_failslab+0xc2/0x120 [ 313.297774][ T8811] __kmalloc_noprof+0xe0/0x850 [ 313.297829][ T8811] tomoyo_realpath_from_path+0xb6/0x690 [ 313.297881][ T8811] tomoyo_check_open_permission+0x2af/0x3c0 [ 313.297942][ T8811] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 313.298044][ T8811] ? do_raw_spin_lock+0x128/0x260 [ 313.298097][ T8811] ? path_get+0x61/0x80 [ 313.298156][ T8811] tomoyo_file_open+0x6b/0x90 [ 313.298204][ T8811] security_file_open+0xb5/0x1e0 [ 313.298243][ T8811] do_dentry_open+0x5aa/0x1660 [ 313.298296][ T8811] ? security_inode_permission+0xbf/0x250 [ 313.298359][ T8811] vfs_open+0x82/0x3f0 [ 313.298396][ T8811] path_openat+0x208c/0x31a0 [ 313.298457][ T8811] ? __pfx_path_openat+0x10/0x10 [ 313.298525][ T8811] do_file_open+0x20e/0x430 [ 313.298584][ T8811] ? __pfx_do_file_open+0x10/0x10 [ 313.298669][ T8811] ? alloc_fd+0x476/0x790 [ 313.298763][ T8811] ? do_getname+0x191/0x390 [ 313.298806][ T8811] do_sys_openat2+0x10d/0x1e0 [ 313.298845][ T8811] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.298902][ T8811] __x64_sys_openat+0x12d/0x210 [ 313.298943][ T8811] ? __pfx___x64_sys_openat+0x10/0x10 [ 313.299000][ T8811] do_syscall_64+0x106/0xf80 [ 313.299036][ T8811] ? clear_bhb_loop+0x40/0x90 [ 313.299081][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.299117][ T8811] RIP: 0033:0x7f6d1319bf79 [ 313.299147][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.299182][ T8811] RSP: 002b:00007f6d14058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.299217][ T8811] RAX: ffffffffffffffda RBX: 00007f6d13415fa0 RCX: 00007f6d1319bf79 [ 313.299239][ T8811] RDX: 0000000000101840 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 313.299262][ T8811] RBP: 00007f6d132327e0 R08: 0000000000000000 R09: 0000000000000000 [ 313.299283][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.299303][ T8811] R13: 00007f6d13416038 R14: 00007f6d13415fa0 R15: 00007fff26076c58 [ 313.299349][ T8811] [ 313.700212][ T8811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.160245][ T8819] futex_wake_op: syz.1.804 tries to shift op by -2048; fix this program [ 314.199096][ T8819] futex_wake_op: syz.1.804 tries to shift op by -2048; fix this program [ 315.252967][ T8829] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.808'. [ 315.460140][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 315.480686][ T8832] netlink: 25 bytes leftover after parsing attributes in process `syz.1.810'. [ 317.009160][ T8853] openvswitch: HfR: Dropping previously announced user features [ 317.312579][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.319062][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.094619][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.825'. [ 320.206314][ T8895] veth1_macvtap: entered allmulticast mode [ 321.021702][ T8900] openvswitch: HfR: Dropping previously announced user features [ 321.916795][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 321.964097][ T8916] i: entered promiscuous mode [ 322.035264][ T8916] openvswitch: HfR: Dropping previously announced user features [ 322.413456][ T5142] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 322.413498][ T5142] Bluetooth: hci2: unexpected subevent 0x03 length: 725 > 9 [ 324.025932][ T8940] FAULT_INJECTION: forcing a failure. [ 324.025932][ T8940] name failslab, interval 1, probability 0, space 0, times 0 [ 324.060335][ T8940] CPU: 0 UID: 0 PID: 8940 Comm: syz.0.839 Tainted: G U syzkaller #0 PREEMPT(full) [ 324.060390][ T8940] Tainted: [U]=USER [ 324.060401][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.060421][ T8940] Call Trace: [ 324.060433][ T8940] [ 324.060445][ T8940] dump_stack_lvl+0x100/0x190 [ 324.060503][ T8940] should_fail_ex.cold+0x5/0xa [ 324.060543][ T8940] should_failslab+0xc2/0x120 [ 324.060596][ T8940] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 324.060641][ T8940] ? dup_fd+0x4d/0xd10 [ 324.060689][ T8940] ? trace_kmalloc+0x101/0x130 [ 324.060748][ T8940] dup_fd+0x4d/0xd10 [ 324.060802][ T8940] ? apparmor_task_alloc+0x2c1/0x3b0 [ 324.060856][ T8940] copy_process+0x2631/0x7a10 [ 324.060917][ T8940] ? __pfx_copy_process+0x10/0x10 [ 324.060985][ T8940] kernel_clone+0xfc/0x9a0 [ 324.061023][ T8940] ? __pfx_futex_wait+0x10/0x10 [ 324.061074][ T8940] ? __pfx_kernel_clone+0x10/0x10 [ 324.061136][ T8940] __do_sys_clone+0xd9/0x120 [ 324.061175][ T8940] ? __pfx___do_sys_clone+0x10/0x10 [ 324.061214][ T8940] ? __fget_files+0x21f/0x3d0 [ 324.061291][ T8940] do_syscall_64+0x106/0xf80 [ 324.061327][ T8940] ? clear_bhb_loop+0x40/0x90 [ 324.061370][ T8940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.061406][ T8940] RIP: 0033:0x7f0fc459bf79 [ 324.061435][ T8940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.061469][ T8940] RSP: 002b:00007f0fc27f5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 324.061503][ T8940] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 324.061527][ T8940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.061547][ T8940] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 324.061568][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.061588][ T8940] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 324.061633][ T8940] [ 324.556606][ T8946] netlink: 504 bytes leftover after parsing attributes in process `syz.1.841'. [ 324.602760][ T8946] netlink: 350 bytes leftover after parsing attributes in process `syz.1.841'. [ 324.763677][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.851'. [ 324.842618][ T8953] veth1_macvtap: entered allmulticast mode [ 333.128907][ T30] audit: type=1800 audit(2147483666.290:5): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.871" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 334.576090][ T9064] netlink: 'syz.0.875': attribute type 2 has an invalid length. [ 334.584085][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 334.593117][ T9064] netlink: 'syz.0.875': attribute type 3 has an invalid length. [ 334.601423][ T9064] netlink: 158 bytes leftover after parsing attributes in process `syz.0.875'. [ 334.633495][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 335.183584][ T9057] i: entered promiscuous mode [ 335.578459][ T9060] HfR: entered promiscuous mode [ 339.857079][ T9108] netlink: 'syz.2.886': attribute type 4 has an invalid length. [ 339.899254][ T9108] netlink: 'syz.2.886': attribute type 5 has an invalid length. [ 339.907091][ T9108] netlink: 10 bytes leftover after parsing attributes in process `syz.2.886'. [ 342.000792][ T9138] netlink: 330 bytes leftover after parsing attributes in process `syz.1.895'. [ 345.900394][ T5142] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 347.312050][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 347.341053][ T9196] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 347.359143][ T9196] netlink: 'syz.1.912': attribute type 6 has an invalid length. [ 348.491988][ T9198] syz.1.913 (9198) used greatest stack depth: 17912 bytes left [ 352.918260][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.927'. [ 352.928962][ T9250] veth1_macvtap: entered allmulticast mode [ 353.720590][ T9256] netlink: 25 bytes leftover after parsing attributes in process `syz.1.928'. [ 356.102464][ T9288] netlink: 330 bytes leftover after parsing attributes in process `syz.3.935'. [ 364.315121][ T9350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.379552][ T9350] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.575980][ T9350] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.740515][ T9355] ======================================================= [ 364.740515][ T9355] WARNING: The mand mount option has been deprecated and [ 364.740515][ T9355] and is ignored by this kernel. Remove the mand [ 364.740515][ T9355] option from the mount to silence this warning. [ 364.740515][ T9355] ======================================================= [ 364.969203][ T9350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.989752][ T9350] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 365.254662][ T9350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.262962][ T9350] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 365.427655][ T9350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.445997][ T9350] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 365.614695][ T9350] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 366.319242][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 367.045561][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 367.278864][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 367.438960][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 368.402314][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 368.542263][ T30] audit: type=1800 audit(2147483701.720:6): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.959" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 369.136548][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 369.261380][ T9386] netlink: 25 bytes leftover after parsing attributes in process `syz.2.961'. [ 369.359700][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 369.518954][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 370.479013][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 371.599199][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 378.199149][ T9468] netlink: 350 bytes leftover after parsing attributes in process `syz.3.985'. [ 378.726736][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.733211][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.195688][ T9496] : Can't lookup blockdev [ 381.106110][ T9503] netlink: 98 bytes leftover after parsing attributes in process `syz.3.992'. [ 383.053099][ T9524] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 383.083384][ T9524] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1006'. [ 389.649514][ T5142] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 393.871716][ T9630] FAULT_INJECTION: forcing a failure. [ 393.871716][ T9630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.008861][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.0.1026 Tainted: G U syzkaller #0 PREEMPT(full) [ 394.008915][ T9630] Tainted: [U]=USER [ 394.008927][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.008949][ T9630] Call Trace: [ 394.008960][ T9630] [ 394.008974][ T9630] dump_stack_lvl+0x100/0x190 [ 394.009031][ T9630] should_fail_ex.cold+0x5/0xa [ 394.009064][ T9630] ? prepare_alloc_pages+0x16d/0x5f0 [ 394.009124][ T9630] should_fail_alloc_page+0xeb/0x140 [ 394.009180][ T9630] prepare_alloc_pages+0x1f0/0x5f0 [ 394.009243][ T9630] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 394.009289][ T9630] ? rcu_is_watching+0x12/0xc0 [ 394.009345][ T9630] ? __lock_acquire+0x4a5/0x2630 [ 394.009400][ T9630] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 394.009451][ T9630] ? do_raw_spin_lock+0x128/0x260 [ 394.009501][ T9630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.009561][ T9630] ? find_held_lock+0x2b/0x80 [ 394.009628][ T9630] ? __lock_acquire+0x4a5/0x2630 [ 394.009670][ T9630] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 394.009725][ T9630] ? policy_nodemask+0xed/0x4f0 [ 394.009781][ T9630] alloc_pages_mpol+0x1fb/0x550 [ 394.009836][ T9630] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 394.009892][ T9630] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 394.009942][ T9630] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 394.009998][ T9630] folio_alloc_mpol_noprof+0x36/0x340 [ 394.010037][ T9630] shmem_alloc_folio+0x135/0x160 [ 394.010077][ T9630] shmem_alloc_and_add_folio+0x371/0xd40 [ 394.010133][ T9630] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 394.010183][ T9630] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 394.010239][ T9630] shmem_get_folio_gfp+0x6ab/0x1900 [ 394.010295][ T9630] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 394.010346][ T9630] ? simple_xattr_get+0x179/0x1d0 [ 394.010387][ T9630] shmem_write_begin+0x1a4/0x420 [ 394.010438][ T9630] ? __pfx_shmem_write_begin+0x10/0x10 [ 394.010488][ T9630] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 394.010564][ T9630] generic_perform_write+0x292/0xa40 [ 394.010623][ T9630] ? __pfx_generic_perform_write+0x10/0x10 [ 394.010674][ T9630] ? file_update_time_flags+0x373/0x500 [ 394.010714][ T9630] shmem_file_write_iter+0x10e/0x140 [ 394.010772][ T9630] vfs_write+0x6ac/0x1070 [ 394.010822][ T9630] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 394.010883][ T9630] ? __pfx_vfs_write+0x10/0x10 [ 394.010958][ T9630] ksys_write+0x12a/0x250 [ 394.011008][ T9630] ? __pfx_ksys_write+0x10/0x10 [ 394.011069][ T9630] do_syscall_64+0x106/0xf80 [ 394.011106][ T9630] ? clear_bhb_loop+0x40/0x90 [ 394.011149][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.011186][ T9630] RIP: 0033:0x7f0fc459bf79 [ 394.011215][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.011250][ T9630] RSP: 002b:00007f0fc27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.011282][ T9630] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 394.011304][ T9630] RDX: 00000000000098c7 RSI: 0000000000000000 RDI: 0000000000000007 [ 394.011325][ T9630] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 394.011346][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.011367][ T9630] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 394.011411][ T9630] [ 398.411563][ T9676] : Can't lookup blockdev [ 399.070076][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 399.121338][ T9684] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1037'. [ 402.189915][ T9707] WARNING! power/level is deprecated; use power/control instead [ 406.564399][ T9772] netlink: 158 bytes leftover after parsing attributes in process `syz.3.1062'. [ 409.271103][ T5142] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 415.257109][ T9846] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 416.022068][ T9834] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1082'. [ 424.698706][ T9929] netlink: 'syz.3.1101': attribute type 12 has an invalid length. [ 425.170219][ T9911] delete_channel: no stack [ 426.946177][ T9961] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 429.407129][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1114'. [ 429.461996][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.662145][ T9978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.324152][ T9987] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1118'. [ 431.257533][ T9998] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 434.414815][ T30] audit: type=1326 audit(2147483767.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1e519bf79 code=0x0 [ 435.471186][T10044] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1131'. [ 436.006605][T10049] Invalid ELF header magic: != ELF [ 440.164771][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.171573][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.418212][T10111] zram0: detected capacity change from 0 to 8 [ 441.499915][T10125] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1158'. [ 441.927252][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 444.970915][T10164] HSR: entered promiscuous mode [ 449.975056][T10215] delete_channel: no stack [ 453.676840][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 456.092563][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1199'. [ 456.297426][T10288] hsr_slave_0 (unregistering): left promiscuous mode [ 457.973723][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1204'. [ 464.091453][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1220'. [ 465.478430][T10364] tipc: Started in network mode [ 465.498852][T10364] tipc: Node identity ee00, cluster identity 4711 [ 465.525968][T10364] tipc: Node number set to 60928 [ 467.913215][T10395] netlink: 'syz.3.1231': attribute type 64 has an invalid length. [ 467.921225][T10395] netlink: 74 bytes leftover after parsing attributes in process `syz.3.1231'. [ 471.469410][T10430] Invalid ELF header magic: != ELF [ 475.820866][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1250'. [ 475.889116][T10462] bond0: entered promiscuous mode [ 475.909794][T10462] : entered promiscuous mode [ 475.925027][T10462] bond_slave_1: entered promiscuous mode [ 475.970473][T10462] bond0: entered allmulticast mode [ 476.034949][T10462] : entered allmulticast mode [ 476.062296][T10455] Invalid ELF header magic: != ELF [ 476.080889][T10462] bond_slave_1: entered allmulticast mode [ 476.550524][T10455] delete_channel: no stack [ 477.422161][T10470] FAULT_INJECTION: forcing a failure. [ 477.422161][T10470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.486303][T10470] CPU: 0 UID: 0 PID: 10470 Comm: syz.0.1251 Tainted: G U L syzkaller #0 PREEMPT(full) [ 477.486361][T10470] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 477.486374][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.486394][T10470] Call Trace: [ 477.486404][T10470] [ 477.486417][T10470] dump_stack_lvl+0x100/0x190 [ 477.486479][T10470] should_fail_ex.cold+0x5/0xa [ 477.486517][T10470] _copy_from_user+0x2e/0xd0 [ 477.486553][T10470] do_sock_getsockopt+0x30b/0x3d0 [ 477.486607][T10470] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 477.486674][T10470] __sys_getsockopt+0x133/0x1d0 [ 477.486722][T10470] ? __x64_sys_getsockopt+0xbd/0x160 [ 477.486755][T10470] __x64_sys_getsockopt+0xbd/0x160 [ 477.486790][T10470] ? do_syscall_64+0x95/0xf80 [ 477.486827][T10470] ? lockdep_hardirqs_on+0x78/0x100 [ 477.486864][T10470] do_syscall_64+0x106/0xf80 [ 477.486900][T10470] ? clear_bhb_loop+0x40/0x90 [ 477.486953][T10470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.486990][T10470] RIP: 0033:0x7f0fc459bf79 [ 477.487020][T10470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.487056][T10470] RSP: 002b:00007f0fc27d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 477.487090][T10470] RAX: ffffffffffffffda RBX: 00007f0fc4816090 RCX: 00007f0fc459bf79 [ 477.487113][T10470] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 477.487134][T10470] RBP: 00007f0fc46327e0 R08: 0000200000000280 R09: 0000000000000000 [ 477.487157][T10470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.487178][T10470] R13: 00007f0fc4816128 R14: 00007f0fc4816090 R15: 00007ffc67fc9418 [ 477.487222][T10470] [ 479.863728][T10483] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1255'. [ 483.737663][T10525] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 484.361875][T10527] FAULT_INJECTION: forcing a failure. [ 484.361875][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 484.528939][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz.0.1268 Tainted: G U L syzkaller #0 PREEMPT(full) [ 484.528999][T10527] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 484.529013][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.529034][T10527] Call Trace: [ 484.529044][T10527] [ 484.529057][T10527] dump_stack_lvl+0x100/0x190 [ 484.529126][T10527] should_fail_ex.cold+0x5/0xa [ 484.529166][T10527] should_failslab+0xc2/0x120 [ 484.529226][T10527] __kmalloc_cache_noprof+0x7a/0x6f0 [ 484.529264][T10527] ? snd_midi_event_new+0x6f/0x210 [ 484.529315][T10527] snd_midi_event_new+0x6f/0x210 [ 484.529361][T10527] snd_virmidi_output_open+0x106/0x670 [ 484.529413][T10527] open_substream+0x480/0x9e0 [ 484.529469][T10527] rawmidi_open_priv+0x595/0x6f0 [ 484.529508][T10527] snd_rawmidi_open+0x4c9/0xba0 [ 484.529548][T10527] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 484.529583][T10527] ? __pfx_default_wake_function+0x10/0x10 [ 484.529647][T10527] ? kobject_get_unless_zero+0x156/0x200 [ 484.529698][T10527] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 484.529732][T10527] snd_open+0x22d/0x4c0 [ 484.529781][T10527] ? __pfx_snd_open+0x10/0x10 [ 484.529825][T10527] chrdev_open+0x234/0x6a0 [ 484.529877][T10527] ? __pfx_apparmor_file_open+0x10/0x10 [ 484.529929][T10527] ? __pfx_chrdev_open+0x10/0x10 [ 484.529984][T10527] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 484.530047][T10527] do_dentry_open+0x6d8/0x1660 [ 484.530119][T10527] ? __pfx_chrdev_open+0x10/0x10 [ 484.530182][T10527] vfs_open+0x82/0x3f0 [ 484.530224][T10527] path_openat+0x208c/0x31a0 [ 484.530291][T10527] ? __pfx_path_openat+0x10/0x10 [ 484.530358][T10527] do_file_open+0x20e/0x430 [ 484.530414][T10527] ? __pfx_do_file_open+0x10/0x10 [ 484.530497][T10527] ? alloc_fd+0x476/0x790 [ 484.530550][T10527] ? do_getname+0x191/0x390 [ 484.530589][T10527] do_sys_openat2+0x10d/0x1e0 [ 484.530626][T10527] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.530668][T10527] ? __fget_files+0x21f/0x3d0 [ 484.530726][T10527] __x64_sys_openat+0x12d/0x210 [ 484.530766][T10527] ? __pfx___x64_sys_openat+0x10/0x10 [ 484.530828][T10527] do_syscall_64+0x106/0xf80 [ 484.530867][T10527] ? clear_bhb_loop+0x40/0x90 [ 484.530912][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.530949][T10527] RIP: 