last executing test programs: 1m56.94274313s ago: executing program 3 (id=2638): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x4, 0x2020009, 0x100000001, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f", 0xf) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0xfffffdb2) socket(0xa, 0x801, 0x84) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) setfsuid$auto(0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000200)=0x89) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) mremap$auto(0x772, 0x6, 0x7, 0x8000, 0x100000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) 1m51.504728805s ago: executing program 3 (id=2655): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x1}, 0x6) 1m50.877818612s ago: executing program 3 (id=2658): mmap$auto(0x2000000000, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x28974783) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x169a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ff, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup$auto(0xa, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x1, 0x7ff) ptrace$auto(0xf, r4, 0x9, 0xfffffffffffff6e2) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f501a8bd7000fbdbdf250a00000a4bb25091cacea9879fe00450241ed68ff35a5f51a42804e9dde1cad60886f3ef84747ee2b731f8bac9434d64d8c6fdefa37dcc7a25f1bcb397a2305a8ceb5cc4b260135b8ca4e6f219453980286c8572881f12d0e242f379a7dfe538680b576a6ab7f07bf9671ba1458819866295a875"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 1m49.874892039s ago: executing program 3 (id=2663): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) socketpair$auto(0x0, 0x1, 0xffffffff, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) setsockopt$auto(0x3, 0x1, 0xc, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1m49.120820705s ago: executing program 3 (id=2665): io_uring_register$auto(0x2, 0x14, 0x0, 0x3) 1m48.924656679s ago: executing program 3 (id=2667): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) mmap$auto(0x2, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000100)="fc4b17", 0x2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) read$auto_snd_ctl_f_ops_control(0xffffffffffffffff, 0x0, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000003300), 0x121102, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x782, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2) eventfd$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x140002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x6) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/fuse\x00', 0x2202, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x5b, 0x0) unshare$auto(0x40000080) r0 = socket(0x11, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) connect$auto(0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8) mmap$auto(0x1, 0x100000000, 0x7, 0xeb1, 0xfffffffffffffffa, 0x5) sysfs$auto(0x2, 0x23, 0x0) 1m33.55293771s ago: executing program 32 (id=2667): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) mmap$auto(0x2, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000100)="fc4b17", 0x2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) read$auto_snd_ctl_f_ops_control(0xffffffffffffffff, 0x0, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000003300), 0x121102, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x782, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2) eventfd$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x140002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x6) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/fuse\x00', 0x2202, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x5b, 0x0) unshare$auto(0x40000080) r0 = socket(0x11, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) connect$auto(0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8) mmap$auto(0x1, 0x100000000, 0x7, 0xeb1, 0xfffffffffffffffa, 0x5) sysfs$auto(0x2, 0x23, 0x0) 8.810693012s ago: executing program 2 (id=3040): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) faccessat$auto(r0, &(0x7f0000000080)='./file1\x00', 0x80000001) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x10001, 0xdf, 0x9b71, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1000001, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x80000000003fffff, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80000, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) prctl$auto(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x27, 0x1, 0x84) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@VDPA_ATTR_MGMTDEV_BUS_NAME={0x32, 0x1, '/sys/kernel/security/integrity/evm/evm_xattrs\x00'}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0xaa, 0xa, "50d53b77f1bebd63cf3a568ba3ce4bbf804080bc6b9a65d92cafeaa1bf31c2c557165e2fb9137242f56e0dd2ff9a0c59716f20229bb726fd11016d6495205b3950dc13ec280e047b9a3123ab14a1a0a1c3c63c815a2999b5532a29b28303074e33c990d8f90b2dadd0e39deb90a194daf4f5ad8b15f4834ea96280fca1f8b5f24f49cfcceaa49bedbf07bdb82fafefef8bc9b40bcea26d95c5d9f2db9f2bbe7231abd7f7c0ba"}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x5, 0x1, '\x00'}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x101041, 0x0) ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$auto(r3, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) 6.985325479s ago: executing program 1 (id=3048): openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/id\x00', 0x40, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x5, 0x0) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x5) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000240)="15ebbdb27b74bf3caaeeed0c001757a01f395f86a5253102e93a9600aabbc7e468d2d0b04b989e2b328ac8b38a337b1655ce376aac1de6b9154acf4452d845f842751158b44bfd93820d967126339935d5529071b4c956d9f1c5902aab837949a431", 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xa}, 0x8, 0x311) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) (async) mmap$auto(0xfffffffffffffffe, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28002) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) (async) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=@raw_tracepoint={0x8, 0xffffffffffffffff, 0x0, 0x7}, 0x6) (async) sendfile$auto(r4, r4, 0x0, 0x1) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x68002, 0x0) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000180)={0x227c, 0x6, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0xa, 0x276, 0x100, 0x5, 0x2, 0x2, 0x9, 0x8000000000000001, 0x6, 0xffffffffffffffff}) (async) r5 = socket(0xa, 0x2, 0x3a) getsockopt$auto(r5, 0x29, 0xd0, 0x0, 0x0) (async) socket(0x10, 0x2, 0x9) (async) bpf$auto(0x4, &(0x7f0000000780)=@query={@target_ifindex, 0xf6, 0x7, 0x2, 0x8, @count=0xe8, 0x0, 0x3, 0xe5de, 0x0, 0x4}, 0xa3) (async) prctl$auto(0x3b, 0x2, 0x0, 0x1, 0xfffffffffffffff9) r6 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer1\x00', 0x181900, 0x0) ioctl$auto(r6, 0x80004508, 0xffffffffffffffff) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) 6.514862108s ago: executing program 2 (id=3051): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) socketpair$auto(0x0, 0x1, 0xffffffff, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) setsockopt$auto(0x3, 0x1, 0xc, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8004) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 6.394117987s ago: executing program 1 (id=3052): setresuid$auto(0x8, 0x8, 0x0) setuid$auto(0x0) r0 = epoll_create1$auto(0x9) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) select$auto(0x100, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x61, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xb, 0xfffffffffffffffe]}, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) mmap$auto(0x0, 0x40006, 0xdf, 0x200089b72, 0x7, 0x28000) ustat$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(0x3, 0x0, 0x81) socket(0x1e, 0x4, 0x0) r1 = socket(0x10, 0x4, 0xfffffffd) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000440)=0xe7d6, 0x2000005) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0x5) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xffffffbf) ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000000)=0x10000) fstat$auto(r0, &(0x7f0000000040)={0x3, 0x400000, 0x0, 0x8, 0xee00, 0xee01, 0x0, 0x5, 0x3, 0x3, 0x7, 0x3, 0x3, 0x1ff, 0x4, 0x8, 0x51b}) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x5b, &(0x7f0000000180)={@siginfo_0_0={0xddeb, 0x3, 0x4, @_sigpoll={0xa9, r1}}}, 0x4) close_range$auto(r0, r0, 0xd3) 6.12527353s ago: executing program 1 (id=3053): prctl$auto(0x5, 0x7fff, 0x0, 0x800000003, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, 0x0, 0x10) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, r0, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x5, 0x2, 0x4}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r3 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) 5.944166827s ago: executing program 2 (id=3054): unshare$auto(0x40000080) (async) r0 = clone$auto(0x7, 0x7, 0x0, 0x0, 0xfffffffc) (async) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r1, &(0x7f0000000180)=""/61, 0xfffffeeb) (async) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000100)={@sival_int=0x7cb4, @raw=0x7f172694, 0x4, @_tid=r0}, 0x0) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24) (async) unshare$auto(0x40000080) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x4001, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) (async, rerun: 32) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000001440)=ANY=[@ANYBLOB="b4050000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a07d75875478365d30a0510122e46c304bbd7846a926601effa902a974df22745154f29b563a89d70a72f9582fe20b75d0dc38dfd84c594e94f90fd2ad1f718c3ee1c1ef7463a0a1ff9ef10ee211157e8f0442a9fb63f702fb58e858fed15e94194e09a93b75034dee6983f155011ec394b5acad8999c58c69cec0aec18c555994a794c769b250d6019280fb2eeefc11aa6cde02a71a0d4dcc36fa421df6b4b55df5601adf54c16bff77392e32db6cdacb5813db2ea8a86aa2c04e4cc686c19e939bdf69ee9456de560c7fc234975eda7b55b0f375c50179cdfabaffffffff000000005949ba3992df4176de427fa9346140f539a1e22cb010b143e54ed7b20c1f3ff2a910973b6b2599aab8862cf2e9e098dd50e9ae67b479b40c000f000f0000000000000000000000000601018014009800fe880000000000000000000000000000000000003d9bf8a4d18bd16cea53fc588f63ce2a7413087d13835cb1e1cacb7b2dd08dc9e1aacf9bd47fe9e5a91a19c772c644b146deed38b15521a79395c03109a49dc9eab7098b35919f6adee37b0665d36ea36fafe47f77f7f54c83ff1176e8cc900c26313a1268942eb66c5953c80bd439b8d79f8922ba04ba9652ff655a43d712c8a667f7176c2b66271b4d36f91527e88a61a66b6393f704fd1c226909c9f200902f949e560f3181ac3f6ae0ad6e985c042e211c0eac2bcd559a3fbdcc7b74c99d6ecbea3c95f02cfb6c7d633305aa000000000000000000000000000000000000000022058db482cef542c358d8b1f0d2be25b481c6be1d6d9789068c0edd76f7ced178340311f0ae97d8733d48c0a22dd67759b42bd7d3b1d73648662d5340ac0dd2bb672d14c5dcc7a7fd1cb0eed5fe81424df7de661ad53bcee9d2b560deb8e61b1c800d0cce63bd7a7691248c9b0ccd8c704a7d919012b95c4b654c63ec2c1303bd9e86e50a65faea26150a0608257b62ca2d59b0e1193bf3d5b5441f5a7ff705d2918edfada0f913b0a3c3247d9002ebf659cc90a7778bdac7679ca638d9e35dd29d2b6f36be9ed35f7a696910a1f477eaddb8c420a034adc9143ed2bbd19439eca321463c27d5da0f10b8261df9226be8f75ae0bde82b4fef1e1c39e54101b8c0d3455522ebadf771706dfccbee9a9d0cdae2af270708db9fd0d3ae82b7a694d8466c0edb6569833bff6b7a636cfa24f99039a66515c907ec84c62b7dafcadb3ed3be723578e35a126bc59a51fd84c803f94ff024e58c8e90f39725b7dde85b9f56f226730d3886f342a1c275d118780587de4f"], 0x5b4}, 0x1, 0x0, 0x0, 0x4800}, 0x48000) (async, rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) (async) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) (async) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x1e, 0x4, 0x0) (async, rerun: 32) r6 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r6, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 32) recvmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4d6}, 0x6, 0x0, 0x8, 0x803}, 0xffd}, 0xffffffff, 0x4, 0x0) (rerun: 32) 5.108133703s ago: executing program 1 (id=3058): write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000340)=@bpf_attr_11={0xfff, 0x0, 0x2, 0x7, 0x3, 0x100, 0xfffffff3, r0}, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb3/operstate\x00', 0x80000, 0x0) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x2, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x6, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) write$auto(0xffffffffffffffff, 0x0, 0x80000000) read$auto(r1, 0x0, 0x9) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)={0x1, 0x7, 0x17, 0x8, 0x1, 0x64, 0x10, 0x3, 0x3}) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x2008000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x8000, 0x400004, 0xdf, 0x16, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x3) getpgrp(0xffffffffffffffff) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket(0xa, 0x3, 0x101) 4.466366617s ago: executing program 2 (id=3061): mmap$auto(0x2000000000, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x28974783) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ff, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup$auto(0xa, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x1, 0x7ff) ptrace$auto(0xf, r3, 0x9, 0xfffffffffffff6e2) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="f501a8bd7000fbdbdf250a00000a4bb25091cacea9879fe00450241ed68ff35a5f51a42804e9dde1cad60886f3ef84747ee2b731f8bac9434d64d8c6fdefa37dcc7a25f1bcb397a2305a8ceb5cc4b260135b8ca4e6f219453980286c8572881f12d0e242f379a7dfe538680b576a6ab7f07bf9671ba1458819866295a875"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 4.072863504s ago: executing program 1 (id=3063): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x23, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(0xffffffffffffffff, 0x1ff, 0xfffffffffffffffc, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) listen$auto(r3, 0x4) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r4, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)={0x8ac, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2a4, 0x1, 0x0, 0x1, [@nested={0x295, 0x145, 0x0, 0x1, [@generic="606bd539f2614e5ba1558c10a80e0f64c880897faf4d46406b6febc7d3c406cdce9662fedd982cb498fb081e11bb32ff2eb35cdf3e915bcac6", @nested={0x4, 0x151}, @nested={0x253, 0x4e, 0x0, 0x1, [@nested={0x17a, 0x168, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@multicast2}, @generic="0d7ca0c9e8cb29d85f23f3a8d9295b0a734dc6958aa9dd1156d0bbd542d3611bb88ce354924b600b31956147b8ebbfe6e590fe8f3a1ed587db5e21e07ac59cafdb4548b2f162efccc0d6ddcd54a7af1f66f21d9df45a58fcf56bcee4e8ee4b617cdacdd068b5cce5", @typed={0x8, 0x2b, 0x0, 0x0, @pid}, @generic="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"]}, @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @generic="ecc7cf2d32f0d4765975b4c8c3ecc6c49883752ea60658b1ec962b4e55935205afeddfa24659a8270b4507d223a39c300154e51b1d45316678ce5a9f8b25ca06d614570d9c37275ea6f5dd5a9c3aeb77e81eb20e268f78e2c4dcd4d3a4d0e5414890151291e0983d386bdc8e867f9b16a687fc4db2046f11c9f070717a27e830e1b637af90fd027665f80d2d4b4bf9b7a638eb5ab3c38904350fd94c3ade7219b93c54a3924aadddb38929ef452add31255a93df0b3d3adc5b8fd89fd2ccd5"]}]}, @typed={0x8, 0x74, 0x0, 0x0, @uid}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x31e, 0x1, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xf6, 0x80, 0x0, 0x1, [@generic="32b357e883d1226ca546b44d5df7b80901081e450eb8660d5edc5c20946de4abf065150ae4f61dcd9e878cc72b5adbcb8b6d24251664ac6a3cc738065a676dda0f9b968973a38bd107faaddabba6da0ba00d578519ef4e9ff4c723990c28197303cf9a58ffd66abc29963c502e4606c64c34356d6230ba84f1bcc4b054e5d656eae93a5ffb063ac573130f90bf68119d92bf28f4f0d026c768b4917b988e4d541a46354dec1e613738d4ff6d940737fc86b7a44589088123211967969de8f37f04c5d612464751b9f945e467bf4395940c0a750da76d150ff01807a68ce46bbccf684819b4b73cacf0f437f005df2bff8a79"]}, @generic="98e91e7213808a70d9ceb261b4a0a1eb8fbecdf0c3e6332e275e358daf8a939c10cb850c7ed534f56d222b7f416d488a7d45f64da690753aa623093cb062f564092952763f92a5fe7dc95db719456d054f82a38c6e85c8eece343b39cd5a496540de1996092998a1b1b946be01597269b04163f80d597cf62957d30676f7b7b44151d112cd07d874047cdf8616d420394f11ce18a6211de32e7c663f75a16dd22c1275681b0665b9bc2461a57279eb656d5fea63aeb18398c4c467db70ff7d2f5d6989b2285508d8f84b27a1731d8586f2cda5589acc94994a01708e69b07388455b83dc27c46b87d33c9b14c33d766f23bdf3fe468ecc", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x1c, 0x0, 0x0, @fd=r0}, @generic="0de38835e4ab50a5d9b8a9128da2bea72bbea580b9a7a20240f1b08d22557144776dfbb400157a818dfcce9b86810452041ba429010d9716448310bd23f869a89cb51d31e32adcfc10fc7111da0950c1da77faa1261cbe0af0c7eeacf42b768dc1329aaad0fe55766766d1460c62f766f2046d5b3f61b7fd94c4553cce19fc6da9d363e128a2f6ebc33e5d018818298014fb2d7ec406d9e3017275ccd9ed310ef51205c614aa7b", @generic="df2c90f8f68bc82487685e1d67b2dbbca7c59abab8f92e1c", @typed={0x42, 0x46, 0x0, 0x0, @binary="71237f8284616b95a475e79b54eb42443861fe47fc308ce5e904de23b5398b8c94e2e7593afebc4ad9328eb75234c78acb1562f31f545b0d0d3e5477f8e3"}, @nested={0x4, 0x51}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2d3, 0x1, 0x0, 0x1, [@generic="f6c64f101850e1c994c9e155b0333c63fd1aca32be3aedc3d37686e47e04a51eeff38d2b753b1bf9db950bea320d8febe344de7c9dfc8c30decbcd36f5089f59d6b3cc489e8cd7b93101aa4cc2b69fbcd64f40c2bef2e3163c5a0888db2caa90657b121af2f8ce7f8e44588e13a7502d3ee0bb3b59c88ddfa41586ae4802ca61b9fdd4342c67b253e56ff75aa797c3bf0dd2abd4072bc8218f89064f07bf4ede3b65935e698ffef896ac88bfd1a320", @nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0xd}]}, @nested={0x82, 0x13d, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @fd=r2}, @generic="bcc80890f841045d1d92a40eae1ac1c878929430211c517d548a34d7e9bf9a60a10b7ed70c72d31b266dc493074b0a898c8687739fbc930f7022c238ed332991c488a18db4f6560aa0c0b97fb4f0f47fa95ed3cc68e3e83d18cdbb42739634eab834470e19d29c73f9f49a895801", @nested={0x4, 0x140}, @nested={0x4, 0x135}]}, @nested={0xa1, 0x11a, 0x0, 0x1, [@nested={0x4, 0x5f}, @typed={0x9, 0x13c, 0x0, 0x0, @str=',-^,\x00'}, @generic="414193bd6248133ad871d58387eff854751b8d3ff3622723bfcccc119319319334844973e2a0939c5069799f3b4f381689d41602c3a7d87f78437be743cbfc5bb0b832cd2435641eaf7b023604a3b062979506c929c94a7870ce2ab2f9fd8c3ae6b03b67a593f61909d7e79f168fef7809b75b4b2b2f0417f21a2cf8b41853886b0b9037d8ef739165aa29d848"]}, @typed={0xed, 0x6a, 0x0, 0x0, @binary="bde0d6b623ad9e094b028ce7b24bc54b6bded9a5b6094e6a88cce04be636050d349dafb9bf497f1f508ace5c1c18afc3f1f9f554f52168b99c829008ac5162e01f252b10499f459f2c280791b9fc918783e11f02d41cbc78379779c8c4fab734b62bcc69c59c7aa34bc1a651d3d445a829a8bf6f2dfd17e3fe2507061eefad308b0fcb24ff068008520d5520f13e5a116a222dd9e462c3292f1efa5b2a2f0e8f26e9973be0ea8d14d6f7d43f32cc29eade9e72931f6fc60479f93d90e7d00a8b3c54ab6fb075d16b5c8732da766865d63ab9cf2f5ab89df03703865f0a91e9b6c330ea44ca04a02022"}]}]}, 0x8ac}}, 0x40040) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="266f9b40998f6ae5f68fc20b", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf258100000021005a804bed55eebb4dbd2afe44514b8e0c00f800030000000000000004000900000000"], 0x38}, 0x1, 0x0, 0x0, 0x2000c8d1}, 0xc885) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto(0x3, 0xae41, r5) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) 3.9567233s ago: executing program 0 (id=3064): r0 = socket(0x10, 0x3, 0xc) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0xaf) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x500, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) syz_clone3(&(0x7f0000000400)={0x4000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x1}, &(0x7f0000000200)=""/139, 0x8b, &(0x7f0000000340)=""/66, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8}, 0x58) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r2, 0x4, &(0x7f0000000480)={@_si_pad}, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0xb7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000, 0x1) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) adjtimex$auto(0x0) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) open(0x0, 0x80800, 0x124) mmap$auto(0x0, 0x2020009, 0x40020, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x0) 3.054183773s ago: executing program 0 (id=3066): r0 = socket(0x11, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400006, 0xdc, 0xfff, r0, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) recvmmsg$auto(r1, 0x0, 0x10a, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x8000000004020008, 0xdf, 0x18, 0x401, 0x18000) mmap$auto(0x0, 0x4020009, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001005}, 0x1, 0x0, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}}) io_uring_register$auto(0x2, 0x80020, &(0x7f0000000600)="f1f4fba8f8c10999206b18dbdc4b7d8cbf75efa98200000000000000c0dd1d49", 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000340), r3) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="00c6f200", @ANYRES8=r1, @ANYRESHEX=0x0], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x9) syz_genetlink_get_family_id$auto_nlbl_cipsov4(0x0, 0xffffffffffffffff) r4 = prctl$auto(0xfb, 0x1, 0x4, 0x5, 0x10002) r5 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0x7, 0x4cbd59) write$auto_proc_coredump_filter_operations_base(r4, &(0x7f0000000180)="8907447b3cf49ae1052ea9628639b1138996742452020d420f842ef08fa0bcc8a7961e20fcdc9a025b09ce4d68a0ba089acde051a75cbb7fc1d0733d114b1e011c4b3d0dbc4b43e35909c31bc1e76a52242d7ca2937f85015647c4ac4117edf2a96d19c8f39d3ff5409b12902aaf4f663ff35565941fbcb501a0fb06081f30dbdccc5970f74df90532cb5aeadd17e036df16ddf9c999fd2f370bfb2114", 0x9d) 2.682723068s ago: executing program 0 (id=3067): socket(0x11, 0x3, 0x9) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x22b80, 0x0) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)={@padding, 0xbb}) mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x3c, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x4, "790eaac26500020000000000002c004303000000030001ffff000e000000000500"}, 0x4, 0x966, 0x3, @inferred, @reserved="ed2e90cfe82d30a9aa8864ce2499d0bdbd47b1cba6d17b649a101edefdc527dc7e50b8cc8e517e397f7485391abffc0e3645f859d6c6b384d73b9c710e7ed5b4f99625fc3e501265c339f6944fc1fed41bca29f2215626ad616b7ab3cffdb4dc4f287aabf1d89be68d0aa27ce5ffb1ab5cfba7034592de1fca9aa95416844df6", "6cc1292e63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b60600121b078fa1c1bf86a19794e5311121c760cb9611c78e6947a998070c00"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/usb/usbmon/17u\x00', 0x60f00, 0x0) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) msync$auto(0x200000, 0x2000000005, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/mtu\x00', 0x2062, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mq_open$auto(&(0x7f0000000080)='/sys/devices/virtual/net/lapb5/mtu\x00', 0x1, 0x8, &(0x7f0000000100)={0x9, 0xc2b, 0x8, 0x9}) 2.518270314s ago: executing program 4 (id=3068): mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/92, 0x5c) write$auto(0x3, 0x0, 0x1) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x3}) inotify_init1$auto(0x3000000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x11, 0x3, 0x9) write$auto(r0, &(0x7f00000000c0)='/dev/fb0\x00', 0x5) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r4, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000005f6bba441810", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) sysfs$auto(0x2, 0x3c, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@inferred, 0x1000, 0x202000b, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x963, 0x3, @inferred, @integer64={0x400000009, 0x1007, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3372a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) adjtimex$auto(0x0) 2.341113792s ago: executing program 0 (id=3069): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) execve$auto(0x0, &(0x7f0000000440)=0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) setsockopt$auto(r1, 0x0, 0x13, 0x0, 0x8009) ioctl$auto_TCSBRK2(r0, 0x5409, 0x0) bpf$auto(0x0, 0x0, 0x6f4) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mprotect$auto(0x0, 0x2, 0x1000002) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x20040080) ioctl$auto(r0, 0x4b4c, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x4d, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) 2.19563647s ago: executing program 2 (id=3070): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0xa0000000) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, 0x0, 0x1c) getpid() gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r3, 0x80285442, 0x0) sendmmsg$auto(r2, 0x0, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x4) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) 1.867515526s ago: executing program 0 (id=3071): write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000340)=@bpf_attr_11={0xfff, 0x0, 0x2, 0x7, 0x3, 0x100, 0xfffffff3, r0}, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb3/operstate\x00', 0x80000, 0x0) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x2, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x6, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) write$auto(0xffffffffffffffff, 0x0, 0x80000000) read$auto(r1, 0x0, 0x9) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)={0x1, 0x7, 0x17, 0x8, 0x1, 0x64, 0x10, 0x3, 0x3}) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x2008000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x8000, 0x400004, 0xdf, 0x16, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x3) getpgrp(0xffffffffffffffff) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket(0xa, 0x3, 0x101) 997.04234ms ago: executing program 4 (id=3072): setresuid$auto(0x8, 0x8, 0x0) setuid$auto(0x0) r0 = epoll_create1$auto(0x9) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) select$auto(0x100, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x61, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xb, 0xfffffffffffffffe]}, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) mmap$auto(0x0, 0x40006, 0xdf, 0x200089b72, 0x7, 0x28000) ustat$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(0x3, 0x0, 0x81) socket(0x1e, 0x4, 0x0) r1 = socket(0x10, 0x4, 0xfffffffd) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000440)=0xe7d6, 0x2000005) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0x5) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xffffffbf) ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000000)=0x10000) fstat$auto(r0, &(0x7f0000000040)={0x3, 0x400000, 0x0, 0x8, 0xee00, 0xee01, 0x0, 0x5, 0x3, 0x3, 0x7, 0x3, 0x3, 0x1ff, 0x4, 0x8, 0x51b}) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x5b, &(0x7f0000000180)={@siginfo_0_0={0xddeb, 0x3, 0x4, @_sigpoll={0xa9, r1}}}, 0x4) close_range$auto(r0, r0, 0xd3) 775.314017ms ago: executing program 4 (id=3073): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) madvise$auto(0xffffff8d, 0x2003f2, 0x15) 628.070504ms ago: executing program 4 (id=3074): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x40000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffff97) 469.552352ms ago: executing program 4 (id=3075): r0 = socket(0x11, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400006, 0xdc, 0xfff, r0, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) recvmmsg$auto(r1, 0x0, 0x10a, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x8000000004020008, 0xdf, 0x18, 0x401, 0x18000) mmap$auto(0x0, 0x4020009, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001005}, 0x1, 0x0, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}}) io_uring_register$auto(0x2, 0x80020, &(0x7f0000000600)="f1f4fba8f8c10999206b18dbdc4b7d8cbf75efa98200000000000000c0dd1d49", 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000340), r3) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="00c6f200", @ANYRES8=r1, @ANYRESHEX=0x0], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x9) syz_genetlink_get_family_id$auto_nlbl_cipsov4(0x0, 0xffffffffffffffff) r4 = prctl$auto(0xfb, 0x1, 0x4, 0x5, 0x10002) r5 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0x7, 0x4cbd59) write$auto_proc_coredump_filter_operations_base(r4, &(0x7f0000000180)="8907447b3cf49ae1052ea9628639b1138996742452020d420f842ef08fa0bcc8a7961e20fcdc9a025b09ce4d68a0ba089acde051a75cbb7fc1d0733d114b1e011c4b3d0dbc4b43e35909c31bc1e76a52242d7ca2937f85015647c4ac4117edf2a96d19c8f39d3ff5409b12902aaf4f663ff35565941fbcb501a0fb06081f30dbdccc5970f74df90532cb5aeadd17e036df16ddf9c999fd2f370bfb2114", 0x9d) 342.149964ms ago: executing program 0 (id=3076): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x4000000) sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000c00040000009014038008007e00", @ANYRES32, @ANYBLOB="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"], 0x35fc}, 0x1, 0x0, 0x0, 0x40000}, 0x40) madvise$auto(0x0, 0x8000000000000001, 0x15) shmctl$auto_SHM_LOCK(0x101, 0xb, &(0x7f0000000240)={{0x2, 0x0, 0xee00, 0xf08d, 0x9, 0x7, 0x5}, 0x9, 0xe, 0x9, 0x5, @raw=0x800, @raw=0x3, 0x8, 0x0, &(0x7f0000000080)="ed1254c8098730bcd13056f1c9811178e62b4b86975d4b3726fec44b704affd8734fee3302539fe0e44e6f16a9261f8ee77d27cdf295fec35fdde3caa96b84bb3ef153608092e285e17308c7a7ddfe473387ef6d96c400241a62669f10f18274196b81f82e2cf4ea7fbba080d166d58a58869e373254f90077d39668da08757631a4197084e64497a4e600b766d989150860b5a664d1520c74c0481605f8fa917c4cc32707449e0324065fb95fa956e5461f22fdc0e93521913f30a6cf18110b771b744c2a1a720fe420df811290cfc37cc673017cb75b875e7d33229db64a441fb503df0ca26b76ce77", &(0x7f0000000180)="da2e8264a0c9618b36fd12eecbf444b7dba630250fef6c127cb22e15850d03ab48b0214083adeff018a38d5e7bb5df391958b9398934fb311c52579ecf71f73d344fbe087ad718acfa48aae4edb1d20806876591ccfeb78d30671d3bf85941fc62712613468c2c94965735ad7db294921d4fb75f06161f44b4ce26fd8c861cd387016cdc1e66bb993192d4b2282f849a78075a407fd4e9fe4ff6062ac798e8227a25"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/pppol2tp\x00', 0x2f05c1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0xa, 0x1, 0x84) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyue\x00', 0x103f81, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x1, 0x7ff) ptrace$auto(0xc, r6, 0x9, 0xfffffffffffff6de) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc_occ_max\x00', 0x40080, 0x0) r7 = setfsuid$auto(0x0) shmctl$auto_IPC_INFO(0x1ff, 0x3, &(0x7f0000000340)={{0x3, r7, 0xffffffffffffffff, 0x4, 0xff, 0x0, 0x2}, 0x21, 0x200, 0xf20e, 0x100000001, @inferred=0xffffffffffffffff, @raw=0x7fffffff, 0x65, 0x0, &(0x7f00000000c0)="8eea54a4d3d10c0812889e2b4032c4f7c793b5570c7a847db3ae373b93c8d097b2a69025553244701d133377d24b844d67fcc80250292f2dd8c9f22beb016c083d8488083144e997bc58ad9fabbea04b1dfcc757c1c1ac94bb42cdf231b0373c4e122a7f2eb782ea52c4c4f7dc85da8610d2", &(0x7f0000000240)="309a0de0bbfc2ddbe2fd925c1bfc402bd05932f7b632f339b4d0bac6b67189b5f154fb924a56c14eef7b30ce9821e1768e1e851b748b6587e0968f74d2ea5d2e4af8aaeae5cdb44ae86e704930c1af090e9dadc27817ea72abecad4858343a34b4f6b132f6a873c5f584bdb3adc2de1c27dbe14d8021ef84669c4ab89fb207798104f5b84b4143c972af6aa752400b0b54b7e162bca802e922b2ce18b4be7528931167b1c0b3988b93465da589928302dbf5c8e0b4042a5602bcda4d518a1282380364"}) 232.294386ms ago: executing program 1 (id=3077): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0x5) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xba24, 0x15, 0xffffffffffffffff, 0xb) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') quotactl_fd$auto(r0, 0x1, 0x0, &(0x7f00000002c0)="bfb065b735ecbd091b20fd15d78667a21972923b7d23dadd446788cdf9277b2d9e10571f01ac581d3070a241") open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 85.678523ms ago: executing program 4 (id=3078): connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = setfsuid$auto(0xffffffffffffffff) getpriority$auto_PRIO_USER(0x2, r2) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000a40)={0x5a8, r1, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2b8, 0x3, 0x0, 0x1, [@nested={0x167, 0xe5, 0x0, 0x1, [@generic="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", @generic="dd6543f9a7a618fba08afa571b412feea4c8907fd85ac254a2e3ea36506e8455b47ec5dc", @nested={0x4, 0x103}, @nested={0x4, 0xcf}, @nested={0x4, 0xa}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="cf9be6d8a046cd63b459ea8535740e712090c50f4d89cf8a3b968b4c2e559ed135dd43a336a8807590ff1b9c23ed8b"]}, @nested={0x149, 0x15, 0x0, 0x1, [@generic="0e8ab0b82ddf85db19cbb7a9e08f623abb9b05ced6e1938a8a6611b781aa7a28fdb67400525a112cbc0603193fcf3045e8874b0805818b8f49ead62c6cdee9d2dbe3c77a633ae8bf87f2434b6f9c666dcd4ae51549618913f20f267645b80c0978098b06ce5c5cb556ee44e7bb81604bb8476c4ba545b09e3618576cad3ae17b192523d6716bf7", @typed={0x8, 0x158, 0x0, 0x0, @pid}, @typed={0x4, 0x4f}, @typed={0x8, 0x135, 0x0, 0x0, @pid}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x130}, @generic="105c582aa7bc44bdbf9db7c3339c9a0c17a68c8030ba443325d3aa4f7133a2b586eff12daae4e431b5fa97fc6a162d8f9e73fb51fa7c8a53512e792b4f38322b6dc036c7173b332d599862ac57416013f318beb8d5", @generic="220524a220de7260174b7a03d4eaa81ec1eb6fd21b1020986d2c77ffc1a8c23239a726e3092c57feb2abc5ff0de97a3a4181be07f87e7c7a76024dc87ddf296b66", @nested={0x4, 0x33}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1d8, 0x3, 0x0, 0x1, [@generic="e2984c4e72f91a700e43ebfb8d06d2429a9b809ccdf9a9dafa5af706fbcecdb156dd26efe7ad830b8063487c500d46f13a531add58ced49f7d469f1e4a1f628ff492d3981aa16af51c154da94abb5b3edcfbbbed99918a6cdd17188fe9d030acf6dfd9d0c6f4cb1b58a7ee9a00d02788e10b7da5ca24725058a21e7b28a49f765cd0fc48189bd0560c09ace8575e94b98e7c37d6803544a312cf241f5d40f29da1befef4c3642bfd4457f98378562c0e83277cb89070d1767d4496f48f1d397c", @generic="c1060bf5089c865e1b9f5e6e93b30cfbdf77a36b18b707b7e08a4adb26b432e421102042b31981484ce3e05208453b23e723a0da4b873fe91b11d94f68dcb44796bc9c17c82e64ede298f5514eabb9c5b92d5bccf553d5be4f3576c55a34dee6f03933677724df6f406784e2c0c07c536ca8f4b7fb140b6a17d8adc29de07e3ad55fb8198ce7e9914564fabd99a74cfe80d3fb1d831b40ebbf14426da093ed581418414dce299cb4d0531c6ccbb90e", @generic="f6ae104f7e7b98ea7204ca3d68fa6fd3750857820d9db57793bacc05fb43f89a13175baa5e382613a696c7e4fc3d6e9d977077d16b6886cbb58253b195d7bcac991af8d74eebf68834d3b205a36265fc9a", @nested={0xc, 0x38, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @u32=0x4}]}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0xeb, 0x1, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=r2}, @generic="3eea01a710f60afae1d047687d48eb40cbe907bd01017f279d4e1c8df23f8a308a11a69f9606a84baf5b44ae7ed850d19672fd963bbccc0d1e457e6dedb35c8967375200793f0bbabb", @generic="3b12132b74e26ad8d0e63d155fc84bf6a5b6849eb048275921ded7790ab6b91cb480fa7527b3e411bf45c5c37ec617d4480fb5ed5e14922f5c7fb7acf844b5926f686fc856fb4191758bff64404ecac08466893489d7e53948c3f323b08320b604c9f79c73403f17687b8625ade4edf97c6e62a3065ff506b29a42c923be746c2fc17758158a7674bd2addfee47b"]}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x20000800}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x36c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_PHY_CAPS={0x33d, 0x18, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @ipv4=@loopback}, @generic="a0028235a4913bc584b7a1b443cfb761bd25f644dfe9da6fca5d59a214b875269cdd97e92c11e3951ed0ece09c39030a81792b1ad14733770b9669ebb9fc3d7fab56a368dc858d06848492138602e04eec43372a16be13807d2c223b9a89f733ec9b1970823ce9919dac1f43920beaae644aff2f9fc94e793bbb917c33d67465dea624945c3248b17f8e0880a6b7a2a12fdd65b41e22e6b3b6ba3271c2d825a1b46f5944051f509cb8da627bd2869fe46e7675", @nested={0x68, 0x13c, 0x0, 0x1, [@typed={0xc, 0x8a, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xdf}, @nested={0x4, 0x8e}, @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0xef}, @nested={0x4, 0xdb}, @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x1ff}]}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1c1, 0x18, 0x0, 0x1, [@generic="aa9b1d6d2a1432b9d0b123ec96185d044cd6bd66cb2e44b514f6320044c53778b8fe5820b359cbeaeb9bd7c28df28562855172f54c00573c933e2d1b37da6b511d69b9073308e57d218e61ae921c8fb4cbff8381b645bb1f7f89d3f868e89a8c4425944b66add1bfbe517f6316997c8e2eff7a76d981056a33812435d460beebcc6509ad69fa6997401a330d94ee7c2600d4fbd88e31332d08dbc6d3e0f192a37d66ad1b372b8316f026b564af1b32c77b80b8f53436cec44368fdde", @nested={0x4, 0x131}, @typed={0x8, 0x55, 0x0, 0x0, @fd=r3}, @generic="1700b0b29b8a8590aa5366c02b4ee38422c6ffac7a68bf3fe9bd4ff01861573f56062e0bff35bfac0e208f96a5a6a7b79ff81c6771bf2dd0c2fe66d9b670716567bc4d7a1b29421b9c4fa59d0f126d9946b9baecd3", @nested={0x4, 0xfc}, @typed={0x7c, 0x79, 0x0, 0x0, @binary="62d2fc2ae718745917a7c0d2968dc10f6901b3a1e8b1736b7cf703299a40cac6384ca2c46e82601c86285d961788503e6e6bde94126f0147e1d82d2e1a3f27fb4025c5fe580c49c59c91f0f966dfb2abe926499bd9c43790ab0365891afb75e5eae83a4d88ab05924613d7abb23b88c83cf152a288ea4fff"}, @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x2b, 0x0, 0x0, @pid}, @nested={0x4, 0x101}]}, @generic="17c6ba0dbe5ade593d6f5ba4574fbdd49dd5d557c15aebf9d8c6c6e943b7d8089e5daf1b89f8d3858e1206f4ec550476d568b0101414a6f4386a353f3fe1408d252d544d68ca9322c5c6"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xc0}]}, 0x36c}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) 0s ago: executing program 2 (id=3079): mmap$auto(0x5, 0xffffffffffffffff, 0x8, 0x14, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0xfffffffe) r0 = socket(0x10, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x2000000010, 0x2ab, 0x101, 0x5, 0x0, 0x0, 0x0, 0x200000fa9b, 0xfffffffffffffff9, 0x7ffffffffffffffb, 0x4, 0x3, 0x8000, 0x5f3, 0x7, 0x4, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100253d7000fddbdf2501000000040007800c000200060000eb000000000c0004000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) landlock_create_ruleset$auto(&(0x7f0000000140)={0x2f399d4, 0x10000000ffff, 0x6}, 0x18, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/clear_refs\x00', 0x0, 0x0) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) clone$auto(0x2, 0xd, 0x0, 0x0, 0x5) syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r4) mmap$auto(0x0, 0x8, 0x100, 0x12, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) kernel console output (not intermixed with test programs): veth1_vlan: entered promiscuous mode [ 683.910525][T17029] veth0_macvtap: entered promiscuous mode [ 683.954076][T17029] veth1_macvtap: entered promiscuous mode [ 684.164901][T17029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.250915][T17029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.282967][T17299] random: crng reseeded on system resumption [ 684.317437][ T8885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.354757][ T8885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.548952][ T8885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.604403][ T8885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.897149][ T8899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.937798][ T8899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.019261][T15672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.051992][T15672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.349764][T17318] can0: slcan on pty238. [ 685.893387][T17317] can0 (unregistered): slcan off pty238. [ 685.937928][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.949519][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.426399][ T7683] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 686.627854][T17353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.647177][T17353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.656888][T17353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.676445][T17353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.689257][T17353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.004116][T15674] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.016613][T17353] Bluetooth: hci1: command 0x2016 tx timeout [ 688.289549][T17384] random: crng reseeded on system resumption [ 688.500793][ T6803] Bluetooth: hci0: command 0x2016 tx timeout [ 688.733452][T16632] Bluetooth: hci2: command tx timeout [ 688.774842][T15674] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.256572][T15674] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.551368][T15674] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.741331][T15674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.191890][T17421] random: crng reseeded on system resumption [ 690.572843][T16632] Bluetooth: hci0: command 0x2016 tx timeout [ 690.618132][T15674] bond0: left allmulticast mode [ 690.658810][T15674] bond_slave_0: left allmulticast mode [ 690.699506][T15674] bond_slave_1: left allmulticast mode [ 690.747307][T15674] bond0: left promiscuous mode [ 690.777779][T15674] bond_slave_0: left promiscuous mode [ 690.813673][ T6803] Bluetooth: hci2: command tx timeout [ 690.824273][T15674] bond_slave_1: left promiscuous mode [ 690.872768][T15674] bridge0: port 3(bond0) entered disabled state [ 690.934329][T15674] bridge_slave_1: left allmulticast mode [ 690.969298][T15674] bridge_slave_1: left promiscuous mode [ 690.998685][T15674] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.065328][T15674] bridge_slave_0: left allmulticast mode [ 691.101000][T15674] bridge_slave_0: left promiscuous mode [ 691.136914][T15674] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.847904][T15674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.867373][T17459] FAULT_INJECTION: forcing a failure. [ 691.867373][T17459] name failslab, interval 1, probability 0, space 0, times 0 [ 691.902178][T15674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.920406][T17459] CPU: 0 UID: 0 PID: 17459 Comm: syz.1.