last executing test programs: 6.748990731s ago: executing program 0 (id=359): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) (async) mmap$auto(0x7ff, 0x6, 0x2, 0x9b73, 0x5, 0x0) (async) socket(0xa, 0x801, 0x106) (async) listen$auto(0x3, 0x83) read$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffffff, &(0x7f0000000040)=""/51, 0x33) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) open(0x0, 0x261c2, 0x84) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) (async) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r1) (async) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 5.806245105s ago: executing program 0 (id=361): madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x24000000000df, 0x40000000000ebc, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getresgid$auto(0x0, 0x0, 0x0) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x1000) 3.437925095s ago: executing program 3 (id=371): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), 0xffffffffffffffff) msgctl$auto_IPC_RMID(0xd, 0x0, &(0x7f00000001c0)={{0x4, 0x0, 0xffffffffffffffff, 0x10000, 0x9, 0x5, 0x100}, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x2, 0x1, 0x4, 0x7fff, 0x2, 0x200, 0xeb1, 0x9, 0xfff3, @raw, @inferred=0xffffffffffffffff}) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x1440, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x28f, 0x7, 0x0, 0x1, [@nested={0x1b, 0x46, 0x0, 0x1, [@nested={0x4, 0x116}, @generic="ca59a2cd4ed5af1953066f25fefa172deeb9c4"]}, @nested={0xf1, 0xd3, 0x0, 0x1, [@nested={0x4, 0x14a}, @generic="0edc550a41f6b67ba78faa35a6ae2f10a5dbc804de1effb2eeac5e7813dce3cc7612bb446ed381f5ac3d63f5bd002269a951dd60dfd21f877bbff48b2e78d777bec4c8ac8f5c0aee34cbac118be7c30c5d41ed62e32711e015687929713a50f98ebae87ee3e8db10fe5183459e5baa8fc8ec98149db0306a6047d85e706df4ddd4a4735273c13efac54ab791b687d6efc0aa0132d0568f842740f45c000649695205b996017514fff78a99ff38eefbeedc1bfd71518f6e1453ccaf887bdd856379de5f179c9df2bf0648bf0598304727f347ec61b17bd3efc9cd8b2bcc810dc08a", @nested={0x4, 0xa9}, @nested={0x4, 0xa8}]}, @nested={0xae, 0xb0, 0x0, 0x1, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x4}, @generic="8d08ce9c8dbae7c5f081bcb81e0e36a1dec866bf19269422da659fc0be7cb24ceba561f925be305402fb4674918f0d612c2fc8dcd557ac15fb2170a7ca184c137e2baf1871aa121b50d8bce6211de6323b7ec81b2ff7e2e8a6db3ae672a4625cf320150aa0ac69945b0eeda4f1888cb67c0aa2da68350c2bb2fd3f21420cbbbf6388c8d72dede4f603101ef7038009739cd0a6790ba43456e234", @nested={0x4, 0x11f}]}, @nested={0x8, 0xc4, 0x0, 0x1, [@nested={0x4, 0x148}]}, @generic="b41115e9132fb3ca9f2b469564564ae9960de3abd3d892f90820a4a50706ff479937964f2e15bb0c2ee71b44bbe195e26393ba3b1a20c48d165de860f69bb7d2708d2f52ce1762b60e7199eca1664042ceb11f924e0a8ece288aa84eed64ba315382dc9e4b5d1dc24516611528f49bca04fe5585bc965d99fb891b7d310226b765896b0563665e46c0dcbeb4d25d48814fede354b7dae5d30b9291b492a4fffc6df4a3eb4a0d6767509fbfe9dd162c0956ba71bcedbfc479034caa07381ab2dff4d0f3"]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x10001}, @NBD_ATTR_SOCKETS={0x1182, 0x7, 0x0, 0x1, [@generic="4508e49672ecc541e1ca0533ee3e6017ee482696706852054d07dab35af8f5f64f31e56c419b9ea02abb464722e0359433ccde26bbceab0733d6b0845f1348ba69be37f1df20a3956ba0b33b9cc67aad49ec91f193baa3ddf602ed24b53407a0bd83d05ffa96a3bf9866f95b41f2d2d7b71384935f1cedf926e2dfc5b87a910449ea527fdbfdc5b9237400cd2586eef5719d119138554f892f07bd05fcbb7275ede072c310d7d673a257635c65c4aebfdfb08e5ecb242e20c2580b61e63741bb0df2a3e14ee58c515f182f473f6fa00dd5e91b75ea5bf774abcb931e475a43ac08891ab43b4521e203d55d5e59b6b7317f4fd2da", @typed={0x8, 0x9e, 0x0, 0x0, @u32=0x4}, @generic="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", @typed={0x8, 0xcc, 0x0, 0x0, @uid=r4}, @nested={0x53, 0x6e, 0x0, 0x1, [@nested={0x4, 0x116}, @nested={0x4, 0xef}, @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@remote}, @generic="b8dac2258250fa074b670fc41f6e5382a560ad43a73754b8c49c1aaf6f1423acf01d99d60bab0da81e5debdc05af6ad2b8ce466d1764b333fa8ec1", @nested={0x4, 0x5b}]}, @generic="01264a59657787938a30d1c1af5b39269ddffdad14e00c5bf32a9643b9d1", @typed={0x8, 0x7c, 0x0, 0x0, @fd=r0}]}]}, 0x1440}, 0x1, 0x0, 0x0, 0x50}, 0x4004010) ioctl$auto_SNAPSHOT_FREE(r0, 0x3314, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop12/hctx0/tags\x00', 0x2000, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r6, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 3.036858151s ago: executing program 3 (id=374): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.12/modalias\x00', 0x157c80, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 2.90337564s ago: executing program 2 (id=375): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r2 = socket(0x2, 0x1, 0x106) get_mempolicy$auto(0x0, &(0x7f0000000140)=0x100000000001fb, 0x2, 0x400000000000085, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x3, 0x8}, 0x6f4) setsockopt$auto(r2, 0x1, 0x9, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bind$auto(0x3, &(0x7f0000000140), 0x6c) 2.901796423s ago: executing program 0 (id=376): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x7, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x1, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x200000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES16, @ANYRES64], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) acct$auto(0x0) socket(0x23, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0xc000000000, 0xffffffffffff3ade, 0x4000000df, 0x13, r0, 0x200000000002) socket(0xa, 0x5, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x31f882, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0xa, @next_key=0x3, 0x1ff}, 0x8) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x400, 0x0, [{0x400000b5, 0x22, 0x6}]}) msync$auto(0x7, 0x8, 0x400000004) open(0x0, 0x563742, 0x2c) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000140)="74516f729a1f8bb50000000000000000") prctl$auto(0x35, 0x0, 0x8, 0x0, 0x400) 2.836293025s ago: executing program 3 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000005c0), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={0x60, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x4c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x38, 0x5, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1d, 0x1, "6ca75e25f7157b20ced2b6001af40b60943648197a1514fbfb"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb, 0x1, "3ffeef4d05f3a0"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0x10, 0x5, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x7, 0x1, "76ee2e"}]}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 2.471755975s ago: executing program 3 (id=378): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(&(0x7f0000000240)={r0, 0x20, 0x2}, 0x5, 0x7ff) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x541b, 0x7f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r3, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_BLKBSZGET(r2, 0x80081270, &(0x7f00000001c0)=0xbbc) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r4 = socket(0xa, 0x3, 0x4) getsockopt$auto(r4, 0xff, 0x7, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 1.982606641s ago: executing program 2 (id=379): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000280)=@info={0xffffffffffffffff, 0xffffffff, 0x87}, 0xb0a) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) (async) fcntl$auto(r2, 0x400, 0x1) setresuid$auto(0x2, 0xee01, 0x8080) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x163) (async) close_range$auto(0x2, 0xa, 0x0) (async) fchmod$auto(r0, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) read$auto_evm_key_ops_evm_secfs(r1, &(0x7f0000000040)=""/33, 0x21) 1.836203127s ago: executing program 0 (id=380): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(&(0x7f0000000240)={r0, 0x20, 0x2}, 0x5, 0x7ff) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x3, 0x5, 0xbc, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x6], {0x6, 0x38, 0x9, 0x80004, 0x4, 0x3, 0x3ff, 0x7fffffff, 0xffff}, {0x2, 0x9, 0x7, 0x2, 0x0, 0xffff13a7, 0x80000006, 0x44a0, 0x1001}}) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x80000001, 0x9, 0x5c}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto_PR_SET_MM_START_CODE(0x3, 0x1, 0x0, 0x4, 0xffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r5 = socket(0xa, 0x1, 0x84) mprotect$auto(0x1ffffffff000, 0x100017, 0x4) getsockopt$auto(r5, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x83) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) write$auto(r3, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_BLKBSZGET(r2, 0x80081270, &(0x7f00000001c0)=0xbbc) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r6 = socket(0xa, 0x3, 0x4) getsockopt$auto(r6, 0xff, 0x7, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 1.721972754s ago: executing program 2 (id=382): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x1, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(r5, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x40000c, 0xdf, 0x9b76, r4, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r6 = socket(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r0, &(0x7f00000001c0)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000400)=""/196, 0xc4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) 1.719376342s ago: executing program 1 (id=383): ioctl$auto(0xffffffffffffffff, 0xc0945662, 0xffffffffffffffff) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x127940, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, r0, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) wait4$auto(r2, 0x0, 0x80000001, 0x0) setns(r1, 0x60020000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/clear_refs\x00', 0x10e80, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0xe0080, 0x0) ioctl$auto_UI_SET_MSCBIT(r3, 0x40045568, &(0x7f0000000040)=0x6) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/radio26\x00', 0x20000, 0x0) readahead$auto(r4, 0x7, 0x8) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000140), 0x400600, 0x0) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), r1) madvise$auto(0x22f7, 0x52, 0x6) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/fail-nth\x00', 0x1a1182, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r7, @ANYRES64=r8], 0x14}}, 0x24048084) sendmsg$auto_NCSI_CMD_SEND_CMD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf25040000000400060008000100", @ANYRES32=r8, @ANYBLOB="69a368cb01aa1fb30c40d961383585066216bde2ae26f2e387e7e4f9a4f5c31ccdd96ddaa2b8381e6b69e50adc176bfd90e85508ef3684cd401881e6978e57ebddcd727a2dc0eefb44142db1663a470432a6ea50fdbf5e8150aea4ad4de1f1eb3c9fd44fe6b5f2fd321ba546bff2bdbd92d86b682f3b220e45c1f7b0c331d43d395b7d2c13c7aeb0d89685c5a591824da4ac94eb46bc2ed4f55bb021c2f5afcb9884694b52f20385c126b446d3"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.602123261s ago: executing program 1 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x10) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r2, 0x0, 0x18) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25100000001800018014000200776c616e31000000000000000000000008000900920d0000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) (async) setsockopt$auto(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x10) (async) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x11, 0x3, 0x9) (async) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) getdents64$auto(r2, 0x0, 0x18) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) (async) ioctl$auto(r3, 0x4008af03, 0x0) (async) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25100000001800018014000200776c616e31000000000000000000000008000900920d0000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) (async) 1.421729273s ago: executing program 3 (id=385): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r3 = open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) socket(0x1d, 0x2, 0x7) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000002c0), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x3}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}}, 0x20008010) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000040), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090027ad7600fbdbdf250180000008000800", @ANYRES32=r9, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x40488d4}, 0xc050) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r11) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r12, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44100}, 0x9800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r9}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x3}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r13}, @NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_SCOPE={0x8}, @NET_SHAPER_A_CAPS_SCOPE={0x8}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x9}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r14}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r15}, @NET_SHAPER_A_CAPS_SCOPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1.370368906s ago: executing program 1 