0033:0x7f0fc459bf79 [ 484.530983][T10527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.531017][T10527] RSP: 002b:00007f0fc27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.531050][T10527] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 484.531081][T10527] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 484.531104][T10527] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 484.531125][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.531145][T10527] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 484.531190][T10527] [ 492.062768][T10590] Invalid ELF header magic: != ELF [ 492.096613][T10590] delete_channel: no stack [ 494.697195][T10620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1291'. [ 494.786327][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.844297][T10620] bridge_slave_1 (unregistering): left allmulticast mode [ 494.938863][T10620] bridge_slave_1 (unregistering): left promiscuous mode [ 494.979000][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.395962][T10637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 497.857619][T10650] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1299'. [ 498.583591][T10658] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1302'. [ 498.648769][ T30] audit: type=1804 audit(2147483831.817:8): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1300" name="file0" dev="tmpfs" ino=1772 res=1 errno=0 [ 500.199281][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'. [ 500.472582][T10678] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1307'. [ 500.977527][T10688] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 501.605167][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.611648][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.231325][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c63e400: rx timeout, send abort [ 503.242085][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c63e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 503.886638][ T30] audit: type=1804 audit(4294967301.792:9): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1314" name="file0" dev="tmpfs" ino=1708 res=1 errno=0 [ 506.127262][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dcd8000: rx timeout, send abort [ 506.635877][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dcd8000: abort rx timeout. Force session deactivation [ 507.248035][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e073000: rx timeout, send abort [ 507.756181][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e073000: abort rx timeout. Force session deactivation [ 507.777915][T10722] kexec: Could not allocate control_code_buffer [ 514.894144][T10792] kexec: Could not allocate control_code_buffer [ 520.288037][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 521.374311][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 521.428370][T10883] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1359'. [ 526.545916][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 526.583948][T10947] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1379'. [ 527.489935][T10959] netlink: 306 bytes leftover after parsing attributes in process `syz.3.1385'. [ 532.474692][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 532.576046][T11005] netlink: 'syz.2.1396': attribute type 2 has an invalid length. [ 532.675689][T11005] netlink: 'syz.2.1396': attribute type 3 has an invalid length. [ 532.712349][T11005] netlink: 20232 bytes leftover after parsing attributes in process `syz.2.1396'. [ 533.118822][T10999] kexec: Could not allocate control_code_buffer [ 534.968784][ T5142] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 536.040716][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1404'. [ 536.501656][T11038] bond0 (unregistering): (slave ): Releasing backup interface [ 536.572635][T11038] : left promiscuous mode [ 536.624081][T11038] : left allmulticast mode [ 536.668350][T11038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.765018][T11038] bond_slave_1: left promiscuous mode [ 536.770703][T11038] bond_slave_1: left allmulticast mode [ 536.851691][T11038] bond0 (unregistering): Released all slaves [ 540.747576][T11072] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1413'. [ 545.513781][T11092] kexec: Could not allocate control_code_buffer [ 547.155307][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1424'. [ 548.466871][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1426'. [ 550.159084][T11140] FAULT_INJECTION: forcing a failure. [ 550.159084][T11140] name failslab, interval 1, probability 0, space 0, times 0 [ 550.207269][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.0.1430 Tainted: G U L syzkaller #0 PREEMPT(full) [ 550.207339][T11140] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 550.207353][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.207374][T11140] Call Trace: [ 550.207386][T11140] [ 550.207399][T11140] dump_stack_lvl+0x100/0x190 [ 550.207458][T11140] should_fail_ex.cold+0x5/0xa [ 550.207499][T11140] should_failslab+0xc2/0x120 [ 550.207552][T11140] __kmalloc_cache_noprof+0x7a/0x6f0 [ 550.207591][T11140] ? addrconf_init_net+0x17c/0x8e0 [ 550.207630][T11140] ? timer_init_key+0x150/0x340 [ 550.207669][T11140] ? __pfx_addrconf_init_net+0x10/0x10 [ 550.207709][T11140] addrconf_init_net+0x17c/0x8e0 [ 550.207746][T11140] ? ip6addrlbl_net_init+0x142/0x330 [ 550.207798][T11140] ? __pfx_addrconf_init_net+0x10/0x10 [ 550.207837][T11140] ops_init+0x1e2/0x5f0 [ 550.207881][T11140] setup_net+0x118/0x3a0 [ 550.207921][T11140] ? __pfx_setup_net+0x10/0x10 [ 550.207954][T11140] ? lockdep_init_map_type+0x5c/0x250 [ 550.207999][T11140] ? mutex_init_lockep+0x110/0x150 [ 550.208048][T11140] copy_net_ns+0x46f/0x7c0 [ 550.208094][T11140] create_new_namespaces+0x3ea/0xac0 [ 550.208163][T11140] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 550.208202][T11140] ksys_unshare+0x455/0xab0 [ 550.208247][T11140] ? __pfx_ksys_unshare+0x10/0x10 [ 550.208314][T11140] __x64_sys_unshare+0x31/0x40 [ 550.208356][T11140] do_syscall_64+0x106/0xf80 [ 550.208392][T11140] ? clear_bhb_loop+0x40/0x90 [ 550.208436][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.208472][T11140] RIP: 0033:0x7f0fc459bf79 [ 550.208501][T11140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.208534][T11140] RSP: 002b:00007f0fc27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 550.208568][T11140] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 550.208592][T11140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 550.208612][T11140] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 550.208634][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.208654][T11140] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 550.208700][T11140] [ 552.238235][T11157] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1436'. [ 556.871464][T11201] ptrace attach of "./syz-executor exec"[5827] was attempted by "t!M9O!c=@ 7R54L玒P_L$ܽK?۰M@ݍNv_u\x1b&S}ݫZw=:6~-gMZXsF͂9xI[D*꺮B|ucͨ)\x0cV\x0a\x09*nFJxtj>(,m{|69O-#0\x5c\x22\x228p}Azph%U OlU Խ\x07{kfI8ee.tavYD#Yxvoeq At%7nr# *ѹz)g킞Ec?y+7 OT;WfHԛ\x22\x0b1 N 8*Pt [ 557.598357][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1453'. [ 561.056684][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1460'. [ 563.015968][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.022681][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.925084][T11307] zswap: compressor not available [ 564.931904][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 568.240400][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 568.301169][T11346] macsec0: entered promiscuous mode [ 568.306725][T11346] macsec0: entered allmulticast mode [ 569.175919][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 569.228021][T11354] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 569.287633][T11354] netlink: 51505 bytes leftover after parsing attributes in process `syz.0.1486'. [ 571.592361][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 571.642577][T11386] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1496'. [ 577.960839][T11453] netlink: set zone limit has 8 unknown bytes [ 578.075276][T11453] netlink: zone id is out of range [ 578.128996][T11453] netlink: zone id is out of range [ 578.152681][T11453] netlink: zone id is out of range [ 578.238927][T11453] netlink: zone id is out of range [ 578.368961][T11453] netlink: zone id is out of range [ 578.462300][T11453] netlink: zone id is out of range [ 578.496625][T11453] netlink: zone id is out of range [ 578.501831][T11453] netlink: zone id is out of range [ 578.564117][T11453] netlink: zone id is out of range [ 578.764499][T11459] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 580.383581][T11474] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1513'. [ 584.254345][ T30] audit: type=1326 audit(4294967360.481:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d1319bf79 code=0x0 [ 584.363412][T11507] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1521'. [ 584.529821][ T5142] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 584.529864][ T5142] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 584.555739][ T5142] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 584.555782][ T5142] Bluetooth: hci1: adv larger than maximum supported [ 584.563161][ T5142] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 584.570328][ T5142] Bluetooth: hci1: adv larger than maximum supported [ 584.577421][ T5142] Bluetooth: hci1: adv larger than maximum supported [ 584.584637][ T5142] Bluetooth: hci1: Malformed LE Event: 0x0d [ 587.840544][T11540] Invalid ELF header magic: != ELF [ 589.516043][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 589.595220][T11549] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1531'. [ 590.239940][T11555] random: crng reseeded on system resumption [ 592.231932][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'. [ 592.309568][T11573] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 592.393382][T11573] netlink: 'syz.2.1539': attribute type 6 has an invalid length. [ 594.136899][T11579] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1540'. [ 598.396298][T11586] kexec: Could not allocate control_code_buffer [ 604.643005][T11682] random: crng reseeded on system resumption [ 610.217533][T11729] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1572'. [ 