last executing test programs: 10.784091955s ago: executing program 0 (id=2544): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40380, 0x0) connect$auto(0x3, 0x0, 0x50) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0x0) unshare$auto(0x40000080) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0c, 0x8, 0xffffffff, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x7fffffff, 0x291805d9]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x1, 0x2) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.459472485s ago: executing program 1 (id=2547): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = semctl$auto_GETPID(0x5, 0x1000, 0xb, 0x10001) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mkdir$auto(0x0, 0x4) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto_SO_WIFI_STATUS(r1, 0x4b, 0x29, &(0x7f0000000100)='\x00', 0x5) execveat$auto(r1, &(0x7f0000000080)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x0, 0x0, 0x7) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) write$auto(0x3, 0x0, 0x200ffd8) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r3, &(0x7f0000000240)=""/177, 0xb1) capset$auto(&(0x7f0000000040)={0x1, r0}, &(0x7f0000000080)={0x22f, 0x9, 0x1}) r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e00, 0x0) kcmp$auto(0x1, r4, 0x1, r5, 0x24000) r6 = socket(0x1a, 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sysfs$auto(0x2, 0x3b, 0x0) 8.794763892s ago: executing program 0 (id=2548): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40380, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0x0) unshare$auto(0x40000080) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d", 0x4b1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0c, 0x8, 0xffffffff, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x7fffffff, 0x291805d9]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x1, 0x2) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.786223659s ago: executing program 3 (id=2549): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800, 0x9) mmap$auto(0x8001, 0x400008, 0x2, 0x3b, 0x6, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000100)=0x200000a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(&(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x7, 0x5, 0x8}) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000100), 0xe077c8a035149f71, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, 0x0, 0x24000800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x88200, 0x2, 0x18, 0xc, 0xffffffffffffffff, 0x4000000002, 0x1}, 0x6f4) sysfs$auto(0x2, 0x3b, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0xc00, 0x2000000000002) r2 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0x10000f2b, r2, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.629533064s ago: executing program 1 (id=2550): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYBLOB="000127bd7000fc4f50f78df281039dd157c877ac6e2fc7dbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437023f69a5777674284501bd4661e84d7eeab5f94717d98d0624"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) mlockall$auto(0x2) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) setgroups$auto(0x5, &(0x7f00000000c0)=0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 8.571924152s ago: executing program 2 (id=2551): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b8008002600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r4, 0xc018620b, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) ioctl$auto(r6, 0x80dc5521, r7) write$auto(r5, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0xa, 0x400009, 0x6a1, 0x9b72, 0xffffffffffffffff, 0x8003) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x6) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) socket(0x80000000000000a, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x28102, 0x0) 7.725947353s ago: executing program 2 (id=2552): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop15\x00', 0x195601, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x11e, 0x20, 0x0, 0xffffffff) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0xfffe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') fchdir$auto(r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x189002, 0x0) sendfile$auto(r3, r3, 0x0, 0x27) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x5) mprotect$auto(0x1ffffffff003, 0x1000000000004, 0xa) ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x8000000000000001, &(0x7f00000001c0)="cfbe55225efe2b33c0d9a7dd96ab681fe2873353b708d3ae388039951f7c852f5ce1cbc6d5ec086fc4dff44264b041a056bfcfbe1157a310478738b0f47a7d4b6d9fe1bbf2d3a82bc864ac7a17b7f1dd9f7f449c2654a9d9e1080eb35e4e35413704559cacc15a31355cb69475374fcf8ed573e0e86185e832d7ca2baf4d96e843c976c495dcc75c3473e1d00a34a8d6eacbc8a5dfc464d160a7dbd09e0ec058399dae858fa4769e5c02a5016007cee9df9adfe06ad39d157371dd2cdd48e09c72e8bd53c1b850b73bdc6a2078a9f6e7a7a0605a") socketpair$auto(0x16, 0x1, 0xfffffffe, 0x0) keyctl$auto(0x21, 0x0, 0x6, 0x3, 0x7fff) ioctl$auto(r1, 0x7214, r0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 6.295519757s ago: executing program 0 (id=2553): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80000, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2202, 0x0) write$auto(r3, &(0x7f00000001c0)='7p\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0xc54748b24ee604b7, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sysfs$auto(0x2, 0x3b, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 6.16519732s ago: executing program 3 (id=2554): timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0xffff7ffc, &(0x7f0000000380)={{}, {0x800002000009, 0x4b}}, 0x0) timer_gettime$auto(0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$auto(r0, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) 6.141765432s ago: executing program 1 (id=2555): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4ed40, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) semget$auto(0x2, 0x1, 0x4) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2a742, 0x0) 6.095872439s ago: executing program 2 (id=2556): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x11) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/macvtap0/retrans_time_ms\x00', 0xe0283, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_RTC_AIE_OFF(r1, 0x7002, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x80\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+\x13\xc3\xc2g\x01JZ\xbb*U#e\x06\xb4\x99\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12l\x8d\b\xd1l9P\x10`\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xaeb\x1e\x06', 0x6b8, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000280)="83d17bfb75e1fa40914c932e17119970782465225a0917ee7ab16727f0dc3d291c18abbbbe4544a58fe7eb6620a354d17ee679480fc397bf725942ca4d2e3324a81ace3f1e8a6f057f3e779a03390bdb39a7c8e38032b48d46ea33f8b7f30b0a81780f00f5306a1d86a8d697ff213acc3d378b97e97b0998619a2849d7c66d2478a1812dabde422e0b61fcbbed2013a60bbd662b971b7fb9efdc02aceed5d3e0abfcef3a5c6b8e07b6fdfa904d", 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/wg1/accept_redirects\x00', 0x181c3, 0x0) sendfile$auto(r2, r2, 0x0, 0xfffffffffffffff9) clock_getres$auto(0x1ece, &(0x7f00000001c0)={0xfffffffffffffffa, 0x7656}) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x121142, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) mmap$auto(0x0, 0x20008, 0x4000400000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x5, 0x80007) pipe$auto(0x0) pipe$auto(0x0) vmsplice$auto(0x2, &(0x7f0000000100)={0x0, 0x47f}, 0x2e80, 0x10000) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x4000007f) unshare$auto(0x40000080) 5.4262284s ago: executing program 3 (id=2557): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="000127bd7000fc4f50f78df281039dd157c877ac6e2fc7dbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437023f69a5777674284501bd4661e84d7eeab5f94717d98d0624"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) mlockall$auto(0x2) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) setgroups$auto(0x5, &(0x7f00000000c0)=0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 4.104307603s ago: executing program 0 (id=2558): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40380, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0x0) unshare$auto(0x40000080) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0c, 0x8, 0xffffffff, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x7fffffff, 0x291805d9]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x1, 0x2) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.831423274s ago: executing program 1 (id=2559): r0 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0xe0) mmap$auto(0x200000, 0x20009, 0x4000000000df, 0xeb1, r0, 0x40000008000) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0xffff7ffc, &(0x7f0000000380)={{}, {0x800002000009, 0x4b}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x141000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) unshare$auto(0x4000000000000) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180)=0xffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240d61e82236b3eb", @ANYRES16=0x0, @ANYBLOB="200027bd7000fedbdf250300000008001300010100000800040004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) unshare$auto(0x40000080) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/013/001\x00', 0x1402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 3.609366483s ago: executing program 2 (id=2560): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000462f20dc8868f960ad8fde3c666f84a4d84506de3e708885eba976f617249d46348e52e1845100cad0f2618deecbff485b9925b0d85e35ba0bb4951035c8c29ee670300a4d849bc96936c029323557e68ad0ac02bdee452d9bbb3854cf7bbb4d4c7714b3099472bb5b6ad5a84d1befad1da6aa9950b29e0cdb03a33ff2f426241649a96503060000008339d7c88d", @ANYRES16=r0, @ANYBLOB="010025bd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b8008002600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x50702, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) ioctl$auto(r6, 0x80dc5521, r7) write$auto(r5, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0xa, 0x400009, 0x6a1, 0x9b72, 0xffffffffffffffff, 0x8003) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x6) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x1a3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) socket(0x80000000000000a, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x28102, 0x0) 3.469577235s ago: executing program 3 (id=2561): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x97) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b8008002600", @ANYRES32=r2, @ANYBLOB="08006e00ac1414aa2c02bc8028029880220242804b8ef4dea62052d4391e1b7fcd2429f7195770e4ca6f21844850ff750ce04caf301dc66838e61817fb1f807d53f524a2ac569f0f1c754ec84650d22b883479398e9d766ecc3fa8de0f83e8f703cb19a0826ec7c4949c87bab590c6305dc6f742accc66d7f2c47d87ec1d7fde707f710037006af15d7fa2ec9194354a1069b7c806492e043fa1fdad718d351a10ddade114048ff1302faa59a651c349c5ec3cede0e3949d48b97b2bd1d493852ed30d3a7c2cead7511ef0c8d71cb13b68fb7475ceac2b9816379110f6b4d10d69aea84f032ee4c179ba7929c5d06329cbdf05000000040034804d001f800400f18004006c800d7112532deb3ef76f18436c6041ed69a31df55778585e94b7244ba30fca32a34652fd3f440a97d881a3e6c962f72b82c506b0f9531ca4e8321faaa8982bbdfd85000000e5007d800800e400", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) ioctl$auto(r6, 0x80dc5521, r7) write$auto(r5, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0xa, 0x400009, 0x6a1, 0x9b72, 0xffffffffffffffff, 0x8003) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x6) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) socket(0x80000000000000a, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x28102, 0x0) 2.470818889s ago: executing program 2 (id=2562): ioctl$auto(0x4000000000000c8, 0x401054d6, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000380)={{0x3, 0x1}, {0x0, 0x6}}, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7f, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) tee$auto(0x2000000000000, 0xffffffffffffffff, 0x402, 0xd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x63) r0 = socket(0x2, 0x1, 0x106) read$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffffff, &(0x7f0000000040)=""/53, 0x35) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x800) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x2000000) read$auto_transaction_log_fops_(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) write$auto(r2, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) timerfd_create$auto(0x0, 0x0) 2.360891329s ago: executing program 3 (id=2563): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2005, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 2.233154719s ago: executing program 0 (id=2564): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2005, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 1.99391168s ago: executing program 1 (id=2565): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2005, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 209.731042ms ago: executing program 3 (id=2566): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40380, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0x0) unshare$auto(0x40000080) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0c, 0x8, 0xffffffff, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x7fffffff, 0x291805d9]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) set_mempolicy$auto(0x4, &(0x7f0000000080)=0x1, 0x2) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 170.977847ms ago: executing program 0 (id=2567): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x88180, 0x0) ioctl$auto(r0, 0xae60, r0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0) mmap$auto(0x0, 0x810004, 0xfffffffffffffffc, 0x8000000008011, 0x3, 0x81000000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x5, 0x2, 0x7, 0x810, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2005, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x100, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 0s ago: executing program 1 (id=2569): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare$auto(0x4800000000000) mmap$auto(0x0, 0x1, 0x400000005, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mremap$auto(0x0, 0x9, 0x3fd6, 0x0, 0x1ffffffa) io_uring_setup$auto(0x59, 0x0) unshare$auto(0x40000080) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000100), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sysfs$auto(0x2, 0x3b, 0x0) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy10/airtime_flags\x00', 0x2641, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80102, 0x0) write$auto(r2, 0x0, 0x40100000a3d5) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) kernel console output (not intermixed with test programs): [ T7673] ubi0: empty MTD device detected [ 231.405180][ T7684] program syz.2.324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.559708][ T7673] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 231.568093][ T7673] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 231.578202][ T7673] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 231.589689][ T7673] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 231.661220][ T7673] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 231.705052][ T7673] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 231.779112][ T7673] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 735371909 [ 231.875058][ T7673] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 231.956498][ T7685] ubi0: background thread "ubi_bgt0d" started, PID 7685 [ 231.974091][ T7679] ubi0: detaching mtd0 [ 232.159292][ T7679] ubi0: mtd0 is detached [ 235.859493][ T7732] syz_tun: tun_chr_ioctl cmd 1074812118 [ 239.369551][ T7748] Process accounting paused [ 247.705418][ T7853] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 248.703820][ T7871] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 249.733346][ T7879] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7879] [ 251.007631][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 251.018424][ T7895] netlink: 25 bytes leftover after parsing attributes in process `syz.1.357'. [ 251.484703][ T29] audit: type=1800 