last executing test programs: 20m15.012296401s ago: executing program 1 (id=765): mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = io_uring_setup$auto(0x8967, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd6\x00', 0x147602, 0x0) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x3, 0xfff, 0xffffffffffffdc31, 0xffffffffffffffff, 0x1) r2 = socket(0x2b, 0x1, 0x1) capset$auto(0x0, 0x0) getsockopt$auto(r2, 0xfd, 0xba98, 0x0, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffffff, &(0x7f0000000140)=""/96, 0x60) shutdown$auto(0x200000003, 0x2) modify_ldt$auto(0x1, &(0x7f00000000c0)="811ac2937dd0a049ac30f25cf77a61eb3dc03dc005bd24aa01c8108d90c33607827ca50d0c433f8011eead91c1f0deeadb9369a247acd8c7a7ebcc80187a6968b282749322ff", 0x9) readv$auto(r1, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, 0xff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xffffffffffffffff, 0x2) 20m13.553185005s ago: executing program 1 (id=769): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = socket(0x2, 0x5, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)=0x74c7) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nbd10\x00', 0x80, 0x0) flock$auto(r2, 0x8) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000240)=""/171, 0xab) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r5, 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r0, 0x8, 0x400000040000005, 0x8) mmap$auto(0x0, 0xc685, 0x3e, 0x1200000010, r3, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram7/integrity/write_generate\x00', 0x2062, 0x0) 20m11.776760306s ago: executing program 1 (id=771): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141200, 0x38) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000000)='./file0\x00') mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x40000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(r0, 0x6ed4, &(0x7f0000000100)={{0xf0, 0x8}, {0x2fca, 0x6}}, &(0x7f0000000140)={{0x9, 0x4a}, {0x100000001, 0x7}}) close_range$auto(r0, r1, 0x5) r3 = pipe$auto(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) eventfd$auto(0x8c) socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x10000, r5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) sysfs$auto(0x2, 0x41, 0x0) close_range$auto(r3, 0xffffffffffffffff, 0xeff4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x50440, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r6) setresuid$auto(0x0, 0x7, 0x8080) r7 = socket(0x10, 0x3, 0x6) bind$auto(r7, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x6a) 20m10.471420434s ago: executing program 1 (id=774): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/queue/stable_writes\x00', 0x183a41, 0x0) writev$auto(r1, &(0x7f00000002c0)={&(0x7f0000000480), 0x5}, 0x1) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x6) madvise$auto(0x0, 0xfbffffffffff0009, 0x19) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card2\x00', 0x40000, 0x0) fcntl$auto_F_GETLEASE(r2, 0x401, 0xa) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto_SO_RCVTIMEO_OLD(r3, 0x84, 0x14, &(0x7f0000000000)=')\x00', &(0x7f00000000c0)=0xb) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2bca42, 0x0) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xa, 0x8, 0x0, 0x0, 0xfffffff7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x703d42, 0x0) pipe$auto(&(0x7f0000000140)=r3) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon5\x00', 0x105000, 0x0) 20m7.485548952s ago: executing program 1 (id=777): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x100, 0x4020008, 0x7, 0xeb1, 0x401, 0x1008000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffff8, 0x103, 0x0, 0x1c) r1 = socket(0x2, 0x2, 0x1) setsockopt$auto_SO_PASSSEC(r1, 0x0, 0x22, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x100, 0xdf, 0x9b72, r0, 0x8000) syslog$auto(0x3, 0x0, 0x5) lseek$auto(r0, 0x1a, 0x1002) syz_clone3(&(0x7f0000000340)={0x100400, 0x0, 0x0, &(0x7f0000000100), {0x11}, &(0x7f0000000180)=""/2, 0x2, &(0x7f0000000240)=""/161, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), r2) ioctl$auto_FS_IOC_SETFLAGS(r1, 0x40086602, 0x2) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000840) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x204) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x4, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x68, 0x8000001c, 0xcd4, 0xb, 0x401, 0xf25c, 0xd8]}, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000040001fd, 0x2, 0x4, 0x8, 0x9dc, 0x200000006, 0x101, 0x10004, 0x5, 0x3, 0x5, 0x2, 0x80000000, 0x9, 0xffffdfffffffff81, 0x5]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) ioctl$auto_SNDCTL_DSP_STEREO(r4, 0xc0045003, 0x0) close_range$auto(0x2, 0x8000, 0x0) 20m6.370353524s ago: executing program 1 (id=782): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x13d043, 0x10) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x889d, 0x0, 0x12, 0xc45) msgctl$auto_MSG_STAT(0x0, 0xb, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xfa\b\x1c\xc7k\x00\x00\x00\x00\x00\x00', 0x81) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, 0x0, 0x1e) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) pread64$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x9fffffffd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) 19m50.81960857s ago: executing program 32 (id=782): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x13d043, 0x10) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x889d, 0x0, 0x12, 0xc45) msgctl$auto_MSG_STAT(0x0, 0xb, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xfa\b\x1c\xc7k\x00\x00\x00\x00\x00\x00', 0x81) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, 0x0, 0x1e) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) pread64$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x9fffffffd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(0x0, 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x10000, 0x100009b72, 0xffffffffffffffff, 0x8) 17m32.56196315s ago: executing program 3 (id=1138): bind$auto(0xffffffffffffffff, 0x0, 0x66) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0xb6bd) io_uring_setup$auto(0x1, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [0x0, 0x3f00], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1348, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) 17m32.19943987s ago: executing program 3 (id=1139): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7ffff000) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 17m31.173789816s ago: executing program 3 (id=1143): bind$auto(0xffffffffffffffff, 0x0, 0x66) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockopt$auto(r2, 0x28, 0x8, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) r4 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r5 = getpid() shmctl$auto_SHM_STAT(0x7ff, 0xd, &(0x7f00000002c0)={{0x2, 0xffffffffffffffff, 0xee01, 0x1, 0x9, 0x7, 0xfff1}, 0x0, 0x9, 0x4, 0x5, @raw=0x400, @raw=0x884, 0x6, 0x0, &(0x7f0000000180)="bb28b63271aa0eb23edc9ffc9995e123b89e6e1ce6959baaffc8cb55785b0719131383094baec1dc57b31191da8371591112facc38e4ee4a6e252abb03872e29aebba2fa04b1c5ce14b9ec4ed744962781a14ee65ead9cb7c2920b971587d66eb86886ef8016cec3678c161e6fb17b79e185f7db611ed80e4b660ecb23bcda04d867f6e450e78534f387d9455798e06732f0ca903bf732c6ceaafad4e08b0567fe37cf4fb704d71fef9d32e94417167361", &(0x7f0000000240)="da1b83fb81e69a6caf1a78fdf1de13fdb27e93a167b7636d3f252dc0fdac192a285af55680fd45a5ea"}) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f00000026c0)={&(0x7f0000000340)={0x2380, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x27c, 0x2, 0x0, 0x1, [@nested={0x1a3, 0x134, 0x0, 0x1, [@nested={0x4, 0x23}, @typed={0x8, 0x110, 0x0, 0x0, @uid=0xee01}, @generic="2b2a2d64c1758dc6b5335d98022785790613a0bfbefc0ed9eba54e906d7fdf25c05bf73219466c02706fbe3bad2999152b5460393689ff7a5541338ec4628fd53656fa406c45749efbea66453e5e3d30c9fedb2eddea7f6e7fd2258b358e54c8c4df7ef4b8e0dfd592e14623a60e4a5614613f744efcd8a9bc627ac6d082ad7f161f4a0a6803919060727ee25cf80b2095f867aab9e8508a613c96312007d78ae689afb39287466f8038a7abba30d0088ba1c5", @generic="63858931d0627c98262f3ebf4658dd4b68141a4453d4ad92fb5541a2375f64c0f8f8befa7ea4cd85fd8cfac9925881a8c13daf2a0c16bd37f0be2c0fa2e1080344eda99dae323801b16eb359977b88b650f7396d5499712c2b81b8d04413712bbc6f9aed20194b537b3fb3b4150eb0c8a2ce90334ecd5c7028a66688dd0b499606d916f17797c5565924b52a85369b1d23ea48989fd90da3679b30b0257aaed7bbd84f1b8829c09dd3801110e429de33008d80708a37afbf17881acae408e4120c7c66dacec81182bbcc54738a2efbd20e08ca4631d053e6886ae3", @generic="95a052db86"]}, @typed={0x14, 0x16b, 0x0, 0x0, @ipv6=@remote}, @nested={0xb8, 0x149, 0x0, 0x1, [@generic="1952c821e7d104f73265fb1673b4424a9ba5de46a838eeda21a52d822e7df38e2f51a6b74d0919c6c26b7338e2e00507b12abd80194c2a4415237bbd9f2d73fd788597081233dcf28b9a312d163dea186da14b9d3fbdde", @generic="1edae4d1b64a28d65d9c8bdf01f81c7642ff58f09a630f0d7fe11e712c5207599e5b3303493c117dfade29e1a78b6522d10896c9e07163374e5d67883ea47f9f2ac7a6d268fb27aa4a57369b695793c65e15e6ef3b9e710cacb38b5146"]}, @typed={0x8, 0x9d, 0x0, 0x0, @fd=r1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3ad, 0x2, 0x0, 0x1, [@nested={0x203, 0x3a, 0x0, 0x1, [@generic="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", @nested={0x4, 0x151}, @nested={0x4, 0x49}, @generic="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"]}, @generic="1976cb6f78d94dbeb0d9038fe15420724bf12f444985cd4702b078ee3a1dda67c3b1f9be5d19b436f38ad3e8d4105853128ec63362201cca136b45e74bda4554a8e3980965", @nested={0xd1, 0x2d, 0x0, 0x1, [@nested={0x4, 0x6c}, @generic="d3b0f6215f08a019ef6f2b8070b7ec8f8b0c33858ddf2a440db91cf26e694efa6989cf319b09302246cbf0e9a844dba243393525fc44cd76a447a25e07040330ad0aed9438bd509d415794cae95ab3fa89877dcd2cc6958f1424aff7ddb3983356ef38c607e0495dd289608316cd906b531ae215b6fc22811cadaded6c4ab0d20cb760c47ba89f2196a30ef5c87c4ab397c645ddf0efa6e47da4cb5fc7b9884f9516c2a9990c4e69acb91dce78f1f5f420b947f961337fc6cda3a61e29aae0100e988ec51d843a3601"]}, @nested={0x8c, 0xb5, 0x0, 0x1, [@generic="681c9921ffae27f36b706dc03247da26f57f66b0203e96b44b08b618a07731a9b05172be664b1be1ca8a04bebf5aa5e3f788a95d47b9573dff0c9ffa28cac438803b87ee9fa2959a6dce0837ce7a9430d797b4c5314a202e52312fe6bb19d2c4eac354dfc471599068261ef9f81dc86e58982b9289ed3b136baa8ab77393e2987e648ff346e8c93b"]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x157e, 0x2, 0x0, 0x1, [@generic="173226699cc34cdbcf1b7fa84bcc34d1cc09cc81d3fefcfcbeaf283443c980e1180919f018dcd700df8d3ce3439a9e77339de4707651eb4fcbd82bc0463257831892c65a195b60ee115faa69965bf8be74a2716487566c38d45692d04357c19630522b46a0ca1989e8e01e9754f7b31d2d54af65a219663848e90629e37345e062cadae7bff116ed72b4779ff68e4c668cb6d9a00f80164dd08e6be7a982fd0f22986adafc36eafd4fafee9fef68c4cfac0ec0a8915bda7462ac2189225235727b78738a6aab", @typed={0xc, 0x4a, 0x0, 0x0, @u64}, @nested={0x1a9, 0x79, 0x0, 0x1, [@generic="510cb28d4afab26b2ff850a3d8025c5c9e3235cab32ad062020d18ef1c7b82d1f5fcc0b6665a7e88cd551abdc715119caf38cd5e560bf2614b99347479ac6f4c06b6f9fa41c935546fd7a1d084e549b624ddac1594507cce93780d84f82b2e276bee447db1e45aec4f703d0f0b1c4ce9b693e06340376f3133ca1971c64fe0f68b469c0d695a5572407d31c30c46035fe3a66446c1280a77c2a54ac02f68e1eb75ab800a55de2c67", @nested={0x4, 0x1a}, @generic="6031bdc5073d5c81d792e709e149cc965c0f8dc8aba8f032a60269c1546f3786b081efaa75a3c359f898c3927893a7ac28a9f13feb5672299f66f6da19875462a0baa376b7a48206c72b7e74bfb0254ffafcd3896189b504808a1b97b74b0955574f2780fa0120bcb39a9e3fd4c5dbf5959b8249a0ddbb1d186c62cbc8ed34d413b9a4edcf82f95f32ca0269fc451124c525355c89543d1ec8dc6edc18f439e7fec2c76fcc630ed284c98f8836cd07e45e6712dd9c773f14f762947474b72df993149dcf04273e42b58579dfbc325cb7187dfffeeb3ecf1b61ca8a42", @generic="828ab509fd13db1560f377bf7d64254e64eeba5d43c1f3cd4c", @nested={0x4, 0x28}]}, @typed={0x4, 0x115}, @nested={0x1189, 0x146, 0x0, 0x1, [@nested={0x4, 0xc9}, @generic="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", @typed={0x8, 0xdb, 0x0, 0x0, @u32=0x1000}, @generic="6b34213cd19865f46f6eb8cb71ec9113464f591d01da67dfec30a5be040193622d4ba1d26643111744b367a41f1b1d2b0b6be648dd5f93169981addd0534cb6a515a0ed91d235e61e3fa94e65b8cf34a6c8ec389fb5a2176b7c849e7456c5acd2b21c66d93bf2bc575085b1a2280b8269e0e08536c3b912bf7ce6fa65af579ddae4c4762ce6d8205a3ecd63ad36d1ec029764d026836d88ef37b0e2437fb0570efde5f89667c7532997b7f4075f1ad6f4e26a3aea58855bdb1c75a8643835a4fc8900f704bc50acb105ec9b8d58b", @generic="6a663f08e16f46365f1b79553710b9c77a8b5ddce39eeba4bd09d2511e4447816d67b87b322a774b793bc736cbef85446c2d1cff7288efec7ba25ceed5a8cb348cc396f8272537b200c1a5a8f45a53ac0ef17ef226b74f20bf9d102b78092295043e7bc5ec3b9eca5e320bb36f322ede8925adc11bb8ae77657de3af24a3e96fc27c0936987a91ab536a303582bc5eed81bb6b7f2808d0b4e89f320fb92f3ac107e1581fae7147f53aa1a0"]}, @generic="1f4183", @generic="aa8459f214c777cd72a24c429cf1c0f1a4f1d1911ea24623e398944d014ac3e37361b1f98fb50f190c789192b0d26de71935d59e9df591fbe10f2b606e06bc394d676358b57dcb9eb6b72087a20a", @generic="a8d04dedcfa07a42a81ec6074ae6c75791976a91f6b6bba605fffdd1e4a2950d4d4179d9976730559c057a96dd71080e0c7a10ce1afc590494a72475146acafb7b765c1b1bddeddbf1e33cc67dbbff9a8ab157a7218876203934a555f8805b8fc2fed80e312172dae2897f67470f8cb999badd639f800fe2d104a3f26d82a7145a7e53b6a8f30e1e91fe4da29b8ceaff641edc1dc69603ae469ebc46e708f4015aa7a333a31b5d8662da489b30c6b6fb5cdfc1bc2bc6b87faf4cfda016298bd057615e27df31c827817c6a66fb52a4eb39d82d1d11edb2b1a62290a823c07aabbc49f766ea823b3bd2e52452db98e3ef7550f7", @generic="2f0ae963979b0031b408bd0ebd4e2e5a7aeafe1aeef42510581dc9e2", @generic="90c9f090ab86fce0d8da4365"]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x9, 0x2, 0x0, 0x1, [@generic="8f66794716"]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x7b3, 0x2, 0x0, 0x1, [@nested={0x14a, 0x12f, 0x0, 0x1, [@nested={0x4, 0x2d}, @generic="f3ea7fdf7a", @nested={0x4, 0x139}, @nested={0x4, 0xb3}, @generic="1188f3e3251999944ff75379a2e0429a05b191bf5b06f460f1a85325c57b10ed03167b5c6e23b7b76c295f74279be227f674c8d33feac109c7d1771a42119fc591e3fd3628b39e6bd21b3dc6b162c4de9f34d7cf90142e689230ee59a441a55c0d1858c5a0f04d3a1182cac9a18ba48bb202e08cfef8566a0dafda70da346d11a1b9b0f374634aef58b0952444431c2b05d2c3238d1e91", @generic="cc6ae533292ae6a98d4fdb3861b02385c5fccd1c3640b6dfb516b44aee5b0046012f736185deacd0bfc34c3bf45f448475b1721e2a983f38e72e3071e52b2bacfb81e8c58259b9b0bf24e98a32c1483b5fc7207d099ba8fda0b0d323f912221c870986317608393604fe1b83f61f96fc45728155f1a968f52b88f0725a136de75e83ce3fe5bc30e22399cd6780042e0ba5ac", @typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}, @nested={0x117, 0x139, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @u32=0x1000}, @nested={0x4, 0x7e}, @nested={0x4, 0x13c}, @generic="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", @nested={0x4, 0x29}, @nested={0x4, 0x138}]}, @generic="ca5b8066f722cfb54d6cde04ffee88eebfe7640e55bfea59933add0960c27e556e85bd999e05298e4d529082bfe2fec790f28d3f24c273096d6eab42a1cc5819c8da4ba3883f3052585830cb53830ee84e2b25d038c3059db8f8dd9c5b524bf409700921ae3e5ee9afbb207017edad5fb5fc0f", @nested={0x324, 0x135, 0x0, 0x1, [@generic="e85f4ed745e3c243bcf806e2ce5e1fb380f689cdc4dc5a1a35e07d49fbdfd60a361f23900bde3bd97fa92bbe7876d6d95c2143407e4067cf9bf7437af81f96e89fd90714bf93cb1f682f4102836b52c01b9a83a0412353a51e43669eeddb44fed1907c4cf9985dfcce72ede8cc504c1f759e5fd318717407ea82b9cc59ca82d19d80c661e0112ff5bfa58563d29d7db5f2e949f496bf909951661dc65eed2905340403ed72af85d50b0bb4e14610621240b1cba5dd018e535d591ec233bd1e740cd94108db249c6e780f6065b87ab58ba2ba099a3253cb93698ce0051130a230bb7883ae91ddb8d4a8a51bda684efdf2126e383fb928", @typed={0x8, 0x125, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="b38f8a0600099fe5b167d870191682403937977d585efe4a649e20a5ac50accb1c0e850a3e61d6fce19b5cf4ae86a402a8017616fc23f26d0d688b07ba10d2d1b57f9669d421b860682505fc70afd4666a9d199f9daf1f64d4dde3c99402d9e7cbe229b42c576131dafce0f0e1d6e02b14a9055d7b515edaab02291b1141c460c030b49fa959dd804c14a6a0e72f62420f005d266f2db8e6", @typed={0x8, 0xb1, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x52, 0x0, 0x0, @pid=r5}, @generic="55ee7fe7232100bd010819ff4791dff49a1f61171f86d96e7c364c0e86ae7c9ce7a36b78cf07d644e3b6aa9a77844b8cc76467356d1beccf0aa39660f291d08c847c618eda2d8e3f3af13e0998a4c49c246a8e655d67b61c649c035c7cbc00ff9ca1d48d17a6b87cc0c0ab9cbbcc0b9b3403b8a5113a9805e19ffc642401dc2e74c8b914ce6eaeb8e4fc1c602be8cbcfcf88e7", @generic="647a0a3a9ab55b2dc573d9e31eeb06b9c00b933ab083289e6957adb98836ec46dcbcb82d76a245a31330d8acff9938c85e3c24fce97c56a9245382235eaa84fd6892815d04f8cf92fc61cf069da196d7ccaab7f9f15842f546d2ac4516e3a005bf14c084568d98e967079c7bd3e99fb7191d10da08d3a6b6ad4e110be0683018b8bf4d9b5a801d0df0cd1d9f54661a0df989f4514257c267f48dfff9e41c4374e5d8d3371303b83ab809aa3b71407776f7116c781ba5c0584a4a41101f1b977560e20bcd5acaea9db6f43e542507e90cf993d43945a87856254ffc8eb343c55760e1d908a7ad28"]}, @nested={0xa7, 0x73, 0x0, 0x1, [@generic="e42d3fc72857441bce774d9e9563f5d144fe4d0f08bf7fdf7f4663c56ed9bb5a087d713ef5f1a4f5451b970775d50d77d6240d5a55bbfe4ce969cf29c59602aa00b4e5018d2c96020cea179d8c22ef79c758f9baecc0774921ad88f7553be8c26395d5499be9c656c22f2ddb92f5d14823cc27fdc1ee1b411b561def6b867fa8aa2b2b685cac87884810f69e5defae748de50f", @generic="3d8fa04570a602054d8fa398", @nested={0x4, 0x139}]}, @nested={0x10a, 0x6f, 0x0, 0x1, [@typed={0x8, 0x156, 0x0, 0x0, @uid=r6}, @generic="8752884c6ec7", @nested={0x4, 0x80}, @nested={0x4, 0x68}, @generic="c6a76b5a53f269f43126aeb2c1db444ea7d18c197f99a78a9a50892078dea65728e02970", @typed={0xcb, 0x125, 0x0, 0x0, @binary="564860ac8f9be5ff603af6702ce4d1f4a768eb09171c1d5470bd9f30c7f65105ffbec97cfe636378afbe93d692a63041212d65a41061259b4d659f93f91564aa0c7c349caed5383d9a8ef494bfd6ce9c8443c4caed01d4e268b9cbd7a2db9105fef9f13aff22c11577520db0919a54f26714b2e87f2a1c0a92bc3875604f02e8fe2512e732b2b2e56f7a0d103e14354f606af672a0ebed6c19155946a4654e8a9b86fb8e8a40c4a612e2cc0b3c511eb856b9c8a066fc820393348d474432dda9483fb4ba7ef948"}]}]}]}, 0x2380}}, 0x84) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0xb6bd) io_uring_setup$auto(0x1, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1348, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) 17m30.898064329s ago: executing program 3 (id=1144): unshare$auto(0x40000080) madvise$auto(0x110d230000, 0x1, 0x9) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socketpair$auto(0x4, 0x3, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) fgetxattr$auto(r0, &(0x7f0000000040)='8O3+\xd2\xa1(\x8e\xe8\xa1\x86\xae\xfd\xd4\xee\x12A\xc0\x0eP\xfc\x9bh\a\x80\xc5s5t\x11!