612.639377][T11752] FAULT_INJECTION: forcing a failure. [ 612.639377][T11752] name failslab, interval 1, probability 0, space 0, times 0 [ 612.685794][T11752] CPU: 0 UID: 0 PID: 11752 Comm: syz.0.1576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 612.685853][T11752] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 612.685866][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.685886][T11752] Call Trace: [ 612.685897][T11752] [ 612.685910][T11752] dump_stack_lvl+0x100/0x190 [ 612.685969][T11752] should_fail_ex.cold+0x5/0xa [ 612.686009][T11752] should_failslab+0xc2/0x120 [ 612.686063][T11752] __kvmalloc_node_noprof+0xfa/0xa00 [ 612.686111][T11752] ? alloc_fdtable+0x17f/0x2d0 [ 612.686175][T11752] alloc_fdtable+0x17f/0x2d0 [ 612.686223][T11752] dup_fd+0x995/0xd10 [ 612.686279][T11752] ? apparmor_task_alloc+0x2c1/0x3b0 [ 612.686332][T11752] copy_process+0x2631/0x7a10 [ 612.686414][T11752] ? __pfx_copy_process+0x10/0x10 [ 612.686474][T11752] kernel_clone+0xfc/0x9a0 [ 612.686510][T11752] ? __pfx_futex_wait+0x10/0x10 [ 612.686559][T11752] ? madvise_unlock+0x172/0x220 [ 612.686615][T11752] ? __pfx_kernel_clone+0x10/0x10 [ 612.686687][T11752] __do_sys_clone+0xd9/0x120 [ 612.686727][T11752] ? __pfx___do_sys_clone+0x10/0x10 [ 612.686766][T11752] ? find_held_lock+0x2b/0x80 [ 612.686852][T11752] do_syscall_64+0x106/0xf80 [ 612.686888][T11752] ? clear_bhb_loop+0x40/0x90 [ 612.686932][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.686969][T11752] RIP: 0033:0x7f0fc459bf79 [ 612.686997][T11752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.687033][T11752] RSP: 002b:00007f0fc27f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 612.687067][T11752] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 612.687089][T11752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 612.687110][T11752] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 612.687131][T11752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 612.687150][T11752] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 612.687194][T11752] [ 617.154098][T11792] FAULT_INJECTION: forcing a failure. [ 617.154098][T11792] name failslab, interval 1, probability 0, space 0, times 0 [ 617.243875][T11792] CPU: 1 UID: 0 PID: 11792 Comm: syz.0.1587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 617.243932][T11792] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 617.243945][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.243965][T11792] Call Trace: [ 617.243975][T11792] [ 617.243988][T11792] dump_stack_lvl+0x100/0x190 [ 617.244052][T11792] should_fail_ex.cold+0x5/0xa [ 617.244090][T11792] should_failslab+0xc2/0x120 [ 617.244144][T11792] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 617.244190][T11792] ? alloc_inode+0x183/0x250 [ 617.244235][T11792] alloc_inode+0x183/0x250 [ 617.244408][T11792] alloc_anon_inode+0x2a/0x3e0 [ 617.244472][T11792] anon_inode_make_secure_inode+0x2f/0x140 [ 617.244534][T11792] __anon_inode_getfile+0x1cf/0x280 [ 617.244591][T11792] ? _copy_to_user+0xaf/0xd0 [ 617.244628][T11792] io_uring_setup.cold+0x19e3/0x1d09 [ 617.244688][T11792] ? __pfx_io_uring_setup+0x10/0x10 [ 617.244737][T11792] ? __pfx_do_futex+0x10/0x10 [ 617.244797][T11792] ? xfd_validate_state+0x129/0x190 [ 617.244857][T11792] __x64_sys_io_uring_setup+0xc2/0x170 [ 617.244898][T11792] do_syscall_64+0x106/0xf80 [ 617.244935][T11792] ? clear_bhb_loop+0x40/0x90 [ 617.244978][T11792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.245016][T11792] RIP: 0033:0x7f0fc459bf79 [ 617.245045][T11792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.245080][T11792] RSP: 002b:00007f0fc27f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 617.245114][T11792] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 617.245136][T11792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 617.245156][T11792] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 617.245177][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.245197][T11792] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 617.245237][T11792] [ 617.576738][ T30] audit: type=1800 audit(4294967393.718:11): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1587" name="features" dev="configfs" ino=348953 res=0 errno=0 [ 622.992851][ T5142] Bluetooth: hci1: ACL packet too small [ 624.438975][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.446192][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.064777][T11882] FAULT_INJECTION: forcing a failure. [ 627.064777][T11882] name failslab, interval 1, probability 0, space 0, times 0 [ 627.114718][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.0.1608 Tainted: G U L syzkaller #0 PREEMPT(full) [ 627.114775][T11882] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 627.114788][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.114810][T11882] Call Trace: [ 627.114821][T11882] [ 627.114834][T11882] dump_stack_lvl+0x100/0x190 [ 627.114895][T11882] should_fail_ex.cold+0x5/0xa [ 627.114935][T11882] should_failslab+0xc2/0x120 [ 627.114987][T11882] __kmalloc_cache_noprof+0x7a/0x6f0 [ 627.115026][T11882] ? __kthread_create_on_node+0xce/0x3f0 [ 627.115065][T11882] ? lockdep_init_map_type+0x5c/0x250 [ 627.115115][T11882] ? __pfx_rescuer_thread+0x10/0x10 [ 627.115161][T11882] __kthread_create_on_node+0xce/0x3f0 [ 627.115202][T11882] ? __pfx___kthread_create_on_node+0x10/0x10 [ 627.115253][T11882] ? __pfx_vsnprintf+0x10/0x10 [ 627.115293][T11882] ? __pfx_rescuer_thread+0x10/0x10 [ 627.115342][T11882] kthread_create_on_node+0xc7/0x100 [ 627.115380][T11882] ? __pfx_kthread_create_on_node+0x10/0x10 [ 627.115427][T11882] ? __pfx_scnprintf+0x10/0x10 [ 627.115486][T11882] init_rescuer+0x31b/0x540 [ 627.115531][T11882] ? __pfx_init_rescuer+0x10/0x10 [ 627.115587][T11882] ? wq_adjust_max_active+0x352/0x4a0 [ 627.115640][T11882] __alloc_workqueue+0xc90/0x1880 [ 627.115687][T11882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 627.115750][T11882] alloc_workqueue_noprof+0xd2/0x200 [ 627.115790][T11882] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 627.115841][T11882] ? __pfx___debug_object_init+0x10/0x10 [ 627.115904][T11882] nci_register_device+0x21e/0xb80 [ 627.115961][T11882] ? __pfx_nci_register_device+0x10/0x10 [ 627.116019][T11882] ? lockdep_init_map_type+0x5c/0x250 [ 627.116072][T11882] virtual_ncidev_open+0x141/0x220 [ 627.116114][T11882] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 627.116152][T11882] misc_open+0x26d/0x450 [ 627.116185][T11882] ? __pfx_misc_open+0x10/0x10 [ 627.116217][T11882] chrdev_open+0x234/0x6a0 [ 627.116268][T11882] ? __pfx_apparmor_file_open+0x10/0x10 [ 627.116320][T11882] ? __pfx_chrdev_open+0x10/0x10 [ 627.116375][T11882] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 627.116447][T11882] do_dentry_open+0x6d8/0x1660 [ 627.116497][T11882] ? __pfx_chrdev_open+0x10/0x10 [ 627.116560][T11882] vfs_open+0x82/0x3f0 [ 627.116602][T11882] path_openat+0x208c/0x31a0 [ 627.116668][T11882] ? __pfx_path_openat+0x10/0x10 [ 627.116736][T11882] do_file_open+0x20e/0x430 [ 627.116792][T11882] ? __pfx_do_file_open+0x10/0x10 [ 627.116876][T11882] ? alloc_fd+0x476/0x790 [ 627.116931][T11882] ? do_getname+0x191/0x390 [ 627.116971][T11882] do_sys_openat2+0x10d/0x1e0 [ 627.117011][T11882] ? __pfx_do_sys_openat2+0x10/0x10 [ 627.117053][T11882] ? __sys_sendmsg+0x18f/0x220 [ 627.117098][T11882] __x64_sys_openat+0x12d/0x210 [ 627.117138][T11882] ? __pfx___x64_sys_openat+0x10/0x10 [ 627.117194][T11882] do_syscall_64+0x106/0xf80 [ 627.117231][T11882] ? clear_bhb_loop+0x40/0x90 [ 627.117273][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.117309][T11882] RIP: 0033:0x7f0fc459bf79 [ 627.117338][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.117372][T11882] RSP: 002b:00007f0fc27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 627.117420][T11882] RAX: ffffffffffffffda RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 627.117443][T11882] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 627.117464][T11882] RBP: 00007f0fc46327e0 R08: 0000000000000000 R09: 0000000000000000 [ 627.117485][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.117505][T11882] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 627.117551][T11882] [ 627.117578][T11882] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 628.969736][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 630.410134][ T5142] Bluetooth: hci2: Malformed Event: 0x02 [ 630.756234][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 630.832079][T11933] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1623'. [ 632.796272][T11957] __vm_enough_memory: pid: 11957, comm: syz.3.1629, bytes: 8589938688 not enough memory for the allocation [ 633.215529][ T5142] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 637.516821][T12005] hub 1-0:1.0: USB hub found [ 637.530070][T12005] hub 1-0:1.0: 1 port detected [ 639.337456][T12021] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1644'. [ 639.430430][T12022] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1643'. [ 643.680469][T12063] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1654'. [ 648.972924][ T5142] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 649.796019][T12079] kexec: Could not allocate control_code_buffer [ 651.368709][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 656.633120][T12164] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1677'. [ 659.590741][ T5142] Bluetooth: hci0: Malformed Event: 0x02 [ 662.044560][T12207] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fe6dc0cb pfn:0x78800 [ 662.087613][T12207] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 662.117828][T12207] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 662.169563][T12207] raw: 00000007fe6dc0cb 0000000000000000 0000000400000002 0000000000000000 [ 662.210752][T12207] page dumped because: unmovable page [ 662.224422][T12207] page_owner tracks the page as allocated [ 662.263354][T12207] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5818, tgid 5818 (syz-executor), ts 90004882173, free_ts 85945930975 [ 662.340759][T12207] post_alloc_hook+0x153/0x170 [ 662.370504][T12207] get_page_from_freelist+0x111d/0x3140 [ 662.384273][T12207] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 662.396682][T12207] alloc_pages_mpol+0x1fb/0x550 [ 662.422345][T12207] alloc_pages_noprof+0x131/0x390 [ 662.427644][T12207] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 