audit(4294967300.840:3): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.361" name="dbroot" dev="configfs" ino=30287 res=0 errno=0 [ 251.584061][ T7912] mmap: syz.0.361 (7912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.909100][ T7917] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 255.718544][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.725050][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.621026][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 258.659568][ T7987] team0: Port device team_slave_1 removed [ 259.830943][ T8020] FAULT_INJECTION: forcing a failure. [ 259.830943][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 259.846795][ T8024] FAULT_INJECTION: forcing a failure. [ 259.846795][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 259.870003][ T8024] CPU: 0 UID: 0 PID: 8024 Comm: syz.3.378 Not tainted syzkaller #0 PREEMPT(full) [ 259.870041][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.870059][ T8024] Call Trace: [ 259.870069][ T8024] [ 259.870080][ T8024] dump_stack_lvl+0x100/0x190 [ 259.870120][ T8024] should_fail_ex.cold+0x5/0xa [ 259.870157][ T8024] should_failslab+0xc2/0x120 [ 259.870205][ T8024] __kmalloc_noprof+0xfc/0x820 [ 259.870246][ T8024] ? kasan_quarantine_put+0x104/0x240 [ 259.870286][ T8024] ? io_cache_alloc_new+0x45/0xe0 [ 259.870339][ T8024] io_cache_alloc_new+0x45/0xe0 [ 259.870384][ T8024] io_rsrc_node_alloc+0x221/0x2b0 [ 259.870429][ T8024] io_sqe_buffer_register+0x17a/0x1500 [ 259.870480][ T8024] ? trace_kmalloc+0xa0/0x110 [ 259.870529][ T8024] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 259.870574][ T8024] ? __kvmalloc_node_noprof+0x616/0x970 [ 259.870622][ T8024] ? copy_iovec_from_user+0x102/0x140 [ 259.870676][ T8024] ? iovec_from_user+0xda/0x140 [ 259.870734][ T8024] io_sqe_buffers_register.cold+0x346/0x4c3 [ 259.870808][ T8024] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 259.870867][ T8024] ? __fget_files+0x21f/0x3d0 [ 259.870909][ T8024] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 259.870957][ T8024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.871004][ T8024] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 259.871045][ T8024] ? __fget_files+0x21f/0x3d0 [ 259.871083][ T8024] ? fput+0x79/0x100 [ 259.871120][ T8024] ? ksys_write+0x1ac/0x250 [ 259.871150][ T8024] ? __pfx_ksys_write+0x10/0x10 [ 259.871192][ T8024] do_syscall_64+0x115/0x840 [ 259.871234][ T8024] ? clear_bhb_loop+0x40/0x90 [ 259.871274][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.871307][ T8024] RIP: 0033:0x7fa363f9e019 [ 259.871333][ T8024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.871362][ T8024] RSP: 002b:00007fa3621d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 259.871391][ T8024] RAX: ffffffffffffffda RBX: 00007fa364226180 RCX: 00007fa363f9e019 [ 259.871411][ T8024] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 259.871433][ T8024] RBP: 00007fa3621d5090 R08: 0000000000000000 R09: 0000000000000000 [ 259.871452][ T8024] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 259.871470][ T8024] R13: 00007fa364226218 R14: 00007fa364226180 R15: 00007fff9568e288 [ 259.871511][ T8024] [ 260.123096][ T8020] CPU: 0 UID: 0 PID: 8020 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT(full) [ 260.123133][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.123150][ T8020] Call Trace: [ 260.123161][ T8020] [ 260.123172][ T8020] dump_stack_lvl+0x100/0x190 [ 260.123212][ T8020] should_fail_ex.cold+0x5/0xa [ 260.123273][ T8020] should_failslab+0xc2/0x120 [ 260.123320][ T8020] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 260.123364][ T8020] ? __alloc_skb+0x140/0x710 [ 260.123414][ T8020] __alloc_skb+0x140/0x710 [ 260.123454][ T8020] ? __alloc_skb+0x5b7/0x710 [ 260.123497][ T8020] ? __pfx___alloc_skb+0x10/0x10 [ 260.123542][ T8020] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 260.123592][ T8020] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 260.123648][ T8020] __ip6_append_data+0x34f0/0x4bd0 [ 260.123701][ T8020] ? __pfx_raw6_getfrag+0x10/0x10 [ 260.123755][ T8020] ? __pfx___ip6_append_data+0x10/0x10 [ 260.123817][ T8020] ? __pfx_ip6_mtu+0x10/0x10 [ 260.123858][ T8020] ? ip6_setup_cork+0x5be/0x14c0 [ 260.123902][ T8020] ip6_append_data+0x10b/0x410 [ 260.123935][ T8020] ? __pfx_raw6_getfrag+0x10/0x10 [ 260.123963][ T8020] rawv6_sendmsg+0x169c/0x4420 [ 260.124002][ T8020] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 260.124029][ T8020] ? __lock_acquire+0x49f/0x1a40 [ 260.124078][ T8020] ? __pfx___might_resched+0x10/0x10 [ 260.124121][ T8020] ? aa_sk_perm+0x309/0xaa0 [ 260.124167][ T8020] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 260.124192][ T8020] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 260.124221][ T8020] ? inet_sendmsg+0x11c/0x140 [ 260.124259][ T8020] inet_sendmsg+0x11c/0x140 [ 260.124294][ T8020] ____sys_sendmsg+0x9c9/0xbe0 [ 260.124318][ T8020] ? __pfx_inet_sendmsg+0x10/0x10 [ 260.124355][ T8020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.124384][ T8020] ? rcu_is_watching+0x12/0xc0 [ 260.124411][ T8020] ? ___sys_sendmsg+0x19d/0x1e0 [ 260.124447][ T8020] ? kfree+0x1e5/0x6c0 [ 260.124501][ T8020] ___sys_sendmsg+0x190/0x1e0 [ 260.124540][ T8020] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.124590][ T8020] ? __pfx___might_resched+0x10/0x10 [ 260.124630][ T8020] __sys_sendmmsg+0x20c/0x440 [ 260.124667][ T8020] ? __pfx___sys_sendmmsg+0x10/0x10 [ 260.124699][ T8020] ? ksys_write+0x190/0x250 [ 260.124740][ T8020] ? fput+0x79/0x100 [ 260.124768][ T8020] ? ksys_write+0x1ac/0x250 [ 260.124788][ T8020] ? __pfx_ksys_write+0x10/0x10 [ 260.124814][ T8020] __x64_sys_sendmmsg+0x9c/0x100 [ 260.124847][ T8020] ? lockdep_hardirqs_on+0x78/0x100 [ 260.124876][ T8020] do_syscall_64+0x115/0x840 [ 260.124906][ T8020] ? clear_bhb_loop+0x40/0x90 [ 260.124933][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.124956][ T8020] RIP: 0033:0x7f235879e019 [ 260.124974][ T8020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.124994][ T8020] RSP: 002b:00007f2359587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.125015][ T8020] RAX: ffffffffffffffda RBX: 00007f2358a25fa0 RCX: 00007f235879e019 [ 260.125029][ T8020] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 260.125042][ T8020] RBP: 00007f2359587090 R08: 0000000000000000 R09: 0000000000000000 [ 260.125055][ T8020] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.125068][ T8020] R13: 00007f2358a26038 R14: 00007f2358a25fa0 R15: 00007fff3f45c598 [ 260.125096][ T8020] [ 262.248648][ T1119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.844611][ T1119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.141159][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.151532][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.159540][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.169904][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.177856][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.442609][ T1119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.814771][ T1119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.932783][ T1119] bridge_slave_1: left allmulticast mode [ 264.938724][ T1119] bridge_slave_1: left promiscuous mode [ 264.946656][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.971712][ T1119] bridge_slave_0: left allmulticast mode [ 264.988527][ T1119] bridge_slave_0: left promiscuous mode [ 264.998092][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.236066][ T50] Bluetooth: hci3: command tx timeout [ 265.380751][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.400327][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.418395][ T1119] bond0 (unregistering): Released all slaves [ 266.850703][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 267.023839][ T1119] hsr_slave_0: left promiscuous mode [ 267.032355][ T1119] hsr_slave_1: left promiscuous mode [ 267.038708][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.046277][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.055145][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.063236][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.088686][ T1119] veth1_macvtap: left promiscuous mode [ 267.094846][ T1119] veth0_macvtap: left promiscuous mode [ 267.100739][ T1119] veth1_vlan: left promiscuous mode [ 267.107765][ T1119] veth0_vlan: left promiscuous mode [ 267.315485][ T50] Bluetooth: hci3: command tx timeout [ 267.446307][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 268.358896][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.391'. [ 268.875025][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.895835][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.930040][ T8054] bridge_slave_0: entered allmulticast mode [ 268.987026][ T8054] bridge_slave_0: entered promiscuous mode [ 269.054886][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.108714][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.128623][ T8054] bridge_slave_1: entered allmulticast mode [ 269.147360][ T8054] bridge_slave_1: entered promiscuous mode [ 269.395531][ T50] Bluetooth: hci3: command tx timeout [ 269.630385][ T8054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.666641][ T8054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.761006][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 270.070961][ T8054] team0: Port device team_slave_0 added [ 270.188093][ T8054] team0: Port device team_slave_1 added [ 270.387068][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.400239][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.426838][ T8054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.526400][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.533800][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.566313][ T8054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.579489][ T8168] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8168] [ 271.345743][ T8054] hsr_slave_0: entered promiscuous mode [ 271.359855][ T8054] hsr_slave_1: entered promiscuous mode [ 271.478208][ T50] Bluetooth: hci3: command tx timeout [ 271.572433][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 272.332684][ T8204] syz_tun: tun_chr_ioctl cmd 35108 [ 273.398114][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 274.103899][ T8233] syz_tun: tun_chr_ioctl cmd 1074812118 [ 274.324608][ T8237] net_ratelimit: 30 callbacks suppressed [ 274.324627][ T8237] netlink: zone id is out of range [ 274.380905][ T8237] netlink: zone id is out of range [ 274.407182][ T8237] netlink: zone id is out of range [ 274.426222][ T8237] netlink: zone id is out of range [ 274.433997][ T8237] netlink: zone id is out of range [ 274.458540][ T8237] netlink: zone id is out of range [ 274.486542][ T8237] netlink: zone id is out of range [ 274.496513][ T8237] netlink: zone id is out of range [ 274.501944][ T8237] netlink: zone id is out of range [ 274.513061][ T8237] netlink: zone id is out of range [ 274.586081][ T8054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.628955][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.637544][ T8054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.654980][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.659232][ T8054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.692254][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.698047][ T8054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.776247][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.313592][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.441676][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.492783][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.500148][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.577306][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.584609][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.673434][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 277.729023][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 278.282082][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.999635][ T8373] FAULT_INJECTION: forcing a failure. [ 278.999635][ T8373] name failslab, interval 1, probability 0, space 0, times 0 [ 279.017134][ T8373] CPU: 0 UID: 0 PID: 8373 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT(full) [ 279.017172][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.017190][ T8373] Call Trace: [ 279.017200][ T8373] [ 279.017212][ T8373] dump_stack_lvl+0x100/0x190 [ 279.017253][ T8373] should_fail_ex.cold+0x5/0xa [ 279.017289][ T8373] should_failslab+0xc2/0x120 [ 279.017333][ T8373] __kmalloc_noprof+0xfc/0x820 [ 279.017371][ T8373] ? rcu_is_watching+0x12/0xc0 [ 279.017414][ T8373] ? tomoyo_encode2+0xfb/0x3c0 [ 279.017488][ T8373] tomoyo_encode2+0xfb/0x3c0 [ 279.017548][ T8373] tomoyo_encode+0x29/0x50 [ 279.017596][ T8373] tomoyo_realpath_from_path+0x18c/0x690 [ 279.017666][ T8373] tomoyo_check_open_permission+0x2af/0x3c0 [ 279.017715][ T8373] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 279.017759][ T8373] ? __lock_acquire+0x49f/0x1a40 [ 279.017822][ T8373] ? __lock_acquire+0x49f/0x1a40 [ 279.017881][ T8373] ? hook_file_open+0x24f/0x8f0 [ 279.017954][ T8373] ? lock_acquire+0x1b9/0x370 [ 279.018019][ T8373] tomoyo_file_open+0x6b/0x90 [ 279.018057][ T8373] security_file_open+0xb5/0x1e0 [ 279.018107][ T8373] do_dentry_open+0x588/0x14d0 [ 279.018153][ T8373] vfs_open+0x82/0x3f0 [ 279.018201][ T8373] path_openat+0x2873/0x4280 [ 279.018254][ T8373] ? __pfx_path_openat+0x10/0x10 [ 279.018304][ T8373] do_file_open+0x20e/0x430 [ 279.018342][ T8373] ? __pfx_do_file_open+0x10/0x10 [ 279.018407][ T8373] ? alloc_fd+0x471/0x7a0 [ 279.018444][ T8373] ? do_getname+0x191/0x390 [ 279.018491][ T8373] do_sys_openat2+0x10f/0x1e0 [ 279.018536][ T8373] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.018583][ T8373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.018633][ T8373] ? __fget_files+0x21f/0x3d0 [ 279.018671][ T8373] __x64_sys_openat+0x12d/0x210 [ 279.018718][ T8373] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.018774][ T8373] ? ksys_write+0x1ac/0x250 [ 279.018818][ T8373] do_syscall_64+0x115/0x840 [ 279.018861][ T8373] ? clear_bhb_loop+0x40/0x90 [ 279.018901][ T8373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.018934][ T8373] RIP: 0033:0x7f235879e019 [ 279.018965][ T8373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.018994][ T8373] RSP: 002b:00007f2359587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.019023][ T8373] RAX: ffffffffffffffda RBX: 00007f2358a25fa0 RCX: 00007f235879e019 [ 279.019042][ T8373] RDX: 0000000000000b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 279.019060][ T8373] RBP: 00007f2359587090 R08: 0000000000000000 R09: 0000000000000000 [ 279.019090][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.019106][ T8373] R13: 00007f2358a26038 R14: 00007f2358a25fa0 R15: 00007fff3f45c598 [ 279.019145][ T8373] [ 279.022411][ T8373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.845622][ T8054] veth0_vlan: entered promiscuous mode [ 280.092493][ T8054] veth1_vlan: entered promiscuous mode [ 280.321392][ T8054] veth0_macvtap: entered promiscuous mode [ 280.631873][ T8412] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8412] [ 280.671859][ T8054] veth1_macvtap: entered promiscuous mode [ 280.917489][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.035765][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.457440][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.466718][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.505494][ T976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.763134][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.781877][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.878333][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.899297][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.964447][ T8434] net_ratelimit: 30 callbacks suppressed [ 281.964465][ T8434] netlink: zone id is out of range [ 282.012328][ T8434] netlink: zone id is out of range [ 282.027823][ T8434] netlink: zone id is out of range [ 282.047478][ T8434] netlink: zone id is out of range [ 282.063847][ T8434] netlink: zone id is out of range [ 282.073364][ T8434] netlink: zone id is out of range [ 282.084695][ T8434] netlink: zone id is out of range [ 282.116350][ T8434] netlink: zone id is out of range [ 282.130747][ T8434] netlink: zone id is out of range [ 282.137209][ T8434] netlink: zone id is out of range [ 282.816920][ T8458] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8054] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8458] [ 283.905440][ T976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.425909][ T8480] syz.1.428 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 284.490933][ T8483] FAULT_INJECTION: forcing a failure. [ 284.490933][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 284.509329][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.2.429 Not tainted syzkaller #0 PREEMPT(full) [ 284.509364][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.509381][ T8483] Call Trace: [ 284.509390][ T8483] [ 284.509401][ T8483] dump_stack_lvl+0x100/0x190 [ 284.509438][ T8483] should_fail_ex.cold+0x5/0xa [ 284.509471][ T8483] should_failslab+0xc2/0x120 [ 284.509514][ T8483] __kmalloc_noprof+0xfc/0x820 [ 284.509550][ T8483] ? rcu_is_watching+0x12/0xc0 [ 284.509586][ T8483] ? tomoyo_encode2+0xfb/0x3c0 [ 284.509639][ T8483] tomoyo_encode2+0xfb/0x3c0 [ 284.509711][ T8483] tomoyo_encode+0x29/0x50 [ 284.509761][ T8483] tomoyo_realpath_from_path+0x18c/0x690 [ 284.509824][ T8483] tomoyo_check_open_permission+0x2af/0x3c0 [ 284.509871][ T8483] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 284.509916][ T8483] ? __lock_acquire+0x49f/0x1a40 [ 284.509969][ T8483] ? __lock_acquire+0x49f/0x1a40 [ 284.510037][ T8483] ? hook_file_open+0x24f/0x8f0 [ 284.510113][ T8483] ? path_get+0x61/0x80 [ 284.510157][ T8483] tomoyo_file_open+0x6b/0x90 [ 284.510194][ T8483] security_file_open+0xb5/0x1e0 [ 284.510244][ T8483] do_dentry_open+0x588/0x14d0 [ 284.510290][ T8483] vfs_open+0x82/0x3f0 [ 284.510338][ T8483] path_openat+0x2873/0x4280 [ 284.510390][ T8483] ? __pfx_path_openat+0x10/0x10 [ 284.510437][ T8483] do_file_open+0x20e/0x430 [ 284.510475][ T8483] ? __pfx_do_file_open+0x10/0x10 [ 284.510540][ T8483] ? alloc_fd+0x471/0x7a0 [ 284.510577][ T8483] ? do_getname+0x191/0x390 [ 284.510624][ T8483] do_sys_openat2+0x10f/0x1e0 [ 284.510669][ T8483] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.510715][ T8483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.510765][ T8483] ? __fget_files+0x21f/0x3d0 [ 284.510803][ T8483] __x64_sys_openat+0x12d/0x210 [ 284.510850][ T8483] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.510905][ T8483] ? ksys_write+0x1ac/0x250 [ 284.510949][ T8483] do_syscall_64+0x115/0x840 [ 284.510991][ T8483] ? clear_bhb_loop+0x40/0x90 [ 284.511036][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.511068][ T8483] RIP: 0033:0x7fb59dd9e019 [ 284.511094][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.511122][ T8483] RSP: 002b:00007fb59ec3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.511151][ T8483] RAX: ffffffffffffffda RBX: 00007fb59e025fa0 RCX: 00007fb59dd9e019 [ 284.511170][ T8483] RDX: 000000003882873f RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 284.511189][ T8483] RBP: 00007fb59ec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 284.511208][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.511226][ T8483] R13: 00007fb59e026038 R14: 00007fb59e025fa0 R15: 00007fffc71307e8 [ 284.511268][ T8483] [ 284.511349][ T8483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.841557][ T8480] input: f¬ as /devices/virtual/input/input6 [ 285.443312][ T8503] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8503] [ 285.874357][ T8511] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 287.192823][ T8526] netlink: 342 bytes leftover after parsing attributes in process `syz.2.435'. [ 287.830529][ T8538] FAULT_INJECTION: forcing a failure. [ 287.830529][ T8538] name failslab, interval 1, probability 0, space 0, times 0 [ 287.888569][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.0.437 Not tainted syzkaller #0 PREEMPT(full) [ 287.888610][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.888627][ T8538] Call Trace: [ 287.888637][ T8538] [ 287.888649][ T8538] dump_stack_lvl+0x100/0x190 [ 287.888690][ T8538] should_fail_ex.cold+0x5/0xa [ 287.888727][ T8538] should_failslab+0xc2/0x120 [ 287.888772][ T8538] __kmalloc_noprof+0xfc/0x820 [ 287.888814][ T8538] ? constrain_params_by_rules+0x175/0xd20 [ 287.888857][ T8538] constrain_params_by_rules+0x175/0xd20 [ 287.888908][ T8538] ? stack_depot_save_flags+0x27/0x9d0 [ 287.888970][ T8538] ? kasan_save_stack+0x3f/0x50 [ 287.889014][ T8538] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 287.889046][ T8538] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 287.889085][ T8538] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 287.889119][ T8538] ? __x64_sys_ioctl+0x18e/0x210 [ 287.889164][ T8538] ? do_syscall_64+0x115/0x840 [ 287.889216][ T8538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.889276][ T8538] ? snd_interval_refine+0x2d0/0x580 [ 287.889330][ T8538] snd_pcm_hw_refine+0x82a/0xb40 [ 287.889372][ T8538] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 287.889414][ T8538] ? __kasan_kmalloc+0xaa/0xb0 [ 287.889457][ T8538] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 287.889489][ T8538] ? __asan_memset+0x23/0x50 [ 287.889524][ T8538] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 287.889562][ T8538] ? snd_interval_refine+0x2d0/0x580 [ 287.889625][ T8538] snd_pcm_oss_change_params_locked+0xdb3/0x39f0 [ 287.889665][ T8538] ? trace_contention_end+0x57/0x160 [ 287.889717][ T8538] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 287.889755][ T8538] ? __pfx___mutex_lock+0x10/0x10 [ 287.889804][ T8538] ? __lock_acquire+0x49f/0x1a40 [ 287.889879][ T8538] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 287.889920][ T8538] snd_pcm_oss_set_trigger.isra.0+0x5e/0x6c0 [ 287.889966][ T8538] snd_pcm_oss_ioctl+0x1f17/0x3790 [ 287.890004][ T8538] ? find_held_lock+0x2b/0x80 [ 287.890044][ T8538] ? __fget_files+0x215/0x3d0 [ 287.890072][ T8538] ? hook_file_ioctl_common+0x140/0x440 [ 287.890119][ T8538] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 287.890162][ T8538] ? __fget_files+0x21f/0x3d0 [ 287.890204][ T8538] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 287.890245][ T8538] __x64_sys_ioctl+0x18e/0x210 [ 287.890296][ T8538] do_syscall_64+0x115/0x840 [ 287.890338][ T8538] ? clear_bhb_loop+0x40/0x90 [ 287.890378][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.890412][ T8538] RIP: 0033:0x7f235879e019 [ 287.890437][ T8538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.890467][ T8538] RSP: 002b:00007f23569f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.890498][ T8538] RAX: ffffffffffffffda RBX: 00007f2358a26090 RCX: 00007f235879e019 [ 287.890518][ T8538] RDX: 0000000000000000 RSI: 0000000040045010 RDI: 0000000000000006 [ 287.890537][ T8538] RBP: 00007f23569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.890556][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.890574][ T8538] R13: 00007f2358a26128 R14: 00007f2358a26090 R15: 00007fff3f45c598 [ 287.890617][ T8538] [ 288.931917][ T8553] FAULT_INJECTION: forcing a failure. [ 288.931917][ T8553] name failslab, interval 1, probability 0, space 0, times 0 [ 288.945940][ T8553] CPU: 1 UID: 0 PID: 8553 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(full) [ 288.945980][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.945998][ T8553] Call Trace: [ 288.946008][ T8553] [ 288.946020][ T8553] dump_stack_lvl+0x100/0x190 [ 288.946074][ T8553] should_fail_ex.cold+0x5/0xa [ 288.946129][ T8553] should_failslab+0xc2/0x120 [ 288.946177][ T8553] __kmalloc_cache_noprof+0x91/0x6c0 [ 288.946214][ T8553] ? snd_seq_create_port+0xcf/0x590 [ 288.946274][ T8553] snd_seq_create_port+0xcf/0x590 [ 288.946329][ T8553] snd_seq_ioctl_create_port+0x250/0x9e0 [ 288.946386][ T8553] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 288.946438][ T8553] ? __pfx_sprintf+0x10/0x10 [ 288.946478][ T8553] ? do_dentry_open+0x6ab/0x14d0 [ 288.946514][ T8553] ? do_sys_openat2+0x10f/0x1e0 [ 288.946563][ T8553] call_seq_client_ctl+0xa3/0x130 [ 288.946625][ T8553] snd_seq_kernel_client_ctl+0x77/0xd0 [ 288.946680][ T8553] create_port+0x19b/0x270 [ 288.946711][ T8553] ? __pfx_create_port+0x10/0x10 [ 288.946749][ T8553] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 288.946787][ T8553] ? __pfx_free_devinfo+0x10/0x10 [ 288.946842][ T8553] ? find_held_lock+0x2b/0x80 [ 288.946888][ T8553] ? mark_held_locks+0x40/0x70 [ 288.946946][ T8553] snd_seq_oss_open+0x292/0xa10 [ 288.946987][ T8553] odev_open+0x6f/0x90 [ 288.947036][ T8553] ? __pfx_odev_open+0x10/0x10 [ 288.947086][ T8553] soundcore_open+0x2e3/0x5a0 [ 288.947144][ T8553] ? __pfx_soundcore_open+0x10/0x10 [ 288.947196][ T8553] chrdev_open+0x234/0x6a0 [ 288.947230][ T8553] ? __pfx_apparmor_file_open+0x10/0x10 [ 288.947270][ T8553] ? __pfx_chrdev_open+0x10/0x10 [ 288.947307][ T8553] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 288.947355][ T8553] do_dentry_open+0x6ab/0x14d0 [ 288.947388][ T8553] ? __pfx_chrdev_open+0x10/0x10 [ 288.947432][ T8553] vfs_open+0x82/0x3f0 [ 288.947479][ T8553] path_openat+0x2873/0x4280 [ 288.947531][ T8553] ? __pfx_path_openat+0x10/0x10 [ 288.947584][ T8553] do_file_open+0x20e/0x430 [ 288.947623][ T8553] ? __pfx_do_file_open+0x10/0x10 [ 288.947688][ T8553] ? alloc_fd+0x471/0x7a0 [ 288.947724][ T8553] ? do_getname+0x191/0x390 [ 288.947770][ T8553] do_sys_openat2+0x10f/0x1e0 [ 288.947814][ T8553] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.947859][ T8553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.947908][ T8553] ? __fget_files+0x21f/0x3d0 [ 288.947942][ T8553] __x64_sys_openat+0x12d/0x210 [ 288.947987][ T8553] ? __pfx___x64_sys_openat+0x10/0x10 [ 288.948031][ T8553] ? ksys_write+0x1ac/0x250 [ 288.948072][ T8553] do_syscall_64+0x115/0x840 [ 288.948111][ T8553] ? clear_bhb_loop+0x40/0x90 [ 288.948152][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.948187][ T8553] RIP: 0033:0x7fa363f9e019 [ 288.948213][ T8553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.948244][ T8553] RSP: 002b:00007fa364d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.948276][ T8553] RAX: ffffffffffffffda RBX: 00007fa364225fa0 RCX: 00007fa363f9e019 [ 288.948297][ T8553] RDX: 000000000010b201 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 288.948318][ T8553] RBP: 00007fa364d81090 R08: 0000000000000000 R09: 0000000000000000 [ 288.948336][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.948353][ T8553] R13: 00007fa364226038 R14: 00007fa364225fa0 R15: 00007fff9568e288 [ 288.948392][ T8553] [ 288.948491][ T8553] ALSA: seq_oss: can't create port [ 289.581880][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.442'. [ 290.324732][ T8576] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8576] [ 290.926004][ T8581] random: crng reseeded on system resumption [ 291.032681][ T50] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 293.648333][ T8620] FAULT_INJECTION: forcing a failure. [ 293.648333][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 293.673090][ T8620] CPU: 1 UID: 0 PID: 8620 Comm: syz.2.452 Not tainted syzkaller #0 PREEMPT(full) [ 293.673130][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.673148][ T8620] Call Trace: [ 293.673158][ T8620] [ 293.673169][ T8620] dump_stack_lvl+0x100/0x190 [ 293.673211][ T8620] should_fail_ex.cold+0x5/0xa [ 293.673248][ T8620] should_failslab+0xc2/0x120 [ 293.673297][ T8620] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 293.673341][ T8620] ? __alloc_skb+0x5b7/0x710 [ 293.673385][ T8620] ? __alloc_skb+0x140/0x710 [ 293.673437][ T8620] __alloc_skb+0x140/0x710 [ 293.673479][ T8620] ? __alloc_skb+0x5b7/0x710 [ 293.673527][ T8620] ? __pfx___alloc_skb+0x10/0x10 [ 293.673584][ T8620] netlink_alloc_large_skb+0x69/0x150 [ 293.673626][ T8620] netlink_sendmsg+0x680/0xda0 [ 293.673672][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.673729][ T8620] ? apparmor_socket_sendmsg+0x15b/0x270 [ 293.673770][ T8620] ____sys_sendmsg+0xa4d/0xbe0 [ 293.673800][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.673838][ T8620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.673883][ T8620] ? rcu_is_watching+0x12/0xc0 [ 293.673919][ T8620] ? ___sys_sendmsg+0x19d/0x1e0 [ 293.673950][ T8620] ? kfree+0x1e5/0x6c0 [ 293.673984][ T8620] ___sys_sendmsg+0x190/0x1e0 [ 293.674021][ T8620] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.674095][ T8620] ? __pfx___might_resched+0x10/0x10 [ 293.674149][ T8620] __sys_sendmmsg+0x20c/0x440 [ 293.674199][ T8620] ? __pfx___sys_sendmmsg+0x10/0x10 [ 293.674242][ T8620] ? ksys_write+0x190/0x250 [ 293.674296][ T8620] ? fput+0x79/0x100 [ 293.674331][ T8620] ? ksys_write+0x1ac/0x250 [ 293.674358][ T8620] ? __pfx_ksys_write+0x10/0x10 [ 293.674384][ T8620] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 293.674438][ T8620] __x64_sys_sendmmsg+0x9c/0x100 [ 293.674481][ T8620] ? lockdep_hardirqs_on+0x78/0x100 [ 293.674521][ T8620] do_syscall_64+0x115/0x840 [ 293.674560][ T8620] ? clear_bhb_loop+0x40/0x90 [ 293.674596][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.674626][ T8620] RIP: 0033:0x7fb59dd9e019 [ 293.674650][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.674676][ T8620] RSP: 002b:00007fb59ec3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.674702][ T8620] RAX: ffffffffffffffda RBX: 00007fb59e025fa0 RCX: 00007fb59dd9e019 [ 293.674720][ T8620] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 293.674736][ T8620] RBP: 00007fb59ec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 293.674752][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.674768][ T8620] R13: 00007fb59e026038 R14: 00007fb59e025fa0 R15: 00007fffc71307e8 [ 293.674806][ T8620] [ 297.881752][ T8679] process 'syz.0.461' launched '/dev/fd/9/./file0' with NULL argv: empty string added [ 298.535923][ T8687] Zero length message leads to an empty skb [ 299.318864][ T1119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.982147][ T1119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.352889][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.363925][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.372164][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.382212][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.393348][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.152530][ T1119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.705299][ T1119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.425368][ T1119] bridge_slave_1: left allmulticast mode [ 302.447899][ T1119] bridge_slave_1: left promiscuous mode [ 302.460351][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.478955][ T1119] bridge_slave_0: left allmulticast mode [ 302.484623][ T1119] bridge_slave_0: left promiscuous mode [ 302.490760][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.516214][ T50] Bluetooth: hci3: command tx timeout [ 302.649314][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.664383][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.677097][ T1119] bond0 (unregistering): Released all slaves [ 303.793315][ T1119] hsr_slave_0: left promiscuous mode [ 303.812097][ T1119] hsr_slave_1: left promiscuous mode [ 303.836381][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.854081][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.874080][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.890996][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.912912][ T1119] veth1_macvtap: left promiscuous mode [ 303.918750][ T1119] veth0_macvtap: left promiscuous mode [ 303.924319][ T1119] veth1_vlan: left promiscuous mode [ 303.930513][ T1119] veth0_vlan: left promiscuous mode [ 304.166192][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 304.183764][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 304.402902][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 304.595849][ T50] Bluetooth: hci3: command tx timeout [ 304.838571][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.846414][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.853849][ T8711] bridge_slave_0: entered allmulticast mode [ 304.863789][ T8711] bridge_slave_0: entered promiscuous mode [ 