last executing test programs: 8m8.134389294s ago: executing program 0 (id=1274): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0x914, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x198, 0x3, 0x0, 0x1, [@generic="c90083a3c8d1feb89625fb26f9382a6a68d0126e61e42d0d7e255704b9c91e8873008c76be1ac2067c36c2b412327c545ad6b88af4a27627ded3db44c79c650ddd52ae37d4609c032939ca1b25d5a845d5617c53b5c076adc61dae0dbd8ccffab49f51d4a6eeffe57b5f561cfb3c399844a048cd381762e1b590bd8fed633d42890ff453b7d69d5aa13a92f5307a832d654b36e72c05f246131fc8ad7f342de364981b428f09fd24adba971c923d23daf6653dc6549cd97586d3d0e0", @generic="d876d11fc38d871d7f1d3fcfae58e47ef10e9b05ac11ad1f5c5bad211c82b47378bc3fb431c7a52212f3a56b32bbba8a4462678e722b41a4cbebcb5d2708b82191f0f4b63d6907e2fb40a2d22ec89492756ddf534ca74babde48fb3d60048d6f03c76fb33b348d3cf9362cebd9fcb16e4e2ab83acfabc8526a5ecf2113d92c3d5c5491cd364c5748b52d5bbf524d187aa2eb1f7283c1cf8293e1594cae1853ddbd97076fb937348437c723309e84ee5eb9a64f4a772044085ea6d693ae01d2a6", @generic="32bd7254825445866f854b0a2f99055f993057eb339271b2"]}, @ETHTOOL_A_FEATURES_WANTED={0x412, 0x3, 0x0, 0x1, [@nested={0x192, 0xbc, 0x0, 0x1, [@generic="62bd86154938c9a24dd73a88a4cf7f7ad2d258f1d2f40b46036d52456bea5c1f83d6827cffbe6d4ef876dfcf8bbbb414ee82ae910fef27dd4c4da8ca4021bfafe49b5ce96938e7931b713a6d76ca2524c7dcebb0993ecffb8db2d9361a66245dfbe21780c1982e7c7834ec6fdf8fed93394de85ff00a6b68371c8010bc989004968ea5b3c62a907c3e751da0b1e230ae39c3fc6dad0dd9d2054e31562c29bbe704622cec6c127e82e171d620a5969af3bbb9d544a26ec33a54bf8819b8dd8046e742be468eaa75d19d6541035c1e27e967a376d1ba32c50891e24a859568", @typed={0xa7, 0x8b, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @typed={0x8, 0x14b, 0x0, 0x0, @fd=r0}]}, @typed={0x4, 0x8a}, @typed={0x16, 0x9a, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @generic="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", @generic="4b8d05cac6dfc9ec5f8aff112cb499ac628b7ba9ee4d5da42ab4c4d93397dfba958e45aec555b25a1e6b25246910592843333789c183b838fd7b7eacc12a86f511f01ee631fb6a27c8f94b27c84ed7a13ab7a788b98abadc89d5201c0891eaab9349660aca039f38ba4cc02f5433e36440c563c32cc727494ee621d303c9be21b9fd7c8d98af16f36f9ada0e76c95ccdfedb6c41dcc85474a1", @nested={0x1c, 0x43, 0x0, 0x1, [@nested={0x4, 0xab}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@private2}]}, @generic="46be241e7c7b105b5ff531e797449faf63c707bf023978d20f9e81c6ff0b478d10be906054c9433f57db2fd225e1f673f0988b17c52d3fae365ed228656404257a692157ccaef56ab5ef326a569aa6915007a30eff1e41cb16228b6d745d14a357eb391c1440e2b7597cd0766dbf46d20293b65c00b6f47f008bc97966b660c835d5d323aff1ca3d310f5263b4a6dd6305bbb7150b8d8834a4223fc5f5576fa597637a6ee0f280bcc3b08d8b1cabc4"]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b3, 0x3, 0x0, 0x1, [@generic="e54efe1e373aff351690ade30e7d5c381f4b717463d3a4b7d7ab7487c50af47ba93f82872edf28b688c4be96159561b5b7cbef55fd54339874785776c1f5ca8de006b73b13975d73cc0fbaf9a245a3a80dff78899810bfc25d680fb0b2412d0ba0b9b1641f379a36e864cbf9493a7270825ba912a24c9b6a", @nested={0x10, 0x23, 0x0, 0x1, [@nested={0x4, 0x6e}, @typed={0x8, 0x42, 0x0, 0x0, @u32=0x8}]}, @generic="ef39d4e5e34aff4626d06b4dd32b927ef55ace382b4c280136554ecce56b48dd75f0b1c899bfffa06e0c4ee159ba9073989ac36caeba4f9aab8ef08a4b01a8fadaaf3fdfd11cbaf6af70f8038f8cf76c2fdd82c75192b0261c7549cd280d406797c36e410e63397cc34f2b48caa5b452c2034e621f79157ebd7d4bedc74026bd2dd8c908e6b4be4aca3a84bfcd1e1b60d9", @generic="485283766bc18616eea8a16bffb7c37be4a513724fe4df9c8c758061ba2f1b01b2db726870e74684497dbceb4ee08a53454c7b1019a1eccf165b1e61d3fc70676b8fd2fcecd804f000005fa5982390e145", @generic="4abfdaee", @generic="b4965fdcfd4c438a5d8b5660457ba6a22ab6352d6ae6fa143f03b7caeab131d5accbce777c147d673f37b10fba72de47c618cb7583c6f7d8e2ea4bfa5a414c3622"]}, @ETHTOOL_A_FEATURES_WANTED={0xf0, 0x3, 0x0, 0x1, [@nested={0xe9, 0x142, 0x0, 0x1, [@typed={0xa7, 0x11e, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="c134f5e0af7c193ea1aa7ffd40b1dc2e75583a92667e2d9b36d3b817a127748d1ae2dddaa984a975fd1c4fcfbf69462ddcccd68eadc1882cf6ff9f6f9a"]}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x38}]}]}, 0x914}, 0x1, 0x0, 0x0, 0x804}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r2, 0x0, 0x20048880) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x400000002020009, 0xf7fffffffffffffe, 0xeb1, r3, 0x80d) socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x0, 0x9, &(0x7f0000000080)={{0x7, 0x1}, {0xb}}, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x62402, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102880, 0x1fd) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast2}, 0xe3000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000003c0), 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x802, 0x1) 8m6.91795052s ago: executing program 0 (id=1281): timerfd_create$auto(0x23, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) get_robust_list$auto(0x1, 0x0, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010035bd7040ffdbdf210a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r3, 0xc038563c, r2) poll$auto(&(0x7f0000000000)={r1, 0xbcf8, 0x7}, 0x1, 0x6) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x802}, 0x7, 0x400a) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000002b, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, 0x0) write$auto(r0, 0x0, 0xa3) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) 8m6.774929889s ago: executing program 0 (id=1282): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x3, 0xa) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x9, 0xd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f00000000c0)="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", 0x119) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/devices\x00', 0x40140, 0x0) lseek$auto(0x3, 0x8, 0x1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x400000000000100) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) getsockopt$auto(r0, 0x0, 0x32, 0x0, 0x0) 8m6.532246104s ago: executing program 0 (id=1284): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) fchown$auto(r0, r1, r2) shmctl$auto_SHM_UNLOCK(0x6, 0xc, &(0x7f0000000280)={{0x7fffffff, 0xee00, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x57}, 0x6, 0x9fd, 0x7, 0x81, @raw=0x80, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f00000004c0)="2b489cf6312f68b44e8b5771b0fa798747194fc78194808f228385d5cb72e86a1a21966f966b082580a94d9c857e6fd8ec65842c9eb4582afc04ac8cc74a120f28740cf6edbb7eb095ed30a38384e6067a35ea1f1648ea29f3d5e8ccef8b7c4bbbe9990f1ba4347ef4f532ee8bf20b1f16df214cb5ad1b6e30b2f53cc78fd61bb65593407ce53be8f33429acefa2d4d2df3e35004e10cf59e828a4749534632234abba2d9ce7f9b02178ac5a999d9838f537d55bc9c1f6470a7f62ba6ccc87690e77c31e5f4676a899c71a724ff5ac74e43c6fefc47d8ecaf5f6a61d6307b6f668491d295e35f8968cdfe3ebf105ed", &(0x7f0000000180)="157d40f8888ab81178c02c9db793a896d3e69279f4eadf2622783d23acb5415233ad9bd9e4f9bb492627824eb486ea8a3cc471fe8beac75f0e013a4e91317cbbe277e5ba0cfe18bea6cfba644f5c8aee"}) r4 = setfsgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xb91) setresgid$auto(r4, 0x0, r4) r5 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r5) shmctl$auto_SHM_INFO(0x7fff80, 0xe, &(0x7f0000000380)={{0x8, r3, r4, 0xeb8f, 0x3ff, 0xc, 0xff}, 0x8, 0x81, 0x3, 0x40, @inferred=r5, @raw=0x100, 0x8, 0x0, &(0x7f0000000640)="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", &(0x7f0000000300)="b05c89fc051ccf4f3ff940e1cb0b92352a1ed12bc606b83104d2a56f284dff9523a45b0c8a4e7ac0"}) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) sendfile$auto(r6, r7, 0x0, 0x1000200) ioctl$auto_XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000000000000000000000500000007000000020000000400000000000000040000000000000000000000000000000800000000000000010000000000000003000000000000000c00000000000000f37f000000000000ffffffffffffff7f0c000000000000000100000000000000ffff000000000000070000000000000002000000", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0100000001000080030000005a03000000000000ffffffff05000000050000000001800076fffff202000000050000000800070004000100020000090000fffffffffeffffff007d00000000000000000000060000000000000000000000000000000000000000000000000000000000000000a405ce11a2e03291b6cd847850dbad8e2aeb424df230b7dac32120f6c99bae64149f578dab29833203681c65c55b7b2be163bf33f8fab9e912f3e7f1d373517cf15202dfd63cfcfadff5225756b6d0cf3b5fe319c251dc668b75a5d81cc2e73c1e467fee1c261c228c9842e720eb91e0086c22b43e05b86d5ef7de053dea927f4465a5a67f54203cd1abd63a24f0ae58d0ac52d670440f9049a19a621067fe186ccf9f2e7bc8"]) r8 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r9 = getpid() process_vm_readv$auto(r9, &(0x7f00000000c0)={0x0, 0xffe}, 0x40000000001, &(0x7f0000000140)={&(0x7f0000000040)="8c97000a9d1b208365d5b5d112dbab029ed13881d2b2c7ba2eb01c3db79f77fdc2bb50c64a925009df01011aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1691d", 0xcb8}, 0x4, 0x9) ioctl$auto(r8, 0x400454ca, 0x38) r10 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto(r10, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) 8m6.246624975s ago: executing program 0 (id=1286): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)='x\\ ', 0x3) (async) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)='x\\ ', 0x3) r1 = io_uring_setup$auto(0x4, &(0x7f0000000240)={0x2, 0xc, 0x7, 0xe000, 0xfffffff9, 0xffffff12, r0, [0x2, 0xc, 0x6], {0x4, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8, 0xe, 0x5}, {0x7ff, 0x7fffffff, 0x6, 0x3a43, 0x5, 0x100, 0x0, 0x5c3, 0x6df8a9f6}}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250a000000080003000100000008000200", @ANYRES32=r5, @ANYBLOB="7a504316ccd81d03"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x12) (async) r7 = memfd_create$auto(0x0, 0x12) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r7, 0x3, 0x2, 0x4) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/netdevsim/netdevsim0/health/break_health\x00', 0x220100, 0x0) (async) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/netdevsim/netdevsim0/health/break_health\x00', 0x220100, 0x0) mkdir$auto(0x0, 0x353) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10002abd700005000000c13d7d7df6cbe9a7dcc2994a00000800dc0002000000060e00000000000000004320b7762bf4aa9b00d4395d206d4725d239463d55838f48d6c2da591bb37643e177245fb958b33ee8ec6886ed8ba83e4fc541f047ecd6dd0005003d00010000"], 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x40045) 8m5.977776392s ago: executing program 0 (id=1288): syslog$auto_SYSLOG_ACTION_READ_CLEAR(0x4, 0x0, 0x100) mknod$auto(0x0, 0x1001, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto(0xffffffffffffffff, 0x4008af03, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) 7m50.90486248s ago: executing program 32 (id=1288): syslog$auto_SYSLOG_ACTION_READ_CLEAR(0x4, 0x0, 0x100) mknod$auto(0x0, 0x1001, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto(0xffffffffffffffff, 0x4008af03, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) 7m41.119202269s ago: executing program 2 (id=1375): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) alarm$auto(0xe4a) r0 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)=0x1ff) mmap$auto(0x0, 0x1, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000000008000) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) mbind$auto(0x7, 0x100000004, 0xfffffffd, 0x0, 0xa, 0x2) getitimer$auto_ITIMER_PROF(0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) unshare$auto(0x40000080) socket(0x23, 0x800, 0xfffff000) bpf$auto(0x34, &(0x7f00000002c0)=@bpf_attr_11={0x4, 0x3fd, 0x0, 0x1006af, 0x8000, 0x1ff, 0xa, r0}, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3a) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, 0x0, 0x24008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 7m39.012043294s ago: executing program 2 (id=1384): mmap$auto(0x0, 0x20009, 0xdf, 0x4000000000eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop1/queue/zone_append_max_bytes\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x8, 0x7ff) ptrace$auto(0x9, r1, 0x95, 0x887) read$auto(r0, 0x0, 0x6) 7m38.497450568s ago: executing program 2 (id=1387): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0xdb) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8955, 0x0) unshare$auto(0x40000080) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$auto_F_GETFD(r1, 0x1, 0x4) r5 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/vrr_range\x00', 0x40040, 0x0) pread64$auto(r5, &(0x7f0000000080)=']%\x00', 0x5, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r4, 0x4008bc0d, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400005, 0x1000000000000df, 0x4000009b73, r4, 0x8000) 7m37.510267977s ago: executing program 2 (id=1388): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0xdb) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8955, 0x0) unshare$auto(0x40000080) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$auto_F_GETFD(r1, 0x1, 0x4) r5 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/vrr_range\x00', 0x40040, 0x0) pread64$auto(r5, &(0x7f0000000080)=']%\x00', 0x5, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r4, 0x4008bc0d, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400005, 0x1000000000000df, 0x4000009b73, r4, 0x8000) 7m36.268217647s ago: executing program 2 (id=1396): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) r0 = ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$auto_BCH_IOCTL_DISK_SET_STATE(r0, 0x4010bc08, &(0x7f0000000000)={0x400, 0x3, '\x00', 0x207}) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x9, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xc, 0x2, 0x19, 0x20000000009, 0x7}) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7m36.159953508s ago: executing program 2 (id=1397): mmap$auto(0x0, 0x2020009, 0x0, 0x800000000000eb5, 0xfffffffffffffffa, 0x8002) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/syscall\x00', 0x40, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfff, 0x2020009, 0x400, 0x1000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x56e) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xfffffeffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) statmount$auto(0x0, 0x0, 0x1fa, 0x11) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x402900, 0x0) r1 = socket(0x10, 0x80805, 0x0) listen$auto(r1, 0x4) poll$auto(&(0x7f0000000000)={r1, 0x1963, 0x81}, 0x5, 0x10001) r3 = socket(0x25, 0x1, 0x2) r4 = socket(0x23, 0x2, 0x0) ioctl$auto(r4, 0x89ef, 0x74) setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) setsockopt$auto(r2, 0x113, 0x4, 0x0, 0x8) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) 7m21.023594759s ago: executing program 33 (id=1397): mmap$auto(0x0, 0x2020009, 0x0, 0x800000000000eb5, 0xfffffffffffffffa, 0x8002) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/syscall\x00', 0x40, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfff, 0x2020009, 0x400, 0x1000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x56e) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xfffffeffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) statmount$auto(0x0, 0x0, 0x1fa, 0x11) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x402900, 0x0) r1 = socket(0x10, 0x80805, 0x0) listen$auto(r1, 0x4) poll$auto(&(0x7f0000000000)={r1, 0x1963, 0x81}, 0x5, 0x10001) r3 = socket(0x25, 0x1, 0x2) r4 = socket(0x23, 0x2, 0x0) ioctl$auto(r4, 0x89ef, 0x74) setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) setsockopt$auto(r2, 0x113, 0x4, 0x0, 0x8) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) 8.954416653s ago: executing program 5 (id=2914): r0 = socket(0xa, 0x2, 0x3a) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async, rerun: 64) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0xd0) (rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) clock_settime$auto(0xfffffffb, 0x0) (rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) madvise$auto(0x0, 0x2003f2, 0x15) 8.800665339s ago: executing program 3 (id=2916): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r1, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x5609, r4) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.381852163s ago: executing program 5 (id=2919): close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS0\x00', 0x121000, 0x0) ioctl$auto(0x3, 0x540b, 0x1) 8.078601393s ago: executing program 5 (id=2922): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x3, 0x0) rt_sigprocmask$auto(0x21000404, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x8) getpid() sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d000000060006"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.641237419s ago: executing program 1 (id=2923): r0 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000100)=0x2) write$auto_ctl_device_fops_user(r0, &(0x7f0000000300)="ba4d5456a6769dcdaf554215fd96a766fe1fb00d7445819c3747aebee4f247cb22b0f26647f6c0266e082605584cf49e0854b2c5c880f14f7e0b7bf21aef3eaa2bffacab477c1a6738f346e24f456dea197968c28881665affd4916e3a816aa1c4e5527fee2e3492477b036564f3f3be8a2198a19f511deca075b52f29f3b83af4f3829004cf0e99ba9aa783bb88a51c39b0653a48e100ad8bc2af24200927200c9cea10fa92fd8900fc80c2f322ccc479734a0a691931d54827bd4ebfa46ec451d9ae70088c9adb524582c80fcab5a649f56c4d54da20a3e5ae02218e8314ed399d03030655947ae9f90e10234ecd47754ac6fb3e0d9154c37a9b5f06af95be8bbe4323632e5d9bc56ecb1ed5dba181c1bfaba5a78c582bcfcf0442d0d9f8dafa5b28ebe62d4e377d874a72434ba7671abc8a25abe1dcd778e8dbd337cea5aafca01c887dd4ef71dab023ab5cf5df434e635ea7feda3c0398805eae6c9cbadd4aa6663624de39a036515cb22b8974a0d3fd956e9acfab0e341d6be5014d57436a74ed2c298e442f610acb476f8f263c50c3f0e7181a6cc3466a9b9a1957de70ea5a935b39244df63b5970e4b6b9a16b315f529f20a5c80711dc343f1d797d3805d8a192c17f6b3c8f1e71a90102c2b5814865e170d928505ad9b79874d6fb21c38abe4176e9acc26c203a0f988fa5ecb190de23a0083f473ce2ce9dd32cb96cb4d2ae274cd1df40d722d183c48ca9bacb7dd118a126a2d33027cd3e94e308cf3b0dcbdbeb7de7f6bb8869296a7a2c4956b6d1a16a4c7ac5280fb032a0b9a3b8c3bbd0ac4f4173cfd76b72c812b9a2b5dbb331813f9c2d4a7e4b25453b41c49a90a3ba051d9ca7ec59da965c441402b8fcfbb3db7ba57b71e8e50f41a472549750c663dd655af51a165b23c432f6ec60981d39b5ac1addc23bdcfce537ae3a513bfc6e38633381a4b68c4cebe08641f7e9521d1cdd9f7e4dcacdc7aa65215a665183df41cd5438108214429933103808599d7940e4de6b0cb2454d9a9cba3db6a803d86ab07f73e3ea015c722119f235d229c40722769737851c455a18bfafb1889ba0d8b69e914043bda5c2c0a0f133e0fedc18417da62768947191283250fa947aeedaa43b01f418b2f0dd094a8a52c4a75a1fb60c20cca5bdaaf8ad7e6866e65abad7f6fec664bf3620d4816d01180289b70fb9e195374973ca7878a8772d741fd695af9c37f3b84969fb21ddc385593c49629276c777bc5d1d66353ceffc1325e69a08c9ddf9f93257538c4bda6e54daeb0fbf41326e03f22f5a92d7a0e801b4a5b78a9c8cb8725e8859db16f189b59aa46d12a0361924153ab9879a648c9d4f8841fb1740b59e277ff333dac22e63e6f2791079626d2deef943e78a54a27d47c9a3ce280ecc167d8dbd29c2f78e7a98eaf1841c42b94d859c75c9ff89dc906685fe2b706cd291f501fb14ba2ae011db3ac17e7fa5a21d77fdc23b3ed8f60b82909e97acba3646d93d7294ebe7d242fa5b5fb3cd8b5bced04b64b3056c4ddc83e8d10962ce8deddfcc4387526b19f7c47e5adf364603468dd4f4003bdab5ebb1b103e098216d591bf78f04216343ab453778bb5270681b8688fedf29acfe92251834df796d8300268687e1628546b3e4c750e6838f0509a965f70d30049d2a25873b5032100ad975bb4113348d7c9b3235e553b7e60a0398a4c39ba0b0812c709fc20aba8c8ff4ba717fcd89526088512b04e77688299aae682365877112f4c7c357d3069379c850b22b39d3ebecbfb6fc76beacea4aa91263c46b6414328ae9d14e2505c1f9469a717cfc0bf6732ead82639ea9be37a0599f661c6e207c64f01c0816b78f28b75f1030d37347329485c2757d03b96c7b9473da2dd2a18fd51b640bde27b0765d2a436c7da63a3e77a18a0b47a09953aa333ae5023703f4b4989d34f8717689c1ec509495f16ebab4c8c9f28187c08a01caac20c1551cf8bd9a20dcb3bc47891a0b639148697b70a6ed45ce4100461240ab1e330649c96ca16dbcbe4face74e3c2a7de7640f490627e134401ce6695a7da4ed33ea8b62019b72c7e5828bab9e536d93c6a15e250abe76d23238d23249ec1121a6bbbd8666866feb34cec470815cf101f46f40f5c6eddfd682980574976bf7aa4403dabbeca1656d86124a655ca8316b3fda5dedcacd2f57e3ee5b1fe60e8153f817609894c3b7ef7e7ade5e5c5e1f4cd240de9d8362566a2d817824bc16b0a3f8ba2715c4795e29919d8cd0cfe908529d9d24601c28c00de82821e1fefcfaa00d6b0783caa4fc9fb57cb4732a48ab2e4e9f2d1814cfef591cb39e139401beae8bd36de87a3c4566619f3bbd06633f3d410ba9275ff218f9d4aa3f181559666f1796b4b758f38fbe4e300f8e34f20deea6867163c0311fc89bf496b02edc111e7e223ec435b7d9e415d83d53c3757533f2554ece0e47d3ea8237f2f3c624dc6b72ef4d5db830d6abb1aba655326f7398030941033a4a4dc0d1b75eca792bc1e90e2573dd1feb741b26b5a9104e0c2639be799156571ed74ac13ef85468f54df506df8bde193a6df1619e7beb13a17f00218269c121e6eebcd6f50308f80bc643b259b2f1914b26ad3d3315f2ed0cc8dcddcba614d57a76d4e73e87d679e14cccbd01b257eb05f90f32eeea1a27986d769d18627bb277275f3d5f3aeb1384e8124bbdc0aa7c05ecf86fd343c6cbf412ee81ff1a9f7c00ffbae46458a8399bd71a6b13ad38fd7b5624d7fb5bb576409cd3edbdd1f22ef97e9b06efca6338672cf3f1de89