\xc5\x1a\xf7T3\xd0\"{\x80\x98\xdd\xd6\xfe\xe6\xaf\r\x89F\x06\x9f\xb8\xca', &(0x7f0000000340)="29c8ebaf6947f3ffe0dbb507862dce7684a9ce6f6102bafc819c51267530a8993117f18ac399be48f79e58448426cc9d266d8bf870a48d77a21382c16a529b73e1bf97c470fa8c936a02ff2b2b6d470e27c15b66b80b57663bc80a7d43fa1978131ee3b22b909d8b4584a64ca680746fdce6287bdfe725d47c8aaa85ecc55eb29324b6d3627671f06d2bca1cd51f200cf60fa212a9b7bceb60399dc10c06ca027225fa8fb357450f80a1374f38d625d341198604e9bdd890e010da15b2f4575507166edd9c39ab6b395fe5cfd73963475e70418707e1fa6dcce7940f0121aa9f19f919b283", 0x8000000000000000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) socket(0xa, 0x2, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f00000002c0)="65507307ff6587a725ca876e42e5669f20ae2e", 0x13) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r2, 0x1, 0x44, &(0x7f0000000080)='\x00\x00\x00', 0x5) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer\x00', 0x103143, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x40, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x5, 0x9, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x4fa5}, 0x1, 0x4000081, 0x3, @inferred, @integer={0x0, 0x2, 0x8001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b6427a441b078fb2c1c61c328894e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 17m29.488009406s ago: executing program 3 (id=1148): bind$auto(0xffffffffffffffff, 0x0, 0x66) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0xb6bd) io_uring_setup$auto(0x1, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [0x0, 0x20000], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1348, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) 17m29.249533568s ago: executing program 3 (id=1149): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) mmap$auto(0x9, 0x80000006, 0x5, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_uring_register$auto(0x2, 0x13, 0x0, 0x20) (rerun: 64) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x100000000000000, 0xe8, 0x0, 0x2, 0x0, 0x2}) (async, rerun: 32) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xd5) (async, rerun: 32) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0xc7) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x2c, 0x0, 0xfff8, 0x1, 0x0}) ptrace$auto_PTRACE_LISTEN(0x4208, r2, 0x8, 0x4) 17m13.682444071s ago: executing program 33 (id=1149): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) mmap$auto(0x9, 0x80000006, 0x5, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_uring_register$auto(0x2, 0x13, 0x0, 0x20) (rerun: 64) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x100000000000000, 0xe8, 0x0, 0x2, 0x0, 0x2}) (async, rerun: 32) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xd5) (async, rerun: 32) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0xc7) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x2c, 0x0, 0xfff8, 0x1, 0x0}) ptrace$auto_PTRACE_LISTEN(0x4208, r2, 0x8, 0x4) 9.183604877s ago: executing program 4 (id=3411): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x0, 0x0) 8.252433157s ago: executing program 4 (id=3414): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, r2, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) sysfs$auto(0x2, 0x3b, 0x0) 6.024133426s ago: executing program 4 (id=3418): mseal$auto(0x0, 0x7dda, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = socket(0x15, 0x801, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@ax25={0x3, @bcast, 0x4}, 0x9) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x2, 0xeb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10088, 0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000127bd7000fedbdf252400000008002c00030000000500080047000000e9a66ac557aec534ed5f424e63a55c9fdec7ffca6f4b2d08c3b079d340550ef2670c0379fd8b1d9cac4255d4d5f695fa88aabd89af69b9370e97555cf6d934d3fde5242eef3f509c57024d39c5b0e74bc79d7f950cb020"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x800) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x44100, 0x0) unshare$auto(0x40000080) rt_sigsuspend$auto(0x0, 0x8) 5.770912562s ago: executing program 2 (id=3419): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x1) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) madvise$auto(0x0, 0x200007, 0x19) 5.060933447s ago: executing program 0 (id=3420): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xe4e, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r2, 0x410, 0x0) symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8800, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(r3, 0x8010aebb, r4) close_range$auto(0x2, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r0) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x10}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x81}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "b6189f84470e49fa5c17716ae72d580de23fcebb0e56bb43f5606c0fe68ee8be435d24e1540ebd1cca29cfb05a536bec39704699023ee38a7cb820bdefde3b7572fc80b3b87f3fa44262d7a0929eabc8d8eaf88be377dad22e78b0fdb1db79923e5cea999c44da80c29b23b6c6bea14765380c6c23af6fd21a7abaf423189b54"}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) mmap$auto(0x0, 0x1000400008, 0xdf, 0x9b72, 0x2, 0x8008) close_range$auto(0x2, 0xa, 0x0) 4.961805319s ago: executing program 4 (id=3421): unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xb, 0x802b95}, 0x0) writev$auto(0xc8, &(0x7f00000028c0)={0x0, 0xffffffff}, 0x9) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) r0 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r0, 0x0, 0x10, 0xccbd5d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendto$auto(0x3, 0x0, 0x18, 0x7, &(0x7f0000000180)=@hci={0x1f, 0xdd86, 0x7}, 0x22) r1 = socket(0x28, 0x5, 0x0) connect$auto(r1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xc56e, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') symlink$auto(&(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='}[,&*}/file0\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x62d4) lsm_list_modules$auto(0x0, 0x0, 0x0) 4.777805457s ago: executing program 2 (id=3423): socket(0x10, 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd11/queue/wbt_lat_usec\x00', 0x1c2b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = memfd_create$auto(0x0, 0x8) r2 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) ioctl$auto_TUNGETIFF2(r1, 0x800454d2, &(0x7f00000000c0)=0x1) (async) fallocate$auto(r2, 0x1, 0xd, 0x5) (async) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(r4, 0x80045430, r3) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x212100, 0x0) write$auto(r5, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, 0xffffffffffffffff, 0x83fe) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0xa, 0x3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r8, 0x4b67, 0x1) (async) io_uring_setup$auto(0x1, 0x0) 4.483547957s ago: executing program 0 (id=3424): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\xf8', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) madvise$auto(0x0, 0x200007, 0x19) 4.294978088s ago: executing program 2 (id=3425): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 3.740379504s ago: executing program 5 (id=3426): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, r2, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) sysfs$auto(0x2, 0x3b, 0x0) 3.614147726s ago: executing program 0 (id=3427): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x101, 0x0) socket(0xf, 0x80005, 0x0) socket(0x2, 0xa, 0x100073) socket(0x2, 0x1, 0x84) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000002ac0), 0x80000, 0x0) wait4$auto(0x0, 0x0, 0x5b80, 0x0) semctl$auto(0xfffff4ad, 0x79a, 0x5, 0x5) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/binderfs/binder1\x00', 0xa00, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(0xffffffffffffffff, 0x40045506, 0x0) 3.383015641s ago: executing program 0 (id=3428): unshare$auto(0x40000080) unshare$auto(0xffffffff7fffffff) clock_nanosleep$auto(0x4, 0x2, &(0x7f0000000000)={0x4, 0x80}, 0x0) writev$auto(0xc8, &(0x7f00000028c0)={0x0, 0xffffffff}, 0x9) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) ioctl$auto(0x3, 0xae41, 0x38) close_range$auto(0x2, 0x8, 0x0) 2.922198474s ago: executing program 4 (id=3429): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d000800", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, r2, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) sysfs$auto(0x2, 0x3b, 0x0) 2.321613819s ago: executing program 2 (id=3430): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x2, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xf856, 0x7, 0x4000000000001d, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0xfff) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x83) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) pwrite64$auto(r3, 0x0, 0x8, 0x3) write$auto(0x3, 0x0, 0x1) lseek$auto(r2, 0x5, 0x1) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) mmap$auto(0x0, 0x8000400008, 0xdf, 0x9b72, 0x2, 0x1) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r4, 0x0, 0x2d) read$auto_regulator_summary_fops_(r4, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x58) mremap$auto(0x3, 0xa, 0x3, 0x4, 0x200000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) 1.953899972s ago: executing program 0 (id=3431): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25050000001c0001800800058004007d00100001800a"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r3, &(0x7f0000000100)={&(0x7f0000000400), 0x8}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x7, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) r5 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) r6 = bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, r5, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r6) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048015}, 0x40800) r7 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto_component_list_fops_(r7, &(0x7f0000000100)=""/78, 0x4e) sysfs$auto(0x2, 0x3b, 0x0) 1.702760781s ago: executing program 5 (id=3432): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote_size\x00', 0x40e280, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000eb1, r0, 0xfffffffffffffff8) (async) close_range$auto(r0, 0x8, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f00000003c0)=@batch={0x7fffffffffffffff, 0x1000, 0xf3a, 0x1, 0x10000, r1, 0x916, 0x10000000001}, 0xffffffff) (async) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0x7, @any, 0xe000}, 0xffff000) (async) connect$auto(0x3, 0x0, 0x54) (async) unshare$auto(0x80000000) madvise$auto(0x6, 0x2003f2, 0x40e2db) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) (async) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) syslog$auto(0x80000001, 0x0, 0x1) (async) syslog$auto(0x401, &(0x7f0000000140)='{\x00', 0x1) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) unshare$auto(0x6) (async) mmap$auto(0x3, 0x4, 0x700, 0x40eb1, 0x401, 0x300000000000) r3 = socket(0x11, 0x1, 0xf) pwrite64$auto(r3, &(0x7f0000000880)='\vX\xb5n\x91\vI\x1eRN8\x99\x88\xca\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x9f:\xcd)<\xbf\x8c16\xe69\x8dT\xae\xa9H\x9e\xe9\x11\xe2\n)\xbe(<\xc7+\x83\xfcQ;CL\x02\x01\x0e\xc2\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xd0}\xd0\xd0\xe5\xee\x9c\xd2\x83o8e\x83}\xb6\xb5\"Xm\xe8\xf2\xa2@XI\xcf\x1e\x96\xed\x06*\xfc\xde?\xb9\xb7\x9d\xb6r9\x02\x1a\x00\x00\x00\x00\x00\xc3\xc3\xdbS\xdc\xfc\x19\xba!\xee\x8b\xdeT3^\a\xb2\xf3}\t4\xa2^NB\xe0\xb2f\xef`\xb9\x8e\xfe\x8e\b\x93]\x00\x00\x00\x00\x00\x00\x00\x00\xe3\x99\xe7L\x12\xaar}\x90\x05>\xab\xc6\x06\x19^e\x9d(\xb9t?\xd1\x80\'\xee\xfa\xc5\x83l\xa6\\a\xee\xf6{\x7f\f\x19\x8f\xc1\xbc\xa1\x14\x94 y\xa6*f\xc1\x12\xd2W\xdb\x8e2\xcd\x04\x10{\x88\x0ex\xcd\x8e\xfc6\x00\x00\x00\x00\x00\x00\x00\x00\a\x9c\xa7\xfbE\f\xbb\x8e^\xa4\xa1)\xa9\x05\xf0\xcc\xc3\xcd\x16\xd2\x16!\x06\x00SJ\x1e\xfd?dE\x13\x98\x14\r-Yc\x95\xe1)%x\xadQ\x15=\xaeJgV:\'\xb5\x01\x1c!P$\x834/\xc1\xe5\xadX\xe7\xb9\xaa\xfbQX\xb2\xea\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x3) (async) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x2, 0x7ffffffff002, 0xffff}, 0x6, 0xfffffffc, 0x0, 0x623a) (async) r4 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r4, 0x0, 0x9, 0x4cbd5d) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) mount$auto(0x0, 0x0, 0x0, 0x2005, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = socket(0x10, 0x1, 0x2) sendmsg$auto_NL80211_CMD_VENDOR(r5, 0x0, 0x4004) 1.50390675s ago: executing program 5 (id=3433): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r2 = epoll_create$auto(0x70c) epoll_ctl$auto(r2, 0x1, r1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319dbf9cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac1004", 0xc4) 1.353123856s ago: executing program 5 (id=3434): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram3\x00', 0x201, 0x0) ioctl$auto_BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000340)={0x0, 0xd, 0xfff}) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000064}, 0x4) shmctl$auto_SHM_LOCK(0x9, 0xb, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x6, 0xff0, 0xf9, 0x7}, 0x1000, 0x0, 0x800000000, 0x1, @raw=0x10001, @inferred, 0x5, 0x0, &(0x7f00000000c0)="2e988573b77ff524913d32aa41b4828060e32097139736792d8164a61f5b757f71f59b6d67ff19ff4296be622b956453355d56719700b69e9d37427ce68dce61334e1300ce300248296ba52c56e37aaa97c78c30280d45ad451a136c6669d89a722f1dc4d0c825f82f642dae7be6b3a2065111af6b79c9f5d9e907016f43437bc6884fa483595ea5577445ed9b1ba5fc95901ddaad310bfc59b00e4f11", &(0x7f0000000240)="6d151c76ec85736281bce3d01561a6f5cb094760abad6b8bfcd51ede4fb6a106702536fa90de3233b6ef0f71aa96b9cfa7acb421a75453957495b6b6cce1d0372c1fc5254c0fabf455bc28de7bff883417ff4bbd84e0499659e5d8fcb38a15053ba03577d321e70850b714fa306e42208c9156d137f2affae0bfcc9b799a785c3a5877be9ce7b3b4bc12bfc53bd3e99547d3ddc71d60ca5910b65c3086ce995ada2179dc"}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10000000001b, 0x9, 0x67, 0x0, r1, 0x0, 0x0, 0x401, 0x1003, 0x800, 0x8, 0x5, 0xffffffff7ffffffb, 0x800a, 0x2, 0xfffffffffffffff8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) setresuid$auto(0xd48d, 0xdc, 0x10) write$auto_evm_xattr_ops_evm_secfs(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.017380984s ago: executing program 5 (id=3435): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, 0x0, 0x81) unshare$auto(0x40000080) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x0, 0x0) 735.594071ms ago: executing program 4 (id=3436): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x8000df, 0xeb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x22) r0 = socket(0x28, 0x1, 0x0) read$auto(r0, &(0x7f0000000080)='ovs_flow\x00', 0x100000001) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x3, 0x4) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) r1 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, 0x0, 0x1) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x3fffff, 0x7, 0x411, 0xdd, 0x0) mmap$auto(0x0, 0x2020006, 0x100000000003, 0xeb1, 0xfffffffffffffffa, 0x8003) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@nl=@unspec, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x84, 0x7d, 0x0, 0x27) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x8001) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) futex_waitv$auto(0x0, 0x5, 0xa64, 0x0, 0x2a5fe50c) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) setuid$auto(0xe) sendmsg$auto_NL802154_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x10}, 0x10) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000100)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) 397.461989ms ago: executing program 2 (id=3437): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000064}, 0x4) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1b, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0x3fe, 0x8, 0x2, 0xffffffff7ffffffb, 0x800a, 0x1, 0x200000100107}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 216.55828ms ago: executing program 0 (id=3438): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 157.551741ms ago: executing program 5 (id=3439): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000400), 0x8}, 0x9) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) (async) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) mmap$auto(0x5, 0x1e97c, 0xc, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189501, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189501, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x4e, 0x3) mmap$auto(0x5, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000140)={0x0, 0xfffd}, 0x9) (async) readv$auto(0x3, &(0x7f0000000140)={0x0, 0xfffd}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0xf3c, 0x4, 0x0) 0s ago: executing program 2 (id=3440): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, r2, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) sysfs$auto(0x2, 0x3b, 0x0) kernel console output (not intermixed with test programs): _ptr+0x10/0x10 [ 1340.325730][T25094] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1340.325763][T25094] acpi_ut_create_thread_state+0x6d/0x170 [ 1340.325789][T25094] acpi_ps_parse_aml+0x12e/0x1120 [ 1340.325816][T25094] ? acpi_ut_ptr_exit+0x10c/0x180 [ 1340.325848][T25094] acpi_ps_execute_method+0x5c4/0xe90 [ 1340.325887][T25094] acpi_ns_evaluate+0x640/0x1670 [ 1340.325924][T25094] acpi_evaluate_object+0x420/0xe00 [ 1340.325963][T25094] ? __kvmalloc_node_noprof+0x34f/0x970 [ 1340.325993][T25094] ? seq_read_iter+0x819/0x1270 [ 1340.326040][T25094] ? vfs_read+0x82e/0xb40 [ 1340.326082][T25094] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1340.326121][T25094] ? lock_acquire+0x1b9/0x370 [ 1340.326166][T25094] acpi_evaluate_integer+0xdf/0x220 [ 1340.326200][T25094] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1340.326233][T25094] ? __lock_acquire+0x49f/0x1a40 [ 1340.326281][T25094] ? __pfx_status_show+0x10/0x10 [ 1340.326318][T25094] status_show+0xa0/0x120 [ 1340.326355][T25094] ? __pfx_status_show+0x10/0x10 [ 1340.326400][T25094] dev_attr_show+0x52/0xa0 [ 1340.326439][T25094] ? __pfx_dev_attr_show+0x10/0x10 [ 1340.326476][T25094] sysfs_kf_seq_show+0x217/0x3f0 [ 1340.326519][T25094] seq_read_iter+0x32f/0x1270 [ 1340.326557][T25094] ? lock_acquire+0x1b9/0x370 [ 1340.326607][T25094] kernfs_fop_read_iter+0x46c/0x610 [ 1340.326637][T25094] ? rw_verify_area+0xce/0x6d0 [ 1340.326673][T25094] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1340.326705][T25094] vfs_read+0x82e/0xb40 [ 1340.326748][T25094] ? __pfx_vfs_read+0x10/0x10 [ 1340.326805][T25094] ksys_read+0x12a/0x250 [ 1340.326827][T25094] ? __pfx_ksys_read+0x10/0x10 [ 1340.326857][T25094] do_syscall_64+0x115/0x840 [ 1340.326886][T25094] ? clear_bhb_loop+0x40/0x90 [ 1340.326917][T25094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.326942][T25094] RIP: 0033:0x7fb2d0d9de99 [ 1340.326964][T25094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.326988][T25094] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1340.327025][T25094] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1340.327041][T25094] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a [ 1340.327057][T25094] RBP: 00007fb2d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1340.327072][T25094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.327087][T25094] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1340.327118][T25094] [ 1340.328955][T25094] ACPI Error: ffff88807d7e8000 walk still has a scope list (20260408/dswstate-694) [ 1342.547219][T25126] FAULT_INJECTION: forcing a failure. [ 1342.547219][T25126] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.580911][T25126] CPU: 0 UID: 0 PID: 25126 Comm: syz.2.2906 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.580950][T25126] Tainted: [L]=SOFTLOCKUP [ 1342.580958][T25126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1342.580973][T25126] Call Trace: [ 1342.580981][T25126] [ 1342.580990][T25126] dump_stack_lvl+0x100/0x190 [ 1342.581022][T25126] should_fail_ex.cold+0x5/0xa [ 1342.581049][T25126] should_failslab+0xc2/0x120 [ 1342.581083][T25126] __kvmalloc_node_noprof+0x116/0x970 [ 1342.581113][T25126] ? __pfx_aa_file_perm+0x10/0x10 [ 1342.581152][T25126] ? seq_read_iter+0x819/0x1270 [ 1342.581194][T25126] seq_read_iter+0x819/0x1270 [ 1342.581230][T25126] ? lock_acquire+0x1b9/0x370 [ 1342.581279][T25126] kernfs_fop_read_iter+0x46c/0x610 [ 1342.581309][T25126] ? rw_verify_area+0xce/0x6d0 [ 1342.581347][T25126] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1342.581378][T25126] vfs_read+0x82e/0xb40 [ 1342.581419][T25126] ? __pfx_vfs_read+0x10/0x10 [ 1342.581475][T25126] ksys_read+0x12a/0x250 [ 1342.581496][T25126] ? __pfx_ksys_read+0x10/0x10 [ 1342.581526][T25126] do_syscall_64+0x115/0x840 [ 1342.581555][T25126] ? clear_bhb_loop+0x40/0x90 [ 1342.581584][T25126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.581608][T25126] RIP: 0033:0x7f465959de99 [ 1342.581628][T25126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.581652][T25126] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1342.581675][T25126] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1342.581691][T25126] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a [ 1342.581706][T25126] RBP: 00007f465a4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.581721][T25126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.581736][T25126] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1342.581771][T25126] [ 1343.220330][T25144] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2908'. [ 1343.834210][T25149] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1346.351686][T25176] FAULT_INJECTION: forcing a failure. [ 1346.351686][T25176] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.404439][T25176] CPU: 0 UID: 0 PID: 25176 Comm: syz.5.2914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.404479][T25176] Tainted: [L]=SOFTLOCKUP [ 1346.404489][T25176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1346.404505][T25176] Call Trace: [ 1346.404514][T25176] [ 1346.404523][T25176] dump_stack_lvl+0x100/0x190 [ 1346.404556][T25176] should_fail_ex.cold+0x5/0xa [ 1346.404584][T25176] should_failslab+0xc2/0x120 [ 1346.404619][T25176] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1346.404650][T25176] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1346.404680][T25176] ? acpi_ps_alloc_op+0x212/0x2b0 [ 1346.404713][T25176] acpi_ps_alloc_op+0x212/0x2b0 [ 1346.404739][T25176] ? acpi_ut_status_exit+0x111/0x1c0 [ 1346.404769][T25176] acpi_ps_create_op+0x4b3/0xd10 [ 1346.404796][T25176] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 1346.404823][T25176] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 1346.404860][T25176] acpi_ps_parse_loop+0x93f/0x26e0 [ 1346.404894][T25176] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1346.404928][T25176] ? __kasan_slab_alloc+0x89/0x90 [ 1346.404963][T25176] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1346.404988][T25176] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1346.405017][T25176] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1346.405051][T25176] acpi_ps_parse_aml+0x81e/0x1120 [ 1346.405082][T25176] acpi_ps_execute_method+0x5c4/0xe90 [ 1346.405118][T25176] acpi_ns_evaluate+0x640/0x1670 [ 1346.405155][T25176] acpi_evaluate_object+0x420/0xe00 [ 1346.405195][T25176] ? __kvmalloc_node_noprof+0x34f/0x970 [ 1346.405224][T25176] ? seq_read_iter+0x819/0x1270 [ 1346.405262][T25176] ? vfs_read+0x82e/0xb40 [ 1346.405303][T25176] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1346.405342][T25176] ? lock_acquire+0x1b9/0x370 [ 1346.405389][T25176] acpi_evaluate_integer+0xdf/0x220 [ 1346.405423][T25176] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1346.405461][T25176] ? __lock_acquire+0x49f/0x1a40 [ 1346.405511][T25176] ? __pfx_status_show+0x10/0x10 [ 1346.405556][T25176] status_show+0xa0/0x120 [ 1346.405594][T25176] ? __pfx_status_show+0x10/0x10 [ 1346.405640][T25176] dev_attr_show+0x52/0xa0 [ 1346.405679][T25176] ? __pfx_dev_attr_show+0x10/0x10 [ 1346.405716][T25176] sysfs_kf_seq_show+0x217/0x3f0 [ 1346.405755][T25176] seq_read_iter+0x32f/0x1270 [ 1346.405792][T25176] ? lock_acquire+0x1b9/0x370 [ 1346.405841][T25176] kernfs_fop_read_iter+0x46c/0x610 [ 1346.405871][T25176] ? rw_verify_area+0xce/0x6d0 [ 1346.405906][T25176] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1346.405939][T25176] vfs_read+0x82e/0xb40 [ 1346.405981][T25176] ? __pfx_vfs_read+0x10/0x10 [ 1346.406038][T25176] ksys_read+0x12a/0x250 [ 1346.406060][T25176] ? __pfx_ksys_read+0x10/0x10 [ 1346.406090][T25176] do_syscall_64+0x115/0x840 [ 1346.406119][T25176] ? clear_bhb_loop+0x40/0x90 [ 1346.406156][T25176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.406182][T25176] RIP: 0033:0x7fb2d0d9de99 [ 1346.406209][T25176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.406233][T25176] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1346.406258][T25176] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1346.406274][T25176] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a [ 1346.406290][T25176] RBP: 00007fb2d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1346.406306][T25176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1346.406321][T25176] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1346.406353][T25176] [ 1347.423328][T25176] ACPI Error: Aborting method \_SB.LNKB._STA due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 1348.257308][T23461] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1348.435238][T25207] random: crng reseeded on system resumption [ 1348.753603][T25210] FAULT_INJECTION: forcing a failure. [ 1348.753603][T25210] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.831963][T25210] CPU: 0 UID: 0 PID: 25210 Comm: syz.2.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.832002][T25210] Tainted: [L]=SOFTLOCKUP [ 1348.832012][T25210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1348.832027][T25210] Call Trace: [ 1348.832035][T25210] [ 1348.832045][T25210] dump_stack_lvl+0x100/0x190 [ 1348.832077][T25210] should_fail_ex.cold+0x5/0xa [ 1348.832105][T25210] should_failslab+0xc2/0x120 [ 1348.832141][T25210] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1348.832173][T25210] ? vm_area_alloc+0x1f/0x160 [ 1348.832201][T25210] vm_area_alloc+0x1f/0x160 [ 1348.832225][T25210] __mmap_region+0x1033/0x2db0 [ 1348.832257][T25210] ? __pfx___mmap_region+0x10/0x10 [ 1348.832304][T25210] ? __lock_acquire+0x49f/0x1a40 [ 1348.832344][T25210] ? do_raw_spin_unlock+0x145/0x1e0 [ 1348.832372][T25210] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1348.832425][T25210] ? lockdep_hardirqs_on+0x78/0x100 [ 1348.832453][T25210] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1348.832520][T25210] ? preempt_schedule_thunk+0x16/0x40 [ 1348.832566][T25210] mmap_region+0x35d/0x620 [ 1348.832595][T25210] ? rcu_is_watching+0x12/0xc0 [ 1348.832624][T25210] ? __pfx_mmap_region+0x10/0x10 [ 1348.832656][T25210] ? cap_mmap_addr+0x4b/0x120 [ 1348.832680][T25210] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1348.832703][T25210] ? security_mmap_addr+0x71/0x1e0 [ 1348.832747][T25210] ? __get_unmapped_area+0x255/0x3e0 [ 1348.832787][T25210] do_mmap+0xc63/0x12f0 [ 1348.832827][T25210] ? __pfx_do_mmap+0x10/0x10 [ 1348.832862][T25210] ? __pfx_down_write_killable+0x10/0x10 [ 1348.832901][T25210] vm_mmap_pgoff+0x29e/0x470 [ 1348.832941][T25210] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1348.832980][T25210] ? __pfx_do_futex+0x10/0x10 [ 1348.833007][T25210] ? fd_install+0x223/0x580 [ 1348.833033][T25210] ksys_mmap_pgoff+0xe4/0x610 [ 1348.833067][T25210] ? __x64_sys_futex+0x358/0x4d0 [ 1348.833095][T25210] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1348.833129][T25210] ? xfd_validate_state+0x129/0x190 [ 1348.833165][T25210] __x64_sys_mmap+0x125/0x190 [ 1348.833198][T25210] do_syscall_64+0x115/0x840 [ 1348.833226][T25210] ? clear_bhb_loop+0x40/0x90 [ 1348.833256][T25210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.833282][T25210] RIP: 0033:0x7f465959de99 [ 1348.833302][T25210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.833327][T25210] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1348.833354][T25210] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1348.833372][T25210] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1348.833387][T25210] RBP: 00007f4659633eaf R08: ffffffffffffffff R09: 0000000000008000 [ 1348.833418][T25210] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1348.833433][T25210] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1348.833463][T25210] [ 1349.731638][T25228] FAULT_INJECTION: forcing a failure. [ 1349.731638][T25228] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.772816][T25228] CPU: 0 UID: 0 PID: 25228 Comm: syz.4.2921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.772858][T25228] Tainted: [L]=SOFTLOCKUP [ 1349.772867][T25228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1349.772882][T25228] Call Trace: [ 1349.772891][T25228] [ 1349.772901][T25228] dump_stack_lvl+0x100/0x190 [ 1349.772933][T25228] should_fail_ex.cold+0x5/0xa [ 1349.772962][T25228] should_failslab+0xc2/0x120 [ 1349.773021][T25228] __kmalloc_cache_noprof+0x91/0x6c0 [ 1349.773045][T25228] ? kernfs_root+0xee/0x2a0 [ 1349.773074][T25228] ? kernfs_fop_open+0x23d/0xd50 [ 1349.773114][T25228] kernfs_fop_open+0x23d/0xd50 [ 1349.773162][T25228] do_dentry_open+0x6ab/0x14d0 [ 1349.773189][T25228] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1349.773228][T25228] vfs_open+0x82/0x3f0 [ 1349.773274][T25228] path_openat+0x2873/0x4280 [ 1349.773312][T25228] ? __pfx_path_openat+0x10/0x10 [ 1349.773345][T25228] do_file_open+0x20e/0x430 [ 1349.773372][T25228] ? __pfx_do_file_open+0x10/0x10 [ 1349.773418][T25228] ? alloc_fd+0x471/0x7a0 [ 1349.773444][T25228] ? do_getname+0x191/0x390 [ 1349.773477][T25228] do_sys_openat2+0x10f/0x1e0 [ 1349.773510][T25228] ? __pfx_do_sys_openat2+0x10/0x10 [ 1349.773553][T25228] __x64_sys_openat+0x12d/0x210 [ 1349.773586][T25228] ? __pfx___x64_sys_openat+0x10/0x10 [ 1349.773631][T25228] do_syscall_64+0x115/0x840 [ 1349.773660][T25228] ? clear_bhb_loop+0x40/0x90 [ 1349.773690][T25228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.773716][T25228] RIP: 0033:0x7f784b59de99 [ 1349.773736][T25228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.773761][T25228] RSP: 002b:00007f784c4b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1349.773786][T25228] RAX: ffffffffffffffda RBX: 00007f784b825fa0 RCX: 00007f784b59de99 [ 1349.773802][T25228] RDX: 0000000000181840 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1349.773818][T25228] RBP: 00007f784b633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1349.773834][T25228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.773848][T25228] R13: 00007f784b826038 R14: 00007f784b825fa0 R15: 00007ffdb636f028 [ 1349.773879][T25228] [ 1350.641445][T25238] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2923'. [ 1354.774300][T25277] Process accounting paused [ 1355.194376][T25296] FAULT_INJECTION: forcing a failure. [ 1355.194376][T25296] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.295457][T25310] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1355.322772][T25296] CPU: 0 UID: 0 PID: 25296 Comm: syz.2.2935 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.322809][T25296] Tainted: [L]=SOFTLOCKUP [ 1355.322818][T25296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1355.322832][T25296] Call Trace: [ 1355.322840][T25296] [ 1355.322850][T25296] dump_stack_lvl+0x100/0x190 [ 1355.322881][T25296] should_fail_ex.cold+0x5/0xa [ 1355.322908][T25296] should_failslab+0xc2/0x120 [ 1355.322941][T25296] __kmalloc_noprof+0xfc/0x820 [ 1355.322969][T25296] ? stack_depot_save_flags+0x27/0x9d0 [ 1355.323010][T25296] ? acpi_ns_internalize_name+0x161/0x2e0 [ 1355.323053][T25296] acpi_ns_internalize_name+0x161/0x2e0 [ 1355.323093][T25296] ? __pfx_acpi_ns_internalize_name+0x10/0x10 [ 1355.323130][T25296] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1355.323168][T25296] acpi_ns_get_node_unlocked+0x18c/0x500 [ 1355.323209][T25296] ? __pfx_acpi_ns_get_node_unlocked+0x10/0x10 [ 1355.323249][T25296] ? mark_held_locks+0x40/0x70 [ 1355.323294][T25296] ? acpi_os_wait_semaphore+0x21e/0x3b0 [ 1355.323333][T25296] ? acpi_ns_get_node+0x6c/0xf0 [ 1355.323367][T25296] acpi_ns_get_node+0x6c/0xf0 [ 1355.323405][T25296] acpi_ns_evaluate+0xb01/0x1670 [ 1355.323434][T25296] ? acpi_evaluate_object+0xf5/0xe00 [ 1355.323477][T25296] acpi_evaluate_object+0x420/0xe00 [ 1355.323514][T25296] ? __kvmalloc_node_noprof+0x34f/0x970 [ 1355.323543][T25296] ? seq_read_iter+0x819/0x1270 [ 1355.323579][T25296] ? vfs_read+0x82e/0xb40 [ 1355.323619][T25296] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1355.323656][T25296] ? lock_acquire+0x1b9/0x370 [ 1355.323700][T25296] acpi_evaluate_integer+0xdf/0x220 [ 1355.323732][T25296] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1355.323765][T25296] ? __lock_acquire+0x49f/0x1a40 [ 1355.323812][T25296] ? __pfx_status_show+0x10/0x10 [ 1355.323847][T25296] status_show+0xa0/0x120 [ 1355.323884][T25296] ? __pfx_status_show+0x10/0x10 [ 1355.323928][T25296] dev_attr_show+0x52/0xa0 [ 1355.323966][T25296] ? __pfx_dev_attr_show+0x10/0x10 [ 1355.324002][T25296] sysfs_kf_seq_show+0x217/0x3f0 [ 1355.324041][T25296] seq_read_iter+0x32f/0x1270 [ 1355.324076][T25296] ? lock_acquire+0x1b9/0x370 [ 1355.324124][T25296] kernfs_fop_read_iter+0x46c/0x610 [ 1355.324154][T25296] ? rw_verify_area+0xce/0x6d0 [ 1355.324188][T25296] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1355.324220][T25296] vfs_read+0x82e/0xb40 [ 1355.324261][T25296] ? __pfx_vfs_read+0x10/0x10 [ 1355.324323][T25296] ksys_read+0x12a/0x250 [ 1355.324345][T25296] ? __pfx_ksys_read+0x10/0x10 [ 1355.324375][T25296] do_syscall_64+0x115/0x840 [ 1355.324403][T25296] ? clear_bhb_loop+0x40/0x90 [ 1355.324433][T25296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.324458][T25296] RIP: 0033:0x7f465959de99 [ 1355.324477][T25296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.324501][T25296] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1355.324525][T25296] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1355.324541][T25296] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a [ 1355.324556][T25296] RBP: 00007f465a4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.324570][T25296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.324585][T25296] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1355.324615][T25296] [ 1360.615514][T25365] netlink: 'syz.5.2947': attribute type 1 has an invalid length. [ 1360.809857][T25366] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2944'. [ 1360.945021][T25373] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1363.261091][T25411] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2952'. [ 1363.594890][T25409] hub 1-0:1.0: USB hub found [ 1363.721999][T25409] hub 1-0:1.0: 1 port detected [ 1365.413856][T25438] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1367.279399][T25464] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 1368.184076][T25487] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1370.543008][T25515] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2969'. [ 1371.956107][T25532] netlink: 'syz.2.2972': attribute type 1 has an invalid length. [ 1372.259642][T25545] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 1373.523886][T25561] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2976'. [ 1376.888103][T25594] FAULT_INJECTION: forcing a failure. [ 1376.888103][T25594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.954445][T25594] CPU: 0 UID: 0 PID: 25594 Comm: syz.5.2982 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.954483][T25594] Tainted: [L]=SOFTLOCKUP [ 1376.954492][T25594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1376.954507][T25594] Call Trace: [ 1376.954515][T25594] [ 1376.954524][T25594] dump_stack_lvl+0x100/0x190 [ 1376.954558][T25594] should_fail_ex.cold+0x5/0xa [ 1376.954586][T25594] _copy_from_user+0x2e/0xd0 [ 1376.954626][T25594] snd_seq_oss_write+0x3d5/0x8b0 [ 1376.954661][T25594] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1376.954693][T25594] ? apparmor_file_permission+0x13f/0x1c0 [ 1376.954726][T25594] ? bpf_lsm_file_permission+0x9/0x10 [ 1376.954753][T25594] odev_write+0x51/0xa0 [ 1376.954789][T25594] vfs_write+0x2aa/0x1050 [ 1376.954820][T25594] ? __pfx_odev_write+0x10/0x10 [ 1376.954857][T25594] ? __pfx_vfs_write+0x10/0x10 [ 1376.954877][T25594] ? find_held_lock+0x2b/0x80 [ 1376.954908][T25594] ? __fget_files+0x215/0x3d0 [ 1376.954929][T25594] ? __fget_files+0x215/0x3d0 [ 1376.954954][T25594] ? __fget_files+0x21f/0x3d0 [ 1376.954982][T25594] ksys_write+0x12a/0x250 [ 1376.955004][T25594] ? __pfx_ksys_write+0x10/0x10 [ 1376.955034][T25594] do_syscall_64+0x115/0x840 [ 1376.955062][T25594] ? clear_bhb_loop+0x40/0x90 [ 1376.955092][T25594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.955116][T25594] RIP: 0033:0x7fb2d0d9de99 [ 1376.955136][T25594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.955159][T25594] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1376.955182][T25594] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1376.955199][T25594] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1376.955213][T25594] RBP: 00007fb2d1b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.955228][T25594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.955242][T25594] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1376.955271][T25594] [ 1379.011884][T25619] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2984'. [ 1380.829579][T25646] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1383.383668][T23461] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1383.955612][T25685] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1386.414225][T25681] Process accounting resumed [ 1388.887334][T25722] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3005'. [ 1389.279414][T25737] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1389.329578][T25737] FAULT_INJECTION: forcing a failure. [ 1389.329578][T25737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.375332][T25737] CPU: 0 UID: 0 PID: 25737 Comm: syz.2.3007 Tainted: G L syzkaller #0 PREEMPT(full) [ 1389.375370][T25737] Tainted: [L]=SOFTLOCKUP [ 1389.375380][T25737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1389.375394][T25737] Call Trace: [ 1389.375402][T25737] [ 1389.375411][T25737] dump_stack_lvl+0x100/0x190 [ 1389.375442][T25737] should_fail_ex.cold+0x5/0xa [ 1389.375469][T25737] _copy_to_user+0x32/0xd0 [ 1389.375508][T25737] simple_read_from_buffer+0xcb/0x170 [ 1389.375549][T25737] proc_fail_nth_read+0x1af/0x230 [ 1389.375583][T25737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1389.375618][T25737] ? rw_verify_area+0xce/0x6d0 [ 1389.375652][T25737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1389.375694][T25737] vfs_read+0x1e4/0xb40 [ 1389.375750][T25737] ? __pfx_vfs_read+0x10/0x10 [ 1389.375793][T25737] ? __fget_files+0x215/0x3d0 [ 1389.375822][T25737] ? __fget_files+0x21f/0x3d0 [ 1389.375852][T25737] ksys_read+0x12a/0x250 [ 1389.375873][T25737] ? __pfx_ksys_read+0x10/0x10 [ 1389.375903][T25737] do_syscall_64+0x115/0x840 [ 1389.375932][T25737] ? clear_bhb_loop+0x40/0x90 [ 1389.375961][T25737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.375986][T25737] RIP: 0033:0x7f465955e6ce [ 1389.376011][T25737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1389.376035][T25737] RSP: 002b:00007f465a448fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1389.376057][T25737] RAX: ffffffffffffffda RBX: 00007f465a4496c0 RCX: 00007f465955e6ce [ 1389.376074][T25737] RDX: 000000000000000f RSI: 00007f465a4490a0 RDI: 0000000000000006 [ 1389.376088][T25737] RBP: 00007f465a449090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.376103][T25737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.376118][T25737] R13: 00007f46598263f8 R14: 00007f4659826360 R15: 00007fffa54da238 [ 1389.376148][T25737] [ 1392.047979][T25751] FAULT_INJECTION: forcing a failure. [ 1392.047979][T25751] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.161614][T25751] CPU: 0 UID: 0 PID: 25751 Comm: syz.2.3010 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.161654][T25751] Tainted: [L]=SOFTLOCKUP [ 1392.161663][T25751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1392.161679][T25751] Call Trace: [ 1392.161688][T25751] [ 1392.161697][T25751] dump_stack_lvl+0x100/0x190 [ 1392.161729][T25751] should_fail_ex.cold+0x5/0xa [ 1392.161756][T25751] should_failslab+0xc2/0x120 [ 1392.161793][T25751] __kvmalloc_node_noprof+0x116/0x970 [ 1392.161828][T25751] ? evdev_open+0x11a/0x690 [ 1392.161955][T25751] evdev_open+0x11a/0x690 [ 1392.161997][T25751] ? __pfx_evdev_open+0x10/0x10 [ 1392.162034][T25751] chrdev_open+0x234/0x6a0 [ 1392.162060][T25751] ? __pfx_apparmor_file_open+0x10/0x10 [ 1392.162089][T25751] ? __pfx_chrdev_open+0x10/0x10 [ 1392.162116][T25751] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1392.162151][T25751] do_dentry_open+0x6ab/0x14d0 [ 1392.162175][T25751] ? __pfx_chrdev_open+0x10/0x10 [ 1392.162207][T25751] vfs_open+0x82/0x3f0 [ 1392.162241][T25751] path_openat+0x2873/0x4280 [ 1392.162279][T25751] ? __pfx_path_openat+0x10/0x10 [ 1392.162312][T25751] do_file_open+0x20e/0x430 [ 1392.162339][T25751] ? __pfx_do_file_open+0x10/0x10 [ 1392.162384][T25751] ? alloc_fd+0x471/0x7a0 [ 1392.162416][T25751] ? do_getname+0x191/0x390 [ 1392.162451][T25751] do_sys_openat2+0x10f/0x1e0 [ 1392.162484][T25751] ? __pfx_do_sys_openat2+0x10/0x10 [ 1392.162519][T25751] ? do_raw_spin_lock+0x128/0x260 [ 1392.162554][T25751] __x64_sys_openat+0x12d/0x210 [ 1392.162588][T25751] ? __pfx___x64_sys_openat+0x10/0x10 [ 1392.162633][T25751] do_syscall_64+0x115/0x840 [ 1392.162662][T25751] ? clear_bhb_loop+0x40/0x90 [ 1392.162692][T25751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.162718][T25751] RIP: 0033:0x7f465959de99 [ 1392.162738][T25751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.162763][T25751] RSP: 002b:00007f465a4ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1392.162788][T25751] RAX: ffffffffffffffda RBX: 00007f4659826090 RCX: 00007f465959de99 [ 1392.162805][T25751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1392.162821][T25751] RBP: 00007f4659633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1392.162837][T25751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.162853][T25751] R13: 00007f4659826128 R14: 00007f4659826090 R15: 00007fffa54da238 [ 1392.162884][T25751] [ 1395.019920][T25783] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1395.934722][T25799] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3017'. [ 1395.994844][T25801] FAULT_INJECTION: forcing a failure. [ 1395.994844][T25801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1396.099260][T25801] CPU: 0 UID: 0 PID: 25801 Comm: syz.5.3018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1396.099303][T25801] Tainted: [L]=SOFTLOCKUP [ 1396.099312][T25801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1396.099328][T25801] Call Trace: [ 1396.099336][T25801] [ 1396.099345][T25801] dump_stack_lvl+0x100/0x190 [ 1396.099377][T25801] should_fail_ex.cold+0x5/0xa [ 1396.099404][T25801] _copy_from_user+0x2e/0xd0 [ 1396.099441][T25801] snd_seq_oss_write+0x3d5/0x8b0 [ 1396.099473][T25801] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1396.099505][T25801] ? apparmor_file_permission+0x13f/0x1c0 [ 1396.099536][T25801] ? bpf_lsm_file_permission+0x9/0x10 [ 1396.099562][T25801] odev_write+0x51/0xa0 [ 1396.099598][T25801] vfs_write+0x2aa/0x1050 [ 1396.099620][T25801] ? __pfx_odev_write+0x10/0x10 [ 1396.099657][T25801] ? __pfx_vfs_write+0x10/0x10 [ 1396.099676][T25801] ? find_held_lock+0x2b/0x80 [ 1396.099706][T25801] ? __fget_files+0x215/0x3d0 [ 1396.099726][T25801] ? __fget_files+0x215/0x3d0 [ 1396.099751][T25801] ? __fget_files+0x21f/0x3d0 [ 1396.099780][T25801] ksys_write+0x12a/0x250 [ 1396.099801][T25801] ? __pfx_ksys_write+0x10/0x10 [ 1396.099831][T25801] do_syscall_64+0x115/0x840 [ 1396.099858][T25801] ? clear_bhb_loop+0x40/0x90 [ 1396.099886][T25801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.099910][T25801] RIP: 0033:0x7fb2d0d9de99 [ 1396.099930][T25801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.099953][T25801] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1396.099975][T25801] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1396.099992][T25801] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1396.100007][T25801] RBP: 00007fb2d1b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1396.100021][T25801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1396.100036][T25801] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1396.100065][T25801] [ 1397.597116][T25818] netlink: Conntrack attr has 9 unknown bytes [ 1398.589046][T25828] FAULT_INJECTION: forcing a failure. [ 1398.589046][T25828] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.723754][T25828] CPU: 0 UID: 0 PID: 25828 Comm: syz.4.