304.877060][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.884295][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.892213][ T8711] bridge_slave_1: entered allmulticast mode [ 304.900255][ T8711] bridge_slave_1: entered promiscuous mode [ 305.015068][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.032424][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.319268][ T8711] team0: Port device team_slave_0 added [ 305.433624][ T8711] team0: Port device team_slave_1 added [ 305.709151][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.725646][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.768044][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.077662][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.095992][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.122635][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.255662][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 306.675462][ T50] Bluetooth: hci3: command tx timeout [ 306.762426][ T8711] hsr_slave_0: entered promiscuous mode [ 306.769487][ T8711] hsr_slave_1: entered promiscuous mode [ 308.094844][ T8841] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 308.765421][ T50] Bluetooth: hci3: command tx timeout [ 310.009146][ T8711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.038779][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.062104][ T8711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.097008][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.120172][ T8711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.164577][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.193376][ T8711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.209903][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.767942][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.096958][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.150582][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.157838][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.202986][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.210272][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.616200][ T8937] binder: 8927:8937 ioctl c018620c 200000000040 returned -22 [ 313.785495][ T8954] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 314.981035][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.180984][ T8711] veth0_vlan: entered promiscuous mode [ 315.211661][ T8711] veth1_vlan: entered promiscuous mode [ 315.474313][ T8711] veth0_macvtap: entered promiscuous mode [ 315.514267][ T8711] veth1_macvtap: entered promiscuous mode [ 315.625043][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.672322][ T8982] futex_wake_op: syz.0.486 tries to shift op by -2048; fix this program [ 315.690244][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.237589][ T1119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.445978][ T976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.526625][ T976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.537086][ T976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.158575][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.164951][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.430653][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.444818][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.529368][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.542972][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.583106][ T8711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 317.922952][ T9029] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 320.680053][ T9064] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 321.048656][ T9074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 323.471292][ T9093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.110244][ T9127] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9127] [ 326.202992][ T9153] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 327.107961][ T9162] kvm: kvm [9158]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1000 [ 327.323488][ T29] audit: type=1800 audit(4294967321.240:4): pid=9166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.513" name="dbroot" dev="configfs" ino=41108 res=0 errno=0 [ 327.505823][ T9168] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9168] [ 327.840982][ T9176] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 327.975149][ T9182] syz_tun: tun_chr_ioctl cmd 1074812118 [ 328.273913][ T9176] syz.1.514 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 331.014571][ T9218] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 331.092248][ T9224] FAULT_INJECTION: forcing a failure. [ 331.092248][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 331.127728][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.1.524 Not tainted syzkaller #0 PREEMPT(full) [ 331.127771][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.127794][ T9224] Call Trace: [ 331.127805][ T9224] [ 331.127818][ T9224] dump_stack_lvl+0x100/0x190 [ 331.127862][ T9224] should_fail_ex.cold+0x5/0xa [ 331.127902][ T9224] should_failslab+0xc2/0x120 [ 331.127952][ T9224] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 331.128004][ T9224] ? kasan_save_stack+0x30/0x50 [ 331.128047][ T9224] ? kasan_save_track+0x14/0x30 [ 331.128092][ T9224] ? __d_alloc+0x35/0xa50 [ 331.128138][ T9224] __d_alloc+0x35/0xa50 [ 331.128181][ T9224] d_alloc_parallel+0x105/0x14b0 [ 331.128251][ T9224] ? __pfx_d_alloc_parallel+0x10/0x10 [ 331.128317][ T9224] ? __pfx___might_resched+0x10/0x10 [ 331.128373][ T9224] ? try_to_unlazy+0x296/0x910 [ 331.128429][ T9224] ? down_read+0x13b/0x4c0 [ 331.128482][ T9224] ? __pfx_down_read+0x10/0x10 [ 331.128539][ T9224] __lookup_slow+0x98/0x320 [ 331.128590][ T9224] lookup_slow+0x50/0x70 [ 331.128637][ T9224] link_path_walk+0x1377/0x1cc0 [ 331.128706][ T9224] path_openat+0x1c9/0x4280 [ 331.128737][ T9224] ? __kasan_slab_alloc+0x89/0x90 [ 331.128782][ T9224] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 331.128824][ T9224] ? do_getname+0x35/0x390 [ 331.128866][ T9224] ? __x64_sys_openat+0x12d/0x210 [ 331.128928][ T9224] ? __pfx_path_openat+0x10/0x10 [ 331.128984][ T9224] do_file_open+0x20e/0x430 [ 331.129024][ T9224] ? __pfx_do_file_open+0x10/0x10 [ 331.129092][ T9224] ? alloc_fd+0x471/0x7a0 [ 331.129130][ T9224] ? do_getname+0x191/0x390 [ 331.129178][ T9224] do_sys_openat2+0x10f/0x1e0 [ 331.129225][ T9224] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.129274][ T9224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 331.129336][ T9224] __x64_sys_openat+0x12d/0x210 [ 331.129385][ T9224] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.129449][ T9224] do_syscall_64+0x115/0x840 [ 331.129493][ T9224] ? clear_bhb_loop+0x40/0x90 [ 331.129534][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.129570][ T9224] RIP: 0033:0x7fd75879e019 [ 331.129597][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.129634][ T9224] RSP: 002b:00007fd7596be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.129665][ T9224] RAX: ffffffffffffffda RBX: 00007fd758a26090 RCX: 00007fd75879e019 [ 331.129686][ T9224] RDX: 0000000000000100 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 331.129706][ T9224] RBP: 00007fd75883500c R08: 0000000000000000 R09: 0000000000000000 [ 331.129724][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.129743][ T9224] R13: 00007fd758a26128 R14: 00007fd758a26090 R15: 00007ffde654b218 [ 331.129787][ T9224] [ 331.611097][ T9221] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 331.965877][ T9240] syz_tun: tun_net_xmit 54 [ 334.318939][ T9279] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 334.439536][ T9283] FAULT_INJECTION: forcing a failure. [ 334.439536][ T9283] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 334.485587][ T9283] CPU: 0 UID: 0 PID: 9283 Comm: syz.0.533 Not tainted syzkaller #0 PREEMPT(full) [ 334.485625][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.485643][ T9283] Call Trace: [ 334.485653][ T9283] [ 334.485664][ T9283] dump_stack_lvl+0x100/0x190 [ 334.485714][ T9283] should_fail_ex.cold+0x5/0xa [ 334.485744][ T9283] ? prepare_alloc_pages+0x16d/0x5f0 [ 334.485794][ T9283] should_fail_alloc_page+0xeb/0x140 [ 334.485862][ T9283] prepare_alloc_pages+0x1f0/0x5f0 [ 334.485919][ T9283] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 334.485969][ T9283] ? __update_page_owner_handle+0x390/0x530 [ 334.486027][ T9283] ? __lock_acquire+0x49f/0x1a40 [ 334.486080][ T9283] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.486126][ T9283] ? __lock_acquire+0x49f/0x1a40 [ 334.486198][ T9283] ? find_held_lock+0x2b/0x80 [ 334.486239][ T9283] ? is_bpf_text_address+0x8a/0x1a0 [ 334.486286][ T9283] ? is_bpf_text_address+0x8a/0x1a0 [ 334.486335][ T9283] ? bpf_ksym_find+0x124/0x1c0 [ 334.486369][ T9283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.486421][ T9283] ? policy_nodemask+0xed/0x4f0 [ 334.486472][ T9283] alloc_pages_mpol+0x1fb/0x540 [ 334.486523][ T9283] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 334.486584][ T9283] folio_alloc_mpol_noprof+0x36/0x260 [ 334.486642][ T9283] shmem_alloc_folio+0x135/0x160 [ 334.486701][ T9283] shmem_alloc_and_add_folio+0x371/0xd40 [ 334.486754][ T9283] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 334.486795][ T9283] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 334.486843][ T9283] shmem_get_folio_gfp+0x6ad/0x1910 [ 334.486882][ T9283] ? filemap_map_pages+0x112d/0x1fe0 [ 334.486915][ T9283] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 334.486951][ T9283] ? __pfx_filemap_map_pages+0x10/0x10 [ 334.486984][ T9283] ? filemap_map_pages+0x1137/0x1fe0 [ 334.487032][ T9283] shmem_fault+0x1f9/0xa20 [ 334.487064][ T9283] ? __lock_acquire+0x49f/0x1a40 [ 334.487115][ T9283] ? __pfx_shmem_fault+0x10/0x10 [ 334.487156][ T9283] ? __pfx_filemap_map_pages+0x10/0x10 [ 334.487193][ T9283] ? find_held_lock+0x2b/0x80 [ 334.487237][ T9283] __do_fault+0x10b/0x440 [ 334.487280][ T9283] do_fault+0xa99/0x1750 [ 334.487326][ T9283] ? __pmd_alloc+0x3fb/0x950 [ 334.487377][ T9283] __handle_mm_fault+0x187d/0x2a00 [ 334.487417][ T9283] ? mt_find+0x45e/0x8e0 [ 334.487467][ T9283] ? __pfx___handle_mm_fault+0x10/0x10 [ 334.487497][ T9283] ? __pfx_mt_find+0x10/0x10 [ 334.487565][ T9283] ? find_vma+0xbf/0x140 [ 334.487605][ T9283] ? __pfx_find_vma+0x10/0x10 [ 334.487650][ T9283] handle_mm_fault+0x37b/0xa30 [ 334.487692][ T9283] do_user_addr_fault+0x74c/0x12f0 [ 334.487775][ T9283] exc_page_fault+0x6f/0xd0 [ 334.487820][ T9283] asm_exc_page_fault+0x26/0x30 [ 334.487852][ T9283] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 334.487887][ T9283] Code: 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 9e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 334.487918][ T9283] RSP: 0018:ffffc90004e4f7b8 EFLAGS: 00050206 [ 334.487944][ T9283] RAX: 0000000000000001 RBX: ffff8880364a1040 RCX: 00000000000000c4 [ 334.487963][ T9283] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880364a1040 [ 334.487983][ T9283] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006c94220 [ 334.488001][ T9283] R10: ffff8880364a1103 R11: 0000000000000000 R12: ffffc90004e4fd50 [ 334.488021][ T9283] R13: 0000000000000000 R14: 00000000000000c4 R15: 0000000000000000 [ 334.488061][ T9283] _copy_from_iter+0x355/0x1690 [ 334.488120][ T9283] ? __asan_memset+0x23/0x50 [ 334.488158][ T9283] ? __pfx__copy_from_iter+0x10/0x10 [ 334.488211][ T9283] ? __pfx___alloc_skb+0x10/0x10 [ 334.488275][ T9283] netlink_sendmsg+0x808/0xda0 [ 334.488322][ T9283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.488368][ T9283] ? apparmor_socket_sendmsg+0x15b/0x270 [ 334.488410][ T9283] ____sys_sendmsg+0xa4d/0xbe0 [ 334.488444][ T9283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.488487][ T9283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.488530][ T9283] ? __pfx__kstrtoull+0x10/0x10 [ 334.488578][ T9283] ___sys_sendmsg+0x190/0x1e0 [ 334.488619][ T9283] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.488678][ T9283] ? find_held_lock+0x2b/0x80 [ 334.488753][ T9283] __sys_sendmmsg+0x20c/0x440 [ 334.488809][ T9283] ? __pfx___sys_sendmmsg+0x10/0x10 [ 334.488857][ T9283] ? ksys_write+0x190/0x250 [ 334.488920][ T9283] ? fput+0x79/0x100 [ 334.488959][ T9283] ? ksys_write+0x1ac/0x250 [ 334.489002][ T9283] ? __pfx_ksys_write+0x10/0x10 [ 334.489039][ T9283] __x64_sys_sendmmsg+0x9c/0x100 [ 334.489087][ T9283] ? lockdep_hardirqs_on+0x78/0x100 [ 334.489129][ T9283] do_syscall_64+0x115/0x840 [ 334.489171][ T9283] ? clear_bhb_loop+0x40/0x90 [ 334.489210][ T9283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.489243][ T9283] RIP: 0033:0x7f235879e019 [ 334.489269][ T9283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.489298][ T9283] RSP: 002b:00007f2359587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.489326][ T9283] RAX: ffffffffffffffda RBX: 00007f2358a25fa0 RCX: 00007f235879e019 [ 334.489346][ T9283] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 334.489365][ T9283] RBP: 00007f2359587090 R08: 0000000000000000 R09: 0000000000000000 [ 334.489383][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.489401][ T9283] R13: 00007f2358a26038 R14: 00007f2358a25fa0 R15: 00007fff3f45c598 [ 334.489442][ T9283] [ 335.341826][ T9287] FAULT_INJECTION: forcing a failure. [ 335.341826][ T9287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.368355][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.0.534 Not tainted syzkaller #0 PREEMPT(full) [ 335.368401][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.368414][ T9287] Call Trace: [ 335.368423][ T9287] [ 335.368456][ T9287] dump_stack_lvl+0x100/0x190 [ 335.368500][ T9287] should_fail_ex.cold+0x5/0xa [ 335.368526][ T9287] _copy_from_user+0x2e/0xd0 [ 335.368567][ T9287] tty_ioctl+0x960/0x1640 [ 335.368601][ T9287] ? __pfx_tty_ioctl+0x10/0x10 [ 335.368642][ T9287] ? find_held_lock+0x2b/0x80 [ 335.368672][ T9287] ? __fget_files+0x215/0x3d0 [ 335.368692][ T9287] ? hook_file_ioctl_common+0x140/0x440 [ 335.368730][ T9287] ? __fget_files+0x21f/0x3d0 [ 335.368755][ T9287] ? __pfx_tty_ioctl+0x10/0x10 [ 335.368788][ T9287] __x64_sys_ioctl+0x18e/0x210 [ 335.368825][ T9287] do_syscall_64+0x115/0x840 [ 335.368856][ T9287] ? clear_bhb_loop+0x40/0x90 [ 335.368887][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.368911][ T9287] RIP: 0033:0x7f235879e019 [ 335.368929][ T9287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.368951][ T9287] RSP: 002b:00007f23569f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.368972][ T9287] RAX: ffffffffffffffda RBX: 00007f2358a26090 RCX: 00007f235879e019 [ 335.368986][ T9287] RDX: 0000200000000140 RSI: 0000000000005414 RDI: 0000000000000005 [ 335.369000][ T9287] RBP: 00007f23569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.369014][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.369027][ T9287] R13: 00007f2358a26128 R14: 00007f2358a26090 R15: 00007fff3f45c598 [ 335.369063][ T9287] [ 340.226147][ T9378] syz_tun: tun_chr_ioctl cmd 2147767521 [ 343.556560][ T9421] syz_tun: tun_chr_ioctl cmd 1074812118 [ 345.519904][ T9460] FAULT_INJECTION: forcing a failure. [ 345.519904][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 345.538049][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(full) [ 345.538103][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.538118][ T9460] Call Trace: [ 345.538129][ T9460] [ 345.538139][ T9460] dump_stack_lvl+0x100/0x190 [ 345.538177][ T9460] should_fail_ex.cold+0x5/0xa [ 345.538212][ T9460] should_failslab+0xc2/0x120 [ 345.538259][ T9460] __kmalloc_noprof+0xfc/0x820 [ 345.538308][ T9460] ? rcu_is_watching+0x12/0xc0 [ 345.538343][ T9460] ? tomoyo_realpath_from_path+0xb6/0x690 [ 345.538396][ T9460] tomoyo_realpath_from_path+0xb6/0x690 [ 345.538470][ T9460] tomoyo_path_number_perm+0x23c/0x580 [ 345.538510][ T9460] ? tomoyo_path_number_perm+0x22e/0x580 [ 345.538554][ T9460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 345.538641][ T9460] ? find_held_lock+0x2b/0x80 [ 345.538679][ T9460] ? __fget_files+0x215/0x3d0 [ 345.538706][ T9460] ? hook_file_ioctl_common+0x140/0x440 [ 345.538747][ T9460] ? __fget_files+0x215/0x3d0 [ 345.538781][ T9460] ? __fget_files+0x21f/0x3d0 [ 345.538816][ T9460] security_file_ioctl+0xd3/0x230 [ 345.538859][ T9460] __x64_sys_ioctl+0xb7/0x210 [ 