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.920440][T17459] Tainted: [L]=SOFTLOCKUP [ 691.920448][T17459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 691.920458][T17459] Call Trace: [ 691.920465][T17459] [ 691.920473][T17459] dump_stack_lvl+0x100/0x190 [ 691.920514][T17459] should_fail_ex.cold+0x5/0xa [ 691.920540][T17459] should_failslab+0xc2/0x120 [ 691.920567][T17459] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 691.920600][T17459] ? zswap_store+0xc6d/0x2e70 [ 691.920631][T17459] zswap_store+0xc6d/0x2e70 [ 691.920662][T17459] ? rmap_walk_anon+0x561/0x870 [ 691.920690][T17459] ? __pfx_zswap_store+0x10/0x10 [ 691.920724][T17459] ? find_held_lock+0x2b/0x80 [ 691.920749][T17459] ? folio_free_swap+0x60a/0x9f0 [ 691.920770][T17459] ? folio_free_swap+0x60a/0x9f0 [ 691.920796][T17459] ? folio_free_swap+0x3f/0x9f0 [ 691.920822][T17459] swap_writeout+0x47e/0x14f0 [ 691.920856][T17459] shrink_folio_list+0x51c5/0x60c0 [ 691.920894][T17459] ? __pfx_shrink_folio_list+0x10/0x10 [ 691.920926][T17459] ? __lock_acquire+0x4a5/0x2630 [ 691.920964][T17459] ? lock_acquire+0x1b1/0x370 [ 691.920993][T17459] ? find_held_lock+0x2b/0x80 [ 691.921032][T17459] ? __lock_acquire+0x4a5/0x2630 [ 691.921060][T17459] ? __css_rstat_updated+0x1ce/0x5a0 [ 691.921092][T17459] ? __pfx___css_rstat_updated+0x10/0x10 [ 691.921124][T17459] reclaim_folio_list+0xdc/0x5e0 [ 691.921156][T17459] ? __pfx_reclaim_folio_list+0x10/0x10 [ 691.921184][T17459] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 691.921226][T17459] ? lru_gen_update_size+0x431/0xe20 [ 691.921261][T17459] ? lru_gen_del_folio+0x382/0x5f0 [ 691.921290][T17459] reclaim_pages+0x428/0x5e0 [ 691.921321][T17459] ? __pfx_reclaim_pages+0x10/0x10 [ 691.921349][T17459] ? madvise_cold_or_pageout_pte_range+0x2177/0x2620 [ 691.921378][T17459] ? folio_isolate_lru+0xd6/0xe90 [ 691.921410][T17459] madvise_cold_or_pageout_pte_range+0x14c9/0x2620 [ 691.921447][T17459] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 691.921475][T17459] ? debug_object_assert_init+0x1c4/0x300 [ 691.921506][T17459] ? do_raw_spin_lock+0x128/0x260 [ 691.921528][T17459] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 691.921549][T17459] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 691.921577][T17459] walk_pgd_range+0xc1a/0x1dd0 [ 691.921611][T17459] ? __pfx_walk_pgd_range+0x10/0x10 [ 691.921630][T17459] ? rcu_is_watching+0x12/0xc0 [ 691.921652][T17459] ? trace_sched_exit_tp+0x11c/0x160 [ 691.921683][T17459] __walk_page_range+0x171/0x850 [ 691.921719][T17459] walk_page_range_vma_unsafe+0x209/0x8f0 [ 691.921743][T17459] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 691.921768][T17459] ? find_held_lock+0x2b/0x80 [ 691.921796][T17459] ? mlock_drain_local+0x254/0x4e0 [ 691.921813][T17459] ? mlock_drain_local+0x254/0x4e0 [ 691.921835][T17459] walk_page_range_vma+0x63/0x90 [ 691.921858][T17459] madvise_pageout+0x259/0x540 [ 691.921883][T17459] ? __pfx_madvise_pageout+0x10/0x10 [ 691.921907][T17459] ? rcu_is_watching+0x12/0xc0 [ 691.921939][T17459] ? find_held_lock+0x2b/0x80 [ 691.921961][T17459] ? mt_find+0x687/0x8e0 [ 691.921996][T17459] madvise_vma_behavior+0x452/0x2240 [ 691.922022][T17459] ? mt_find+0x45e/0x8e0 [ 691.922050][T17459] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 691.922076][T17459] ? __pfx_mt_find+0x10/0x10 [ 691.922109][T17459] ? find_vma_prev+0xd8/0x150 [ 691.922130][T17459] ? futex_unqueue+0x133/0x2c0 [ 691.922154][T17459] ? find_vma+0xbf/0x140 [ 691.922174][T17459] ? __pfx_find_vma+0x10/0x10 [ 691.922193][T17459] ? __futex_wait+0x256/0x300 [ 691.922221][T17459] madvise_walk_vmas+0x2fe/0xa90 [ 691.922251][T17459] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 691.922283][T17459] madvise_do_behavior+0x1ea/0x510 [ 691.922310][T17459] ? __pfx_madvise_do_behavior+0x10/0x10 [ 691.922336][T17459] ? down_read+0x13b/0x450 [ 691.922364][T17459] do_madvise+0x195/0x240 [ 691.922390][T17459] ? __pfx_do_madvise+0x10/0x10 [ 691.922414][T17459] ? do_futex+0x192/0x350 [ 691.922447][T17459] ? ksys_write+0x1ac/0x250 [ 691.922474][T17459] __x64_sys_madvise+0xa9/0x110 [ 691.922499][T17459] ? lockdep_hardirqs_on+0x78/0x100 [ 691.922530][T17459] do_syscall_64+0x115/0x840 [ 691.922560][T17459] ? clear_bhb_loop+0x40/0x90 [ 691.922584][T17459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.922604][T17459] RIP: 0033:0x7f7c8699ce59 [ 691.922620][T17459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.922639][T17459] RSP: 002b:00007f7c87901028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 691.922658][T17459] RAX: ffffffffffffffda RBX: 00007f7c86c15fa0 RCX: 00007f7c8699ce59 [ 691.922670][T17459] RDX: 0000000000000015 RSI: ff7fffffffff0001 RDI: 0000000000000000 [ 691.922682][T17459] RBP: 00007f7c86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.922693][T17459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.922704][T17459] R13: 00007f7c86c16038 R14: 00007f7c86c15fa0 R15: 00007ffdc4647ff8 [ 691.922739][T17459] [ 692.417447][T17468] vivid-008: ================= START STATUS ================= [ 692.425408][T17468] vivid-008: ================== END STATUS ================== [ 693.047163][T15674] bond0 (unregistering): Released all slaves [ 693.064984][ T6803] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 693.090197][T16632] Bluetooth: hci2: command tx timeout [ 693.505584][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 693.855077][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.880893][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.911308][T17352] bridge_slave_0: entered allmulticast mode [ 693.938944][T17352] bridge_slave_0: entered promiscuous mode [ 694.150169][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.179629][T17478] NFSD: Failed to start, no listeners configured. [ 694.188089][T17352] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.212305][T17352] bridge_slave_1: entered allmulticast mode [ 694.243905][T17352] bridge_slave_1: entered promiscuous mode [ 694.632824][T17352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.937806][T17352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.133768][ T6803] Bluetooth: hci1: command 0x2016 tx timeout [ 695.139835][ T6803] Bluetooth: hci2: command tx timeout [ 695.317815][T17352] team0: Port device team_slave_0 added [ 695.367737][T17352] team0: Port device team_slave_1 added [ 695.600569][T17352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.632160][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.719991][T17352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.760810][T17352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.795063][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.853931][T17352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.897473][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 696.107115][T17352] hsr_slave_0: entered promiscuous mode [ 696.136515][T17352] hsr_slave_1: entered promiscuous mode [ 696.166109][T17352] debugfs: 'hsr0' already exists in 'hsr' [ 696.202683][T17352] Cannot create hsr debugfs directory [ 696.950264][T17531] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 697.214376][T17353] Bluetooth: hci1: command 0x2016 tx timeout [ 697.590168][T15674] hsr_slave_0: left promiscuous mode [ 697.616226][T15674] hsr_slave_1: left promiscuous mode [ 697.640241][T15674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.676869][T15674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.718677][T15674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.749972][T15674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.792276][T15674] veth1_macvtap: left promiscuous mode [ 697.809721][T15674] veth0_macvtap: left promiscuous mode [ 697.829523][T15674] veth1_vlan: left promiscuous mode [ 697.848324][T15674] veth0_vlan: left promiscuous mode [ 697.998739][T17549] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 698.395023][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 698.501629][T15674] team0 (unregistering): Port device team_slave_1 removed [ 698.522861][T17555] FAULT_INJECTION: forcing a failure. [ 698.522861][T17555] name failslab, interval 1, probability 0, space 0, times 0 [ 698.551301][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.1.2506 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.551333][T17555] Tainted: [L]=SOFTLOCKUP [ 698.551341][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.551352][T17555] Call Trace: [ 698.551359][T17555] [ 698.551367][T17555] dump_stack_lvl+0x100/0x190 [ 698.551404][T17555] should_fail_ex.cold+0x5/0xa [ 698.551428][T17555] should_failslab+0xc2/0x120 [ 698.551451][T17555] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 698.551482][T17555] ? __d_alloc+0x34/0xa40 [ 698.551511][T17555] __d_alloc+0x34/0xa40 [ 698.551538][T17555] d_alloc+0x4a/0x1e0 [ 698.551567][T17555] lookup_one_qstr_excl+0x171/0x250 [ 698.551599][T17555] start_dirop+0x59/0xb0 [ 698.551620][T17555] simple_start_creating+0xf9/0x110 [ 698.551643][T17555] ? __pfx_simple_start_creating+0x10/0x10 [ 698.551666][T17555] ? mntput+0x70/0xa0 [ 698.551685][T17555] ? simple_pin_fs+0xa3/0x190 [ 698.551706][T17555] debugfs_start_creating.part.0+0x82/0x170 [ 698.551735][T17555] __debugfs_create_file+0xb3/0x4f0 [ 698.551758][T17555] debugfs_create_file_full+0x41/0x60 [ 698.551779][T17555] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 698.551804][T17555] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 698.551822][T17555] ? ida_alloc_range+0x70d/0x830 [ 698.551868][T17555] ? lockdep_init_map_type+0x5c/0x250 [ 698.551902][T17555] preinit_net.part.0+0x252/0x920 [ 698.551928][T17555] copy_net_ns+0x339/0x7c0 [ 698.551952][T17555] create_new_namespaces+0x3ea/0xac0 [ 698.551982][T17555] unshare_nsproxy_namespaces+0xf2/0x220 [ 698.552008][T17555] ksys_unshare+0x438/0xab0 [ 698.552036][T17555] ? __pfx_ksys_unshare+0x10/0x10 [ 698.552061][T17555] ? xfd_validate_state+0x129/0x190 [ 698.552080][T17555] ? ksys_write+0x1ac/0x250 [ 698.552107][T17555] __x64_sys_unshare+0x31/0x40 [ 698.552134][T17555] do_syscall_64+0x115/0x840 [ 698.552159][T17555] ? clear_bhb_loop+0x40/0x90 [ 698.552182][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.552201][T17555] RIP: 0033:0x7f7c8699ce59 [ 698.552217][T17555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.552235][T17555] RSP: 002b:00007f7c878e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 698.552253][T17555] RAX: ffffffffffffffda RBX: 00007f7c86c16090 RCX: 00007f7c8699ce59 [ 698.552265][T17555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 698.552276][T17555] RBP: 00007f7c86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 698.552287][T17555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.552298][T17555] R13: 00007f7c86c16128 R14: 00007f7c86c16090 R15: 00007ffdc4647ff8 [ 698.552322][T17555] [ 699.459600][T15674] team0 (unregistering): Port device team_slave_0 removed [ 699.642213][T15674] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 700.795132][T17568] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 700.945039][T17352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 700.994658][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 701.030153][T17352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 701.089387][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.131799][T17352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 701.190275][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.221781][T17576] random: crng reseeded on system resumption [ 701.231373][T17352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 701.286320][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 702.459783][T17352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.558655][T17352] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.618200][T15675] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.625384][T15675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.723700][T15675] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.730891][T15675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.982198][T17647] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 704.982198][T17647] The task syz.3.2513 (17647) triggered the difference, watch for misbehavior. [ 705.304735][T17352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.329271][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 706.551502][T17352] veth0_vlan: entered promiscuous mode [ 706.621241][T17352] veth1_vlan: entered promiscuous mode [ 706.910747][T17696] random: crng reseeded on system resumption [ 707.010765][T17352] veth0_macvtap: entered promiscuous mode [ 707.073242][T17352] veth1_macvtap: entered promiscuous mode [ 707.167607][T17702] FAULT_INJECTION: forcing a failure. [ 707.167607][T17702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.184302][T17352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.238012][T17352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.255806][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.0.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.255838][T17702] Tainted: [L]=SOFTLOCKUP [ 707.255845][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 707.255857][T17702] Call Trace: [ 707.255863][T17702] [ 707.255872][T17702] dump_stack_lvl+0x100/0x190 [ 707.255908][T17702] should_fail_ex.cold+0x5/0xa [ 707.255928][T17702] ? prepare_alloc_pages+0x16d/0x5f0 [ 707.255955][T17702] should_fail_alloc_page+0xeb/0x140 [ 707.255979][T17702] prepare_alloc_pages+0x1f0/0x5f0 [ 707.256002][T17702] ? __kernel_text_address+0xd/0x30 [ 707.256023][T17702] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 707.256061][T17702] ? stack_trace_save+0x8e/0xc0 [ 707.256086][T17702] ? __pfx_stack_trace_save+0x10/0x10 [ 707.256111][T17702] ? stack_depot_save_flags+0x27/0x9d0 [ 707.256196][T17702] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 707.256242][T17702] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 707.256270][T17702] ? policy_nodemask+0xed/0x4f0 [ 707.256294][T17702] alloc_pages_mpol+0x1fb/0x540 [ 707.256322][T17702] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 707.256345][T17702] ? __memcg_slab_post_alloc_hook+0x734/0xff0 [ 707.256375][T17702] alloc_pages_noprof+0x1a/0x160 [ 707.256400][T17702] pgd_alloc+0x4d/0x630 [ 707.256423][T17702] ? mutex_init_lockdep+0xf1/0x120 [ 707.256444][T17702] mm_init+0x6da/0x10d0 [ 707.256468][T17702] copy_process+0x6c5a/0x7ed0 [ 707.256491][T17702] ? __futex_wait+0x256/0x300 [ 707.256525][T17702] ? __pfx_copy_process+0x10/0x10 [ 707.256553][T17702] ? futex_hash+0x141/0x370 [ 707.256586][T17702] kernel_clone+0x176/0x9e0 [ 707.256609][T17702] ? __pfx_futex_wait+0x10/0x10 [ 707.256637][T17702] ? kernel_wait4+0x1d6/0x280 [ 707.256667][T17702] ? __pfx_kernel_clone+0x10/0x10 [ 707.256704][T17702] __do_sys_clone+0xd9/0x120 [ 707.256729][T17702] ? __pfx___do_sys_clone+0x10/0x10 [ 707.256768][T17702] ? rcu_is_watching+0x12/0xc0 [ 707.256793][T17702] do_syscall_64+0x115/0x840 [ 707.256819][T17702] ? clear_bhb_loop+0x40/0x90 [ 707.256842][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.256861][T17702] RIP: 0033:0x7f886fb9ce59 [ 707.256877][T17702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.256894][T17702] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 707.256914][T17702] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 707.256925][T17702] RDX: 0000200000000380 RSI: fffffffffffffc4d RDI: 0000000000000002 [ 707.256936][T17702] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 707.256947][T17702] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 707.256958][T17702] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 707.256982][T17702] [ 707.974730][T15675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.992312][T15675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.232041][T16632] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 708.256128][T15675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.286330][T15675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.089779][T17744] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 709.264008][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 710.254052][T17353] Bluetooth: hci4: command 0x2016 tx timeout [ 710.423820][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 710.805351][T17765] FAULT_INJECTION: forcing a failure. [ 710.805351][T17765] name failslab, interval 1, probability 0, space 0, times 0 [ 710.906022][T17765] CPU: 0 UID: 0 PID: 17765 Comm: syz.1.2536 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.906055][T17765] Tainted: [L]=SOFTLOCKUP [ 710.906062][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.906074][T17765] Call Trace: [ 710.906081][T17765] [ 710.906088][T17765] dump_stack_lvl+0x100/0x190 [ 710.906123][T17765] should_fail_ex.cold+0x5/0xa [ 710.906147][T17765] should_failslab+0xc2/0x120 [ 710.906170][T17765] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 710.906199][T17765] ? skb_clone+0x190/0x400 [ 710.906223][T17765] skb_clone+0x190/0x400 [ 710.906242][T17765] netlink_deliver_tap+0xaed/0xcc0 [ 710.906273][T17765] netlink_unicast+0x6a5/0x850 [ 710.906301][T17765] ? __pfx_netlink_unicast+0x10/0x10 [ 710.906325][T17765] ? genl_rcv_msg+0x4be/0x800 [ 710.906358][T17765] netlink_ack+0x655/0xb80 [ 710.906389][T17765] netlink_rcv_skb+0x333/0x420 [ 710.906413][T17765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 710.906442][T17765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 710.906476][T17765] ? netlink_deliver_tap+0x1ae/0xcc0 [ 710.906506][T17765] genl_rcv+0x28/0x40 [ 710.906533][T17765] netlink_unicast+0x585/0x850 [ 710.906561][T17765] ? __pfx_netlink_unicast+0x10/0x10 [ 710.906591][T17765] netlink_sendmsg+0x8b0/0xda0 [ 710.906620][T17765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.906647][T17765] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 710.906677][T17765] __sys_sendto+0x468/0x4b0 [ 710.906705][T17765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.906739][T17765] ? __pfx___sys_sendto+0x10/0x10 [ 710.906777][T17765] ? fd_install+0x223/0x580 [ 710.906809][T17765] ? __pfx___sys_socket+0x10/0x10 [ 710.906841][T17765] __x64_sys_sendto+0xe0/0x1c0 [ 710.906870][T17765] ? do_syscall_64+0x90/0x840 [ 710.906896][T17765] ? lockdep_hardirqs_on+0x78/0x100 [ 710.906923][T17765] do_syscall_64+0x115/0x840 [ 710.906948][T17765] ? clear_bhb_loop+0x40/0x90 [ 710.906970][T17765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.906989][T17765] RIP: 0033:0x7f7c8695d68e [ 710.907005][T17765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 710.907022][T17765] RSP: 002b:00007f7c878dee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 710.907041][T17765] RAX: ffffffffffffffda RBX: 00007f7c878e06c0 RCX: 00007f7c8695d68e [ 710.907053][T17765] RDX: 0000000000000024 RSI: 00007f7c878df000 RDI: 0000000000000007 [ 710.907064][T17765] RBP: 0000000000000000 R08: 00007f7c878def04 R09: 000000000000000c [ 710.907076][T17765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 710.907086][T17765] R13: 00007f7c878def58 R14: 00007f7c878df000 R15: 0000000000000000 [ 710.907110][T17765] [ 712.334545][T17353] Bluetooth: hci4: command 0x2016 tx timeout [ 712.609672][T16632] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 713.753714][T17784] Process accounting resumed [ 713.982624][T17818] FAULT_INJECTION: forcing a failure. [ 713.982624][T17818] name failslab, interval 1, probability 0, space 0, times 0 [ 714.049067][T17818] CPU: 0 UID: 0 PID: 17818 Comm: syz.0.