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000005c0), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={0x60, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x4c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x38, 0x5, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1d, 0x1, "6ca75e25f7157b20ced2b6001af40b60943648197a1514fbfb"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb, 0x1, "3ffeef4d05f3a0"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0x10, 0x5, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x7, 0x1, "76ee2e"}]}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 1.221954121s ago: executing program 1 (id=387): flock$auto(0xffffffffffffffff, 0xffffffff) (async) socket(0x3, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x189ac2, 0x0) (async, rerun: 64) nanosleep$auto(0x0, 0x0) r2 = getpid() (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x1, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 32) select$auto(0x13, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x10000, 0x15f4da0a, 0x3, 0x6, 0x862, 0x4000008000001f, 0x8, 0x393e, 0x2, 0x2, 0x6]}, 0x0) (async, rerun: 32) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x03\xa1\x19\x9a_\r\x00\x00X\xa6\x89L\x1e\x1b\x16/\xe8\xca\tL\xd9M\xf3_L\x00\x04\x00\x00\xa2\x00\x00', 0x101) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) pread64$auto(r4, 0x0, 0xe0d, 0x400000000000100) (async) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) (async) r6 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0) read$auto_clk_dump_fops_(r6, &(0x7f00000005c0)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub1/status\x00', 0x401, 0x0) (async) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) sendmsg$auto_NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x600480d1}, 0xc004) 1.219166467s ago: executing program 3 (id=388): syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x4001a2, 0x0) symlink$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000001f40)='/sys/kernel/tracing/tracing_cpumask\x00', 0x2002, 0x0) write$auto(r0, 0x0, 0xe) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x185003, 0x0) r2 = epoll_create$auto(0x8800001) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) epoll_ctl$auto(r2, 0x1, r1, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 1.122779046s ago: executing program 1 (id=389): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x16, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_virt_wifi/base_reachable_time\x00', 0x9) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xba}, @NBD_ATTR_INDEX={0x8, 0x1, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xba}, @NBD_ATTR_INDEX={0x8, 0x1, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000240), 0x101881, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000240), 0x101881, 0x0) write$auto(r1, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'g\t$K\xcb\x12\xfa\x00\x00\xcfk', 0xb7f) select$auto(0x1, &(0x7f0000000040)={[0xfffffffffffff91e, 0x40, 0x4, 0x80, 0x7, 0x3, 0x80000001, 0x7c, 0x3, 0xfffffffffffffffc, 0x5, 0xb, 0x4, 0x7, 0x0, 0x6]}, &(0x7f00000000c0)={[0x3, 0x4, 0x0, 0x1, 0x39, 0x6, 0x7f, 0x3, 0x2, 0xc6d, 0x8, 0xffffffff, 0x1, 0x0, 0x7491, 0x40]}, 0x0, &(0x7f00000001c0)={0x9, 0x1}) timer_create$auto(0x81, &(0x7f0000000140)={@sival_int, @inferred=r1, 0x8, @_tid=0xffffffffffffffff}, &(0x7f0000000180)=0xc9) 743.554369ms ago: executing program 2 (id=390): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x800000, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x800000, 0x0) getpid() ioctl$auto_FS_IOC_SETFSLABEL3(0xffffffffffffffff, 0x41009432, &(0x7f0000000800)="d2b8cc034352ed793254b054dfe27f8d407e8290e4423a175d9e85cc9f186c3e511028de299f431594924bbe8053ba88e9bc754c38f86d713d27e9bf785891b14562478dd425e746c5c2dffde54ca68c0bca7f6a61e1deaadf8aab98da1b9ec04622f9e3c7eba8c936fe602ab0b6c317853b4f87e67714ff274f3f47e5a1fe04f2f8f0780dfff62ae5563dc0985644ff989e530c207d7f5c42315d33d8addf423c556592ab74d49de90bd79f9ce32ed985fb44351a39881675ffe8bc216c6c4e3217ce79a3f3b3a08982c8e2f1c2dcac3b4d4e789c251e697d44fccd9c33ffa503707178a236ac6c44dd3856187791edac02fc01a6cf66f5ffc6a36a286c175a") ioctl$auto_SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000900)="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"/472) (async) ioctl$auto_SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000900)="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"/472) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="100025bd7000fedbdf250300000008001700ffffffff04000f000800130000000000b000160000577f5508c88cecad02018bd52bffd74c992c680ec387c5f08760a96a57f0b71928b9b221317c3fca3aed42fc51c57c9c0df37b1b55e45972fc9e7306197cdcaa3a0f5c859c5040576ba85b82db96fc565cfd5e2bc173faecead911966206824417ff70a76ec8a7cdc4dfe7b7e8ad3021d74adad65eaac7364c6ba6d40d18887b30a901cee4f428ac484381ecee1ff9e620c95926cd397dbfedc8b12678fa5eb96b7cbfa240ebf29eebdd9c0400100008000b005c275d2e0800060000000000"], 0xec}, 0x1, 0x0, 0x0, 0x200040d1}, 0x20040090) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/vivid.0/media19/power/runtime_active_time\x00', 0x20a681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) (async) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fsetxattr$auto(r0, &(0x7f0000000640)='/dev/dri/card1\x00', &(0x7f0000000680)="4660c3a49b6541333fb249fab1118a8387f6b2d6bf9a3055dee932a85c3001f1305d1404c7d8c9294ae0eb305a0ef029c246314e57ab1d07b9b585b26b0b1de8ce5276ab3b44c4099c299d1fdb5bb205d9a78bd0aeb5528c1dd26c2837e07d7b0a4d40b63f48fa294761bb372c698dba7e264b7f46cc737fd194c9458d454d9cec3e7fddfd8df5bdc843759ffe073a05613e366290d652a36ad4a984de8f973040aa176cf04f70439b941c207b436c11add8cbad57cde116be102ee22a19af892abe533453aedbf4a0aed04c8fa5a6029d640d6b4923f7d594c9dec8b95e0c50376ca627d76c5d2ef4", 0x7, 0x3) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfd3, 0x2, 0xec, 0x4, 0x80000000080, 0x8, 0x2, 0xfffffffffffffff8, 0x2}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000844}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000007c0)={0x0, 0x2}, 0xa, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0xfffffffd) (async) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000007c0)={0x0, 0x2}, 0xa, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0xfffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000780)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x7}, 0x3, 0xcad7) r5 = socket(0xa, 0x801, 0x84) getpid() (async) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0x1001001}, 0x10000008, &(0x7f00000002c0)={&(0x7f0000000c00)="b22cb6d40eb32e9193939e9bc1352b466d52ceb24a46aef0b38adb596906e2810a8069b987b8a275c6f0723621584dffe7c1a5b18b1c4994d6c04610a2145dceb98bf094a97574431f1bc88a307afcf6fa4925b3cf0f664cc89af6f41308e8740c882cd14d6ab66880ef9bc92bd47b4276c83d4b2ec73aaf0fbeff36c148690d827a96320817a92b2eb0bbc7850d0f0380dbd932c40ad6e23d42a79cdf8db80f0d8cd56543a6827f239c7dbd0a34ed61111f8383ece470af153c78eb7d80f6a67b04c1e43e079c485f7cf87b7fa31f218b2f7ad170917d"}, 0x3, 0xfffffffffffffffa) (async) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0x1001001}, 0x10000008, &(0x7f00000002c0)={&(0x7f0000000c00)="b22cb6d40eb32e9193939e9bc1352b466d52ceb24a46aef0b38adb596906e2810a8069b987b8a275c6f0723621584dffe7c1a5b18b1c4994d6c04610a2145dceb98bf094a97574431f1bc88a307afcf6fa4925b3cf0f664cc89af6f41308e8740c882cd14d6ab66880ef9bc92bd47b4276c83d4b2ec73aaf0fbeff36c148690d827a96320817a92b2eb0bbc7850d0f0380dbd932c40ad6e23d42a79cdf8db80f0d8cd56543a6827f239c7dbd0a34ed61111f8383ece470af153c78eb7d80f6a67b04c1e43e079c485f7cf87b7fa31f218b2f7ad170917d"}, 0x3, 0xfffffffffffffffa) setsockopt$auto(r5, 0x10000000084, 0x9, 0x0, 0x9c) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r7, 0x64c6, 0x1e2) getrandom$auto(0x0, 0x3, 0x7) (async) getrandom$auto(0x0, 0x3, 0x7) setresuid$auto(0x8, 0x8, 0x0) keyctl$auto(0x12, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x1) (async) keyctl$auto(0x12, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x1) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRESDEC=r4, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02365b495d643c1360c09314073cb9fb13aa7b007bba0adab1d2ae986a2dbe18ab4e04c66707a0551c9c99c995"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port8/quirks\x00', 0x8000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port8/quirks\x00', 0x8000, 0x0) 666.017373ms ago: executing program 2 (id=391): ioctl$auto(0xffffffffffffffff, 0xc0945662, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0xe0080, 0x0) ioctl$auto_UI_SET_MSCBIT(r1, 0x40045568, &(0x7f0000000040)=0x6) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x58) 664.560952ms ago: executing program 2 (id=392): mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000000008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) wait4$auto(0x0, &(0x7f0000000040)=0x8, 0x6, &(0x7f0000000080)={{0x9, 0x6}, {0x7f, 0x5}, 0x100000000, 0xcef4, 0x2, 0x2, 0x5, 0x9, 0x3, 0xffffffff, 0x10, 0x7fff, 0x4, 0x65, 0x8000000000000001, 0x3}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x20, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x1, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x81, 0x653, 0x0, 0x2072c2, 0xc, 0x100000000}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x3, 0x3) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffd, 0x44b, 0x3, 0x5, 0x1007181, 0xd1, 0x40000b, 0x3, 0x4, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x200000004, 0x4, 0x9809588, 0xfffffffd, 0x2, 0x1, 0x0, 0x6, 0x7, 0x201, 0x4, 0xc3f, 0x1002000000, 0x0, 0x0, 0x0, 0x39, [0x0, 0x0, 0x0, 0xb3670d6e000, 0x47, 0x4000000000000, 0x100, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x7, 0x5, 0x8000000000000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6, 0x4, 0x4, 0x0, 0x0, 0x1, 0x0, 0x4000000000000000, 0x0, 0x0, 0x6, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0xfff]}, 0xa, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) connect$auto(0x3, 0x0, 0x54) adjtimex$auto(&(0x7f00000005c0)={0xffff, 0x0, 0x6, 0x9, 0x7, 0x1, 0x1, 0x0, 0x7, 0x7, 0x592efafe, {0x0, 0xffffffffffffff57}, 0x100000001, 0x8, 0x857e, 0x5, 0x0, 0xe, 0x9, 0x23fffffffffe, 0x8000000000000001, 0x10000, 0x8}) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop3/queue/write_same_max_bytes\x00', 0x800, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) setsockopt$auto(r0, 0x7c, 0x3, &(0x7f0000000140)='\x1bB\xc3\xc3\xdfG \x0e\r\xc1P', 0x78) setsockopt$auto_SO_BUSY_POLL_BUDGET(r2, 0x9, 0x46, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_to_bridge/base_reachable_time\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) 537.748952ms ago: executing program 1 (id=393): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000007c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057\x1c&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\x7f\x00\x00\x00AN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81.f\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xbd_r\xf16\xec\xf3\xbb[.\xf3\xef\xf8\x16x\x9e\xb3*:/L\xa0Kg\xf0\xa2\x84\xa3o\xcc\x9e\xd3\xeb\xd3(\xaa\x93g~\x01\x81\x1eV\xf1L\xfc\xad\xa9#O\xe4\x12\xd3\xbda\xbc\x9a\x9f+9\'\xc4\x13\xf0\xc88\x1d80?\xc2\a\af\xdc?-&\xedAd\x9c\xe5&\xb9\x14\xe1\x85 \xbf\x18\xfc:#\xcf\x7ffT\xefPb\xe1\xfa]\xcc\x8a\xe3\x99\x98u\x9bj>\x9d\xc2\x1fk\x87\x92\xfb(U\xa8\xcd4+\xf6e5],\xec\x84 \x1b\x10d\x1b@\x84X\xa1\xa8\xd7\xccO\xb0Qq\x1a\xa4<\\\x0e\xa4\x7f^\x1a|\xfd\xe6#\x00\x9e\x1d\x00k\x84\x1b\xa3\xb1O\xe0IzJRO\xf4,\xe5\xdb\x03CA\x13Q\x84\xbb\x88\xb4\xe3\xba\xf0/\xd0\x04\ny\a\x8d\x12h\xe22\xcb\"\xce\x00\x00', 0x5) (async) ioctl$auto_USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01002a4607b77e4dc47b1800"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040850) read$auto(r1, 0x0, 0x1f40) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 519.551591ms ago: executing program 0 (id=394): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop11\x00', 0x25c0c0, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) close_range$auto(r0, r0, 0x4000002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x602, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1652c2, 0xe1d2b27bdc14aa18) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x28b3e, 0xe) fanotify_mark$auto(0x0, 0x451, 0xa, r3, 0x0) open(0x0, 0x0, 0x408) getrlimit$auto(0x3, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000001, 0xeb1, r1, 0x1) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6$auto(0x9, &(0x7f0000000300)={[0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x8001, 0x4000000000002bc8, 0xffe, 0x10000009, 0x3, 0xfffffffffffffffe, 0x8000000000000001, 0x0, 0x7, 0x2, 0x80000001, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 0 (id=395): ioctl$auto(0xffffffffffffffff, 0xc0945662, 0xffffffffffffffff) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x40803, 0x20) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sethostname$auto(0x0, 0x1) setsockopt$auto(r0, 0x29, 0x37, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0xfffffffffffffffe, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f00000001c0)={0x9b5, 0x7d, 0xa78, 0x0, 0x9, 0x6, "3281ed5d16598171d04e902c2e19845ef1e6"}, 0x2, 0x3, 