651858ce54c10d6b1f721b2da5b36f91f978fd81cc659c98c7558e2295f54772468ca867b09d3f7e7c0ed2886db4db6bbe03a675a4ecb1f1b896dd8ea79e4dd2ada4a7060b107e9fad07a3a8a94e1d6e7a05011fb5370c1f038df2fa5a2449dc92f1c9e6bdcd4dea96a8d68813966504969c900d9f2933d0c5d824c226bcde08d04790d1228b9b658464ea0cbbb3f24f78df7121a94643a8ac5de4b70de0b88792b53ae8fde632a3e47fab4d8ca71aee7c251a5dddfe8e0ed029a9ec658dfdb1f73f6967a5d91cbd974933d0ba532a5a440cd36f1979e8f8ffdc7b970aa9a914de19da2991577035289242ed75b79073c961bd883f4df9dc59b170e0a93ff5409b972a983317ba62f4ace4957b921ff69e3508b1ea086021ff2030c9b87921570b36be64e26ba15a9f2b95cc63a19e6ed139a5a13b5add5894d575419f046893c4b19365c4d5fc4026aaa4cc342d10b192dec470a2ffa62fcd8a18c226cb8de2a331dee5348d7560e3790226ecaf7218ead9c5b469f4c041b1bb8542fb03e4c2bdc6733bbe4bd08903354bbdc62ffde2421b9450a3dae966dfaf26d41be027d06f63548c475eef53f6b9841e7686710edeb18d84aa3cdf870bd9cca1536b33f908b7920bbe7c79792171a9aa0ee7f7bfd2de2d263d9adc24b6a210778213051cec8f3280ad4d8fdae50ca45875d54fbde9598faf10cfdf46ae09df0eab776ae85ecf5bccbb2e371304f21ee77ec2a271f213be8ad59251a5767994f7e13953c973a3220021be4b26ecf3321f4bb893c1d40c36784847c44a933b02af38764ed76c4d90c97937b692ced472482f5cd55bc1bd302e6bb39f5f788dd797bd13b776c9eaad1832b06bc5a1e8b7be76965d865ba1b3aa4bd1263db5729b981c3422b9a593417552a8733c4f8343f3f6d76fa2c6643c1727703d881fe0c3f35c1401ab86ea229f602279966d8258cf22384fa1d5708309c3547ef2e1e9b3de42bf630300a8984a52f726762fe262e037b970c99699c43235f24d3f514634cf66edf0c80662b050b1d9006188a1afcb2a75637efb5db0dcc6f1f53c37cac4b2382d5de27323418d964372c4c65a576bb6c666e60d792c39ca493d073caddf84757b749ab05c7a6464f150e9efa9494e4a0c9497d546133c7a09b74b03688b3cc8f5cc72daae35c7cfb97cecdcd5287867c8e9183829d6d01672130f443fb51b88259d71f3ec5563452615940b5d23522adc0a55abd19c982092d16ae6d1b2703798ee69bd19059616ed2bc6684a3efe39baa2f3f24a357dd02f000711c4c5e2f75f6a335459c900ec23b06333c3adf8206cc5948a4a5bc49f0651472085457e9baf1bf3d3b455b89738b5616be4109f8eb5d84dddc65c013f1238d831b4245ee41c7b2d9009d4827d057b50749d04faff64cf33e39bb3532a9a3fdf11ae75caac5145d2e250e9f83ab645ebf5bbe83a38aa3c3c9400a8ebc975ca7d9e92fbabd6e9bf6f9da084ebb544c35f78e557ed6c6d3b4678de82b8fe4116078bff20cc625028802608c7c08909e39c57a8c0011218b2b6cb6a5d4696af002bf6bce4d3efd1b148e894f691fe4d861702632633de2a968f84b2762bf697cc8c0da054048c7da67df9ced1bd576cb8bd5e18f1fe28cb59c275f3914eddda37bf016bfa777587910f418213aeb487c1cfdc830df53fcdbb2cf0848735b48c8329f00b5b6a0bd8e28e7e38638d750accf22fd744bb15f8367695865ea189be756ad3077c2cd3b06e7de11f3caea9b34e885b74a71b3553be4292cc21fcf3ba8e9b313790600e010f561e053a1375a431ad61697e9703fcf31b426559ad4db8a926d5a89a2afa9bae3ce42c4bfae3efebf9600073336446b3560861d3badd038314a5acb5beda5d3541a9282f3492ffa29ea83bcb4b41c6ce24ddd7e48eb17e451b661c5af92e6ffb26da0cf7f3890873c6854d289b9955b7bec115cdc1db3c55c3c5e1e89baf52c446ecff16db1d4681bb3556ee9f1020147cc40c0a4cc60eb7bc25e955b9f3f53d3471aaba61075ac714942ae361405fa0ca3817522a21c796060e919f951adc3eae1846e7cd5cca208f87135e8547152d8e601ad083204674b2c4e2487b530361f4909a1c758eb584deb51205b5e676a461c8169c0cdeaaba604d21579f7aa087129b5ccd0e20a41ec25fde2fb1cdd4959aa17acad91ac7eb5233a7e819471eefc7cf981ef0e5021a140ae54828e0d3e98b02412d8a0c1bc81dae845f574fe0744360dce450c05853f8b1aaa7b522aa9118dc5c7c59cfd2deb44d1e05779d8798b174c7cf1f44f66a3ad74f5793a36bac8f2683f7c0695386115980f8fe8459c4555f460083069e9bcda91dce5408ea983d256eb7151c334e0dbb562351ef39a03b848bcc9355aaaa0f64e6ea68d2a6ab089fcef150100785bdd179fdd332f1a7885f2fa85178a7df986935c47ec0b06bc2618f72de6528562d2fdb18ea02ed93275c32d827f0d803d3cbb5e17046adc5d7e722e9fa4fc6758649af897b3d7885e5e4dcc55093a07a97e45a16966c36cc78972392819aa3cd0ecdba483b89af6213d204073fe4e6b91b2a7763fd117e95844d2e39a8af5b6ded1c87111bd84e51caab3ef0d73d5ba32392569f95aa0d22070f81d9d80b4ff4842f420ab5b63201af1d1770f2fe007f401dcbb6087391a2db16ce741dd8ed1d3fe2717a512e52a890bb727ddab0544de612ccb35c4537b0cdb73201de8689b3407a5edba9b23d2c426654a34a14bfd2f64886a26517be5e7d12691a7e129bc5112bbee019d8cecc861496c27a5983ce0b0af9149729eab0699d2df0848dcd6ba47a51d174d084f757c2776a9024e6e48b841e7a290a16695733677e9f36a79529bc216fd46584e13682a283f15517db0ab02d10c9dadd43befc3706e6182aa6882883f03072aae5e5be7ef0ee4bba3355222b3f9050b73ec32ea288278559997dfd72f2b7007372261f6a", 0x1000) (async, rerun: 64) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0xa, 0x2, 0x3a) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x5, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async, rerun: 64) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (rerun: 64) fcntl$auto(0x3, 0x4, 0xa553) (async, rerun: 32) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) (async, rerun: 32) r7 = socket(0x2, 0x1, 0x0) getsockopt$auto(r7, 0x6, 0x1d, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="102b5fb1a7010026bd702078dbdf25e665badf8a679545", @ANYRESDEC=r6, @ANYBLOB="110000000a39acce00000000080002000000000000000000", @ANYRES32=0x9, @ANYRES32=r1], 0x40}}, 0x80) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r8 = io_uring_setup$auto(0x52, 0x0) sendto$auto(r8, 0x0, 0x2000000000000007, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, 0x0, 0x2f}, 0x0) r9 = socket(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (rerun: 64) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYBLOB='b', @ANYRES8=r2, @ANYRESHEX=r2, @ANYRES32=r0], 0x1ac}}, 0x40000) (async, rerun: 32) write$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffffff, &(0x7f0000001300)="731f154dfd3fecb06fd344e2895e757cd59d6182518484845df3090c572bcedf94278b03f899f1ee3f0faf9eb0f723299b14c149a6d95e69c21dc67a8c87c473f39fe2a7706a63ab52eee300fbd449e0b6f910a789427b118c810573f394f9dad4ac83ae0142bb8266a2eea5897f8ef8c310beed01b0e1de6d4674315d5616a1e763303a16417de4de9bf506ca7800892c6533dfe23964c64b5a480965f38ed2ba83d2899d7a70186294f5a698df6efb8f9f4b5b7f625102a9b7e1f55d2a9d4a38de0dab9a7d87ec5f9ea73126d57172047d2a4a03f67bbde8a69faddc6eb48de01eb0354672a975e389eac2c03ae59a9d04", 0xf2) (async, rerun: 64) sendmmsg$auto(r9, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) (rerun: 64) 7.119671311s ago: executing program 5 (id=2924): socket(0x2c, 0x3, 0x0) mmap$auto(0xfffffffffffffffd, 0x4, 0xf, 0x15, 0x3, 0x9) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x84282, 0x0) bind$auto(r0, &(0x7f0000000040)=@can, 0x8) 6.897986349s ago: executing program 1 (id=2925): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = bpf$auto(0x6, 0x0, 0xc3c1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto_bm_status_operations_binfmt_misc(r0, &(0x7f0000000040)=""/60, 0x3c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) recvfrom$auto(0x3, 0x0, 0x8000000012, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 6.770413196s ago: executing program 5 (id=2927): r0 = open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) mmap$auto(0x8, 0x402000d, 0xdf, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r1, 0x4008af00, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r2, 0xc0104d08, r2) mmap$auto(0x0, 0xfb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 6.675784042s ago: executing program 3 (id=2928): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe27e, 0x1000eb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye8\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(r0, r1, 0xfffffffd) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr1\x00', 0x48da00, 0x0) r4 = io_uring_setup$auto(0x59, 0x0) socket(0x9, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r6, &(0x7f0000000080)=@ax25={0x3, @null, 0x5}, 0x401) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(r3, 0x4b72, r5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x369900, 0x0) r7 = epoll_create$auto(0x3e) epoll_ctl$auto(r7, 0x9, r4, 0x0) ioctl$auto_TCFLSH2(r2, 0x5401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r8, 0x0, 0x5f) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r9 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYBLOB="e9be8d0ef0e265b3320671270be164ae429135f46ac40b27fab075865ae865bb49", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x200108d4) 6.602308635s ago: executing program 4 (id=2929): mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) close_range$auto(0x2, 0x8, 0xfffffffe) (async) r0 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) (async) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0xffffe, 0x7fffffffeffd, 0x2, 0x1, 0x5, 0xe8, 0x0, 0x2, 0xe4, 0x2}) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff7}, 0x4, 0x0, 0xa, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6db, 0x0, 0x3ff, 0x0, 0x3, 0x697b}, 0xed7138c}, 0x9a6, 0xc01) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0585605, r3) (async) fcntl$auto_F_OFD_SETLKW(r3, 0x26, 0x2) (async) r4 = socket(0x2, 0x5, 0x6) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) (async) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 6.600307154s ago: executing program 1 (id=2930): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x7}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x2) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x80200, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r3 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r3, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) r4 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r5 = io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'virt_wifi0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000a80)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40840) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf250900000040000180080003004000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000500000008000300faffffff08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d727030000000000000000000004400018008000300680000001400020077673100000000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f730000000000000fff300001800800030000010000080003000500000008000300000000801400020073797a6b616c6c657231000000000000240001800800030006000009000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000002000018008000300ffff00001400020069703665727370616e30000000000000480001800800030001800000080003000000000014000200636169663000000000000000000000000800030001000000080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x154}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) io_uring_enter$auto(r5, 0x9, 0x820e, 0x6, 0x0, 0x18) r8 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(r8, 0x40043d14, 0x0) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x101) ioctl$auto_EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x40000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_OTPGETREGIONINFO(r2, 0x400c4d0f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8955, 0x0) 5.942284405s ago: executing program 4 (id=2931): openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x4de402, 0x0) (async, rerun: 32) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0x4) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) getsockopt$auto(0x4, 0x200000000, 0x15, 0xfffffffffffffffc, 0x0) (rerun: 64) sendfile$auto(r0, 0x3, 0x0, 0xa0ec) 5.770687728s ago: executing program 4 (id=2932): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x282, 0x0) read$auto_event_trigger_fops_trace(r0, 0x0, 0x0) socket(0x18, 0xa, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa9"}) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/mem_limit\x00', 0x183841, 0x0) pwrite64$auto(r4, &(0x7f0000000280)='Mdev/loop-control\x00', 0x80000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) fsconfig$auto_FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', &(0x7f0000000340)="cefaf7f4d13b42ee8ee23202e7f88558e20466a54f175a7dc6c1eb69ae7af25801b6738d1a9fa4ec430d5821d13f35a9edc2d443f6e76ed9392ed0df425775380a365454921af963e1239cd2d3aa73e22152a2077cd09e6cd337967da938e3e2ad50a42a818529f7aed0f421a5a0a4098741895ca91d31351058cbcde88bb1ce3fc36ff89c4a75c4484937ea5574ca082a9fc7a2360a395ad7ac448bf23ab50767bdbdf9df90a55caaf600f39204e5341f1c3aca14affa4fa586b5b1097b7edd164008f965a7c84b1ee26eea9a07", 0x10) 5.021462429s ago: executing program 1 (id=2933): connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x242780, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x0) pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, 0x0, 0xa041) socket(0x1d, 0x1, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x101, 0x0) mmap$auto(0x0, 0x202000c, 0xf9, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0x4) 3.525412286s ago: executing program 1 (id=2934): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getgroups$auto(0x7fd, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e0000000000000000000000000000000200"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001900)="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", 0x1001) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r2) 3.511084123s ago: executing program 3 (id=2935): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.throttle.read_bps_device\x00', 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r0 = io_uring_setup$auto(0x86, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r0, 0x0, 0x24044805) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) bind$auto(0xffffffffffffffff, 0x0, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mount$auto(0x0, 0x0, 0x0, 0x3, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) madvise$auto(0x110d230000, 0x1, 0x9) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0xf317) write$auto(0xffffffffffffffff, 0x0, 0x80000000000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0xf0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) 2.316962375s ago: executing program 4 (id=2936): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) shmget$auto(0x8, 0x10564, 0x568d1aef) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) read$auto(0x3, 0x0, 0x8080) 2.254921554s ago: executing program 3 (id=2937): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) (async) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) socket(0x2, 0x3, 0xa) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, 0x54) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x7) mmap$auto(0x3, 0x2000c, 0xe1, 0x20eb1, 0x40000000000a5, 0x5) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000000, 0x4}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0xd}, 0x7}, 0x3, 0x0) setpriority$auto_PRIO_USER(0x2, 0x0, 0x5) (async) setpriority$auto_PRIO_USER(0x2, 0x0, 0x5) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendfile$auto(0x3, r4, 0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x400000001, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x400000001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/block/sr0/dev\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) (async) read$auto(r5, 0x0, 0x20) munmap$auto(0x6, 0x9) mmap$auto(0x80400001, 0xe986, 0x3, 0x210, 0xffffffffffffffff, 0x80000000000005) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.084086239s ago: executing program 5 (id=2938): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/ad_aggregator\x00', 0x80500, 0x0) r1 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r1, 0x11) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/28, 0x1c) 1.757787005s ago: executing program 3 (id=2939): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfb, r0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_clone(0x2000000, &(0x7f0000000140), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000840)="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") fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="a000f8bdcb97fffbdf255f0094330a9a"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) mmap$auto(0x4, 0x80, 0xdf, 0x100000010, r1, 0x1eac) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0xff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(r4, 0xffffffffffffffff, 0x3) mq_open$auto(0x0, 0x7e, 0x9, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0xffffffffffffffff, 0x400003, 0x100000df, 0x75, r4, 0x4) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3}}, 0x2) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) r5 = socket(0x2, 0x3, 0x3b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x20f0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r5, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) 1.06710181s ago: executing program 4 (id=2940): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) timer_settime$auto(0x0, 0x519a, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x100) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) fcntl$auto(0x3, 0x4, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 721.647888ms ago: executing program 1 (id=2941): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/comedi\x00', 0xa0000, 0x0) pread64$auto(r0, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) r1 = socket(0x10, 0x2, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/neigh/wg1/base_reachable_time_ms\x00', 0x80202, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf254400000005002f0101000000050060006000000004000b0040bcd8a0b63e91d4270c0bf314e7e16f8287fa8056584169ebb722aa35659c41c529fdb5fe8232892f7f0864f8db5557758d2ce9894f75976d59833f01bf537e09caa60962e3f48ad3cc8c6d425bba4c28ff8f3f2d1b9918e2905cb1e7f24f54c9d0194d4f8ebf9f966d1beea2f0d330a5df0b779f05db3c91697ab33738f610855e663db80fd9716175decb340423d0aff4131e5700b9e3247789c86858a46ca4f5235ec1837e688d989ee7242cde20d671913c97a047f1207a507d21fdc29f4bc0afd511fdf20a6359e97c2343578c1fe8b22048c745ef076897"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x20000800) 15.623632ms ago: executing program 3 (id=2942): socket(0x2, 0x1, 0x106) (async) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xee1d8c0327022e1b, @hyper}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 64) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) (async, rerun: 64) unshare$auto(0x40000080) r0 = socket(0x18, 0x800, 0x2) getpeername$auto(r0, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) (async, rerun: 32) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) (async, rerun: 32) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async, rerun: 32) getsockopt$auto_SO_RCVLOWAT(r2, 0x0, 0x12, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x19a) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) (async) r3 = socket(0x2b, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) sysfs$auto(0x2, 0x4b, 0x0) (async) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r2, 0x40789440, &(0x7f00000000c0)={0x6754, 0x5, 0xaf7, 0x8, 0x2, 0x4, 0x5800000000000000, 0xeea, 0x8, "57ef0f1414cd3c1c67b49c20aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4133f72a36f28bbcf4c8ec369de0"}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) (async, rerun: 32) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (rerun: 32) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x800, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) (async) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 0s ago: executing program 4 (id=2943): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x8002, 0x0) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/user/max_time_namespaces\x00', 0x202, 0x0) (async) ioctl$auto(r1, 0x5522, 0xf15) (async) ioctl$auto(r1, 0x5523, r1) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) (async) setsockopt$auto_SO_SNDBUF(r0, 0x9, 0x7, &(0x7f0000000040)='*)$@\\\'\xfd\x00', 0x1) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) ioctl$auto_SNAPSHOT_FREE(0xffffffffffffffff, 0x3305, 0x0) kernel console output (not intermixed with test programs): 0.523020][T14173] ? do_futex+0x192/0x350 [ 490.523056][T14173] ? __pfx_do_futex+0x10/0x10 [ 490.523093][T14173] ? __pfx_kernel_move_pages+0x10/0x10 [ 490.523124][T14173] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 490.523272][T14173] ? __x64_sys_futex+0x34f/0x4d0 [ 490.523303][T14173] ? __x64_sys_futex+0x358/0x4d0 [ 490.523340][T14173] ? xfd_validate_state+0x129/0x190 [ 490.523386][T14173] __x64_sys_move_pages+0xe0/0x1c0 [ 490.523418][T14173] ? do_syscall_64+0x95/0xf80 [ 490.523450][T14173] ? lockdep_hardirqs_on+0x78/0x100 [ 490.523483][T14173] do_syscall_64+0x106/0xf80 [ 490.523515][T14173] ? clear_bhb_loop+0x40/0x90 [ 490.523548][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.523576][T14173] RIP: 0033:0x7fa89159c799 [ 490.523600][T14173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.523628][T14173] RSP: 002b:00007fa89253a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 490.523653][T14173] RAX: ffffffffffffffda RBX: 00007fa891815fa0 RCX: 00007fa89159c799 [ 490.523670][T14173] RDX: 0000000000000000 RSI: 0000000000020007 RDI: 0000000000000001 [ 490.523686][T14173] RBP: 00007fa891632bd9 R08: 