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.049098][T17818] Tainted: [L]=SOFTLOCKUP [ 714.049106][T17818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.049117][T17818] Call Trace: [ 714.049125][T17818] [ 714.049133][T17818] dump_stack_lvl+0x100/0x190 [ 714.049168][T17818] should_fail_ex.cold+0x5/0xa [ 714.049192][T17818] should_failslab+0xc2/0x120 [ 714.049216][T17818] __kvmalloc_node_noprof+0xfa/0xa00 [ 714.049234][T17818] ? io_uring_setup.cold+0x171/0x1c6e [ 714.049263][T17818] ? lockdep_init_map_type+0x5c/0x250 [ 714.049296][T17818] io_uring_setup.cold+0x171/0x1c6e [ 714.049338][T17818] ? __pfx_io_uring_setup+0x10/0x10 [ 714.049459][T17818] ? do_futex+0x192/0x350 [ 714.049480][T17818] ? __pfx_do_futex+0x10/0x10 [ 714.049508][T17818] ? xfd_validate_state+0x129/0x190 [ 714.049533][T17818] __x64_sys_io_uring_setup+0xc2/0x170 [ 714.049565][T17818] do_syscall_64+0x115/0x840 [ 714.049592][T17818] ? clear_bhb_loop+0x40/0x90 [ 714.049614][T17818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.049633][T17818] RIP: 0033:0x7f886fb9ce59 [ 714.049649][T17818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.049667][T17818] RSP: 002b:00007f88709f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 714.049685][T17818] RAX: ffffffffffffffda RBX: 00007f886fe15fa0 RCX: 00007f886fb9ce59 [ 714.049697][T17818] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 714.049709][T17818] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 714.049720][T17818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.049731][T17818] R13: 00007f886fe16038 R14: 00007f886fe15fa0 R15: 00007ffda1b01278 [ 714.049754][T17818] [ 714.653960][T17353] Bluetooth: hci0: command 0x2016 tx timeout [ 715.164372][T17847] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[14956] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[17847] [ 715.429437][T17856] random: crng reseeded on system resumption [ 715.574301][ T30] audit: type=1326 audit(1780162230.335:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17858 comm="syz.2.2555" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a1439ce59 code=0x0 [ 715.905117][T17844] bond0: Unable to set down delay as MII monitoring is disabled [ 716.060157][T17878] random: crng reseeded on system resumption [ 716.732831][T16632] Bluetooth: hci0: command 0x2016 tx timeout [ 717.921746][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 718.502751][T17930] random: crng reseeded on system resumption [ 719.198545][T17353] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 719.520740][T17917] Process accounting resumed [ 719.895493][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 720.760078][T17963] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 721.213446][T16632] Bluetooth: hci0: command 0x2016 tx timeout [ 721.963031][T17989] binder: 17988:17989 ioctl c0306201 200000000380 returned -14 [ 722.630493][T18008] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2586'. [ 722.672219][T18008] tc_dump_action: action bad kind [ 723.292626][T17353] Bluetooth: hci0: command 0x2016 tx timeout [ 724.135856][T18033] FAULT_INJECTION: forcing a failure. [ 724.135856][T18033] name failslab, interval 1, probability 0, space 0, times 0 [ 724.214759][T18033] CPU: 0 UID: 0 PID: 18033 Comm: syz.3.2592 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.214792][T18033] Tainted: [L]=SOFTLOCKUP [ 724.214799][T18033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.214810][T18033] Call Trace: [ 724.214817][T18033] [ 724.214825][T18033] dump_stack_lvl+0x100/0x190 [ 724.214862][T18033] should_fail_ex.cold+0x5/0xa [ 724.214886][T18033] ? vhost_dev_set_owner+0x190/0xa30 [ 724.214980][T18033] should_failslab+0xc2/0x120 [ 724.215005][T18033] __kmalloc_noprof+0xe0/0x850 [ 724.215040][T18033] vhost_dev_set_owner+0x190/0xa30 [ 724.215067][T18033] vhost_net_ioctl+0xfa3/0x1910 [ 724.215102][T18033] ? do_vfs_ioctl+0x226/0x13e0 [ 724.215122][T18033] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 724.215141][T18033] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 724.215166][T18033] ? find_held_lock+0x2b/0x80 [ 724.215188][T18033] ? __fget_files+0x215/0x3d0 [ 724.215208][T18033] ? hook_file_ioctl_common+0x149/0x410 [ 724.215237][T18033] ? __fget_files+0x21f/0x3d0 [ 724.215261][T18033] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 724.215282][T18033] __x64_sys_ioctl+0x18e/0x210 [ 724.215302][T18033] do_syscall_64+0x115/0x840 [ 724.215328][T18033] ? clear_bhb_loop+0x40/0x90 [ 724.215350][T18033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.215369][T18033] RIP: 0033:0x7f551379ce59 [ 724.215386][T18033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.215404][T18033] RSP: 002b:00007f5514615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.215423][T18033] RAX: ffffffffffffffda RBX: 00007f5513a16090 RCX: 00007f551379ce59 [ 724.215435][T18033] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 724.215446][T18033] RBP: 00007f5513832d6f R08: 0000000000000000 R09: 0000000000000000 [ 724.215458][T18033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.215469][T18033] R13: 00007f5513a16128 R14: 00007f5513a16090 R15: 00007ffd8b23ccc8 [ 724.215492][T18033] [ 725.204270][T18048] random: crng reseeded on system resumption [ 725.934889][T18069] random: crng reseeded on system resumption [ 727.766671][T18098] netlink: 'syz.2.2607': attribute type 22 has an invalid length. [ 727.819971][T18098] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2607'. [ 728.979527][T17353] Bluetooth: hci4: command 0x2016 tx timeout [ 731.854921][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 732.405519][T18181] random: crng reseeded on system resumption [ 733.141410][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 734.000838][T18211] MTRR 1 not used [ 735.557542][T18242] ecryptfs_miscdev_write: Invalid packet size [423] [ 736.002772][T18254] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 736.768521][T18269] FAULT_INJECTION: forcing a failure. [ 736.768521][T18269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.838827][T18269] CPU: 0 UID: 0 PID: 18269 Comm: syz.2.2648 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.838859][T18269] Tainted: [L]=SOFTLOCKUP [ 736.838867][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.838878][T18269] Call Trace: [ 736.838886][T18269] [ 736.838894][T18269] dump_stack_lvl+0x100/0x190 [ 736.838931][T18269] should_fail_ex.cold+0x5/0xa [ 736.838952][T18269] ? prepare_alloc_pages+0x16d/0x5f0 [ 736.838981][T18269] should_fail_alloc_page+0xeb/0x140 [ 736.839005][T18269] prepare_alloc_pages+0x1f0/0x5f0 [ 736.839032][T18269] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 736.839064][T18269] ? rcu_is_watching+0x12/0xc0 [ 736.839085][T18269] ? trace_mm_page_alloc+0x163/0x1d0 [ 736.839110][T18269] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 736.839140][T18269] ? vhost_dev_set_owner+0x190/0xa30 [ 736.839160][T18269] ? stack_trace_save+0x8e/0xc0 [ 736.839183][T18269] ? __pfx_stack_trace_save+0x10/0x10 [ 736.839209][T18269] ? stack_depot_save_flags+0x27/0x9d0 [ 736.839238][T18269] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.839271][T18269] ? vhost_dev_set_owner+0x190/0xa30 [ 736.839289][T18269] ? kasan_save_stack+0x3f/0x50 [ 736.839305][T18269] ? kasan_save_stack+0x30/0x50 [ 736.839322][T18269] ? kasan_save_track+0x14/0x30 [ 736.839340][T18269] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.839369][T18269] ? vhost_net_ioctl+0xfa3/0x1910 [ 736.839387][T18269] ? __x64_sys_ioctl+0x18e/0x210 [ 736.839407][T18269] ? __lock_acquire+0x4a5/0x2630 [ 736.839440][T18269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.839468][T18269] ? policy_nodemask+0xed/0x4f0 [ 736.839492][T18269] alloc_pages_mpol+0x1fb/0x540 [ 736.839515][T18269] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 736.839550][T18269] ? vhost_dev_set_owner+0x3b2/0xa30 [ 736.839568][T18269] ___kmalloc_large_node+0xe5/0x120 [ 736.839593][T18269] __kmalloc_large_node_noprof+0x1c/0x70 [ 736.839619][T18269] __kmalloc_noprof+0x5be/0x850 [ 736.839653][T18269] vhost_dev_set_owner+0x3b2/0xa30 [ 736.839679][T18269] vhost_net_ioctl+0xfa3/0x1910 [ 736.839698][T18269] ? do_vfs_ioctl+0x226/0x13e0 [ 736.839717][T18269] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 736.839735][T18269] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 736.839760][T18269] ? find_held_lock+0x2b/0x80 [ 736.839783][T18269] ? __fget_files+0x215/0x3d0 [ 736.839804][T18269] ? hook_file_ioctl_common+0x149/0x410 [ 736.839832][T18269] ? __fget_files+0x21f/0x3d0 [ 736.839856][T18269] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 736.839877][T18269] __x64_sys_ioctl+0x18e/0x210 [ 736.839898][T18269] do_syscall_64+0x115/0x840 [ 736.839924][T18269] ? clear_bhb_loop+0x40/0x90 [ 736.839946][T18269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.839965][T18269] RIP: 0033:0x7f8a1439ce59 [ 736.839982][T18269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.840000][T18269] RSP: 002b:00007f8a15228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.840019][T18269] RAX: ffffffffffffffda RBX: 00007f8a14616090 RCX: 00007f8a1439ce59 [ 736.840031][T18269] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 736.840043][T18269] RBP: 00007f8a14432d6f R08: 0000000000000000 R09: 0000000000000000 [ 736.840053][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.840064][T18269] R13: 00007f8a14616128 R14: 00007f8a14616090 R15: 00007fff65f79518 [ 736.840087][T18269] [ 737.860242][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 739.616043][T18298] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 739.715652][T18298] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2654'. [ 739.878842][T18298] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 739.923713][T18298] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2654'. [ 740.021162][T18298] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 740.046942][T18298] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2654'. [ 740.097682][T18298] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 740.128042][T18298] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2654'. [ 740.184736][T18298] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 740.201177][T18298] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2654'. [ 740.318515][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 740.371270][T18298] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 740.416978][T18298] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2654'. [ 740.677246][T18323] random: crng reseeded on system resumption [ 741.441181][T18341] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 741.610501][T18347] netlink: 'syz.3.2663': attribute type 22 has an invalid length. [ 741.675894][T18347] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2663'. [ 742.431034][T18364] netlink: 'syz.1.2666': attribute type 22 has an invalid length. [ 742.457895][T18364] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2666'. [ 742.815094][T16632] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 743.430202][T18376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2670'. [ 743.479745][T18376] bridge_slave_1: left allmulticast mode [ 743.511857][T18376] bridge_slave_1: left promiscuous mode [ 743.561537][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.616078][T18376] bridge_slave_0: left allmulticast mode [ 743.631933][T18376] bridge_slave_0: left promiscuous mode [ 743.650588][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.898257][T17353] Bluetooth: hci2: command 0x2016 tx timeout [ 745.125953][T17353] Bluetooth: hci4: Malformed LE Event: 0x0b [ 745.476179][T17353] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 745.484198][T17353] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 745.493834][T17353] CPU: 0 UID: 0 PID: 17353 Comm: kworker/u11:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.493865][T17353] Tainted: [L]=SOFTLOCKUP [ 745.493872][T17353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.493884][T17353] Workqueue: hci2 hci_rx_work [ 745.493976][T17353] Call Trace: [ 745.493984][T17353] [ 745.493992][T17353] dump_stack_lvl+0x100/0x190 [ 745.494026][T17353] sysfs_warn_dup.cold+0x1c/0x28 [ 745.494062][T17353] sysfs_create_dir_ns+0x24b/0x2b0 [ 745.494083][T17353] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 745.494103][T17353] ? find_held_lock+0x2b/0x80 [ 745.494125][T17353] ? kobject_add_internal+0x25f/0x930 [ 745.494144][T17353] ? kobject_add_internal+0x25f/0x930 [ 745.494164][T17353] ? do_raw_spin_unlock+0x145/0x1e0 [ 745.494186][T17353] kobject_add_internal+0x2c8/0x930 [ 745.494209][T17353] kobject_add+0x16a/0x1e0 [ 745.494227][T17353] ? __pfx_kobject_add+0x10/0x10 [ 745.494244][T17353] ? class_to_subsys+0x10f/0x150 [ 745.494313][T17353] ? kobject_put+0xb9/0x640 [ 745.494340][T17353] ? _raw_spin_unlock+0x28/0x50 [ 745.494369][T17353] device_add+0x294/0x1950 [ 745.494404][T17353] ? __pfx_dev_set_name+0x10/0x10 [ 745.494447][T17353] ? __pfx_device_add+0x10/0x10 [ 745.494468][T17353] ? mgmt_send_event_skb+0x2fb/0x460 [ 745.494517][T17353] hci_conn_add_sysfs+0x1a3/0x260 [ 745.494580][T17353] le_conn_complete_evt+0x11eb/0x1f60 [ 745.494636][T17353] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 745.494667][T17353] ? __pfx_bt_warn+0x10/0x10 [ 745.494706][T17353] hci_le_conn_complete_evt+0x23c/0x3a0 [ 745.494732][T17353] ? skb_pull_data+0x15f/0x1e0 [ 745.494761][T17353] hci_le_meta_evt+0x34a/0x5f0 [ 745.494801][T17353] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 745.494829][T17353] hci_event_packet+0x51c/0xcd0 [ 745.494853][T17353] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 745.494879][T17353] ? __pfx_hci_event_packet+0x10/0x10 [ 745.494906][T17353] ? kcov_remote_start+0x374/0x660 [ 745.494931][T17353] ? lockdep_hardirqs_on+0x78/0x100 [ 745.494962][T17353] hci_rx_work+0x451/0xfc0 [ 745.494990][T17353] process_one_work+0xa0e/0x1980 [ 745.495018][T17353] ? __pfx_process_one_work+0x10/0x10 [ 745.495043][T17353] ? __pfx_hci_rx_work+0x10/0x10 [ 745.495068][T17353] worker_thread+0x5ef/0xe50 [ 745.495091][T17353] ? __pfx_worker_thread+0x10/0x10 [ 745.495109][T17353] ? kthread+0x13a/0x450 [ 745.495135][T17353] ? __pfx_worker_thread+0x10/0x10 [ 745.495155][T17353] kthread+0x370/0x450 [ 745.495181][T17353] ? __pfx_kthread+0x10/0x10 [ 745.495209][T17353] ret_from_fork+0x72b/0xd50 [ 745.495230][T17353] ? __pfx_ret_from_fork+0x10/0x10 [ 745.495251][T17353] ? __switch_to+0x800/0x1100 [ 745.495275][T17353] ? __switch_to_asm+0x39/0x70 [ 745.495298][T17353] ? __pfx_kthread+0x10/0x10 [ 745.495327][T17353] ret_from_fork_asm+0x1a/0x30 [ 745.495362][T17353] [ 745.496982][T17353] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 745.808635][T17353] Bluetooth: hci2: failed to register connection device [ 745.969013][T17353] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 746.011973][T18418] netlink: 'syz.0.2677': attribute type 22 has an invalid length. [ 746.100784][T18418] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2677'. [ 746.593527][T18428] random: crng reseeded on system resumption [ 746.966370][T18435] random: crng reseeded on system resumption [ 746.978949][T17353] Bluetooth: hci2: command 0x2016 tx timeout [ 747.340324][ T30] audit: type=1804 audit(1780162262.095:70): pid=18443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2683" name="/newroot/117/file0" dev="tmpfs" ino=633 res=1 errno=0 [ 747.386642][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.393800][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.451919][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'. [ 747.594154][T18447] FAULT_INJECTION: forcing a failure. [ 747.594154][T18447] name failslab, interval 1, probability 0, space 0, times 0 [ 747.671544][T18447] CPU: 0 UID: 0 PID: 18447 Comm: syz.0.2684 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.671575][T18447] Tainted: [L]=SOFTLOCKUP [ 747.671583][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 747.671593][T18447] Call Trace: [ 747.671601][T18447] [ 747.671609][T18447] dump_stack_lvl+0x100/0x190 [ 747.671645][T18447] should_fail_ex.cold+0x5/0xa [ 747.671669][T18447] should_failslab+0xc2/0x120 [ 747.671692][T18447] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 747.671722][T18447] ? __d_alloc+0x34/0xa40 [ 747.671752][T18447] __d_alloc+0x34/0xa40 [ 747.671778][T18447] d_alloc+0x4a/0x1e0 [ 747.671804][T18447] lookup_one_qstr_excl+0x171/0x250 [ 747.671841][T18447] start_dirop+0x59/0xb0 [ 747.671862][T18447] simple_start_creating+0xf9/0x110 [ 747.671885][T18447] ? __pfx_simple_start_creating+0x10/0x10 [ 747.671911][T18447] ? mntput+0x70/0xa0 [ 747.671931][T18447] ? simple_pin_fs+0xa3/0x190 [ 747.671951][T18447] debugfs_start_creating.part.0+0x82/0x170 [ 747.671973][T18447] __debugfs_create_file+0xb3/0x4f0 [ 747.671996][T18447] debugfs_create_file_full+0x41/0x60 [ 747.672019][T18447] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 747.672038][T18447] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 747.672055][T18447] ? ida_alloc_range+0x70d/0x830 [ 747.672101][T18447] ? lockdep_init_map_type+0x5c/0x250 [ 747.672135][T18447] preinit_net.part.0+0x252/0x920 [ 747.672165][T18447] copy_net_ns+0x339/0x7c0 [ 747.672189][T18447] create_new_namespaces+0x3ea/0xac0 [ 747.672218][T18447] unshare_nsproxy_namespaces+0xf2/0x220 [ 747.672244][T18447] ksys_unshare+0x438/0xab0 [ 747.672272][T18447] ? __pfx_ksys_unshare+0x10/0x10 [ 747.672298][T18447] ? xfd_validate_state+0x129/0x190 [ 747.672316][T18447] ? ksys_write+0x1ac/0x250 [ 747.672344][T18447] __x64_sys_unshare+0x31/0x40 [ 747.672369][T18447] do_syscall_64+0x115/0x840 [ 747.672394][T18447] ? clear_bhb_loop+0x40/0x90 [ 747.672416][T18447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.672435][T18447] RIP: 0033:0x7f886fb9ce59 [ 747.672451][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.672468][T18447] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 747.672487][T18447] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 747.672506][T18447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 747.672517][T18447] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 747.672528][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.672539][T18447] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 747.672563][T18447] [ 748.249555][ T6803] Bluetooth: hci4: command 0x2016 tx timeout [ 748.255957][T17353] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 749.015897][T18467] netlink: 'syz.2.2689': attribute type 22 has an invalid length. [ 749.047454][T18467] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2689'. [ 749.057378][ T7683] Bluetooth: hci2: command 0x2016 tx timeout [ 749.654235][T18461] Process accounting paused [ 750.090168][T18495] ima: policy update failed [ 750.100893][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 750.117885][ T30] audit: type=1802 audit(1780162264.875:71): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2695" res=0 errno=0 [ 750.337821][ T7683] Bluetooth: hci4: command 0x2016 tx timeout [ 750.840869][T18512] FAULT_INJECTION: forcing a failure. [ 750.840869][T18512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 750.889383][T18512] CPU: 0 UID: 0 PID: 18512 Comm: syz.0.2699 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.889418][T18512] Tainted: [L]=SOFTLOCKUP [ 750.889426][T18512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.889437][T18512] Call Trace: [ 750.889444][T18512] [ 750.889452][T18512] dump_stack_lvl+0x100/0x190 [ 750.889496][T18512] should_fail_ex.cold+0x5/0xa [ 750.889516][T18512] ? prepare_alloc_pages+0x16d/0x5f0 [ 750.889542][T18512] should_fail_alloc_page+0xeb/0x140 [ 