662.452992][T12207] vmalloc_user_noprof+0x9e/0xe0 [ 662.492200][T12207] kcov_ioctl+0x4c/0x720 [ 662.512963][T12207] __x64_sys_ioctl+0x18e/0x210 [ 662.517860][T12207] do_syscall_64+0x106/0xf80 [ 662.562526][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.598463][T12207] page last free pid 5810 tgid 5810 stack trace: [ 662.625657][T12207] free_unref_folios+0xac6/0x1760 [ 662.639350][T12207] folios_put_refs+0x53c/0x840 [ 662.661426][T12207] free_pages_and_swap_cache+0x242/0x480 [ 662.680565][T12207] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 662.691723][T12207] tlb_finish_mmu+0x1b0/0x810 [ 662.707664][T12207] vms_clear_ptes+0x55c/0x790 [ 662.720607][T12207] vms_complete_munmap_vmas+0x1cf/0x970 [ 662.729801][T12207] do_vmi_align_munmap+0x44f/0x5f0 [ 662.760605][T12207] do_vmi_munmap+0x1f8/0x3e0 [ 662.765369][T12207] __vm_munmap+0x196/0x390 [ 662.790626][T12207] __x64_sys_munmap+0x59/0x80 [ 662.795398][T12207] do_syscall_64+0x106/0xf80 [ 662.811914][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.829241][T12378] kexec: Could not allocate control_code_buffer [ 684.343891][T12407] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 685.839878][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.847215][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.092515][T12469] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1745'. [ 689.553542][T12450] kexec: Could not allocate control_code_buffer [ 697.097193][T12534] serio: Serial port pty6 [ 700.215202][T12584] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 705.605848][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 705.658388][T12640] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 705.711813][T12640] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1787'. [ 705.837242][T12643] base or size exceeds the MTRR width [ 713.971974][T12732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 713.979320][T12732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 714.013948][T12732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 714.101710][T12732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 715.799037][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1813'. [ 716.054495][T12708] Bluetooth: hci2: command 0x0406 tx timeout [ 716.060628][T12708] Bluetooth: hci1: command 0x0406 tx timeout [ 716.070679][T12708] Bluetooth: hci0: command 0x0406 tx timeout [ 716.135280][T12773] Bluetooth: hci3: command 0x0406 tx timeout [ 724.122184][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'. [ 739.405588][T13127] kexec: Could not allocate control_code_buffer [ 739.532806][T12773] Bluetooth: hci3: ACL packet too small [ 741.668656][T13159] kexec: Could not allocate control_code_buffer [ 742.329360][T13190] zswap: compressor not available [ 743.474095][T13193] kexec: Could not allocate control_code_buffer [ 745.631315][T13234] kexec: Could not allocate control_code_buffer [ 747.274770][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.281656][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.147534][T13302] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 748.363579][T13289] kexec: Could not allocate control_code_buffer [ 753.491267][T13407] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1965'. [ 756.127023][T13435] kexec: Could not allocate control_code_buffer [ 758.426048][T13466] Process accounting resumed [ 760.472074][T13493] can0: slcan on ttyS2. [ 760.633904][T13493] can0 (unregistered): slcan off ttyS2. [ 762.486221][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1997'. [ 762.522270][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.667144][T13549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.793506][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.847835][T13549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.399153][T13785] netlink: 'syz.3.2046': attribute type 33 has an invalid length. [ 777.427491][T13785] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2046'. [ 778.023345][T12773] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 783.497985][T12718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.520361][T12718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.529921][T12718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.541715][T12718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.554315][T12718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 784.075224][T13820] chnl_net:caif_netlink_parms(): no params data found [ 784.325647][T13820] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.340769][T13820] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.348239][T13820] bridge_slave_0: entered allmulticast mode [ 784.381981][T13820] bridge_slave_0: entered promiscuous mode [ 784.402122][T13820] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.409425][T13820] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.439249][T13820] bridge_slave_1: entered allmulticast mode [ 784.448267][T13820] bridge_slave_1: entered promiscuous mode [ 784.536555][T13820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.576793][T13820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.671059][T13820] team0: Port device team_slave_0 added [ 784.700686][T13820] team0: Port device team_slave_1 added [ 784.760762][T13820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.767880][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.804180][T13820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.833319][T13820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.841298][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.889383][T13820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.194627][T13820] hsr_slave_0: entered promiscuous mode [ 785.219352][T13820] hsr_slave_1: entered promiscuous mode [ 785.226546][T13820] debugfs: 'hsr0' already exists in 'hsr' [ 785.234387][T13820] Cannot create hsr debugfs directory [ 785.619305][T12718] Bluetooth: hci4: command tx timeout [ 785.925612][T13873] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2065'. [ 786.248466][T13820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.263314][T13820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.276707][T13820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.314180][T13820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 786.926468][T13820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.019406][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 787.062550][T13820] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.090216][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.097459][T12711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.172290][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.179502][T12713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.342937][T13820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.702715][T12718] Bluetooth: hci4: command tx timeout [ 787.941684][T13820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.790256][T13820] veth0_vlan: entered promiscuous mode [ 788.834150][T13820] veth1_vlan: entered promiscuous mode [ 789.043709][T13820] veth0_macvtap: entered promiscuous mode [ 789.095910][T13820] veth1_macvtap: entered promiscuous mode [ 789.195482][T13820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.253244][T13820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.304936][T13939] smpboot: CPU 1 is now offline [ 789.391293][T12721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.428357][T12721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.461804][T13940] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 789.523587][T12721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.542409][T12721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.699908][T12713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.718301][T12713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.794344][T12718] Bluetooth: hci4: command tx timeout [ 789.800599][T12711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.820005][T12711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.414196][T13964] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2091'. [ 791.861013][T12718] Bluetooth: hci4: command tx timeout [ 794.032207][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 794.083844][T14034] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 794.104908][T14034] netlink: 'syz.0.2103': attribute type 6 has an invalid length. [ 794.737854][T14048] vhci_hcd vhci_hcd.2: invalid port number 16 [ 794.757967][T14048] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 797.423802][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2119'. [ 799.044962][T14115] tipc: Started in network mode [ 799.049917][T14115] tipc: Node identity ee00, cluster identity 4711 [ 799.087947][T14115] tipc: Node number set to 60928 [ 800.776223][T14145] Invalid ELF header magic: != ELF [ 803.102121][ T30] audit: type=1804 audit(4294985923.446:12): pid=14163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2134" name="/newroot/8/file0" dev="tmpfs" ino=58 res=1 errno=0 [ 803.140774][ T30] audit: type=1804 audit(4294985923.476:13): pid=14165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2134" name="/newroot/8/file0" dev="tmpfs" ino=58 res=1 errno=0 [ 803.222140][T14162] zram0: detected capacity change from 8 to 0 [ 803.956006][T14182] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2140'. [ 804.288515][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2143'. [ 804.333830][T14192] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2143'. [ 805.459662][T14217] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 808.476799][T14271] Invalid ELF header magic: != ELF [ 808.719037][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.725469][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.127046][ T30] audit: type=1804 audit(4294985930.460:14): pid=14312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2173" name="/newroot/503/file0" dev="tmpfs" ino=2655 res=1 errno=0 [ 810.196482][ T30] audit: type=1804 audit(4294985930.530:15): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2173" name="/newroot/503/file0" dev="tmpfs" ino=2655 res=1 errno=0 [ 811.748273][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 811.758402][T14339] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2181'. [ 812.604139][T14359] FAULT_INJECTION: forcing