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.723792][T25828] Tainted: [L]=SOFTLOCKUP [ 1398.723801][T25828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1398.723816][T25828] Call Trace: [ 1398.723824][T25828] [ 1398.723833][T25828] dump_stack_lvl+0x100/0x190 [ 1398.723870][T25828] should_fail_ex.cold+0x5/0xa [ 1398.723897][T25828] should_failslab+0xc2/0x120 [ 1398.723930][T25828] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1398.723960][T25828] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1398.723993][T25828] ? security_file_alloc+0x34/0x2c0 [ 1398.724034][T25828] security_file_alloc+0x34/0x2c0 [ 1398.724067][T25828] init_file+0x95/0x480 [ 1398.724095][T25828] alloc_empty_file+0x79/0x1c0 [ 1398.724127][T25828] path_openat+0xe7/0x4280 [ 1398.724150][T25828] ? __kasan_slab_alloc+0x89/0x90 [ 1398.724184][T25828] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1398.724212][T25828] ? do_getname+0x35/0x390 [ 1398.724239][T25828] ? do_sys_openat2+0xc7/0x1e0 [ 1398.724269][T25828] ? __x64_sys_openat+0x12d/0x210 [ 1398.724300][T25828] ? do_syscall_64+0x115/0x840 [ 1398.724328][T25828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.724367][T25828] ? __pfx_path_openat+0x10/0x10 [ 1398.724399][T25828] do_file_open+0x20e/0x430 [ 1398.724426][T25828] ? __pfx_do_file_open+0x10/0x10 [ 1398.724470][T25828] ? alloc_fd+0x471/0x7a0 [ 1398.724495][T25828] ? do_getname+0x191/0x390 [ 1398.724527][T25828] do_sys_openat2+0x10f/0x1e0 [ 1398.724558][T25828] ? __pfx_do_sys_openat2+0x10/0x10 [ 1398.724599][T25828] __x64_sys_openat+0x12d/0x210 [ 1398.724631][T25828] ? __pfx___x64_sys_openat+0x10/0x10 [ 1398.724673][T25828] do_syscall_64+0x115/0x840 [ 1398.724706][T25828] ? clear_bhb_loop+0x40/0x90 [ 1398.724734][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.724759][T25828] RIP: 0033:0x7f784b59de99 [ 1398.724779][T25828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.724803][T25828] RSP: 002b:00007f784c473028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1398.724826][T25828] RAX: ffffffffffffffda RBX: 00007f784b826180 RCX: 00007f784b59de99 [ 1398.724843][T25828] RDX: 0000000000000401 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 1398.724865][T25828] RBP: 00007f784b633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1398.724880][T25828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.724895][T25828] R13: 00007f784b826218 R14: 00007f784b826180 R15: 00007ffdb636f028 [ 1398.724924][T25828] [ 1399.236464][T25831] i2c i2c-0: new_device: Can't parse I2C address [ 1401.044567][T25853] netlink: 'syz.4.3028': attribute type 1 has an invalid length. [ 1403.748765][T18750] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1405.751362][T25869] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1405.781308][T25869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1405.824638][T25869] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1405.915229][T25869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1405.967462][T25869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1406.110179][T25869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1406.146747][T25869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1406.201084][T25869] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1406.725642][T23461] Bluetooth: hci5: command 0x0406 tx timeout [ 1407.392572][T25914] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1407.840869][T23461] Bluetooth: hci0: command 0x0406 tx timeout [ 1407.920475][T23461] Bluetooth: hci2: command 0x0406 tx timeout [ 1408.159584][T23461] Bluetooth: hci1: command 0x0c1a tx timeout [ 1408.258697][ T29] audit: type=1800 audit(66455.813:22): pid=25926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3040" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1409.711197][T25954] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3043'. [ 1409.884875][T25956] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3044'. [ 1409.913765][T23461] Bluetooth: hci0: command 0x0406 tx timeout [ 1409.991762][T23461] Bluetooth: hci2: command 0x0406 tx timeout [ 1410.230852][T18890] Bluetooth: hci1: command 0x0c1a tx timeout [ 1411.439261][T25971] FAULT_INJECTION: forcing a failure. [ 1411.439261][T25971] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.844477][T25971] CPU: 0 UID: 0 PID: 25971 Comm: syz.0.3048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1411.844518][T25971] Tainted: [L]=SOFTLOCKUP [ 1411.844528][T25971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1411.844551][T25971] Call Trace: [ 1411.844560][T25971] [ 1411.844569][T25971] dump_stack_lvl+0x100/0x190 [ 1411.844602][T25971] should_fail_ex.cold+0x5/0xa [ 1411.844630][T25971] should_failslab+0xc2/0x120 [ 1411.844665][T25971] __kmalloc_cache_noprof+0x91/0x6c0 [ 1411.844690][T25971] ? __asan_memset+0x23/0x50 [ 1411.844716][T25971] ? acpi_ds_create_walk_state+0x95/0x300 [ 1411.844749][T25971] acpi_ds_create_walk_state+0x95/0x300 [ 1411.844787][T25971] acpi_ps_execute_method+0x2c1/0xe90 [ 1411.844824][T25971] acpi_ns_evaluate+0x640/0x1670 [ 1411.844862][T25971] acpi_evaluate_object+0x420/0xe00 [ 1411.844900][T25971] ? __kvmalloc_node_noprof+0x34f/0x970 [ 1411.844930][T25971] ? seq_read_iter+0x819/0x1270 [ 1411.844968][T25971] ? vfs_read+0x82e/0xb40 [ 1411.845009][T25971] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1411.845050][T25971] ? lock_acquire+0x1b9/0x370 [ 1411.845097][T25971] acpi_evaluate_integer+0xdf/0x220 [ 1411.845130][T25971] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1411.845164][T25971] ? __lock_acquire+0x49f/0x1a40 [ 1411.845212][T25971] ? __pfx_status_show+0x10/0x10 [ 1411.845249][T25971] status_show+0xa0/0x120 [ 1411.845287][T25971] ? __pfx_status_show+0x10/0x10 [ 1411.845332][T25971] dev_attr_show+0x52/0xa0 [ 1411.845372][T25971] ? __pfx_dev_attr_show+0x10/0x10 [ 1411.845413][T25971] sysfs_kf_seq_show+0x217/0x3f0 [ 1411.845453][T25971] seq_read_iter+0x32f/0x1270 [ 1411.845489][T25971] ? irqentry_exit+0x24d/0xa00 [ 1411.845531][T25971] kernfs_fop_read_iter+0x46c/0x610 [ 1411.845561][T25971] ? rw_verify_area+0xce/0x6d0 [ 1411.845596][T25971] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1411.845628][T25971] vfs_read+0x82e/0xb40 [ 1411.845671][T25971] ? __pfx_vfs_read+0x10/0x10 [ 1411.845728][T25971] ksys_read+0x12a/0x250 [ 1411.845750][T25971] ? __pfx_ksys_read+0x10/0x10 [ 1411.845787][T25971] do_syscall_64+0x115/0x840 [ 1411.845816][T25971] ? clear_bhb_loop+0x40/0x90 [ 1411.845847][T25971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.845873][T25971] RIP: 0033:0x7feebfd9de99 [ 1411.845893][T25971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.845924][T25971] RSP: 002b:00007feec0c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1411.845948][T25971] RAX: ffffffffffffffda RBX: 00007feec0025fa0 RCX: 00007feebfd9de99 [ 1411.845964][T25971] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a [ 1411.845980][T25971] RBP: 00007feebfe33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1411.845995][T25971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1411.846010][T25971] R13: 00007feec0026038 R14: 00007feec0025fa0 R15: 00007ffeda29a038 [ 1411.846042][T25971] [ 1412.323886][T23461] Bluetooth: hci1: command 0x0c1a tx timeout [ 1412.350860][T25988] FAULT_INJECTION: forcing a failure. [ 1412.350860][T25988] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.350929][T25988] CPU: 0 UID: 0 PID: 25988 Comm: syz.0.3051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1412.350965][T25988] Tainted: [L]=SOFTLOCKUP [ 1412.350974][T25988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1412.350988][T25988] Call Trace: [ 1412.350997][T25988] [ 1412.351006][T25988] dump_stack_lvl+0x100/0x190 [ 1412.351038][T25988] should_fail_ex.cold+0x5/0xa [ 1412.351065][T25988] should_failslab+0xc2/0x120 [ 1412.351107][T25988] __kmalloc_cache_noprof+0x91/0x6c0 [ 1412.351134][T25988] ? afs_lookup_cell+0x49f/0x1940 [ 1412.351235][T25988] afs_lookup_cell+0x49f/0x1940 [ 1412.351278][T25988] ? __pfx_afs_lookup_cell+0x10/0x10 [ 1412.351311][T25988] ? __pfx___might_resched+0x10/0x10 [ 1412.351363][T25988] afs_cell_init+0x17d/0x380 [ 1412.351397][T25988] afs_proc_rootcell_write+0x1c9/0x280 [ 1412.351468][T25988] proc_simple_write+0x10e/0x1a0 [ 1412.351499][T25988] ? __pfx_proc_simple_write+0x10/0x10 [ 1412.351529][T25988] proc_reg_write+0x240/0x330 [ 1412.351555][T25988] vfs_write+0x2aa/0x1050 [ 1412.351578][T25988] ? __pfx_proc_reg_write+0x10/0x10 [ 1412.351605][T25988] ? __pfx_vfs_write+0x10/0x10 [ 1412.351627][T25988] ? __fget_files+0x215/0x3d0 [ 1412.351656][T25988] ? __fget_files+0x21f/0x3d0 [ 1412.351686][T25988] ksys_write+0x12a/0x250 [ 1412.351732][T25988] ? __pfx_ksys_write+0x10/0x10 [ 1412.351765][T25988] do_syscall_64+0x115/0x840 [ 1412.351794][T25988] ? clear_bhb_loop+0x40/0x90 [ 1412.351825][T25988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.351850][T25988] RIP: 0033:0x7feebfd9de99 [ 1412.351871][T25988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.351896][T25988] RSP: 002b:00007feec0c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1412.351919][T25988] RAX: ffffffffffffffda RBX: 00007feec0025fa0 RCX: 00007feebfd9de99 [ 1412.351936][T25988] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1412.351952][T25988] RBP: 00007feebfe33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1412.351968][T25988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.351983][T25988] R13: 00007feec0026038 R14: 00007feec0025fa0 R15: 00007ffeda29a038 [ 1412.352015][T25988] [ 1414.371540][T25993] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1416.097495][T26021] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3056'. [ 1417.127013][T26003] Process accounting paused [ 1421.163371][T26068] FAULT_INJECTION: forcing a failure. [ 1421.163371][T26068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.554152][T26068] CPU: 0 UID: 0 PID: 26068 Comm: syz.2.3065 Tainted: G L syzkaller #0 PREEMPT(full) [ 1421.554191][T26068] Tainted: [L]=SOFTLOCKUP [ 1421.554200][T26068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1421.554215][T26068] Call Trace: [ 1421.554223][T26068] [ 1421.554233][T26068] dump_stack_lvl+0x100/0x190 [ 1421.554264][T26068] should_fail_ex.cold+0x5/0xa [ 1421.554290][T26068] _copy_from_user+0x2e/0xd0 [ 1421.554327][T26068] snd_seq_oss_write+0x3d5/0x8b0 [ 1421.554359][T26068] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1421.554391][T26068] ? apparmor_file_permission+0x13f/0x1c0 [ 1421.554422][T26068] ? bpf_lsm_file_permission+0x9/0x10 [ 1421.554449][T26068] odev_write+0x51/0xa0 [ 1421.554485][T26068] vfs_write+0x2aa/0x1050 [ 1421.554508][T26068] ? __pfx_odev_write+0x10/0x10 [ 1421.554548][T26068] ? __pfx_vfs_write+0x10/0x10 [ 1421.554568][T26068] ? find_held_lock+0x2b/0x80 [ 1421.554597][T26068] ? __fget_files+0x215/0x3d0 [ 1421.554619][T26068] ? __fget_files+0x215/0x3d0 [ 1421.554644][T26068] ? __fget_files+0x21f/0x3d0 [ 1421.554673][T26068] ksys_write+0x12a/0x250 [ 1421.554695][T26068] ? __pfx_ksys_write+0x10/0x10 [ 1421.554725][T26068] do_syscall_64+0x115/0x840 [ 1421.554752][T26068] ? clear_bhb_loop+0x40/0x90 [ 1421.554788][T26068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.554812][T26068] RIP: 0033:0x7f465959de99 [ 1421.554831][T26068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.554855][T26068] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1421.554877][T26068] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1421.554894][T26068] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1421.554909][T26068] RBP: 00007f465a4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.554923][T26068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1421.554937][T26068] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1421.554970][T26068] [ 1422.483702][T26090] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1423.210619][T26104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3070'. [ 1428.302493][T26150] program syz.0.3075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1428.963823][T26163] netlink: 'syz.5.3079': attribute type 1 has an invalid length. [ 1429.144381][T26169] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 1431.269647][T26204] FAULT_INJECTION: forcing a failure. [ 1431.269647][T26204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.331498][T26204] CPU: 0 UID: 0 PID: 26204 Comm: syz.2.3087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.331536][T26204] Tainted: [L]=SOFTLOCKUP [ 1431.331545][T26204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1431.331560][T26204] Call Trace: [ 1431.331568][T26204] [ 1431.331577][T26204] dump_stack_lvl+0x100/0x190 [ 1431.331608][T26204] should_fail_ex.cold+0x5/0xa [ 1431.331638][T26204] _copy_from_user+0x2e/0xd0 [ 1431.331676][T26204] snd_seq_oss_write+0x3d5/0x8b0 [ 1431.331709][T26204] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1431.331741][T26204] ? apparmor_file_permission+0x13f/0x1c0 [ 1431.331773][T26204] ? bpf_lsm_file_permission+0x9/0x10 [ 1431.331800][T26204] odev_write+0x51/0xa0 [ 1431.331836][T26204] vfs_write+0x2aa/0x1050 [ 1431.331860][T26204] ? __pfx_odev_write+0x10/0x10 [ 1431.331897][T26204] ? __pfx_vfs_write+0x10/0x10 [ 1431.331917][T26204] ? find_held_lock+0x2b/0x80 [ 1431.331947][T26204] ? __fget_files+0x215/0x3d0 [ 1431.331968][T26204] ? __fget_files+0x215/0x3d0 [ 1431.331995][T26204] ? __fget_files+0x21f/0x3d0 [ 1431.332031][T26204] ksys_write+0x12a/0x250 [ 1431.332053][T26204] ? __pfx_ksys_write+0x10/0x10 [ 1431.332082][T26204] do_syscall_64+0x115/0x840 [ 1431.332110][T26204] ? clear_bhb_loop+0x40/0x90 [ 1431.332140][T26204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.332164][T26204] RIP: 0033:0x7f465959de99 [ 1431.332183][T26204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.332205][T26204] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1431.332228][T26204] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1431.332244][T26204] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1431.332259][T26204] RBP: 00007f465a4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.332273][T26204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1431.332287][T26204] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1431.332316][T26204] [ 1431.824857][T26224] FAULT_INJECTION: forcing a failure. [ 1431.824857][T26224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.855571][T26224] CPU: 0 UID: 0 PID: 26224 Comm: syz.0.3086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.855609][T26224] Tainted: [L]=SOFTLOCKUP [ 1431.855618][T26224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1431.855633][T26224] Call Trace: [ 1431.855641][T26224] [ 1431.855650][T26224] dump_stack_lvl+0x100/0x190 [ 1431.855682][T26224] should_fail_ex.cold+0x5/0xa [ 1431.855755][T26224] _copy_to_user+0x32/0xd0 [ 1431.855794][T26224] simple_read_from_buffer+0xcb/0x170 [ 1431.855848][T26224] proc_fail_nth_read+0x1af/0x230 [ 1431.855882][T26224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1431.855943][T26224] ? rw_verify_area+0xce/0x6d0 [ 1431.855992][T26224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1431.856031][T26224] vfs_read+0x1e4/0xb40 [ 1431.856072][T26224] ? __pfx_vfs_read+0x10/0x10 [ 1431.856109][T26224] ? __fget_files+0x215/0x3d0 [ 1431.856143][T26224] ? __fget_files+0x21f/0x3d0 [ 1431.856177][T26224] ksys_read+0x12a/0x250 [ 1431.856199][T26224] ? __pfx_ksys_read+0x10/0x10 [ 1431.856239][T26224] do_syscall_64+0x115/0x840 [ 1431.856268][T26224] ? clear_bhb_loop+0x40/0x90 [ 1431.856297][T26224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.856321][T26224] RIP: 0033:0x7feebfd5e6ce [ 1431.856341][T26224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1431.856365][T26224] RSP: 002b:00007feec0ba2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1431.856388][T26224] RAX: ffffffffffffffda RBX: 00007feec0ba36c0 RCX: 00007feebfd5e6ce [ 1431.856405][T26224] RDX: 000000000000000f RSI: 00007feec0ba30a0 RDI: 0000000000000005 [ 1431.856420][T26224] RBP: 00007feec0ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.856435][T26224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.856449][T26224] R13: 00007feec00263f8 R14: 00007feec0026360 R15: 00007ffeda29a038 [ 1431.856480][T26224] [ 1435.218597][T26243] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1436.402635][T26265] FAULT_INJECTION: forcing a failure. [ 1436.402635][T26265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.463826][T26265] CPU: 0 UID: 0 PID: 26265 Comm: syz.2.3096 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.463864][T26265] Tainted: [L]=SOFTLOCKUP [ 1436.463873][T26265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1436.463888][T26265] Call Trace: [ 1436.463896][T26265] [ 1436.463905][T26265] dump_stack_lvl+0x100/0x190 [ 1436.463936][T26265] should_fail_ex.cold+0x5/0xa [ 1436.463962][T26265] _copy_from_user+0x2e/0xd0 [ 1436.463998][T26265] snd_seq_oss_write+0x3d5/0x8b0 [ 1436.464030][T26265] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1436.464061][T26265] ? apparmor_file_permission+0x13f/0x1c0 [ 1436.464094][T26265] ? bpf_lsm_file_permission+0x9/0x10 [ 1436.464120][T26265] odev_write+0x51/0xa0 [ 1436.464155][T26265] vfs_write+0x2aa/0x1050 [ 1436.464181][T26265] ? __pfx_odev_write+0x10/0x10 [ 1436.464218][T26265] ? __pfx_vfs_write+0x10/0x10 [ 1436.464237][T26265] ? find_held_lock+0x2b/0x80 [ 1436.464266][T26265] ? __fget_files+0x215/0x3d0 [ 1436.464287][T26265] ? __fget_files+0x215/0x3d0 [ 1436.464312][T26265] ? __fget_files+0x21f/0x3d0 [ 1436.464341][T26265] ksys_write+0x12a/0x250 [ 1436.464362][T26265] ? __pfx_ksys_write+0x10/0x10 [ 1436.464392][T26265] do_syscall_64+0x115/0x840 [ 1436.464418][T26265] ? clear_bhb_loop+0x40/0x90 [ 1436.464447][T26265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.464471][T26265] RIP: 0033:0x7f465959de99 [ 1436.464490][T26265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.464513][T26265] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1436.464536][T26265] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1436.464552][T26265] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1436.464567][T26265] RBP: 00007f465a4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.464582][T26265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1436.464597][T26265] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1436.464633][T26265] [ 