0000000000000000 R09: 8000000000000000 [ 490.523703][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.523720][T14173] R13: 00007fa891816038 R14: 00007fa891815fa0 R15: 00007ffc89994438 [ 490.523758][T14173] [ 491.306334][T14195] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 494.174702][T14277] FAULT_INJECTION: forcing a failure. [ 494.174702][T14277] name failslab, interval 1, probability 0, space 0, times 0 [ 494.196181][T14277] CPU: 0 UID: 0 PID: 14277 Comm: syz.4.1677 Tainted: G U L syzkaller #0 PREEMPT(full) [ 494.196211][T14277] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 494.196217][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.196243][T14277] Call Trace: [ 494.196249][T14277] [ 494.196256][T14277] dump_stack_lvl+0x100/0x190 [ 494.196286][T14277] should_fail_ex.cold+0x5/0xa [ 494.196305][T14277] should_failslab+0xc2/0x120 [ 494.196321][T14277] __kmalloc_cache_noprof+0x7a/0x6f0 [ 494.196340][T14277] ? vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 494.196453][T14277] vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 494.196471][T14277] drm_atomic_get_crtc_state+0x1de/0x620 [ 494.196556][T14277] drm_atomic_get_plane_state+0x4a3/0x760 [ 494.196583][T14277] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 494.196653][T14277] ? __mutex_lock+0x26a/0x1b90 [ 494.196677][T14277] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 494.196696][T14277] ? drm_master_internal_acquire+0x21/0x80 [ 494.196752][T14277] drm_client_modeset_commit_locked+0x14d/0x580 [ 494.196774][T14277] drm_client_modeset_commit+0x4f/0x80 [ 494.196794][T14277] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 494.196845][T14277] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 494.196865][T14277] drm_fbdev_client_restore+0x1b/0x30 [ 494.196907][T14277] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 494.196930][T14277] drm_client_dev_restore+0x205/0x2a0 [ 494.196952][T14277] drm_release+0x2c6/0x360 [ 494.197008][T14277] ? __pfx_drm_release+0x10/0x10 [ 494.197025][T14277] __fput+0x3ff/0xb40 [ 494.197049][T14277] task_work_run+0x150/0x240 [ 494.197071][T14277] ? __pfx_task_work_run+0x10/0x10 [ 494.197097][T14277] exit_to_user_mode_loop+0x100/0x4a0 [ 494.197119][T14277] do_syscall_64+0x668/0xf80 [ 494.197136][T14277] ? clear_bhb_loop+0x40/0x90 [ 494.197154][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.197188][T14277] RIP: 0033:0x7f47f0b9c799 [ 494.197203][T14277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.197218][T14277] RSP: 002b:00007f47f1a10028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 494.197233][T14277] RAX: 0000000000000000 RBX: 00007f47f0e15fa0 RCX: 00007f47f0b9c799 [ 494.197243][T14277] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 494.197252][T14277] RBP: 00007f47f0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 494.197261][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.197270][T14277] R13: 00007f47f0e16038 R14: 00007f47f0e15fa0 R15: 00007ffca4a87758 [ 494.197291][T14277] [ 496.033542][T14312] can: request_module (can-proto-0) failed. [ 496.880238][T14327] netlink: 'syz.4.1690': attribute type 4 has an invalid length. [ 496.894828][T14327] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1690'. [ 497.002765][T14326] warning: `syz.4.1690' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 497.195890][T14334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 497.268244][T14334] bridge_slave_1: left allmulticast mode [ 497.277269][T14334] bridge_slave_1: left promiscuous mode [ 497.321562][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.399315][T14334] bridge_slave_0: left allmulticast mode [ 497.405132][T14334] bridge_slave_0: left promiscuous mode [ 497.410919][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.731126][ T9796] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 500.102668][T14394] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 500.171531][T14396] FAULT_INJECTION: forcing a failure. [ 500.171531][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 500.188794][T14396] CPU: 1 UID: 0 PID: 14396 Comm: syz.5.1704 Tainted: G U L syzkaller #0 PREEMPT(full) [ 500.188840][T14396] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 500.188849][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.188864][T14396] Call Trace: [ 500.188873][T14396] [ 500.188882][T14396] dump_stack_lvl+0x100/0x190 [ 500.188928][T14396] should_fail_ex.cold+0x5/0xa [ 500.188962][T14396] should_failslab+0xc2/0x120 [ 500.188990][T14396] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 500.189031][T14396] ? __d_alloc+0x34/0xa80 [ 500.189068][T14396] __d_alloc+0x34/0xa80 [ 500.189111][T14396] d_alloc_pseudo+0x1c/0xc0 [ 500.189144][T14396] alloc_file_pseudo+0xcf/0x230 [ 500.189175][T14396] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 500.189215][T14396] __anon_inode_getfile+0xe8/0x280 [ 500.189242][T14396] ? kasan_save_track+0x14/0x30 [ 500.189285][T14396] sync_file_alloc+0x65/0x160 [ 500.189441][T14396] sync_file_create+0x17/0xf0 [ 500.189481][T14396] sw_sync_ioctl+0x849/0xf80 [ 500.189528][T14396] ? find_held_lock+0x2b/0x80 [ 500.189555][T14396] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 500.189611][T14396] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 500.189655][T14396] __x64_sys_ioctl+0x18e/0x210 [ 500.189697][T14396] do_syscall_64+0x106/0xf80 [ 500.189730][T14396] ? clear_bhb_loop+0x40/0x90 [ 500.189765][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.189795][T14396] RIP: 0033:0x7fa70ff9c799 [ 500.189818][T14396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.189846][T14396] RSP: 002b:00007fa710f15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.189872][T14396] RAX: ffffffffffffffda RBX: 00007fa710216090 RCX: 00007fa70ff9c799 [ 500.189891][T14396] RDX: 0000000000000000 RSI: 00000000c0285700 RDI: 0000000000000007 [ 500.189909][T14396] RBP: 00007fa710032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 500.189926][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.189943][T14396] R13: 00007fa710216128 R14: 00007fa710216090 R15: 00007ffe47ade8f8 [ 500.189982][T14396] [ 501.564030][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.571275][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.911566][ T30] audit: type=1800 audit(4294968448.939:18): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1712" name="members" dev="configfs" ino=54106 res=0 errno=0 [ 501.945402][T14431] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1711'. [ 503.879076][T14490] Process accounting resumed [ 504.332208][ T9803] Bluetooth: hci4: Malformed LE Event: 0x0b [ 506.390659][ T9796] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 506.792940][T14572] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 506.913129][T14572] PCI: Can't parse resource_alignment parameter: B [ 507.828190][T14591] random: crng reseeded on system resumption [ 509.002655][T14611] Invalid ELF header magic: != ELF [ 510.806196][T14652] netlink: ct family unspecified [ 511.048472][T14657] block nbd8: shutting down sockets [ 511.647712][T14673] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 511.686408][T14676] QAT: Stopping all acceleration devices. [ 511.984601][ T9796] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 514.639277][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 514.938967][ T9796] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 516.356976][T14755] zswap: compressor not available [ 517.344461][ T9796] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 517.366964][T14775] zswap: compressor not available [ 517.651013][T14777] zswap: compressor v not available [ 518.080957][T14805] program syz.4.1789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.732591][ T9803] Bluetooth: hci2: unexpected event 0x31 length: 19 > 6 [ 518.887951][T14805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 519.004781][T14805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 519.070474][T14805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 519.151311][T14805] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 519.294397][T14805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.383351][ T9803] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.883671][T14849] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1797'. [ 521.028951][ T9803] Bluetooth: hci2: command 0x0c1a tx timeout [ 521.104746][ T9803] Bluetooth: hci4: command 0x0c1a tx timeout [ 521.343529][ T9803] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.870136][T14862] netlink: 472 bytes leftover after parsing attributes in process `syz.3.1800'. [ 521.966005][T14862] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1851878519.48.0), cmd(12) [ 523.183710][ T9796] Bluetooth: hci4: command 0x0c1a tx timeout [ 523.427080][ T9803] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 524.294541][T14910] FAULT_INJECTION: forcing a failure. [ 524.294541][T14910] name failslab, interval 1, probability 0, space 0, times 0 [ 524.341267][T14912] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1813'. [ 524.393659][T14910] CPU: 1 UID: 0 PID: 14910 Comm: syz.4.1812 Tainted: G U L syzkaller #0 PREEMPT(full) [ 524.393709][T14910] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 524.393720][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.393735][T14910] Call Trace: [ 524.393744][T14910] [ 524.393755][T14910] dump_stack_lvl+0x100/0x190 [ 524.393804][T14910] should_fail_ex.cold+0x5/0xa [ 524.393839][T14910] should_failslab+0xc2/0x120 [ 524.393871][T14910] __kmalloc_cache_noprof+0x7a/0x6f0 [ 524.393907][T14910] ? nci_hci_allocate+0x45/0x330 [ 524.394071][T14910] ? mutex_init_lockep+0x110/0x150 [ 524.394115][T14910] nci_hci_allocate+0x45/0x330 [ 524.394146][T14910] nci_allocate_device+0x26f/0x410 [ 524.394221][T14910] virtual_ncidev_open+0x6f/0x220 [ 524.394286][T14910] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 524.394318][T14910] misc_open+0x26d/0x450 [ 524.394376][T14910] ? __pfx_misc_open+0x10/0x10 [ 524.394401][T14910] chrdev_open+0x234/0x6a0 [ 524.394429][T14910] ? __pfx_apparmor_file_open+0x10/0x10 [ 524.394502][T14910] ? __pfx_chrdev_open+0x10/0x10 [ 524.394534][T14910] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 524.394574][T14910] do_dentry_open+0x6d8/0x1660 [ 524.394601][T14910] ? __pfx_chrdev_open+0x10/0x10 [ 524.394636][T14910] vfs_open+0x82/0x3f0 [ 524.394673][T14910] path_openat+0x208c/0x31a0 [ 524.394714][T14910] ? __pfx_path_openat+0x10/0x10 [ 524.394754][T14910] do_file_open+0x20e/0x430 [ 524.394784][T14910] ? __pfx_do_file_open+0x10/0x10 [ 524.394838][T14910] ? alloc_fd+0x476/0x790 [ 524.394870][T14910] ? do_getname+0x191/0x390 [ 524.394905][T14910] do_sys_openat2+0x10d/0x1e0 [ 524.394950][T14910] ? __pfx_do_sys_openat2+0x10/0x10 [ 524.394996][T14910] __x64_sys_openat+0x12d/0x210 [ 524.395030][T14910] ? __pfx___x64_sys_openat+0x10/0x10 [ 524.395080][T14910] do_syscall_64+0x106/0xf80 [ 524.395113][T14910] ? clear_bhb_loop+0x40/0x90 [ 524.395150][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.395176][T14910] RIP: 0033:0x7f47f0b9c799 [ 524.395206][T14910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.395233][T14910] RSP: 002b:00007f47f1a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 524.395260][T14910] RAX: ffffffffffffffda RBX: 00007f47f0e15fa0 RCX: 00007f47f0b9c799 [ 524.395279][T14910] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 524.395296][T14910] RBP: 00007f47f0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 524.395312][T14910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.395328][T14910] R13: 00007f47f0e16038 R14: 00007f47f0e15fa0 R15: 00007ffca4a87758 [ 524.395367][T14910] [ 526.340836][T14953] FAULT_INJECTION: forcing a failure. [ 526.340836][T14953] name failslab, interval 1, probability 0, space 0, times 0 [ 526.393612][T14953] CPU: 0 UID: 0 PID: 14953 Comm: syz.3.1825 Tainted: G U L syzkaller #0 PREEMPT(full) [ 526.393665][T14953] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 526.393677][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.393693][T14953] Call Trace: [ 526.393701][T14953] [ 526.393710][T14953] dump_stack_lvl+0x100/0x190 [ 526.393755][T14953] should_fail_ex.cold+0x5/0xa [ 526.393816][T14953] should_failslab+0xc2/0x120 [ 526.393848][T14953] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 526.393887][T14953] ? __proc_create+0x2cb/0x8c0 [ 526.393932][T14953] __proc_create+0x2cb/0x8c0 [ 526.393970][T14953] ? __pfx___proc_create+0x10/0x10 [ 526.394015][T14953] ? mark_held_locks+0x40/0x70 [ 526.394049][T14953] _proc_mkdir+0xb9/0x210 [ 526.394074][T14953] ? __pfx__proc_mkdir+0x10/0x10 [ 526.394104][T14953] ? sctp_defaults_init+0x720/0xd90 [ 526.394244][T14953] sctp_proc_init+0x59/0x270 [ 526.394338][T14953] ? __pfx_sctp_defaults_init+0x10/0x10 [ 526.394369][T14953] sctp_defaults_init+0x758/0xd90 [ 526.394404][T14953] ? __pfx_sctp_defaults_init+0x10/0x10 [ 526.394436][T14953] ops_init+0x1e2/0x5f0 [ 526.394476][T14953] setup_net+0x118/0x3a0 [ 526.394511][T14953] ? __pfx_setup_net+0x10/0x10 [ 526.394542][T14953] ? lockdep_init_map_type+0x5c/0x250 [ 526.394578][T14953] ? mutex_init_lockep+0x110/0x150 [ 526.394619][T14953] copy_net_ns+0x46f/0x7c0 [ 526.394661][T14953] create_new_namespaces+0x3ea/0xac0 [ 526.394701][T14953] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 526.394734][T14953] ksys_unshare+0x473/0xad0 [ 526.394770][T14953] ? __pfx_ksys_unshare+0x10/0x10 [ 526.394818][T14953] __x64_sys_unshare+0x31/0x40 [ 526.394849][T14953] do_syscall_64+0x106/0xf80 [ 526.394882][T14953] ? clear_bhb_loop+0x40/0x90 [ 526.394917][T14953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.394945][T14953] RIP: 0033:0x7ff31499c799 [ 526.394969][T14953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.394997][T14953] RSP: 002b:00007ff315883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 526.395024][T14953] RAX: ffffffffffffffda RBX: 00007ff314c16090 RCX: 00007ff31499c799 [ 526.395043][T14953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 526.395060][T14953] RBP: 00007ff314a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 526.395078][T14953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.395104][T14953] R13: 00007ff314c16128 R14: 00007ff314c16090 R15: 00007fffbd623138 [ 526.395143][T14953] [ 527.764559][T14968] FAULT_INJECTION: forcing a failure. [ 527.764559][T14968] name failslab, interval 1, probability 0, space 0, times 0 [ 527.832217][T14968] CPU: 1 UID: 0 PID: 14968 Comm: syz.1.1823 Tainted: G U L syzkaller #0 PREEMPT(full) [ 527.832268][T14968] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 527.832279][T14968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.832296][T14968] Call Trace: [ 527.832305][T14968] [ 527.832316][T14968] dump_stack_lvl+0x100/0x190 [ 527.832365][T14968] should_fail_ex.cold+0x5/0xa [ 527.832400][T14968] should_failslab+0xc2/0x120 [ 527.832429][T14968] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 527.832472][T14968] ? do_getname+0x35/0x390 [ 527.832514][T14968] do_getname+0x35/0x390 [ 527.832561][T14968] do_sys_openat2+0xc5/0x1e0 [ 527.832599][T14968] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.832650][T14968] __x64_sys_openat+0x12d/0x210 [ 527.832687][T14968] ? __pfx___x64_sys_openat+0x10/0x10 [ 527.832737][T14968] do_syscall_64+0x106/0xf80 [ 527.832770][T14968] ? clear_bhb_loop+0x40/0x90 [ 527.832804][T14968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.832833][T14968] RIP: 0033:0x7fa89159c799 [ 527.832856][T14968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.832884][T14968] RSP: 002b:00007fa89253a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 527.832912][T14968] RAX: ffffffffffffffda RBX: 00007fa891815fa0 RCX: 00007fa89159c799 [ 527.832935][T14968] RDX: 000000000011ba02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 527.832953][T14968] RBP: 00007fa891632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 527.832970][T14968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.832987][T14968] R13: 00007fa891816038 R14: 00007fa891815fa0 R15: 00007ffc89994438 [ 527.833026][T14968] [ 528.703351][ T9803] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 530.904945][T15012] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 534.581992][T15064] Process accounting paused [ 535.569888][T15099] Invalid ELF header magic: != ELF [ 539.260048][T15122] netlink: 'syz.4.1861': attribute type 2 has an invalid length. [ 539.380369][T15128] FAULT_INJECTION: forcing a failure. [ 539.380369][T15128] name failslab, interval 1, probability 0, space 0, times 0 [ 539.492185][T15128] CPU: 1 UID: 0 PID: 15128 Comm: syz.5.1864 Tainted: G U L syzkaller #0 PREEMPT(full) [ 539.492234][T15128] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 539.492245][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.492262][T15128] Call Trace: [ 539.492272][T15128] [ 539.492282][T15128] dump_stack_lvl+0x100/0x190 [ 539.492330][T15128] should_fail_ex.cold+0x5/0xa [ 539.492363][T15128] should_failslab+0xc2/0x120 [ 539.492392][T15128] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 539.492436][T15128] ? alloc_inode+0x183/0x250 [ 539.492478][T15128] alloc_inode+0x183/0x250 [ 539.492513][T15128] alloc_anon_inode+0x2a/0x3e0 [ 539.492544][T15128] anon_inode_make_secure_inode+0x2f/0x140 [ 539.492581][T15128] __anon_inode_getfile+0x1cf/0x280 [ 539.492611][T15128] ? _copy_to_user+0xaf/0xd0 [ 539.492641][T15128] io_uring_setup.cold+0x19e3/0x1d09 [ 539.492684][T15128] ? __pfx_io_uring_setup+0x10/0x10 [ 539.492733][T15128] ? __pfx_do_futex+0x10/0x10 [ 539.492810][T15128] ? xfd_validate_state+0x129/0x190 [ 539.492861][T15128] __x64_sys_io_uring_setup+0xc2/0x170 [ 539.492895][T15128] do_syscall_64+0x106/0xf80 [ 539.492927][T15128] ? clear_bhb_loop+0x40/0x90 [ 539.492962][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.492991][T15128] RIP: 0033:0x7fa70ff9c799 [ 539.493014][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.493042][T15128] RSP: 002b:00007fa710f36028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 539.493070][T15128] RAX: ffffffffffffffda RBX: 00007fa710215fa0 RCX: 00007fa70ff9c799 [ 539.493089][T15128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 539.493105][T15128] RBP: 00007fa710032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 539.493121][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.493137][T15128] R13: 00007fa710216038 R14: 00007fa710215fa0 R15: 00007ffe47ade8f8 [ 539.493175][T15128] [ 539.727716][T15128] ovs_: entered promiscuous mode [ 541.826544][ T981] usb usb40-port2: attempt power cycle [ 542.231809][T15184] zswap: compressor  not available [ 542.444749][ T981] usb usb40-port2: unable to enumerate USB device [ 542.511337][T15176] vhci_hcd vhci_hcd.3: default hub control req: c002 v0000 i0000 l0 [ 549.272793][T15273] kvm: kvm [15270]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000025) = 0x718c1253 [ 550.464565][T15294] netlink: 206 bytes leftover after parsing attributes in process `syz.5.1896'. [ 550.630966][T15296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1897'. [ 551.392283][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1899'. [ 551.733367][T15317] futex_wake_op: syz.3.1900 tries to shift op by -2048; fix this program [ 551.770921][T15317] futex_wake_op: syz.3.1900 tries to shift op by -2048; fix this program [ 556.693566][T15387] random: crng reseeded on system resumption [ 558.057094][T15408] : renamed from bond0 (while UP) [ 559.190162][T15431] input: f as /devices/virtual/input/input24 [ 561.336228][T15471] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 561.751658][T15479] FAULT_INJECTION: forcing a failure. [ 561.751658][T15479] name fail_futex, interval 1, probability 0, space 0, times 0 [ 561.882579][T15479] CPU: 1 UID: 0 PID: 15479 Comm: syz.4.1939 Tainted: G U L syzkaller #0 PREEMPT(full) [ 561.882623][T15479] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 561.882632][T15479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.882648][T15479] Call Trace: [ 561.882656][T15479] [ 561.882665][T15479] dump_stack_lvl+0x100/0x190 [ 561.882707][T15479] should_fail_ex.cold+0x5/0xa [ 561.882738][T15479] get_futex_key+0x1d2/0x1620 [ 561.882774][T15479] ? __pfx_get_futex_key+0x10/0x10 [ 561.882817][T15479] futex_wait_setup+0x83/0x510 [ 561.882863][T15479] __futex_wait+0x19f/0x300 [ 561.882902][T15479] ? __pfx___futex_wait+0x10/0x10 [ 561.882945][T15479] ? __pfx_futex_wake_mark+0x10/0x10 [ 561.882990][T15479] ? find_held_lock+0x2b/0x80 [ 561.883009][T15479] ? futex_wake+0x456/0x530 [ 561.883048][T15479] futex_wait+0xed/0x380 [ 561.883082][T15479] ? __pfx_futex_wait+0x10/0x10 [ 561.883126][T15479] ? ksys_write+0x190/0x250 [ 561.883156][T15479] do_futex+0x1ef/0x350 [ 561.883188][T15479] ? __pfx_do_futex+0x10/0x10 [ 561.883216][T15479] ? __pfx___do_sys_mremap+0x10/0x10 [ 561.883262][T15479] __x64_sys_futex+0x34f/0x4d0 [ 561.883299][T15479] ? __pfx___x64_sys_futex+0x10/0x10 [ 561.883345][T15479] do_syscall_64+0x106/0xf80 [ 561.883375][T15479] ? clear_bhb_loop+0x40/0x90 [ 561.883406][T15479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.883432][T15479] RIP: 0033:0x7f47f0b9c799 [ 561.883454][T15479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.883479][T15479] RSP: 002b:00007f47f1a100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.883504][T15479] RAX: ffffffffffffffda RBX: 00007f47f0e15fa8 RCX: 00007f47f0b9c799 [ 561.883528][T15479] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47f0e15fa8 [ 561.883544][T15479] RBP: 00007f47f0e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 561.883560][T15479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.883575][T15479] R13: 00007f47f0e16038 R14: 00007ffca4a87670 R15: 00007ffca4a87758 [ 561.883611][T15479] [ 562.958564][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.965596][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.749020][T15521] Process accounting resumed [ 567.200296][T15545] futex_wake_op: syz.3.1952 tries to shift op by -2048; fix this program [ 567.263737][T15545] futex_wake_op: syz.3.1952 tries to shift op by -2048; fix this program [ 567.335380][T15545] 0x000000000001-0x000000020000 : "" [ 567.456578][T15545] ftl_cs: FTL header corrupt! [ 569.376423][T15552] nvme_fcloop: unknown parameter or missing value '/dev/snd/' [ 569.752579][T15588] zswap: compressor not available [ 570.642982][T15623] binder_alloc: binder_alloc_mmap_handler: 15618 0-1000 already mapped failed -16 [ 570.712522][T15616] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1968'. [ 571.065697][T15631] futex_wake_op: syz.5.1968 tries to shift op by -2048; fix this program [ 571.075178][T15631] futex_wake_op: syz.5.1968 tries to shift op by -2048; fix this program [ 573.890659][T15687] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 574.105487][T15684] zswap: compressor not available [ 576.581568][T15734] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 578.009102][T15769] FAULT_INJECTION: forcing a failure. [ 578.009102][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 578.062503][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.1.2000 Tainted: G U L syzkaller #0 PREEMPT(full) [ 578.062546][T15769] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 578.062555][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.062570][T15769] Call Trace: [ 578.062579][T15769] [ 578.062588][T15769] dump_stack_lvl+0x100/0x190 [ 578.062631][T15769] should_fail_ex.cold+0x5/0xa [ 578.062669][T15769] should_failslab+0xc2/0x120 [ 578.062693][T15769] __kvmalloc_node_noprof+0xfa/0xa00 [ 578.062730][T15769] ? io_alloc_cache_init+0x38/0x170 [ 578.062847][T15769] ? lockdep_set_lock_cmp_fn+0x60/0xe0 [ 578.062886][T15769] io_alloc_cache_init+0x38/0x170 [ 578.062923][T15769] io_uring_setup.cold+0x3eb/0x1d09 [ 578.062964][T15769] ? __pfx_io_uring_setup+0x10/0x10 [ 578.062995][T15769] ? do_futex+0x192/0x350 [ 578.063027][T15769] ? __pfx_do_futex+0x10/0x10 [ 578.063056][T15769] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.063106][T15769] ? xfd_validate_state+0x129/0x190 [ 578.063150][T15769] __x64_sys_io_uring_setup+0xc2/0x170 [ 578.063182][T15769] do_syscall_64+0x106/0xf80 [ 578.063212][T15769] ? clear_bhb_loop+0x40/0x90 [ 578.063244][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.063270][T15769] RIP: 0033:0x7fa89159c799 [ 578.063292][T15769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.063316][T15769] RSP: 002b:00007fa892519028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 578.063341][T15769] RAX: ffffffffffffffda RBX: 00007fa891816090 RCX: 00007fa89159c799 [ 578.063358][T15769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 578.063373][T15769] RBP: 00007fa891632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 578.063389][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.063404][T15769] R13: 00007fa891816128 R14: 00007fa891816090 R15: 00007ffc89994438 [ 578.063439][T15769] [ 578.335108][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 578.344162][T15774] vlan1: entered promiscuous mode [ 578.349372][T15774] vlan1: entered allmulticast mode [ 578.354494][T15774] veth0_vlan: entered allmulticast mode [ 578.630318][T15790] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2007'. [ 579.373976][T15782] delete_channel: no stack [ 579.558903][T15801] Invalid ELF header magic: != ELF [ 579.845694][T15809] kvm: kvm [15808]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 581.898644][T15838] __vm_enough_memory: pid: 15838, comm: syz.3.2017, bytes: 4398046511104 not enough memory for the allocation [ 582.849921][T15864] netlink: ct_mark mask cannot be 0 [ 583.795088][T15890] ubi31: attaching mtd0 [ 583.801486][T15890] ubi31: scanning is finished [ 583.831252][T15890] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 584.136677][T15890] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 586.445310][T15936] zero sized request [ 587.385526][T15949] mtrr: base(0x0000) is not aligned on a size(0x9000000) boundary [ 587.461651][T15951] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2045'. [ 587.483787][T15958] mtrr: base(0x0000) is not aligned on a size(0x9000000) boundary [ 588.103523][T15960] zswap: compressor not available [ 588.183930][T15964] block2mtd: illegal erase size [ 591.357784][T16004] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2053'. [ 591.667030][T16013] misc userio: Invalid payload size [ 594.874308][T15915] Process accounting paused [ 595.410389][T16067] KVM: debugfs: duplicate directory 16067-3 [ 597.218328][T16090] vivid-007: ================= START STATUS ================= [ 597.236877][T16090] vivid-007: Generate PTS: true [ 597.258117][T16090] vivid-007: Generate SCR: true [ 597.263706][T16090] tpg source WxH: 320x240 (Y'CbCr) [ 597.288988][T16090] tpg field: 1 [ 597.387531][T16090] tpg crop: (0,0)/320x240 [ 597.467894][T16090] tpg compose: (0,0)/320x240 [ 597.488216][T16090] tpg colorspace: 8 [ 597.492448][T16090] tpg transfer function: 0/0 [ 597.623171][T16090] tpg Y'CbCr encoding: 0/0 [ 597.758340][T16090] tpg quantization: 0/0 [ 597.762738][T16090] tpg RGB range: 0/2 [ 597.766663][T16090] vivid-007: ================== END STATUS ================== [ 607.054520][T16266] Invalid ELF header magic: != ELF [ 608.143907][T16277] netlink: 'syz.3.2100': attribute type 4 has an invalid length. [ 608.252805][T16275] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 608.409386][T16280] bond0: no command found in slaves file - use +ifname or -ifname [ 611.729264][T16301] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2106'. [ 614.370611][T16338] futex_wake_op: syz.3.2113 tries to shift op by -2048; fix this program [ 615.769640][T16348] FAULT_INJECTION: forcing a failure. [ 615.769640][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 615.837275][T16348] CPU: 1 UID: 0 PID: 16348 Comm: syz.5.2115 Tainted: G U L syzkaller #0 PREEMPT(full) [ 615.837325][T16348] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 615.837336][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.837353][T16348] Call Trace: [ 615.837362][T16348] [ 615.837373][T16348] dump_stack_lvl+0x100/0x190 [ 615.837420][T16348] should_fail_ex.cold+0x5/0xa [ 615.837453][T16348] should_failslab+0xc2/0x120 [ 615.837482][T16348] __kmalloc_cache_noprof+0x7a/0x6f0 [ 615.837518][T16348] ? snd_seq_port_connect+0x61/0x560 [ 615.837677][T16348] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 615.837715][T16348] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 615.837755][T16348] snd_seq_port_connect+0x61/0x560 [ 615.837793][T16348] ? _raw_read_unlock+0x28/0x50 [ 615.837855][T16348] ? check_subscription_permission.isra.0+0x146/0x240 [ 615.837928][T16348] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 615.837975][T16348] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 615.838030][T16348] call_seq_client_ctl+0xa3/0x130 [ 615.838070][T16348] snd_seq_kernel_client_ctl+0x77/0xd0 [ 615.838110][T16348] snd_seq_oss_midi_open+0x5ad/0x6b0 [ 615.838144][T16348] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 615.838174][T16348] ? find_held_lock+0x2b/0x80 [ 615.838208][T16348] ? lockdep_hardirqs_on+0x78/0x100 [ 615.838242][T16348] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 615.838282][T16348] ? get_mididev+0x115/0x160 [ 615.838315][T16348] snd_seq_oss_synth_setup_midi+0x131/0x590 [ 615.838357][T16348] snd_seq_oss_open+0x82e/0xa10 [ 615.838404][T16348] odev_open+0x79/0xc0 [ 615.838440][T16348] ? __pfx_odev_open+0x10/0x10 [ 615.838476][T16348] soundcore_open+0x2e3/0x5a0 [ 615.838557][T16348] ? __pfx_soundcore_open+0x10/0x10 [ 615.838593][T16348] chrdev_open+0x234/0x6a0 [ 615.838620][T16348] ? __pfx_apparmor_file_open+0x10/0x10 [ 615.838662][T16348] ? __pfx_chrdev_open+0x10/0x10 [ 615.838693][T16348] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 615.838731][T16348] do_dentry_open+0x6d8/0x1660 [ 615.838757][T16348] ? __pfx_chrdev_open+0x10/0x10 [ 615.838795][T16348] vfs_open+0x82/0x3f0 [ 615.838834][T16348] path_openat+0x208c/0x31a0 [ 615.838876][T16348] ? __pfx_path_openat+0x10/0x10 [ 615.838921][T16348] do_file_open+0x20e/0x430 [ 615.838953][T16348] ? __pfx_do_file_open+0x10/0x10 [ 615.839009][T16348] ? alloc_fd+0x476/0x790 [ 615.839040][T16348] ? do_getname+0x191/0x390 [ 615.839078][T16348] do_sys_openat2+0x10d/0x1e0 [ 615.839114][T16348] ? __pfx_do_sys_openat2+0x10/0x10 [ 615.839151][T16348] ? find_held_lock+0x2b/0x80 [ 615.839187][T16348] __x64_sys_openat+0x12d/0x210 [ 615.839223][T16348] ? __pfx___x64_sys_openat+0x10/0x10 [ 615.839283][T16348] do_syscall_64+0x106/0xf80 [ 615.839317][T16348] ? clear_bhb_loop+0x40/0x90 [ 615.839352][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.839381][T16348] RIP: 0033:0x7fa70ff9c799 [ 615.839406][T16348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.839434][T16348] RSP: 002b:00007fa710f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 615.839459][T16348] RAX: ffffffffffffffda RBX: 00007fa710215fa0 RCX: 00007fa70ff9c799 [ 615.839477][T16348] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 615.839494][T16348] RBP: 00007fa710032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 615.839512][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.839529][T16348] R13: 00007fa710216038 R14: 00007fa710215fa0 R15: 00007ffe47ade8f8 [ 615.839567][T16348] [ 617.495277][T16361] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2116'. [ 618.577974][T16378] random: crng reseeded on system resumption [ 618.650834][T16378] Restarting kernel threads ... [ 618.691581][T16378] Done restarting kernel threads. [ 620.761626][T16404] netlink: zone id is out of range [ 620.766858][T16404] netlink: zone id is out of range [ 620.789176][T16404] netlink: zone id is out of range [ 620.844122][T16411] netlink: zone id is out of range [ 620.872071][T16404] netlink: zone id is out of range [ 621.099845][T16411] netlink: zone id is out of range [ 621.251378][T16411] netlink: zone id is out of range [ 621.330331][T16411] netlink: zone id is out of range [ 621.390082][T16404] netlink: set zone limit has 8 unknown bytes [ 621.514903][T16413] smpboot: CPU 1 is now offline [ 621.576883][T16411] netlink: set zone limit has 8 unknown bytes [ 622.351439][T16417] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 622.391264][T16417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 622.419640][T16417] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 622.477166][T16417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 624.075789][T16453] FAULT_INJECTION: forcing a failure. [ 624.075789][T16453] name failslab, interval 1, probability 0, space 0, times 0 [ 624.183071][T16453] CPU: 0 UID: 0 PID: 16453 Comm: syz.3.2141 Tainted: G U L syzkaller #0 PREEMPT(full) [ 624.183098][T16453] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 624.183103][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.183111][T16453] Call Trace: [ 624.183116][T16453] [ 624.183122][T16453] dump_stack_lvl+0x100/0x190 [ 624.183147][T16453] should_fail_ex.cold+0x5/0xa [ 624.183165][T16453] should_failslab+0xc2/0x120 [ 624.183179][T16453] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 624.183202][T16453] ? security_file_alloc+0x34/0x2c0 [ 624.183217][T16453] ? trace_kmem_cache_alloc+0xf3/0x120 [ 624.183235][T16453] security_file_alloc+0x34/0x2c0 [ 624.183250][T16453] init_file+0x95/0x480 [ 624.183266][T16453] alloc_empty_file+0x73/0x1c0 [ 624.183283][T16453] dentry_open+0x46/0xd0 [ 624.183300][T16453] pidfs_alloc_file+0x18f/0x290 [ 624.183321][T16453] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 624.183347][T16453] pidfd_prepare+0x123/0x200 [ 624.183364][T16453] __x64_sys_pidfd_open+0x105/0x1a0 [ 624.183384][T16453] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 624.183407][T16453] do_syscall_64+0x106/0xf80 [ 624.183424][T16453] ? clear_bhb_loop+0x40/0x90 [ 624.183441][T16453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.183456][T16453] RIP: 0033:0x7ff31499c799 [ 624.183468][T16453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.183482][T16453] RSP: 002b:00007ff3158a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 624.183496][T16453] RAX: ffffffffffffffda RBX: 00007ff314c15fa0 RCX: 00007ff31499c799 [ 624.183505][T16453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 624.183513][T16453] RBP: 00007ff314a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 624.183521][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.183529][T16453] R13: 00007ff314c16038 R14: 00007ff314c15fa0 R15: 00007fffbd623138 [ 624.183547][T16453] [ 624.714023][ T9803] Bluetooth: hci4: command 0x0c1a tx timeout [ 624.720286][ T9803] Bluetooth: hci2: command 0x0c1a tx timeout [ 624.726695][ T9803] Bluetooth: hci1: command 0x0c1a tx timeout [ 624.732934][ T9803] Bluetooth: hci0: command 0x0c1a tx timeout [ 624.739952][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.747432][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.983605][T16465] kexec: Could not allocate control_code_buffer [ 625.441665][T16459] Process accounting resumed [ 625.463937][T16473] netlink: 74 bytes leftover after parsing attributes in process `syz.5.2144'. [ 625.860304][T16482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967104 (549755789312 ns) > initial count (26496 ns). Using initial count to start timer. [ 625.879836][T16488] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4119552215.579393869.2087), cmd(2) [ 625.946190][T16490] zero sized request [ 627.574771][T16514] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 634.301272][T16633] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 638.176589][T16688] can: request_module (can-proto-0) failed. [ 639.181523][T16694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.276470][T16694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.330784][T16694] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 639.383899][T16694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 640.392841][T16725] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 640.509922][ T9796] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.310657][ T9796] Bluetooth: hci2: command 0x0c1a tx timeout [ 641.397294][ T9796] Bluetooth: hci0: command 0x0c1a tx timeout [ 641.403413][ T9803] Bluetooth: hci4: command 0x0c1a tx timeout [ 641.894260][T16756] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2201'. [ 642.834393][T16770] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2205'. [ 645.832216][ T30] audit: type=1807 audit(4294972684.810:19): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 645.924591][T16816] ima: policy update failed [ 645.930919][ T30] audit: type=1802 audit(4294972684.810:20): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2216" res=0 errno=0 [ 646.056006][ T30] audit: type=1802 audit(4294972684.910:21): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2216" res=0 errno=0 [ 646.238759][ T30] audit: type=1804 audit(4294972685.210:22): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2217" name="/newroot/210/file0" dev="tmpfs" ino=1106 res=1 errno=0 [ 646.268418][T16823] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 646.455653][T16823] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 646.471786][ T30] audit: type=1804 audit(4294972685.210:23): pid=16824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2217" name="/newroot/210/file0" dev="tmpfs" ino=1106 res=1 errno=0 [ 646.575600][T16823] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 646.927567][T16834] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 647.172375][T16838] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 647.931026][ T9803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 647.940985][ T9803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 647.951187][ T9803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 647.959252][ T9803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 647.966848][ T9803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 648.888353][T11898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.222570][T11898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.487667][T11898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.721971][T11898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.039314][ T9803] Bluetooth: hci3: command tx timeout [ 650.336796][T16850] chnl_net:caif_netlink_parms(): no params data found [ 651.062607][T16850] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.090780][T16850] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.129176][T16850] bridge_slave_0: entered allmulticast mode [ 651.159585][T16850] bridge_slave_0: entered promiscuous mode [ 651.317465][T16850] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.358879][T16850] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.405688][T16850] bridge_slave_1: entered allmulticast mode [ 651.463482][T16850] bridge_slave_1: entered promiscuous mode [ 651.597834][T11898] bridge_slave_1: left allmulticast mode [ 651.634960][T11898] bridge_slave_1: left promiscuous mode [ 651.662923][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.707832][T11898] bridge_slave_0: left allmulticast mode [ 651.713493][T11898] bridge_slave_0: left promiscuous mode [ 651.785462][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.125697][ T9803] Bluetooth: hci3: command tx timeout [ 652.529816][T11898]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.593004][T11898]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.633761][T11898]  (unregistering): Released all slaves [ 652.750940][T16850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.009101][T16850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.235561][T16850] team0: Port device team_slave_0 added [ 653.351053][T16850] team0: Port device team_slave_1 added [ 653.952110][T16850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.998618][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.183744][T16850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.196313][ T9803] Bluetooth: hci3: command tx timeout [ 654.500742][T16850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.548734][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.724621][T16850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.309291][T16850] hsr_slave_0: entered promiscuous mode [ 655.364950][T16850] hsr_slave_1: entered promiscuous mode [ 655.400729][T16850] debugfs: 'hsr0' already exists in 'hsr' [ 655.406479][T16850] Cannot create hsr debugfs directory [ 655.700738][T11898] hsr_slave_0: left promiscuous mode [ 655.728648][T11898] hsr_slave_1: left promiscuous mode [ 655.781757][T11898] veth1_macvtap: left promiscuous mode [ 655.811889][T11898] veth0_macvtap: left promiscuous mode [ 655.867240][T11898] veth1_vlan: left promiscuous mode [ 655.891317][T11898] veth0_vlan: left promiscuous mode [ 656.277608][ T9803] Bluetooth: hci3: command tx timeout [ 656.857205][T11898] team0 (unregistering): Port device team_slave_1 removed [ 656.936986][T11898] team0 (unregistering): Port device team_slave_0 removed [ 657.386538][T16946] Process accounting paused [ 658.559406][T16990] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2247'. [ 660.173304][T16850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 660.255864][T16850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 660.370236][T16850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 