750.889566][T18512] prepare_alloc_pages+0x1f0/0x5f0 [ 750.889594][T18512] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 750.889625][T18512] ? vhost_dev_set_owner+0x190/0xa30 [ 750.889645][T18512] ? stack_trace_save+0x8e/0xc0 [ 750.889669][T18512] ? __pfx_stack_trace_save+0x10/0x10 [ 750.889694][T18512] ? stack_depot_save_flags+0x27/0x9d0 [ 750.889727][T18512] ? vhost_dev_set_owner+0x190/0xa30 [ 750.889745][T18512] ? kasan_save_stack+0x3f/0x50 [ 750.889762][T18512] ? kasan_save_stack+0x30/0x50 [ 750.889779][T18512] ? kasan_save_track+0x14/0x30 [ 750.889797][T18512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 750.889827][T18512] ? vhost_net_ioctl+0xfa3/0x1910 [ 750.889845][T18512] ? __x64_sys_ioctl+0x18e/0x210 [ 750.889863][T18512] ? do_syscall_64+0x115/0x840 [ 750.889903][T18512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 750.889930][T18512] ? policy_nodemask+0xed/0x4f0 [ 750.889953][T18512] alloc_pages_mpol+0x1fb/0x540 [ 750.889976][T18512] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 750.889999][T18512] ? rcu_is_watching+0x12/0xc0 [ 750.890024][T18512] ___kmalloc_large_node+0xe5/0x120 [ 750.890050][T18512] __kmalloc_large_noprof+0x1c/0x70 [ 750.890075][T18512] vhost_dev_set_owner+0x2b6/0xa30 [ 750.890101][T18512] vhost_net_ioctl+0xfa3/0x1910 [ 750.890119][T18512] ? do_vfs_ioctl+0x226/0x13e0 [ 750.890138][T18512] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 750.890156][T18512] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 750.890181][T18512] ? find_held_lock+0x2b/0x80 [ 750.890203][T18512] ? __fget_files+0x215/0x3d0 [ 750.890223][T18512] ? hook_file_ioctl_common+0x149/0x410 [ 750.890251][T18512] ? __fget_files+0x21f/0x3d0 [ 750.890275][T18512] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 750.890297][T18512] __x64_sys_ioctl+0x18e/0x210 [ 750.890317][T18512] do_syscall_64+0x115/0x840 [ 750.890341][T18512] ? clear_bhb_loop+0x40/0x90 [ 750.890364][T18512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.890383][T18512] RIP: 0033:0x7f886fb9ce59 [ 750.890399][T18512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.890418][T18512] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.890436][T18512] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 750.890448][T18512] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 750.890459][T18512] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 750.890477][T18512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.890489][T18512] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 750.890512][T18512] [ 751.275959][ T6803] Bluetooth: hci2: command 0x2016 tx timeout [ 751.551386][T18518] FAULT_INJECTION: forcing a failure. [ 751.551386][T18518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.580722][T18518] CPU: 0 UID: 0 PID: 18518 Comm: syz.2.2701 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.580754][T18518] Tainted: [L]=SOFTLOCKUP [ 751.580761][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 751.580773][T18518] Call Trace: [ 751.580779][T18518] [ 751.580787][T18518] dump_stack_lvl+0x100/0x190 [ 751.580824][T18518] should_fail_ex.cold+0x5/0xa [ 751.580849][T18518] _copy_to_user+0x32/0xd0 [ 751.580879][T18518] simple_read_from_buffer+0xcb/0x170 [ 751.580903][T18518] proc_fail_nth_read+0x1af/0x230 [ 751.580934][T18518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.580966][T18518] ? rw_verify_area+0xce/0x6d0 [ 751.580984][T18518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.581014][T18518] vfs_read+0x1e4/0xb30 [ 751.581038][T18518] ? __pfx_vfs_read+0x10/0x10 [ 751.581058][T18518] ? __fget_files+0x215/0x3d0 [ 751.581085][T18518] ? __fget_files+0x21f/0x3d0 [ 751.581112][T18518] ksys_read+0x12a/0x250 [ 751.581133][T18518] ? __pfx_ksys_read+0x10/0x10 [ 751.581156][T18518] ? rcu_is_watching+0x12/0xc0 [ 751.581181][T18518] do_syscall_64+0x115/0x840 [ 751.581208][T18518] ? clear_bhb_loop+0x40/0x90 [ 751.581230][T18518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.581250][T18518] RIP: 0033:0x7f8a1435d68e [ 751.581266][T18518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 751.581284][T18518] RSP: 002b:00007f8a15227fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.581302][T18518] RAX: ffffffffffffffda RBX: 00007f8a152286c0 RCX: 00007f8a1435d68e [ 751.581314][T18518] RDX: 000000000000000f RSI: 00007f8a152280a0 RDI: 0000000000000004 [ 751.581326][T18518] RBP: 00007f8a15228090 R08: 0000000000000000 R09: 0000000000000000 [ 751.581337][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.581347][T18518] R13: 00007f8a14616128 R14: 00007f8a14616090 R15: 00007fff65f79518 [ 751.581370][T18518] [ 751.994840][T18523] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 752.147231][T18525] random: crng reseeded on system resumption [ 753.453570][ T6803] Bluetooth: hci2: command 0x2016 tx timeout [ 754.453829][T18570] FAULT_INJECTION: forcing a failure. [ 754.453829][T18570] name fail_futex, interval 1, probability 0, space 0, times 0 [ 754.483958][T18570] CPU: 0 UID: 0 PID: 18570 Comm: syz.0.2712 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.483990][T18570] Tainted: [L]=SOFTLOCKUP [ 754.483997][T18570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.484009][T18570] Call Trace: [ 754.484016][T18570] [ 754.484023][T18570] dump_stack_lvl+0x100/0x190 [ 754.484073][T18570] should_fail_ex.cold+0x5/0xa [ 754.484098][T18570] get_futex_key+0x295/0x1510 [ 754.484131][T18570] ? __pfx_get_futex_key+0x10/0x10 [ 754.484161][T18570] ? lock_acquire+0x1b1/0x370 [ 754.484197][T18570] futex_wake+0xea/0x530 [ 754.484222][T18570] ? __pfx_futex_wake+0x10/0x10 [ 754.484245][T18570] ? exit_mm_release+0x19/0x30 [ 754.484278][T18570] do_futex+0x32b/0x350 [ 754.484297][T18570] ? __pfx_do_futex+0x10/0x10 [ 754.484315][T18570] ? __might_fault+0xc5/0x140 [ 754.484350][T18570] mm_release+0x24a/0x2f0 [ 754.484373][T18570] do_exit+0x707/0x2af0 [ 754.484403][T18570] ? __pfx_do_exit+0x10/0x10 [ 754.484431][T18570] ? do_raw_spin_lock+0x128/0x260 [ 754.484451][T18570] ? find_held_lock+0x2b/0x80 [ 754.484473][T18570] ? get_signal+0x7e5/0x2210 [ 754.484498][T18570] do_group_exit+0xd5/0x2a0 [ 754.484529][T18570] get_signal+0x20ff/0x2210 [ 754.484559][T18570] ? __pfx_get_signal+0x10/0x10 [ 754.484584][T18570] ? do_futex+0x192/0x350 [ 754.484604][T18570] arch_do_signal_or_restart+0x91/0x7a0 [ 754.484634][T18570] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 754.484669][T18570] ? rcu_is_watching+0x12/0xc0 [ 754.484693][T18570] exit_to_user_mode_loop+0x98/0x670 [ 754.484723][T18570] ? rcu_is_watching+0x12/0xc0 [ 754.484746][T18570] do_syscall_64+0x652/0x840 [ 754.484772][T18570] ? clear_bhb_loop+0x40/0x90 [ 754.484795][T18570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.484815][T18570] RIP: 0033:0x7f886fb9ce59 [ 754.484831][T18570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.484849][T18570] RSP: 002b:00007f88709cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 754.484868][T18570] RAX: fffffffffffffe00 RBX: 00007f886fe16098 RCX: 00007f886fb9ce59 [ 754.484880][T18570] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f886fe16098 [ 754.484892][T18570] RBP: 00007f886fe16090 R08: 0000000000000000 R09: 0000000000000000 [ 754.484903][T18570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.484915][T18570] R13: 00007f886fe16128 R14: 00007ffda1b01190 R15: 00007ffda1b01278 [ 754.484938][T18570] [ 754.790986][T18576] FAULT_INJECTION: forcing a failure. [ 754.790986][T18576] name failslab, interval 1, probability 0, space 0, times 0 [ 754.803707][T18576] CPU: 0 UID: 0 PID: 18576 Comm: syz.1.2714 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.803737][T18576] Tainted: [L]=SOFTLOCKUP [ 754.803745][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.803756][T18576] Call Trace: [ 754.803764][T18576] [ 754.803772][T18576] dump_stack_lvl+0x100/0x190 [ 754.803808][T18576] should_fail_ex.cold+0x5/0xa [ 754.803832][T18576] ? vhost_dev_set_owner+0x190/0xa30 [ 754.803852][T18576] should_failslab+0xc2/0x120 [ 754.803875][T18576] __kmalloc_noprof+0xe0/0x850 [ 754.803909][T18576] vhost_dev_set_owner+0x190/0xa30 [ 754.803936][T18576] vhost_net_ioctl+0xfa3/0x1910 [ 754.803955][T18576] ? do_vfs_ioctl+0x226/0x13e0 [ 754.803974][T18576] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 754.803992][T18576] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 754.804016][T18576] ? find_held_lock+0x2b/0x80 [ 754.804039][T18576] ? __fget_files+0x215/0x3d0 [ 754.804059][T18576] ? hook_file_ioctl_common+0x149/0x410 [ 754.804088][T18576] ? __fget_files+0x21f/0x3d0 [ 754.804114][T18576] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 754.804135][T18576] __x64_sys_ioctl+0x18e/0x210 [ 754.804155][T18576] do_syscall_64+0x115/0x840 [ 754.804180][T18576] ? clear_bhb_loop+0x40/0x90 [ 754.804203][T18576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.804222][T18576] RIP: 0033:0x7f7c8699ce59 [ 754.804239][T18576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.804256][T18576] RSP: 002b:00007f7c878e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.804275][T18576] RAX: ffffffffffffffda RBX: 00007f7c86c16090 RCX: 00007f7c8699ce59 [ 754.804286][T18576] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 754.804297][T18576] RBP: 00007f7c86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 754.804308][T18576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.804320][T18576] R13: 00007f7c86c16128 R14: 00007f7c86c16090 R15: 00007ffdc4647ff8 [ 754.804344][T18576] [ 755.413834][T18585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2715'. [ 755.534308][T16632] Bluetooth: hci2: command 0x2016 tx timeout [ 756.900097][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2724'. [ 758.949280][ T6803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.967593][ T6803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.979700][ T6803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.989814][ T6803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.005073][ T6803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.270162][T18654] netlink: 'syz.0.2735': attribute type 22 has an invalid length. [ 759.348546][T18654] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2735'. [ 759.917572][T18667] netlink: 'syz.2.2737': attribute type 22 has an invalid length. [ 759.942703][T18667] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2737'. [ 760.967198][T15675] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.052605][ T6803] Bluetooth: hci3: command tx timeout [ 761.297272][T15675] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.440163][T15675] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.586781][T15675] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.237054][T18704] netlink: 'syz.0.2743': attribute type 22 has an invalid length. [ 762.281895][T18704] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2743'. [ 762.369532][T18646] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.395494][T18646] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.459435][T18646] bridge_slave_0: entered allmulticast mode [ 762.487770][T18646] bridge_slave_0: entered promiscuous mode [ 762.538638][T15675] bridge_slave_1: left allmulticast mode [ 762.567260][T15675] bridge_slave_1: left promiscuous mode [ 762.603098][T15675] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.661490][T15675] bridge_slave_0: left allmulticast mode [ 762.689735][T15675] bridge_slave_0: left promiscuous mode [ 762.725450][T15675] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.802424][T18716] netlink: 'syz.0.2744': attribute type 22 has an invalid length. [ 762.840840][T18716] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2744'. [ 763.133470][ T6803] Bluetooth: hci3: command tx timeout [ 763.479192][T15675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.549442][T15675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.583914][T15675] bond0 (unregistering): Released all slaves [ 763.638442][T18646] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.685134][T18646] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.728480][T18646] bridge_slave_1: entered allmulticast mode [ 763.764653][T18646] bridge_slave_1: entered promiscuous mode [ 764.071944][T18646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.128081][T18646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.183904][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 764.607208][T18646] team0: Port device team_slave_0 added [ 764.729685][T18646] team0: Port device team_slave_1 added [ 764.975676][T18646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.005547][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.094196][T18646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.188952][T18646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.213217][ T6803] Bluetooth: hci3: command tx timeout [ 765.219840][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.338937][T18646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.641423][T15675] hsr_slave_0: left promiscuous mode [ 765.673919][T15675] hsr_slave_1: left promiscuous mode [ 765.704485][T15675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.747478][T15675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.799972][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 765.825920][T15675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.874591][T15675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.947701][T15675] veth1_macvtap: left promiscuous mode [ 765.977810][T15675] veth1_vlan: left promiscuous mode [ 766.000420][T15675] veth0_vlan: left promiscuous mode [ 766.299742][T18783] random: crng reseeded on system resumption [ 766.451311][T15675] team0 (unregistering): Port device team_slave_1 removed [ 766.506641][T15675] team0 (unregistering): Port device team_slave_0 removed [ 766.712286][T15675] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 766.774012][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 766.884538][T18646] hsr_slave_0: entered promiscuous mode [ 766.915716][T18646] hsr_slave_1: entered promiscuous mode [ 766.930388][T18646] debugfs: 'hsr0' already exists in 'hsr' [ 766.958614][T18646] Cannot create hsr debugfs directory [ 767.292972][ T6803] Bluetooth: hci3: command tx timeout [ 768.775057][T18646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 768.831802][T18646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.887275][T18646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 768.968339][T18646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.007557][T18646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 769.061480][T18646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.100119][T18646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 769.150830][T18646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.271971][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 769.868362][T18646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.033560][T18646] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.238166][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 770.248031][T18858] FAULT_INJECTION: forcing a failure. [ 770.248031][T18858] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 770.290483][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.297706][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.317796][T18858] CPU: 0 UID: 0 PID: 18858 Comm: syz.0.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.317826][T18858] Tainted: [L]=SOFTLOCKUP [ 770.317833][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.317844][T18858] Call Trace: [ 770.317851][T18858] [ 770.317859][T18858] dump_stack_lvl+0x100/0x190 [ 770.317895][T18858] should_fail_ex.cold+0x5/0xa [ 770.317915][T18858] ? prepare_alloc_pages+0x16d/0x5f0 [ 770.317946][T18858] should_fail_alloc_page+0xeb/0x140 [ 770.317970][T18858] prepare_alloc_pages+0x1f0/0x5f0 [ 770.317997][T18858] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 770.318036][T18858] ? __lock_acquire+0x4a5/0x2630 [ 770.318068][T18858] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 770.318100][T18858] ? __lock_acquire+0x4a5/0x2630 [ 770.318142][T18858] ? find_held_lock+0x2b/0x80 [ 770.318163][T18858] ? is_bpf_text_address+0x8a/0x1a0 [ 770.318189][T18858] ? is_bpf_text_address+0x8a/0x1a0 [ 770.318213][T18858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 770.318240][T18858] ? policy_nodemask+0xed/0x4f0 [ 770.318263][T18858] alloc_pages_mpol+0x1fb/0x540 [ 770.318287][T18858] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 770.318307][T18858] ? arch_stack_walk+0xa6/0xf0 [ 770.318336][T18858] folio_alloc_mpol_noprof+0x36/0x260 [ 770.318363][T18858] shmem_alloc_folio+0x135/0x160 [ 770.318390][T18858] shmem_alloc_and_add_folio+0x371/0xd40 [ 770.318427][T18858] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 770.318468][T18858] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 770.318492][T18858] shmem_get_folio_gfp+0x6ab/0x1900 [ 770.318515][T18858] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 770.318534][T18858] ? filemap_map_pages+0x9c1/0x2140 [ 770.318569][T18858] shmem_fault+0x1f9/0xa20 [ 770.318596][T18858] ? __pfx_shmem_fault+0x10/0x10 [ 770.318615][T18858] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 770.318647][T18858] ? __pfx_filemap_map_pages+0x10/0x10 [ 770.318680][T18858] ? find_held_lock+0x2b/0x80 [ 770.318705][T18858] __do_fault+0x10b/0x440 [ 770.318727][T18858] do_fault+0xa99/0x1750 [ 770.318750][T18858] ? __pmd_alloc+0x3fb/0x950 [ 770.318776][T18858] __handle_mm_fault+0x187d/0x2a00 [ 770.318808][T18858] ? mt_find+0x45e/0x8e0 [ 770.318836][T18858] ? __pfx___handle_mm_fault+0x10/0x10 [ 770.318862][T18858] ? __pfx_mt_find+0x10/0x10 [ 770.318902][T18858] ? find_vma+0xbf/0x140 [ 770.318922][T18858] ? __pfx_find_vma+0x10/0x10 [ 770.318945][T18858] handle_mm_fault+0x37b/0xa30 [ 770.318977][T18858] do_user_addr_fault+0x74c/0x12f0 [ 770.319002][T18858] ? trace_page_fault_kernel+0x7a/0x200 [ 770.319026][T18858] exc_page_fault+0x6f/0xd0 [ 770.319054][T18858] asm_exc_page_fault+0x26/0x30 [ 770.319072][T18858] RIP: 0010:__get_user_4+0x14/0x20 [ 770.319093][T18858] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 c0 95 04 00 90 90 90 90 90 90 90 90 90 90 [ 770.319110][T18858] RSP: 0018:ffffc9000328fda8 EFLAGS: 00050287 [ 770.319126][T18858] RAX: 0000000000000000 RBX: ffffc9000328ff48 RCX: ffffc9000f4bc000 [ 770.319138][T18858] RDX: 00007ffffffff000 RSI: ffffffff8257f671 RDI: ffffffff8c1c4300 [ 770.319149][T18858] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001c5 [ 770.319160][T18858] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 770.319171][T18858] R13: ffffc9000328fe08 R14: 0000000000000000 R15: 000000000000007e [ 770.319189][T18858] ? __might_fault+0x111/0x140 [ 770.319222][T18858] cap_validate_magic+0x2a/0x1d0 [ 770.319244][T18858] __do_sys_capset+0xe1/0x460 [ 770.319265][T18858] ? __pfx___do_sys_capset+0x10/0x10 [ 770.319288][T18858] ? __x64_sys_futex+0x358/0x4d0 [ 770.319311][T18858] ? ksys_write+0x1ac/0x250 [ 770.319336][T18858] ? rcu_is_watching+0x12/0xc0 [ 770.319360][T18858] do_syscall_64+0x115/0x840 [ 770.319385][T18858] ? clear_bhb_loop+0x40/0x90 [ 770.319408][T18858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.319427][T18858] RIP: 0033:0x7f886fb9ce59 [ 770.319450][T18858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.319467][T18858] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 770.319484][T18858] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 770.319496][T18858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.319507][T18858] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 770.319518][T18858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.319528][T18858] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 770.319552][T18858] [ 770.782751][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.789905][ T8885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.859335][T18646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 770.869846][T18646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.356653][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 