1439.781379][T26318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3104'. [ 1440.040922][T26318] bond0: (slave bond_slave_0): Releasing backup interface [ 1441.669757][T26337] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1442.547110][T26354] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3106'. [ 1447.346006][T26414] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1447.797230][T26399] Process accounting resumed [ 1448.105547][T26421] FAULT_INJECTION: forcing a failure. [ 1448.105547][T26421] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1448.222926][T26421] CPU: 0 UID: 0 PID: 26421 Comm: syz.4.3121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.222966][T26421] Tainted: [L]=SOFTLOCKUP [ 1448.222975][T26421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1448.222991][T26421] Call Trace: [ 1448.222999][T26421] [ 1448.223009][T26421] dump_stack_lvl+0x100/0x190 [ 1448.223041][T26421] should_fail_ex.cold+0x5/0xa [ 1448.223069][T26421] get_futex_key+0x1d2/0x14f0 [ 1448.223097][T26421] ? __pfx_get_futex_key+0x10/0x10 [ 1448.223122][T26421] ? tomoyo_path_number_perm+0x28f/0x580 [ 1448.223163][T26421] futex_wake+0xf4/0x5e0 [ 1448.223192][T26421] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1448.223228][T26421] ? __pfx_futex_wake+0x10/0x10 [ 1448.223263][T26421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1448.223301][T26421] ? do_vfs_ioctl+0x226/0x13e0 [ 1448.223339][T26421] do_futex+0x2b2/0x440 [ 1448.223396][T26421] ? __pfx_do_futex+0x10/0x10 [ 1448.223427][T26421] ? find_held_lock+0x2b/0x80 [ 1448.223462][T26421] __x64_sys_futex+0x34f/0x4d0 [ 1448.223492][T26421] ? __fget_files+0x21f/0x3d0 [ 1448.223514][T26421] ? __pfx___x64_sys_futex+0x10/0x10 [ 1448.223553][T26421] do_syscall_64+0x115/0x840 [ 1448.223582][T26421] ? clear_bhb_loop+0x40/0x90 [ 1448.223611][T26421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.223637][T26421] RIP: 0033:0x7f784b59de99 [ 1448.223657][T26421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.223682][T26421] RSP: 002b:00007f784c4730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1448.223705][T26421] RAX: ffffffffffffffda RBX: 00007f784b826188 RCX: 00007f784b59de99 [ 1448.223721][T26421] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f784b82618c [ 1448.223737][T26421] RBP: 00007f784b826180 R08: 0000000000000001 R09: 0000000000000000 [ 1448.223752][T26421] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1448.223767][T26421] R13: 00007f784b826218 R14: 00007ffdb636ef40 R15: 00007ffdb636f028 [ 1448.223803][T26421] [ 1448.508467][T23461] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 1448.659089][T26437] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:0 is already present [ 1449.500413][T26452] sd 0:0:1:0: PR command failed: 1026 [ 1449.551624][T26452] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1449.658946][T26452] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1449.788760][ T29] audit: type=1804 audit(66497.522:23): pid=26456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3127" name="/newroot/281/file0" dev="tmpfs" ino=1475 res=1 errno=0 [ 1449.995951][T26465] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1451.797797][T26483] FAULT_INJECTION: forcing a failure. [ 1451.797797][T26483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.867440][T26483] CPU: 0 UID: 0 PID: 26483 Comm: syz.2.3132 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.867479][T26483] Tainted: [L]=SOFTLOCKUP [ 1451.867488][T26483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1451.867502][T26483] Call Trace: [ 1451.867517][T26483] [ 1451.867526][T26483] dump_stack_lvl+0x100/0x190 [ 1451.867558][T26483] should_fail_ex.cold+0x5/0xa [ 1451.867590][T26483] _copy_from_user+0x2e/0xd0 [ 1451.867627][T26483] snd_seq_oss_write+0x3d5/0x8b0 [ 1451.867660][T26483] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1451.867691][T26483] ? apparmor_file_permission+0x13f/0x1c0 [ 1451.867722][T26483] ? bpf_lsm_file_permission+0x9/0x10 [ 1451.867749][T26483] odev_write+0x51/0xa0 [ 1451.867785][T26483] vfs_write+0x2aa/0x1050 [ 1451.867807][T26483] ? __pfx_odev_write+0x10/0x10 [ 1451.867844][T26483] ? __pfx_vfs_write+0x10/0x10 [ 1451.867863][T26483] ? find_held_lock+0x2b/0x80 [ 1451.867892][T26483] ? __fget_files+0x215/0x3d0 [ 1451.867913][T26483] ? __fget_files+0x215/0x3d0 [ 1451.867942][T26483] ? __fget_files+0x21f/0x3d0 [ 1451.867972][T26483] ksys_write+0x12a/0x250 [ 1451.867993][T26483] ? __pfx_ksys_write+0x10/0x10 [ 1451.868023][T26483] do_syscall_64+0x115/0x840 [ 1451.868051][T26483] ? clear_bhb_loop+0x40/0x90 [ 1451.868079][T26483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.868103][T26483] RIP: 0033:0x7f465959de99 [ 1451.868122][T26483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.868147][T26483] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1451.868170][T26483] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1451.868186][T26483] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1451.868200][T26483] RBP: 00007f465a4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.868215][T26483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1451.868229][T26483] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1451.868259][T26483] [ 1452.948835][T26499] zswap: compressor not available [ 1453.115918][T26499] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3134'. [ 1453.148608][T26507] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1456.581542][T26565] FAULT_INJECTION: forcing a failure. [ 1456.581542][T26565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1456.625393][T26565] CPU: 0 UID: 0 PID: 26565 Comm: syz.0.3146 Tainted: G L syzkaller #0 PREEMPT(full) [ 1456.625431][T26565] Tainted: [L]=SOFTLOCKUP [ 1456.625439][T26565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1456.625454][T26565] Call Trace: [ 1456.625462][T26565] [ 1456.625471][T26565] dump_stack_lvl+0x100/0x190 [ 1456.625502][T26565] should_fail_ex.cold+0x5/0xa [ 1456.625529][T26565] _copy_from_user+0x2e/0xd0 [ 1456.625567][T26565] snd_seq_oss_write+0x3d5/0x8b0 [ 1456.625601][T26565] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1456.625632][T26565] ? apparmor_file_permission+0x13f/0x1c0 [ 1456.625664][T26565] ? bpf_lsm_file_permission+0x9/0x10 [ 1456.625695][T26565] odev_write+0x51/0xa0 [ 1456.625731][T26565] vfs_write+0x2aa/0x1050 [ 1456.625754][T26565] ? __pfx_odev_write+0x10/0x10 [ 1456.625792][T26565] ? __pfx_vfs_write+0x10/0x10 [ 1456.625812][T26565] ? find_held_lock+0x2b/0x80 [ 1456.625841][T26565] ? __fget_files+0x215/0x3d0 [ 1456.625863][T26565] ? __fget_files+0x215/0x3d0 [ 1456.625889][T26565] ? __fget_files+0x21f/0x3d0 [ 1456.625924][T26565] ksys_write+0x12a/0x250 [ 1456.625945][T26565] ? __pfx_ksys_write+0x10/0x10 [ 1456.625976][T26565] do_syscall_64+0x115/0x840 [ 1456.626004][T26565] ? clear_bhb_loop+0x40/0x90 [ 1456.626034][T26565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.626059][T26565] RIP: 0033:0x7feebfd9de99 [ 1456.626078][T26565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.626102][T26565] RSP: 002b:00007feec0c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1456.626125][T26565] RAX: ffffffffffffffda RBX: 00007feec0025fa0 RCX: 00007feebfd9de99 [ 1456.626141][T26565] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1456.626157][T26565] RBP: 00007feec0c27090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.626171][T26565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1456.626186][T26565] R13: 00007feec0026038 R14: 00007feec0025fa0 R15: 00007ffeda29a038 [ 1456.626216][T26565] [ 1457.341392][T26584] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3147'. [ 1457.358651][T26585] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3148'. [ 1459.832736][T26603] FAULT_INJECTION: forcing a failure. [ 1459.832736][T26603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.899319][T26603] CPU: 0 UID: 0 PID: 26603 Comm: syz.2.3152 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.899358][T26603] Tainted: [L]=SOFTLOCKUP [ 1459.899368][T26603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1459.899384][T26603] Call Trace: [ 1459.899394][T26603] [ 1459.899404][T26603] dump_stack_lvl+0x100/0x190 [ 1459.899436][T26603] should_fail_ex.cold+0x5/0xa [ 1459.899464][T26603] _copy_from_iter+0x1f4/0x1690 [ 1459.899507][T26603] ? __asan_memset+0x23/0x50 [ 1459.899535][T26603] ? __pfx__copy_from_iter+0x10/0x10 [ 1459.899572][T26603] ? __pfx___alloc_skb+0x10/0x10 [ 1459.899617][T26603] netlink_sendmsg+0x808/0xda0 [ 1459.899650][T26603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.899688][T26603] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1459.899721][T26603] ____sys_sendmsg+0xa4d/0xbe0 [ 1459.899744][T26603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.899773][T26603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1459.899803][T26603] ? plist_check_list+0x1b8/0x280 [ 1459.899843][T26603] ? plist_del+0x308/0x510 [ 1459.899883][T26603] ___sys_sendmsg+0x190/0x1e0 [ 1459.899910][T26603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.899934][T26603] ? __lock_acquire+0x49f/0x1a40 [ 1459.899974][T26603] ? futex_wake+0x220/0x5e0 [ 1459.900036][T26603] __sys_sendmsg+0x160/0x210 [ 1459.900070][T26603] ? __pfx___sys_sendmsg+0x10/0x10 [ 1459.900118][T26603] do_syscall_64+0x115/0x840 [ 1459.900146][T26603] ? clear_bhb_loop+0x40/0x90 [ 1459.900179][T26603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.900205][T26603] RIP: 0033:0x7f465959de99 [ 1459.900226][T26603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.900250][T26603] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.900274][T26603] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1459.900291][T26603] RDX: 0000000024048084 RSI: 0000200000000440 RDI: 000000000000000a [ 1459.900307][T26603] RBP: 00007f4659633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1459.900322][T26603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.900337][T26603] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1459.900368][T26603] [ 1460.771432][T26636] FAULT_INJECTION: forcing a failure. [ 1460.771432][T26636] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1460.817383][T26636] CPU: 0 UID: 0 PID: 26636 Comm: syz.0.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.817422][T26636] Tainted: [L]=SOFTLOCKUP [ 1460.817431][T26636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1460.817446][T26636] Call Trace: [ 1460.817454][T26636] [ 1460.817464][T26636] dump_stack_lvl+0x100/0x190 [ 1460.817501][T26636] should_fail_ex.cold+0x5/0xa [ 1460.817528][T26636] get_futex_key+0x1d2/0x14f0 [ 1460.817555][T26636] ? __pfx_get_futex_key+0x10/0x10 [ 1460.817579][T26636] ? lock_acquire+0x1b9/0x370 [ 1460.817624][T26636] futex_wake+0xf4/0x5e0 [ 1460.817657][T26636] ? __pfx_futex_wake+0x10/0x10 [ 1460.817688][T26636] ? find_held_lock+0x2b/0x80 [ 1460.817722][T26636] ? exit_mm_release+0x19/0x30 [ 1460.817758][T26636] do_futex+0x2b2/0x440 [ 1460.817785][T26636] ? __pfx_do_futex+0x10/0x10 [ 1460.817809][T26636] ? __might_fault+0xc5/0x140 [ 1460.817841][T26636] mm_release+0x24a/0x2f0 [ 1460.817866][T26636] do_exit+0x707/0x2ae0 [ 1460.817904][T26636] ? __pfx_do_exit+0x10/0x10 [ 1460.817936][T26636] ? do_raw_spin_lock+0x128/0x260 [ 1460.817961][T26636] ? find_held_lock+0x2b/0x80 [ 1460.817990][T26636] ? get_signal+0x7e0/0x21e0 [ 1460.818020][T26636] do_group_exit+0xd5/0x2a0 [ 1460.818055][T26636] get_signal+0x1ec7/0x21e0 [ 1460.818092][T26636] ? __pfx_get_signal+0x10/0x10 [ 1460.818120][T26636] ? do_futex+0x190/0x440 [ 1460.818149][T26636] arch_do_signal_or_restart+0x91/0x7a0 [ 1460.818193][T26636] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1460.818249][T26636] exit_to_user_mode_loop+0x139/0x6f0 [ 1460.818272][T26636] ? rcu_is_watching+0x12/0xc0 [ 1460.818304][T26636] do_syscall_64+0x652/0x840 [ 1460.818332][T26636] ? clear_bhb_loop+0x40/0x90 [ 1460.818361][T26636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.818394][T26636] RIP: 0033:0x7feebfd9de99 [ 1460.818414][T26636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.818438][T26636] RSP: 002b:00007feec0bc40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1460.818461][T26636] RAX: fffffffffffffe00 RBX: 00007feec0026278 RCX: 00007feebfd9de99 [ 1460.818477][T26636] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feec0026278 [ 1460.818498][T26636] RBP: 00007feec0026270 R08: 0000000000000000 R09: 0000000000000000 [ 1460.818512][T26636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.818526][T26636] R13: 00007feec0026308 R14: 00007ffeda299f50 R15: 00007ffeda29a038 [ 1460.818556][T26636] [ 1461.814085][T26653] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1462.421894][T26604] cgroup: fork rejected by pids controller in /syz5 [ 1464.590803][T26803] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1468.775814][T23461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1468.795497][T23461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1468.806605][T23461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1468.820924][T23461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1468.836071][T23461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1469.748669][T26866] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1470.109842][T18749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.698410][T18749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.930481][T23461] Bluetooth: hci3: command tx timeout [ 1471.105320][T18749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.471355][T18749] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.568255][T26897] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3174'. [ 1473.000980][T23461] Bluetooth: hci3: command tx timeout [ 1473.726808][T18749] bridge_slave_1: left allmulticast mode [ 1473.745620][T18749] bridge_slave_1: left promiscuous mode [ 1473.764004][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.799273][T18749] bridge_slave_0: left allmulticast mode [ 1473.823867][T18749] bridge_slave_0: left promiscuous mode [ 1473.850582][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.202169][T18749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1474.212620][T18749] bond0 (unregistering): Released all slaves [ 1474.372768][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1474.476407][T18749] HfR: left promiscuous mode [ 1474.931335][T26839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.968331][T26839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.976121][T26839] bridge_slave_0: entered allmulticast mode [ 1474.984162][T26839] bridge_slave_0: entered promiscuous mode [ 1475.074506][T23461] Bluetooth: hci3: command tx timeout [ 1475.159542][T26839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.188255][T26839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.216352][T26839] bridge_slave_1: entered allmulticast mode [ 1475.245146][T26839] bridge_slave_1: entered promiscuous mode [ 1475.356425][T18749] hsr_slave_0: left promiscuous mode [ 1475.380989][T18749] hsr_slave_1: left promiscuous mode [ 1475.398696][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.437924][T18749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.472546][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1475.512766][T18749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.593081][T18749] veth1_macvtap: left promiscuous mode [ 1475.621737][T18749] veth0_macvtap: left promiscuous mode [ 1475.655903][T18749] veth1_vlan: left promiscuous mode [ 1475.685624][T18749] veth0_vlan: left promiscuous mode [ 1476.471314][T18749] team0 (unregistering): Port device team_slave_1 removed [ 1476.517267][T18749] team0 (unregistering): Port device team_slave_0 removed [ 1476.829917][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1477.060494][T26839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.099051][T26839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.156788][T23461] Bluetooth: hci3: command tx timeout [ 1477.418287][T26839] team0: Port device team_slave_0 added [ 1477.461215][T26839] team0: Port device team_slave_1 added [ 1477.691081][T26965] FAULT_INJECTION: forcing a failure. [ 1477.691081][T26965] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.752458][T26965] CPU: 0 UID: 0 PID: 26965 Comm: syz.5.3180 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.752498][T26965] Tainted: [L]=SOFTLOCKUP [ 1477.752507][T26965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1477.752524][T26965] Call Trace: [ 1477.752532][T26965] [ 1477.752542][T26965] dump_stack_lvl+0x100/0x190 [ 1477.752577][T26965] should_fail_ex.cold+0x5/0xa [ 1477.752606][T26965] should_failslab+0xc2/0x120 [ 1477.752642][T26965] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1477.752675][T26965] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1477.752723][T26965] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1477.752775][T26965] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 1477.752818][T26965] acpi_ut_create_integer_object+0x46/0xe0 [ 1477.752857][T26965] acpi_ps_execute_method+0x582/0xe90 [ 1477.752894][T26965] acpi_ns_evaluate+0x640/0x1670 [ 1477.752932][T26965] acpi_evaluate_object+0x420/0xe00 [ 1477.752971][T26965] ? __kvmalloc_node_noprof+0x34f/0x970 [ 1477.753007][T26965] ? seq_read_iter+0x819/0x1270 [ 1477.753046][T26965] ? vfs_read+0x82e/0xb40 [ 1477.753088][T26965] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1477.753141][T26965] ? lock_acquire+0x1b9/0x370 [ 1477.753189][T26965] acpi_evaluate_integer+0xdf/0x220 [ 1477.753223][T26965] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1477.753257][T26965] ? __lock_acquire+0x49f/0x1a40 [ 1477.753305][T26965] ? __pfx_status_show+0x10/0x10 [ 1477.753343][T26965] status_show+0xa0/0x120 [ 1477.753381][T26965] ? __pfx_status_show+0x10/0x10 [ 1477.753433][T26965] dev_attr_show+0x52/0xa0 [ 1477.753472][T26965] ? __pfx_dev_attr_show+0x10/0x10 [ 1477.753510][T26965] sysfs_kf_seq_show+0x217/0x3f0 [ 1477.753549][T26965] seq_read_iter+0x32f/0x1270 [ 1477.753589][T26965] ? lock_acquire+0x1b9/0x370 [ 1477.753639][T26965] kernfs_fop_read_iter+0x46c/0x610 [ 1477.753670][T26965] ? rw_verify_area+0xce/0x6d0 [ 1477.753705][T26965] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1477.753737][T26965] vfs_read+0x82e/0xb40 [ 1477.753779][T26965] ? __pfx_vfs_read+0x10/0x10 [ 1477.753836][T26965] ksys_read+0x12a/0x250 [ 1477.753858][T26965] ? __pfx_ksys_read+0x10/0x10 [ 1477.753889][T26965] do_syscall_64+0x115/0x840 [ 1477.753917][T26965] ? clear_bhb_loop+0x40/0x90 [ 1477.753948][T26965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.753975][T26965] RIP: 0033:0x7fb2d0d9de99 [ 1477.753995][T26965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.754019][T26965] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1477.754044][T26965] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1477.754061][T26965] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a [ 1477.754076][T26965] RBP: 00007fb2d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1477.754091][T26965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.754107][T26965] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1477.754146][T26965] [ 1477.759289][T26965] ACPI Error: [ 1478.112673][T26839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.125183][T26839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.178429][T26839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.305313][T26839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.321646][T26839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.381622][T26839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.563102][T26965] Could not allocate an object descriptor (20260408/utobject-180) [ 1478.643682][T26965] ACPI Error: ffff888024339000 walk still has a scope list (20260408/dswstate-694) [ 1478.783793][T26839] hsr_slave_0: entered promiscuous mode [ 1478.810239][T26839] hsr_slave_1: entered promiscuous mode [ 1478.838116][T26839] debugfs: 'hsr0' already exists in 'hsr' [ 1478.858398][T26839] Cannot create hsr debugfs directory [ 1479.105242][T26984] FAULT_INJECTION: forcing a failure. [ 1479.105242][T26984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1479.179919][T26984] CPU: 0 UID: 0 PID: 26984 Comm: syz.0.3182 Tainted: G L syzkaller #0 PREEMPT(full) [ 1479.179959][T26984] Tainted: [L]=SOFTLOCKUP [ 1479.179968][T26984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1479.179983][T26984] Call Trace: [ 1479.179991][T26984] [ 1479.180000][T26984] dump_stack_lvl+0x100/0x190 [ 1479.180031][T26984] should_fail_ex.cold+0x5/0xa [ 1479.180065][T26984] _copy_from_user+0x2e/0xd0 [ 1479.180102][T26984] snd_seq_oss_write+0x53c/0x8b0 [ 1479.180135][T26984] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1479.180168][T26984] ? apparmor_file_permission+0x13f/0x1c0 [ 1479.180199][T26984] ? bpf_lsm_file_permission+0x9/0x10 [ 1479.180226][T26984] odev_write+0x51/0xa0 [ 1479.180261][T26984] vfs_write+0x2aa/0x1050 [ 1479.180285][T26984] ? __pfx_odev_write+0x10/0x10 [ 1479.180322][T26984] ? __pfx_vfs_write+0x10/0x10 [ 1479.180342][T26984] ? find_held_lock+0x2b/0x80 [ 1479.180371][T26984] ? __fget_files+0x215/0x3d0 [ 1479.180393][T26984] ? __fget_files+0x215/0x3d0 [ 1479.180419][T26984] ? __fget_files+0x21f/0x3d0 [ 1479.180448][T26984] ksys_write+0x12a/0x250 [ 1479.180470][T26984] ? __pfx_ksys_write+0x10/0x10 [ 1479.180500][T26984] do_syscall_64+0x115/0x840 [ 1479.180527][T26984] ? clear_bhb_loop+0x40/0x90 [ 1479.180556][T26984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.180580][T26984] RIP: 0033:0x7feebfd9de99 [ 1479.180599][T26984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.180623][T26984] RSP: 002b:00007feec0c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1479.180645][T26984] RAX: ffffffffffffffda RBX: 00007feec0025fa0 RCX: 00007feebfd9de99 [ 1479.180662][T26984] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1479.180677][T26984] RBP: 00007feec0c27090 R08: 0000000000000000 R09: 0000000000000000 [ 1479.180691][T26984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.180706][T26984] R13: 00007feec0026038 R14: 00007feec0025fa0 R15: 00007ffeda29a038 [ 1479.180736][T26984] [ 1479.565017][T26991] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3181'. [ 1479.671758][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1479.700287][T26996] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1479.753127][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1480.285666][T27010] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3185'. [ 1484.418673][T27084] FAULT_INJECTION: forcing a failure. [ 1484.418673][T27084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.466949][T27084] CPU: 0 UID: 0 PID: 27084 Comm: syz.2.3192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1484.466988][T27084] Tainted: [L]=SOFTLOCKUP [ 1484.466998][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1484.467013][T27084] Call Trace: [ 1484.467021][T27084] [ 1484.467030][T27084] dump_stack_lvl+0x100/0x190 [ 1484.467061][T27084] should_fail_ex.cold+0x5/0xa [ 1484.467088][T27084] _copy_to_user+0x32/0xd0 [ 1484.467125][T27084] simple_read_from_buffer+0xcb/0x170 [ 1484.467167][T27084] proc_fail_nth_read+0x1af/0x230 [ 1484.467199][T27084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1484.467233][T27084] ? rw_verify_area+0xce/0x6d0 [ 1484.467268][T27084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1484.467300][T27084] vfs_read+0x1e4/0xb40 [ 1484.467341][T27084] ? __pfx_vfs_read+0x10/0x10 [ 1484.467381][T27084] ? __fget_files+0x215/0x3d0 [ 1484.467415][T27084] ? __fget_files+0x21f/0x3d0 [ 1484.467445][T27084] ksys_read+0x12a/0x250 [ 1484.467466][T27084] ? __pfx_ksys_read+0x10/0x10 [ 1484.467505][T27084] do_syscall_64+0x115/0x840 [ 1484.467533][T27084] ? clear_bhb_loop+0x40/0x90 [ 1484.467562][T27084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.467586][T27084] RIP: 0033:0x7f465955e6ce [ 1484.467605][T27084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1484.467630][T27084] RSP: 002b:00007f465a448fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1484.467653][T27084] RAX: ffffffffffffffda RBX: 00007f465a4496c0 RCX: 00007f465955e6ce [ 1484.467669][T27084] RDX: 000000000000000f RSI: 00007f465a4490a0 RDI: 0000000000000005 [ 1484.467685][T27084] RBP: 00007f465a449090 R08: 0000000000000000 R09: 0000000000000000 [ 1484.467699][T27084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.467713][T27084] R13: 00007f46598263f8 R14: 00007f4659826360 R15: 00007fffa54da238 [ 1484.467744][T27084] [ 1485.528985][T26839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1485.563787][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1485.717732][T26839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1485.763512][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1485.910226][T26839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1485.945809][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1485.972932][T26839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1486.024363][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1486.354727][T27124] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1487.035688][T27139] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3196'. [ 1488.398936][T26839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.550713][T26839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.652372][T18751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.659609][T18751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.803354][T18751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.810569][T18751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.600091][T26839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.251845][T27250] FAULT_INJECTION: forcing a failure. [ 1493.251845][T27250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.312457][T27250] CPU: 0 UID: 0 PID: 27250 Comm: syz.0.3208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.312496][T27250] Tainted: [L]=SOFTLOCKUP [ 1493.312504][T27250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1493.312518][T27250] Call Trace: [ 1493.312527][T27250] [ 1493.312536][T27250] dump_stack_lvl+0x100/0x190 [ 1493.312572][T27250] should_fail_ex.cold+0x5/0xa [ 1493.312601][T27250] _copy_from_user+0x2e/0xd0 [ 1493.312640][T27250] snd_seq_oss_write+0x3d5/0x8b0 [ 1493.312684][T27250] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1493.312716][T27250] ? apparmor_file_permission+0x13f/0x1c0 [ 1493.312748][T27250] ? bpf_lsm_file_permission+0x9/0x10 [ 1493.312775][T27250] odev_write+0x51/0xa0 [ 1493.312812][T27250] vfs_write+0x2aa/0x1050 [ 1493.312835][T27250] ? __pfx_odev_write+0x10/0x10 [ 1493.312871][T27250] ? __pfx_vfs_write+0x10/0x10 [ 1493.312891][T27250] ? find_held_lock+0x2b/0x80 [ 1493.312922][T27250] ? __fget_files+0x215/0x3d0 [ 1493.312943][T27250] ? __fget_files+0x215/0x3d0 [ 1493.312969][T27250] ? __fget_files+0x21f/0x3d0 [ 1493.312998][T27250] ksys_write+0x12a/0x250 [ 1493.313019][T27250] ? __pfx_ksys_write+0x10/0x10 [ 1493.313049][T27250] do_syscall_64+0x115/0x840 [ 1493.313077][T27250] ? clear_bhb_loop+0x40/0x90 [ 1493.313106][T27250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.313131][T27250] RIP: 0033:0x7feebfd9de99 [ 1493.313150][T27250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.313176][T27250] RSP: 002b:00007feec0c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1493.313199][T27250] RAX: ffffffffffffffda RBX: 00007feec0025fa0 RCX: 00007feebfd9de99 [ 1493.313215][T27250] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 1493.313230][T27250] RBP: 00007feec0c27090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.313245][T27250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1493.313259][T27250] R13: 00007feec0026038 R14: 00007feec0025fa0 R15: 00007ffeda29a038 [ 1493.313290][T27250] [ 1493.597552][T27253] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3205'. [ 1494.258639][T26839] veth0_vlan: entered promiscuous mode [ 1494.609804][T26839] veth1_vlan: entered promiscuous mode [ 1495.363587][T26839] veth0_macvtap: entered promiscuous mode [ 1495.922707][T26839] veth1_macvtap: entered promiscuous mode [ 1496.625248][T26839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.844211][T26839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.235684][T18751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.280794][T18751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.314989][T18751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.378726][T18751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.730846][T27310] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3216'. [ 1498.115116][T27323] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3218'. [ 1498.525144][T18751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.556465][T18751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.946096][T18750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.004450][T18750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.175814][T27340] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1500.964902][T27356] Setting dangerous option i915.mitigations - tainting kernel [ 1502.537921][T27383] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1502.590279][T27378] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1504.430152][T27421] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3232'. [ 1506.294295][T27450] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1506.320400][T27450] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1506.519462][T27455] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3238'. [ 1507.759476][T27467] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1507.925583][T27476] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3241'. [ 1510.106950][T27494] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1510.206742][T27505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1510.299992][T27494] bridge0: port 3(veth1) entered disabled state [ 1510.306609][T27494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.313960][T27494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.332447][T27513] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3246'. [ 1510.346580][T27494] bridge0: entered promiscuous mode [ 1512.292576][T27536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3251'. [ 1512.769134][T27549] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1514.184221][T27577] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3253'. [ 1514.490814][T27580] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3254'. [ 1516.307347][T27606] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1517.979258][T27621] FAULT_INJECTION: forcing a failure. [ 1517.979258][T27621] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.102764][T27621] CPU: 0 UID: 0 PID: 27621 Comm: syz.5.3264 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1518.102804][T27621] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1518.102816][T27621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1518.102830][T27621] Call Trace: [ 1518.102839][T27621] [ 1518.102848][T27621] dump_stack_lvl+0x100/0x190 [ 1518.102879][T27621] should_fail_ex.cold+0x5/0xa [ 1518.102906][T27621] should_failslab+0xc2/0x120 [ 1518.102941][T27621] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1518.103008][T27621] ? do_getname+0x35/0x390 [ 1518.103043][T27621] do_getname+0x35/0x390 [ 1518.103075][T27621] __x64_sys_execve+0x76/0xd0 [ 1518.103113][T27621] do_syscall_64+0x115/0x840 [ 1518.103141][T27621] ? clear_bhb_loop+0x40/0x90 [ 1518.103170][T27621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.103195][T27621] RIP: 0033:0x7fb2d0d9de99 [ 1518.103215][T27621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.103239][T27621] RSP: 002b:00007fb2ceff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1518.103262][T27621] RAX: ffffffffffffffda RBX: 00007fb2d1026090 RCX: 00007fb2d0d9de99 [ 1518.103278][T27621] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000200000000040 [ 1518.103293][T27621] RBP: 00007fb2ceff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.103308][T27621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.103323][T27621] R13: 00007fb2d1026128 R14: 00007fb2d1026090 R15: 00007ffc12d1e558 [ 1518.103353][T27621] [ 1518.727242][T27625] FAULT_INJECTION: forcing a failure. [ 1518.727242][T27625] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.781686][T27631] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1518.862073][T27625] CPU: 0 UID: 0 PID: 27625 Comm: syz.4.3263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1518.862115][T27625] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1518.862125][T27625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1518.862141][T27625] Call Trace: [ 1518.862150][T27625] [ 1518.862160][T27625] dump_stack_lvl+0x100/0x190 [ 1518.862191][T27625] should_fail_ex.cold+0x5/0xa [ 1518.862220][T27625] should_failslab+0xc2/0x120 [ 1518.862256][T27625] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1518.862287][T27625] ? __pfx_map_id_range_down+0x10/0x10 [ 1518.862323][T27625] ? rcu_is_watching+0x12/0xc0 [ 1518.862353][T27625] ? security_inode_alloc+0x3b/0x2c0 [ 1518.862388][T27625] security_inode_alloc+0x3b/0x2c0 [ 1518.862418][T27625] inode_init_always_gfp+0xc77/0xfb0 [ 1518.862447][T27625] alloc_inode+0x8e/0x250 [ 1518.862480][T27625] new_inode+0x22/0x1c0 [ 1518.862515][T27625] proc_get_inode+0x1d/0x780 [ 1518.862549][T27625] proc_lookup_de+0x236/0x360 [ 1518.862579][T27625] proc_lookup+0xd8/0x110 [ 1518.862606][T27625] proc_root_lookup+0x3b/0x70 [ 1518.862634][T27625] __lookup_slow+0x155/0x320 [ 1518.862671][T27625] lookup_slow+0x50/0x70 [ 1518.862703][T27625] link_path_walk+0x1377/0x1cc0 [ 1518.862750][T27625] path_openat+0x1c9/0x4280 [ 1518.862774][T27625] ? __kasan_slab_alloc+0x89/0x90 [ 1518.862805][T27625] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1518.862834][T27625] ? do_getname+0x35/0x390 [ 1518.862864][T27625] ? __x64_sys_openat+0x12d/0x210 [ 1518.862906][T27625] ? __pfx_path_openat+0x10/0x10 [ 1518.862939][T27625] do_file_open+0x20e/0x430 [ 1518.862967][T27625] ? __pfx_do_file_open+0x10/0x10 [ 1518.863012][T27625] ? alloc_fd+0x471/0x7a0 [ 1518.863039][T27625] ? do_getname+0x191/0x390 [ 1518.863072][T27625] do_sys_openat2+0x10f/0x1e0 [ 1518.863105][T27625] ? __pfx_do_sys_openat2+0x10/0x10 [ 1518.863140][T27625] ? do_raw_spin_lock+0x128/0x260 [ 1518.863174][T27625] __x64_sys_openat+0x12d/0x210 [ 1518.863208][T27625] ? __pfx___x64_sys_openat+0x10/0x10 [ 1518.863254][T27625] do_syscall_64+0x115/0x840 [ 1518.863282][T27625] ? clear_bhb_loop+0x40/0x90 [ 1518.863312][T27625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.863338][T27625] RIP: 0033:0x7fb31319de99 [ 1518.863358][T27625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.863382][T27625] RSP: 002b:00007fb3140f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1518.863406][T27625] RAX: ffffffffffffffda RBX: 00007fb313426090 RCX: 00007fb31319de99 [ 1518.863423][T27625] RDX: 0000000000000100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1518.863446][T27625] RBP: 00007fb313233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1518.863461][T27625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1518.863477][T27625] R13: 00007fb313426128 R14: 00007fb313426090 R15: 00007fff81942158 [ 1518.863508][T27625] [ 1519.162484][T27642] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3267'. [ 1520.847872][T27659] FAULT_INJECTION: forcing a failure. [ 1520.847872][T27659] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.893391][T27659] CPU: 0 UID: 0 PID: 27659 Comm: syz.0.3270 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1520.893435][T27659] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1520.893445][T27659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1520.893461][T27659] Call Trace: [ 1520.893469][T27659] [ 1520.893479][T27659] dump_stack_lvl+0x100/0x190 [ 1520.893511][T27659] should_fail_ex.cold+0x5/0xa [ 1520.893538][T27659] should_failslab+0xc2/0x120 [ 1520.893573][T27659] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1520.893606][T27659] ? __d_alloc+0x35/0xa50 [ 1520.893638][T27659] __d_alloc+0x35/0xa50 [ 1520.893668][T27659] d_alloc+0x4a/0x1e0 [ 1520.893696][T27659] lookup_one_qstr_excl+0x171/0x250 [ 1520.893732][T27659] start_dirop+0x59/0xb0 [ 1520.893771][T27659] simple_start_creating+0xf9/0x110 [ 1520.893812][T27659] ? __pfx_simple_start_creating+0x10/0x10 [ 1520.893854][T27659] ? mntput+0x70/0xa0 [ 1520.893895][T27659] ? simple_pin_fs+0xa3/0x190 [ 1520.893934][T27659] debugfs_start_creating.part.0+0x82/0x170 [ 1520.893974][T27659] __debugfs_create_file+0xb3/0x4f0 [ 1520.894014][T27659] debugfs_create_file_full+0x41/0x60 [ 1520.894053][T27659] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1520.894096][T27659] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1520.894157][T27659] ? kasan_save_track+0x14/0x30 [ 1520.894187][T27659] ? __kasan_kmalloc+0xaa/0xb0 [ 1520.894227][T27659] ? lockdep_init_map_type+0x5c/0x250 [ 1520.894273][T27659] preinit_net.part.0+0x43b/0x920 [ 1520.894311][T27659] copy_net_ns+0x339/0x7c0 [ 1520.894359][T27659] create_new_namespaces+0x3ea/0xac0 [ 1520.894399][T27659] unshare_nsproxy_namespaces+0xf2/0x220 [ 1520.894429][T27659] ksys_unshare+0x438/0xab0 [ 1520.894468][T27659] ? __pfx_ksys_unshare+0x10/0x10 [ 1520.894511][T27659] __x64_sys_unshare+0x31/0x40 [ 1520.894541][T27659] do_syscall_64+0x115/0x840 [ 1520.894569][T27659] ? clear_bhb_loop+0x40/0x90 [ 1520.894599][T27659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.894623][T27659] RIP: 0033:0x7feebfd9de99 [ 1520.894644][T27659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.894669][T27659] RSP: 002b:00007feec0c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1520.894698][T27659] RAX: ffffffffffffffda RBX: 00007feec0025fa0 RCX: 00007feebfd9de99 [ 1520.894715][T27659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1520.894730][T27659] RBP: 00007feebfe33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1520.894746][T27659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.894761][T27659] R13: 00007feec0026038 R14: 00007feec0025fa0 R15: 00007ffeda29a038 [ 1520.894792][T27659] [ 1525.182609][T27703] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1525.432139][T27708] bond0: invalid ARP target specified [ 1525.911691][T27725] FAULT_INJECTION: forcing a failure. [ 1525.911691][T27725] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.955906][T27725] CPU: 0 UID: 0 PID: 27725 Comm: syz.2.3282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1525.955949][T27725] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1525.955960][T27725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1525.955984][T27725] Call Trace: [ 1525.955992][T27725] [ 1525.956002][T27725] dump_stack_lvl+0x100/0x190 [ 1525.956035][T27725] should_fail_ex.cold+0x5/0xa [ 1525.956063][T27725] should_failslab+0xc2/0x120 [ 1525.956097][T27725] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1525.956131][T27725] ? __d_alloc+0x35/0xa50 [ 1525.956163][T27725] __d_alloc+0x35/0xa50 [ 1525.956192][T27725] d_alloc+0x4a/0x1e0 [ 1525.956221][T27725] lookup_one_qstr_excl+0x171/0x250 [ 1525.956256][T27725] start_dirop+0x59/0xb0 [ 1525.956296][T27725] simple_start_creating+0xf9/0x110 [ 1525.956337][T27725] ? __pfx_simple_start_creating+0x10/0x10 [ 1525.956381][T27725] ? mntput+0x70/0xa0 [ 1525.956419][T27725] ? simple_pin_fs+0xa3/0x190 [ 1525.956457][T27725] debugfs_start_creating.part.0+0x82/0x170 [ 1525.956495][T27725] __debugfs_create_file+0xb3/0x4f0 [ 1525.956534][T27725] debugfs_create_file_full+0x41/0x60 [ 1525.956574][T27725] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1525.956615][T27725] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1525.956655][T27725] ? ida_alloc_range+0x70d/0x830 [ 1525.956707][T27725] ? kasan_save_track+0x14/0x30 [ 1525.956738][T27725] ? __kasan_kmalloc+0xaa/0xb0 [ 1525.956769][T27725] ? lockdep_init_map_type+0x5c/0x250 [ 1525.956815][T27725] preinit_net.part.0+0x252/0x920 [ 1525.956853][T27725] copy_net_ns+0x339/0x7c0 [ 1525.956892][T27725] create_new_namespaces+0x3ea/0xac0 [ 1525.956925][T27725] unshare_nsproxy_namespaces+0xf2/0x220 [ 1525.956954][T27725] ksys_unshare+0x438/0xab0 [ 1525.956995][T27725] ? __pfx_ksys_unshare+0x10/0x10 [ 1525.957037][T27725] __x64_sys_unshare+0x31/0x40 [ 1525.957068][T27725] do_syscall_64+0x115/0x840 [ 1525.957096][T27725] ? clear_bhb_loop+0x40/0x90 [ 1525.957126][T27725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.957152][T27725] RIP: 0033:0x7f465959de99 [ 1525.957173][T27725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.957197][T27725] RSP: 