345.538907][ T9460] do_syscall_64+0x115/0x840 [ 345.538948][ T9460] ? clear_bhb_loop+0x40/0x90 [ 345.538986][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.539017][ T9460] RIP: 0033:0x7fb59dd9e019 [ 345.539041][ T9460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.539068][ T9460] RSP: 002b:00007fb59ec3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.539097][ T9460] RAX: ffffffffffffffda RBX: 00007fb59e025fa0 RCX: 00007fb59dd9e019 [ 345.539117][ T9460] RDX: 0000000000000000 RSI: 0000000040044103 RDI: 0000000000000003 [ 345.539135][ T9460] RBP: 00007fb59ec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 345.539152][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.539169][ T9460] R13: 00007fb59e026038 R14: 00007fb59e025fa0 R15: 00007fffc71307e8 [ 345.539209][ T9460] [ 345.539231][ T9460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 346.329880][ T9485] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9485] [ 346.988349][ T9486] hub 1-0:1.0: USB hub found [ 347.002718][ T9486] hub 1-0:1.0: 1 port detected [ 351.086293][ T9559] netlink: 338 bytes leftover after parsing attributes in process `syz.0.575'. [ 352.576420][ T9585] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9585] [ 353.006619][ T9592] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 353.694216][ T9605] FAULT_INJECTION: forcing a failure. [ 353.694216][ T9605] name failslab, interval 1, probability 0, space 0, times 0 [ 353.729034][ T9605] CPU: 0 UID: 0 PID: 9605 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(full) [ 353.729073][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.729091][ T9605] Call Trace: [ 353.729176][ T9605] [ 353.729187][ T9605] dump_stack_lvl+0x100/0x190 [ 353.729331][ T9605] should_fail_ex.cold+0x5/0xa [ 353.729384][ T9605] should_failslab+0xc2/0x120 [ 353.729457][ T9605] __kmalloc_noprof+0xfc/0x820 [ 353.729499][ T9605] ? rcu_is_watching+0x12/0xc0 [ 353.729558][ T9605] ? tomoyo_realpath_from_path+0xb6/0x690 [ 353.729719][ T9605] tomoyo_realpath_from_path+0xb6/0x690 [ 353.729779][ T9605] tomoyo_path_number_perm+0x23c/0x580 [ 353.729841][ T9605] ? tomoyo_path_number_perm+0x22e/0x580 [ 353.729889][ T9605] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.729973][ T9605] ? find_held_lock+0x2b/0x80 [ 353.730020][ T9605] ? __fget_files+0x215/0x3d0 [ 353.730063][ T9605] ? hook_file_ioctl_common+0x140/0x440 [ 353.730153][ T9605] ? __fget_files+0x215/0x3d0 [ 353.730191][ T9605] ? __fget_files+0x21f/0x3d0 [ 353.730227][ T9605] security_file_ioctl+0xd3/0x230 [ 353.730304][ T9605] __x64_sys_ioctl+0xb7/0x210 [ 353.730361][ T9605] do_syscall_64+0x115/0x840 [ 353.730495][ T9605] ? clear_bhb_loop+0x40/0x90 [ 353.730546][ T9605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.730579][ T9605] RIP: 0033:0x7f235879e019 [ 353.730606][ T9605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.730635][ T9605] RSP: 002b:00007f2359587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.730693][ T9605] RAX: ffffffffffffffda RBX: 00007f2358a25fa0 RCX: 00007f235879e019 [ 353.730714][ T9605] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000003 [ 353.730733][ T9605] RBP: 00007f2359587090 R08: 0000000000000000 R09: 0000000000000000 [ 353.730751][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.730770][ T9605] R13: 00007f2358a26038 R14: 00007f2358a25fa0 R15: 00007fff3f45c598 [ 353.730812][ T9605] [ 353.731974][ T9605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.161678][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 354.175735][ T9611] netlink: 25 bytes leftover after parsing attributes in process `syz.2.586'. [ 355.046200][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 357.510233][ T9679] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 359.065477][ T9688] mmap: syz.3.599 (9688) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 362.813763][ T9740] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 366.359553][ T9794] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9794] [ 366.415769][ T9797] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9797] [ 367.086077][ T9805] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 368.036239][ T9821] syz_tun: tun_chr_ioctl cmd 1074812118 [ 368.454906][ T9815] blktrace: Concurrent blktraces are not allowed on nbd5 [ 369.424580][ T9842] smpboot: CPU 1 is now offline [ 373.385548][ T9896] nbd: socks must be embedded in a SOCK_ITEM attr [ 374.277645][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 376.091345][ T9939] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9939] [ 378.463171][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.475103][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.398002][T10040] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10040] [ 388.019621][T10102] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 392.338380][T10160] nbd: socks must be embedded in a SOCK_ITEM attr [ 393.323669][T10180] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10180] [ 394.393814][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 400.056469][T10279] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10279] [ 400.182521][T10283] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10283] [ 402.283512][T10309] random: crng reseeded on system resumption [ 405.128491][T10354] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 405.447229][T10368] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10368] [ 407.925314][T10406] futex_wake_op: syz.3.707 tries to shift op by -2048; fix this program [ 407.978969][T10406] futex_wake_op: syz.3.707 tries to shift op by -2048; fix this program [ 408.023346][T10407] 0x000000000001-0x000000020000 : "" [ 408.159563][T10407] ftl_cs: FTL header corrupt! [ 413.562302][T10472] random: crng reseeded on system resumption [ 413.767243][ T50] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 416.483710][T10516] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 417.967465][T10536] FAULT_INJECTION: forcing a failure. [ 417.967465][T10536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.060222][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.2.728 Not tainted syzkaller #0 PREEMPT(full) [ 418.060254][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.060268][T10536] Call Trace: [ 418.060275][T10536] [ 418.060284][T10536] dump_stack_lvl+0x100/0x190 [ 418.060315][T10536] should_fail_ex.cold+0x5/0xa [ 418.060341][T10536] _copy_to_user+0x32/0xd0 [ 418.060480][T10536] simple_read_from_buffer+0xcb/0x170 [ 418.060562][T10536] proc_fail_nth_read+0x1af/0x230 [ 418.060622][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.060663][T10536] ? rw_verify_area+0xce/0x6d0 [ 418.060698][T10536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.060730][T10536] vfs_read+0x1e4/0xb40 [ 418.060755][T10536] ? __pfx_vfs_read+0x10/0x10 [ 418.060776][T10536] ? __fget_files+0x215/0x3d0 [ 418.060804][T10536] ? __fget_files+0x21f/0x3d0 [ 418.060834][T10536] ksys_read+0x12a/0x250 [ 418.060855][T10536] ? __pfx_ksys_read+0x10/0x10 [ 418.060884][T10536] do_syscall_64+0x115/0x840 [ 418.060916][T10536] ? clear_bhb_loop+0x40/0x90 [ 418.060945][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.060969][T10536] RIP: 0033:0x7fb59dd5e84e [ 418.060988][T10536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.061011][T10536] RSP: 002b:00007fb59ec3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.061033][T10536] RAX: ffffffffffffffda RBX: 00007fb59ec3b6c0 RCX: 00007fb59dd5e84e [ 418.061049][T10536] RDX: 000000000000000f RSI: 00007fb59ec3b0a0 RDI: 0000000000000004 [ 418.061063][T10536] RBP: 00007fb59ec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 418.061077][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.061091][T10536] R13: 00007fb59e026038 R14: 00007fb59e025fa0 R15: 00007fffc71307e8 [ 418.061121][T10536] [ 419.847661][T10574] FAULT_INJECTION: forcing a failure. [ 419.847661][T10574] name failslab, interval 1, probability 0, space 0, times 0 [ 419.904499][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.1.734 Not tainted syzkaller #0 PREEMPT(full) [ 419.904530][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.904545][T10574] Call Trace: [ 419.904553][T10574] [ 419.904562][T10574] dump_stack_lvl+0x100/0x190 [ 419.904595][T10574] should_fail_ex.cold+0x5/0xa [ 419.904622][T10574] should_failslab+0xc2/0x120 [ 419.904657][T10574] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 419.904688][T10574] ? kasan_save_track+0x14/0x30 [ 419.904718][T10574] ? __d_alloc+0x35/0xa50 [ 419.904749][T10574] __d_alloc+0x35/0xa50 [ 419.904778][T10574] d_alloc_parallel+0x105/0x14b0 [ 419.904822][T10574] ? __pfx_d_alloc_parallel+0x10/0x10 [ 419.904857][T10574] ? __pfx___might_resched+0x10/0x10 [ 419.904895][T10574] ? find_held_lock+0x2b/0x80 [ 419.904935][T10574] ? down_read+0x13b/0x4c0 [ 419.905048][T10574] ? __pfx_down_read+0x10/0x10 [ 419.905086][T10574] __lookup_slow+0x98/0x320 [ 419.905120][T10574] lookup_slow+0x50/0x70 [ 419.905151][T10574] link_path_walk+0x1377/0x1cc0 [ 419.905198][T10574] path_openat+0x1c9/0x4280 [ 419.905220][T10574] ? __kasan_slab_alloc+0x89/0x90 [ 419.905251][T10574] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 419.905279][T10574] ? do_getname+0x35/0x390 [ 419.905308][T10574] ? __x64_sys_openat+0x12d/0x210 [ 419.905361][T10574] ? __pfx_path_openat+0x10/0x10 [ 419.905391][T10574] do_file_open+0x20e/0x430 [ 419.905416][T10574] ? __pfx_do_file_open+0x10/0x10 [ 419.905458][T10574] ? alloc_fd+0x471/0x7a0 [ 419.905481][T10574] ? do_getname+0x191/0x390 [ 419.905512][T10574] do_sys_openat2+0x10f/0x1e0 [ 419.905542][T10574] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.905573][T10574] ? __x64_sys_close_range+0x2d9/0x5d0 [ 419.905603][T10574] __x64_sys_openat+0x12d/0x210 [ 419.905634][T10574] ? __pfx___x64_sys_openat+0x10/0x10 [ 419.905675][T10574] do_syscall_64+0x115/0x840 [ 419.905704][T10574] ? clear_bhb_loop+0x40/0x90 [ 419.905731][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.905753][T10574] RIP: 0033:0x7fd75879e019 [ 419.905771][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.905792][T10574] RSP: 002b:00007fd75963a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.905813][T10574] RAX: ffffffffffffffda RBX: 00007fd758a26450 RCX: 00007fd75879e019 [ 419.905828][T10574] RDX: 0000000000181202 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 419.905842][T10574] RBP: 00007fd75883500c R08: 0000000000000000 R09: 0000000000000000 [ 419.905855][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.905868][T10574] R13: 00007fd758a264e8 R14: 00007fd758a26450 R15: 00007ffde654b218 [ 419.905896][T10574] [ 422.738883][T10607] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10607] [ 424.635969][T10636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 426.369073][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 426.661132][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 426.812175][T10658] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10658] [ 429.652965][T10686] random: crng reseeded on system resumption [ 433.501971][T10740] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10740] [ 439.584554][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.593315][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.775095][T10861] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 442.268293][T10869] process 'syz.0.779' launched ':,' with NULL argv: empty string added [ 444.561711][T10893] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10893] [ 445.999832][T10912] FAULT_INJECTION: forcing a failure. [ 445.999832][T10912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.044493][T10912] CPU: 0 UID: 0 PID: 10912 Comm: syz.2.787 Not tainted syzkaller #0 PREEMPT(full) [ 446.044524][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.044538][T10912] Call Trace: [ 446.044546][T10912] [ 446.044554][T10912] dump_stack_lvl+0x100/0x190 [ 446.044586][T10912] should_fail_ex.cold+0x5/0xa [ 446.044614][T10912] _copy_from_iter+0x43a/0x1690 [ 446.044718][T10912] ? __pfx__copy_from_iter+0x10/0x10 [ 446.044754][T10912] ? __kvmalloc_node_noprof+0x36d/0x970 [ 446.044786][T10912] ? __asan_memset+0x23/0x50 [ 446.044812][T10912] ? __build_skb_around+0x278/0x390 [ 446.044873][T10912] ? is_vmalloc_addr+0x86/0xa0 [ 446.044902][T10912] netlink_sendmsg+0x808/0xda0 [ 446.044986][T10912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.045017][T10912] ? apparmor_socket_sendmsg+0x15b/0x270 [ 446.045081][T10912] ____sys_sendmsg+0xa4d/0xbe0 [ 446.045121][T10912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.045151][T10912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.045181][T10912] ? __pfx__kstrtoull+0x10/0x10 [ 446.045214][T10912] ___sys_sendmsg+0x190/0x1e0 [ 446.045243][T10912] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.045282][T10912] ? find_held_lock+0x2b/0x80 [ 446.045345][T10912] __sys_sendmmsg+0x20c/0x440 [ 446.045407][T10912] ? __pfx___sys_sendmmsg+0x10/0x10 [ 446.045441][T10912] ? ksys_write+0x190/0x250 [ 446.045484][T10912] ? fput+0x79/0x100 [ 446.045512][T10912] ? ksys_write+0x1ac/0x250 [ 446.045533][T10912] ? __pfx_ksys_write+0x10/0x10 [ 446.045559][T10912] __x64_sys_sendmmsg+0x9c/0x100 [ 446.045594][T10912] ? lockdep_hardirqs_on+0x78/0x100 [ 446.045628][T10912] do_syscall_64+0x115/0x840 [ 446.045659][T10912] ? clear_bhb_loop+0x40/0x90 [ 446.045689][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.045713][T10912] RIP: 0033:0x7fb59dd9e019 [ 446.045733][T10912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.045756][T10912] RSP: 002b:00007fb59ec3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.045778][T10912] RAX: ffffffffffffffda RBX: 00007fb59e025fa0 RCX: 00007fb59dd9e019 [ 446.045794][T10912] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 446.045808][T10912] RBP: 00007fb59ec3b090 R08: 0000000000000000 R09: 0000000000000000 [ 446.045822][T10912] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 446.045837][T10912] R13: 00007fb59e026038 R14: 00007fb59e025fa0 R15: 00007fffc71307e8 [ 446.045866][T10912] [ 447.161517][T10933] capability: warning: `syz.2.791' uses 32-bit capabilities (legacy support in use) [ 447.433524][T10942] FAULT_INJECTION: forcing a failure. [ 447.433524][T10942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.474660][T10942] CPU: 0 UID: 0 PID: 10942 Comm: syz.1.800 Not tainted syzkaller #0 PREEMPT(full) [ 447.474687][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.474698][T10942] Call Trace: [ 447.474704][T10942] [ 447.474712][T10942] dump_stack_lvl+0x100/0x190 [ 447.474738][T10942] should_fail_ex.cold+0x5/0xa [ 447.474761][T10942] _copy_from_user+0x2e/0xd0 [ 447.474794][T10942] copy_msghdr_from_user+0x9f/0x4c0 [ 447.474818][T10942] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 447.474845][T10942] ? rcu_is_watching+0x12/0xc0 [ 447.474870][T10942] ? ___sys_sendmsg+0x19d/0x1e0 [ 447.474890][T10942] ? kfree+0x1e5/0x6c0 [ 447.474913][T10942] ___sys_sendmsg+0x106/0x1e0 [ 447.474937][T10942] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.474980][T10942] ? __pfx___might_resched+0x10/0x10 [ 447.475016][T10942] __sys_sendmmsg+0x20c/0x440 [ 447.475049][T10942] ? __pfx___sys_sendmmsg+0x10/0x10 [ 447.475078][T10942] ? ksys_write+0x190/0x250 [ 447.475114][T10942] ? fput+0x79/0x100 [ 447.475140][T10942] ? ksys_write+0x1ac/0x250 [ 447.475157][T10942] ? __pfx_ksys_write+0x10/0x10 [ 447.475180][T10942] __x64_sys_sendmmsg+0x9c/0x100 [ 447.475209][T10942] ? lockdep_hardirqs_on+0x78/0x100 [ 447.475236][T10942] do_syscall_64+0x115/0x840 [ 447.475267][T10942] ? clear_bhb_loop+0x40/0x90 [ 447.475292][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.475312][T10942] RIP: 0033:0x7fd75879e019 [ 447.475329][T10942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.475348][T10942] RSP: 002b:00007fd7596df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 447.475367][T10942] RAX: ffffffffffffffda RBX: 00007fd758a25fa0 RCX: 00007fd75879e019 [ 447.475380][T10942] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 447.475392][T10942] RBP: 00007fd7596df090 R08: 0000000000000000 R09: 0000000000000000 [ 447.475404][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.475416][T10942] R13: 00007fd758a26038 R14: 00007fd758a25fa0 R15: 