771.875536][T18883] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 772.276264][T18646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.765596][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 773.830367][T18646] veth0_vlan: entered promiscuous mode [ 773.859383][T18927] FAULT_INJECTION: forcing a failure. [ 773.859383][T18927] name failslab, interval 1, probability 0, space 0, times 0 [ 773.906176][T18646] veth1_vlan: entered promiscuous mode [ 774.055208][T18927] CPU: 0 UID: 0 PID: 18927 Comm: syz.0.2775 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.055240][T18927] Tainted: [L]=SOFTLOCKUP [ 774.055248][T18927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.055259][T18927] Call Trace: [ 774.055266][T18927] [ 774.055273][T18927] dump_stack_lvl+0x100/0x190 [ 774.055311][T18927] should_fail_ex.cold+0x5/0xa [ 774.055335][T18927] should_failslab+0xc2/0x120 [ 774.055370][T18927] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 774.055400][T18927] ? sk_prot_alloc+0x60/0x2a0 [ 774.055428][T18927] sk_prot_alloc+0x60/0x2a0 [ 774.055454][T18927] sk_alloc+0x36/0xe80 [ 774.055472][T18927] inet6_create+0x385/0x12b0 [ 774.055502][T18927] ? inet6_create+0x7f/0x12b0 [ 774.055529][T18927] __sock_create+0x339/0x860 [ 774.055559][T18927] mptcp_subflow_create_socket+0xec/0xa30 [ 774.055649][T18927] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 774.055676][T18927] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 774.055703][T18927] __mptcp_nmpc_sk+0x17f/0x880 [ 774.055743][T18927] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 774.055767][T18927] ? __local_bh_enable_ip+0x9e/0x120 [ 774.055795][T18927] mptcp_sendmsg+0x17d9/0x2210 [ 774.055824][T18927] ? aa_sk_perm+0x309/0xaa0 [ 774.055852][T18927] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 774.055883][T18927] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 774.055909][T18927] inet6_sendmsg+0x11c/0x140 [ 774.055933][T18927] ____sys_sendmsg+0x704/0xb70 [ 774.055960][T18927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.055989][T18927] ? __pfx_futex_wake_mark+0x10/0x10 [ 774.056017][T18927] ___sys_sendmsg+0x190/0x1e0 [ 774.056044][T18927] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.056096][T18927] __sys_sendmsg+0x170/0x220 [ 774.056115][T18927] ? __pfx___sys_sendmsg+0x10/0x10 [ 774.056134][T18927] ? __x64_sys_futex+0x34f/0x4d0 [ 774.056161][T18927] ? rcu_is_watching+0x12/0xc0 [ 774.056185][T18927] do_syscall_64+0x115/0x840 [ 774.056210][T18927] ? clear_bhb_loop+0x40/0x90 [ 774.056233][T18927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.056252][T18927] RIP: 0033:0x7f886fb9ce59 [ 774.056268][T18927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.056287][T18927] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.056305][T18927] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 774.056317][T18927] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 774.056329][T18927] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 774.056347][T18927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.056358][T18927] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 774.056382][T18927] [ 774.402704][T18937] FAULT_INJECTION: forcing a failure. [ 774.402704][T18937] name failslab, interval 1, probability 0, space 0, times 0 [ 774.415536][T18937] CPU: 0 UID: 0 PID: 18937 Comm: syz.1.2777 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.415567][T18937] Tainted: [L]=SOFTLOCKUP [ 774.415574][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.415586][T18937] Call Trace: [ 774.415593][T18937] [ 774.415600][T18937] dump_stack_lvl+0x100/0x190 [ 774.415636][T18937] should_fail_ex.cold+0x5/0xa [ 774.415660][T18937] should_failslab+0xc2/0x120 [ 774.415683][T18937] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 774.415712][T18937] ? sk_prot_alloc+0x60/0x2a0 [ 774.415739][T18937] sk_prot_alloc+0x60/0x2a0 [ 774.415763][T18937] sk_alloc+0x36/0xe80 [ 774.415781][T18937] inet_create+0x3a0/0x1060 [ 774.415867][T18937] ? inet_create+0x94/0x1060 [ 774.415898][T18937] __sock_create+0x339/0x860 [ 774.415927][T18937] __sys_socket+0x14d/0x260 [ 774.415953][T18937] ? __pfx___sys_socket+0x10/0x10 [ 774.415978][T18937] ? ksys_write+0x1ac/0x250 [ 774.416005][T18937] __x64_sys_socket+0x72/0xb0 [ 774.416031][T18937] ? lockdep_hardirqs_on+0x78/0x100 [ 774.416065][T18937] do_syscall_64+0x115/0x840 [ 774.416090][T18937] ? clear_bhb_loop+0x40/0x90 [ 774.416112][T18937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.416131][T18937] RIP: 0033:0x7f7c8699ce59 [ 774.416148][T18937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.416166][T18937] RSP: 002b:00007f7c878bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 774.416184][T18937] RAX: ffffffffffffffda RBX: 00007f7c86c16180 RCX: 00007f7c8699ce59 [ 774.416196][T18937] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 774.416206][T18937] RBP: 00007f7c86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 774.416217][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.416228][T18937] R13: 00007f7c86c16218 R14: 00007f7c86c16180 R15: 00007ffdc4647ff8 [ 774.416250][T18937] [ 775.189187][T18646] veth0_macvtap: entered promiscuous mode [ 775.200145][T18646] veth1_macvtap: entered promiscuous mode [ 775.289824][T18646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.386831][T18646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.477143][T15656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.492848][T15656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.587740][T15656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.621959][T15656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.997507][ T8885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.026055][ T8885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.349973][T18965] random: crng reseeded on system resumption [ 776.432391][T15672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.462703][T15672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.607669][ T6803] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 776.664389][T18964] vivid-008: ================= START STATUS ================= [ 776.794005][T18964] vivid-008: ================== END STATUS ================== [ 777.126475][T18974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2786'. [ 777.329844][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'. [ 777.408214][T18990] FAULT_INJECTION: forcing a failure. [ 777.408214][T18990] name failslab, interval 1, probability 0, space 0, times 0 [ 777.454120][T18990] CPU: 0 UID: 0 PID: 18990 Comm: syz.4.2731 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.454159][T18990] Tainted: [L]=SOFTLOCKUP [ 777.454166][T18990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.454178][T18990] Call Trace: [ 777.454185][T18990] [ 777.454193][T18990] dump_stack_lvl+0x100/0x190 [ 777.454230][T18990] should_fail_ex.cold+0x5/0xa [ 777.454254][T18990] ? memcg_list_lru_alloc+0x4ec/0x740 [ 777.454274][T18990] should_failslab+0xc2/0x120 [ 777.454296][T18990] __kmalloc_noprof+0xe0/0x850 [ 777.454326][T18990] ? __lock_acquire+0x4a5/0x2630 [ 777.454382][T18990] memcg_list_lru_alloc+0x4ec/0x740 [ 777.454402][T18990] ? ksys_unshare+0x438/0xab0 [ 777.454428][T18990] ? __x64_sys_unshare+0x31/0x40 [ 777.454459][T18990] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 777.454490][T18990] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 777.454523][T18990] ? kasan_save_track+0x14/0x30 [ 777.454545][T18990] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 777.454575][T18990] ? __d_alloc+0x34/0xa40 [ 777.454604][T18990] __d_alloc+0x34/0xa40 [ 777.454631][T18990] d_alloc+0x4a/0x1e0 [ 777.454657][T18990] lookup_one_qstr_excl+0x171/0x250 [ 777.454688][T18990] start_dirop+0x59/0xb0 [ 777.454710][T18990] simple_start_creating+0xf9/0x110 [ 777.454732][T18990] ? __pfx_simple_start_creating+0x10/0x10 [ 777.454755][T18990] ? mntput+0x70/0xa0 [ 777.454774][T18990] ? simple_pin_fs+0xa3/0x190 [ 777.454795][T18990] debugfs_start_creating.part.0+0x82/0x170 [ 777.454816][T18990] __debugfs_create_file+0xb3/0x4f0 [ 777.454838][T18990] debugfs_create_file_full+0x41/0x60 [ 777.454860][T18990] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 777.454880][T18990] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 777.454897][T18990] ? ida_alloc_range+0x70d/0x830 [ 777.454944][T18990] ? lockdep_init_map_type+0x5c/0x250 [ 777.454978][T18990] preinit_net.part.0+0x252/0x920 [ 777.455001][T18990] copy_net_ns+0x339/0x7c0 [ 777.455025][T18990] create_new_namespaces+0x3ea/0xac0 [ 777.455054][T18990] unshare_nsproxy_namespaces+0xf2/0x220 [ 777.455079][T18990] ksys_unshare+0x438/0xab0 [ 777.455106][T18990] ? __pfx_ksys_unshare+0x10/0x10 [ 777.455131][T18990] ? xfd_validate_state+0x129/0x190 [ 777.455150][T18990] ? ksys_write+0x1ac/0x250 [ 777.455177][T18990] __x64_sys_unshare+0x31/0x40 [ 777.455203][T18990] do_syscall_64+0x115/0x840 [ 777.455229][T18990] ? clear_bhb_loop+0x40/0x90 [ 777.455252][T18990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.455271][T18990] RIP: 0033:0x7f559b99ce59 [ 777.455287][T18990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.455304][T18990] RSP: 002b:00007f559c7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 777.455323][T18990] RAX: ffffffffffffffda RBX: 00007f559bc16090 RCX: 00007f559b99ce59 [ 777.455334][T18990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 777.455345][T18990] RBP: 00007f559ba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 777.455364][T18990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.455375][T18990] R13: 00007f559bc16128 R14: 00007f559bc16090 R15: 00007ffdd3755ca8 [ 777.455398][T18990] [ 778.680651][T16632] Bluetooth: hci4: command 0x2016 tx timeout [ 780.365217][T18962] random: crng reseeded on system resumption [ 780.667145][T19032] FAULT_INJECTION: forcing a failure. [ 780.667145][T19032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 780.735707][T16632] Bluetooth: hci4: command 0x2016 tx timeout [ 780.759114][T19032] CPU: 0 UID: 0 PID: 19032 Comm: syz.0.2795 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.759147][T19032] Tainted: [L]=SOFTLOCKUP [ 780.759154][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 780.759165][T19032] Call Trace: [ 780.759172][T19032] [ 780.759180][T19032] dump_stack_lvl+0x100/0x190 [ 780.759217][T19032] should_fail_ex.cold+0x5/0xa [ 780.759237][T19032] ? prepare_alloc_pages+0x16d/0x5f0 [ 780.759264][T19032] should_fail_alloc_page+0xeb/0x140 [ 780.759287][T19032] prepare_alloc_pages+0x1f0/0x5f0 [ 780.759323][T19032] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 780.759355][T19032] ? rcu_is_watching+0x12/0xc0 [ 780.759376][T19032] ? trace_mm_page_alloc+0x163/0x1d0 [ 780.759401][T19032] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 780.759432][T19032] ? vhost_dev_set_owner+0x190/0xa30 [ 780.759452][T19032] ? stack_trace_save+0x8e/0xc0 [ 780.759476][T19032] ? __pfx_stack_trace_save+0x10/0x10 [ 780.759501][T19032] ? stack_depot_save_flags+0x27/0x9d0 [ 780.759532][T19032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 780.759564][T19032] ? vhost_dev_set_owner+0x190/0xa30 [ 780.759582][T19032] ? kasan_save_stack+0x3f/0x50 [ 780.759599][T19032] ? kasan_save_stack+0x30/0x50 [ 780.759616][T19032] ? kasan_save_track+0x14/0x30 [ 780.759634][T19032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 780.759664][T19032] ? vhost_net_ioctl+0xfa3/0x1910 [ 780.759682][T19032] ? __x64_sys_ioctl+0x18e/0x210 [ 780.759708][T19032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.759736][T19032] ? policy_nodemask+0xed/0x4f0 [ 780.759760][T19032] alloc_pages_mpol+0x1fb/0x540 [ 780.759783][T19032] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 780.759809][T19032] ? find_held_lock+0x2b/0x80 [ 780.759834][T19032] ? vhost_dev_set_owner+0x330/0xa30 [ 780.759852][T19032] ___kmalloc_large_node+0xe5/0x120 [ 780.759878][T19032] __kmalloc_large_node_noprof+0x1c/0x70 [ 780.759904][T19032] __kmalloc_noprof+0x5be/0x850 [ 780.759938][T19032] vhost_dev_set_owner+0x330/0xa30 [ 780.759964][T19032] vhost_net_ioctl+0xfa3/0x1910 [ 780.759983][T19032] ? do_vfs_ioctl+0x226/0x13e0 [ 780.760002][T19032] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 780.760020][T19032] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 780.760044][T19032] ? find_held_lock+0x2b/0x80 [ 780.760066][T19032] ? __fget_files+0x215/0x3d0 [ 780.760086][T19032] ? hook_file_ioctl_common+0x149/0x410 [ 780.760115][T19032] ? __fget_files+0x21f/0x3d0 [ 780.760139][T19032] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 780.760160][T19032] __x64_sys_ioctl+0x18e/0x210 [ 780.760180][T19032] do_syscall_64+0x115/0x840 [ 780.760206][T19032] ? clear_bhb_loop+0x40/0x90 [ 780.760229][T19032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.760248][T19032] RIP: 0033:0x7f886fb9ce59 [ 780.760265][T19032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.760283][T19032] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.760303][T19032] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 780.760322][T19032] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 780.760334][T19032] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 780.760345][T19032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.760357][T19032] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 780.760381][T19032] [ 781.383393][T18957] Process accounting resumed [ 782.369622][ T30] audit: type=1804 audit(1780162297.125:72): pid=19048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2800" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=17 res=1 errno=0 [ 782.500353][T19051] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 783.992378][T19096] random: crng reseeded on system resumption [ 786.081617][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2817'. [ 786.457865][T19154] FAULT_INJECTION: forcing a failure. [ 786.457865][T19154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 786.531291][T19154] CPU: 0 UID: 0 PID: 19154 Comm: syz.1.2819 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.531325][T19154] Tainted: [L]=SOFTLOCKUP [ 786.531333][T19154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 786.531344][T19154] Call Trace: [ 786.531358][T19154] [ 786.531366][T19154] dump_stack_lvl+0x100/0x190 [ 786.531404][T19154] should_fail_ex.cold+0x5/0xa [ 786.531425][T19154] ? prepare_alloc_pages+0x16d/0x5f0 [ 786.531450][T19154] should_fail_alloc_page+0xeb/0x140 [ 786.531475][T19154] prepare_alloc_pages+0x1f0/0x5f0 [ 786.531502][T19154] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 786.531533][T19154] ? vhost_dev_set_owner+0x190/0xa30 [ 786.531552][T19154] ? stack_trace_save+0x8e/0xc0 [ 786.531578][T19154] ? __pfx_stack_trace_save+0x10/0x10 [ 786.531603][T19154] ? stack_depot_save_flags+0x27/0x9d0 [ 786.531633][T19154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 786.531663][T19154] ? look_up_lock_class+0x55/0x120 [ 786.531691][T19154] ? vhost_dev_set_owner+0x190/0xa30 [ 786.531709][T19154] ? kasan_save_stack+0x3f/0x50 [ 786.531726][T19154] ? kasan_save_stack+0x30/0x50 [ 786.531743][T19154] ? kasan_save_track+0x14/0x30 [ 786.531762][T19154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 786.531791][T19154] ? vhost_net_ioctl+0xfa3/0x1910 [ 786.531810][T19154] ? __x64_sys_ioctl+0x18e/0x210 [ 786.531827][T19154] ? do_syscall_64+0x115/0x840 [ 786.531875][T19154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 786.531902][T19154] ? policy_nodemask+0xed/0x4f0 [ 786.531926][T19154] alloc_pages_mpol+0x1fb/0x540 [ 786.531949][T19154] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 786.531973][T19154] ? rcu_is_watching+0x12/0xc0 [ 786.531997][T19154] ___kmalloc_large_node+0xe5/0x120 [ 786.532023][T19154] __kmalloc_large_noprof+0x1c/0x70 [ 786.532048][T19154] vhost_dev_set_owner+0x2b6/0xa30 [ 786.532074][T19154] vhost_net_ioctl+0xfa3/0x1910 [ 786.532093][T19154] ? do_vfs_ioctl+0x226/0x13e0 [ 786.532111][T19154] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 786.532129][T19154] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 786.532153][T19154] ? find_held_lock+0x2b/0x80 [ 786.532175][T19154] ? __fget_files+0x215/0x3d0 [ 786.532195][T19154] ? hook_file_ioctl_common+0x149/0x410 [ 786.532224][T19154] ? __fget_files+0x21f/0x3d0 [ 786.532248][T19154] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 786.532270][T19154] __x64_sys_ioctl+0x18e/0x210 [ 786.532290][T19154] do_syscall_64+0x115/0x840 [ 786.532315][T19154] ? clear_bhb_loop+0x40/0x90 [ 786.532337][T19154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.532362][T19154] RIP: 0033:0x7f7c8699ce59 [ 786.532377][T19154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.532395][T19154] RSP: 002b:00007f7c878e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 786.532413][T19154] RAX: ffffffffffffffda RBX: 00007f7c86c16090 RCX: 00007f7c8699ce59 [ 786.532425][T19154] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 786.532436][T19154] RBP: 00007f7c86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 786.532447][T19154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.532458][T19154] R13: 00007f7c86c16128 R14: 00007f7c86c16090 R15: 00007ffdc4647ff8 [ 786.532482][T19154] [ 786.954967][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 789.552742][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'. [ 789.608262][ T6803] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 789.646594][T19227] vivid-008: ================= START STATUS ================= [ 789.717124][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 789.791476][T19227] vivid-008: ================== END STATUS ================== [ 791.465610][T19227] random: crng reseeded on system resumption [ 791.692503][T16632] Bluetooth: hci0: command 0x2016 tx timeout [ 793.773287][T16632] Bluetooth: hci0: command 0x2016 tx timeout [ 794.468883][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 795.854866][T16632] Bluetooth: hci0: command 0x2016 tx timeout [ 797.311739][T19394] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 797.530352][T19400] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2858'. [ 798.009171][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 798.591516][T19425] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 798.895972][T19430] random: crng reseeded on system resumption [ 802.760905][T19506] ubi0: attaching mtd0 [ 802.785459][T19506] ubi0: scanning is finished [ 802.810987][T19506] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 803.011874][T19506] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 803.984280][T19536] FAULT_INJECTION: forcing a failure. [ 803.984280][T19536] name failslab, interval 1, probability 0, space 0, times 0 [ 803.984316][T19536] CPU: 0 UID: 0 PID: 19536 Comm: syz.1.2883 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.984343][T19536] Tainted: [L]=SOFTLOCKUP [ 803.984351][T19536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.984361][T19536] Call Trace: [ 803.984368][T19536] [ 803.984376][T19536] dump_stack_lvl+0x100/0x190 [ 803.984411][T19536] should_fail_ex.cold+0x5/0xa [ 803.984436][T19536] should_failslab+0xc2/0x120 [ 803.984459][T19536] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 803.984489][T19536] ? __d_alloc+0x34/0xa40 [ 803.984513][T19536] ? lockdep_init_map_type+0x5c/0x250 [ 803.984545][T19536] __d_alloc+0x34/0xa40 [ 803.984572][T19536] d_alloc_pseudo+0x1c/0xc0 [ 803.984590][T19536] alloc_file_pseudo+0xcf/0x230 [ 803.984620][T19536] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 803.984648][T19536] ? alloc_fd+0x476/0x790 [ 803.984673][T19536] sock_alloc_file+0x50/0x210 [ 803.984695][T19536] __sys_socket+0x1c0/0x260 [ 803.984720][T19536] ? __pfx___sys_socket+0x10/0x10 [ 803.984745][T19536] ? ksys_write+0x1ac/0x250 [ 803.984771][T19536] __x64_sys_socket+0x72/0xb0 [ 803.984796][T19536] ? lockdep_hardirqs_on+0x78/0x100 [ 803.984822][T19536] do_syscall_64+0x115/0x840 [ 803.984847][T19536] ? clear_bhb_loop+0x40/0x90 [ 803.984869][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.984889][T19536] RIP: 0033:0x7f7c8699ce59 [ 803.984906][T19536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.984923][T19536] RSP: 002b:00007f7c878e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 803.984941][T19536] RAX: ffffffffffffffda RBX: 00007f7c86c16090 RCX: 00007f7c8699ce59 [ 803.984954][T19536] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 803.984965][T19536] RBP: 00007f7c86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 803.984975][T19536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.984986][T19536] R13: 00007f7c86c16128 R14: 00007f7c86c16090 R15: 00007ffdc4647ff8 [ 803.985009][T19536] [ 804.179271][T19533] FAULT_INJECTION: forcing a failure. [ 804.179271][T19533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.179339][T19533] CPU: 0 UID: 0 PID: 19533 Comm: syz.0.