0x3) sendfile$auto(r3, r2, 0x0, 0x8) madvise$auto(0x3ff, 0x7fffffffffffffff, 0x3) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram0\x00', 0x6e642, 0x0) write$auto(r4, &(0x7f00000002c0)='}\t\x00\x00/audio1\x005qG=\x15\xd2\xd8\x82\x15+\xffo\x10\xa2\x90\x11\x1f\xe8\xcf\x12\xecTI\x9d\xb0i\xf8\xac\xf5n\t\xce_R\xfe7\x19\xe7\xb2\xf3u\xf0\xd44|\xbf\xd7\xd0\xfd9K\x05\x11A\xe0nM?y\xa0/\xf2\x00\xec\xe4\xae\xbc\xcfp\t\x82\x14+\x94G\x9c\x83\x00\x85kf$I\xde\xcb\x0e', 0x100000a3d9) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x31c, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SSID={0x20, 0x34, "2243c926192bca4adfc4580273ff8aae6c9bc9499cdd22615755ea9e"}, @NL80211_ATTR_IE_RIC={0x2de, 0xb2, "b942043ed212c062933185b6a07e5114d43089d1b1f9722c488316d45ec666ea958441f6803728ef799235ce8d51f4836e30ec7724675808e532d015c8ca47c0326005f605c786c5b2273194c0b0ad355de83d0af46500f08284c62f32925563e8bdc42f7d0f0919514b08d47d28805ea3fe7fb8a9068d0da81dfbc594737f56be23b0360d1dc26f75511b52859ddcbb288d009e454fe2d0ed25e2155d7aab7256b29a80d800212d97598da9a4c738dc1da449cbd6e81b7d7bb68e58380706e0a4468a1a88e0611c3c1c4de11ccb7ab0ef2f15ed3aba9b908788d3654cf7c38aecc2794735394dbbeedd99849b3125d47006105741588babe607078d443112599de9d2bba1137574bb8aae522c9db6e34de349c79037206b44351749047672887235f5501c0d577ca63dd91d681da7188c9530243e21a46d71b47d061bc3a16ba2030f664c280c6d71c6598e969541110fba24bd1601df7b73059ce33740640a4de9d2f5ccdbcf96cf5510a5a279ba109752b9ac18d5a02264efefafe55f99ee961b6ada480f086f508b65e4034594d444c0e2ee0c15c93ff5106113f4a3ac00a9860dc3e7e082474f699a3b07ae51d76a994cd182c27dd3e7115b90ffa698071748b417d763054e0e845f2db494b40f22018c04949c3544a3fd8ace6c8237c6c03ce479158a41aa7780e064d08c7dd01d6582fed1d4f91e2bf40578da1c5d79aa57c26951be379e7435ed5bbc4df3e8fbdea2e37e0c5c8c5a9393a8d602f4f7d625d38c7a198aaaae88101e95f7840ed548f7f4cbc96f144c4b50823face6ce31b8607b030379a6e0713f2c73b68ceb077f2570bda112aa4b6c1269b736e1fb5314f8f6d0d66473acf9bc3c618955393ad7ba84ef3f071819e5296f6b09634f95d94839e440c519b599bd7c00dae3071f82938f42a017eda121a12dae4b06c63549b6e7b693da7c6627a521c4a2d909e9e6910228e7d005cb1599ccce5c113a952ec8c9e08cdbce1fefe5d8b87f043c0697015d1e6471ad6b09"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001011) pidfd_open$auto(0x1, 0x0) r8 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0xe0080, 0x0) ioctl$auto_UI_SET_MSCBIT(r8, 0x40045568, &(0x7f0000000040)=0x6) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. [ 75.948850][ T5809] cgroup: Unknown subsys name 'net' [ 76.043099][ T5809] cgroup: Unknown subsys name 'cpuset' [ 76.051836][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.452532][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.235270][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.254836][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.264858][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.274776][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.276041][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.283031][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.292805][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.298727][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.314014][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.321605][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.329426][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.332922][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.338018][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.346544][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.352293][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.359290][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.372698][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.381958][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.390007][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.398533][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.957673][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 80.015470][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 80.031744][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 80.130343][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 80.250360][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.258034][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.265431][ T5822] bridge_slave_0: entered allmulticast mode [ 80.272629][ T5822] bridge_slave_0: entered promiscuous mode [ 80.286587][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.293957][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.301362][ T5824] bridge_slave_0: entered allmulticast mode [ 80.308447][ T5824] bridge_slave_0: entered promiscuous mode [ 80.336333][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.343658][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.350968][ T5822] bridge_slave_1: entered allmulticast mode [ 80.358469][ T5822] bridge_slave_1: entered promiscuous mode [ 80.371313][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.378462][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.386001][ T5824] bridge_slave_1: entered allmulticast mode [ 80.393296][ T5824] bridge_slave_1: entered promiscuous mode [ 80.417437][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.424753][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.432043][ T5825] bridge_slave_0: entered allmulticast mode [ 80.439043][ T5825] bridge_slave_0: entered promiscuous mode [ 80.464189][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.474178][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.481482][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.488828][ T5825] bridge_slave_1: entered allmulticast mode [ 80.496545][ T5825] bridge_slave_1: entered promiscuous mode [ 80.526691][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.549526][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.571978][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.579301][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.586989][ T5823] bridge_slave_0: entered allmulticast mode [ 80.594108][ T5823] bridge_slave_0: entered promiscuous mode [ 80.623397][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.633039][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.640368][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.647550][ T5823] bridge_slave_1: entered allmulticast mode [ 80.654787][ T5823] bridge_slave_1: entered promiscuous mode [ 80.674923][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.707292][ T5824] team0: Port device team_slave_0 added [ 80.715285][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.746782][ T5824] team0: Port device team_slave_1 added [ 80.765054][ T5822] team0: Port device team_slave_0 added [ 80.773599][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.807105][ T5822] team0: Port device team_slave_1 added [ 80.814749][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.838921][ T5825] team0: Port device team_slave_0 added [ 80.877077][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.884102][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.911052][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.925192][ T5825] team0: Port device team_slave_1 added [ 80.941801][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.948822][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.974894][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.986949][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.994463][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.020492][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.045175][ T5823] team0: Port device team_slave_0 added [ 81.051960][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.058931][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.085118][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.120993][ T5823] team0: Port device team_slave_1 added [ 81.127584][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.134821][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.161302][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.191644][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.198850][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.225653][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.274770][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.282242][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.308869][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.337296][ T5824] hsr_slave_0: entered promiscuous mode [ 81.343926][ T5824] hsr_slave_1: entered promiscuous mode [ 81.351194][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.358164][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.384494][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.430329][ T5831] Bluetooth: hci3: command tx timeout [ 81.430327][ T51] Bluetooth: hci0: command tx timeout [ 81.430588][ T51] Bluetooth: hci1: command tx timeout [ 81.436036][ T5831] Bluetooth: hci2: command tx timeout [ 81.463182][ T5822] hsr_slave_0: entered promiscuous mode [ 81.469511][ T5822] hsr_slave_1: entered promiscuous mode [ 81.476677][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 81.482986][ T5822] Cannot create hsr debugfs directory [ 81.494656][ T5825] hsr_slave_0: entered promiscuous mode [ 81.501440][ T5825] hsr_slave_1: entered promiscuous mode [ 81.507828][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 81.513871][ T5825] Cannot create hsr debugfs directory [ 81.607510][ T5823] hsr_slave_0: entered promiscuous mode [ 81.614229][ T5823] hsr_slave_1: entered promiscuous mode [ 81.620615][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 81.626366][ T5823] Cannot create hsr debugfs directory [ 82.033911][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.048334][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.060422][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.080983][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.137439][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.154615][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.166853][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.191181][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.257381][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.273460][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.284034][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.295251][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.435961][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.447166][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.456828][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.476054][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.507044][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.547162][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.581365][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.588797][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.624326][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.631515][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.673203][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.693112][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.733152][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.761710][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.778560][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.785961][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.807329][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.814559][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.831305][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.838479][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.870505][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.877701][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.927058][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.017781][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.049040][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.056462][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.124350][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.131881][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.290866][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.414408][ T5825] veth0_vlan: entered promiscuous mode [ 83.461916][ T5825] veth1_vlan: entered promiscuous mode [ 83.491693][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.514327][ T5145] Bluetooth: hci2: command tx timeout [ 83.519942][ T51] Bluetooth: hci3: command tx timeout [ 83.520053][ T5145] Bluetooth: hci0: command tx timeout [ 83.531381][ T5831] Bluetooth: hci1: command tx timeout [ 83.554324][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.575534][ T5825] veth0_macvtap: entered promiscuous mode [ 83.598878][ T5825] veth1_macvtap: entered promiscuous mode [ 83.677689][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.712936][ T5822] veth0_vlan: entered promiscuous mode [ 83.721473][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.731688][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.748129][ T5824] veth0_vlan: entered promiscuous mode [ 83.763248][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.787883][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.797492][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.808685][ T5822] veth1_vlan: entered promiscuous mode [ 83.816368][ T5824] veth1_vlan: entered promiscuous mode [ 83.828342][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.917427][ T5824] veth0_macvtap: entered promiscuous mode [ 83.954015][ T5824] veth1_macvtap: entered promiscuous mode [ 83.989067][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.003052][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.004379][ T5823] veth0_vlan: entered promiscuous mode [ 84.022561][ T5822] veth0_macvtap: entered promiscuous mode [ 84.036700][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.067400][ T5822] veth1_macvtap: entered promiscuous mode [ 84.075774][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.083763][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.095182][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.133675][ T5823] veth1_vlan: entered promiscuous mode [ 84.141472][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.151609][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.163591][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.187632][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.201338][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.202843][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.248707][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.327105][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.342584][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368059][ T5823] veth0_macvtap: entered promiscuous mode [ 84.395603][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.404519][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.415636][ T5823] veth1_macvtap: entered promiscuous mode [ 84.441935][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.469154][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.510963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.552839][ T5912] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.720461][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.747890][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.767159][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.838593][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.846129][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.858956][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.936770][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.958247][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.974484][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.984172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.018305][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.042566][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.058603][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070445][ T5915] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 85.275212][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.294065][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.340598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.400378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.406469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.409411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 85.521224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.588762][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.591625][ T5831] Bluetooth: hci1: command tx timeout [ 85.597193][ T5835] Bluetooth: hci3: command tx timeout [ 85.602265][ T5831] Bluetooth: hci2: command tx timeout [ 85.608471][ T5145] Bluetooth: hci0: command tx timeout [ 85.640498][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.110747][ T5928] ======================================================= [ 86.110747][ T5928] WARNING: The mand mount option has been deprecated and [ 86.110747][ T5928] and is ignored by this kernel. Remove the mand [ 86.110747][ T5928] option from the mount to silence this warning. [ 86.110747][ T5928] ======================================================= [ 87.380043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.400195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.453006][ T5958] netlink: 343 bytes leftover after parsing attributes in process `syz.2.10'. [ 87.467842][ T5958] netlink: 343 bytes leftover after parsing attributes in process `syz.2.10'. [ 87.482866][ T5958] netlink: 343 bytes leftover after parsing attributes in process `syz.2.10'. [ 87.670352][ T5145] Bluetooth: hci2: command tx timeout [ 87.670598][ T5831] Bluetooth: hci0: command tx timeout [ 87.675998][ T5145] Bluetooth: hci3: command tx timeout [ 87.676034][ T5145] Bluetooth: hci1: command tx timeout [ 87.721113][ T5956] netlink: 62 bytes leftover after parsing attributes in process `syz.1.11'. [ 87.731498][ T5956] Zero length message leads to an empty skb [ 88.074402][ T5968] usb usb27: usbfs: interface 0 claimed by hub while 'syz.1.13' sets config #0 [ 88.157794][ T5973] random: crng reseeded on system resumption [ 88.457094][ T5974] hub 1-0:1.0: USB hub found [ 88.545318][ T5974] hub 1-0:1.0: 1 port detected [ 88.598034][ T5986] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 88.924245][ T5982] can: request_module (can-proto-4) failed. [ 89.252391][ T5998] netlink: 343 bytes leftover after parsing attributes in process `syz.0.18'. [ 89.310216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.404216][ T5995] netlink: 343 bytes leftover after parsing attributes in process `syz.0.18'. [ 89.935512][ T6005] process 'syz.2.21' launched ':,' with NULL argv: empty string added [ 90.472282][ T6008] Invalid ELF header magic: != ELF [ 90.568380][ T6018] zswap: compressor not available [ 91.432726][ T6032] Invalid ELF header magic: != ELF [ 91.627796][ T6037] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.682250][ T6037] netlink: 330 bytes leftover after parsing attributes in process `syz.2.27'. [ 92.165148][ T6047] bridge0: port 3(hsr0) entered blocking state [ 92.175508][ T6047] bridge0: port 3(hsr0) entered disabled state [ 92.222457][ T6047] hsr0: entered allmulticast mode [ 92.227644][ T6047] hsr_slave_0: entered allmulticast mode [ 92.263476][ T6047] hsr_slave_1: entered allmulticast mode [ 92.273660][ T6047] hsr0: entered promiscuous mode [ 92.279523][ T6047] bridge0: port 3(hsr0) entered blocking state [ 92.286069][ T6047] bridge0: port 3(hsr0) entered forwarding state [ 92.510018][ T6052] netlink: 346 bytes leftover after parsing attributes in process `syz.3.30'. [ 92.580674][ T6054] Invalid ELF header magic: != ELF [ 92.641221][ T797] cfg80211: failed to load regulatory.db [ 92.882164][ T6062] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.975481][ T5145] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 92.975527][ T5145] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 92.980148][ T6063] binder: 6060:6063 ioctl c0306201 200000000000 returned -11 [ 93.285222][ T29] audit: type=1807 audit(4294967292.870:2): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 93.285279][ T29] audit: type=1802 audit(4294967292.870:3): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.34" res=0 errno=0 [ 93.832058][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 93.838922][ T6064] ima: policy update failed [ 93.869232][ T29] audit: type=1802 audit(4294967293.430:4): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.34" res=0 errno=0 [ 93.980171][ T6089] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.016422][ T6083] ipvlan0: entered promiscuous mode [ 94.022502][ T6083] ipvlan0: entered allmulticast mode [ 94.029747][ T6083] veth0_vlan: entered allmulticast mode [ 94.049708][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 94.952104][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 95.029450][ T6114] zswap: compressor not available [ 95.537978][ T6137] netlink: 'syz.1.44': attribute type 11 has an invalid length. [ 95.546823][ T6137] netlink: 'syz.1.44': attribute type 11 has an invalid length. [ 95.555167][ T6137] netlink: 'syz.1.44': attribute type 11 has an invalid length. [ 95.564484][ T6137] netlink: 'syz.1.44': attribute type 11 has an invalid length. [ 95.647270][ T6138] FAULT_INJECTION: forcing a failure. [ 95.647270][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.700347][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT(full) [ 95.700384][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.700404][ T6138] Call Trace: [ 95.700413][ T6138] [ 95.700424][ T6138] dump_stack_lvl+0x100/0x190 [ 95.700478][ T6138] should_fail_ex.cold+0x5/0xa [ 95.700514][ T6138] _copy_to_iter+0x5a4/0x1720 [ 95.700553][ T6138] ? __pfx__copy_to_iter+0x10/0x10 [ 95.700582][ T6138] ? folio_mark_accessed+0xf3/0x1040 [ 95.700606][ T6138] ? __pfx_filemap_get_pages+0x10/0x10 [ 95.700643][ T6138] ? __pfx_folio_mark_accessed+0x10/0x10 [ 95.700671][ T6138] copy_page_to_iter+0x12a/0x1e0 [ 95.700713][ T6138] filemap_read+0x7a9/0x10a0 [ 95.700768][ T6138] ? __pfx_filemap_read+0x10/0x10 [ 95.700829][ T6138] ? __pfx_down_read+0x10/0x10 [ 95.700869][ T6138] ? futex_unqueue+0x133/0x2c0 [ 95.700903][ T6138] ? __pfx_aa_file_perm+0x10/0x10 [ 95.700940][ T6138] blkdev_read_iter+0x2c4/0x4f0 [ 95.700984][ T6138] do_iter_readv_writev+0x60d/0x920 [ 95.701023][ T6138] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 95.701066][ T6138] ? bpf_lsm_file_permission+0x9/0x10 [ 95.701103][ T6138] ? security_file_permission+0x76/0x210 [ 95.701133][ T6138] ? rw_verify_area+0xce/0x6d0 [ 95.701164][ T6138] vfs_readv+0x4d3/0x8d0 [ 95.701206][ T6138] ? __pfx_vfs_readv+0x10/0x10 [ 95.701263][ T6138] ? __fget_files+0x21f/0x3d0 [ 95.701293][ T6138] ? do_readv+0x13e/0x340 [ 95.701325][ T6138] do_readv+0x13e/0x340 [ 95.701360][ T6138] ? __pfx_do_readv+0x10/0x10 [ 95.701392][ T6138] ? xfd_validate_state+0x129/0x190 [ 95.701435][ T6138] __x64_sys_preadv2+0x11f/0x160 [ 95.701468][ T6138] do_syscall_64+0x106/0xf80 [ 95.701503][ T6138] ? clear_bhb_loop+0x40/0x90 [ 95.701536][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.701563][ T6138] RIP: 0033:0x7fee21b9c799 [ 95.701596][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.701620][ T6138] RSP: 002b:00007fee22a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 95.701643][ T6138] RAX: ffffffffffffffda RBX: 00007fee21e16090 RCX: 00007fee21b9c799 [ 95.701659][ T6138] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000006 [ 95.701675][ T6138] RBP: 00007fee21c32c99 R08: 0000000000000004 R09: 000000000000002e [ 95.701699][ T6138] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 95.701715][ T6138] R13: 00007fee21e16128 R14: 00007fee21e16090 R15: 00007ffff1dcf538 [ 95.701748][ T6138] [ 96.277960][ T6145] netlink: 346 bytes leftover after parsing attributes in process `syz.0.42'. [ 96.519692][ T29] audit: type=1804 audit(4294967296.090:5): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.46" name="/newroot/11/file0" dev="tmpfs" ino=76 res=1 errno=0 [ 96.651151][ T29] audit: type=1804 audit(4294967296.090:6): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.46" name="/newroot/11/file0" dev="tmpfs" ino=76 res=1 errno=0 [ 97.009970][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 97.120754][ T6167] bond0: option lp_interval: invalid value () [ 97.127308][ T6167] bond0: option lp_interval: allowed values 1 - 2147483647 [ 97.226601][ T6177] netlink: 'syz.2.53': attribute type 11 has an invalid length. [ 97.257213][ T6177] netlink: 'syz.2.53': attribute type 11 has an invalid length. [ 97.309921][ T6177] netlink: 'syz.2.53': attribute type 11 has an invalid length. [ 97.317626][ T6177] netlink: 'syz.2.53': attribute type 11 has an invalid length. [ 99.285133][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.394649][ T6230] netlink: 'syz.2.63': attribute type 11 has an invalid length. [ 100.459712][ T6230] netlink: 'syz.2.63': attribute type 11 has an invalid length. [ 100.489049][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.815394][ T6235] Invalid ELF header magic: != ELF [ 101.420878][ T6239] zswap: compressor not available [ 101.703347][ T6238] zswap: compressor not available [ 101.927421][ T6247] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.947742][ T6247] FAULT_INJECTION: forcing a failure. [ 101.947742][ T6247] name failslab, interval 1, probability 0, space 0, times 1 [ 101.960769][ T6247] CPU: 1 UID: 0 PID: 6247 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 101.960801][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.960810][ T6247] Call Trace: [ 101.960815][ T6247] [ 101.960821][ T6247] dump_stack_lvl+0x100/0x190 [ 101.960847][ T6247] should_fail_ex.cold+0x5/0xa [ 101.960865][ T6247] should_failslab+0xc2/0x120 [ 101.960880][ T6247] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 101.960901][ T6247] ? __d_alloc+0x34/0xa80 [ 101.960920][ T6247] __d_alloc+0x34/0xa80 [ 101.960971][ T6247] d_alloc_pseudo+0x1c/0xc0 [ 101.960992][ T6247] alloc_file_pseudo+0xcf/0x230 [ 101.961011][ T6247] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 101.961035][ T6247] __shmem_file_setup+0x221/0x490 [ 101.961056][ T6247] ? __pfx___shmem_file_setup+0x10/0x10 [ 101.961081][ T6247] shmem_zero_setup+0x96/0x1b0 [ 101.961101][ T6247] ? __mmap_region+0x218b/0x29e0 [ 101.961121][ T6247] __mmap_region+0x2198/0x29e0 [ 101.961143][ T6247] ? __pfx___mmap_region+0x10/0x10 [ 101.961172][ T6247] ? __lock_acquire+0x4a5/0x2630 [ 101.961199][ T6247] ? find_held_lock+0x2b/0x80 [ 101.961211][ T6247] ? finish_task_switch.isra.0+0x200/0xb80 [ 101.961226][ T6247] ? finish_task_switch.isra.0+0x200/0xb80 [ 101.961256][ T6247] ? trace_sched_exit_tp+0x13a/0x180 [ 101.961274][ T6247] ? __schedule+0x1000/0x6120 [ 101.961316][ T6247] ? rcu_is_watching+0x12/0xc0 [ 101.961337][ T6247] ? cap_capable+0x107/0x460 [ 101.961362][ T6247] mmap_region+0x180/0x3e0 [ 101.961384][ T6247] do_mmap+0xc63/0x12f0 [ 101.961405][ T6247] ? __pfx_do_mmap+0x10/0x10 [ 101.961420][ T6247] ? __pfx_down_write_killable+0x10/0x10 [ 101.961448][ T6247] vm_mmap_pgoff+0x29e/0x470 [ 101.961467][ T6247] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 101.961484][ T6247] ? do_futex+0x192/0x350 [ 101.961502][ T6247] ? __pfx_do_futex+0x10/0x10 [ 101.961522][ T6247] ksys_mmap_pgoff+0xe1/0x650 [ 101.961539][ T6247] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 101.961554][ T6247] ? xfd_validate_state+0x129/0x190 [ 101.961577][ T6247] __x64_sys_mmap+0x125/0x190 [ 101.961599][ T6247] do_syscall_64+0x106/0xf80 [ 101.961617][ T6247] ? clear_bhb_loop+0x40/0x90 [ 101.961634][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.961648][ T6247] RIP: 0033:0x7f3ab6b9c799 [ 101.961661][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.961675][ T6247] RSP: 002b:00007f3ab4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.961689][ T6247] RAX: ffffffffffffffda RBX: 00007f3ab6e16180 RCX: 00007f3ab6b9c799 [ 101.961698][ T6247] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 101.961707][ T6247] RBP: 00007f3ab6c32c99 R08: fffffffffffffffa R09: 0000000000008000 [ 101.961716][ T6247] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 101.961724][ T6247] R13: 00007f3ab6e16218 R14: 00007f3ab6e16180 R15: 00007fff1a8659a8 [ 101.961743][ T6247] [ 103.003526][ T6263] FAULT_INJECTION: forcing a failure. [ 103.003526][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 103.138684][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) [ 103.138719][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.138733][ T6263] Call Trace: [ 103.138741][ T6263] [ 103.138749][ T6263] dump_stack_lvl+0x100/0x190 [ 103.138789][ T6263] should_fail_ex.cold+0x5/0xa [ 103.138819][ T6263] should_failslab+0xc2/0x120 [ 103.138857][ T6263] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 103.138893][ T6263] ? __d_alloc+0x34/0xa80 [ 103.138918][ T6263] ? lockdep_init_map_type+0x5c/0x250 [ 103.138955][ T6263] __d_alloc+0x34/0xa80 [ 103.138984][ T6263] d_alloc_pseudo+0x1c/0xc0 [ 103.139017][ T6263] alloc_file_pseudo+0xcf/0x230 [ 103.139049][ T6263] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 103.139080][ T6263] ? alloc_fd+0x476/0x790 [ 103.139110][ T6263] sock_alloc_file+0x50/0x210 [ 103.139148][ T6263] __sys_socket+0x1c0/0x260 [ 103.139176][ T6263] ? __pfx___sys_socket+0x10/0x10 [ 103.139201][ T6263] ? xfd_validate_state+0x129/0x190 [ 103.139243][ T6263] __x64_sys_socket+0x72/0xb0 [ 103.139268][ T6263] ? lockdep_hardirqs_on+0x78/0x100 [ 103.139302][ T6263] do_syscall_64+0x106/0xf80 [ 103.139331][ T6263] ? clear_bhb_loop+0x40/0x90 [ 103.139361][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.139386][ T6263] RIP: 0033:0x7f7c25b9c799 [ 103.139406][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.139429][ T6263] RSP: 002b:00007f7c26994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.139452][ T6263] RAX: ffffffffffffffda RBX: 00007f7c25e15fa0 RCX: 00007f7c25b9c799 [ 103.139468][ T6263] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 103.139482][ T6263] RBP: 00007f7c25c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 103.139496][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.139510][ T6263] R13: 00007f7c25e16038 R14: 00007f7c25e15fa0 R15: 00007ffd3a063608 [ 103.139543][ T6263] [ 104.078747][ T6278] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.294703][ T6258] FAULT_INJECTION: forcing a failure. [ 104.294703][ T6258] name failslab, interval 1, probability 0, space 0, times 0 [ 104.307893][ T6258] CPU: 1 UID: 0 PID: 6258 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT(full) [ 104.307929][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.307944][ T6258] Call Trace: [ 104.307952][ T6258] [ 104.307962][ T6258] dump_stack_lvl+0x100/0x190 [ 104.308007][ T6258] should_fail_ex.cold+0x5/0xa [ 104.308038][ T6258] ? inotify_handle_inode_event+0x1a5/0x6a0 [ 104.308074][ T6258] should_failslab+0xc2/0x120 [ 104.308102][ T6258] __kmalloc_noprof+0xe0/0x850 [ 104.308139][ T6258] ? stack_trace_save+0x8e/0xc0 [ 104.308172][ T6258] inotify_handle_inode_event+0x1a5/0x6a0 [ 104.308215][ T6258] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 104.308262][ T6258] fsnotify_handle_inode_event.isra.0+0x1e3/0x410 [ 104.308298][ T6258] fsnotify+0x187d/0x3550 [ 104.308334][ T6258] ? __pfx_fsnotify+0x10/0x10 [ 104.308377][ T6258] __fsnotify_parent+0x704/0xca0 [ 104.308414][ T6258] ? __pfx___fsnotify_parent+0x10/0x10 [ 104.308451][ T6258] ? __pfx___might_resched+0x10/0x10 [ 104.308495][ T6258] ? __fput+0x30d/0xb40 [ 104.308524][ T6258] __fput+0x30d/0xb40 [ 104.308562][ T6258] task_work_run+0x150/0x240 [ 104.308601][ T6258] ? __pfx_task_work_run+0x10/0x10 [ 104.308648][ T6258] exit_to_user_mode_loop+0x100/0x4a0 [ 104.308687][ T6258] do_syscall_64+0x668/0xf80 [ 104.308722][ T6258] ? clear_bhb_loop+0x40/0x90 [ 104.308754][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.308781][ T6258] RIP: 0033:0x7f3ab6b9c799 [ 104.308803][ T6258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.308828][ T6258] RSP: 002b:00007f3ab7982028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 104.308853][ T6258] RAX: 0000000000000000 RBX: 00007f3ab6e16090 RCX: 00007f3ab6b9c799 [ 104.308870][ T6258] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 104.308885][ T6258] RBP: 00007f3ab6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.308901][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.308917][ T6258] R13: 00007f3ab6e16128 R14: 00007f3ab6e16090 R15: 00007fff1a8659a8 [ 104.308953][ T6258] [ 105.468408][ T6303] nla_validate_range_unsigned: 2 callbacks suppressed [ 105.468433][ T6303] netlink: 'syz.3.73': attribute type 11 has an invalid length. [ 105.569756][ T6303] netlink: 'syz.3.73': attribute type 11 has an invalid length. [ 105.612832][ T6303] netlink: 'syz.3.73': attribute type 11 has an invalid length. [ 105.666907][ T6303] netlink: 'syz.3.73': attribute type 11 has an invalid length. [ 106.620996][ T6309] zswap: compressor not available [ 106.707833][ T6321] zswap: compressor not available [ 107.429735][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 107.927527][ T5145] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 108.729385][ T6366] netlink: 'syz.1.84': attribute type 11 has an invalid length. [ 108.835603][ T6366] netlink: 'syz.1.84': attribute type 11 has an invalid length. [ 108.871584][ T6366] netlink: 'syz.1.84': attribute type 11 has an invalid length. [ 108.879302][ T6366] netlink: 'syz.1.84': attribute type 11 has an invalid length. [ 109.021344][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'. [ 109.450529][ T6379] zswap: compressor not available [ 109.720064][ T6384] zswap: compressor not available [ 110.629447][ T6414] netlink: 'syz.1.96': attribute type 11 has an invalid length. [ 110.703412][ T6414] netlink: 'syz.1.96': attribute type 11 has an invalid length. [ 110.735786][ T6414] netlink: 'syz.1.96': attribute type 11 has an invalid length. [ 110.759644][ T6414] netlink: 'syz.1.96': attribute type 11 has an invalid length. [ 111.465526][ T6429] zswap: compressor not available [ 111.630325][ T6433] zswap: compressor not available [ 112.186160][ T6453] netlink: 'syz.0.105': attribute type 11 has an invalid length. [ 112.240584][ T6453] netlink: 'syz.0.105': attribute type 11 has an invalid length. [ 112.274783][ T6453] netlink: 'syz.0.105': attribute type 11 has an invalid length. [ 112.296672][ T6452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.303599][ T6456] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.997899][ T6467] zswap: compressor not available [ 113.236456][ T6475] zswap: compressor not available [ 113.469830][ T6495] netlink: 'syz.2.116': attribute type 11 has an invalid length. [ 113.477622][ T6495] netlink: 'syz.2.116': attribute type 11 has an invalid length. [ 113.549648][ T6495] netlink: 'syz.2.116': attribute type 11 has an invalid length. [ 113.550774][ T29] audit: type=1804 audit(4294967313.130:7): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.114" name="/newroot/24/file0" dev="tmpfs" ino=147 res=1 errno=0 [ 113.582368][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.609368][ T29] audit: type=1804 audit(4294967313.130:8): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.115" name="/newroot/26/file0" dev="tmpfs" ino=156 res=1 errno=0 [ 113.669091][ T29] audit: type=1804 audit(4294967313.230:9): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.115" name="/newroot/26/file0" dev="tmpfs" ino=156 res=1 errno=0 [ 113.827140][ T29] audit: type=1804 audit(4294967313.410:10): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.114" name="/newroot/24/file0" dev="tmpfs" ino=147 res=1 errno=0 [ 114.302464][ T6510] capability: warning: `syz.3.121' uses 32-bit capabilities (legacy support in use) [ 114.654699][ T6524] zswap: compressor not available [ 114.805901][ T6532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.905057][ T6528] zswap: compressor not available [ 115.111602][ T6542] Invalid ELF header magic: != ELF [ 115.343360][ T29] audit: type=1804 audit(4294967314.930:11): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.126" name="/newroot/30/file0" dev="tmpfs" ino=178 res=1 errno=0 [ 115.446314][ T29] audit: type=1804 audit(4294967314.960:12): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.126" name="/newroot/30/file0" dev="tmpfs" ino=178 res=1 errno=0 [ 116.221113][ T6567] zswap: compressor not available [ 116.318919][ T6578] nla_validate_range_unsigned: 3 callbacks suppressed [ 116.318941][ T6578] netlink: 'syz.1.136': attribute type 11 has an invalid length. [ 116.360462][ T6572] zswap: compressor not available [ 116.366382][ T6578] netlink: 'syz.1.136': attribute type 11 has an invalid length. [ 116.419507][ T6578] netlink: 'syz.1.136': attribute type 11 has an invalid length. [ 116.871586][ T29] audit: type=1804 audit(4294967316.460:13): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.140" name="/newroot/38/file0" dev="tmpfs" ino=220 res=1 errno=0 [ 117.361350][ T6611] Invalid ELF header magic: != ELF [ 117.437642][ T6615] zswap: compressor not available [ 117.508167][ T6615] zswap: compressor not available [ 118.477229][ T29] audit: type=1804 audit(4294967318.060:14): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.152" name="/newroot/40/file0" dev="tmpfs" ino=232 res=1 errno=0 [ 118.578294][ T6649] netlink: 206 bytes leftover after parsing attributes in process `syz.2.153'. [ 119.087954][ T6651] sd 0:0:1:0: PR command failed: 1026 [ 119.149768][ T6651] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 119.167112][ T6654] zswap: compressor not available [ 119.204498][ T6651] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 119.469406][ T6662] zswap: compressor not available [ 120.355413][ T6707] Invalid ELF header magic: != ELF [ 121.171993][ T6708] mmap: syz.0.158 (6708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.411601][ T29] audit: type=1804 audit(4294967321.000:15): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.163" name="/newroot/40/file0" dev="tmpfs" ino=234 res=1 errno=0 [ 122.419087][ T6757] zswap: compressor not available [ 122.756408][ T6763] zswap: compressor not available [ 122.898742][ T6777] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[6777] [ 122.982570][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 123.377333][ T29] audit: type=1804 audit(4294967322.960:16): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.174" name="/newroot/43/file0" dev="tmpfs" ino=251 res=1 errno=0 [ 123.422623][ T29] audit: type=1804 audit(4294967322.960:17): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.174" name="/newroot/43/file0" dev="tmpfs" ino=251 res=1 errno=0 [ 124.643153][ T29] audit: type=1804 audit(4294967324.230:18): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.186" name="/newroot/50/file0" dev="tmpfs" ino=281 res=1 errno=0 [ 124.698623][ T29] audit: type=1804 audit(4294967324.250:19): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.186" name="/newroot/50/file0" dev="tmpfs" ino=281 res=1 errno=0 [ 125.551722][ T29] audit: type=1804 