660.456248][T16850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 661.514283][T16850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.670236][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2250'. [ 661.850879][ T5868] usb usb40-port2: attempt power cycle [ 661.901273][T16850] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.089648][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.096825][T11901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.227155][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.234316][T11898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.481302][ T5868] usb usb40-port2: unable to enumerate USB device [ 664.687058][T16850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.316982][T16850] veth0_vlan: entered promiscuous mode [ 665.444062][T16850] veth1_vlan: entered promiscuous mode [ 665.653569][T16850] veth0_macvtap: entered promiscuous mode [ 665.719402][T16850] veth1_macvtap: entered promiscuous mode [ 665.993090][T16850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.162036][T16850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.304450][T11907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.368917][T11907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.448241][T11907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.514204][T11907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.873864][T11891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.917816][T11891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.148343][T11908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.246330][T11908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.629812][T17153] FAULT_INJECTION: forcing a failure. [ 668.629812][T17153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.849741][T17153] CPU: 0 UID: 0 PID: 17153 Comm: syz.4.2265 Tainted: G U L syzkaller #0 PREEMPT(full) [ 668.849771][T17153] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 668.849777][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.849787][T17153] Call Trace: [ 668.849792][T17153] [ 668.849799][T17153] dump_stack_lvl+0x100/0x190 [ 668.849828][T17153] should_fail_ex.cold+0x5/0xa [ 668.849847][T17153] strncpy_from_user+0x3b/0x2d0 [ 668.849874][T17153] do_getname+0x78/0x390 [ 668.849894][T17153] do_sys_openat2+0xc5/0x1e0 [ 668.849914][T17153] ? __pfx_do_sys_openat2+0x10/0x10 [ 668.849939][T17153] __x64_sys_openat+0x12d/0x210 [ 668.849958][T17153] ? __pfx___x64_sys_openat+0x10/0x10 [ 668.849983][T17153] do_syscall_64+0x106/0xf80 [ 668.850002][T17153] ? clear_bhb_loop+0x40/0x90 [ 668.850020][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.850035][T17153] RIP: 0033:0x7f47f0b9c799 [ 668.850048][T17153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.850062][T17153] RSP: 002b:00007f47f1a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 668.850076][T17153] RAX: ffffffffffffffda RBX: 00007f47f0e15fa0 RCX: 00007f47f0b9c799 [ 668.850086][T17153] RDX: 0000000000000000 RSI: 0000200000001100 RDI: ffffffffffffff9c [ 668.850095][T17153] RBP: 00007f47f0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 668.850104][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.850112][T17153] R13: 00007f47f0e16038 R14: 00007f47f0e15fa0 R15: 00007ffca4a87758 [ 668.850131][T17153] [ 671.730251][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 674.252379][T17235] FAULT_INJECTION: forcing a failure. [ 674.252379][T17235] name failslab, interval 1, probability 0, space 0, times 0 [ 674.401507][T17235] CPU: 0 UID: 0 PID: 17235 Comm: syz.4.2282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 674.401536][T17235] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 674.401542][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.401557][T17235] Call Trace: [ 674.401562][T17235] [ 674.401568][T17235] dump_stack_lvl+0x100/0x190 [ 674.401596][T17235] should_fail_ex.cold+0x5/0xa [ 674.401615][T17235] should_failslab+0xc2/0x120 [ 674.401630][T17235] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 674.401651][T17235] ? do_getname+0x35/0x390 [ 674.401673][T17235] do_getname+0x35/0x390 [ 674.401693][T17235] do_sys_openat2+0xc5/0x1e0 [ 674.401712][T17235] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.401737][T17235] __x64_sys_openat+0x12d/0x210 [ 674.401756][T17235] ? __pfx___x64_sys_openat+0x10/0x10 [ 674.401782][T17235] do_syscall_64+0x106/0xf80 [ 674.401799][T17235] ? clear_bhb_loop+0x40/0x90 [ 674.401817][T17235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.401832][T17235] RIP: 0033:0x7f47f0b5cfce [ 674.401845][T17235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 674.401859][T17235] RSP: 002b:00007f47f19acec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.401874][T17235] RAX: ffffffffffffffda RBX: 00007f47f19ad6c0 RCX: 00007f47f0b5cfce [ 674.401883][T17235] RDX: 0000000000000002 RSI: 00007f47f19acf90 RDI: ffffffffffffff9c [ 674.401892][T17235] RBP: 00007f47f0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 674.401901][T17235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.401909][T17235] R13: 00007f47f0e16308 R14: 00007f47f0e16270 R15: 00007ffca4a87758 [ 674.401928][T17235] [ 676.293733][T17247] sock: sock_timestamping_bind_phc: sock not bind to device [ 678.089384][T17254] FAULT_INJECTION: forcing a failure. [ 678.089384][T17254] name failslab, interval 1, probability 0, space 0, times 0 [ 678.166067][T17254] CPU: 0 UID: 0 PID: 17254 Comm: syz.4.2286 Tainted: G U L syzkaller #0 PREEMPT(full) [ 678.166097][T17254] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 678.166103][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.166112][T17254] Call Trace: [ 678.166118][T17254] [ 678.166124][T17254] dump_stack_lvl+0x100/0x190 [ 678.166151][T17254] should_fail_ex.cold+0x5/0xa [ 678.166169][T17254] ? memcg_list_lru_alloc+0x4ec/0x740 [ 678.166190][T17254] should_failslab+0xc2/0x120 [ 678.166205][T17254] __kmalloc_noprof+0xe0/0x850 [ 678.166227][T17254] ? ipcget+0xee/0xf50 [ 678.166316][T17254] memcg_list_lru_alloc+0x4ec/0x740 [ 678.166343][T17254] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 678.166365][T17254] ? rcu_read_unlock+0x17/0x60 [ 678.166386][T17254] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 678.166409][T17254] __memcg_slab_post_alloc_hook+0x130/0x990 [ 678.166429][T17254] ? kasan_save_track+0x14/0x30 [ 678.166453][T17254] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 678.166474][T17254] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 678.166495][T17254] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 678.166509][T17254] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 678.166524][T17254] alloc_inode+0x68/0x250 [ 678.166543][T17254] new_inode+0x22/0x1c0 [ 678.166563][T17254] hugetlbfs_get_inode+0x313/0x750 [ 678.166581][T17254] hugetlb_file_setup+0x3cc/0x5b0 [ 678.166599][T17254] newseg+0xabb/0xed0 [ 678.166647][T17254] ? __pfx_newseg+0x10/0x10 [ 678.166663][T17254] ? down_write+0x146/0x1f0 [ 678.166684][T17254] ? ksys_write+0x190/0x250 [ 678.166698][T17254] ? ksys_write+0x190/0x250 [ 678.166714][T17254] ipcget+0xee/0xf50 [ 678.166729][T17254] ? do_futex+0x192/0x350 [ 678.166749][T17254] ? __pfx_do_futex+0x10/0x10 [ 678.166771][T17254] ? __pfx_ipcget+0x10/0x10 [ 678.166787][T17254] ? __x64_sys_futex+0x34f/0x4d0 [ 678.166804][T17254] ? __x64_sys_futex+0x358/0x4d0 [ 678.166825][T17254] __x64_sys_shmget+0x13b/0x1b0 [ 678.166842][T17254] ? __pfx___x64_sys_shmget+0x10/0x10 [ 678.166863][T17254] do_syscall_64+0x106/0xf80 [ 678.166880][T17254] ? clear_bhb_loop+0x40/0x90 [ 678.166899][T17254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.166914][T17254] RIP: 0033:0x7f47f0b9c799 [ 678.166927][T17254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.166941][T17254] RSP: 002b:00007f47f19ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 678.166956][T17254] RAX: ffffffffffffffda RBX: 00007f47f0e16270 RCX: 00007f47f0b9c799 [ 678.166966][T17254] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 678.166975][T17254] RBP: 00007f47f0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 678.166984][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.166993][T17254] R13: 00007f47f0e16308 R14: 00007f47f0e16270 R15: 00007ffca4a87758 [ 678.167014][T17254] [ 678.601718][T17277] binder: 17275:17277 ioctl c0306201 2000000000c0 returned -14 [ 679.581255][T17295] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2298'. [ 679.820868][T17295] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.829338][T17295] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.027648][T17354] bond0: invalid ARP target specified [ 685.897629][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.904073][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.507666][T17403] Process accounting resumed [ 688.284206][T17423] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2327'. [ 688.408338][T17423] bridge0: port 3(team0) entered disabled state [ 688.415198][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.422663][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.894073][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2329'. [ 689.072725][T17433] veth1_macvtap: left promiscuous mode [ 690.879635][T17479] FAULT_INJECTION: forcing a failure. [ 690.879635][T17479] name failslab, interval 1, probability 0, space 0, times 0 [ 690.948849][T17473] FAULT_INJECTION: forcing a failure. [ 690.948849][T17473] name failslab, interval 1, probability 0, space 0, times 0 [ 691.062612][T17473] CPU: 0 UID: 0 PID: 17473 Comm: syz.1.2342 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.062641][T17473] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.062647][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.062656][T17473] Call Trace: [ 691.062662][T17473] [ 691.062669][T17473] dump_stack_lvl+0x100/0x190 [ 691.062697][T17473] should_fail_ex.cold+0x5/0xa [ 691.062716][T17473] should_failslab+0xc2/0x120 [ 691.062731][T17473] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 691.062753][T17473] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 691.062884][T17473] ? acpi_ut_trace+0x1d7/0x2a0 [ 691.062902][T17473] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 691.062925][T17473] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 691.062950][T17473] acpi_ut_create_integer_object+0x46/0xe0 [ 691.062971][T17473] acpi_ex_read_data_from_field+0x146/0xd40 [ 691.063007][T17473] ? acpi_ut_ptr_exit+0x10c/0x180 [ 691.063021][T17473] ? acpi_ut_value_exit+0x10d/0x190 [ 691.063039][T17473] acpi_ex_resolve_node_to_value+0x6b8/0x9a0 [ 691.063081][T17473] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 691.063102][T17473] ? acpi_ds_create_operand+0x267/0xc20 [ 691.063166][T17473] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 691.063185][T17473] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 691.063202][T17473] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 691.063219][T17473] ? acpi_ut_track_stack_ptr+0x114/0x180 [ 691.063237][T17473] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 691.063260][T17473] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 691.063284][T17473] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 691.063324][T17473] ? acpi_ut_trace_ptr+0x121/0x2a0 [ 691.063341][T17473] acpi_ds_exec_end_op+0xb78/0x1e60 [ 691.063366][T17473] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 691.063388][T17473] acpi_ps_parse_loop+0x5dd/0x24a0 [ 691.063416][T17473] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 691.063438][T17473] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 691.063459][T17473] ? acpi_ut_create_thread_state+0x6d/0x170 [ 691.063487][T17473] acpi_ps_parse_aml+0x81e/0x1120 [ 691.063505][T17473] acpi_ps_execute_method+0x5c4/0xe90 [ 691.063526][T17473] acpi_ns_evaluate+0x640/0x1670 [ 691.063555][T17473] acpi_evaluate_object+0x420/0xe00 [ 691.063577][T17473] ? kasan_save_stack+0x30/0x50 [ 691.063599][T17473] ? kasan_save_track+0x14/0x30 [ 691.063624][T17473] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 691.063651][T17473] acpi_evaluate_integer+0xdf/0x220 [ 691.063724][T17473] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 691.063752][T17473] ? __pfx_status_show+0x10/0x10 [ 691.063773][T17473] status_show+0xa0/0x120 [ 691.063794][T17473] ? __pfx_status_show+0x10/0x10 [ 691.063821][T17473] dev_attr_show+0x52/0xa0 [ 691.063870][T17473] ? __pfx_dev_attr_show+0x10/0x10 [ 691.063885][T17473] sysfs_kf_seq_show+0x217/0x3a0 [ 691.063909][T17473] seq_read_iter+0x32f/0x1270 [ 691.063940][T17473] kernfs_fop_read_iter+0x46c/0x610 [ 691.063957][T17473] ? rw_verify_area+0xce/0x6d0 [ 691.063977][T17473] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 691.063994][T17473] vfs_read+0x825/0xb30 [ 691.064019][T17473] ? __pfx_vfs_read+0x10/0x10 [ 691.064053][T17473] ksys_read+0x12a/0x250 [ 691.064074][T17473] ? __pfx_ksys_read+0x10/0x10 [ 691.064102][T17473] do_syscall_64+0x106/0xf80 [ 691.064120][T17473] ? clear_bhb_loop+0x40/0x90 [ 691.064139][T17473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.064154][T17473] RIP: 0033:0x7fa89159c799 [ 691.064176][T17473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.064191][T17473] RSP: 002b:00007fa89253a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.064205][T17473] RAX: ffffffffffffffda RBX: 00007fa891815fa0 RCX: 00007fa89159c799 [ 691.064215][T17473] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000009 [ 691.064224][T17473] RBP: 00007fa891632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 691.064234][T17473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.064242][T17473] R13: 00007fa891816038 R14: 00007fa891815fa0 R15: 00007ffc89994438 [ 691.064264][T17473] [ 691.064306][T17473] ACPI Error: [ 691.516575][T17479] CPU: 0 UID: 0 PID: 17479 Comm: syz.3.2341 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.516606][T17479] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.516612][T17479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.516622][T17479] Call Trace: [ 691.516627][T17479] [ 691.516633][T17479] dump_stack_lvl+0x100/0x190 [ 691.516669][T17479] should_fail_ex.cold+0x5/0xa [ 691.516688][T17479] should_failslab+0xc2/0x120 [ 691.516705][T17479] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 691.516728][T17479] ? __d_alloc+0x34/0xa80 [ 691.516744][T17479] ? lockdep_init_map_type+0x5c/0x250 [ 691.516766][T17479] __d_alloc+0x34/0xa80 [ 691.516783][T17479] d_alloc_pseudo+0x1c/0xc0 [ 691.516803][T17479] alloc_file_pseudo+0xcf/0x230 [ 691.516822][T17479] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 691.516840][T17479] ? alloc_fd+0x476/0x790 [ 691.516858][T17479] sock_alloc_file+0x50/0x210 [ 691.516879][T17479] __sys_socket+0x1c0/0x260 [ 691.516893][T17479] ? __pfx___sys_socket+0x10/0x10 [ 691.516920][T17479] __x64_sys_socket+0x72/0xb0 [ 691.516933][T17479] ? lockdep_hardirqs_on+0x78/0x100 [ 691.516951][T17479] do_syscall_64+0x106/0xf80 [ 691.516968][T17479] ? clear_bhb_loop+0x40/0x90 [ 691.516986][T17479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.517002][T17479] RIP: 0033:0x7faf4899c799 [ 691.517015][T17479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.517029][T17479] RSP: 002b:00007faf498e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 691.517044][T17479] RAX: ffffffffffffffda RBX: 00007faf48c15fa0 RCX: 00007faf4899c799 [ 691.517053][T17479] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 691.517062][T17479] RBP: 00007faf48a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 691.517070][T17479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.517079][T17479] R13: 00007faf48c16038 R14: 00007faf48c15fa0 R15: 00007ffd96e2d518 [ 691.517098][T17479] [ 693.485646][T17473] Could not allocate an object descriptor (20251212/utobject-180) [ 693.546936][T17473] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 695.667828][T17560] syz.1.2360(17560): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 696.043335][T17568] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2363'. [ 701.763823][T17648] FAULT_INJECTION: forcing a failure. [ 701.763823][T17648] name fail_futex, interval 1, probability 0, space 0, times 0 [ 701.862674][T17648] CPU: 0 UID: 0 PID: 17648 Comm: syz.3.2384 Tainted: G U L syzkaller #0 PREEMPT(full) [ 701.862704][T17648] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 701.862710][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.862719][T17648] Call Trace: [ 701.862725][T17648] [ 701.862730][T17648] dump_stack_lvl+0x100/0x190 [ 701.862758][T17648] should_fail_ex.cold+0x5/0xa [ 701.862776][T17648] get_futex_key+0x107c/0x1620 [ 701.862797][T17648] ? __pfx_get_futex_key+0x10/0x10 [ 701.862820][T17648] futex_wait_setup+0x83/0x510 [ 701.862856][T17648] __futex_wait+0x19f/0x300 [ 701.862880][T17648] ? __pfx___futex_wait+0x10/0x10 [ 701.862905][T17648] ? __pfx_futex_wake_mark+0x10/0x10 [ 701.862929][T17648] ? __hrtimer_setup+0x178/0x280 [ 701.862952][T17648] ? ktime_add_safe+0x60/0x70 [ 701.862973][T17648] futex_wait+0xed/0x380 [ 701.862996][T17648] ? __pfx_futex_wait+0x10/0x10 [ 701.863016][T17648] ? __lock_acquire+0x4a5/0x2630 [ 701.863036][T17648] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 701.863061][T17648] do_futex+0x1ef/0x350 [ 701.863080][T17648] ? __pfx_do_futex+0x10/0x10 [ 701.863097][T17648] ? ktime_get+0x200/0x300 [ 701.863111][T17648] ? lockdep_hardirqs_on+0x78/0x100 [ 701.863129][T17648] ? read_tsc+0x9/0x20 [ 701.863148][T17648] __x64_sys_futex+0x34f/0x4d0 [ 701.863169][T17648] ? __pfx___x64_sys_futex+0x10/0x10 [ 701.863194][T17648] do_syscall_64+0x106/0xf80 [ 701.863211][T17648] ? clear_bhb_loop+0x40/0x90 [ 701.863228][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.863243][T17648] RIP: 0033:0x7faf4899c799 [ 701.863256][T17648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.863270][T17648] RSP: 002b:00007faf498e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 701.863285][T17648] RAX: ffffffffffffffda RBX: 00007faf48c15fa0 RCX: 00007faf4899c799 [ 701.863294][T17648] RDX: 0000000000000eec RSI: 0000000000000000 RDI: 0000200000000000 [ 701.863303][T17648] RBP: 00007faf48a32bd9 R08: 0000000000000000 R09: 0000000000000006 [ 701.863312][T17648] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 701.863321][T17648] R13: 00007faf48c16038 R14: 00007faf48c15fa0 R15: 00007ffd96e2d518 [ 701.863341][T17648] [ 702.404384][T17655] futex_wake_op: syz.3.2384 tries to shift op by -2048; fix this program [ 702.430931][T17655] futex_wake_op: syz.3.2384 tries to shift op by -2048; fix this program [ 702.470504][T17656] 0x000000000001-0x000000020000 : "" [ 702.684139][T17656] ftl_cs: FTL header corrupt! [ 703.082901][ T9799] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 8 with max blocks 2 with error 117 [ 703.130774][ T9799] EXT4-fs (sda1): This should not happen!! Data will be lost [ 703.130774][ T9799] [ 703.844019][T17679] can: request_module (can-proto-0) failed. [ 704.386603][T17677] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 706.101684][T17714] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2395'. [ 706.473706][T17722] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 706.542166][T17722] netlink: 'syz.5.2397': attribute type 11 has an invalid length. [ 706.632949][T17722] netlink: 'syz.5.2397': attribute type 11 has an invalid length. [ 706.696756][T17722] netlink: 'syz.5.2397': attribute type 11 has an invalid length. [ 708.617701][T17751] NFSD: Failed to start, no listeners configured. [ 711.007062][T17806] usb usb26: usbfs: interface 0 claimed by hub while 'syz.4.2419' resets device [ 711.077631][T17806] vivid-007: ================= START STATUS ================= [ 711.155437][T17806] vivid-007: Generate PTS: true [ 711.192702][T17806] vivid-007: Generate SCR: true [ 711.245445][T17806] tpg source WxH: 320x240 (Y'CbCr) [ 711.282282][T17806] tpg field: 1 [ 711.332728][T17806] tpg crop: (0,0)/320x240 [ 711.356006][T17806] tpg compose: (0,0)/320x240 [ 711.360619][T17806] tpg colorspace: 8 [ 711.457373][T17806] tpg transfer function: 0/0 [ 711.485298][T17806] tpg Y'CbCr encoding: 0/0 [ 711.515052][T17806] tpg quantization: 0/0 [ 711.548276][T17806] tpg RGB range: 0/2 [ 711.566064][T17806] vivid-007: ================== END STATUS ================== [ 712.406307][ T9796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 712.422149][ T9796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 712.432202][ T9796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 712.439838][ T9796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 712.450486][ T9796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 712.555753][T11950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.410415][T17831] chnl_net:caif_netlink_parms(): no