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.179367][T19533] Tainted: [L]=SOFTLOCKUP [ 804.179374][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.179385][T19533] Call Trace: [ 804.179392][T19533] [ 804.179400][T19533] dump_stack_lvl+0x100/0x190 [ 804.179437][T19533] should_fail_ex.cold+0x5/0xa [ 804.179462][T19533] _copy_from_user+0x2e/0xd0 [ 804.179490][T19533] input_event_from_user+0xb9/0x290 [ 804.179578][T19533] ? __pfx_input_event_from_user+0x10/0x10 [ 804.179604][T19533] evdev_write+0x27a/0x430 [ 804.179641][T19533] ? __pfx_evdev_write+0x10/0x10 [ 804.179660][T19533] ? bpf_lsm_file_permission+0x9/0x10 [ 804.179679][T19533] ? security_file_permission+0x76/0x210 [ 804.179706][T19533] ? rw_verify_area+0xce/0x6d0 [ 804.179727][T19533] vfs_write+0x2aa/0x1070 [ 804.179750][T19533] ? __pfx_evdev_write+0x10/0x10 [ 804.179769][T19533] ? __pfx_vfs_write+0x10/0x10 [ 804.179789][T19533] ? find_held_lock+0x2b/0x80 [ 804.179816][T19533] ? __fget_files+0x215/0x3d0 [ 804.179838][T19533] ? __fget_files+0x215/0x3d0 [ 804.179864][T19533] ? __fget_files+0x21f/0x3d0 [ 804.179892][T19533] ksys_write+0x1f8/0x250 [ 804.179913][T19533] ? __pfx_ksys_write+0x10/0x10 [ 804.179937][T19533] ? rcu_is_watching+0x12/0xc0 [ 804.179963][T19533] do_syscall_64+0x115/0x840 [ 804.179990][T19533] ? clear_bhb_loop+0x40/0x90 [ 804.180013][T19533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.180033][T19533] RIP: 0033:0x7f886fb9ce59 [ 804.180049][T19533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.180066][T19533] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.180084][T19533] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 804.180096][T19533] RDX: 000000047ffffdf2 RSI: 0000000000000000 RDI: 0000000000000003 [ 804.180108][T19533] RBP: 00007f88709cf090 R08: 0000000000000000 R09: 0000000000000000 [ 804.180119][T19533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.180130][T19533] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 804.180153][T19533] [ 804.619661][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 804.621606][T19541] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2885'. [ 805.057885][T19550] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 805.858394][T19564] random: crng reseeded on system resumption [ 807.508897][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 808.819421][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.826386][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.804632][T19661] random: crng reseeded on system resumption [ 810.572852][T19651] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 810.764032][T19651] File: /dev/nullb0 PID: 19651 Comm: syz.2.2907 [ 810.777393][T19685] IPVS: length: 131 != 8 [ 810.902818][T16632] Bluetooth: hci2: command 0x2016 tx timeout [ 811.541319][T19694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2916'. [ 811.936023][ T6803] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 812.205947][T19713] aoe: invalid device specification [ 813.665123][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 814.047058][T19735] FAULT_INJECTION: forcing a failure. [ 814.047058][T19735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.100193][T19750] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 814.117558][T19735] CPU: 0 UID: 0 PID: 19735 Comm: syz.1.2926 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.117590][T19735] Tainted: [L]=SOFTLOCKUP [ 814.117597][T19735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 814.117607][T19735] Call Trace: [ 814.117614][T19735] [ 814.117621][T19735] dump_stack_lvl+0x100/0x190 [ 814.117663][T19735] should_fail_ex.cold+0x5/0xa [ 814.117688][T19735] _copy_from_user+0x2e/0xd0 [ 814.117718][T19735] input_event_from_user+0xb9/0x290 [ 814.117740][T19735] ? __pfx_input_event_from_user+0x10/0x10 [ 814.117760][T19735] ? __pfx___might_resched+0x10/0x10 [ 814.117782][T19735] ? input_inject_event+0x1a6/0x390 [ 814.117803][T19735] evdev_write+0x27a/0x430 [ 814.117824][T19735] ? __pfx_evdev_write+0x10/0x10 [ 814.117843][T19735] ? bpf_lsm_file_permission+0x9/0x10 [ 814.117862][T19735] ? security_file_permission+0x76/0x210 [ 814.117891][T19735] ? rw_verify_area+0xce/0x6d0 [ 814.117914][T19735] vfs_write+0x2aa/0x1070 [ 814.117937][T19735] ? __pfx_evdev_write+0x10/0x10 [ 814.117957][T19735] ? __pfx_vfs_write+0x10/0x10 [ 814.117978][T19735] ? find_held_lock+0x2b/0x80 [ 814.118001][T19735] ? __fget_files+0x215/0x3d0 [ 814.118023][T19735] ? __fget_files+0x215/0x3d0 [ 814.118049][T19735] ? __fget_files+0x21f/0x3d0 [ 814.118078][T19735] ksys_write+0x1f8/0x250 [ 814.118100][T19735] ? __pfx_ksys_write+0x10/0x10 [ 814.118125][T19735] ? rcu_is_watching+0x12/0xc0 [ 814.118150][T19735] do_syscall_64+0x115/0x840 [ 814.118179][T19735] ? clear_bhb_loop+0x40/0x90 [ 814.118203][T19735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.118222][T19735] RIP: 0033:0x7f7c8699ce59 [ 814.118239][T19735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.118257][T19735] RSP: 002b:00007f7c878e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.118275][T19735] RAX: ffffffffffffffda RBX: 00007f7c86c16090 RCX: 00007f7c8699ce59 [ 814.118287][T19735] RDX: 000000047ffffdf2 RSI: 0000000000000000 RDI: 0000000000000003 [ 814.118299][T19735] RBP: 00007f7c878e0090 R08: 0000000000000000 R09: 0000000000000000 [ 814.118313][T19735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.118325][T19735] R13: 00007f7c86c16128 R14: 00007f7c86c16090 R15: 00007ffdc4647ff8 [ 814.118348][T19735] [ 814.380663][T19750] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.8.4294967295), cmd(5) [ 814.391468][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.399653][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.407827][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.416147][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.424863][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.433259][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.441396][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.449486][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.457621][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 814.465734][T19750] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 815.266331][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2933'. [ 815.470328][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 816.185934][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2937'. [ 817.055962][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 817.464804][T19813] random: crng reseeded on system resumption [ 817.471940][T19812] FAULT_INJECTION: forcing a failure. [ 817.471940][T19812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.554301][T19812] CPU: 0 UID: 0 PID: 19812 Comm: syz.4.2942 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.554335][T19812] Tainted: [L]=SOFTLOCKUP [ 817.554342][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 817.554353][T19812] Call Trace: [ 817.554360][T19812] [ 817.554367][T19812] dump_stack_lvl+0x100/0x190 [ 817.554406][T19812] should_fail_ex.cold+0x5/0xa [ 817.554430][T19812] _copy_to_user+0x32/0xd0 [ 817.554458][T19812] simple_read_from_buffer+0xcb/0x170 [ 817.554483][T19812] proc_fail_nth_read+0x1af/0x230 [ 817.554518][T19812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 817.554549][T19812] ? iov_iter_advance+0xac/0x6d0 [ 817.554636][T19812] ? rw_verify_area+0xce/0x6d0 [ 817.554656][T19812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 817.554684][T19812] vfs_readv+0x5d8/0x8d0 [ 817.554710][T19812] ? __pfx_vfs_readv+0x10/0x10 [ 817.554730][T19812] ? find_held_lock+0x2b/0x80 [ 817.554754][T19812] ? ksys_write+0x190/0x250 [ 817.554787][T19812] ? __fget_files+0x21f/0x3d0 [ 817.554815][T19812] ? do_readv+0x13e/0x340 [ 817.554833][T19812] do_readv+0x13e/0x340 [ 817.554878][T19812] ? __pfx_do_readv+0x10/0x10 [ 817.554899][T19812] ? rcu_is_watching+0x12/0xc0 [ 817.554924][T19812] do_syscall_64+0x115/0x840 [ 817.554951][T19812] ? clear_bhb_loop+0x40/0x90 [ 817.554974][T19812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.554994][T19812] RIP: 0033:0x7f559b99ce59 [ 817.555011][T19812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.555029][T19812] RSP: 002b:00007f559c7ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 817.555048][T19812] RAX: ffffffffffffffda RBX: 00007f559bc15fa0 RCX: 00007f559b99ce59 [ 817.555060][T19812] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000003 [ 817.555071][T19812] RBP: 00007f559c7ea090 R08: 0000000000000000 R09: 0000000000000000 [ 817.555082][T19812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.555093][T19812] R13: 00007f559bc16038 R14: 00007f559bc15fa0 R15: 00007ffdd3755ca8 [ 817.555117][T19812] [ 818.999851][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2949'. [ 819.508802][T19845] FAULT_INJECTION: forcing a failure. [ 819.508802][T19845] name failslab, interval 1, probability 0, space 0, times 0 [ 819.591919][T19845] CPU: 0 UID: 0 PID: 19845 Comm: syz.1.2949 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.591952][T19845] Tainted: [L]=SOFTLOCKUP [ 819.591959][T19845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 819.591970][T19845] Call Trace: [ 819.591976][T19845] [ 819.591984][T19845] dump_stack_lvl+0x100/0x190 [ 819.592023][T19845] should_fail_ex.cold+0x5/0xa [ 819.592048][T19845] should_failslab+0xc2/0x120 [ 819.592071][T19845] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 819.592104][T19845] ? zswap_store+0xc6d/0x2e70 [ 819.592134][T19845] zswap_store+0xc6d/0x2e70 [ 819.592171][T19845] ? rmap_walk_anon+0x561/0x870 [ 819.592200][T19845] ? __pfx_zswap_store+0x10/0x10 [ 819.592225][T19845] ? find_held_lock+0x2b/0x80 [ 819.592248][T19845] ? folio_free_swap+0x60a/0x9f0 [ 819.592269][T19845] ? folio_free_swap+0x60a/0x9f0 [ 819.592295][T19845] ? folio_free_swap+0x3f/0x9f0 [ 819.592321][T19845] swap_writeout+0x47e/0x14f0 [ 819.592355][T19845] shrink_folio_list+0x51c5/0x60c0 [ 819.592399][T19845] ? __pfx_shrink_folio_list+0x10/0x10 [ 819.592433][T19845] ? __lock_acquire+0x4a5/0x2630 [ 819.592463][T19845] ? debug_check_no_obj_freed+0x31f/0x630 [ 819.592502][T19845] ? __lock_acquire+0x4a5/0x2630 [ 819.592550][T19845] ? __lock_acquire+0x4a5/0x2630 [ 819.592579][T19845] ? __css_rstat_updated+0x1ce/0x5a0 [ 819.592612][T19845] ? __pfx___css_rstat_updated+0x10/0x10 [ 819.592645][T19845] reclaim_folio_list+0xdc/0x5e0 [ 819.592677][T19845] ? __pfx_reclaim_folio_list+0x10/0x10 [ 819.592705][T19845] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 819.592746][T19845] ? lru_gen_update_size+0x431/0xe20 [ 819.592779][T19845] ? lru_gen_del_folio+0x382/0x5f0 [ 819.592807][T19845] reclaim_pages+0x428/0x5e0 [ 819.592840][T19845] ? __pfx_reclaim_pages+0x10/0x10 [ 819.592869][T19845] ? find_held_lock+0x2b/0x80 [ 819.592893][T19845] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 819.592925][T19845] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 819.592961][T19845] ? __lock_acquire+0x4a5/0x2630 [ 819.592990][T19845] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 819.593017][T19845] ? debug_check_no_obj_freed+0x31f/0x630 [ 819.593052][T19845] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 819.593082][T19845] walk_pgd_range+0xc1a/0x1dd0 [ 819.593116][T19845] ? __pfx_walk_pgd_range+0x10/0x10 [ 819.593138][T19845] ? folios_put_refs+0x716/0xa90 [ 819.593165][T19845] __walk_page_range+0x171/0x850 [ 819.593187][T19845] ? find_held_lock+0x2b/0x80 [ 819.593218][T19845] walk_page_range_vma_unsafe+0x209/0x8f0 [ 819.593244][T19845] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 819.593270][T19845] ? find_held_lock+0x2b/0x80 [ 819.593293][T19845] ? mlock_drain_local+0x254/0x4e0 [ 819.593311][T19845] ? mlock_drain_local+0x254/0x4e0 [ 819.593333][T19845] walk_page_range_vma+0x63/0x90 [ 819.593356][T19845] madvise_pageout+0x259/0x540 [ 819.593381][T19845] ? __pfx_madvise_pageout+0x10/0x10 [ 819.593417][T19845] ? find_held_lock+0x2b/0x80 [ 819.593441][T19845] ? mt_find+0x687/0x8e0 [ 819.593473][T19845] madvise_vma_behavior+0x452/0x2240 [ 819.593501][T19845] ? mt_find+0x45e/0x8e0 [ 819.593529][T19845] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 819.593556][T19845] ? __pfx_mt_find+0x10/0x10 [ 819.593590][T19845] ? find_vma_prev+0xd8/0x150 [ 819.593620][T19845] ? find_vma+0xbf/0x140 [ 819.593641][T19845] ? __pfx_find_vma+0x10/0x10 [ 819.593663][T19845] ? preempt_schedule_common+0x42/0xc0 [ 819.593693][T19845] madvise_walk_vmas+0x2fe/0xa90 [ 819.593723][T19845] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 819.593756][T19845] madvise_do_behavior+0x1ea/0x510 [ 819.593782][T19845] ? futex_private_hash_put+0x107/0x1c0 [ 819.593814][T19845] ? __pfx_madvise_do_behavior+0x10/0x10 [ 819.593841][T19845] ? down_read+0x13b/0x450 [ 819.593870][T19845] do_madvise+0x195/0x240 [ 819.593895][T19845] ? __pfx_do_madvise+0x10/0x10 [ 819.593921][T19845] ? do_futex+0x192/0x350 [ 819.593955][T19845] ? ksys_write+0x1ac/0x250 [ 819.593983][T19845] __x64_sys_madvise+0xa9/0x110 [ 819.594010][T19845] ? lockdep_hardirqs_on+0x78/0x100 [ 819.594038][T19845] do_syscall_64+0x115/0x840 [ 819.594064][T19845] ? clear_bhb_loop+0x40/0x90 [ 819.594088][T19845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.594108][T19845] RIP: 0033:0x7f7c8699ce59 [ 819.594125][T19845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.594144][T19845] RSP: 002b:00007f7c878e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 819.594170][T19845] RAX: ffffffffffffffda RBX: 00007f7c86c16090 RCX: 00007f7c8699ce59 [ 819.594183][T19845] RDX: 0000000000000015 RSI: ff7fffffffff0001 RDI: 0000000000000000 [ 819.594195][T19845] RBP: 00007f7c86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 819.594207][T19845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.594219][T19845] R13: 00007f7c86c16128 R14: 00007f7c86c16090 R15: 00007ffdc4647ff8 [ 819.594244][T19845] [ 821.614842][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2957'. [ 822.038792][T19880] FAULT_INJECTION: forcing a failure. [ 822.038792][T19880] name failslab, interval 1, probability 0, space 0, times 0 [ 822.191097][T19880] CPU: 0 UID: 0 PID: 19880 Comm: syz.0.2959 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.191129][T19880] Tainted: [L]=SOFTLOCKUP [ 822.191137][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.191155][T19880] Call Trace: [ 822.191162][T19880] [ 822.191170][T19880] dump_stack_lvl+0x100/0x190 [ 822.191206][T19880] should_fail_ex.cold+0x5/0xa [ 822.191230][T19880] should_failslab+0xc2/0x120 [ 822.191257][T19880] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 822.191288][T19880] ? __d_alloc+0x34/0xa40 [ 822.191316][T19880] ? __pfx_stack_trace_save+0x10/0x10 [ 822.191346][T19880] __d_alloc+0x34/0xa40 [ 822.191374][T19880] d_alloc_parallel+0x111/0x14e0 [ 822.191399][T19880] ? find_held_lock+0x2b/0x80 [ 822.191421][T19880] ? __d_lookup+0x25c/0x4a0 [ 822.191440][T19880] ? __pfx_d_alloc_parallel+0x10/0x10 [ 822.191466][T19880] ? __d_lookup+0x266/0x4a0 [ 822.191495][T19880] lookup_open.isra.0+0x57c/0x11b0 [ 822.191522][T19880] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 822.191546][T19880] ? __pfx___might_resched+0x10/0x10 [ 822.191566][T19880] ? mnt_get_write_access+0x52/0x2f0 [ 822.191600][T19880] ? __pfx_down_write+0x10/0x10 [ 822.191627][T19880] ? mnt_get_write_access+0x1e9/0x2f0 [ 822.191660][T19880] path_openat+0x2291/0x31a0 [ 822.191687][T19880] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 822.191709][T19880] ? __pfx_path_openat+0x10/0x10 [ 822.191741][T19880] do_file_open+0x20e/0x430 [ 822.191766][T19880] ? __pfx_do_file_open+0x10/0x10 [ 822.191805][T19880] ? _raw_spin_unlock+0x28/0x50 [ 822.191828][T19880] ? alloc_fd+0x476/0x790 [ 822.191861][T19880] do_sys_openat2+0x10d/0x1e0 [ 822.191890][T19880] ? __pfx_do_sys_openat2+0x10/0x10 [ 822.191927][T19880] __x64_sys_open+0xfe/0x1d0 [ 822.191955][T19880] ? __pfx___x64_sys_open+0x10/0x10 [ 822.191982][T19880] ? ksys_write+0x1ac/0x250 [ 822.192006][T19880] ? rcu_is_watching+0x12/0xc0 [ 822.192030][T19880] do_syscall_64+0x115/0x840 [ 822.192055][T19880] ? clear_bhb_loop+0x40/0x90 [ 822.192078][T19880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.192097][T19880] RIP: 0033:0x7f886fb9ce59 [ 822.192114][T19880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.192132][T19880] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 822.192157][T19880] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 822.192169][T19880] RDX: 5d745cb200ae4d7b RSI: 0000000000022ac2 RDI: 0000200000000080 [ 822.192184][T19880] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 822.192194][T19880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.192205][T19880] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 822.192228][T19880] [ 823.997838][T19916] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 825.842826][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 826.194156][T19967] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2982'. [ 826.239909][T19967] tc_dump_action: action bad kind [ 826.303324][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 826.870495][T19983] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[15795] was attempted by ""[19983] [ 829.697891][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'. [ 830.061091][T20041] Invalid ELF header magic: != ELF [ 831.000271][T20064] i2c i2c-0: new_device: Invalid device name [ 831.016785][T20043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2999'. [ 832.693074][T20095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'. [ 833.046736][ T6803] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 833.756600][ T6803] Bluetooth: hci3: unknown advertising packet type: 0xea [ 834.093277][T20114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3017'. [ 834.668250][T20127] random: crng reseeded on system resumption [ 835.004600][T20134] netlink: 'syz.4.3021': attribute type 22 has an invalid length. [ 835.049981][T20134] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3021'. [ 835.530890][T20139] FAULT_INJECTION: forcing a failure. [ 835.530890][T20139] name failslab, interval 1, probability 0, space 0, times 0 [ 835.610384][T20139] CPU: 0 UID: 0 PID: 20139 Comm: syz.4.3023 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.610418][T20139] Tainted: [L]=SOFTLOCKUP [ 835.610425][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 835.610436][T20139] Call Trace: [ 835.610443][T20139] [ 835.610451][T20139] dump_stack_lvl+0x100/0x190 [ 835.610487][T20139] should_fail_ex.cold+0x5/0xa [ 835.610510][T20139] should_failslab+0xc2/0x120 [ 835.610533][T20139] __kmalloc_cache_noprof+0x7a/0x6f0 [ 835.610559][T20139] ? fscontext_alloc_log+0x4a/0x1b0 [ 835.610588][T20139] ? nilfs_init_fs_context+0xbd/0x100 [ 835.610672][T20139] fscontext_alloc_log+0x4a/0x1b0 [ 835.610702][T20139] __x64_sys_fsopen+0x159/0x220 [ 835.610733][T20139] do_syscall_64+0x115/0x840 [ 835.610760][T20139] ? clear_bhb_loop+0x40/0x90 [ 835.610783][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.610802][T20139] RIP: 0033:0x7f559b99ce59 [ 835.610819][T20139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.610840][T20139] RSP: 002b:00007f559c7ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 835.610858][T20139] RAX: ffffffffffffffda RBX: 00007f559bc15fa0 RCX: 00007f559b99ce59 [ 835.610869][T20139] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 835.610879][T20139] RBP: 00007f559ba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 