002b:00007f465a4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1525.957220][T27725] RAX: ffffffffffffffda RBX: 00007f4659825fa0 RCX: 00007f465959de99 [ 1525.957237][T27725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1525.957252][T27725] RBP: 00007f4659633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1525.957268][T27725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1525.957282][T27725] R13: 00007f4659826038 R14: 00007f4659825fa0 R15: 00007fffa54da238 [ 1525.957314][T27725] [ 1526.324526][T27728] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3279'. [ 1527.569877][T27751] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3283'. [ 1528.521186][T27767] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3286'. [ 1529.287542][T27772] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 1530.557623][T27790] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1531.335086][T27800] FAULT_INJECTION: forcing a failure. [ 1531.335086][T27800] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.394997][T27800] CPU: 0 UID: 0 PID: 27800 Comm: syz.4.3293 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1531.395039][T27800] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1531.395049][T27800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1531.395065][T27800] Call Trace: [ 1531.395073][T27800] [ 1531.395082][T27800] dump_stack_lvl+0x100/0x190 [ 1531.395118][T27800] should_fail_ex.cold+0x5/0xa [ 1531.395145][T27800] should_failslab+0xc2/0x120 [ 1531.395181][T27800] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1531.395215][T27800] ? __d_alloc+0x35/0xa50 [ 1531.395246][T27800] __d_alloc+0x35/0xa50 [ 1531.395276][T27800] d_alloc+0x4a/0x1e0 [ 1531.395304][T27800] lookup_one_qstr_excl+0x171/0x250 [ 1531.395339][T27800] start_dirop+0x59/0xb0 [ 1531.395381][T27800] simple_start_creating+0xf9/0x110 [ 1531.395423][T27800] ? __pfx_simple_start_creating+0x10/0x10 [ 1531.395476][T27800] ? mntput+0x70/0xa0 [ 1531.395512][T27800] ? simple_pin_fs+0xa3/0x190 [ 1531.395551][T27800] debugfs_start_creating.part.0+0x82/0x170 [ 1531.395590][T27800] __debugfs_create_file+0xb3/0x4f0 [ 1531.395629][T27800] debugfs_create_file_full+0x41/0x60 [ 1531.395668][T27800] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1531.395709][T27800] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1531.395770][T27800] ? kasan_save_track+0x14/0x30 [ 1531.395801][T27800] ? __kasan_kmalloc+0xaa/0xb0 [ 1531.395832][T27800] ? lockdep_init_map_type+0x5c/0x250 [ 1531.395878][T27800] preinit_net.part.0+0x43b/0x920 [ 1531.395915][T27800] copy_net_ns+0x339/0x7c0 [ 1531.395958][T27800] create_new_namespaces+0x3ea/0xac0 [ 1531.395991][T27800] unshare_nsproxy_namespaces+0xf2/0x220 [ 1531.396021][T27800] ksys_unshare+0x438/0xab0 [ 1531.396054][T27800] ? __pfx_ksys_unshare+0x10/0x10 [ 1531.396097][T27800] __x64_sys_unshare+0x31/0x40 [ 1531.396128][T27800] do_syscall_64+0x115/0x840 [ 1531.396158][T27800] ? clear_bhb_loop+0x40/0x90 [ 1531.396189][T27800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.396215][T27800] RIP: 0033:0x7fb31319de99 [ 1531.396235][T27800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.396259][T27800] RSP: 002b:00007fb31411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1531.396284][T27800] RAX: ffffffffffffffda RBX: 00007fb313425fa0 RCX: 00007fb31319de99 [ 1531.396301][T27800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1531.396316][T27800] RBP: 00007fb313233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1531.396331][T27800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.396346][T27800] R13: 00007fb313426038 R14: 00007fb313425fa0 R15: 00007fff81942158 [ 1531.396378][T27800] [ 1532.847681][T27832] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3296'. [ 1535.108887][T27866] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1539.062251][T27900] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1540.917433][T27919] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 1541.093149][T27924] netlink: 'syz.5.3314': attribute type 1 has an invalid length. [ 1541.790593][T27943] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3316'. [ 1541.902408][T27945] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1543.043085][T27949] FAULT_INJECTION: forcing a failure. [ 1543.043085][T27949] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.101480][T27949] CPU: 0 UID: 0 PID: 27949 Comm: syz.5.3317 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1543.101523][T27949] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1543.101532][T27949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1543.101548][T27949] Call Trace: [ 1543.101556][T27949] [ 1543.101565][T27949] dump_stack_lvl+0x100/0x190 [ 1543.101597][T27949] should_fail_ex.cold+0x5/0xa [ 1543.101625][T27949] should_failslab+0xc2/0x120 [ 1543.101660][T27949] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1543.101693][T27949] ? __d_alloc+0x35/0xa50 [ 1543.101726][T27949] __d_alloc+0x35/0xa50 [ 1543.101755][T27949] d_alloc+0x4a/0x1e0 [ 1543.101783][T27949] lookup_one_qstr_excl+0x171/0x250 [ 1543.101818][T27949] start_dirop+0x59/0xb0 [ 1543.101858][T27949] simple_start_creating+0xf9/0x110 [ 1543.101898][T27949] ? __pfx_simple_start_creating+0x10/0x10 [ 1543.101940][T27949] ? mntput+0x70/0xa0 [ 1543.101976][T27949] ? simple_pin_fs+0xa3/0x190 [ 1543.102014][T27949] debugfs_start_creating.part.0+0x82/0x170 [ 1543.102052][T27949] __debugfs_create_file+0xb3/0x4f0 [ 1543.102091][T27949] debugfs_create_file_full+0x41/0x60 [ 1543.102129][T27949] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1543.102170][T27949] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1543.102231][T27949] ? kasan_save_track+0x14/0x30 [ 1543.102261][T27949] ? __kasan_kmalloc+0xaa/0xb0 [ 1543.102293][T27949] ? lockdep_init_map_type+0x5c/0x250 [ 1543.102338][T27949] preinit_net.part.0+0x43b/0x920 [ 1543.102376][T27949] copy_net_ns+0x339/0x7c0 [ 1543.102424][T27949] create_new_namespaces+0x3ea/0xac0 [ 1543.102460][T27949] unshare_nsproxy_namespaces+0xf2/0x220 [ 1543.102496][T27949] ksys_unshare+0x438/0xab0 [ 1543.102530][T27949] ? __pfx_ksys_unshare+0x10/0x10 [ 1543.102573][T27949] __x64_sys_unshare+0x31/0x40 [ 1543.102605][T27949] do_syscall_64+0x115/0x840 [ 1543.102633][T27949] ? clear_bhb_loop+0x40/0x90 [ 1543.102663][T27949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.102687][T27949] RIP: 0033:0x7fb2d0d9de99 [ 1543.102708][T27949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.102731][T27949] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1543.102756][T27949] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1543.102772][T27949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1543.102788][T27949] RBP: 00007fb2d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1543.102803][T27949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1543.102818][T27949] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1543.102849][T27949] [ 1544.826983][T27983] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3323'. [ 1546.403443][T27996] netlink: 'syz.5.3326': attribute type 1 has an invalid length. [ 1547.688000][T28022] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3328'. [ 1547.843314][T28024] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3329'. [ 1549.035494][T28029] FAULT_INJECTION: forcing a failure. [ 1549.035494][T28029] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.106140][T28029] CPU: 0 UID: 0 PID: 28029 Comm: syz.5.3331 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1549.106182][T28029] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1549.106192][T28029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1549.106207][T28029] Call Trace: [ 1549.106216][T28029] [ 1549.106225][T28029] dump_stack_lvl+0x100/0x190 [ 1549.106258][T28029] should_fail_ex.cold+0x5/0xa [ 1549.106286][T28029] should_failslab+0xc2/0x120 [ 1549.106321][T28029] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1549.106354][T28029] ? __d_alloc+0x35/0xa50 [ 1549.106386][T28029] __d_alloc+0x35/0xa50 [ 1549.106416][T28029] d_alloc+0x4a/0x1e0 [ 1549.106444][T28029] lookup_one_qstr_excl+0x171/0x250 [ 1549.106513][T28029] start_dirop+0x59/0xb0 [ 1549.106552][T28029] simple_start_creating+0xf9/0x110 [ 1549.106594][T28029] ? __pfx_simple_start_creating+0x10/0x10 [ 1549.106636][T28029] ? mntput+0x70/0xa0 [ 1549.106674][T28029] ? simple_pin_fs+0xa3/0x190 [ 1549.106712][T28029] debugfs_start_creating.part.0+0x82/0x170 [ 1549.106751][T28029] __debugfs_create_file+0xb3/0x4f0 [ 1549.106791][T28029] debugfs_create_file_full+0x41/0x60 [ 1549.106831][T28029] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1549.106873][T28029] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1549.106913][T28029] ? ida_alloc_range+0x70d/0x830 [ 1549.106972][T28029] ? kasan_save_track+0x14/0x30 [ 1549.107004][T28029] ? __kasan_kmalloc+0xaa/0xb0 [ 1549.107036][T28029] ? lockdep_init_map_type+0x5c/0x250 [ 1549.107082][T28029] preinit_net.part.0+0x252/0x920 [ 1549.107121][T28029] copy_net_ns+0x339/0x7c0 [ 1549.107164][T28029] create_new_namespaces+0x3ea/0xac0 [ 1549.107197][T28029] unshare_nsproxy_namespaces+0xf2/0x220 [ 1549.107227][T28029] ksys_unshare+0x438/0xab0 [ 1549.107260][T28029] ? __pfx_ksys_unshare+0x10/0x10 [ 1549.107303][T28029] __x64_sys_unshare+0x31/0x40 [ 1549.107335][T28029] do_syscall_64+0x115/0x840 [ 1549.107363][T28029] ? clear_bhb_loop+0x40/0x90 [ 1549.107393][T28029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.107419][T28029] RIP: 0033:0x7fb2d0d9de99 [ 1549.107440][T28029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.107465][T28029] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1549.107489][T28029] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1549.107506][T28029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1549.107522][T28029] RBP: 00007fb2d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1549.107538][T28029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.107554][T28029] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1549.107586][T28029] [ 1549.788191][T28037] FAULT_INJECTION: forcing a failure. [ 1549.788191][T28037] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.852480][T28037] CPU: 0 UID: 0 PID: 28037 Comm: syz.4.3333 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1549.852523][T28037] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1549.852532][T28037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1549.852547][T28037] Call Trace: [ 1549.852556][T28037] [ 1549.852566][T28037] dump_stack_lvl+0x100/0x190 [ 1549.852597][T28037] should_fail_ex.cold+0x5/0xa [ 1549.852624][T28037] should_failslab+0xc2/0x120 [ 1549.852659][T28037] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1549.852688][T28037] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1549.852712][T28037] ? mm_alloc+0x1b/0x60 [ 1549.852742][T28037] mm_alloc+0x1b/0x60 [ 1549.852766][T28037] alloc_bprm+0x2ba/0x9d0 [ 1549.852806][T28037] do_execveat_common.isra.0+0x19c/0x580 [ 1549.852845][T28037] ? do_getname+0x191/0x390 [ 1549.852900][T28037] __x64_sys_execve+0x93/0xd0 [ 1549.852939][T28037] do_syscall_64+0x115/0x840 [ 1549.852967][T28037] ? clear_bhb_loop+0x40/0x90 [ 1549.852996][T28037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.853020][T28037] RIP: 0033:0x7fb31319de99 [ 1549.853039][T28037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.853062][T28037] RSP: 002b:00007fb3140f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1549.853085][T28037] RAX: ffffffffffffffda RBX: 00007fb313426090 RCX: 00007fb31319de99 [ 1549.853101][T28037] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000200000000040 [ 1549.853117][T28037] RBP: 00007fb3140f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.853131][T28037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.853146][T28037] R13: 00007fb313426128 R14: 00007fb313426090 R15: 00007fff81942158 [ 1549.853175][T28037] [ 1552.427471][T28077] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1553.127966][T28091] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3341'. [ 1553.207105][T28093] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1553.818782][T28101] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3343'. [ 1554.180713][T28104] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1555.209639][T28111] FAULT_INJECTION: forcing a failure. [ 1555.209639][T28111] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.253894][T28111] CPU: 0 UID: 0 PID: 28111 Comm: syz.5.3346 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1555.253937][T28111] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1555.253947][T28111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1555.253963][T28111] Call Trace: [ 1555.253971][T28111] [ 1555.253981][T28111] dump_stack_lvl+0x100/0x190 [ 1555.254013][T28111] should_fail_ex.cold+0x5/0xa [ 1555.254042][T28111] should_failslab+0xc2/0x120 [ 1555.254076][T28111] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1555.254110][T28111] ? __d_alloc+0x35/0xa50 [ 1555.254142][T28111] __d_alloc+0x35/0xa50 [ 1555.254172][T28111] d_alloc+0x4a/0x1e0 [ 1555.254201][T28111] lookup_one_qstr_excl+0x171/0x250 [ 1555.254236][T28111] start_dirop+0x59/0xb0 [ 1555.254275][T28111] simple_start_creating+0xf9/0x110 [ 1555.254317][T28111] ? __pfx_simple_start_creating+0x10/0x10 [ 1555.254366][T28111] ? mntput+0x70/0xa0 [ 1555.254403][T28111] ? simple_pin_fs+0xa3/0x190 [ 1555.254442][T28111] debugfs_start_creating.part.0+0x82/0x170 [ 1555.254481][T28111] __debugfs_create_file+0xb3/0x4f0 [ 1555.254521][T28111] debugfs_create_file_full+0x41/0x60 [ 1555.254559][T28111] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1555.254601][T28111] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1555.254642][T28111] ? ida_alloc_range+0x70d/0x830 [ 1555.254693][T28111] ? kasan_save_track+0x14/0x30 [ 1555.254724][T28111] ? __kasan_kmalloc+0xaa/0xb0 [ 1555.254759][T28111] ? lockdep_init_map_type+0x5c/0x250 [ 1555.254805][T28111] preinit_net.part.0+0x252/0x920 [ 1555.254844][T28111] copy_net_ns+0x339/0x7c0 [ 1555.254884][T28111] create_new_namespaces+0x3ea/0xac0 [ 1555.254917][T28111] unshare_nsproxy_namespaces+0xf2/0x220 [ 1555.254947][T28111] ksys_unshare+0x438/0xab0 [ 1555.254981][T28111] ? __pfx_ksys_unshare+0x10/0x10 [ 1555.255023][T28111] __x64_sys_unshare+0x31/0x40 [ 1555.255055][T28111] do_syscall_64+0x115/0x840 [ 1555.255083][T28111] ? clear_bhb_loop+0x40/0x90 [ 1555.255113][T28111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.255139][T28111] RIP: 0033:0x7fb2d0d9de99 [ 1555.255160][T28111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.255183][T28111] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1555.255208][T28111] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1555.255225][T28111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1555.255241][T28111] RBP: 00007fb2d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1555.255256][T28111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.255272][T28111] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1555.255303][T28111] [ 1555.798785][T28123] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3347'. [ 1558.055048][T28157] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1558.274707][T28166] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3355'. [ 1558.411677][T28169] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1559.874895][T28177] FAULT_INJECTION: forcing a failure. [ 1559.874895][T28177] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.947811][T28177] CPU: 0 UID: 0 PID: 28177 Comm: syz.4.3359 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1559.947853][T28177] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1559.947863][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1559.947879][T28177] Call Trace: [ 1559.947887][T28177] [ 1559.947897][T28177] dump_stack_lvl+0x100/0x190 [ 1559.947930][T28177] should_fail_ex.cold+0x5/0xa [ 1559.947959][T28177] should_failslab+0xc2/0x120 [ 1559.948005][T28177] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1559.948037][T28177] ? start_dirop+0x79/0xb0 [ 1559.948076][T28177] ? alloc_inode+0x68/0x250 [ 1559.948108][T28177] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1559.948144][T28177] alloc_inode+0x68/0x250 [ 1559.948176][T28177] new_inode+0x22/0x1c0 [ 1559.948210][T28177] __debugfs_create_file+0x105/0x4f0 [ 1559.948249][T28177] debugfs_create_file_full+0x41/0x60 [ 1559.948288][T28177] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1559.948329][T28177] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1559.948390][T28177] ? kasan_save_track+0x14/0x30 [ 1559.948420][T28177] ? __kasan_kmalloc+0xaa/0xb0 [ 1559.948451][T28177] ? lockdep_init_map_type+0x5c/0x250 [ 1559.948497][T28177] preinit_net.part.0+0x43b/0x920 [ 1559.948544][T28177] copy_net_ns+0x339/0x7c0 [ 1559.948584][T28177] create_new_namespaces+0x3ea/0xac0 [ 1559.948618][T28177] unshare_nsproxy_namespaces+0xf2/0x220 [ 1559.948647][T28177] ksys_unshare+0x438/0xab0 [ 1559.948681][T28177] ? __pfx_ksys_unshare+0x10/0x10 [ 1559.948723][T28177] __x64_sys_unshare+0x31/0x40 [ 1559.948754][T28177] do_syscall_64+0x115/0x840 [ 1559.948782][T28177] ? clear_bhb_loop+0x40/0x90 [ 1559.948812][T28177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.948837][T28177] RIP: 0033:0x7fb31319de99 [ 1559.948858][T28177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.948883][T28177] RSP: 002b:00007fb31411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1559.948906][T28177] RAX: ffffffffffffffda RBX: 00007fb313425fa0 RCX: 00007fb31319de99 [ 1559.948924][T28177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1559.948939][T28177] RBP: 00007fb313233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1559.948954][T28177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.948969][T28177] R13: 00007fb313426038 R14: 00007fb313425fa0 R15: 00007fff81942158 [ 1559.949008][T28177] [ 1559.954269][T28177] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888035afd178' [ 1560.564268][T28189] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1561.922033][T28212] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3362'. [ 1562.007523][T28214] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3363'. [ 1562.178899][T28221] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3365'. [ 1564.083774][T28245] FAULT_INJECTION: forcing a failure. [ 1564.083774][T28245] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.129317][T28245] CPU: 0 UID: 0 PID: 28245 Comm: syz.5.3372 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1564.129360][T28245] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1564.129370][T28245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1564.129385][T28245] Call Trace: [ 1564.129394][T28245] [ 1564.129403][T28245] dump_stack_lvl+0x100/0x190 [ 1564.129435][T28245] should_fail_ex.cold+0x5/0xa [ 1564.129463][T28245] should_failslab+0xc2/0x120 [ 1564.129498][T28245] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1564.129530][T28245] ? start_dirop+0x79/0xb0 [ 1564.129568][T28245] ? alloc_inode+0x68/0x250 [ 1564.129602][T28245] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1564.129639][T28245] alloc_inode+0x68/0x250 [ 1564.129671][T28245] new_inode+0x22/0x1c0 [ 1564.129706][T28245] __debugfs_create_file+0x105/0x4f0 [ 1564.129752][T28245] debugfs_create_file_full+0x41/0x60 [ 1564.129800][T28245] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1564.129842][T28245] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1564.129904][T28245] ? kasan_save_track+0x14/0x30 [ 1564.129939][T28245] ? __kasan_kmalloc+0xaa/0xb0 [ 1564.129971][T28245] ? lockdep_init_map_type+0x5c/0x250 [ 1564.130017][T28245] preinit_net.part.0+0x43b/0x920 [ 1564.130055][T28245] copy_net_ns+0x339/0x7c0 [ 1564.130094][T28245] create_new_namespaces+0x3ea/0xac0 [ 1564.130127][T28245] unshare_nsproxy_namespaces+0xf2/0x220 [ 1564.130156][T28245] ksys_unshare+0x438/0xab0 [ 1564.130189][T28245] ? __pfx_ksys_unshare+0x10/0x10 [ 1564.130232][T28245] __x64_sys_unshare+0x31/0x40 [ 1564.130262][T28245] do_syscall_64+0x115/0x840 [ 1564.130291][T28245] ? clear_bhb_loop+0x40/0x90 [ 1564.130320][T28245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.130345][T28245] RIP: 0033:0x7fb2d0d9de99 [ 1564.130367][T28245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.130390][T28245] RSP: 002b:00007fb2d1b8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1564.130415][T28245] RAX: ffffffffffffffda RBX: 00007fb2d1025fa0 RCX: 00007fb2d0d9de99 [ 1564.130432][T28245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1564.130447][T28245] RBP: 00007fb2d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1564.130461][T28245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.130476][T28245] R13: 00007fb2d1026038 R14: 00007fb2d1025fa0 R15: 00007ffc12d1e558 [ 1564.130508][T28245] [ 1564.130530][T28245] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88807f6bd178' [ 1564.408486][T28252] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1564.610713][T28257] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3371'. [ 1564.629476][T28256] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1566.211724][T28280] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3374'. [ 1566.323123][T28281] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1567.103410][T28295] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3378'. [ 1568.946018][T28314] FAULT_INJECTION: forcing a failure. [ 1568.946018][T28314] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.986453][T28314] CPU: 0 UID: 0 PID: 28314 Comm: syz.4.3383 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1568.986499][T28314] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1568.986510][T28314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1568.986526][T28314] Call Trace: [ 1568.986534][T28314] [ 1568.986544][T28314] dump_stack_lvl+0x100/0x190 [ 1568.986576][T28314] should_fail_ex.cold+0x5/0xa [ 1568.986604][T28314] should_failslab+0xc2/0x120 [ 1568.986640][T28314] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1568.986674][T28314] ? __d_alloc+0x35/0xa50 [ 1568.986705][T28314] __d_alloc+0x35/0xa50 [ 1568.986736][T28314] d_alloc+0x4a/0x1e0 [ 1568.986764][T28314] lookup_one_qstr_excl+0x171/0x250 [ 1568.986799][T28314] start_dirop+0x59/0xb0 [ 1568.986839][T28314] simple_start_creating+0xf9/0x110 [ 1568.986881][T28314] ? __pfx_simple_start_creating+0x10/0x10 [ 1568.986923][T28314] ? mntput+0x70/0xa0 [ 1568.986961][T28314] ? simple_pin_fs+0xa3/0x190 [ 1568.986999][T28314] debugfs_start_creating.part.0+0x82/0x170 [ 1568.987038][T28314] __debugfs_create_file+0xb3/0x4f0 [ 1568.987078][T28314] debugfs_create_file_full+0x41/0x60 [ 1568.987116][T28314] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1568.987164][T28314] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1568.987226][T28314] ? kasan_save_track+0x14/0x30 [ 1568.987257][T28314] ? __kasan_kmalloc+0xaa/0xb0 [ 1568.987289][T28314] ? lockdep_init_map_type+0x5c/0x250 [ 1568.987334][T28314] preinit_net.part.0+0x43b/0x920 [ 1568.987373][T28314] copy_net_ns+0x339/0x7c0 [ 1568.987413][T28314] create_new_namespaces+0x3ea/0xac0 [ 1568.987446][T28314] unshare_nsproxy_namespaces+0xf2/0x220 [ 1568.987476][T28314] ksys_unshare+0x438/0xab0 [ 1568.987509][T28314] ? __pfx_ksys_unshare+0x10/0x10 [ 1568.987552][T28314] __x64_sys_unshare+0x31/0x40 [ 1568.987584][T28314] do_syscall_64+0x115/0x840 [ 1568.987613][T28314] ? clear_bhb_loop+0x40/0x90 [ 1568.987643][T28314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.987669][T28314] RIP: 0033:0x7fb31319de99 [ 1568.987690][T28314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.987714][T28314] RSP: 002b:00007fb31411a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1568.987738][T28314] RAX: ffffffffffffffda RBX: 00007fb313425fa0 RCX: 00007fb31319de99 [ 1568.987754][T28314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1568.987770][T28314] RBP: 00007fb313233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1568.987786][T28314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1568.987801][T28314] R13: 00007fb313426038 R14: 00007fb313425fa0 R15: 00007fff81942158 [ 1568.987832][T28314] [ 1569.538243][T28323] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3382'. [ 1570.264211][T28331] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3384'. [ 1570.854832][T28338] FAULT_INJECTION: forcing a failure. [ 1570.854832][T28338] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.007962][T28338] CPU: 0 UID: 0 PID: 28338 Comm: syz.5.3386 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1571.008040][T28338] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1571.008050][T28338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1571.008064][T28338] Call Trace: [ 1571.008072][T28338] [ 1571.008081][T28338] dump_stack_lvl+0x100/0x190 [ 1571.008112][T28338] should_fail_ex.cold+0x5/0xa [ 1571.008139][T28338] should_failslab+0xc2/0x120 [ 1571.008172][T28338] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1571.008203][T28338] ? vm_area_alloc+0x1f/0x160 [ 1571.008230][T28338] vm_area_alloc+0x1f/0x160 [ 1571.008253][T28338] create_init_stack_vma+0x2ad/0xc10 [ 1571.008287][T28338] ? __pfx_create_init_stack_vma+0x10/0x10 [ 1571.008315][T28338] ? find_held_lock+0x2b/0x80 [ 1571.008345][T28338] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1571.008459][T28338] ? do_raw_spin_lock+0x128/0x260 [ 1571.008484][T28338] ? find_held_lock+0x2b/0x80 [ 1571.008513][T28338] ? alloc_bprm+0x548/0x9d0 [ 1571.008547][T28338] ? alloc_bprm+0x548/0x9d0 [ 1571.008587][T28338] alloc_bprm+0x575/0x9d0 [ 1571.008626][T28338] do_execveat_common.isra.0+0x19c/0x580 [ 1571.008665][T28338] ? do_getname+0x191/0x390 [ 1571.008696][T28338] __x64_sys_execve+0x93/0xd0 [ 1571.008734][T28338] do_syscall_64+0x115/0x840 [ 1571.008763][T28338] ? clear_bhb_loop+0x40/0x90 [ 1571.008791][T28338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.008815][T28338] RIP: 0033:0x7fb2d0d9de99 [ 1571.008836][T28338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.008860][T28338] RSP: 002b:00007fb2ceff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1571.008884][T28338] RAX: ffffffffffffffda RBX: 00007fb2d1026090 RCX: 00007fb2d0d9de99 [ 1571.008900][T28338] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000200000000040 [ 1571.008916][T28338] RBP: 00007fb2ceff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.008931][T28338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1571.008946][T28338] R13: 00007fb2d1026128 R14: 00007fb2d1026090 R15: 00007ffc12d1e558 [ 1571.008976][T28338] [ 1571.374500][T28346] netlink: 'syz.2.3388': attribute type 1 has an invalid length. [ 1572.599350][T28367] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3391'. [ 1574.796039][T28397] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3394'. [ 1576.369578][T28407] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3397'. [ 1577.449766][T28416] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1578.086360][T28428] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3402'. [ 1578.513631][T28432] netlink: 'syz.4.3403': attribute type 1 has an invalid length. [ 1579.749049][T28451] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3405'. [ 1579.954235][T28451] bridge0: port 4(veth1) entered blocking state [ 1579.972263][T28451] bridge0: port 4(veth1) entered disabled state [ 1579.998452][T28451] veth1: entered allmulticast mode [ 1580.022760][T28451] veth1: entered promiscuous mode [ 1580.037543][T28451] bridge0: port 4(veth1) entered blocking state [ 1580.044051][T28451] bridge0: port 4(veth1) entered forwarding state [ 1581.090805][T28472] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3408'. [ 1581.727700][T28483] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1582.153143][T28493] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1583.267793][T28499] netlink: 'syz.5.3415': attribute type 1 has an invalid length. [ 1586.105188][T28554] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3425'. [ 1586.774943][T28564] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3426'. [ 1587.566821][T28575] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3429'. [ 1588.158475][T28586] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 1589.724579][T28610] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1589.753094][T28610] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1589.787225][T28610] veth0_to_bridge: entered allmulticast mode [ 1589.826454][T28610] veth0_to_bridge: entered promiscuous mode [ 1589.847379][T28610] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1589.880931][T28610] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1589.888288][T28610] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1590.299868][T28633] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3438'. [ 1590.442019][T28638] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1592.704281][T28640] Bluetooth: hci3: command 0x0406 tx timeout [ 1695.145253][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1695.152364][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28629/1:b..l [ 1695.160990][ C0] rcu: (detected by 0, t=10502 jiffies, g=483689, q=617 ncpus=1) [ 1695.168812][ C0] task:syz.2.3440 state:R running task stack:26456 pid:28629 tgid:28624 ppid:24482 task_flags:0x400140 flags:0x00080000 [ 1695.183434][ C0] Call Trace: [ 1695.186751][ C0] [ 1695.189699][ C0] __schedule+0x125c/0x6730 [ 1695.194252][ C0] ? delete_node+0x20a/0x8f0 [ 1695.198887][ C0] ? __pfx___schedule+0x10/0x10 [ 1695.203755][ C0] ? mark_held_locks+0x40/0x70 [ 1695.208550][ C0] preempt_schedule_irq+0x50/0x90 [ 1695.213586][ C0] irqentry_exit+0x205/0xa00 [ 1695.218206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1695.224205][ C0] RIP: 0010:lock_acquire+0x147/0x370 [ 1695.229513][ C0] Code: 0f 0b 90 e9 1d ff ff ff 48 8b 74 24 68 48 89 ef e8 de b5 93 00 8b 0d 8c 6b 3d 0f 85 c9 0f 84 bd 00 00 00 65 8b 05 c9 8a 7e 12 <85> c0 0f 85 ae 00 00 00 65 48 8b 05 01 44 7e 12 8b 90 9c 0b 00 00 [ 1695.249158][ C0] RSP: 0018:ffffc90006b8f718 EFLAGS: 00000202 [ 1695.255239][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 1695.263219][ C0] RDX: 0000000000000000 RSI: ffffffff82bcd874 RDI: fffffbfff1d7cff0 [ 1695.271208][ C0] RBP: ffffffff8ebe7f80 R08: 0000000000000000 R09: 0000000000000000 [ 1695.279198][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1695.287195][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.295199][ C0] ? kernfs_root+0x34/0x2a0 [ 1695.299764][ C0] ? lock_acquire+0x132/0x370 [ 1695.304467][ C0] ? kernfs_root+0xee/0x2a0 [ 1695.308989][ C0] ? kernfs_root+0xee/0x2a0 [ 1695.313518][ C0] kernfs_root+0x34/0x2a0 [ 1695.317870][ C0] ? kernfs_root+0x23/0x2a0 [ 1695.322411][ C0] kernfs_link_sibling+0x2f1/0x850 [ 1695.327557][ C0] kernfs_add_one+0x1e7/0xaa0 [ 1695.332244][ C0] __kernfs_create_file+0x295/0x350 [ 1695.337461][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1695.342859][ C0] sysfs_merge_group+0x194/0x340 [ 1695.347896][ C0] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1695.353380][ C0] ? bus_add_device+0x2e2/0x6c0 [ 1695.358304][ C0] ? __pfx_bus_add_device+0x10/0x10 [ 1695.363526][ C0] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1695.369753][ C0] dpm_sysfs_add+0x237/0x280 [ 1695.374412][ C0] device_add+0x9f4/0x1970 [ 1695.378864][ C0] ? __pfx_device_add+0x10/0x10 [ 1695.383746][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1695.389152][ C0] ? __init_waitqueue_head+0xca/0x150 [ 1695.394553][ C0] netdev_register_kobject+0x1a9/0x3d0 [ 1695.400097][ C0] register_netdevice+0x15b6/0x25a0 [ 1695.405381][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 1695.410956][ C0] ? __pfx_loopback_net_init+0x10/0x10 [ 1695.416510][ C0] register_netdev+0x34/0x50 [ 1695.421144][ C0] loopback_net_init+0x7a/0x170 [ 1695.426018][ C0] ? __pfx_loopback_net_init+0x10/0x10 [ 1695.431523][ C0] ops_init+0x1e2/0x5f0 [ 1695.435708][ C0] setup_net+0x118/0x3a0 [ 1695.439974][ C0] ? __pfx_setup_net+0x10/0x10 [ 1695.444776][ C0] ? mutex_init_lockdep+0xf1/0x120 [ 1695.449922][ C0] copy_net_ns+0x46f/0x7c0 [ 1695.454373][ C0] create_new_namespaces+0x3ea/0xac0 [ 1695.459680][ C0] unshare_nsproxy_namespaces+0xf2/0x220 [ 1695.465356][ C0] ksys_unshare+0x438/0xab0 [ 1695.469888][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 1695.474948][ C0] __x64_sys_unshare+0x31/0x40 [ 1695.479738][ C0] do_syscall_64+0x115/0x840 [ 1695.484352][ C0] ? clear_bhb_loop+0x40/0x90 [ 1695.489086][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.495000][ C0] RIP: 0033:0x7f465959de99 [ 1695.499457][ C0] RSP: 002b:00007f465a4ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1695.507905][ C0] RAX: ffffffffffffffda RBX: 00007f4659826090 RCX: 00007f465959de99 [ 1695.515898][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1695.523895][ C0] RBP: 00007f4659633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1695.531888][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.540151][ C0] R13: 00007f4659826128 R14: 00007f4659826090 R15: 00007fffa54da238 [ 1695.548149][ C0] [ 1695.551191][ C0] rcu: rcu_preempt kthread starved for 9085 jiffies! g483689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1695.562416][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1695.572392][ C0] rcu: RCU grace-period kthread stack dump: [ 1695.578292][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1695.591830][ C0] Call Trace: [ 1695.595133][ C0] [ 1695.598088][ C0] __schedule+0x125c/0x6730 [ 1695.602645][ C0] ? __pfx___schedule+0x10/0x10 [ 1695.607528][ C0] ? find_held_lock+0x2b/0x80 [ 1695.612245][ C0] ? schedule+0x225/0x2c0 [ 1695.616618][ C0] schedule+0xdd/0x2c0 [ 1695.620705][ C0] schedule_timeout+0x127/0x280 [ 1695.625586][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1695.631005][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1695.636360][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1695.642222][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1695.647732][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1695.652527][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1695.657864][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1695.662847][ C0] ? rcu_is_watching+0x12/0xc0 [ 1695.667651][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1695.673476][ C0] rcu_gp_kthread+0x179/0x230 [ 1695.678207][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1695.683432][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1695.689257][ C0] ? __kthread_parkme+0x18c/0x230 [ 1695.694324][ C0] ? kthread+0x13a/0x450 [ 1695.698610][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1695.703831][ C0] kthread+0x370/0x450 [ 1695.707920][ C0] ? __pfx_kthread+0x10/0x10 [ 1695.712527][ C0] ret_from_fork+0x72b/0xd50 [ 1695.717140][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1695.722268][ C0] ? __switch_to+0x800/0x10f0 [ 1695.726999][ C0] ? __switch_to_asm+0x39/0x70 [ 1695.731785][ C0] ? __pfx_kthread+0x10/0x10 [ 1695.736396][ C0] ret_from_fork_asm+0x1a/0x30 [ 1695.741192][ C0] [ 1695.744221][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1695.750577][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 1695.761899][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1695.767099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1695.777208][ C0] Workqueue: bat_events batadv_dat_purge [ 1695.783008][ C0] RIP: 0010:unwind_next_frame+0x1c8/0x2090 [ 1695.788842][ C0] Code: 00 00 00 81 0f 82 25 02 00 00 49 81 ff b8 4e bc 8b 0f 83 18 02 00 00 8b 35 15 ba 8e 0c 4c 89 f8 48 2d 00 00 00 81 48 c1 e8 08 <8d> 56 ff 41 89 c3 39 d0 0f 83 2f 16 00 00 48 ba 00 00 00 00 00 fc [ 1695.808486][ C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000206 [ 1695.814582][ C0] RAX: 0000000000088c72 RBX: 0000000000000002 RCX: 1ffff92000000edb [ 1695.822562][ C0] RDX: dffffc0000000000 RSI: 00000000000abc50 RDI: ffffffff8e46b920 [ 1695.830544][ C0] RBP: ffffc900000076d8 R08: 000000000ac0d5af R09: 0000000000000007 [ 1695.838529][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffc900000076e0 [ 1695.846529][ C0] R13: ffffc90000007690 R14: ffffc900000076c5 R15: ffffffff898c725e [ 1695.854510][ C0] FS: 0000000000000000(0000) GS:ffff888123de6000(0000) knlGS:0000000000000000 [ 1695.863468][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1695.870065][ C0] CR2: 000055de3ccbb290 CR3: 000000002a44e000 CR4: 00000000003526f0 [ 1695.878077][ C0] Call Trace: [ 1695.881372][ C0] [ 1695.884228][ C0] ? __netif_receive_skb+0x1f/0x120 [ 1695.889469][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1695.895658][ C0] arch_stack_walk+0x94/0xf0 [ 1695.900277][ C0] ? __netif_receive_skb+0x1f/0x120 [ 1695.905533][ C0] ? kfree_skbmem+0x19a/0x210 [ 1695.910246][ C0] stack_trace_save+0x8e/0xc0 [ 1695.914975][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1695.920395][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1695.925363][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 1695.930336][ C0] kasan_save_stack+0x30/0x50 [ 1695.935040][ C0] ? kasan_save_stack+0x30/0x50 [ 1695.939914][ C0] ? kasan_save_track+0x14/0x30 [ 1695.944788][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1695.950005][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1695.954982][ C0] ? kmem_cache_free+0x127/0x6b0 [ 1695.959934][ C0] ? kfree_skbmem+0x19a/0x210 [ 1695.964622][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 1695.969841][ C0] ? ip6_mc_input+0x832/0xf50 [ 1695.974607][ C0] ? ipv6_rcv+0x34c/0x3d0 [ 1695.978973][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 1695.985063][ C0] ? __netif_receive_skb+0x1f/0x120 [ 1695.990324][ C0] kasan_save_track+0x14/0x30 [ 1695.995021][ C0] kasan_save_free_info+0x3b/0x70 [ 1696.000055][ C0] __kasan_slab_free+0x5f/0x80 [ 1696.004837][ C0] kmem_cache_free+0x127/0x6b0 [ 1696.009613][ C0] ? skb_release_data+0x6ca/0x8e0 [ 1696.014661][ C0] kfree_skbmem+0x19a/0x210 [ 1696.019177][ C0] sk_skb_reason_drop+0x10f/0x1b0 [ 1696.024230][ C0] ip6_mc_input+0x832/0xf50 [ 1696.028760][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1696.033822][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 1696.039894][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1696.044958][ C0] ipv6_rcv+0x34c/0x3d0 [ 1696.049157][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1696.053857][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1696.059788][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1696.066225][ C0] ? lock_acquire+0x1b9/0x370 [ 1696.070945][ C0] ? process_backlog+0x32a/0x1580 [ 1696.075986][ C0] ? process_backlog+0x32a/0x1580 [ 1696.081018][ C0] __netif_receive_skb+0x1f/0x120 [ 1696.086056][ C0] process_backlog+0x37a/0x1580 [ 1696.090942][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1696.096335][ C0] net_rx_action+0xa40/0xf20 [ 1696.100972][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1696.106116][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1696.111942][ C0] ? try_to_wake_up+0x158/0x1c90 [ 1696.116913][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1696.122129][ C0] ? sched_clock+0x38/0x60 [ 1696.126575][ C0] ? sched_clock_cpu+0x6c/0x570 [ 1696.131463][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1696.136803][ C0] ? mark_held_locks+0x40/0x70 [ 1696.141602][ C0] handle_softirqs+0x1ea/0x9b0 [ 1696.146412][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1696.151717][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1696.157025][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 1696.162860][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1696.168523][ C0] do_softirq+0xac/0xe0 [ 1696.172697][ C0] [ 1696.175633][ C0] [ 1696.178570][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1696.183700][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 1696.189365][ C0] batadv_dat_purge+0x4b/0xa0 [ 1696.194069][ C0] process_one_work+0xa23/0x1940 [ 1696.199043][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1696.204444][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 1696.209844][ C0] rescuer_thread+0x905/0x14a0 [ 1696.214651][ C0] ? rescuer_thread+0x240/0x14a0 [ 1696.219630][ C0] ? rescuer_thread+0x118/0x14a0 [ 1696.224589][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1696.229809][ C0] ? __kthread_parkme+0x18c/0x230 [ 1696.234855][ C0] ? kthread+0x13a/0x450 [ 1696.239117][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1696.244346][ C0] kthread+0x370/0x450 [ 1696.248439][ C0] ? __pfx_kthread+0x10/0x10 [ 1696.253050][ C0] ret_from_fork+0x72b/0xd50 [ 1696.257662][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1696.262801][ C0] ? __switch_to+0x800/0x10f0 [ 1696.267498][ C0] ? __switch_to_asm+0x39/0x70 [ 1696.272283][ C0] ? __pfx_kthread+0x10/0x10 [ 1696.276894][ C0] ret_from_fork_asm+0x1a/0x30 [ 1696.281695][ C0]