audit(4294967325.140:20): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.196" name="/newroot/42/file0" dev="tmpfs" ino=241 res=1 errno=0 [ 125.594640][ T29] audit: type=1804 audit(4294967325.160:21): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.196" name="/newroot/42/file0" dev="tmpfs" ino=241 res=1 errno=0 [ 125.962081][ T6881] tc_dump_action: action bad kind [ 126.136798][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 126.182445][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 126.671723][ T6892] Invalid ELF header magic: != ELF [ 128.517710][ T6945] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[6945] [ 130.295970][ T6966] zswap: compressor not available [ 130.549625][ T5145] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 132.062159][ T7028] zswap: compressor not available [ 132.220249][ T7028] zswap: compressor not available [ 133.127967][ T7063] zswap: compressor not available [ 133.308290][ T7069] zswap: compressor not available [ 133.598364][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.605139][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.584432][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 134.614212][ T7106] zswap: compressor not available [ 134.842021][ T7107] zswap: compressor not available [ 135.085010][ T7114] zswap: compressor not available [ 135.303608][ T7134] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 135.416989][ T7132] zswap: compressor not available [ 136.787725][ T7170] zswap: compressor not available [ 136.970314][ T7179] zswap: compressor not available [ 137.414792][ T7198] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078006780 pfn:0x78006 [ 137.449746][ T7198] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.457014][ T7198] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 137.560673][ T7198] raw: ffff888078006780 0000000000000000 00000001ffffffff 0000000000000000 [ 137.582585][ T7198] page dumped because: unmovable page [ 137.593684][ T7198] page_owner tracks the page as allocated [ 137.601141][ T7198] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5641, tgid 5641 (dhcpcd), ts 64619919265, free_ts 64619901170 [ 137.630110][ T7198] post_alloc_hook+0x153/0x170 [ 137.639622][ T7198] get_page_from_freelist+0x111d/0x3140 [ 137.646527][ T7198] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 137.652635][ T7198] alloc_pages_bulk_noprof+0x782/0x1490 [ 137.658791][ T7198] alloc_pages_bulk_mempolicy_noprof+0x250/0x1270 [ 137.665975][ T7198] __vmalloc_node_range_noprof+0x54b/0x1530 [ 137.672143][ T7198] __vmalloc_node_noprof+0xad/0xf0 [ 137.677469][ T7198] __vmalloc_noprof+0xa3/0x120 [ 137.682431][ T7198] bpf_prog_alloc_no_stats+0x58/0x640 [ 137.687969][ T7198] bpf_prog_alloc+0x3b/0x200 [ 137.692803][ T7198] bpf_prog_create_from_user+0xb4/0x2f0 [ 137.698524][ T7198] do_seccomp+0x7f7/0x2740 [ 137.703127][ T7198] prctl_set_seccomp+0x4b/0x70 [ 137.708114][ T7198] __do_sys_prctl+0x1a78/0x2330 [ 137.717775][ T7198] do_syscall_64+0x106/0xf80 [ 137.729603][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.736924][ T7198] page last free pid 5641 tgid 5641 stack trace: [ 137.748155][ T7209] Invalid ELF header magic: != ELF [ 137.763872][ T7198] __free_frozen_pages+0x7e1/0x10d0 [ 137.779792][ T7198] __kasan_populate_vmalloc+0x1ea/0x210 [ 137.785517][ T7198] alloc_vmap_area+0x95d/0x2bd0 [ 137.791032][ T7198] __get_vm_area_node+0x1ca/0x330 [ 137.796229][ T7198] __vmalloc_node_range_noprof+0x213/0x1530 [ 137.806523][ T7198] __vmalloc_node_noprof+0xad/0xf0 [ 137.819627][ T7198] __vmalloc_noprof+0xa3/0x120 [ 137.829419][ T7198] bpf_prog_alloc_no_stats+0x58/0x640 [ 137.859961][ T7198] bpf_prog_alloc+0x3b/0x200 [ 137.879794][ T7198] bpf_prog_create_from_user+0xb4/0x2f0 [ 137.894166][ T7198] do_seccomp+0x7f7/0x2740 [ 137.906084][ T7198] prctl_set_seccomp+0x4b/0x70 [ 137.920080][ T7198] __do_sys_prctl+0x1a78/0x2330 [ 137.938421][ T7198] do_syscall_64+0x106/0xf80 [ 137.964591][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.842508][ T7249] can: request_module (can-proto-5) failed. [ 138.843756][ T7253] can: request_module (can-proto-5) failed. [ 139.615780][ T29] audit: type=1804 audit(4294967339.190:22): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.278" name="/newroot/74/file0" dev="tmpfs" ino=407 res=1 errno=0 [ 139.699793][ T29] audit: type=1804 audit(4294967339.280:23): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.278" name="/newroot/74/file0" dev="tmpfs" ino=407 res=1 errno=0 [ 140.357718][ T7272] zswap: compressor not available [ 140.572268][ T7276] zswap: compressor not available [ 140.582902][ T7288] Invalid ELF header magic: != ELF [ 140.838866][ T7295] netlink: 342 bytes leftover after parsing attributes in process `syz.0.285'. [ 140.903360][ T7295] netlink: 342 bytes leftover after parsing attributes in process `syz.0.285'. [ 141.364970][ T7301] can: request_module (can-proto-3) failed. [ 142.380534][ T7328] zswap: compressor not available [ 142.618480][ T7335] zswap: compressor not available [ 142.782130][ T7349] netlink: 334 bytes leftover after parsing attributes in process `syz.3.295'. [ 143.041290][ T7346] zswap: compressor ]€ not available [ 143.659355][ T7374] netlink: 342 bytes leftover after parsing attributes in process `syz.2.302'. [ 143.687913][ T7373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.694747][ T7373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.726741][ T7377] FAULT_INJECTION: forcing a failure. [ 143.726741][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.767172][ T7373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.790063][ T7377] CPU: 1 UID: 0 PID: 7377 Comm: syz.1.303 Not tainted syzkaller #0 PREEMPT(full) [ 143.790084][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.790093][ T7377] Call Trace: [ 143.790098][ T7377] [ 143.790104][ T7377] dump_stack_lvl+0x100/0x190 [ 143.790132][ T7377] should_fail_ex.cold+0x5/0xa [ 143.790151][ T7377] _copy_from_user+0x2e/0xd0 [ 143.790168][ T7377] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 143.790193][ T7377] snd_rawmidi_write+0x2dc/0xc60 [ 143.790214][ T7377] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 143.790231][ T7377] ? __pfx_default_wake_function+0x10/0x10 [ 143.790247][ T7377] ? bpf_lsm_file_permission+0x9/0x10 [ 143.790267][ T7377] ? security_file_permission+0x76/0x210 [ 143.790284][ T7377] ? rw_verify_area+0xce/0x6d0 [ 143.790305][ T7377] vfs_write+0x2aa/0x1070 [ 143.790317][ T7377] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 143.790335][ T7377] ? __pfx_vfs_write+0x10/0x10 [ 143.790353][ T7377] ? find_held_lock+0x2b/0x80 [ 143.790365][ T7377] ? __fget_files+0x215/0x3d0 [ 143.790377][ T7377] ? __fget_files+0x215/0x3d0 [ 143.790392][ T7377] ? __fget_files+0x21f/0x3d0 [ 143.790409][ T7377] ksys_write+0x1f8/0x250 [ 143.790421][ T7377] ? __pfx_ksys_write+0x10/0x10 [ 143.790438][ T7377] do_syscall_64+0x106/0xf80 [ 143.790456][ T7377] ? clear_bhb_loop+0x40/0x90 [ 143.790473][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.790487][ T7377] RIP: 0033:0x7f2fa159c799 [ 143.790502][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.790514][ T7377] RSP: 002b:00007f2fa240f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.790527][ T7377] RAX: ffffffffffffffda RBX: 00007f2fa1815fa0 RCX: 00007f2fa159c799 [ 143.790536][ T7377] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000006 [ 143.790544][ T7377] RBP: 00007f2fa1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 143.790552][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.790559][ T7377] R13: 00007f2fa1816038 R14: 00007f2fa1815fa0 R15: 00007ffedb3ecf38 [ 143.790576][ T7377] [ 144.042262][ T7373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.048319][ T7373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.075931][ T7373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.098438][ T7373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.132959][ T7373] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.162807][ T7373] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.247065][ T7373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.263021][ T7373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.306679][ T7373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.470010][ T7420] zero sized request [ 145.474536][ T7420] zero sized request [ 145.696581][ T7405] program syz.0.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.754285][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.900866][ T7422] NFSD: Failed to start, no listeners configured. [ 146.116854][ T7436] Invalid ELF header magic: != ELF [ 146.149713][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.156059][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.324229][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.131158][ T7454] FAULT_INJECTION: forcing a failure. [ 147.131158][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 147.202909][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.0.322 Not tainted syzkaller #0 PREEMPT(full) [ 147.202931][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.202940][ T7454] Call Trace: [ 147.202945][ T7454] [ 147.202951][ T7454] dump_stack_lvl+0x100/0x190 [ 147.202977][ T7454] should_fail_ex.cold+0x5/0xa [ 147.202995][ T7454] ? security_inode_init_security+0x113/0x370 [ 147.203014][ T7454] should_failslab+0xc2/0x120 [ 147.203031][ T7454] __kmalloc_noprof+0xe0/0x850 [ 147.203054][ T7454] security_inode_init_security+0x113/0x370 [ 147.203079][ T7454] ? __pfx_shmem_initxattrs+0x10/0x10 [ 147.203096][ T7454] ? __pfx_security_inode_init_security+0x10/0x10 [ 147.203121][ T7454] shmem_tmpfile+0xfa/0x210 [ 147.203137][ T7454] ? d_alloc+0x176/0x1e0 [ 147.203155][ T7454] ? __pfx_shmem_tmpfile+0x10/0x10 [ 147.203181][ T7454] ? do_raw_spin_unlock+0x145/0x1e0 [ 147.203201][ T7454] ? _raw_spin_unlock+0x28/0x50 [ 147.203221][ T7454] vfs_tmpfile+0x2be/0x9a0 [ 147.203240][ T7454] path_openat+0x164e/0x31a0 [ 147.203254][ T7454] ? kasan_save_stack+0x3f/0x50 [ 147.203274][ T7454] ? kasan_save_stack+0x30/0x50 [ 147.203294][ T7454] ? __kasan_slab_alloc+0x89/0x90 [ 147.203307][ T7454] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 147.203326][ T7454] ? do_getname+0x35/0x390 [ 147.203343][ T7454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.203359][ T7454] ? __pfx_path_openat+0x10/0x10 [ 147.203380][ T7454] do_file_open+0x20e/0x430 [ 147.203395][ T7454] ? __pfx_do_file_open+0x10/0x10 [ 147.203423][ T7454] ? _raw_spin_unlock+0x28/0x50 [ 147.203438][ T7454] ? alloc_fd+0x476/0x790 [ 147.203457][ T7454] do_sys_openat2+0x10d/0x1e0 [ 147.203480][ T7454] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.203498][ T7454] ? __fget_files+0x21f/0x3d0 [ 147.203516][ T7454] __x64_sys_open+0xfe/0x1d0 [ 147.203533][ T7454] ? __pfx___x64_sys_open+0x10/0x10 [ 147.203560][ T7454] do_syscall_64+0x106/0xf80 [ 147.203587][ T7454] ? clear_bhb_loop+0x40/0x90 [ 147.203605][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.203620][ T7454] RIP: 0033:0x7f7c25b9c799 [ 147.203633][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.203647][ T7454] RSP: 002b:00007f7c26994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 147.203661][ T7454] RAX: ffffffffffffffda RBX: 00007f7c25e15fa0 RCX: 00007f7c25b9c799 [ 147.203670][ T7454] RDX: 78e22799f4a46e8e RSI: 0000000000518282 RDI: 0000200000000080 [ 147.203679][ T7454] RBP: 00007f7c25c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 147.203687][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.203696][ T7454] R13: 00007f7c25e16038 R14: 00007f7c25e15fa0 R15: 00007ffd3a063608 [ 147.203715][ T7454] [ 147.769496][ T7460] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 147.832370][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.239820][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.245880][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.325583][ T7474] Invalid ELF header magic: != ELF [ 148.389590][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.019093][ T7490] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 149.763982][ T7501] zswap: compressor not available [ 149.910633][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.042570][ T7509] zswap: compressor not available [ 150.309685][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.315744][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.469631][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.334848][ T7552] Invalid ELF header magic: != ELF [ 151.620716][ T7555] FAULT_INJECTION: forcing a failure. [ 151.620716][ T7555] name fail_futex, interval 1, probability 0, space 0, times 1 [ 151.679064][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.2.339 Not tainted syzkaller #0 PREEMPT(full) [ 151.679094][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.679106][ T7555] Call Trace: [ 151.679114][ T7555] [ 151.679122][ T7555] dump_stack_lvl+0x100/0x190 [ 151.679162][ T7555] should_fail_ex.cold+0x5/0xa [ 151.679192][ T7555] get_futex_key+0x295/0x1620 [ 151.679225][ T7555] ? __pfx_get_futex_key+0x10/0x10 [ 151.679256][ T7555] ? kasan_save_track+0x14/0x30 [ 151.679290][ T7555] ? __kasan_kmalloc+0xaa/0xb0 [ 151.679329][ T7555] futex_lock_pi+0x1d3/0x7b0 [ 151.679360][ T7555] ? preempt_schedule_thunk+0x16/0x30 [ 151.679386][ T7555] ? __pfx_futex_lock_pi+0x10/0x10 [ 151.679414][ T7555] ? preempt_schedule_common+0x42/0xc0 [ 151.679445][ T7555] ? preempt_schedule_thunk+0x16/0x30 [ 151.679487][ T7555] ? __pfx_try_to_wake_up+0x10/0x10 [ 151.679520][ T7555] ? futex_private_hash_put+0x107/0x1c0 [ 151.679558][ T7555] ? __pfx_futex_wake_mark+0x10/0x10 [ 151.679596][ T7555] ? __might_fault+0x111/0x140 [ 151.679627][ T7555] ? do_vfs_ioctl+0x226/0x13e0 [ 151.679664][ T7555] do_futex+0x18a/0x350 [ 151.679696][ T7555] ? __pfx_do_futex+0x10/0x10 [ 151.679727][ T7555] ? find_held_lock+0x2b/0x80 [ 151.679755][ T7555] __x64_sys_futex+0x34f/0x4d0 [ 151.679790][ T7555] ? __pfx___x64_sys_futex+0x10/0x10 [ 151.679834][ T7555] do_syscall_64+0x106/0xf80 [ 151.679866][ T7555] ? clear_bhb_loop+0x40/0x90 [ 151.679896][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.679921][ T7555] RIP: 0033:0x7fee21b9c799 [ 151.679942][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.679965][ T7555] RSP: 002b:00007fee229f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.679987][ T7555] RAX: ffffffffffffffda RBX: 00007fee21e16540 RCX: 00007fee21b9c799 [ 151.680004][ T7555] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 151.680017][ T7555] RBP: 00007fee21c32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 151.680032][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.680047][ T7555] R13: 00007fee21e165d8 R14: 00007fee21e16540 R15: 00007ffff1dcf538 [ 151.680081][ T7555] [ 153.585594][ T7590] netlink: 'syz.0.353': attribute type 3 has an invalid length. [ 153.600202][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 153.861594][ T7601] Invalid ELF header magic: != ELF [ 154.059395][ T7596] zswap: compressor not available [ 154.309187][ T7600] zswap: compressor not available [ 154.463303][ T7612] netlink: 'syz.2.358': attribute type 11 has an invalid length. [ 154.478902][ T7612] netlink: 'syz.2.358': attribute type 11 has an invalid length. [ 154.502096][ T7612] netlink: 'syz.2.358': attribute type 11 has an invalid length. [ 155.857788][ T7636] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 155.974362][ T7633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 156.914473][ T7650] zswap: compressor not available [ 157.158639][ T7656] zswap: compressor not available [ 157.287338][ T7663] netlink: 'syz.2.368': attribute type 11 has an invalid length. [ 157.319751][ T7663] netlink: 'syz.2.368': attribute type 11 has an invalid length. [ 157.853163][ T7670] random: crng reseeded on system resumption [ 157.970836][ T7670] hub 1-0:1.0: USB hub found [ 158.003189][ T7670] hub 1-0:1.0: 1 port detected [ 158.658790][ T7689] netlink: 'syz.3.377': attribute type 11 has an invalid length. [ 158.658833][ T7689] netlink: 'syz.3.377': attribute type 11 has an invalid length. [ 159.885775][ T7723] netlink: 'syz.1.386': attribute type 11 has an invalid length. [ 159.894509][ T7723] netlink: 'syz.1.386': attribute type 11 has an invalid length. [ 160.032289][ T7725] syz.1.387(7725): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 160.133491][ T7734] nbd: must specify at least one socket [ 160.162135][ T7733] nbd: must specify at least one socket [ 160.175980][ T7733] FAULT_INJECTION: forcing a failure. [ 160.175980][ T7733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.236064][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.1.389 Not tainted syzkaller #0 PREEMPT(full) [ 160.236085][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.236093][ T7733] Call Trace: [ 160.236099][ T7733] [ 160.236105][ T7733] dump_stack_lvl+0x100/0x190 [ 160.236129][ T7733] should_fail_ex.cold+0x5/0xa [ 160.236145][ T7733] _copy_to_user+0x32/0xd0 [ 160.236170][ T7733] poll_select_finish+0x32f/0x670 [ 160.236191][ T7733] ? __pfx_poll_select_finish+0x10/0x10 [ 160.236213][ T7733] ? ktime_get_ts64+0x2d2/0x3f0 [ 160.236229][ T7733] ? read_tsc+0x9/0x20 [ 160.236243][ T7733] ? ktime_get_ts64+0x256/0x3f0 [ 160.236259][ T7733] kern_select+0x21b/0x270 [ 160.236280][ T7733] ? __pfx_kern_select+0x10/0x10 [ 160.236306][ T7733] __x64_sys_select+0xbd/0x160 [ 160.236318][ T7733] ? do_syscall_64+0x95/0xf80 [ 160.236336][ T7733] ? lockdep_hardirqs_on+0x78/0x100 [ 160.236353][ T7733] do_syscall_64+0x106/0xf80 [ 160.236370][ T7733] ? clear_bhb_loop+0x40/0x90 [ 160.236386][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.236400][ T7733] RIP: 0033:0x7f2fa159c799 [ 160.236412][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.236424][ T7733] RSP: 002b:00007f2fa240f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 160.236437][ T7733] RAX: ffffffffffffffda RBX: 00007f2fa1815fa0 RCX: 00007f2fa159c799 [ 160.236446][ T7733] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 160.236454][ T7733] RBP: 00007f2fa1632c99 R08: 00002000000001c0 R09: 0000000000000000 [ 160.236462][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.236469][ T7733] R13: 00007f2fa1816038 R14: 00007f2fa1815fa0 R15: 00007ffedb3ecf38 [ 160.236487][ T7733] [ 160.716911][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 160.777660][ T7737] FAULT_INJECTION: forcing a failure. [ 160.777660][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 160.796193][ T7752] Invalid ELF header magic: != ELF [ 160.853328][ T7749] smpboot: CPU 1 is now offline [ 160.912193][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 160.912232][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.912242][ T7737] Call Trace: [ 160.912248][ T7737] [ 160.912256][ T7737] dump_stack_lvl+0x100/0x190 [ 160.912288][ T7737] should_fail_ex.cold+0x5/0xa [ 160.912309][ T7737] should_failslab+0xc2/0x120 [ 160.912324][ T7737] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 160.912346][ T7737] ? sock_alloc_inode+0x25/0x1c0 [ 160.912365][ T7737] ? __pfx_sock_alloc_inode+0x10/0x10 [ 160.912379][ T7737] sock_alloc_inode+0x25/0x1c0 [ 160.912392][ T7737] alloc_inode+0x68/0x250 [ 160.912416][ T7737] sock_alloc+0x44/0x280 [ 160.912438][ T7737] ? security_socket_create+0x7f/0x250 [ 160.912462][ T7737] __sock_create+0xc2/0x860 [ 160.912482][ T7737] __sys_socketpair+0x261/0x5b0 [ 160.912501][ T7737] ? __pfx___sys_socketpair+0x10/0x10 [ 160.912520][ T7737] ? xfd_validate_state+0x129/0x190 [ 160.912548][ T7737] __x64_sys_socketpair+0x96/0x100 [ 160.912565][ T7737] ? lockdep_hardirqs_on+0x78/0x100 [ 160.912585][ T7737] do_syscall_64+0x106/0xf80 [ 160.912604][ T7737] ? clear_bhb_loop+0x40/0x90 [ 160.912623][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.912639][ T7737] RIP: 0033:0x7f3ab6b9c799 [ 160.912654][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.912668][ T7737] RSP: 002b:00007f3ab4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 160.912682][ T7737] RAX: ffffffffffffffda RBX: 00007f3ab6e16180 RCX: 00007f3ab6b9c799 [ 160.912691][ T7737] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 160.912700][ T7737] RBP: 00007f3ab6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 160.912708][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.912717][ T7737] R13: 00007f3ab6e16218 R14: 00007f3ab6e16180 R15: 00007fff1a8659a8 [ 160.912738][ T7737] [ 160.912774][ T7737] socket: no more sockets [ 161.313256][ T29] audit: type=1800 audit(4294967360.900:24): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.395" name="dummy_udc" dev="gadgetfs" ino=6030 res=0 errno=0 [ 161.354865][ T7751] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 161.372480][ T7727] ------------[ cut here ]------------ [ 161.372993][ T7727] [ 161.373000][ T7727] ====================================================== [ 161.373008][ T7727] WARNING: possible circular locking dependency detected [ 161.373017][ T7727] syzkaller #0 Not tainted [ 161.373029][ T7727] ------------------------------------------------------ [ 161.373036][ T7727] syz.3.388/7727 is trying to acquire lock: [ 161.373047][ T7727] ffffffff8e6f3680 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 161.373117][ T7727] [ 161.373117][ T7727] but task is already holding lock: [ 161.373124][ T7727] ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 161.373173][ T7727] [ 161.373173][ T7727] which lock already depends on the new lock. [ 161.373173][ T7727] [ 161.373180][ T7727] [ 161.373180][ T7727] the existing dependency chain (in reverse order) is: [ 161.373187][ T7727] [ 161.373187][ T7727] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 161.373216][ T7727] _raw_spin_lock_nested+0x31/0x40 [ 161.373244][ T7727] raw_spin_rq_lock_nested+0x2c/0x140 [ 161.373266][ T7727] _task_rq_lock+0xcf/0x490 [ 161.373287][ T7727] cgroup_move_task+0x81/0x2b0 [ 161.373311][ T7727] css_set_move_task+0x285/0x600 [ 161.373333][ T7727] cgroup_post_fork+0x202/0x9b0 [ 161.373354][ T7727] copy_process+0x5717/0x7a40 [ 161.373378][ T7727] kernel_clone+0xfc/0x9a0 [ 161.373401][ T7727] user_mode_thread+0xcc/0x110 [ 161.373431][ T7727] rest_init+0x21/0x260 [ 161.373451][ T7727] start_kernel+0x47f/0x480 [ 161.373471][ T7727] x86_64_start_reservations+0x24/0x30 [ 161.373494][ T7727] x86_64_start_kernel+0x12b/0x130 [ 161.373515][ T7727] common_startup_64+0x13e/0x148 [ 161.373538][ T7727] [ 161.373538][ T7727] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 161.373567][ T7727] _raw_spin_lock_irqsave+0x3a/0x60 [ 161.373593][ T7727] try_to_wake_up+0xb2/0x1a80 [ 161.373613][ T7727] autoremove_wake_function+0x16/0x150 [ 161.373638][ T7727] __wake_up_common+0x135/0x1f0 [ 161.373665][ T7727] __wake_up+0x31/0x60 [ 161.373687][ T7727] tty_port_default_wakeup+0x47/0x60 [ 161.373721][ T7727] uart_flush_buffer+0x379/0x8b0 [ 161.373751][ T7727] tty_driver_flush_buffer+0x64/0x80 [ 161.373780][ T7727] tty_ldisc_hangup+0xef/0x6e0 [ 161.373806][ T7727] __tty_hangup.part.0+0x3e4/0x7f0 [ 161.373835][ T7727] tty_ioctl+0xa12/0x1690 [ 161.373863][ T7727] __x64_sys_ioctl+0x18e/0x210 [ 161.373893][ T7727] do_syscall_64+0x106/0xf80 [ 161.373922][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.373945][ T7727] [ 161.373945][ T7727] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 161.373975][ T7727] _raw_spin_lock_irqsave+0x3a/0x60 [ 161.374000][ T7727] __wake_up+0x1c/0x60 [ 161.374025][ T7727] tty_port_default_wakeup+0x47/0x60 [ 161.374057][ T7727] serial8250_tx_chars+0x68f/0x860 [ 161.374089][ T7727] serial8250_handle_irq+0x73e/0xcb0 [ 161.374123][ T7727] serial8250_default_handle_irq+0x9e/0x270 [ 161.374157][ T7727] serial8250_interrupt+0xf8/0x1d0 [ 161.374179][ T7727] __handle_irq_event_percpu+0x232/0x8e0 [ 161.374213][ T7727] handle_irq_event+0xab/0x1e0 [ 161.374244][ T7727] handle_edge_irq+0x375/0x970 [ 161.374274][ T7727] __common_interrupt+0xd8/0x2f0 [ 161.374301][ T7727] common_interrupt+0xb9/0xe0 [ 161.374322][ T7727] asm_common_interrupt+0x26/0x40 [ 161.374344][ T7727] pv_native_safe_halt+0xf/0x20 [ 161.374372][ T7727] default_idle+0x9/0x10 [ 161.374402][ T7727] default_idle_call+0x6c/0xb0 [ 161.374426][ T7727] do_idle+0x43a/0x550 [ 161.374444][ T7727] cpu_startup_entry+0x4f/0x60 [ 161.374465][ T7727] rest_init+0x251/0x260 [ 161.374484][ T7727] start_kernel+0x47f/0x480 [ 161.374503][ T7727] x86_64_start_reservations+0x24/0x30 [ 161.374524][ T7727] x86_64_start_kernel+0x12b/0x130 [ 161.374545][ T7727] common_startup_64+0x13e/0x148 [ 161.374566][ T7727] [ 161.374566][ T7727] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 161.374595][ T7727] _raw_spin_lock_irqsave+0x3a/0x60 [ 161.374621][ T7727] serial8250_console_write+0x17e/0x1900 [ 161.374642][ T7727] console_flush_one_record+0x790/0xe50 [ 161.374674][ T7727] console_unlock+0x103/0x260 [ 161.374704][ T7727] vprintk_emit+0x407/0x6b0 [ 161.374723][ T7727] _printk+0xcf/0x110 [ 161.374742][ T7727] register_console.cold+0xc0/0x248 [ 161.374764][ T7727] univ8250_console_init+0x6f/0x80 [ 161.374793][ T7727] console_init+0x423/0x620 [ 161.374818][ T7727] start_kernel+0x305/0x480 [ 161.374836][ T7727] x86_64_start_reservations+0x24/0x30 [ 161.374858][ T7727] x86_64_start_kernel+0x12b/0x130 [ 161.374879][ T7727] common_startup_64+0x13e/0x148 [ 161.374900][ T7727] [ 161.374900][ T7727] -> #0 (console_owner){-...