835.610891][T20139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.610901][T20139] R13: 00007f559bc16038 R14: 00007f559bc15fa0 R15: 00007ffdd3755ca8 [ 835.610924][T20139] [ 838.096455][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3030'. [ 838.687713][ T6803] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 838.723598][T20176] vivid-008: ================= START STATUS ================= [ 838.744871][T20177] FAULT_INJECTION: forcing a failure. [ 838.744871][T20177] name failslab, interval 1, probability 0, space 0, times 0 [ 838.835447][T20177] CPU: 0 UID: 0 PID: 20177 Comm: syz.4.3032 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.835480][T20177] Tainted: [L]=SOFTLOCKUP [ 838.835487][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.835498][T20177] Call Trace: [ 838.835505][T20177] [ 838.835512][T20177] dump_stack_lvl+0x100/0x190 [ 838.835557][T20177] should_fail_ex.cold+0x5/0xa [ 838.835581][T20177] ? handler_new_ref+0x1ab/0xc60 [ 838.835688][T20177] should_failslab+0xc2/0x120 [ 838.835711][T20177] __kmalloc_noprof+0xe0/0x850 [ 838.835747][T20177] handler_new_ref+0x1ab/0xc60 [ 838.835782][T20177] v4l2_ctrl_new+0xe67/0x23a0 [ 838.835821][T20177] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 838.835849][T20177] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 838.835889][T20177] v4l2_ctrl_new_std+0x1bb/0x290 [ 838.835927][T20177] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 838.835956][T20177] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 838.835989][T20177] ? trace_kmalloc+0xe3/0x110 [ 838.836014][T20177] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 838.836044][T20177] ? lockdep_init_map_type+0x10/0x250 [ 838.836077][T20177] ? media_request_object_init+0x105/0x180 [ 838.836121][T20177] vicodec_open+0x200/0xf70 [ 838.836171][T20177] ? kobject_get_unless_zero+0x156/0x200 [ 838.836208][T20177] v4l2_open+0x1d2/0x490 [ 838.836252][T20177] ? __pfx_v4l2_open+0x10/0x10 [ 838.836281][T20177] chrdev_open+0x234/0x6a0 [ 838.836304][T20177] ? __pfx_apparmor_file_open+0x10/0x10 [ 838.836327][T20177] ? __pfx_chrdev_open+0x10/0x10 [ 838.836352][T20177] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 838.836384][T20177] do_dentry_open+0x6ab/0x14d0 [ 838.836406][T20177] ? __pfx_chrdev_open+0x10/0x10 [ 838.836435][T20177] vfs_open+0x82/0x3f0 [ 838.836467][T20177] path_openat+0x208c/0x31a0 [ 838.836499][T20177] ? __pfx_path_openat+0x10/0x10 [ 838.836531][T20177] do_file_open+0x20e/0x430 [ 838.836571][T20177] ? __pfx_do_file_open+0x10/0x10 [ 838.836611][T20177] ? alloc_fd+0x476/0x790 [ 838.836637][T20177] ? do_getname+0x191/0x390 [ 838.836667][T20177] do_sys_openat2+0x10d/0x1e0 [ 838.836697][T20177] ? __pfx_do_sys_openat2+0x10/0x10 [ 838.836735][T20177] __x64_sys_openat+0x12d/0x210 [ 838.836766][T20177] ? __pfx___x64_sys_openat+0x10/0x10 [ 838.836818][T20177] ? rcu_is_watching+0x12/0xc0 [ 838.836843][T20177] do_syscall_64+0x115/0x840 [ 838.836869][T20177] ? clear_bhb_loop+0x40/0x90 [ 838.836892][T20177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.836912][T20177] RIP: 0033:0x7f559b99ce59 [ 838.836929][T20177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.836948][T20177] RSP: 002b:00007f559c7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 838.836967][T20177] RAX: ffffffffffffffda RBX: 00007f559bc16090 RCX: 00007f559b99ce59 [ 838.836979][T20177] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 838.836991][T20177] RBP: 00007f559ba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 838.837002][T20177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.837013][T20177] R13: 00007f559bc16128 R14: 00007f559bc16090 R15: 00007ffdd3755ca8 [ 838.837036][T20177] [ 839.632065][ T6803] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 839.973947][T20176] vivid-008: ================== END STATUS ================== [ 840.047992][T20189] vivid-008: ================= START STATUS ================= [ 840.092463][T20189] vivid-008: ================== END STATUS ================== [ 840.631286][T20199] FAULT_INJECTION: forcing a failure. [ 840.631286][T20199] name failslab, interval 1, probability 0, space 0, times 0 [ 840.679662][T20199] CPU: 0 UID: 0 PID: 20199 Comm: syz.0.3035 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.679696][T20199] Tainted: [L]=SOFTLOCKUP [ 840.679703][T20199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 840.679715][T20199] Call Trace: [ 840.679722][T20199] [ 840.679730][T20199] dump_stack_lvl+0x100/0x190 [ 840.679767][T20199] should_fail_ex.cold+0x5/0xa [ 840.679794][T20199] should_failslab+0xc2/0x120 [ 840.679818][T20199] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 840.679849][T20199] ? zswap_store+0xc6d/0x2e70 [ 840.679879][T20199] zswap_store+0xc6d/0x2e70 [ 840.679909][T20199] ? rmap_walk_anon+0x561/0x870 [ 840.679937][T20199] ? __pfx_zswap_store+0x10/0x10 [ 840.679963][T20199] ? find_held_lock+0x2b/0x80 [ 840.679987][T20199] ? folio_free_swap+0x60a/0x9f0 [ 840.680008][T20199] ? folio_free_swap+0x60a/0x9f0 [ 840.680033][T20199] ? folio_free_swap+0x3f/0x9f0 [ 840.680060][T20199] swap_writeout+0x47e/0x14f0 [ 840.680093][T20199] shrink_folio_list+0x51c5/0x60c0 [ 840.680131][T20199] ? __pfx_shrink_folio_list+0x10/0x10 [ 840.680164][T20199] ? debug_check_no_obj_freed+0x31f/0x630 [ 840.680201][T20199] ? __lock_acquire+0x4a5/0x2630 [ 840.680248][T20199] ? __lock_acquire+0x4a5/0x2630 [ 840.680282][T20199] ? __css_rstat_updated+0x1ce/0x5a0 [ 840.680310][T20199] ? __folio_batch_add_and_move+0x464/0xc60 [ 840.680331][T20199] ? __pfx___css_rstat_updated+0x10/0x10 [ 840.680363][T20199] reclaim_folio_list+0xdc/0x5e0 [ 840.680394][T20199] ? __pfx_reclaim_folio_list+0x10/0x10 [ 840.680421][T20199] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 840.680462][T20199] ? lru_gen_update_size+0x431/0xe20 [ 840.680493][T20199] ? lru_gen_del_folio+0x382/0x5f0 [ 840.680522][T20199] reclaim_pages+0x428/0x5e0 [ 840.680553][T20199] ? __pfx_reclaim_pages+0x10/0x10 [ 840.680580][T20199] ? madvise_cold_or_pageout_pte_range+0x2177/0x2620 [ 840.680608][T20199] ? folio_isolate_lru+0xd6/0xe90 [ 840.680640][T20199] madvise_cold_or_pageout_pte_range+0x14c9/0x2620 [ 840.680676][T20199] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 840.680705][T20199] ? __lock_acquire+0x4a5/0x2630 [ 840.680734][T20199] ? __css_rstat_updated+0x1ce/0x5a0 [ 840.680763][T20199] ? __pfx___css_rstat_updated+0x10/0x10 [ 840.680792][T20199] ? register_lock_class+0x40/0x560 [ 840.680823][T20199] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 840.680851][T20199] walk_pgd_range+0xc1a/0x1dd0 [ 840.680875][T20199] ? rcu_read_unlock+0x17/0x60 [ 840.680907][T20199] ? __pfx_walk_pgd_range+0x10/0x10 [ 840.680928][T20199] ? folios_put_refs+0x716/0xa90 [ 840.680948][T20199] __walk_page_range+0x171/0x850 [ 840.680969][T20199] ? find_held_lock+0x2b/0x80 [ 840.681000][T20199] walk_page_range_vma_unsafe+0x209/0x8f0 [ 840.681024][T20199] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 840.681049][T20199] ? find_held_lock+0x2b/0x80 [ 840.681072][T20199] ? mlock_drain_local+0x254/0x4e0 [ 840.681089][T20199] ? mlock_drain_local+0x254/0x4e0 [ 840.681110][T20199] walk_page_range_vma+0x63/0x90 [ 840.681132][T20199] madvise_pageout+0x259/0x540 [ 840.681156][T20199] ? __pfx_madvise_pageout+0x10/0x10 [ 840.681181][T20199] ? rcu_is_watching+0x12/0xc0 [ 840.681212][T20199] ? find_held_lock+0x2b/0x80 [ 840.681234][T20199] ? mt_find+0x687/0x8e0 [ 840.681270][T20199] madvise_vma_behavior+0x452/0x2240 [ 840.681297][T20199] ? mt_find+0x45e/0x8e0 [ 840.681325][T20199] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 840.681350][T20199] ? __pfx_mt_find+0x10/0x10 [ 840.681383][T20199] ? find_vma_prev+0xd8/0x150 [ 840.681404][T20199] ? futex_unqueue+0x133/0x2c0 [ 840.681428][T20199] ? find_vma+0xbf/0x140 [ 840.681448][T20199] ? __pfx_find_vma+0x10/0x10 [ 840.681467][T20199] ? __futex_wait+0x256/0x300 [ 840.681495][T20199] madvise_walk_vmas+0x2fe/0xa90 [ 840.681525][T20199] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 840.681557][T20199] madvise_do_behavior+0x1ea/0x510 [ 840.681585][T20199] ? __pfx_madvise_do_behavior+0x10/0x10 [ 840.681611][T20199] ? down_read+0x13b/0x450 [ 840.681639][T20199] do_madvise+0x195/0x240 [ 840.681664][T20199] ? __pfx_do_madvise+0x10/0x10 [ 840.681689][T20199] ? do_futex+0x192/0x350 [ 840.681722][T20199] ? ksys_write+0x1ac/0x250 [ 840.681749][T20199] __x64_sys_madvise+0xa9/0x110 [ 840.681775][T20199] ? lockdep_hardirqs_on+0x78/0x100 [ 840.681802][T20199] do_syscall_64+0x115/0x840 [ 840.681828][T20199] ? clear_bhb_loop+0x40/0x90 [ 840.681851][T20199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.681876][T20199] RIP: 0033:0x7f886fb9ce59 [ 840.681893][T20199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.681911][T20199] RSP: 002b:00007f88709f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 840.681929][T20199] RAX: ffffffffffffffda RBX: 00007f886fe15fa0 RCX: 00007f886fb9ce59 [ 840.681942][T20199] RDX: 0000000000000015 RSI: ff7fffffffff0001 RDI: 0000000000000000 [ 840.681953][T20199] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 840.681964][T20199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.681975][T20199] R13: 00007f886fe16038 R14: 00007f886fe15fa0 R15: 00007ffda1b01278 [ 840.681999][T20199] [ 841.611956][T16632] Bluetooth: hci2: command 0x2016 tx timeout [ 841.754890][ T6803] Bluetooth: hci4: command 0x2016 tx timeout [ 843.695738][ T7683] Bluetooth: hci2: command 0x2016 tx timeout [ 843.773992][T16632] Bluetooth: hci4: command 0x2016 tx timeout [ 843.885646][T20237] netlink: 'syz.0.3044': attribute type 22 has an invalid length. [ 843.921426][T20237] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3044'. [ 844.140656][T20243] snd_virmidi snd_virmidi.0: control 61678:131081:4:yª:0 is already present [ 844.300748][T20248] random: crng reseeded on system resumption [ 844.917448][T20272] netlink: 'syz.2.3051': attribute type 22 has an invalid length. [ 844.979817][T20272] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3051'. [ 845.130199][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 847.484855][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 848.612837][T20337] snd_virmidi snd_virmidi.0: control 61678:131081:4:yªÂe:0 is already present [ 848.946930][T20343] random: crng reseeded on system resumption [ 849.511679][T20353] FAULT_INJECTION: forcing a failure. [ 849.511679][T20353] name failslab, interval 1, probability 0, space 0, times 0 [ 849.562291][T20353] CPU: 0 UID: 0 PID: 20353 Comm: syz.0.3071 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.562322][T20353] Tainted: [L]=SOFTLOCKUP [ 849.562330][T20353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 849.562340][T20353] Call Trace: [ 849.562348][T20353] [ 849.562356][T20353] dump_stack_lvl+0x100/0x190 [ 849.562392][T20353] should_fail_ex.cold+0x5/0xa [ 849.562419][T20353] ? lsm_blob_alloc+0x68/0x90 [ 849.562447][T20353] should_failslab+0xc2/0x120 [ 849.562469][T20353] __kmalloc_noprof+0xe0/0x850 [ 849.562499][T20353] ? trace_kmem_cache_alloc+0xd5/0x100 [ 849.562525][T20353] lsm_blob_alloc+0x68/0x90 [ 849.562553][T20353] security_sk_alloc+0x2d/0x290 [ 849.562576][T20353] sk_prot_alloc+0x1d1/0x2a0 [ 849.562604][T20353] sk_alloc+0x36/0xe80 [ 849.562622][T20353] inet6_create+0x385/0x12b0 [ 849.562649][T20353] ? inet6_create+0x7f/0x12b0 [ 849.562675][T20353] __sock_create+0x339/0x860 [ 849.562704][T20353] __sys_socket+0x14d/0x260 [ 849.562731][T20353] ? __pfx___sys_socket+0x10/0x10 [ 849.562764][T20353] __x64_sys_socket+0x72/0xb0 [ 849.562789][T20353] ? lockdep_hardirqs_on+0x78/0x100 [ 849.562816][T20353] do_syscall_64+0x115/0x840 [ 849.562841][T20353] ? clear_bhb_loop+0x40/0x90 [ 849.562863][T20353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.562882][T20353] RIP: 0033:0x7f886fb9ce59 [ 849.562899][T20353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.562917][T20353] RSP: 002b:00007f88709cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 849.562936][T20353] RAX: ffffffffffffffda RBX: 00007f886fe16090 RCX: 00007f886fb9ce59 [ 849.562948][T20353] RDX: 0000000000000101 RSI: 0000000000000003 RDI: 000000000000000a [ 849.562959][T20353] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 849.562971][T20353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.562982][T20353] R13: 00007f886fe16128 R14: 00007f886fe16090 R15: 00007ffda1b01278 [ 849.563005][T20353] [ 851.216755][T20369] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3078'. [ 851.256464][T20369] tc_dump_action: action bad kind [ 851.344488][T20366] ================================================================== [ 851.344504][T20366] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 851.344536][T20366] Write of size 8 at addr ffffc90004c31880 by task syz.0.3076/20366 [ 851.344553][T20366] [ 851.344564][T20366] CPU: 0 UID: 0 PID: 20366 Comm: syz.0.3076 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.344590][T20366] Tainted: [L]=SOFTLOCKUP [ 851.344598][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.344610][T20366] Call Trace: [ 851.344616][T20366] [ 851.344624][T20366] dump_stack_lvl+0x100/0x190 [ 851.344655][T20366] print_report+0x13d/0x4b0 [ 851.344681][T20366] ? _raw_spin_lock_irqsave+0x52/0x60 [ 851.344707][T20366] ? sys_fillrect+0x174a/0x1910 [ 851.344729][T20366] kasan_report+0xdf/0x1d0 [ 851.344750][T20366] ? sys_fillrect+0x174a/0x1910 [ 851.344774][T20366] sys_fillrect+0x174a/0x1910 [ 851.344797][T20366] ? queue_work_on+0x141/0x1e0 [ 851.344818][T20366] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 851.344850][T20366] bit_clear+0x17d/0x220 [ 851.344869][T20366] ? __pfx_bit_clear+0x10/0x10 [ 851.344890][T20366] ? fb_get_color_depth+0x120/0x250 [ 851.344919][T20366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 851.344947][T20366] __fbcon_clear+0x633/0x760 [ 851.344976][T20366] ? __pfx_bit_clear+0x10/0x10 [ 851.344995][T20366] ? __pfx_fbcon_clear+0x10/0x10 [ 851.345031][T20366] csi_ECMA.constprop.0+0x909/0x3b60 [ 851.345058][T20366] ? find_held_lock+0x2b/0x80 [ 851.345081][T20366] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 851.345109][T20366] do_con_write+0x3946/0x4a10 [ 851.345133][T20366] ? trace_contention_end+0x122/0x170 [ 851.345155][T20366] ? __pfx_do_con_write+0x10/0x10 [ 851.345183][T20366] con_write+0x23/0xb0 [ 851.345206][T20366] n_tty_write+0x431/0x11c0 [ 851.345242][T20366] ? __pfx_n_tty_write+0x10/0x10 [ 851.345271][T20366] ? __pfx_woken_wake_function+0x10/0x10 [ 851.345293][T20366] ? __pfx___might_resched+0x10/0x10 [ 851.345312][T20366] ? kfree+0x1dd/0x6c0 [ 851.345338][T20366] ? __pfx_n_tty_write+0x10/0x10 [ 851.345366][T20366] file_tty_write.isra.0+0x4d2/0x890 [ 851.345392][T20366] redirected_tty_write+0xd4/0x120 [ 851.345416][T20366] vfs_write+0x6ac/0x1070 [ 851.345436][T20366] ? __pfx_redirected_tty_write+0x10/0x10 [ 851.345461][T20366] ? __pfx_vfs_write+0x10/0x10 [ 851.345481][T20366] ? find_held_lock+0x2b/0x80 [ 851.345509][T20366] ksys_write+0x12a/0x250 [ 851.345529][T20366] ? __pfx_ksys_write+0x10/0x10 [ 851.345551][T20366] ? rcu_is_watching+0x12/0xc0 [ 851.345573][T20366] do_syscall_64+0x115/0x840 [ 851.345599][T20366] ? clear_bhb_loop+0x40/0x90 [ 851.345620][T20366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.345639][T20366] RIP: 0033:0x7f886fb9ce59 [ 851.345655][T20366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.345674][T20366] RSP: 002b:00007f88709f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.345692][T20366] RAX: ffffffffffffffda RBX: 00007f886fe15fa0 RCX: 00007f886fb9ce59 [ 851.345705][T20366] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000007 [ 851.345716][T20366] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 851.345728][T20366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.345739][T20366] R13: 00007f886fe16038 R14: 00007f886fe15fa0 R15: 00007ffda1b01278 [ 851.345756][T20366] [ 851.345762][T20366] [ 851.345768][T20366] The buggy address belongs to a vmalloc virtual mapping [ 851.345781][T20366] Memory state around the buggy address: [ 851.345791][T20366] ffffc90004c31780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 851.345804][T20366] ffffc90004c31800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 851.345817][T20366] >ffffc90004c31880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 851.345827][T20366] ^ [ 851.345836][T20366] ffffc90004c31900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 851.345849][T20366] ffffc90004c31980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 851.345860][T20366] ================================================================== [ 851.358876][T20366] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 851.358897][T20366] CPU: 0 UID: 0 PID: 20366 Comm: syz.0.3076 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.358924][T20366] Tainted: [L]=SOFTLOCKUP [ 851.358932][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.358944][T20366] Call Trace: [ 851.358951][T20366] [ 851.358959][T20366] dump_stack_lvl+0x100/0x190 [ 851.358994][T20366] vpanic+0x552/0x970 [ 851.359012][T20366] ? __pfx_vpanic+0x10/0x10 [ 851.359037][T20366] ? mark_held_locks+0x40/0x70 [ 851.359067][T20366] ? sys_fillrect+0x174a/0x1910 [ 851.359091][T20366] panic+0xd1/0xe0 [ 851.359108][T20366] ? __pfx_panic+0x10/0x10 [ 851.359126][T20366] ? sys_fillrect+0x174a/0x1910 [ 851.359148][T20366] ? preempt_schedule_common+0x42/0xc0 [ 851.359177][T20366] check_panic_on_warn.cold+0x19/0x34 [ 851.359197][T20366] end_report.part.0+0x3a/0x90 [ 851.359224][T20366] kasan_report.cold+0xe/0x18 [ 851.359250][T20366] ? sys_fillrect+0x174a/0x1910 [ 851.359275][T20366] sys_fillrect+0x174a/0x1910 [ 851.359300][T20366] ? queue_work_on+0x141/0x1e0 [ 851.359320][T20366] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 851.359352][T20366] bit_clear+0x17d/0x220 [ 851.359370][T20366] ? __pfx_bit_clear+0x10/0x10 [ 851.359388][T20366] ? fb_get_color_depth+0x120/0x250 [ 851.359417][T20366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 851.359445][T20366] __fbcon_clear+0x633/0x760 [ 851.359474][T20366] ? __pfx_bit_clear+0x10/0x10 [ 851.359493][T20366] ? __pfx_fbcon_clear+0x10/0x10 [ 851.359521][T20366] csi_ECMA.constprop.0+0x909/0x3b60 [ 851.359547][T20366] ? find_held_lock+0x2b/0x80 [ 851.359570][T20366] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 851.359598][T20366] do_con_write+0x3946/0x4a10 [ 851.359622][T20366] ? trace_contention_end+0x122/0x170 [ 851.359645][T20366] ? __pfx_do_con_write+0x10/0x10 [ 851.359673][T20366] con_write+0x23/0xb0 [ 851.359697][T20366] n_tty_write+0x431/0x11c0 [ 851.359729][T20366] ? __pfx_n_tty_write+0x10/0x10 [ 851.359758][T20366] ? __pfx_woken_wake_function+0x10/0x10 [ 851.359780][T20366] ? __pfx___might_resched+0x10/0x10 [ 851.359803][T20366] ? kfree+0x1dd/0x6c0 [ 851.359829][T20366] ? __pfx_n_tty_write+0x10/0x10 [ 851.359858][T20366] file_tty_write.isra.0+0x4d2/0x890 [ 851.359885][T20366] redirected_tty_write+0xd4/0x120 [ 851.359909][T20366] vfs_write+0x6ac/0x1070 [ 851.359930][T20366] ? __pfx_redirected_tty_write+0x10/0x10 [ 851.359955][T20366] ? __pfx_vfs_write+0x10/0x10 [ 851.359975][T20366] ? find_held_lock+0x2b/0x80 [ 851.360003][T20366] ksys_write+0x12a/0x250 [ 851.360030][T20366] ? __pfx_ksys_write+0x10/0x10 [ 851.360052][T20366] ? rcu_is_watching+0x12/0xc0 [ 851.360075][T20366] do_syscall_64+0x115/0x840 [ 851.360101][T20366] ? clear_bhb_loop+0x40/0x90 [ 851.360122][T20366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.360142][T20366] RIP: 0033:0x7f886fb9ce59 [ 851.360157][T20366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.360176][T20366] RSP: 002b:00007f88709f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.360195][T20366] RAX: ffffffffffffffda RBX: 00007f886fe15fa0 RCX: 00007f886fb9ce59 [ 851.360208][T20366] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000007 [ 851.360221][T20366] RBP: 00007f886fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 851.360233][T20366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.360244][T20366] R13: 00007f886fe16038 R14: 00007f886fe15fa0 R15: 00007ffda1b01278 [ 851.360262][T20366] [ 851.360324][T20366] Kernel Offset: disabled