00007ffde654b218 [ 447.475441][T10942] [ 447.928536][T10949] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10949] [ 448.825203][T10961] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10961] [ 450.952515][T10985] Zero length message leads to an empty skb [ 452.001829][T11022] zram0: detected capacity change from 0 to 16 [ 452.302305][ T29] audit: type=1800 audit(4294967322.489:5): pid=11023 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.803" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 454.837528][ T29] audit: type=1800 audit(4294967325.032:6): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.816" name="members" dev="configfs" ino=59997 res=0 errno=0 [ 456.488799][T11056] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 456.799543][T11072] mmap: syz.0.811 (11072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 457.717624][T11086] can: request_module (can-proto-0) failed. [ 457.848266][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 461.263057][ T5631] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 461.292724][T11141] syz.1.824 uses obsolete (PF_INET,SOCK_PACKET) [ 463.202422][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 464.752682][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.832'. [ 464.897062][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.897353][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.904993][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.912691][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.920661][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.928013][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.935788][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.943415][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.953670][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 464.961005][ T5631] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 466.257205][T11207] FAULT_INJECTION: forcing a failure. [ 466.257205][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 466.334025][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.1.834 Not tainted syzkaller #0 PREEMPT(full) [ 466.334056][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.334071][T11207] Call Trace: [ 466.334078][T11207] [ 466.334087][T11207] dump_stack_lvl+0x100/0x190 [ 466.334118][T11207] should_fail_ex.cold+0x5/0xa [ 466.334145][T11207] should_failslab+0xc2/0x120 [ 466.334179][T11207] __kmalloc_noprof+0xfc/0x820 [ 466.334213][T11207] ? tomoyo_encode2+0xfb/0x3c0 [ 466.334255][T11207] tomoyo_encode2+0xfb/0x3c0 [ 466.334296][T11207] tomoyo_encode+0x29/0x50 [ 466.334330][T11207] tomoyo_realpath_from_path+0x18c/0x690 [ 466.334375][T11207] tomoyo_path_number_perm+0x23c/0x580 [ 466.334407][T11207] ? tomoyo_path_number_perm+0x22e/0x580 [ 466.334448][T11207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 466.334508][T11207] ? find_held_lock+0x2b/0x80 [ 466.334538][T11207] ? __fget_files+0x215/0x3d0 [ 466.334578][T11207] ? hook_file_ioctl_common+0x140/0x440 [ 466.334611][T11207] ? __fget_files+0x215/0x3d0 [ 466.334637][T11207] ? __fget_files+0x21f/0x3d0 [ 466.334663][T11207] security_file_ioctl+0xd3/0x230 [ 466.334696][T11207] __x64_sys_ioctl+0xb7/0x210 [ 466.334733][T11207] do_syscall_64+0x115/0x840 [ 466.334764][T11207] ? clear_bhb_loop+0x40/0x90 [ 466.334794][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.334818][T11207] RIP: 0033:0x7fd75879e019 [ 466.334838][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.334860][T11207] RSP: 002b:00007fd7596df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.334883][T11207] RAX: ffffffffffffffda RBX: 00007fd758a25fa0 RCX: 00007fd75879e019 [ 466.334899][T11207] RDX: 0000000000000000 RSI: 0000000040044103 RDI: 0000000000000003 [ 466.334913][T11207] RBP: 00007fd7596df090 R08: 0000000000000000 R09: 0000000000000000 [ 466.334927][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.334940][T11207] R13: 00007fd758a26038 R14: 00007fd758a25fa0 R15: 00007ffde654b218 [ 466.334970][T11207] [ 466.336200][T11207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 469.836553][T11265] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11265] [ 475.195000][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 475.227901][T11327] netlink: 25 bytes leftover after parsing attributes in process `syz.2.855'. [ 475.817972][T11336] process 'syz.2.856' launched ':,' with NULL argv: empty string added [ 477.314569][T11360] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11360] [ 480.543274][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 480.597409][T11413] FAULT_INJECTION: forcing a failure. [ 480.597409][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 480.683815][T11413] CPU: 0 UID: 0 PID: 11413 Comm: syz.1.870 Not tainted syzkaller #0 PREEMPT(full) [ 480.683846][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.683860][T11413] Call Trace: [ 480.683868][T11413] [ 480.683876][T11413] dump_stack_lvl+0x100/0x190 [ 480.683906][T11413] should_fail_ex.cold+0x5/0xa [ 480.683933][T11413] should_failslab+0xc2/0x120 [ 480.683967][T11413] __kmalloc_noprof+0xfc/0x820 [ 480.683997][T11413] ? tomoyo_encode2+0xfb/0x3c0 [ 480.684039][T11413] tomoyo_encode2+0xfb/0x3c0 [ 480.684082][T11413] tomoyo_encode+0x29/0x50 [ 480.684117][T11413] tomoyo_realpath_from_path+0x18c/0x690 [ 480.684167][T11413] tomoyo_path_number_perm+0x23c/0x580 [ 480.684199][T11413] ? tomoyo_path_number_perm+0x22e/0x580 [ 480.684233][T11413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.684293][T11413] ? find_held_lock+0x2b/0x80 [ 480.684323][T11413] ? __fget_files+0x215/0x3d0 [ 480.684344][T11413] ? hook_file_ioctl_common+0x140/0x440 [ 480.684376][T11413] ? __fget_files+0x215/0x3d0 [ 480.684402][T11413] ? __fget_files+0x21f/0x3d0 [ 480.684429][T11413] security_file_ioctl+0xd3/0x230 [ 480.684461][T11413] __x64_sys_ioctl+0xb7/0x210 [ 480.684498][T11413] do_syscall_64+0x115/0x840 [ 480.684529][T11413] ? clear_bhb_loop+0x40/0x90 [ 480.684559][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.684583][T11413] RIP: 0033:0x7fd75879e019 [ 480.684601][T11413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.684624][T11413] RSP: 002b:00007fd7596df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.684647][T11413] RAX: ffffffffffffffda RBX: 00007fd758a25fa0 RCX: 00007fd75879e019 [ 480.684663][T11413] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000003 [ 480.684677][T11413] RBP: 00007fd7596df090 R08: 0000000000000000 R09: 0000000000000000 [ 480.684691][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.684705][T11413] R13: 00007fd758a26038 R14: 00007fd758a25fa0 R15: 00007ffde654b218 [ 480.684735][T11413] [ 480.684762][T11413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.184252][T11409] futex_wake_op: syz.2.868 tries to shift op by -2048; fix this program [ 482.438212][T11442] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11442] [ 487.064963][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 487.137146][T11509] netlink: 25 bytes leftover after parsing attributes in process `syz.1.885'. [ 487.807240][T11520] Zero length message leads to an empty skb [ 487.864299][T11527] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[8711] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11527] [ 488.645797][T11524] hub 1-0:1.0: USB hub found [ 488.706924][T11524] hub 1-0:1.0: 1 port detected [ 500.051719][T11674] process 'syz.0.913' launched ':,' with NULL argv: empty string added [ 500.711346][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.719728][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.456507][ T29] audit: type=1800 audit(4294967380.936:7): pid=11799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.932" name="trace_pipe" dev="tracefs" ino=4219 res=0 errno=0 [ 513.164594][T11826] syz.1.936 uses obsolete (PF_INET,SOCK_PACKET) [ 539.269074][T12193] Zero length message leads to an empty skb [ 546.004983][T12300] process 'syz.2.1019' launched ':,' with NULL argv: empty string added [ 548.275415][T12317] net_ratelimit: 30 callbacks suppressed [ 548.275437][T12317] netlink: zone id is out of range [ 548.341055][T12317] netlink: zone id is out of range [ 548.374898][T12317] netlink: zone id is out of range [ 548.438582][T12317] netlink: zone id is out of range [ 548.478463][T12317] netlink: zone id is out of range [ 548.531036][T12317] netlink: zone id is out of range [ 548.573192][T12317] netlink: zone id is out of range [ 548.623061][T12317] netlink: zone id is out of range [ 548.667505][T12317] netlink: zone id is out of range [ 548.697975][T12317] netlink: zone id is out of range [ 551.544576][T12373] random: crng reseeded on system resumption [ 561.843860][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.852468][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.133336][T12517] process 'syz.0.1054' launched ':,' with NULL argv: empty string added [ 622.967309][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.975536][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.095173][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.106023][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.222200][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.233418][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.355400][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.364452][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.477610][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.488273][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.605802][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 928.614061][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.246376][T17446] Zero length message leads to an empty skb [ 986.173070][T18001] FAULT_INJECTION: forcing a failure. [ 986.173070][T18001] name failslab, interval 1, probability 0, space 0, times 0 [ 986.249385][T18001] CPU: 0 UID: 0 PID: 18001 Comm: syz.0.1851 Not tainted syzkaller #0 PREEMPT(full) [ 986.249419][T18001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.249433][T18001] Call Trace: [ 986.249441][T18001] [ 986.249449][T18001] dump_stack_lvl+0x100/0x190 [ 986.249482][T18001] should_fail_ex.cold+0x5/0xa [ 986.249510][T18001] should_failslab+0xc2/0x120 [ 986.249544][T18001] kmem_cache_alloc_noprof+0x91/0x6a0 [ 986.249574][T18001] ? trace_kmem_cache_alloc+0xdd/0x100 [ 986.249607][T18001] ? security_file_alloc+0x34/0x2c0 [ 986.249731][T18001] security_file_alloc+0x34/0x2c0 [ 986.249766][T18001] init_file+0x95/0x480 [ 986.249795][T18001] alloc_empty_file+0x79/0x1c0 [ 986.249826][T18001] dentry_open+0x46/0xd0 [ 986.249863][T18001] ima_calc_file_hash+0xe1/0x380 [ 986.249920][T18001] ima_collect_measurement+0x94f/0xb30 [ 986.249966][T18001] ? __pfx_ima_collect_measurement+0x10/0x10 [ 986.250016][T18001] ? process_measurement+0x5ab/0x2350 [ 986.250046][T18001] ? is_bad_inode+0xd/0x40 [ 986.250080][T18001] ? xattr_resolve_name+0x27d/0x3f0 [ 986.250108][T18001] ? vfs_getxattr_alloc+0xec/0x350 [ 986.250139][T18001] ? ima_get_hash_algo+0x241/0x400 [ 986.250164][T18001] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 986.250196][T18001] ? process_measurement+0xdfe/0x2350 [ 986.250224][T18001] process_measurement+0xdfe/0x2350 [ 986.250260][T18001] ? lock_acquire+0x1b9/0x370 [ 986.250298][T18001] ? __pfx_process_measurement+0x10/0x10 [ 986.250330][T18001] ? rcu_is_watching+0x12/0xc0 [ 986.250360][T18001] ? trace_contention_end+0x126/0x160 [ 986.250384][T18001] ? __mutex_lock+0x26d/0x1bd0 [ 986.250419][T18001] ? trace_array_get+0x1e/0x140 [ 986.250452][T18001] ? find_held_lock+0x2b/0x80 [ 986.250480][T18001] ? trace_array_get+0x10c/0x140 [ 986.250513][T18001] ? trace_array_get+0x10c/0x140 [ 986.250569][T18001] ? trace_array_get+0x10c/0x140 [ 986.250607][T18001] ima_file_check+0xcc/0x120 [ 986.250637][T18001] ? __pfx_ima_file_check+0x10/0x10 [ 986.250673][T18001] security_file_post_open+0xc4/0x210 [ 986.250706][T18001] path_openat+0x985/0x4280 [ 986.250743][T18001] ? __pfx_path_openat+0x10/0x10 [ 986.250775][T18001] do_file_open+0x20e/0x430 [ 986.250801][T18001] ? __pfx_do_file_open+0x10/0x10 [ 986.250852][T18001] ? alloc_fd+0x471/0x7a0 [ 986.250877][T18001] ? do_getname+0x191/0x390 [ 986.250910][T18001] do_sys_openat2+0x10f/0x1e0 [ 986.250942][T18001] ? __pfx_do_sys_openat2+0x10/0x10 [ 986.250974][T18001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 986.251008][T18001] ? __fget_files+0x21f/0x3d0 [ 986.251035][T18001] __x64_sys_openat+0x12d/0x210 [ 986.251068][T18001] ? __pfx___x64_sys_openat+0x10/0x10 [ 986.251099][T18001] ? ksys_write+0x1ac/0x250 [ 986.251130][T18001] do_syscall_64+0x115/0x840 [ 986.251174][T18001] ? clear_bhb_loop+0x40/0x90 [ 986.251201][T18001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.251224][T18001] RIP: 0033:0x7f235879e019 [ 986.251243][T18001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.251266][T18001] RSP: 002b:00007f2359587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 986.251288][T18001] RAX: ffffffffffffffda RBX: 00007f2358a25fa0 RCX: 00007f235879e019 [ 986.251303][T18001] RDX: 000000003882873f RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 986.251317][T18001] RBP: 00007f2359587090 R08: 0000000000000000 R09: 0000000000000000 [ 986.251348][T18001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.251363][T18001] R13: 00007f2358a26038 R14: 00007f2358a25fa0 R15: 00007fff3f45c598 [ 986.251393][T18001] [ 987.567986][ T29] audit: type=1800 audit(4294967860.489:8): pid=18001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1851" name="trace" dev="tracefs" ino=4180 res=0 errno=0 [ 989.734675][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.744884][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.742469][T18171] net_ratelimit: 30 callbacks suppressed [ 998.742490][T18171] netlink: zone id is out of range [ 998.812034][T18171] netlink: zone id is out of range [ 998.851051][T18171] netlink: zone id is out of range [ 998.904939][T18171] netlink: zone id is out of range [ 998.951714][T18171] netlink: zone id is out of range [ 998.997843][T18171] netlink: zone id is out of range [ 999.047437][T18171] netlink: zone id is out of range [ 999.099736][T18171] netlink: zone id is out of range [ 999.136831][T18171] netlink: zone id is out of range [ 999.183354][T18171] netlink: zone id is out of range [ 1008.193970][T18296] FAULT_INJECTION: forcing a failure. [ 1008.193970][T18296] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.242275][T18296] CPU: 0 UID: 0 PID: 18296 Comm: syz.3.1893 Not tainted syzkaller #0 PREEMPT(full) [ 1008.242305][T18296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1008.242320][T18296] Call Trace: [ 1008.242327][T18296] [ 1008.242336][T18296] dump_stack_lvl+0x100/0x190 [ 1008.242367][T18296] should_fail_ex.cold+0x5/0xa [ 1008.242394][T18296] should_failslab+0xc2/0x120 [ 1008.242428][T18296] __kmalloc_noprof+0xfc/0x820 [ 1008.242458][T18296] ? arch_stack_walk+0xa6/0xf0 [ 1008.242491][T18296] ? constrain_params_by_rules+0x175/0xd20 [ 1008.242592][T18296] constrain_params_by_rules+0x175/0xd20 [ 1008.242621][T18296] ? stack_trace_save+0x8e/0xc0 [ 1008.242654][T18296] ? __pfx_stack_trace_save+0x10/0x10 [ 1008.242692][T18296] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1008.242720][T18296] ? kasan_save_track+0x14/0x30 [ 1008.242749][T18296] ? __kasan_kmalloc+0xaa/0xb0 [ 1008.242779][T18296] ? snd_pcm_oss_set_trigger.isra.0+0x5e/0x6c0 [ 1008.242834][T18296] ? snd_pcm_oss_ioctl+0x1f17/0x3790 [ 1008.242860][T18296] ? __x64_sys_ioctl+0x18e/0x210 [ 1008.242892][T18296] ? do_syscall_64+0x115/0x840 [ 1008.242935][T18296] ? snd_interval_refine+0x2d0/0x580 [ 1008.242973][T18296] snd_pcm_hw_refine+0x82a/0xb40 [ 1008.243002][T18296] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1008.243038][T18296] ? kasan_save_track+0x14/0x30 [ 1008.243067][T18296] ? __kasan_kmalloc+0xaa/0xb0 [ 1008.243100][T18296] snd_pcm_hw_param_first+0x2b0/0x680 [ 1008.243145][T18296] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 1008.243180][T18296] ? lockdep_hardirqs_on+0x78/0x100 [ 1008.243212][T18296] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1008.243238][T18296] ? snd_pcm_oss_change_params_locked+0x9d0/0x39f0 [ 1008.243265][T18296] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 