params data found [ 713.847131][T17864] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2432'. [ 713.889219][T17831] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.947909][T17831] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.955091][T17831] bridge_slave_0: entered allmulticast mode [ 714.044109][T17831] bridge_slave_0: entered promiscuous mode [ 714.142652][T17831] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.195515][T17831] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.241570][T17831] bridge_slave_1: entered allmulticast mode [ 714.291865][T17831] bridge_slave_1: entered promiscuous mode [ 714.546686][ T9796] Bluetooth: hci2: command tx timeout [ 714.615667][T17831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.698036][T17831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.096309][T17831] team0: Port device team_slave_0 added [ 715.115487][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 715.148065][T17831] team0: Port device team_slave_1 added [ 715.485974][T17831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.511977][T17831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.690904][T17831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.772268][T17831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.817190][T17831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.952416][T17831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.570662][T17831] hsr_slave_0: entered promiscuous mode [ 716.630304][ T9796] Bluetooth: hci2: command tx timeout [ 716.636049][T17831] hsr_slave_1: entered promiscuous mode [ 716.659444][T17831] debugfs: 'hsr0' already exists in 'hsr' [ 716.665185][T17831] Cannot create hsr debugfs directory [ 716.698136][T17896] random: crng reseeded on system resumption [ 717.091494][T11901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.521867][T11901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.900883][T17906] Process accounting paused [ 718.175915][T11901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.547403][T11901] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.711205][ T9796] Bluetooth: hci2: command tx timeout [ 719.749715][T17940] FAULT_INJECTION: forcing a failure. [ 719.749715][T17940] name failslab, interval 1, probability 0, space 0, times 0 [ 719.851606][T17940] CPU: 0 UID: 0 PID: 17940 Comm: syz.3.2448 Tainted: G U L syzkaller #0 PREEMPT(full) [ 719.851632][T17940] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 719.851638][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.851646][T17940] Call Trace: [ 719.851651][T17940] [ 719.851657][T17940] dump_stack_lvl+0x100/0x190 [ 719.851684][T17940] should_fail_ex.cold+0x5/0xa [ 719.851701][T17940] should_failslab+0xc2/0x120 [ 719.851716][T17940] __kmalloc_cache_noprof+0x7a/0x6f0 [ 719.851734][T17940] ? nci_hci_allocate+0x45/0x330 [ 719.851751][T17940] ? mutex_init_lockep+0x110/0x150 [ 719.851772][T17940] nci_hci_allocate+0x45/0x330 [ 719.851788][T17940] nci_allocate_device+0x26f/0x410 [ 719.851810][T17940] virtual_ncidev_open+0x6f/0x220 [ 719.851829][T17940] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 719.851844][T17940] misc_open+0x26d/0x450 [ 719.851861][T17940] ? __pfx_misc_open+0x10/0x10 [ 719.851874][T17940] chrdev_open+0x234/0x6a0 [ 719.851887][T17940] ? __pfx_apparmor_file_open+0x10/0x10 [ 719.851909][T17940] ? __pfx_chrdev_open+0x10/0x10 [ 719.851925][T17940] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 719.851944][T17940] do_dentry_open+0x6d8/0x1660 [ 719.851957][T17940] ? __pfx_chrdev_open+0x10/0x10 [ 719.851976][T17940] vfs_open+0x82/0x3f0 [ 719.851995][T17940] path_openat+0x208c/0x31a0 [ 719.852016][T17940] ? __pfx_path_openat+0x10/0x10 [ 719.852037][T17940] do_file_open+0x20e/0x430 [ 719.852053][T17940] ? __pfx_do_file_open+0x10/0x10 [ 719.852080][T17940] ? alloc_fd+0x476/0x790 [ 719.852096][T17940] ? do_getname+0x191/0x390 [ 719.852119][T17940] do_sys_openat2+0x10d/0x1e0 [ 719.852136][T17940] ? __pfx_do_sys_openat2+0x10/0x10 [ 719.852161][T17940] __x64_sys_openat+0x12d/0x210 [ 719.852180][T17940] ? __pfx___x64_sys_openat+0x10/0x10 [ 719.852205][T17940] do_syscall_64+0x106/0xf80 [ 719.852221][T17940] ? clear_bhb_loop+0x40/0x90 [ 719.852239][T17940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.852253][T17940] RIP: 0033:0x7faf4899c799 [ 719.852266][T17940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.852280][T17940] RSP: 002b:00007faf498bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 719.852294][T17940] RAX: ffffffffffffffda RBX: 00007faf48c16090 RCX: 00007faf4899c799 [ 719.852303][T17940] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 719.852312][T17940] RBP: 00007faf48a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 719.852320][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.852328][T17940] R13: 00007faf48c16128 R14: 00007faf48c16090 R15: 00007ffd96e2d518 [ 719.852353][T17940] [ 719.852519][ T9796] Bluetooth: hci3: Malformed LE Event: 0x1b [ 720.211289][T17935] Invalid ELF header magic: != ELF [ 720.620126][T17950] random: crng reseeded on system resumption [ 720.800465][ T9796] Bluetooth: hci2: command tx timeout [ 721.887498][T17968] overlayfs: missing 'lowerdir' [ 722.384936][T11901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.478792][T11901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.517822][T11901] bond0 (unregistering): Released all slaves [ 723.015828][T11901] : left promiscuous mode [ 724.789848][T17831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 725.142708][T17831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 725.311052][T11901] hsr_slave_0: left promiscuous mode [ 725.435942][T11901] hsr_slave_1: left promiscuous mode [ 725.471797][T11901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.533776][T11901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.574206][T11901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.617736][T11901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.698107][T11901] veth0_macvtap: left promiscuous mode [ 725.727597][T11901] veth1_vlan: left promiscuous mode [ 725.762649][T11901] veth0_vlan: left promiscuous mode [ 726.354811][T18010] slcan: can't register candev [ 726.959557][T11901] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 726.980046][T18024] vivid-007: ================= START STATUS ================= [ 727.052235][T18024] vivid-007: Generate PTS: true [ 727.088973][T17831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.113910][T18024] vivid-007: Generate SCR: true [ 727.193671][T18024] tpg source WxH: 320x240 (Y'CbCr) [ 727.205601][T17831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 727.275355][T18024] tpg field: 1 [ 727.275369][T18024] tpg crop: (0,0)/320x240 [ 727.275379][T18024] tpg compose: (0,0)/320x240 [ 727.275389][T18024] tpg colorspace: 8 [ 727.275395][T18024] tpg transfer function: 0/0 [ 727.275402][T18024] tpg Y'CbCr encoding: 0/0 [ 727.275410][T18024] tpg quantization: 0/0 [ 727.275417][T18024] tpg RGB range: 0/2 [ 727.275424][T18024] vivid-007: ================== END STATUS ================== [ 727.950654][T17831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.087885][T17831] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.161737][T11907] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.161827][T11907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.163054][T11907] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.163119][T11907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.100550][T17831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.265430][T17831] veth0_vlan: entered promiscuous mode [ 729.318882][T17831] veth1_vlan: entered promiscuous mode [ 729.371870][T17831] veth0_macvtap: entered promiscuous mode [ 729.454680][T17831] veth1_macvtap: entered promiscuous mode [ 729.481441][T17831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.483803][T17831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.590411][T11901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.592322][T11901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.592355][T11901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.592379][T11901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.000795][T18083] Invalid ELF header magic: != ELF [ 730.035588][T18084] Invalid ELF header magic: != ELF [ 730.118410][T11901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.118430][T11901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.252509][ T9799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.252528][ T9799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.984536][T18101] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2470'. [ 731.019656][T18105] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 732.351242][T18125] blkio.reset_stats is deprecated [ 734.239395][T18150] nvme_fcloop: unknown parameter or missing value '' [ 735.144892][T18157] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2486'. [ 736.628349][T18169] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 737.948571][T18201] FAULT_INJECTION: forcing a failure. [ 737.948571][T18201] name fail_futex, interval 1, probability 0, space 0, times 0 [ 738.168360][T18201] CPU: 0 UID: 0 PID: 18201 Comm: syz.3.2497 Tainted: G U L syzkaller #0 PREEMPT(full) [ 738.168389][T18201] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 738.168395][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.168404][T18201] Call Trace: [ 738.168409][T18201] [ 738.168416][T18201] dump_stack_lvl+0x100/0x190 [ 738.168445][T18201] should_fail_ex.cold+0x5/0xa [ 738.168464][T18201] get_futex_key+0x1d2/0x1620 [ 738.168485][T18201] ? __pfx_get_futex_key+0x10/0x10 [ 738.168502][T18201] ? find_held_lock+0x2b/0x80 [ 738.168515][T18201] ? futex_wake+0x456/0x530 [ 738.168541][T18201] futex_wake+0xea/0x530 [ 738.168563][T18201] ? __pfx_futex_wake+0x10/0x10 [ 738.168593][T18201] do_futex+0x32b/0x350 [ 738.168612][T18201] ? __pfx_do_futex+0x10/0x10 [ 738.168635][T18201] __x64_sys_futex+0x34f/0x4d0 [ 738.168654][T18201] ? fdget_pos+0x2c0/0x380 [ 738.168670][T18201] ? __pfx___x64_sys_futex+0x10/0x10 [ 738.168687][T18201] ? ksys_read+0x1ac/0x250 [ 738.168709][T18201] ? __pfx_ksys_read+0x10/0x10 [ 738.168736][T18201] do_syscall_64+0x106/0xf80 [ 738.168753][T18201] ? clear_bhb_loop+0x40/0x90 [ 738.168771][T18201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.168786][T18201] RIP: 0033:0x7faf4899c799 [ 738.168799][T18201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.168813][T18201] RSP: 002b:00007faf498e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 738.168829][T18201] RAX: ffffffffffffffda RBX: 00007faf48c15fa8 RCX: 00007faf4899c799 [ 738.168838][T18201] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf48c15fac [ 738.168848][T18201] RBP: 00007faf48c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 738.168857][T18201] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 738.168865][T18201] R13: 00007faf48c16038 R14: 00007ffd96e2d430 R15: 00007ffd96e2d518 [ 738.168884][T18201] [ 738.693576][T18207] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 740.278880][ T30] audit: type=1804 audit(4294973802.208:24): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2502" name=2F6E6577726F6F742F31312F22050820 dev="tmpfs" ino=74 res=1 errno=0 [ 740.418549][ T30] audit: type=1800 audit(4294973802.248:25): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2502" name=22050820 dev="tmpfs" ino=74 res=0 errno=0 [ 740.504510][T18231] FAULT_INJECTION: forcing a failure. [ 740.504510][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 740.588685][T18231] CPU: 0 UID: 0 PID: 18231 Comm: syz.4.2503 Tainted: G U L syzkaller #0 PREEMPT(full) [ 740.588713][T18231] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 740.588718][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.588727][T18231] Call Trace: [ 740.588732][T18231] [ 740.588738][T18231] dump_stack_lvl+0x100/0x190 [ 740.588765][T18231] should_fail_ex.cold+0x5/0xa [ 740.588782][T18231] should_failslab+0xc2/0x120 [ 740.588797][T18231] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 740.588818][T18231] ? taskstats_exit+0x650/0xbd0 [ 740.588853][T18231] taskstats_exit+0x650/0xbd0 [ 740.588875][T18231] ? __pfx_acct_update_integrals+0x10/0x10 [ 740.588897][T18231] ? __pfx_taskstats_exit+0x10/0x10 [ 740.588919][T18231] ? rcu_read_lock_any_held+0x6a/0xa0 [ 740.588933][T18231] ? exit_signals+0x395/0xaf0 [ 740.588950][T18231] do_exit+0x659/0x2b60 [ 740.588972][T18231] ? __pfx_do_exit+0x10/0x10 [ 740.588988][T18231] ? do_raw_spin_lock+0x128/0x260 [ 740.589008][T18231] ? find_held_lock+0x2b/0x80 [ 740.589021][T18231] ? get_signal+0x7e0/0x21e0 [ 740.589036][T18231] do_group_exit+0xd5/0x2a0 [ 740.589056][T18231] get_signal+0x1ec7/0x21e0 [ 740.589076][T18231] ? __pfx_get_signal+0x10/0x10 [ 740.589091][T18231] ? do_futex+0x192/0x350 [ 740.589111][T18231] arch_do_signal_or_restart+0x91/0x770 [ 740.589130][T18231] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 740.589151][T18231] ? __pfx___x64_sys_futex+0x10/0x10 [ 740.589173][T18231] exit_to_user_mode_loop+0x86/0x4a0 [ 740.589193][T18231] do_syscall_64+0x668/0xf80 [ 740.589211][T18231] ? clear_bhb_loop+0x40/0x90 [ 740.589228][T18231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.589242][T18231] RIP: 0033:0x7f47f0b9c799 [ 740.589255][T18231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.589269][T18231] RSP: 002b:00007f47f19ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 740.589282][T18231] RAX: fffffffffffffe00 RBX: 00007f47f0e16098 RCX: 00007f47f0b9c799 [ 740.589292][T18231] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47f0e16098 [ 740.589301][T18231] RBP: 00007f47f0e16090 R08: 0000000000000000 R09: 0000000000000000 [ 740.589309][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.589317][T18231] R13: 00007f47f0e16128 R14: 00007ffca4a87670 R15: 00007ffca4a87758 [ 740.589335][T18231] [ 742.342627][T18251] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 742.674831][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'. [ 742.966868][T18254] zswap: compressor not available [ 743.153088][T18274] mkiss: ax0: crc mode is auto. [ 745.390736][T18308] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 745.829788][ T9796] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 745.991540][T18315] FAULT_INJECTION: forcing a failure. [ 745.991540][T18315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.140292][T18316] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 746.273530][T18315] CPU: 0 UID: 0 PID: 18315 Comm: syz.4.2524 Tainted: G U L syzkaller #0 PREEMPT(full) [ 746.273556][T18315] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 746.273562][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.273570][T18315] Call Trace: [ 746.273575][T18315] [ 746.273581][T18315] dump_stack_lvl+0x100/0x190 [ 746.273606][T18315] should_fail_ex.cold+0x5/0xa [ 746.273620][T18315] ? prepare_alloc_pages+0x16d/0x5f0 [ 746.273638][T18315] should_fail_alloc_page+0xeb/0x140 [ 746.273654][T18315] prepare_alloc_pages+0x1f0/0x5f0 [ 746.273673][T18315] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 746.273697][T18315] ? stack_trace_save+0x8e/0xc0 [ 746.273711][T18315] ? __pfx_stack_trace_save+0x10/0x10 [ 746.273725][T18315] ? stack_depot_save_flags+0x27/0x9d0 [ 746.273744][T18315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.273763][T18315] ? kasan_save_stack+0x3f/0x50 [ 746.273783][T18315] ? kasan_save_stack+0x30/0x50 [ 746.273802][T18315] ? kasan_save_track+0x14/0x30 [ 746.273822][T18315] ? system_heap_allocate+0xeb/0x1170 [ 746.273843][T18315] ? __x64_sys_ioctl+0x18e/0x210 [ 746.273861][T18315] ? do_syscall_64+0x106/0xf80 [ 746.273877][T18315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.273901][T18315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 746.273924][T18315] ? policy_nodemask+0xed/0x4f0 [ 746.273940][T18315] alloc_pages_mpol+0x1fb/0x550 [ 746.273955][T18315] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.273971][T18315] ? lockdep_init_map_type+0x5c/0x250 [ 746.273991][T18315] alloc_pages_noprof+0x131/0x390 [ 746.274007][T18315] system_heap_allocate+0x2d2/0x1170 [ 746.274030][T18315] ? __pfx_system_heap_allocate+0x10/0x10 [ 746.274053][T18315] ? __might_fault+0xc5/0x140 [ 746.274080][T18315] dma_heap_ioctl+0x37f/0x5e0 [ 746.274100][T18315] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 746.274117][T18315] ? find_held_lock+0x2b/0x80 [ 746.274138][T18315] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 746.274157][T18315] __x64_sys_ioctl+0x18e/0x210 [ 746.274177][T18315] do_syscall_64+0x106/0xf80 [ 746.274193][T18315] ? clear_bhb_loop+0x40/0x90 [ 746.274210][T18315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.274224][T18315] RIP: 0033:0x7f47f0b9c799 [ 746.274236][T18315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.274250][T18315] RSP: 002b:00007f47f1a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.274263][T18315] RAX: ffffffffffffffda RBX: 00007f47f0e15fa0 RCX: 00007f47f0b9c799 [ 746.274273][T18315] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000006 [ 746.274281][T18315] RBP: 00007f47f0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 746.274289][T18315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.274297][T18315] R13: 00007f47f0e16038 R14: 00007f47f0e15fa0 R15: 00007ffca4a87758 [ 746.274315][T18315] [ 747.444572][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.458157][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.489826][T18340] Console: switching to colour VGA+ 80x4 [ 747.793527][T18346] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 748.988649][T18354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 749.025493][T18354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 749.066788][T18354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 749.095057][T18354] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 749.157739][T18354] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 749.215186][T18354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 749.221143][T18354] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 749.316749][T18340] Process accounting resumed [ 749.322461][T18354] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 749.798229][T18363] random: crng reseeded on system resumption [ 750.974428][ T9796] Bluetooth: hci4: command 0x0c1a tx timeout [ 751.044824][T18386] Bluetooth: hci0: command 0x0c1a tx timeout [ 751.124794][T18386] Bluetooth: hci3: command 0x0c1a tx timeout [ 751.285093][T18386] Bluetooth: hci2: command 0x0c1a tx timeout [ 752.362310][T18403] openvswitch: netlink: Duplicate key (type 15). [ 752.576724][T18409] openvswitch: netlink: Duplicate key (type 15). [ 753.205882][T18386] Bluetooth: hci3: command 0x0c1a tx timeout [ 753.365974][T18386] Bluetooth: hci2: command 0x0c1a tx timeout [ 753.778255][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'. [ 755.288502][T18386] Bluetooth: hci3: command 0x0c1a tx timeout [ 755.447029][T18386] Bluetooth: hci2: command 0x0c1a tx timeout [ 755.505202][T18467] FAULT_INJECTION: forcing a failure. [ 755.505202][T18467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.599532][T18467] CPU: 0 UID: 0 PID: 18467 Comm: syz.4.2557 Tainted: G U L syzkaller #0 PREEMPT(full) [ 755.599561][T18467] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 755.599566][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 755.599575][T18467] Call Trace: [ 755.599581][T18467] [ 755.599587][T18467] dump_stack_lvl+0x100/0x190 [ 755.599617][T18467] should_fail_ex.cold+0x5/0xa [ 755.599636][T18467] strncpy_from_user+0x3b/0x2d0 [ 755.599663][T18467] do_getname+0x78/0x390 [ 755.599709][T18467] user_path_at+0x26/0x60 [ 755.599732][T18467] __x64_sys_mount+0x1fb/0x310 [ 755.599751][T18467] ? __pfx___x64_sys_mount+0x10/0x10 [ 755.599774][T18467] do_syscall_64+0x106/0xf80 [ 755.599797][T18467] ? clear_bhb_loop+0x40/0x90 [ 755.599815][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.599831][T18467] RIP: 0033:0x7f47f0b9c799 [ 755.599844][T18467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.599859][T18467] RSP: 002b:00007f47f19ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 755.599874][T18467] RAX: ffffffffffffffda RBX: 00007f47f0e16090 RCX: 00007f47f0b9c799 [ 755.599884][T18467] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 755.599893][T18467] RBP: 00007f47f0c32bd9 R08: 0000200000000280 R09: 0000000000000000 [ 755.599901][T18467] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 755.599909][T18467] R13: 00007f47f0e16128 R14: 00007f47f0e16090 R15: 00007ffca4a87758 [ 755.599928][T18467] [ 