}-{0:0}: [ 161.374928][ T7727] __lock_acquire+0x14b8/0x2630 [ 161.374953][ T7727] lock_acquire+0x1cf/0x380 [ 161.374978][ T7727] console_lock_spinning_enable+0x72/0x80 [ 161.375009][ T7727] console_flush_one_record+0x739/0xe50 [ 161.375041][ T7727] console_unlock+0x103/0x260 [ 161.375072][ T7727] vprintk_emit+0x407/0x6b0 [ 161.375090][ T7727] _printk+0xcf/0x110 [ 161.375109][ T7727] __report_bug.cold+0x15/0x137 [ 161.375139][ T7727] report_bug+0xb2/0x220 [ 161.375164][ T7727] handle_bug+0x16a/0x2a0 [ 161.375195][ T7727] exc_invalid_op+0x17/0x50 [ 161.375213][ T7727] asm_exc_invalid_op+0x1a/0x20 [ 161.375234][ T7727] update_rq_clock+0x40a/0xd20 [ 161.375256][ T7727] __schedule+0x1b7d/0x6120 [ 161.375281][ T7727] schedule+0xdd/0x390 [ 161.375305][ T7727] schedule_preempt_disabled+0x13/0x30 [ 161.375332][ T7727] rwsem_down_read_slowpath+0x5dc/0xb30 [ 161.375366][ T7727] down_read+0xed/0x460 [ 161.375396][ T7727] do_exit+0x72b/0x2b60 [ 161.375427][ T7727] do_group_exit+0xd5/0x2a0 [ 161.375453][ T7727] __x64_sys_exit_group+0x3e/0x50 [ 161.375481][ T7727] x64_sys_call+0x102c/0x1530 [ 161.375503][ T7727] do_syscall_64+0x106/0xf80 [ 161.375531][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.375553][ T7727] [ 161.375553][ T7727] other info that might help us debug this: [ 161.375553][ T7727] [ 161.375560][ T7727] Chain exists of: [ 161.375560][ T7727] console_owner --> &p->pi_lock --> &rq->__lock [ 161.375560][ T7727] [ 161.375593][ T7727] Possible unsafe locking scenario: [ 161.375593][ T7727] [ 161.375599][ T7727] CPU0 CPU1 [ 161.375604][ T7727] ---- ---- [ 161.375610][ T7727] lock(&rq->__lock); [ 161.375624][ T7727] lock(&p->pi_lock); [ 161.375639][ T7727] lock(&rq->__lock); [ 161.375654][ T7727] lock(console_owner); [ 161.375668][ T7727] [ 161.375668][ T7727] *** DEADLOCK *** [ 161.375668][ T7727] [ 161.375673][ T7727] 4 locks held by syz.3.388/7727: [ 161.375686][ T7727] #0: ffff8880366fd900 (&mm->mmap_lock){++++}-{4:4}, at: do_exit+0x72b/0x2b60 [ 161.375743][ T7727] #1: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 161.375795][ T7727] #2: ffffffff8e7d3ac0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 161.375844][ T7727] #3: ffffffff8e7d3b38 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 161.375908][ T7727] [ 161.375908][ T7727] stack backtrace: [ 161.375920][ T7727] CPU: 0 UID: 0 PID: 7727 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 161.375947][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.375963][ T7727] Call Trace: [ 161.375971][ T7727] [ 161.375980][ T7727] dump_stack_lvl+0x100/0x190 [ 161.376011][ T7727] print_circular_bug.cold+0x178/0x1c7 [ 161.376048][ T7727] check_noncircular+0x146/0x160 [ 161.376079][ T7727] __lock_acquire+0x14b8/0x2630 [ 161.376112][ T7727] lock_acquire+0x1cf/0x380 [ 161.376139][ T7727] ? console_lock_spinning_enable+0x61/0x80 [ 161.376173][ T7727] ? console_lock_spinning_enable+0x4a/0x80 [ 161.376210][ T7727] console_lock_spinning_enable+0x72/0x80 [ 161.376243][ T7727] ? console_lock_spinning_enable+0x61/0x80 [ 161.376276][ T7727] console_flush_one_record+0x739/0xe50 [ 161.376314][ T7727] ? __pfx_console_flush_one_record+0x10/0x10 [ 161.376353][ T7727] ? is_printk_cpu_sync_owner+0x32/0x40 [ 161.376380][ T7727] console_unlock+0x103/0x260 [ 161.376413][ T7727] ? __pfx_console_unlock+0x10/0x10 [ 161.376454][ T7727] ? do_raw_spin_unlock+0x145/0x1e0 [ 161.376487][ T7727] ? _printk+0xcf/0x110 [ 161.376510][ T7727] vprintk_emit+0x407/0x6b0 [ 161.376531][ T7727] ? __pfx_vprintk_emit+0x10/0x10 [ 161.376553][ T7727] ? __lock_acquire+0x4a5/0x2630 [ 161.376582][ T7727] _printk+0xcf/0x110 [ 161.376603][ T7727] ? __pfx__printk+0x10/0x10 [ 161.376629][ T7727] ? __report_bug.cold+0x5/0x137 [ 161.376657][ T7727] ? __report_bug+0x377/0x3d0 [ 161.376685][ T7727] __report_bug.cold+0x15/0x137 [ 161.376714][ T7727] ? update_rq_clock+0x40a/0xd20 [ 161.376738][ T7727] ? __pfx___report_bug+0x10/0x10 [ 161.376765][ T7727] ? __pfx_css_rstat_updated+0x10/0x10 [ 161.376789][ T7727] ? gup_fast_fallback+0x7e5/0x2460 [ 161.376817][ T7727] ? rcu_is_watching+0x12/0xc0 [ 161.376850][ T7727] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 161.376883][ T7727] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 161.376918][ T7727] ? update_rq_clock+0x40a/0xd20 [ 161.376949][ T7727] report_bug+0xb2/0x220 [ 161.376975][ T7727] ? update_rq_clock+0x40a/0xd20 [ 161.376999][ T7727] handle_bug+0x16a/0x2a0 [ 161.377032][ T7727] exc_invalid_op+0x17/0x50 [ 161.377052][ T7727] asm_exc_invalid_op+0x1a/0x20 [ 161.377074][ T7727] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 161.377108][ T7727] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 161.377131][ T7727] RSP: 0018:ffffc900064f7a30 EFLAGS: 00010046 [ 161.377149][ T7727] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 161.377165][ T7727] RDX: 0000000000000046 RSI: ffffffff8de59622 RDI: ffffffff8c1b06a0 [ 161.377180][ T7727] RBP: ffffc900064f7bd8 R08: 0000000000000001 R09: 0000000000000001 [ 161.377196][ T7727] R10: ffffffff90d9bd17 R11: 0000000000000000 R12: ffffffff90d9f0e4 [ 161.377211][ T7727] R13: ffff8880b853c0c0 R14: ffff88801e6e1e80 R15: ffff8880b853b280 [ 161.377238][ T7727] __schedule+0x1b7d/0x6120 [ 161.377266][ T7727] ? __lock_acquire+0x4a5/0x2630 [ 161.377300][ T7727] ? __pfx___schedule+0x10/0x10 [ 161.377327][ T7727] ? find_held_lock+0x2b/0x80 [ 161.377348][ T7727] ? schedule+0x2bf/0x390 [ 161.377377][ T7727] schedule+0xdd/0x390 [ 161.377403][ T7727] schedule_preempt_disabled+0x13/0x30 [ 161.377499][ T7727] rwsem_down_read_slowpath+0x5dc/0xb30 [ 161.377561][ T7727] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 161.377603][ T7727] ? __pfx___might_resched+0x10/0x10 [ 161.377640][ T7727] down_read+0xed/0x460 [ 161.377675][ T7727] ? __pfx_down_read+0x10/0x10 [ 161.377714][ T7727] do_exit+0x72b/0x2b60 [ 161.377744][ T7727] ? preempt_schedule_thunk+0x16/0x30 [ 161.377776][ T7727] ? __pfx_do_exit+0x10/0x10 [ 161.377805][ T7727] ? preempt_schedule_thunk+0x16/0x30 [ 161.377838][ T7727] do_group_exit+0xd5/0x2a0 [ 161.377869][ T7727] __x64_sys_exit_group+0x3e/0x50 [ 161.377899][ T7727] x64_sys_call+0x102c/0x1530 [ 161.377924][ T7727] do_syscall_64+0x106/0xf80 [ 161.377956][ T7727] ? clear_bhb_loop+0x40/0x90 [ 161.377983][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.378009][ T7727] RIP: 0033:0x7f3ab6b9c799 [ 161.378030][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.378053][ T7727] RSP: 002b:00007fff1a865ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 161.378077][ T7727] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ab6b9c799 [ 161.378094][ T7727] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.378118][ T7727] RBP: 00007fff1a865d4c R08: 0000000000000000 R09: 00000000000927c0 [ 161.378134][ T7727] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000005c [ 161.378149][ T7727] R13: 00000000000927c0 R14: 000000000002707c R15: 00007fff1a865da0 [ 161.378173][ T7727] [ 162.563691][ T7727] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 162.563709][ T7727] WARNING: kernel/sched/sched.h:1600 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.388/7727 [ 162.581594][ T7727] Modules linked in: [ 162.585608][ T7727] CPU: 0 UID: 0 PID: 7727 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 162.595020][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.605094][ T7727] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 162.610760][ T7727] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 162.630547][ T7727] RSP: 0018:ffffc900064f7a30 EFLAGS: 00010046 [ 162.636711][ T7727] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 162.644771][ T7727] RDX: 0000000000000046 RSI: ffffffff8de59622 RDI: ffffffff8c1b06a0 [ 162.652744][ T7727] RBP: ffffc900064f7bd8 R08: 0000000000000001 R09: 0000000000000001 [ 162.661068][ T7727] R10: ffffffff90d9bd17 R11: 0000000000000000 R12: ffffffff90d9f0e4 [ 162.669134][ T7727] R13: ffff8880b853c0c0 R14: ffff88801e6e1e80 R15: ffff8880b853b280 [ 162.677119][ T7727] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 162.686158][ T7727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.692769][ T7727] CR2: 00007fee22ab5f88 CR3: 0000000078ca4000 CR4: 00000000003526f0 [ 162.700831][ T7727] Call Trace: [ 162.704117][ T7727] [ 162.707066][ T7727] __schedule+0x1b7d/0x6120 [ 162.711586][ T7727] ? __lock_acquire+0x4a5/0x2630 [ 162.716829][ T7727] ? __pfx___schedule+0x10/0x10 [ 162.721702][ T7727] ? find_held_lock+0x2b/0x80 [ 162.726391][ T7727] ? schedule+0x2bf/0x390 [ 162.730755][ T7727] schedule+0xdd/0x390 [ 162.734860][ T7727] schedule_preempt_disabled+0x13/0x30 [ 162.740360][ T7727] rwsem_down_read_slowpath+0x5dc/0xb30 [ 162.746076][ T7727] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 162.752318][ T7727] ? __pfx___might_resched+0x10/0x10 [ 162.757633][ T7727] down_read+0xed/0x460 [ 162.761809][ T7727] ? __pfx_down_read+0x10/0x10 [ 162.766593][ T7727] do_exit+0x72b/0x2b60 [ 162.770765][ T7727] ? preempt_schedule_thunk+0x16/0x30 [ 162.776355][ T7727] ? __pfx_do_exit+0x10/0x10 [ 162.781084][ T7727] ? preempt_schedule_thunk+0x16/0x30 [ 162.786490][ T7727] do_group_exit+0xd5/0x2a0 [ 162.791028][ T7727] __x64_sys_exit_group+0x3e/0x50 [ 162.796079][ T7727] x64_sys_call+0x102c/0x1530 [ 162.800956][ T7727] do_syscall_64+0x106/0xf80 [ 162.805577][ T7727] ? clear_bhb_loop+0x40/0x90 [ 162.810368][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.816279][ T7727] RIP: 0033:0x7f3ab6b9c799 [ 162.820695][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.840393][ T7727] RSP: 002b:00007fff1a865ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 162.848989][ T7727] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ab6b9c799 [ 162.857140][ T7727] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.865307][ T7727] RBP: 00007fff1a865d4c R08: 0000000000000000 R09: 00000000000927c0 [ 162.873281][ T7727] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000005c [ 162.881336][ T7727] R13: 00000000000927c0 R14: 000000000002707c R15: 00007fff1a865da0 [ 162.889314][ T7727] [ 162.892343][ T7727] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.899636][ T7727] CPU: 0 UID: 0 PID: 7727 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 162.908854][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.918933][ T7727] Call Trace: [ 162.922222][ T7727] [ 162.925154][ T7727] dump_stack_lvl+0x100/0x190 [ 162.929871][ T7727] vpanic+0x552/0x970 [ 162.933891][ T7727] ? __pfx_vpanic+0x10/0x10 [ 162.938412][ T7727] ? lock_release+0x263/0x320 [ 162.943138][ T7727] panic+0xd1/0xe0 [ 162.946893][ T7727] ? __pfx_panic+0x10/0x10 [ 162.951349][ T7727] ? check_panic_on_warn+0x1f/0x90 [ 162.956579][ T7727] check_panic_on_warn.cold+0x19/0x34 [ 162.961963][ T7727] ? update_rq_clock+0x40a/0xd20 [ 162.966909][ T7727] __warn.cold+0x191/0x348 [ 162.971357][ T7727] __report_bug+0x296/0x3d0 [ 162.975891][ T7727] ? update_rq_clock+0x40a/0xd20 [ 162.980847][ T7727] ? __pfx___report_bug+0x10/0x10 [ 162.985977][ T7727] ? __pfx_css_rstat_updated+0x10/0x10 [ 162.991448][ T7727] ? gup_fast_fallback+0x7e5/0x2460 [ 162.996654][ T7727] ? rcu_is_watching+0x12/0xc0 [ 163.001432][ T7727] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 163.007893][ T7727] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 163.014153][ T7727] ? update_rq_clock+0x40a/0xd20 [ 163.019107][ T7727] report_bug+0xb2/0x220 [ 163.023658][ T7727] ? update_rq_clock+0x40a/0xd20 [ 163.028620][ T7727] handle_bug+0x16a/0x2a0 [ 163.032972][ T7727] exc_invalid_op+0x17/0x50 [ 163.037479][ T7727] asm_exc_invalid_op+0x1a/0x20 [ 163.042334][ T7727] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 163.047887][ T7727] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 163.067513][ T7727] RSP: 0018:ffffc900064f7a30 EFLAGS: 00010046 [ 163.073697][ T7727] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 163.082031][ T7727] RDX: 0000000000000046 RSI: ffffffff8de59622 RDI: ffffffff8c1b06a0 [ 163.090029][ T7727] RBP: ffffc900064f7bd8 R08: 0000000000000001 R09: 0000000000000001 [ 163.098018][ T7727] R10: ffffffff90d9bd17 R11: 0000000000000000 R12: ffffffff90d9f0e4 [ 163.105996][ T7727] R13: ffff8880b853c0c0 R14: ffff88801e6e1e80 R15: ffff8880b853b280 [ 163.113988][ T7727] __schedule+0x1b7d/0x6120 [ 163.118526][ T7727] ? __lock_acquire+0x4a5/0x2630 [ 163.123478][ T7727] ? __pfx___schedule+0x10/0x10 [ 163.128426][ T7727] ? find_held_lock+0x2b/0x80 [ 163.133105][ T7727] ? schedule+0x2bf/0x390 [ 163.137447][ T7727] schedule+0xdd/0x390 [ 163.141531][ T7727] schedule_preempt_disabled+0x13/0x30 [ 163.147000][ T7727] rwsem_down_read_slowpath+0x5dc/0xb30 [ 163.152570][ T7727] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 163.158657][ T7727] ? __pfx___might_resched+0x10/0x10 [ 163.163972][ T7727] down_read+0xed/0x460 [ 163.168141][ T7727] ? __pfx_down_read+0x10/0x10 [ 163.172928][ T7727] do_exit+0x72b/0x2b60 [ 163.177272][ T7727] ? preempt_schedule_thunk+0x16/0x30 [ 163.182677][ T7727] ? __pfx_do_exit+0x10/0x10 [ 163.187575][ T7727] ? preempt_schedule_thunk+0x16/0x30 [ 163.192975][ T7727] do_group_exit+0xd5/0x2a0 [ 163.197499][ T7727] __x64_sys_exit_group+0x3e/0x50 [ 163.202553][ T7727] x64_sys_call+0x102c/0x1530 [ 163.207261][ T7727] do_syscall_64+0x106/0xf80 [ 163.211884][ T7727] ? clear_bhb_loop+0x40/0x90 [ 163.216680][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.223129][ T7727] RIP: 0033:0x7f3ab6b9c799 [ 163.227737][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.247365][ T7727] RSP: 002b:00007fff1a865ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 163.255978][ T7727] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ab6b9c799 [ 163.263949][ T7727] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.272003][ T7727] RBP: 00007fff1a865d4c R08: 0000000000000000 R09: 00000000000927c0 [ 163.279997][ T7727] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000005c [ 163.287972][ T7727] R13: 00000000000927c0 R14: 000000000002707c R15: 00007fff1a865da0 [ 163.295956][ T7727] [ 163.299445][ T7727] Kernel Offset: disabled [ 163.303797][ T7727] Rebooting in 86400 seconds..