a failure. [ 812.604139][T14359] name failslab, interval 1, probability 0, space 0, times 0 [ 812.622048][T14359] CPU: 0 UID: 0 PID: 14359 Comm: syz.4.2185 Tainted: G U L syzkaller #0 PREEMPT(full) [ 812.622101][T14359] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 812.622113][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 812.622132][T14359] Call Trace: [ 812.622141][T14359] [ 812.622152][T14359] dump_stack_lvl+0x100/0x190 [ 812.622204][T14359] should_fail_ex.cold+0x5/0xa [ 812.622239][T14359] should_failslab+0xc2/0x120 [ 812.622291][T14359] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 812.622329][T14359] ? alloc_empty_file+0x55/0x1c0 [ 812.622367][T14359] alloc_empty_file+0x55/0x1c0 [ 812.622399][T14359] alloc_file_pseudo+0x13a/0x230 [ 812.622430][T14359] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 812.622470][T14359] __shmem_file_setup+0x1a3/0x330 [ 812.622507][T14359] shmem_zero_setup+0x93/0x1b0 [ 812.622552][T14359] __mmap_region+0x20b5/0x2760 [ 812.622589][T14359] ? __lock_acquire+0x4a5/0x2630 [ 812.622626][T14359] ? __pfx___mmap_region+0x10/0x10 [ 812.622685][T14359] ? finish_task_switch.isra.0+0x200/0xb80 [ 812.622713][T14359] ? finish_task_switch.isra.0+0x200/0xb80 [ 812.622743][T14359] ? rcu_is_watching+0x12/0xc0 [ 812.622795][T14359] ? __schedule+0x1000/0x60e0 [ 812.622871][T14359] ? rcu_is_watching+0x12/0xc0 [ 812.622912][T14359] ? cap_capable+0x107/0x460 [ 812.622958][T14359] mmap_region+0x180/0x3e0 [ 812.623001][T14359] do_mmap+0xc63/0x12f0 [ 812.623055][T14359] ? __pfx_do_mmap+0x10/0x10 [ 812.623111][T14359] ? __pfx_down_write_killable+0x10/0x10 [ 812.623159][T14359] vm_mmap_pgoff+0x29e/0x470 [ 812.623212][T14359] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 812.623266][T14359] ? __x64_sys_futex+0x34f/0x4d0 [ 812.623307][T14359] ? __x64_sys_futex+0x358/0x4d0 [ 812.623347][T14359] ksys_mmap_pgoff+0x7d/0x5b0 [ 812.623397][T14359] __x64_sys_mmap+0x125/0x190 [ 812.623443][T14359] do_syscall_64+0x106/0xf80 [ 812.623472][T14359] ? clear_bhb_loop+0x40/0x90 [ 812.623507][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.623538][T14359] RIP: 0033:0x7f8a5359bf79 [ 812.623563][T14359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.623592][T14359] RSP: 002b:00007f8a543cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 812.623621][T14359] RAX: ffffffffffffffda RBX: 00007f8a53815fa0 RCX: 00007f8a5359bf79 [ 812.623641][T14359] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 812.623658][T14359] RBP: 00007f8a536327e0 R08: fffffffffffffffa R09: 0000000000008000 [ 812.623676][T14359] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 812.623693][T14359] R13: 00007f8a53816038 R14: 00007f8a53815fa0 R15: 00007ffd664957c8 [ 812.623731][T14359] [ 813.086753][T14362] net_ratelimit: 5 callbacks suppressed [ 813.086783][T14362] openvswitch: netlink: Key type 261 is out of range max 32 [ 815.162282][T14407] Invalid ELF header magic: != ELF [ 817.204098][T12718] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 818.227102][T14467] Invalid ELF header magic: != ELF [ 822.024078][T14546] GUP no longer grows the stack in syz.0.2234 (14546): 400000-401000 (3f0000) [ 822.051025][T14546] CPU: 1 UID: 0 PID: 14546 Comm: syz.0.2234 Tainted: G U L syzkaller #0 PREEMPT(full) [ 822.051079][T14546] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 822.051091][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.051109][T14546] Call Trace: [ 822.051120][T14546] [ 822.051132][T14546] dump_stack_lvl+0x100/0x190 [ 822.051185][T14546] gup_vma_lookup.cold+0x83/0x96 [ 822.051236][T14546] __get_user_pages+0x241/0x34d0 [ 822.051307][T14546] ? __pfx___get_user_pages+0x10/0x10 [ 822.051374][T14546] get_dump_page+0x27e/0x3d0 [ 822.051407][T14546] ? __pfx_get_dump_page+0x10/0x10 [ 822.051440][T14546] ? dump_user_range+0x73b/0xb50 [ 822.051496][T14546] dump_user_range+0x18d/0xb50 [ 822.051553][T14546] ? __pfx_dump_user_range+0x10/0x10 [ 822.051615][T14546] ? __pfx_writenote+0x10/0x10 [ 822.051689][T14546] elf_core_dump+0x2d16/0x3c60 [ 822.051763][T14546] ? __pfx_elf_core_dump+0x10/0x10 [ 822.051815][T14546] ? kasan_save_stack+0x3f/0x50 [ 822.051859][T14546] ? kasan_save_track+0x14/0x30 [ 822.051899][T14546] ? __kasan_kmalloc+0xaa/0xb0 [ 822.051940][T14546] ? __kvmalloc_node_noprof+0x360/0xa00 [ 822.051986][T14546] ? irqentry_exit+0x1f8/0x670 [ 822.052019][T14546] ? asm_exc_page_fault+0x26/0x30 [ 822.052055][T14546] ? 0xffffffffff600000 [ 822.052142][T14546] ? vfs_coredump+0x27b4/0x5570 [ 822.052250][T14546] vfs_coredump+0x27b4/0x5570 [ 822.052314][T14546] ? __pfx_vfs_coredump+0x10/0x10 [ 822.052360][T14546] ? __lock_acquire+0x4a5/0x2630 [ 822.052418][T14546] ? lock_acquire+0x1cf/0x380 [ 822.052474][T14546] ? is_bpf_text_address+0x8a/0x1a0 [ 822.052521][T14546] ? bpf_ksym_find+0x124/0x1c0 [ 822.052566][T14546] ? __kernel_text_address+0xd/0x30 [ 822.052614][T14546] ? unwind_get_return_address+0x59/0xa0 [ 822.052648][T14546] ? arch_stack_walk+0xa6/0xf0 [ 822.052702][T14546] ? __sigqueue_free+0xbe/0x2a0 [ 822.052743][T14546] ? stack_trace_save+0x8e/0xc0 [ 822.052795][T14546] ? __pfx_stack_trace_save+0x10/0x10 [ 822.052850][T14546] ? stack_depot_save_flags+0x27/0x9d0 [ 822.052888][T14546] ? __lock_acquire+0x4a5/0x2630 [ 822.052996][T14546] ? proc_coredump_connector+0x2d3/0x4f0 [ 822.053038][T14546] ? __pfx_proc_coredump_connector+0x10/0x10 [ 822.053089][T14546] ? rcu_is_watching+0x12/0xc0 [ 822.053144][T14546] get_signal+0x1f2a/0x21e0 [ 822.053194][T14546] ? __pfx_get_signal+0x10/0x10 [ 822.053239][T14546] arch_do_signal_or_restart+0x91/0x770 [ 822.053282][T14546] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 822.053335][T14546] ? do_user_addr_fault+0x8d6/0x12f0 [ 822.053399][T14546] irqentry_exit+0x1f8/0x670 [ 822.053441][T14546] asm_exc_page_fault+0x26/0x30 [ 822.053474][T14546] RIP: 0033:0x400fff [ 822.053506][T14546] Code: Unable to access opcode bytes at 0x400fd5. [ 822.053520][T14546] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 822.053546][T14546] RAX: 0000000000000000 RBX: 00007f0fc4815fa0 RCX: 00007f0fc459bf79 [ 822.053567][T14546] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 822.053587][T14546] RBP: 00007f0fc46327e0 R08: 0000000000000002 R09: 0000000000000000 [ 822.053607][T14546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.053626][T14546] R13: 00007f0fc4816038 R14: 00007f0fc4815fa0 R15: 00007ffc67fc9418 [ 822.053676][T14546] [ 823.408744][T14561] zswap: compressor not available [ 827.086504][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 827.743937][T14669] Invalid ELF header magic: != ELF [ 831.192582][ T30] audit: type=1804 audit(4294985951.541:16): pid=14728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2284" name="file0" dev="tmpfs" ino=3058 res=1 errno=0 [ 831.382424][ T30] audit: type=1804 audit(4294985951.731:17): pid=14725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2284" name="file0" dev="tmpfs" ino=3058 res=1 errno=0 [ 831.745814][T14736] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 831.805539][ T30] audit: type=1804 audit(4294985952.151:18): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2286" name="file0" dev="tmpfs" ino=3064 res=1 errno=0 [ 831.935610][ T30] audit: type=1804 audit(4294985952.281:19): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2286" name="file0" dev="tmpfs" ino=3064 res=1 errno=0 [ 832.291618][T14743] zswap: compressor not available [ 832.299221][T14749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2290'. [ 832.308885][T14749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.317126][T14749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.328095][T14749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.345771][T14749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.983681][ T30] audit: type=1804 audit(4294985953.331:20): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2296" name="/newroot/536/file0" dev="tmpfs" ino=2825 res=1 errno=0 [ 833.015507][ T30] audit: type=1804 audit(4294985953.331:21): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2296" name="/newroot/536/file0" dev="tmpfs" ino=2825 res=1 errno=0 [ 833.783226][T14778] futex_wake_op: syz.4.2300 tries to shift op by -2048; fix this program [ 833.792072][T14778] futex_wake_op: syz.4.2300 tries to shift op by -2048; fix this program [ 833.805042][T14778] 0x000000000001-0x000000020000 : "" [ 833.825840][T14778] ftl_cs: FTL header corrupt! [ 833.988082][T14778] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 842.960885][T12773] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.972284][T12773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.981358][T12773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.989524][T12773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.997827][T12773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 843.306335][T14861] chnl_net:caif_netlink_parms(): no params data found [ 843.550464][T14861] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.580139][T14861] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.587544][T14861] bridge_slave_0: entered allmulticast mode [ 843.677611][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2327'. [ 843.702055][T14861] bridge_slave_0: entered promiscuous mode [ 843.751084][T14861] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.758380][T14861] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.775384][T14861] bridge_slave_1: entered allmulticast mode [ 843.787521][T14861] bridge_slave_1: entered promiscuous mode [ 843.973646][T14861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.000263][T14861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.235804][T14861] team0: Port device team_slave_0 added [ 844.244624][T14893] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2330'. [ 844.266333][T14861] team0: Port device team_slave_1 added [ 844.417946][T14861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.436693][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.490282][T14861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.749740][T14861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.766910][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.802283][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 844.840943][T14861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.031174][T12773] Bluetooth: hci5: command tx timeout [ 845.048755][T14861] hsr_slave_0: entered promiscuous mode [ 845.067101][T14861] hsr_slave_1: entered promiscuous mode [ 845.089357][T14861] debugfs: 'hsr0' already exists in 'hsr' [ 845.107997][T14861] Cannot create hsr debugfs directory [ 845.861677][T14861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 845.929513][T14861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 845.989535][T14861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 846.087359][T14861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 846.457426][T14861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.490094][T14861] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.506884][T12858] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.514203][T12858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.578058][T12858] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.585350][T12858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.108628][T12773] Bluetooth: hci5: command tx timeout [ 847.232285][T14861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.837619][T14861] veth0_vlan: entered promiscuous mode [ 847.864141][T14861] veth1_vlan: entered promiscuous mode [ 847.963277][T14861] veth0_macvtap: entered promiscuous mode [ 847.981732][T14861] veth1_macvtap: entered promiscuous mode [ 848.026429][T14861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.054731][T14861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.152460][T12858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.164264][T12707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.193284][T12707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.224980][T12707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.549883][T13446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.588103][T13446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.642065][T12721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.668562][T12721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.257930][T12773] Bluetooth: hci5: command tx timeout [ 850.029965][T14978] Invalid ELF header magic: != ELF [ 850.098445][T14986] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 850.113050][T14986] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 850.413774][T14988] Invalid ELF header magic: != ELF [ 851.266292][T12773] Bluetooth: hci5: command tx timeout [ 852.706512][T15014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 852.726548][T15014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 852.789859][T15014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 852.832118][T15014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 852.860773][T15014] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 852.876401][T15014] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 852.970005][T15014] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 853.080918][T15014] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 853.088582][T15014] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 853.177055][T15014] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 853.627474][T15023] KVM: debugfs: duplicate directory 15023-3 [ 854.791485][T12718] Bluetooth: hci1: command 0x0406 tx timeout [ 854.798128][T12773] Bluetooth: hci0: command 0x0406 tx timeout [ 854.866501][T12773] Bluetooth: hci3: command 0x0406 tx timeout [ 854.866580][T12718] Bluetooth: hci2: command 0x0406 tx timeout [ 854.946562][T12718] Bluetooth: hci4: command 0x0c1a tx timeout [ 855.137450][T12718] Bluetooth: hci5: command 0x0c1a tx timeout [ 855.736986][T15065] zswap: compressor not available [ 856.521909][T15075] random: crng reseeded on system resumption [ 856.824849][T15094] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 857.040136][T12718] Bluetooth: hci4: command 0x0c1a tx timeout [ 857.184048][T12718] Bluetooth: hci5: command 0x0c1a tx timeout [ 858.313907][T15112] Invalid ELF header magic: != ELF [ 859.107171][T12718] Bluetooth: hci4: command 0x0c1a tx timeout [ 859.268862][T12718] Bluetooth: hci5: command 0x0c1a tx timeout [ 859.344207][T15122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 859.659656][T15126] FAULT_INJECTION: forcing a failure. [ 859.659656][T15126] name failslab, interval 1, probability 0, space 0, times 0 [ 859.703851][T15126] CPU: 1 UID: 0 PID: 15126 Comm: syz.5.2383 Tainted: G U L syzkaller #0 PREEMPT(full) [ 859.703908][T15126] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 859.703945][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.703966][T15126] Call Trace: [ 859.703977][T15126] [ 859.703989][T15126] dump_stack_lvl+0x100/0x190 [ 859.704046][T15126] should_fail_ex.cold+0x5/0xa [ 859.704085][T15126] should_failslab+0xc2/0x120 [ 859.704139][T15126] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 859.704193][T15126] ? __alloc_skb+0x140/0x710 [ 859.704239][T15126] __alloc_skb+0x140/0x710 [ 859.704272][T15126] ? __pfx___alloc_skb+0x10/0x10 [ 859.704305][T15126] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 859.704338][T15126] ? trace_sched_exit_tp+0x13a/0x180 [ 859.704386][T15126] tcp_stream_alloc_skb+0x34/0x660 [ 859.704439][T15126] tcp_sendmsg_locked+0x133b/0x45f0 [ 859.704511][T15126] ? aa_file_perm+0x268/0x1530 [ 859.704552][T15126] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 859.704607][T15126] ? do_raw_spin_lock+0x128/0x260 [ 859.704657][T15126] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 859.704717][T15126] ? __local_bh_enable_ip+0x9e/0x120 [ 859.704759][T15126] tcp_sendmsg+0x2e/0x50 [ 859.704804][T15126] ? __pfx_tcp_sendmsg+0x10/0x10 [ 859.704852][T15126] inet_sendmsg+0xb9/0x140 [ 859.704903][T15126] sock_write_iter+0x509/0x610 [ 859.704951][T15126] ? __pfx_sock_write_iter+0x10/0x10 [ 859.705013][T15126] ? bpf_lsm_file_permission+0x9/0x10 [ 859.705062][T15126] ? security_file_permission+0x76/0x210 [ 859.705100][T15126] ? rw_verify_area+0xce/0x6d0 [ 859.705147][T15126] vfs_write+0x6ac/0x1070 [ 859.705205][T15126] ? __pfx_sock_write_iter+0x10/0x10 [ 859.705257][T15126] ? __pfx_vfs_write+0x10/0x10 [ 859.705303][T15126] ? find_held_lock+0x2b/0x80 [ 859.705383][T15126] ksys_write+0x1f8/0x250 [ 859.705429][T15126] ? __pfx_ksys_write+0x10/0x10 [ 859.705488][T15126] do_syscall_64+0x106/0xf80 [ 859.705522][T15126] ? clear_bhb_loop+0x40/0x90 [ 859.705565][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.705599][T15126] RIP: 0033:0x7fc5e579bf79 [ 859.705627][T15126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.705662][T15126] RSP: 002b:00007fc5e65b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 859.705694][T15126] RAX: ffffffffffffffda RBX: 00007fc5e5a16090 RCX: 00007fc5e579bf79 [ 859.705716][T15126] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 859.705737][T15126] RBP: 00007fc5e58327e0 R08: 0000000000000000 R09: 0000000000000000 [ 859.705758][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.705779][T15126] R13: 00007fc5e5a16128 R14: 00007fc5e5a16090 R15: 00007ffcb73c7298 [ 859.705824][T15126] [ 860.436197][T15137] FAULT_INJECTION: forcing a failure. [ 860.436197][T15137] name failslab, interval 1, probability 0, space 0, times 0 [ 860.452327][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.4.2385 Tainted: G U L syzkaller #0 PREEMPT(full) [ 860.452385][T15137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 860.452400][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.452421][T15137] Call Trace: [ 860.452432][T15137] [ 860.452445][T15137] dump_stack_lvl+0x100/0x190 [ 860.452502][T15137] should_fail_ex.cold+0x5/0xa [ 860.452543][T15137] should_failslab+0xc2/0x120 [ 860.452598][T15137] __kmalloc_cache_node_noprof+0x7d/0x770 [ 860.452648][T15137] ? __alloc_workqueue+0xf78/0x1880 [ 860.452685][T15137] ? lockdep_init_map_type+0x5c/0x250 [ 860.452735][T15137] __alloc_workqueue+0xf78/0x1880 [ 860.452785][T15137] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 860.452848][T15137] alloc_workqueue_noprof+0xd2/0x200 [ 860.452888][T15137] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 860.452967][T15137] ? __pfx___debug_object_init+0x10/0x10 [ 860.453029][T15137] nci_register_device+0x511/0xb80 [ 860.453089][T15137] ? __pfx_nci_register_device+0x10/0x10 [ 860.453147][T15137] ? lockdep_init_map_type+0x5c/0x250 [ 860.453198][T15137] virtual_ncidev_open+0x141/0x220 [ 860.453239][T15137] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 860.453278][T15137] misc_open+0x26d/0x450 [ 860.453312][T15137] ? __pfx_misc_open+0x10/0x10 [ 860.453343][T15137] chrdev_open+0x234/0x6a0 [ 860.453394][T15137] ? __pfx_apparmor_file_open+0x10/0x10 [ 860.453443][T15137] ? __pfx_chrdev_open+0x10/0x10 [ 860.453498][T15137] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 860.453559][T15137] do_dentry_open+0x6d8/0x1660 [ 860.453609][T15137] ? __pfx_chrdev_open+0x10/0x10 [ 860.453670][T15137] vfs_open+0x82/0x3f0 [ 860.453709][T15137] path_openat+0x208c/0x31a0 [ 860.453777][T15137] ? __pfx_path_openat+0x10/0x10 [ 860.453845][T15137] do_file_open+0x20e/0x430 [ 860.453907][T15137] ? __pfx_do_file_open+0x10/0x10 [ 860.453992][T15137] ? alloc_fd+0x476/0x790 [ 860.454047][T15137] ? do_getname+0x191/0x390 [ 860.454086][T15137] do_sys_openat2+0x10d/0x1e0 [ 860.454125][T15137] ? __pfx_do_sys_openat2+0x10/0x10 [ 860.454180][T15137] __x64_sys_openat+0x12d/0x210 [ 860.454220][T15137] ? __pfx___x64_sys_openat+0x10/0x10 [ 860.454276][T15137] do_syscall_64+0x106/0xf80 [ 860.454311][T15137] ? clear_bhb_loop+0x40/0x90 [ 860.454354][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.454389][T15137] RIP: 0033:0x7f8a5359bf79 [ 860.454419][T15137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.454453][T15137] RSP: 002b:00007f8a543cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 860.454487][T15137] RAX: ffffffffffffffda RBX: 00007f8a53815fa0 RCX: 00007f8a5359bf79 [ 860.454511][T15137] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 860.454533][T15137] RBP: 00007f8a536327e0 R08: 0000000000000000 R09: 0000000000000000 [ 860.454553][T15137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.454574][T15137] R13: 00007f8a53816038 R14: 00007f8a53815fa0 R15: 00007ffd664957c8 [ 860.454618][T15137] [ 864.299830][ T31] INFO: task kworker/u8:5:80 blocked for more than 143 seconds. [ 864.331187][ T31] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 864.356706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.399674][ T31] task:kworker/u8:5 state:D stack:24088 pid:80 tgid:80 