756.914157][T18492] FAULT_INJECTION: forcing a failure. [ 756.914157][T18492] name failslab, interval 1, probability 0, space 0, times 0 [ 756.999147][T18492] CPU: 0 UID: 0 PID: 18492 Comm: syz.3.2563 Tainted: G U L syzkaller #0 PREEMPT(full) [ 756.999176][T18492] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 756.999182][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.999191][T18492] Call Trace: [ 756.999200][T18492] [ 756.999207][T18492] dump_stack_lvl+0x100/0x190 [ 756.999235][T18492] should_fail_ex.cold+0x5/0xa [ 756.999254][T18492] should_failslab+0xc2/0x120 [ 756.999270][T18492] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 756.999292][T18492] ? __anon_vma_prepare+0xae/0x5e0 [ 756.999315][T18492] __anon_vma_prepare+0xae/0x5e0 [ 756.999335][T18492] ? do_raw_spin_lock+0x128/0x260 [ 756.999358][T18492] __vmf_anon_prepare+0x11f/0x250 [ 756.999376][T18492] do_huge_pmd_anonymous_page+0x15c/0x1a60 [ 756.999398][T18492] ? __pmd_alloc+0x6aa/0x9c0 [ 756.999416][T18492] __handle_mm_fault+0x1e9e/0x2b60 [ 756.999438][T18492] ? mt_find+0x45e/0x8e0 [ 756.999459][T18492] ? __pfx___handle_mm_fault+0x10/0x10 [ 756.999477][T18492] ? __pfx_mt_find+0x10/0x10 [ 756.999510][T18492] handle_mm_fault+0x36d/0xa20 [ 756.999533][T18492] __get_user_pages+0xf9c/0x34d0 [ 756.999557][T18492] ? __pfx___get_user_pages+0x10/0x10 [ 756.999580][T18492] populate_vma_page_range+0x267/0x3f0 [ 756.999599][T18492] ? __pfx_populate_vma_page_range+0x10/0x10 [ 756.999615][T18492] ? __pfx_find_vma_intersection+0x10/0x10 [ 756.999632][T18492] ? do_mmap+0x93f/0x12f0 [ 756.999657][T18492] __mm_populate+0x107/0x3a0 [ 756.999676][T18492] ? __pfx___mm_populate+0x10/0x10 [ 756.999695][T18492] ? up_write+0x290/0x4f0 [ 756.999718][T18492] vm_mmap_pgoff+0x37f/0x470 [ 756.999742][T18492] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 756.999759][T18492] ? do_futex+0x192/0x350 [ 756.999779][T18492] ? __pfx_do_futex+0x10/0x10 [ 756.999801][T18492] ksys_mmap_pgoff+0xe1/0x650 [ 756.999816][T18492] ? __x64_sys_futex+0x34f/0x4d0 [ 756.999833][T18492] ? __x64_sys_futex+0x358/0x4d0 [ 756.999851][T18492] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 756.999867][T18492] ? xfd_validate_state+0x129/0x190 [ 756.999892][T18492] __x64_sys_mmap+0x125/0x190 [ 756.999914][T18492] do_syscall_64+0x106/0xf80 [ 756.999931][T18492] ? clear_bhb_loop+0x40/0x90 [ 756.999949][T18492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.999964][T18492] RIP: 0033:0x7faf4899c799 [ 756.999977][T18492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.999992][T18492] RSP: 002b:00007faf498e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 757.000007][T18492] RAX: ffffffffffffffda RBX: 00007faf48c15fa0 RCX: 00007faf4899c799 [ 757.000018][T18492] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 757.000028][T18492] RBP: 00007faf48a32bd9 R08: ffffffffffffffff R09: 0000000000008000 [ 757.000037][T18492] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 757.000047][T18492] R13: 00007faf48c16038 R14: 00007faf48c15fa0 R15: 00007ffd96e2d518 [ 757.000067][T18492] [ 757.311231][T18495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.320495][T18495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.348505][T18494] FAULT_INJECTION: forcing a failure. [ 757.348505][T18494] name failslab, interval 1, probability 0, space 0, times 0 [ 757.361465][T18494] CPU: 0 UID: 0 PID: 18494 Comm: syz.4.2564 Tainted: G U L syzkaller #0 PREEMPT(full) [ 757.361491][T18494] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 757.361501][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.361510][T18494] Call Trace: [ 757.361515][T18494] [ 757.361521][T18494] dump_stack_lvl+0x100/0x190 [ 757.361554][T18494] should_fail_ex.cold+0x5/0xa [ 757.361572][T18494] should_failslab+0xc2/0x120 [ 757.361588][T18494] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 757.361609][T18494] ? security_inode_alloc+0x3b/0x2c0 [ 757.361673][T18494] ? lockdep_init_map_type+0x5c/0x250 [ 757.361696][T18494] security_inode_alloc+0x3b/0x2c0 [ 757.361718][T18494] inode_init_always_gfp+0xced/0x1040 [ 757.361736][T18494] alloc_inode+0x8e/0x250 [ 757.361754][T18494] path_from_stashed+0x25b/0x750 [ 757.361769][T18494] ? do_raw_spin_unlock+0x145/0x1e0 [ 757.361793][T18494] ns_get_path+0x60/0x80 [ 757.361807][T18494] proc_ns_get_link+0x121/0x230 [ 757.361828][T18494] ? __pfx_proc_ns_get_link+0x10/0x10 [ 757.361849][T18494] ? atime_needs_update+0x8b/0x6b0 [ 757.361870][T18494] pick_link+0xd17/0x13c0 [ 757.361889][T18494] ? __pfx_proc_ns_get_link+0x10/0x10 [ 757.361911][T18494] step_into_slowpath+0x9ba/0xf90 [ 757.361935][T18494] ? __pfx_step_into_slowpath+0x10/0x10 [ 757.361955][T18494] ? find_held_lock+0x2b/0x80 [ 757.361978][T18494] path_openat+0xf95/0x31a0 [ 757.361999][T18494] ? __pfx_path_openat+0x10/0x10 [ 757.362020][T18494] do_file_open+0x20e/0x430 [ 757.362036][T18494] ? __pfx_do_file_open+0x10/0x10 [ 757.362063][T18494] ? alloc_fd+0x476/0x790 [ 757.362079][T18494] ? do_getname+0x191/0x390 [ 757.362098][T18494] do_sys_openat2+0x10d/0x1e0 [ 757.362118][T18494] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.362144][T18494] __x64_sys_openat+0x12d/0x210 [ 757.362163][T18494] ? __pfx___x64_sys_openat+0x10/0x10 [ 757.362189][T18494] do_syscall_64+0x106/0xf80 [ 757.362207][T18494] ? clear_bhb_loop+0x40/0x90 [ 757.362225][T18494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.362239][T18494] RIP: 0033:0x7f47f0b5cfce [ 757.362254][T18494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.362268][T18494] RSP: 002b:00007f47f1a0fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 757.362282][T18494] RAX: ffffffffffffffda RBX: 00007f47f1a106c0 RCX: 00007f47f0b5cfce [ 757.362292][T18494] RDX: 0000000000000002 RSI: 00007f47f1a0ff90 RDI: ffffffffffffff9c [ 757.362302][T18494] RBP: 00007f47f0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 757.362311][T18494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.362319][T18494] R13: 00007f47f0e16038 R14: 00007f47f0e15fa0 R15: 00007ffca4a87758 [ 757.362338][T18494] [ 759.904035][T18532] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 759.993956][T18536] netlink: 'syz.1.2572': attribute type 16 has an invalid length. [ 760.044094][T18536] netlink: 294 bytes leftover after parsing attributes in process `syz.1.2572'. [ 760.093635][T18539] input: jJǸ-9%vhǙn?aԙ/rk [ 760.093635][T18539] l6x b6Yh$X.=_ as /devices/virtual/input/input28 [ 760.784096][T18539] zswap: compressor  not available [ 761.435133][T18386] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 763.099424][T18591] NFSD: Failed to start, no listeners configured. [ 764.736493][T18615] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2590'. [ 764.820534][T18615] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.828029][T18615] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.519162][T18637] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2595'. [ 767.676472][T18654] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2600'. [ 769.509542][T18683] netlink: 'syz.5.2609': attribute type 4 has an invalid length. [ 769.620762][T18683] netlink: 'syz.5.2609': attribute type 1 has an invalid length. [ 769.823330][T18683] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2609'. [ 769.914208][T18687] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2609'. [ 772.110335][ T30] audit: type=1800 audit(4294973834.033:26): pid=18727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2618" name="SYSV0000000a" dev="tmpfs" ino=0 res=0 errno=0 [ 772.254958][T18723] can: request_module (can-proto-0) failed. [ 775.396471][T18763] zswap: compressor not available [ 777.994978][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 778.286473][T18800] NFSD: Failed to start, no listeners configured. [ 779.211301][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 779.494741][T18844] Process accounting paused [ 779.706455][T18849] vivid-007: ================= START STATUS ================= [ 779.738474][T18834] NFSD: Failed to start, no listeners configured. [ 779.774432][T18849] vivid-007: Generate PTS: true [ 779.806405][T18849] vivid-007: Generate SCR: true [ 779.849306][T18849] tpg source WxH: 320x240 (Y'CbCr) [ 779.872957][T18849] tpg field: 1 [ 779.876357][T18849] tpg crop: (0,0)/320x240 [ 779.976472][T18849] tpg compose: (0,0)/320x240 [ 780.050502][T18849] tpg colorspace: 8 [ 780.088316][T18849] tpg transfer function: 0/0 [ 780.180837][T18849] tpg Y'CbCr encoding: 0/0 [ 780.185280][T18849] tpg quantization: 0/0 [ 780.289592][T18849] tpg RGB range: 0/2 [ 780.327921][T18838] NFSD: Failed to start, no listeners configured. [ 780.357576][T18849] vivid-007: ================== END STATUS ================== [ 780.789053][T18864] FAULT_INJECTION: forcing a failure. [ 780.789053][T18864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.002874][T18868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2646'. [ 781.075533][T18864] CPU: 0 UID: 0 PID: 18864 Comm: syz.3.2645 Tainted: G U L syzkaller #0 PREEMPT(full) [ 781.075560][T18864] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 781.075565][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 781.075574][T18864] Call Trace: [ 781.075579][T18864] [ 781.075585][T18864] dump_stack_lvl+0x100/0x190 [ 781.075610][T18864] should_fail_ex.cold+0x5/0xa [ 781.075628][T18864] _copy_to_user+0x32/0xd0 [ 781.075644][T18864] simple_read_from_buffer+0xcb/0x170 [ 781.075667][T18864] proc_fail_nth_read+0x1af/0x230 [ 781.075686][T18864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.075711][T18864] ? rw_verify_area+0xce/0x6d0 [ 781.075730][T18864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.075747][T18864] vfs_read+0x1e4/0xb30 [ 781.075770][T18864] ? __pfx_vfs_read+0x10/0x10 [ 781.075790][T18864] ? __fget_files+0x215/0x3d0 [ 781.075807][T18864] ? __fget_files+0x21f/0x3d0 [ 781.075825][T18864] ksys_read+0x12a/0x250 [ 781.075846][T18864] ? __pfx_ksys_read+0x10/0x10 [ 781.075872][T18864] do_syscall_64+0x106/0xf80 [ 781.075889][T18864] ? clear_bhb_loop+0x40/0x90 [ 781.075907][T18864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.075921][T18864] RIP: 0033:0x7faf4895cfce [ 781.075934][T18864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 781.075947][T18864] RSP: 002b:00007faf498dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.075961][T18864] RAX: ffffffffffffffda RBX: 00007faf498e06c0 RCX: 00007faf4895cfce [ 781.075970][T18864] RDX: 000000000000000f RSI: 00007faf498e00a0 RDI: 0000000000000005 [ 781.075979][T18864] RBP: 00007faf498e0090 R08: 0000000000000000 R09: 0000000000000000 [ 781.075987][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.075995][T18864] R13: 00007faf48c16038 R14: 00007faf48c15fa0 R15: 00007ffd96e2d518 [ 781.076014][T18864] [ 782.498417][T18868] bond0: (slave bond_slave_1): Releasing backup interface [ 782.917409][T18894] input: f as /devices/virtual/input/input29 [ 783.191144][T18900] FAULT_INJECTION: forcing a failure. [ 783.191144][T18900] name fail_futex, interval 1, probability 0, space 0, times 0 [ 783.268717][T18900] CPU: 0 UID: 0 PID: 18900 Comm: syz.1.2654 Tainted: G U L syzkaller #0 PREEMPT(full) [ 783.268746][T18900] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 783.268751][T18900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.268759][T18900] Call Trace: [ 783.268765][T18900] [ 783.268771][T18900] dump_stack_lvl+0x100/0x190 [ 783.268799][T18900] should_fail_ex.cold+0x5/0xa [ 783.268818][T18900] get_futex_key+0x1d2/0x1620 [ 783.268838][T18900] ? __pfx_get_futex_key+0x10/0x10 [ 783.268862][T18900] futex_wake+0xea/0x530 [ 783.268888][T18900] ? __pfx_futex_wake+0x10/0x10 [ 783.268912][T18900] ? putname+0xb1/0x110 [ 783.268927][T18900] ? kmem_cache_free+0x124/0x6a0 [ 783.268951][T18900] do_futex+0x32b/0x350 [ 783.268969][T18900] ? __pfx_do_futex+0x10/0x10 [ 783.268986][T18900] ? __pfx_do_sys_openat2+0x10/0x10 [ 783.269006][T18900] ? __fget_files+0x21f/0x3d0 [ 783.269021][T18900] __x64_sys_futex+0x34f/0x4d0 [ 783.269040][T18900] ? __x64_sys_openat+0x12d/0x210 [ 783.269059][T18900] ? __pfx___x64_sys_futex+0x10/0x10 [ 783.269084][T18900] do_syscall_64+0x106/0xf80 [ 783.269101][T18900] ? clear_bhb_loop+0x40/0x90 [ 783.269119][T18900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.269134][T18900] RIP: 0033:0x7f9e8f99c799 [ 783.269162][T18900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.269179][T18900] RSP: 002b:00007f9e9091d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 783.269194][T18900] RAX: ffffffffffffffda RBX: 00007f9e8fc16098 RCX: 00007f9e8f99c799 [ 783.269211][T18900] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9e8fc1609c [ 783.269220][T18900] RBP: 00007f9e8fc16090 R08: 0000000000000000 R09: 0000000000000000 [ 783.269229][T18900] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 783.269238][T18900] R13: 00007f9e8fc16128 R14: 00007ffe91beaab0 R15: 00007ffe91beab98 [ 783.269259][T18900] [ 785.494808][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 785.712074][T18931] can: request_module (can-proto-3) failed. [ 789.072760][T18386] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 789.195419][T18970] openvswitch: netlink: Multiple metadata blocks provided [ 793.943816][T18386] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 797.494049][T19056] can: request_module (can-proto-0) failed. [ 799.593902][T19078] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 799.664461][T19078] FAULT_INJECTION: forcing a failure. [ 799.664461][T19078] name failslab, interval 1, probability 0, space 0, times 0 [ 799.761450][T19078] CPU: 0 UID: 0 PID: 19078 Comm: syz.4.2692 Tainted: G U L syzkaller #0 PREEMPT(full) [ 799.761480][T19078] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 799.761486][T19078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.761496][T19078] Call Trace: [ 799.761501][T19078] [ 799.761508][T19078] dump_stack_lvl+0x100/0x190 [ 799.761536][T19078] should_fail_ex.cold+0x5/0xa [ 799.761557][T19078] should_failslab+0xc2/0x120 [ 799.761572][T19078] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 799.761594][T19078] ? ptlock_alloc+0x1f/0x70 [ 799.761618][T19078] ptlock_alloc+0x1f/0x70 [ 799.761636][T19078] pte_alloc_one+0x84/0x3e0 [ 799.761654][T19078] __pte_alloc+0x6d/0x3f0 [ 799.761668][T19078] ? __pfx___pte_alloc+0x10/0x10 [ 799.761683][T19078] ? _raw_spin_unlock+0x28/0x50 [ 799.761699][T19078] ? __pmd_alloc+0x6aa/0x9c0 [ 799.761717][T19078] move_page_tables+0x257e/0x4500 [ 799.761739][T19078] ? __pfx_copy_vma+0x10/0x10 [ 799.761766][T19078] ? __pfx_move_page_tables+0x10/0x10 [ 799.761801][T19078] copy_vma_and_data+0x25c/0x7c0 [ 799.761823][T19078] ? __pfx_copy_vma_and_data+0x10/0x10 [ 799.761851][T19078] ? __vma_start_write+0x17f/0x280 [ 799.761870][T19078] ? __pfx___vma_start_write+0x10/0x10 [ 799.761887][T19078] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 799.761916][T19078] move_vma+0x51b/0x1890 [ 799.761939][T19078] ? __pfx_move_vma+0x10/0x10 [ 799.761960][T19078] ? thp_get_unmapped_area_vmflags+0x27f/0x2d0 [ 799.761980][T19078] ? cap_mmap_addr+0x4b/0x120 [ 799.762001][T19078] ? bpf_lsm_mmap_addr+0x9/0x30 [ 799.762053][T19078] ? security_mmap_addr+0x71/0x1e0 [ 799.762070][T19078] ? __get_unmapped_area+0x255/0x3e0 [ 799.762088][T19078] ? vrm_set_new_addr+0x204/0x290 [ 799.762110][T19078] mremap_to+0x1b7/0x450 [ 799.762131][T19078] do_mremap+0xb76/0x2130 [ 799.762159][T19078] ? __pfx_do_mremap+0x10/0x10 [ 799.762183][T19078] ? ksys_write+0x190/0x250 [ 799.762202][T19078] __do_sys_mremap+0x126/0x170 [ 799.762222][T19078] ? __pfx___do_sys_mremap+0x10/0x10 [ 799.762248][T19078] ? __x64_sys_futex+0x34f/0x4d0 [ 799.762277][T19078] do_syscall_64+0x106/0xf80 [ 799.762303][T19078] ? clear_bhb_loop+0x40/0x90 [ 799.762322][T19078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.762337][T19078] RIP: 0033:0x7f47f0b9c799 [ 799.762352][T19078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.762366][T19078] RSP: 002b:00007f47f1a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 799.762381][T19078] RAX: ffffffffffffffda RBX: 00007f47f0e15fa0 RCX: 00007f47f0b9c799 [ 799.762391][T19078] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 000000110c231000 [ 799.762400][T19078] RBP: 00007f47f0c32bd9 R08: 0000000100000000 R09: 0000000000000000 [ 799.762409][T19078] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 799.762418][T19078] R13: 00007f47f0e16038 R14: 00007f47f0e15fa0 R15: 00007ffca4a87758 [ 799.762439][T19078] [ 802.433360][T19104] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2700'. [ 806.257239][T19170] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2713'. [ 806.344686][T19173] pim6reg: entered allmulticast mode [ 808.825136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.831578][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.069130][T19206] FAULT_INJECTION: forcing a failure. [ 809.069130][T19206] name failslab, interval 1, probability 0, space 0, times 0 [ 809.413481][T19206] CPU: 0 UID: 0 PID: 19206 Comm: syz.1.2721 Tainted: G U L syzkaller #0 PREEMPT(full) [ 809.413510][T19206] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 809.413516][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.413525][T19206] Call Trace: [ 809.413531][T19206] [ 809.413537][T19206] dump_stack_lvl+0x100/0x190 [ 809.413566][T19206] should_fail_ex.cold+0x5/0xa [ 809.413585][T19206] should_failslab+0xc2/0x120 [ 809.413600][T19206] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 809.413623][T19206] ? __proc_create+0x2cb/0x8c0 [ 809.413653][T19206] __proc_create+0x2cb/0x8c0 [ 809.413682][T19206] ? __pfx___proc_create+0x10/0x10 [ 809.413709][T19206] ? mark_held_locks+0x40/0x70 [ 809.413729][T19206] _proc_mkdir+0xb9/0x210 [ 809.413743][T19206] ? __pfx__proc_mkdir+0x10/0x10 [ 809.413756][T19206] ? sctp_defaults_init+0x720/0xd90 [ 809.413781][T19206] sctp_proc_init+0x59/0x270 [ 809.413799][T19206] ? __pfx_sctp_defaults_init+0x10/0x10 [ 809.413816][T19206] sctp_defaults_init+0x758/0xd90 [ 809.413835][T19206] ? __pfx_sctp_defaults_init+0x10/0x10 [ 809.413853][T19206] ops_init+0x1e2/0x5f0 [ 809.413875][T19206] setup_net+0x118/0x3a0 [ 809.413894][T19206] ? __pfx_setup_net+0x10/0x10 [ 809.413910][T19206] ? lockdep_init_map_type+0x5c/0x250 [ 809.413930][T19206] ? mutex_init_lockep+0x110/0x150 [ 809.413954][T19206] copy_net_ns+0x46f/0x7c0 [ 809.413976][T19206] create_new_namespaces+0x3ea/0xac0 [ 809.413997][T19206] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 809.414014][T19206] ksys_unshare+0x473/0xad0 [ 809.414033][T19206] ? __pfx_ksys_unshare+0x10/0x10 [ 809.414057][T19206] __x64_sys_unshare+0x31/0x40 [ 809.414075][T19206] do_syscall_64+0x106/0xf80 [ 809.414092][T19206] ? clear_bhb_loop+0x40/0x90 [ 809.414109][T19206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.414125][T19206] RIP: 0033:0x7f9e8f99c799 [ 809.414138][T19206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.414152][T19206] RSP: 002b:00007f9e9091d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 809.414166][T19206] RAX: ffffffffffffffda RBX: 00007f9e8fc16090 RCX: 00007f9e8f99c799 [ 809.414177][T19206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 809.414186][T19206] RBP: 00007f9e8fa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 809.414195][T19206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.414204][T19206] R13: 00007f9e8fc16128 R14: 00007f9e8fc16090 R15: 00007ffe91beab98 [ 809.414224][T19206] [ 810.068691][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2723'. [ 813.047892][T19201] Process accounting resumed [ 814.140309][T19272] bridge0: port 3(gretap0) entered blocking state [ 814.184128][T19272] bridge0: port 3(gretap0) entered disabled state [ 814.190696][T19272] gretap0: entered allmulticast mode [ 814.281917][T19272] gretap0: entered promiscuous mode [ 814.313526][T19272] bridge0: port 3(gretap0) entered blocking state [ 814.320074][T19272] bridge0: port 3(gretap0) entered forwarding state [ 815.063642][T19285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2742'. [ 819.805162][T19342] ubi0: attaching mtd0 [ 819.930402][T19342] ubi0: scanning is finished [ 819.965583][T19342] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 820.010843][T19343] : entered promiscuous mode [ 821.270902][T19342] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 823.810738][T19371] can: request_module (can-proto-0) failed. [ 824.634330][T19385] FAULT_INJECTION: forcing a failure. [ 824.634330][T19385] name failslab, interval 1, probability 0, space 0, times 0 [ 824.692250][T19387] usb usb37: usbfs: process 19387 (syz.4.2764) did not claim interface 0 before use [ 824.735417][T19385] CPU: 0 UID: 0 PID: 19385 Comm: syz.3.2763 Tainted: G U L syzkaller #0 PREEMPT(full) [ 824.735447][T19385] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 824.735453][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 824.735462][T19385] Call Trace: [ 824.735467][T19385] [ 824.735474][T19385] dump_stack_lvl+0x100/0x190 [ 824.735503][T19385] should_fail_ex.cold+0x5/0xa [ 824.735522][T19385] ? process_preds+0x4c2/0x1d90 [ 824.735543][T19385] should_failslab+0xc2/0x120 [ 824.735567][T19385] __kmalloc_noprof+0xe0/0x850 [ 824.735593][T19385] process_preds+0x4c2/0x1d90 [ 824.735620][T19385] ? create_filter_start.constprop.0+0x134/0x310 [ 824.735645][T19385] create_filter+0x140/0x210 [ 824.735668][T19385] ? __pfx_create_filter+0x10/0x10 [ 824.735692][T19385] ? find_held_lock+0x2b/0x80 [ 824.735709][T19385] apply_event_filter+0x220/0x500 [ 824.735732][T19385] ? __pfx_apply_event_filter+0x10/0x10 [ 824.735759][T19385] event_filter_write+0x16d/0x290 [ 824.735778][T19385] vfs_write+0x2aa/0x1070 [ 824.735801][T19385] ? __pfx_event_filter_write+0x10/0x10 [ 824.735820][T19385] ? __pfx_vfs_write+0x10/0x10 [ 824.735841][T19385] ? __fget_files+0x215/0x3d0 [ 824.735860][T19385] ? __fget_files+0x21f/0x3d0 [ 824.735879][T19385] ksys_write+0x12a/0x250 [ 824.735892][T19385] ? __pfx_ksys_write+0x10/0x10 [ 824.735911][T19385] do_syscall_64+0x106/0xf80 [ 824.735929][T19385] ? clear_bhb_loop+0x40/0x90 [ 824.735947][T19385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.735962][T19385] RIP: 0033:0x7faf4899c799 [ 824.735976][T19385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.735991][T19385] RSP: 002b:00007faf498e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 824.736006][T19385] RAX: ffffffffffffffda RBX: 00007faf48c15fa0 RCX: 00007faf4899c799 [ 824.736016][T19385] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 824.736024][T19385] RBP: 00007faf48a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 824.736033][T19385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.736041][T19385] R13: 00007faf48c16038 R14: 00007faf48c15fa0 R15: 00007ffd96e2d518 [ 824.736062][T19385] [ 825.774967][T19398] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 830.181749][T18386] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 830.421773][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 831.877100][T19492] can: request_module (can-proto-0) failed. [ 833.943373][T19523] mmap: syz.3.2800 (19523): VmData 46010368 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 834.495057][T19529] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2801'. [ 837.453693][T19582] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2816'. [ 837.905300][T19588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2820'. [ 838.006401][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 838.119872][T19594] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2819'. [ 840.502120][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2829'. [ 841.200782][T19649] netlink: zone id is out of range [ 841.307344][T19657] netlink: zone id is out of range [ 841.354993][T19649] netlink: zone id is out of range [ 841.477487][T19657] netlink: zone id is out of range [ 841.535399][T19649] netlink: zone id is out of range [ 841.540531][T19649] netlink: zone id is out of range [ 841.619759][T19657] netlink: zone id is out of range [ 841.659515][T19657] netlink: zone id is out of range [ 841.776953][T19649] netlink: zone id is out of range [ 841.919998][T19657] netlink: zone id is out of range [ 849.174015][T19804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 850.372098][T19823] zswap: compressor not available [ 850.935203][T19846] nvme_fcloop: unknown parameter or missing value './file0' [ 852.041724][T19848] can: request_module (can-proto-0) failed. [ 852.209686][T19862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2876'. [ 853.863770][T19881] FAULT_INJECTION: forcing a failure. [ 853.863770][T19881] name failslab, interval 1, probability 0, space 0, times 0 [ 854.040619][T19883] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 854.090593][T19881] CPU: 0 UID: 0 PID: 19881 Comm: syz.1.2880 Tainted: G U L syzkaller #0 PREEMPT(full) [ 854.090622][T19881] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 854.090629][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 854.090638][T19881] Call Trace: [ 854.090644][T19881] [ 854.090650][T19881] dump_stack_lvl+0x100/0x190 [ 854.090679][T19881] should_fail_ex.cold+0x5/0xa [ 854.090697][T19881] should_failslab+0xc2/0x120 [ 854.090713][T19881] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 854.090734][T19881] ? skb_clone+0x190/0x400 [ 854.090757][T19881] skb_clone+0x190/0x400 [ 854.090776][T19881] netlink_deliver_tap+0xaed/0xcc0 [ 854.090886][T19881] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 854.090956][T19881] netlink_dump+0xa60/0xd30 [ 854.090977][T19881] ? __pfx_netlink_dump+0x10/0x10 [ 854.090996][T19881] ? kasan_quarantine_put+0x104/0x240 [ 854.091028][T19881] ? kfree_skbmem+0x19f/0x210 [ 854.091052][T19881] netlink_recvmsg+0x7dc/0xa90 [ 854.091071][T19881] ? __pfx_netlink_recvmsg+0x10/0x10 [ 854.091093][T19881] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 854.091114][T19881] ? __pfx_netlink_recvmsg+0x10/0x10 [ 854.091133][T19881] sock_recvmsg+0x1a4/0x1f0 [ 854.091156][T19881] ____sys_recvmsg+0x218/0x640 [ 854.091180][T19881] ? __pfx_____sys_recvmsg+0x10/0x10 [ 854.091209][T19881] ? __lock_acquire+0x4a5/0x2630 [ 854.091227][T19881] ? preempt_schedule_common+0x42/0xc0 [ 854.091248][T19881] ___sys_recvmsg+0x16a/0x1a0 [ 854.091273][T19881] ? __pfx____sys_recvmsg+0x10/0x10 [ 854.091297][T19881] ? find_held_lock+0x2b/0x80 [ 854.091331][T19881] do_recvmmsg+0x301/0x760 [ 854.091357][T19881] ? __pfx_do_recvmmsg+0x10/0x10 [ 854.091385][T19881] ? do_futex+0x192/0x350 [ 854.091412][T19881] ? __x64_sys_futex+0x34f/0x4d0 [ 854.091433][T19881] __x64_sys_recvmmsg+0x22a/0x280 [ 854.091453][T19881] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 854.091477][T19881] do_syscall_64+0x106/0xf80 [ 854.091494][T19881] ? clear_bhb_loop+0x40/0x90 [ 854.091512][T19881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.091527][T19881] RIP: 0033:0x7f9e8f99c799 [ 854.091541][T19881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.091559][T19881] RSP: 002b:00007f9e9093e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 854.091573][T19881] RAX: ffffffffffffffda RBX: 00007f9e8fc15fa0 RCX: 00007f9e8f99c799 [ 854.091583][T19881] RDX: 00000000fffffff9 RSI: 0000000000000000 RDI: 0000000000000005 [ 854.091592][T19881] RBP: 00007f9e8fa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 854.091601][T19881] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 854.091610][T19881] R13: 00007f9e8fc16038 R14: 00007f9e8fc15fa0 R15: 00007ffe91beab98 [ 854.091630][T19881] [ 856.014095][T19883] netlink: 318 bytes leftover after parsing attributes in process `syz.1.2880'. [ 856.475281][T19890] ovs_: entered promiscuous mode [ 857.780209][T19925] FAULT_INJECTION: forcing a failure. [ 857.780209][T19925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.887615][T19925] CPU: 0 UID: 0 PID: 19925 Comm: syz.1.2889 Tainted: G U L syzkaller #0 PREEMPT(full) [ 857.887644][T19925] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 857.887650][T19925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 857.887660][T19925] Call Trace: [ 857.887665][T19925] [ 857.887672][T19925] dump_stack_lvl+0x100/0x190 [ 857.887700][T19925] should_fail_ex.cold+0x5/0xa [ 857.887719][T19925] _copy_from_user+0x2e/0xd0 [ 857.887734][T19925] copy_mount_options+0x76/0x190 [ 857.887756][T19925] __x64_sys_mount+0x1ab/0x310 [ 857.887774][T19925] ? __pfx___x64_sys_mount+0x10/0x10 [ 857.887797][T19925] do_syscall_64+0x106/0xf80 [ 857.887815][T19925] ? clear_bhb_loop+0x40/0x90 [ 857.887832][T19925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.887847][T19925] RIP: 0033:0x7f9e8f99c799 [ 857.887860][T19925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.887881][T19925] RSP: 002b:00007f9e9091d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.887897][T19925] RAX: ffffffffffffffda RBX: 00007f9e8fc16090 RCX: 00007f9e8f99c799 [ 857.887907][T19925] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 857.887916][T19925] RBP: 00007f9e8fa32bd9 R08: 0000200000000280 R09: 0000000000000000 [ 857.887925][T19925] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 857.887934][T19925] R13: 00007f9e8fc16128 R14: 00007f9e8fc16090 R15: 00007ffe91beab98 [ 857.887954][T19925] [ 862.006239][T20024] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2918'. [ 862.556062][T20030] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 862.703233][T20041] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2922'. [ 862.911473][T20041] bridge0: port 3(gretap0) entered disabled state [ 862.918131][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.925417][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.509716][T20039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 863.556941][T20039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 863.620353][T20039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 863.660606][T20039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 864.984126][ T9803] Bluetooth: hci4: command 0x0c1a tx timeout [ 865.621493][ T9803] Bluetooth: hci0: command 0x0c1a tx timeout [ 865.711327][ T9803] Bluetooth: hci2: command 0x0c1a tx timeout [ 865.717382][ T9803] Bluetooth: hci3: command 0x0c1a tx timeout [ 868.452923][T20121] zswap: compressor not available [ 868.517423][T20122] zswap: compressor not available [ 869.705143][T20134] FAULT_INJECTION: forcing a failure. [ 869.705143][T20134] name fail_futex, interval 1, probability 0, space 0, times 0 [ 869.944819][T20134] CPU: 0 UID: 0 PID: 20134 Comm: syz.3.2939 Tainted: G U L syzkaller #0 PREEMPT(full) [ 869.944848][T20134] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 869.944853][T20134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 869.944863][T20134] Call Trace: [ 869.944868][T20134] [ 869.944874][T20134] dump_stack_lvl+0x100/0x190 [ 869.944903][T20134] should_fail_ex.cold+0x5/0xa [ 869.944923][T20134] get_futex_key+0x1d2/0x1620 [ 869.944944][T20134] ? __pfx_get_futex_key+0x10/0x10 [ 869.944964][T20134] ? __fget_files+0x21f/0x3d0 [ 869.944982][T20134] futex_wake+0xea/0x530 [ 869.945005][T20134] ? __pfx_futex_wake+0x10/0x10 [ 869.945027][T20134] ? __pfx_do_recvmmsg+0x10/0x10 [ 869.945051][T20134] ? errseq_sample+0x51/0x70 [ 869.945070][T20134] do_futex+0x32b/0x350 [ 869.945089][T20134] ? __pfx_do_futex+0x10/0x10 [ 869.945112][T20134] __x64_sys_futex+0x34f/0x4d0 [ 869.945133][T20134] ? __pfx___x64_sys_futex+0x10/0x10 [ 869.945152][T20134] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 869.945176][T20134] do_syscall_64+0x106/0xf80 [ 869.945194][T20134] ? clear_bhb_loop+0x40/0x90 [ 869.945212][T20134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.945227][T20134] RIP: 0033:0x7faf4899c799 [ 869.945240][T20134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.945254][T20134] RSP: 002b:00007faf498e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 869.945269][T20134] RAX: ffffffffffffffda RBX: 00007faf48c15fa8 RCX: 00007faf4899c799 [ 869.945278][T20134] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf48c15fac [ 869.945287][T20134] RBP: 00007faf48c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 869.945296][T20134] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 869.945306][T20134] R13: 00007faf48c16038 R14: 00007ffd96e2d430 R15: 00007ffd96e2d518 [ 869.945325][T20134] [ 870.501659][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.516193][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 975.501223][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 975.508199][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20135/1:b..l [ 975.516663][ C0] rcu: (detected by 0, t=10502 jiffies, g=115825, q=1678 ncpus=1) [ 975.524532][ C0] task:syz.5.2938 state:R running task stack:28160 pid:20135 tgid:20131 ppid:12936 task_flags:0x400140 flags:0x00080002 [ 975.539029][ C0] Call Trace: [ 975.542305][ C0] [ 975.545223][ C0] __schedule+0xfee/0x6120 [ 975.549627][ C0] ? finish_task_switch.isra.0+0x205/0xb80 [ 975.555420][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 975.560607][ C0] ? __schedule+0x1000/0x6120 [ 975.565266][ C0] ? __pfx___schedule+0x10/0x10 [ 975.570099][ C0] ? rcu_is_watching+0x12/0xc0 [ 975.574854][ C0] preempt_schedule_irq+0x50/0x90 [ 975.579862][ C0] irqentry_exit+0x17b/0x670 [ 975.584441][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 975.590406][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 975.595593][ C0] Code: 05 fb f8 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 74 f5 0e 0f 82 c2 02 00 00 8b 35 8e a8 f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d f8 28 12 0f 85 02 03 00 00 48 83 c4 [ 975.615183][ C0] RSP: 0018:ffffc90000bb7908 EFLAGS: 00000206 [ 975.621239][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 975.629193][ C0] RDX: 0000000000000000 RSI: ffffffff8de57650 RDI: ffffffff8c1af920 [ 975.637144][ C0] RBP: ffffffff8e7e9220 R08: 0000000086db7919 R09: 0000000000000007 [ 975.645102][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 975.653055][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 975.661023][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 975.666236][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 975.671415][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 975.677552][ C0] unwind_next_frame+0xd1/0x1ea0 [ 975.682472][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 975.687564][ C0] ? kimage_alloc_control_pages+0x3f2/0xa20 [ 975.693441][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 975.699582][ C0] arch_stack_walk+0x94/0xf0 [ 975.704160][ C0] ? kimage_alloc_control_pages+0x3f2/0xa20 [ 975.710037][ C0] stack_trace_save+0x8e/0xc0 [ 975.714697][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 975.720053][ C0] ? __lock_acquire+0x4a5/0x2630 [ 975.724977][ C0] save_stack+0x162/0x1e0 [ 975.729298][ C0] ? __pfx_save_stack+0x10/0x10 [ 975.734141][ C0] ? __free_frozen_pages+0x7e1/0x10d0 [ 975.739497][ C0] ? kimage_free_page_list+0x130/0x240 [ 975.744935][ C0] ? kimage_alloc_control_pages+0x3f2/0xa20 [ 975.750815][ C0] ? page_ext_put+0x3e/0xd0 [ 975.755308][ C0] __reset_page_owner+0x84/0x190 [ 975.760228][ C0] __free_frozen_pages+0x7e1/0x10d0 [ 975.765414][ C0] kimage_free_page_list+0x130/0x240 [ 975.770682][ C0] kimage_alloc_control_pages+0x3f2/0xa20 [ 975.776388][ C0] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 975.782616][ C0] do_kexec_load+0x275/0x810 [ 975.787193][ C0] ? __pfx_do_kexec_load+0x10/0x10 [ 975.792288][ C0] ? _copy_from_user+0x59/0xd0 [ 975.797035][ C0] __x64_sys_kexec_load+0x1bf/0x230 [ 975.802239][ C0] do_syscall_64+0x106/0xf80 [ 975.806816][ C0] ? clear_bhb_loop+0x40/0x90 [ 975.811480][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.817356][ C0] RIP: 0033:0x7fa70ff9c799 [ 975.821751][ C0] RSP: 002b:00007fa710f36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 975.830147][ C0] RAX: ffffffffffffffda RBX: 00007fa710215fa0 RCX: 00007fa70ff9c799 [ 975.838098][ C0] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 975.846050][ C0] RBP: 00007fa710032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 975.854006][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 975.861957][ C0] R13: 00007fa710216038 R14: 00007fa710215fa0 R15: 00007ffe47ade8f8 [ 975.869926][ C0] [ 975.872942][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g115825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 975.885328][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=64460 [ 975.893194][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g115825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 975.904640][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 975.914601][ C0] rcu: RCU grace-period kthread stack dump: [ 975.920471][ C0] task:rcu_preempt state:I stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 975.932373][ C0] Call Trace: [ 975.935634][ C0] [ 975.938549][ C0] __schedule+0xfee/0x6120 [ 975.942955][ C0] ? __lock_acquire+0x4a5/0x2630 [ 975.947888][ C0] ? __pfx___schedule+0x10/0x10 [ 975.952719][ C0] ? find_held_lock+0x2b/0x80 [ 975.957399][ C0] ? schedule+0x2bf/0x390 [ 975.961717][ C0] schedule+0xdd/0x390 [ 975.965783][ C0] schedule_timeout+0x127/0x280 [ 975.970622][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 975.975986][ C0] ? __pfx_process_timeout+0x10/0x10 [ 975.981271][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 975.987081][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 975.992529][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 975.997296][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 976.002569][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 976.007492][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 976.012671][ C0] ? rcu_is_watching+0x12/0xc0 [ 976.017424][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 976.023218][ C0] rcu_gp_kthread+0x179/0x230 [ 976.027877][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 976.033060][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 976.038849][ C0] ? __kthread_parkme+0x18c/0x230 [ 976.043855][ C0] ? kthread+0x13a/0x450 [ 976.048080][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 976.053258][ C0] kthread+0x370/0x450 [ 976.057328][ C0] ? __pfx_kthread+0x10/0x10 [ 976.061937][ C0] ret_from_fork+0x754/0xd80 [ 976.066531][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 976.071640][ C0] ? __switch_to+0x7b4/0x1120 [ 976.076301][ C0] ? __pfx_kthread+0x10/0x10 [ 976.080880][ C0] ret_from_fork_asm+0x1a/0x30 [ 976.085640][ C0] [ 976.088641][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 976.094948][ C0] CPU: 0 UID: 0 PID: 1300 Comm: aoe_tx0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 976.105515][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 976.110686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.120723][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 976.127124][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8a 54 f6 48 89 df e8 be da 54 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 fa 44 f6 65 8b 05 5e 7e 7d 08 85 c0 74 16 5b [ 976.146713][ C0] RSP: 0018:ffffc9000573f968 EFLAGS: 00000246 [ 976.152761][ C0] RAX: 0000000000000006 RBX: ffffffff9b48d7c0 RCX: 0000000000000004 [ 976.160713][ C0] RDX: 0000000000000000 RSI: ffffffff8de7d6b1 RDI: ffffffff8c1af920 [ 976.168666][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 976.176621][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f515da0 [ 976.184569][ C0] R13: ffffffff9b48d8c8 R14: 0000000000000000 R15: ffffffff9b48d900 [ 976.192522][ C0] FS: 0000000000000000(0000) GS:ffff88812434b000(0000) knlGS:0000000000000000 [ 976.201435][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.208001][ C0] CR2: 00007f86125ce69c CR3: 0000000036636000 CR4: 00000000003526f0 [ 976.215955][ C0] Call Trace: [ 976.219219][ C0] [ 976.222131][ C0] uart_write_room+0x2d2/0x930 [ 976.226959][ C0] ? __pfx_uart_write_room+0x10/0x10 [ 976.232225][ C0] tty_write_room+0x66/0x90 [ 976.236715][ C0] handle_tx+0x14a/0x620 [ 976.241021][ C0] dev_hard_start_xmit+0x121/0x7d0 [ 976.246168][ C0] __dev_queue_xmit+0x32c1/0x4800 [ 976.251182][ C0] ? rcu_is_watching+0x12/0xc0 [ 976.255944][ C0] ? finish_task_switch.isra.0+0x205/0xb80 [ 976.261741][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 976.267112][ C0] ? __lock_acquire+0x4a5/0x2630 [ 976.272051][ C0] ? ref_tracker_free+0x37e/0x6c0 [ 976.277137][ C0] ? do_raw_spin_lock+0x128/0x260 [ 976.282154][ C0] ? find_held_lock+0x2b/0x80 [ 976.286810][ C0] ? skb_dequeue+0x126/0x180 [ 976.291389][ C0] ? skb_dequeue+0x126/0x180 [ 976.295964][ C0] ? find_held_lock+0x2b/0x80 [ 976.300627][ C0] ? tx+0xa4/0x130 [ 976.304403][ C0] ? rcu_is_watching+0x12/0xc0 [ 976.309159][ C0] ? __pfx_tx+0x10/0x10 [ 976.313301][ C0] tx+0xc4/0x130 [ 976.316832][ C0] kthread+0x1d8/0x3c0 [ 976.320939][ C0] ? __kthread_parkme+0xbb/0x230 [ 976.325862][ C0] ? __pfx_kthread+0x10/0x10 [ 976.330438][ C0] ? rcu_is_watching+0x12/0xc0 [ 976.335187][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 976.340974][ C0] ? __kthread_parkme+0x18c/0x230 [ 976.345984][ C0] ? kthread+0x13a/0x450 [ 976.350210][ C0] ? __pfx_kthread+0x10/0x10 [ 976.354787][ C0] kthread+0x370/0x450 [ 976.358859][ C0] ? __pfx_kthread+0x10/0x10 [ 976.363432][ C0] ret_from_fork+0x754/0xd80 [ 976.368010][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 976.373115][ C0] ? __switch_to+0x7b4/0x1120 [ 976.377777][ C0] ? __pfx_kthread+0x10/0x10 [ 976.382352][ C0] ret_from_fork_asm+0x1a/0x30 [ 976.387107][ C0]