1008.243292][T18296] ? kfree+0x22b/0x6c0 [ 1008.243321][T18296] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 1008.243350][T18296] ? trace_contention_end+0x57/0x160 [ 1008.243382][T18296] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1008.243410][T18296] ? __pfx___mutex_lock+0x10/0x10 [ 1008.243445][T18296] ? __lock_acquire+0x49f/0x1a40 [ 1008.243498][T18296] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1008.243527][T18296] snd_pcm_oss_set_trigger.isra.0+0x5e/0x6c0 [ 1008.243559][T18296] snd_pcm_oss_ioctl+0x1f17/0x3790 [ 1008.243586][T18296] ? find_held_lock+0x2b/0x80 [ 1008.243615][T18296] ? __fget_files+0x215/0x3d0 [ 1008.243636][T18296] ? hook_file_ioctl_common+0x140/0x440 [ 1008.243670][T18296] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1008.243700][T18296] ? __fget_files+0x21f/0x3d0 [ 1008.243726][T18296] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1008.243755][T18296] __x64_sys_ioctl+0x18e/0x210 [ 1008.243791][T18296] do_syscall_64+0x115/0x840 [ 1008.243822][T18296] ? clear_bhb_loop+0x40/0x90 [ 1008.243851][T18296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.243875][T18296] RIP: 0033:0x7fa363f9e019 [ 1008.243894][T18296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.243916][T18296] RSP: 002b:00007fa3621f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.243939][T18296] RAX: ffffffffffffffda RBX: 00007fa364226090 RCX: 00007fa363f9e019 [ 1008.243955][T18296] RDX: 0000000000000000 RSI: 0000000040045010 RDI: 0000000000000006 [ 1008.243980][T18296] RBP: 00007fa3621f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.243994][T18296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1008.244007][T18296] R13: 00007fa364226128 R14: 00007fa364226090 R15: 00007fff9568e288 [ 1008.244036][T18296] [ 1018.049986][ T29] audit: type=1804 audit(4294967297.452:9): pid=18442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1916" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject" dev="tracefs" ino=19680823 res=1 errno=0 [ 1018.095955][T18442] ======================================================= [ 1018.095955][T18442] WARNING: The mand mount option has been deprecated and [ 1018.095955][T18442] and is ignored by this kernel. Remove the mand [ 1018.095955][T18442] option from the mount to silence this warning. [ 1018.095955][T18442] ======================================================= [ 1019.169629][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 1021.879001][T18500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 1050.865125][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.873968][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.909206][T19454] futex_wake_op: syz.2.2062 tries to shift op by -2048; fix this program [ 1093.989554][T19454] futex_wake_op: syz.2.2062 tries to shift op by -2048; fix this program [ 1094.038446][T19448] can: request_module (can-proto-0) failed. [ 1111.991726][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.000509][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.025105][T19917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2128'. [ 1128.258924][T19917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.271813][T19917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.284834][T19917] bond0 (unregistering): Released all slaves [ 1154.529520][T20278] syz.3.2180 uses obsolete (PF_INET,SOCK_PACKET) [ 1154.747836][T20288] input: f¬ as /devices/virtual/input/input10 [ 1173.119437][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.131445][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1205.807130][T20961] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2280'. [ 1217.354809][T21127] FAULT_INJECTION: forcing a failure. [ 1217.354809][T21127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.409967][T21127] CPU: 0 UID: 0 PID: 21127 Comm: syz.1.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.410004][T21127] Tainted: [L]=SOFTLOCKUP [ 1217.410012][T21127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1217.410034][T21127] Call Trace: [ 1217.410041][T21127] [ 1217.410050][T21127] dump_stack_lvl+0x100/0x190 [ 1217.410084][T21127] should_fail_ex.cold+0x5/0xa [ 1217.410112][T21127] _copy_to_user+0x32/0xd0 [ 1217.410155][T21127] simple_read_from_buffer+0xcb/0x170 [ 1217.410199][T21127] proc_fail_nth_read+0x1af/0x230 [ 1217.410233][T21127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1217.410268][T21127] ? rw_verify_area+0xce/0x6d0 [ 1217.410303][T21127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1217.410336][T21127] vfs_read+0x1e4/0xb40 [ 1217.410362][T21127] ? __pfx_vfs_read+0x10/0x10 [ 1217.410383][T21127] ? __fget_files+0x215/0x3d0 [ 1217.410411][T21127] ? __fget_files+0x21f/0x3d0 [ 1217.410457][T21127] ksys_read+0x12a/0x250 [ 1217.410479][T21127] ? __pfx_ksys_read+0x10/0x10 [ 1217.410508][T21127] do_syscall_64+0x115/0x840 [ 1217.410543][T21127] ? clear_bhb_loop+0x40/0x90 [ 1217.410573][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.410597][T21127] RIP: 0033:0x7fd75875e84e [ 1217.410615][T21127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1217.410639][T21127] RSP: 002b:00007fd7596defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1217.410661][T21127] RAX: ffffffffffffffda RBX: 00007fd7596df6c0 RCX: 00007fd75875e84e [ 1217.410676][T21127] RDX: 000000000000000f RSI: 00007fd7596df0a0 RDI: 0000000000000004 [ 1217.410690][T21127] RBP: 00007fd7596df090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.410709][T21127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.410723][T21127] R13: 00007fd758a26038 R14: 00007fd758a25fa0 R15: 00007ffde654b218 [ 1217.410753][T21127] [ 1218.976395][ T5631] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1230.601576][T21289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1230.623938][T21289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1230.632691][T21289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1230.642498][T21289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1230.652372][T21289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1231.750940][ T976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.039909][ T976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.198370][ T976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.732864][T21289] Bluetooth: hci4: command tx timeout [ 1233.546865][ T976] bridge_slave_1: left allmulticast mode [ 1233.561834][ T976] bridge_slave_1: left promiscuous mode [ 1233.567679][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.577109][ T976] bridge_slave_0: left allmulticast mode [ 1233.583636][ T976] bridge_slave_0: left promiscuous mode [ 1233.589961][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.767056][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.788012][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.799843][ T976] bond0 (unregistering): Released all slaves [ 1234.250973][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.263327][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.806873][T21289] Bluetooth: hci4: command tx timeout [ 1235.660965][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1235.691405][T21288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.701493][T21288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.709658][T21288] bridge_slave_0: entered allmulticast mode [ 1235.717031][T21288] bridge_slave_0: entered promiscuous mode [ 1235.867592][T21288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.882338][T21288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.890936][T21288] bridge_slave_1: entered allmulticast mode [ 1235.903007][T21288] bridge_slave_1: entered promiscuous mode [ 1236.250607][ T976] hsr_slave_0: left promiscuous mode [ 1236.261072][ T976] hsr_slave_1: left promiscuous mode [ 1236.267777][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.276838][ T976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.286477][ T976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.294023][ T976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.310764][ T976] veth1_macvtap: left promiscuous mode [ 1236.317510][ T976] veth0_macvtap: left promiscuous mode [ 1236.323103][ T976] veth1_vlan: left promiscuous mode [ 1236.329791][ T976] veth0_vlan: left promiscuous mode [ 1236.572624][ T976] team0 (unregistering): Port device team_slave_1 removed [ 1236.598329][ T976] team0 (unregistering): Port device team_slave_0 removed [ 1236.839221][T21288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.871872][T21289] Bluetooth: hci4: command tx timeout [ 1236.963652][T21288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.147536][T21288] team0: Port device team_slave_0 added [ 1237.203665][T21288] team0: Port device team_slave_1 added [ 1237.389955][T21288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.442447][T21288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.577865][T21288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.640032][T21288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.670388][T21288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.804459][T21288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.941137][T21289] Bluetooth: hci4: command tx timeout [ 1239.063243][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1239.199597][T21288] hsr_slave_0: entered promiscuous mode [ 1239.206451][T21288] hsr_slave_1: entered promiscuous mode [ 1239.213623][T21288] debugfs: 'hsr0' already exists in 'hsr' [ 1239.219463][T21288] Cannot create hsr debugfs directory [ 1242.518965][T21288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1242.564201][T21288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.608160][T21288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1242.664911][T21466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2350'. [ 1242.674972][T21288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1242.914553][T21288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1242.994654][T21288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1243.175315][T21288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1243.218477][T21288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1244.618657][T21288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.737277][T21288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.797155][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.804533][ T976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.885887][ T976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.893075][ T976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.908413][T21288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.497565][T21288] veth0_vlan: entered promiscuous mode [ 1249.628405][T21288] veth1_vlan: entered promiscuous mode [ 1250.955061][T21288] veth0_macvtap: entered promiscuous mode [ 1251.005246][T21288] veth1_macvtap: entered promiscuous mode [ 1251.088562][T21288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.122784][T21288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.290921][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.371927][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.430545][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.517351][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.726688][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.752171][T21612] Line length is too long: Should be less than 4094 [ 1251.769936][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.127003][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.153164][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.369146][T21288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1254.503176][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1254.515274][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1254.523740][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1254.533496][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1254.546895][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.438759][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.759701][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.121129][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.194200][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.612103][ T5631] Bluetooth: hci1: command tx timeout [ 1257.364470][ T12] bridge_slave_1: left allmulticast mode [ 1257.391689][ T12] bridge_slave_1: left promiscuous mode [ 1257.423678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.478896][ T12] bridge_slave_0: left allmulticast mode [ 1257.513673][ T12] bridge_slave_0: left promiscuous mode [ 1257.538767][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.681008][ T5631] Bluetooth: hci1: command tx timeout [ 1259.150026][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1260.750063][ T5631] Bluetooth: hci1: command tx timeout [ 1261.114106][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1261.496435][T21636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.503890][T21636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.513896][T21636] bridge_slave_0: entered allmulticast mode [ 1261.521512][T21636] bridge_slave_0: entered promiscuous mode [ 1261.667467][T21636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.681221][T21636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.690319][T21636] bridge_slave_1: entered allmulticast mode [ 1261.699325][T21636] bridge_slave_1: entered promiscuous mode [ 1261.812102][ T12] hsr_slave_0: left promiscuous mode [ 1261.823352][ T12] hsr_slave_1: left promiscuous mode [ 1261.842221][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.855089][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.875716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.894743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.925477][ T12] veth1_macvtap: left promiscuous mode [ 1261.938928][ T12] veth0_macvtap: left promiscuous mode [ 1261.953968][ T12] veth1_vlan: left promiscuous mode [ 1261.966339][ T12] veth0_vlan: left promiscuous mode [ 1262.495912][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1262.536783][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1262.819971][ T5631] Bluetooth: hci1: command tx timeout [ 1262.893771][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1263.123690][T21636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.156190][T21636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.402872][T21636] team0: Port device team_slave_0 added [ 1263.532686][T21636] team0: Port device team_slave_1 added [ 1263.767770][T21636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.799935][T21636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.925783][T21636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.162083][T21636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.205251][T21636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.308006][T21636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.025111][T21636] hsr_slave_0: entered promiscuous mode [ 1265.052761][T21636] hsr_slave_1: entered promiscuous mode [ 1265.062175][T21636] debugfs: 'hsr0' already exists in 'hsr' [ 1265.068271][T21636] Cannot create hsr debugfs directory [ 1265.106613][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1265.863531][T21803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2380'. [ 1270.595971][T21636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1270.672949][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1270.729308][T21636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1270.813045][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1270.855628][T21636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1270.930925][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1270.986963][T21636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1271.072732][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1272.728062][T21636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.860731][T21636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.925266][T21598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.932478][T21598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.042198][T21598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.049403][T21598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.839888][T21636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.158036][T21636] veth0_vlan: entered promiscuous mode [ 1278.487327][T22014] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1278.496866][T21636] veth1_vlan: entered promiscuous mode [ 1280.737093][T21636] veth0_macvtap: entered promiscuous mode [ 1280.777023][T21636] veth1_macvtap: entered promiscuous mode [ 1280.972462][T21636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.079290][T21636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.568920][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.298230][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.560584][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.598509][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.633161][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.702780][ T1132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.936864][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.962409][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.068190][T21289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1287.087196][T21289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1287.102642][T21289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1287.115557][T21289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1287.124680][T21289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1287.952053][ T1132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.341816][ T1132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.658339][ T1132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.040921][ T1132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.166394][ T5631] Bluetooth: hci0: command tx timeout [ 1289.684962][T22152] usb usb4: usbfs: process 22152 (syz.2.2412) did not claim interface 0 before use [ 1290.149352][ T1132] bridge_slave_1: left allmulticast mode [ 1290.179564][ T1132] bridge_slave_1: left promiscuous mode [ 1290.211604][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.277255][ T1132] bridge_slave_0: left allmulticast mode [ 1290.316091][ T1132] bridge_slave_0: left promiscuous mode [ 1290.348127][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.967168][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.010258][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.054391][ T1132] bond0 (unregistering): Released all slaves [ 1291.234389][ T5631] Bluetooth: hci0: command tx timeout [ 1291.919366][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1293.303831][ T5631] Bluetooth: hci0: command tx timeout [ 1294.198593][T22119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.235185][T22119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.261793][T22119] bridge_slave_0: entered allmulticast mode [ 1294.290835][T22119] bridge_slave_0: entered promiscuous mode [ 1294.461236][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1294.498487][T22119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.515209][T22119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.533387][T22119] bridge_slave_1: entered allmulticast mode [ 1294.551282][T22119] bridge_slave_1: entered promiscuous mode [ 1294.635456][ T1132] hsr_slave_0: left promiscuous mode [ 1294.643909][ T1132] hsr_slave_1: left promiscuous mode [ 1294.650357][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.660014][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.668577][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.676145][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.692962][ T1132] veth1_macvtap: left promiscuous mode [ 1294.699630][ T1132] veth0_macvtap: left promiscuous mode [ 1294.705199][ T1132] veth1_vlan: left promiscuous mode [ 1294.711404][ T1132] veth0_vlan: left promiscuous mode [ 1294.953067][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 1294.972472][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 1295.376581][ T5631] Bluetooth: hci0: command tx timeout [ 1295.382514][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.391934][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.477367][T22119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.890935][T22119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.236042][T22119] team0: Port device team_slave_0 added [ 1296.422201][T22119] team0: Port device team_slave_1 added [ 1296.635831][T22119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.678825][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.787688][T22119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.881908][T22119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.921031][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.062877][T22119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.273901][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1297.994880][T22119] hsr_slave_0: entered promiscuous mode [ 1298.027070][T22119] hsr_slave_1: entered promiscuous mode [ 1298.055182][T22119] debugfs: 'hsr0' already exists in 'hsr' [ 1298.075187][T22119] Cannot create hsr debugfs directory [ 1299.760689][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1303.680294][T22119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1303.744804][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1303.825139][T22119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1303.893277][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1303.932854][T22119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1303.964990][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1304.025058][T22119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1304.093988][T22119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1306.571400][T22119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.697330][T22119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.772264][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.779459][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.907490][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.914725][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.230996][T22119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.422544][T22119] veth0_vlan: entered promiscuous mode [ 1312.495006][T22119] veth1_vlan: entered promiscuous mode [ 1312.647360][T22119] veth0_macvtap: entered promiscuous mode [ 1312.696130][T22119] veth1_macvtap: entered promiscuous mode [ 1313.498359][T22119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.857879][T22119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.055868][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.153709][ T1132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.264479][ T1132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.928398][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.347716][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.397295][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.141838][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.174227][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.652629][T22716] FAULT_INJECTION: forcing a failure. [ 1332.652629][T22716] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1332.710076][T22716] CPU: 0 UID: 0 PID: 22716 Comm: syz.2.2467 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.710114][T22716] Tainted: [L]=SOFTLOCKUP [ 1332.710122][T22716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1332.710138][T22716] Call Trace: [ 1332.710145][T22716] [ 1332.710154][T22716] dump_stack_lvl+0x100/0x190 [ 1332.710189][T22716] should_fail_ex.cold+0x5/0xa [ 1332.710218][T22716] get_futex_key+0x1d2/0x14f0 [ 1332.710248][T22716] ? __pfx_get_futex_key+0x10/0x10 [ 1332.710282][T22716] futex_wake+0xf4/0x5e0 [ 1332.710315][T22716] ? __pfx___vma_start_write+0x10/0x10 [ 1332.710358][T22716] ? __pfx_futex_wake+0x10/0x10 [ 1332.710395][T22716] ? ksm_add_vmas+0x27b/0x360 [ 1332.710428][T22716] do_futex+0x2b2/0x440 [ 1332.710456][T22716] ? __pfx_do_futex+0x10/0x10 [ 1332.710480][T22716] ? find_held_lock+0x2b/0x80 [ 1332.710512][T22716] ? __do_sys_prctl+0x114d/0x2270 [ 1332.710577][T22716] ? __do_sys_prctl+0x114d/0x2270 [ 1332.710618][T22716] __x64_sys_futex+0x34f/0x4d0 [ 1332.710650][T22716] ? __pfx___x64_sys_futex+0x10/0x10 [ 1332.710680][T22716] ? __pfx___do_sys_prctl+0x10/0x10 [ 1332.710725][T22716] do_syscall_64+0x115/0x840 [ 1332.710760][T22716] ? clear_bhb_loop+0x40/0x90 [ 1332.710790][T22716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.710818][T22716] RIP: 0033:0x7f7df299e019 [ 1332.710838][T22716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.710862][T22716] RSP: 002b:00007f7df38120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1332.710886][T22716] RAX: ffffffffffffffda RBX: 00007f7df2c25fa8 RCX: 00007f7df299e019 [ 1332.710910][T22716] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7df2c25fac [ 1332.710926][T22716] RBP: 00007f7df2c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1332.710941][T22716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1332.710955][T22716] R13: 00007f7df2c26038 R14: 00007ffde9414370 R15: 00007ffde9414458 [ 1332.710986][T22716] [ 1333.023300][T22730] mmap: syz.0.2469 (22730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1342.549540][ T5631] bt_warn_ratelimited: 23 callbacks suppressed [ 1342.549558][ T5631] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 1349.222770][T22938] zswap: compressor 000 not available [ 1353.482708][T21289] Bluetooth: hci4: command 0x0406 tx timeout [ 1356.503616][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.510011][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.605346][T23147] FAULT_INJECTION: forcing a failure. [ 1364.605346][T23147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.662642][T23147] CPU: 0 UID: 0 PID: 23147 Comm: syz.0.2531 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.662677][T23147] Tainted: [L]=SOFTLOCKUP [ 1364.662685][T23147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1364.662700][T23147] Call Trace: [ 1364.662707][T23147] [ 1364.662716][T23147] dump_stack_lvl+0x100/0x190 [ 1364.662746][T23147] should_fail_ex.cold+0x5/0xa [ 1364.662773][T23147] _copy_to_user+0x32/0xd0 [ 1364.662816][T23147] do_pages_stat+0x559/0x7f0 [ 1364.662860][T23147] ? __pfx_do_pages_stat+0x10/0x10 [ 1364.662900][T23147] ? find_held_lock+0x2b/0x80 [ 1364.662952][T23147] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1364.662982][T23147] ? lockdep_hardirqs_on+0x78/0x100 [ 1364.663013][T23147] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1364.663045][T23147] kernel_move_pages+0xf11/0x14a0 [ 1364.663087][T23147] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1364.663124][T23147] ? __pfx_kernel_move_pages+0x10/0x10 [ 1364.663162][T23147] ? __fget_files+0x21f/0x3d0 [ 1364.663190][T23147] ? fput+0x79/0x100 [ 1364.663218][T23147] ? ksys_write+0x1ac/0x250 [ 1364.663239][T23147] ? __pfx_ksys_write+0x10/0x10 [ 1364.663265][T23147] __x64_sys_move_pages+0xe0/0x1c0 [ 1364.663302][T23147] ? do_syscall_64+0x90/0x840 [ 1364.663334][T23147] ? lockdep_hardirqs_on+0x78/0x100 [ 1364.663364][T23147] do_syscall_64+0x115/0x840 [ 1364.663394][T23147] ? clear_bhb_loop+0x40/0x90 [ 1364.663424][T23147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.663448][T23147] RIP: 0033:0x7f15fef9e019 [ 1364.663466][T23147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.663489][T23147] RSP: 002b:00007f15ffe7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1364.663513][T23147] RAX: ffffffffffffffda RBX: 00007f15ff226090 RCX: 00007f15fef9e019 [ 1364.663528][T23147] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 1364.663542][T23147] RBP: 00007f15ffe7d090 R08: 0000000000000000 R09: 0000000000000002 [ 1364.663556][T23147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.663569][T23147] R13: 00007f15ff226128 R14: 00007f15ff226090 R15: 00007fff779654f8 [ 1364.663598][T23147] [ 1374.313418][T23291] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1378.129473][T23337] net_ratelimit: 30 callbacks suppressed [ 1378.129493][T23337] netlink: zone id is out of range [ 1378.183430][T23337] netlink: zone id is out of range [ 1378.205339][T23337] netlink: zone id is out of range [ 1378.262471][T23337] netlink: zone id is out of range [ 1378.303722][T23337] netlink: zone id is out of range [ 1378.339576][T23337] netlink: zone id is out of range [ 1378.378662][T23337] netlink: zone id is out of range [ 1378.417228][T23337] netlink: zone id is out of range [ 1378.461789][T23337] netlink: zone id is out of range [ 1378.514057][T23337] netlink: zone id is out of range [ 1378.947751][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 1381.921991][T23400] BUG: unable to handle page fault for address: ffffc900138b5fe8 [ 1381.929836][T23400] #PF: supervisor write access in kernel mode [ 1381.935910][T23400] #PF: error_code(0x0002) - not-present page [ 1381.941890][T23400] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 722cc067 PTE 0 [ 1381.949402][T23400] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1381.954804][T23400] CPU: 0 UID: 0 PID: 23400 Comm: syz.2.2568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.965760][T23400] Tainted: [L]=SOFTLOCKUP [ 1381.970107][T23400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1381.980196][T23400] RIP: 0010:write_comp_data+0x75/0x90 [ 1381.985617][T23400] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1382.005349][T23400] RSP: 0018:ffffc90006177e78 EFLAGS: 00050257 [ 1382.011438][T23400] RAX: ffffc900138b6000 RBX: 0000000000000000 RCX: ffffffff82458db5 [ 1382.019420][T23400] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1382.027398][T23400] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1382.035378][T23400] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1382.043377][T23400] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1382.051358][T23400] FS: 00007f7defff06c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1382.060305][T23400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1382.066900][T23400] CR2: ffffc900138b5fe8 CR3: 00000000375c4000 CR4: 00000000003526f0 [ 1382.074893][T23400] Call Trace: [ 1382.078199][T23400] [ 1382.081136][T23400] rseq_register+0x115/0x350 [ 1382.085769][T23400] __x64_sys_rseq+0x1b8/0x2e0 [ 1382.090472][T23400] do_syscall_64+0x115/0x840 [ 1382.095081][T23400] ? clear_bhb_loop+0x40/0x90 [ 1382.099792][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.105702][T23400] RIP: 0033:0x7f7df299e019 [ 1382.110134][T23400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.129755][T23400] RSP: 002b:00007f7defff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1382.138338][T23400] RAX: ffffffffffffffda RBX: 00007f7df2c26450 RCX: 00007f7df299e019 [ 1382.146326][T23400] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1382.154439][T23400] RBP: 00007f7df2a3500c R08: 0000000000000000 R09: 0000000000000000 [ 1382.162450][T23400] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1382.170439][T23400] R13: 00007f7df2c264e8 R14: 00007f7df2c26450 R15: 00007ffde9414458 [ 1382.178517][T23400] [ 1382.181556][T23400] Modules linked in: [ 1382.185458][T23400] CR2: ffffc900138b5fe8 [ 1382.189623][T23400] ---[ end trace 0000000000000000 ]--- [ 1382.195088][T23400] RIP: 0010:write_comp_data+0x75/0x90 [ 1382.200522][T23400] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1382.220175][T23400] RSP: 0018:ffffc90006177e78 EFLAGS: 00050257 [ 1382.226259][T23400] RAX: ffffc900138b6000 RBX: 0000000000000000 RCX: ffffffff82458db5 [ 1382.234244][T23400] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1382.242244][T23400] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1382.250229][T23400] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1382.258212][T23400] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1382.266191][T23400] FS: 00007f7defff06c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1382.275145][T23400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1382.281744][T23400] CR2: ffffc900138b5fe8 CR3: 00000000375c4000 CR4: 00000000003526f0 [ 1382.289742][T23400] Kernel panic - not syncing: Fatal exception [ 1382.295862][T23400] Kernel Offset: disabled [ 1382.300214][T23400] Rebooting in 86400 seconds..