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 864.432273][ T31] Workqueue: netns cleanup_net [ 864.437137][ T31] Call Trace: [ 864.479693][ T31] [ 864.482709][ T31] __schedule+0xfee/0x60e0 [ 864.496589][ T31] ? __lock_acquire+0x4a5/0x2630 [ 864.502069][ T31] ? __pfx___schedule+0x10/0x10 [ 864.506983][ T31] ? find_held_lock+0x2b/0x80 [ 864.512949][ T31] ? schedule+0x2bf/0x390 [ 864.517371][ T31] schedule+0xdd/0x390 [ 864.522029][ T31] schedule_timeout+0x1b2/0x280 [ 864.542182][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 864.547727][ T31] ? mark_held_locks+0x40/0x70 [ 864.553107][ T31] __wait_for_common+0x2e7/0x4c0 [ 864.558118][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 864.607050][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 864.620011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.625329][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 864.852904][ T31] __flush_workqueue+0x3f7/0x1200 [ 864.858051][ T31] ? __lock_acquire+0x4a5/0x2630 [ 864.932599][ T31] ? __lock_acquire+0x4a5/0x2630 [ 864.983012][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 865.019647][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 865.025059][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 865.236064][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 865.269369][ T31] rds_tcp_listen_stop+0x104/0x160 [ 865.276179][ T31] rds_tcp_exit_net+0xe0/0x870 [ 865.321787][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 865.327301][ T31] ? __pfx___might_resched+0x10/0x10 [ 865.361217][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 865.366734][ T31] ops_undo_list+0x2ee/0xab0 [ 865.389104][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 865.394321][ T31] ? cleanup_net+0x332/0x920 [ 865.409164][ T31] ? idr_destroy+0x62/0x2e0 [ 865.413790][ T31] cleanup_net+0x499/0x920 [ 865.418275][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 865.439167][ T31] ? rcu_is_watching+0x12/0xc0 [ 865.444047][ T31] process_one_work+0x9d7/0x1920 [ 865.479229][ T31] ? __pfx_process_one_work+0x10/0x10 [ 865.484685][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 865.509067][ T31] worker_thread+0x5da/0xe40 [ 865.513792][ T31] ? kthread+0x13a/0x450 [ 865.518103][ T31] ? __pfx_worker_thread+0x10/0x10 [ 865.529608][ T31] kthread+0x370/0x450 [ 865.533787][ T31] ? __pfx_kthread+0x10/0x10 [ 865.538441][ T31] ret_from_fork+0x754/0xd80 [ 865.568997][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 865.574237][ T31] ? __switch_to+0x7b4/0x1120 [ 865.591574][ T31] ? __pfx_kthread+0x10/0x10 [ 865.596285][ T31] ret_from_fork_asm+0x1a/0x30 [ 865.612851][ T31] [ 865.616204][ T31] [ 865.616204][ T31] Showing all locks held in the system: [ 865.655337][ T31] 1 lock held by khungtaskd/31: [ 865.660765][ T31] #0: ffffffff8e7e92e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 865.682815][ T31] 3 locks held by kworker/u8:5/80: [ 865.688006][ T31] #0: ffff88801c6a6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 865.712814][ T31] #1: ffffc9000258fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 865.735422][ T31] #2: ffffffff905f4930 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 865.758043][ T31] 1 lock held by syz-executor/5822: [ 865.763731][ T31] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 865.780164][ T31] 3 locks held by syz.1.168/6545: [ 865.785275][ T31] 2 locks held by kworker/u10:3/12721: [ 865.799270][ T31] #0: ffff88801f3b7948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 865.817106][ T31] #1: ffffc9000520fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 865.831097][ T31] 2 locks held by syz.1.1920/13215: [ 865.836369][ T31] #0: ffff888042436540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1ce/0xdd0 [ 865.846062][ T31] #1: ffff888075bbf4b8 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0xe1/0x8e0 [ 865.856516][ T31] 3 locks held by syz.1.1992/13523: [ 865.862089][ T31] 1 lock held by syz.2.2017/13642: [ 865.867246][ T31] #0: ffffffff905f4930 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 865.884728][ T31] 2 locks held by syz.1.2034/13723: [ 865.890381][ T31] #0: ffff888034b1e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1ce/0xdd0 [ 865.909305][ T31] #1: ffff888075bbf4b8 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0xe1/0x8e0 [ 865.926630][ T31] 2 locks held by syz.0.2077/13937: [ 865.939136][ T31] #0: ffff888050119ec8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 865.979906][ T31] #1: ffffffff8e7f4ef8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 865.999091][ T31] 2 locks held by syz.1.2095/14006: [ 866.004355][ T31] #0: ffff8880466e4cc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1ce/0xdd0 [ 866.058811][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 866.078605][ T31] 2 locks held by syz.1.2105/14047: [ 866.088781][ T31] #0: ffff88813fe88340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1ce/0xdd0 [ 866.113738][ T31] #1: ffff888066f19298 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0xe1/0x8e0 [ 866.144898][ T31] 2 locks held by getty/14609: [ 866.158751][ T31] #0: ffff8880382610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 866.178740][ T31] #1: ffffc9000352b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 866.198766][ T31] 1 lock held by syz.3.2272/14670: [ 866.203955][ T31] #0: ffffffff905f4930 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 866.248734][ T31] 2 locks held by syz.4.2360/15039: [ 866.254020][ T31] #0: ffff88805f481ec8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 866.279106][ T31] #1: ffffffff8e7f4ef8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 866.309587][ T31] 1 lock held by syz.0.2380/15109: [ 866.314784][ T31] #0: ffffffff905f4930 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 866.358665][ T31] [ 866.361116][ T31] ============================================= [ 866.361116][ T31] [ 866.439132][ T31] NMI backtrace for cpu 1 [ 866.439163][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 866.439211][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 866.439222][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.439241][ T31] Call Trace: [ 866.439251][ T31] [ 866.439264][ T31] dump_stack_lvl+0x100/0x190 [ 866.439317][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 866.439371][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 866.439419][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 866.439472][ T31] sys_info+0x141/0x190 [ 866.439513][ T31] watchdog+0xd25/0x1050 [ 866.439576][ T31] ? __pfx_watchdog+0x10/0x10 [ 866.439626][ T31] ? __kthread_parkme+0x18c/0x230 [ 866.439675][ T31] ? kthread+0x13a/0x450 [ 866.439719][ T31] ? __pfx_watchdog+0x10/0x10 [ 866.439766][ T31] kthread+0x370/0x450 [ 866.439806][ T31] ? __pfx_kthread+0x10/0x10 [ 866.439850][ T31] ret_from_fork+0x754/0xd80 [ 866.439901][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 866.439953][ T31] ? __switch_to+0x7b4/0x1120 [ 866.439989][ T31] ? __pfx_kthread+0x10/0x10 [ 866.440033][ T31] ret_from_fork_asm+0x1a/0x30 [ 866.440089][ T31] [ 866.440100][ T31] Sending NMI from CPU 1 to CPUs 0: [ 866.573309][ C0] NMI backtrace for cpu 0 [ 866.573335][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 866.573378][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 866.573395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.573411][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 866.573447][ C0] Code: 28 87 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 8a 20 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 866.573474][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 866.573495][ C0] RAX: 000000000038f7f3 RBX: ffffffff8e4975c0 RCX: ffffffff8b8afc75 [ 866.573514][ C0] RDX: 0000000000000000 RSI: ffffffff8de73b43 RDI: ffffffff8c1ace20 [ 866.573531][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 866.573547][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 866.573564][ C0] R13: 0000000000000000 R14: ffffffff90d93010 R15: 0000000000000000 [ 866.573581][ C0] FS: 0000000000000000(0000) GS:ffff88812435f000(0000) knlGS:0000000000000000 [ 866.573606][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 866.573623][ C0] CR2: 0000001b2dd8dff8 CR3: 000000000e598000 CR4: 00000000003526f0 [ 866.573640][ C0] Call Trace: [ 866.573649][ C0] [ 866.573657][ C0] default_idle+0x9/0x10 [ 866.573689][ C0] default_idle_call+0x6c/0xb0 [ 866.573722][ C0] do_idle+0x35b/0x4b0 [ 866.573765][ C0] ? __pfx_do_idle+0x10/0x10 [ 866.573810][ C0] cpu_startup_entry+0x4f/0x60 [ 866.573856][ C0] rest_init+0x251/0x260 [ 866.573890][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 866.573940][ C0] start_kernel+0x47f/0x480 [ 866.573980][ C0] x86_64_start_reservations+0x24/0x30 [ 866.574022][ C0] x86_64_start_kernel+0x12b/0x130 [ 866.574068][ C0] common_startup_64+0x13e/0x148 [ 866.574113][ C0] [ 866.837400][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 866.844337][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 866.855172][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 866.860410][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.870514][ T31] Call Trace: [ 866.873842][ T31] [ 866.876805][ T31] dump_stack_lvl+0x100/0x190 [ 866.881555][ T31] vpanic+0x552/0x970 [ 866.885600][ T31] ? __pfx_vpanic+0x10/0x10 [ 866.890193][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 866.896427][ T31] panic+0xd1/0xe0 [ 866.900210][ T31] ? __pfx_panic+0x10/0x10 [ 866.904885][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 866.911118][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 866.917333][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 866.923812][ T31] ? watchdog.cold+0x198/0x1ca [ 866.928622][ T31] ? watchdog+0xd35/0x1050 [ 866.933178][ T31] watchdog.cold+0x1a9/0x1ca [ 866.937924][ T31] ? __pfx_watchdog+0x10/0x10 [ 866.942660][ T31] ? __kthread_parkme+0x18c/0x230 [ 866.947751][ T31] ? kthread+0x13a/0x450 [ 866.952039][ T31] ? __pfx_watchdog+0x10/0x10 [ 866.956761][ T31] kthread+0x370/0x450 [ 866.960886][ T31] ? __pfx_kthread+0x10/0x10 [ 866.965692][ T31] ret_from_fork+0x754/0xd80 [ 866.970370][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 866.975552][ T31] ? __switch_to+0x7b4/0x1120 [ 866.980281][ T31] ? __pfx_kthread+0x10/0x10 [ 866.984922][ T31] ret_from_fork_asm+0x1a/0x30 [ 866.989743][ T31] [ 866.993379][ T31] Kernel Offset: disabled [ 866.997720][ T31] Rebooting in 86400 seconds..