last executing test programs: 29.775974799s ago: executing program 1 (id=2389): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000dd, 0x40000000000eb4, r0, 0x8001) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x7, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x81004523, r3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xebe, r3, 0x8000) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade768cd97e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f1862c6e305f1df4ca134c2413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) write$auto(0x1, 0x0, 0x80000000) lstat$auto(0x0, &(0x7f0000000180)={0x8000000000000001, 0x9, 0x1000000000000006, 0x8000063, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x7, 0x2, 0x6, 0x6, 0x200000100103}) r6 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_TUNSETVNETLE(r6, 0x400454dc, &(0x7f00000001c0)=0x9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r7 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto(r7, 0x80046f46, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYBLOB="d2d72716a0928b575aa92204f8d0972eb35ea2f826e4450dc908471bee25b3303038cb980211fbb1c4c8d0a65931e5b95255bbd97269df71cfb12d8facf46974b59cc0760292a1fe9a"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c010}, 0x24004804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000001100)='./file0\x00', 0x161342, 0x120) 13.038024139s ago: executing program 3 (id=2420): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop12\x00', 0xc8482, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x54d300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket(0x11, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) pipe$auto(&(0x7f0000000000)=r1) fcntl$auto(r2, 0x402, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x4) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) fanotify_init$auto(0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x400455c8, 0x0) io_uring_setup$auto(0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa8042, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf250300000006000700fe7f0000060006000100000008000300000400000a000500aaaaaaaaaa1000000a000500aaaaaaaaaabb00000a000500000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="77ee508cc70ba96354c6f94b46dbf3193d940d18ed593f3290884501ab3dd7868e21381c10581e404d1b6cb658f1e633fb2d6bb170c8363987f1f6a3399164beb8b0ca7c21aec2d94aec78f4bca87c51ea401d7a3b2e73495d2b71a09f712b6180ddee22baaa7e3b3d4cf595c833e72a249c7708f76e5aea65109e7951643c3eaebfd6400e7a0521d5367413bce7b6c3a4439411427107946c91484c"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) 12.438282263s ago: executing program 3 (id=2423): r0 = socket(0x10, 0x2, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) (async) socket(0x1d, 0x2, 0x2) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000200000004000a8008000800", @ANYRES32=r3, @ANYBLOB="0800030007740000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x801, 0x106) (async) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r4, 0x11c, 0x1, 0x0, 0x0) (async) ustat$auto(0x12, &(0x7f0000000340)={0x2, 0x80, "417acc606935", "df5f19b5a360"}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) (async) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000500)="6d9ce4019bed2782bb6fa8d63bc2e370db86aa0b0f2aadd08e9a043b52634f12429a0f4c19b26c1bcb8f6a184cfcda41ce7453ff2052027ac040812732e275212fb14b2d66880550d0cb70edf93731d411805d2e833e691fcc89ff3db722f0abe7ada9ddd2ab3d1e53e8b373d2e973d888df60e73dbaf11c81df181d77d11a46d4b57d2d70687109481b319e0a1431f80caee17f810235180ef24cfcada468aad59a253ea83da9c740bbe5b973135cffd4746724c3f463a817967912e23c432d710716a7d3c3d205c2963e367dced87d4ac7f48bdfe4fadca6a34d7930f24e176c9b337d00162849afec5da490707b0e", 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r7) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r6, 0x4068aea3, &(0x7f0000000240)={0xc7, 0x0, [{0x2, 0x3ff, 0x7f}]}) (async) open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) (async) fcntl$auto(0x3, 0x8, 0x0) 11.507561002s ago: executing program 3 (id=2425): r0 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000e0, 0x0) r1 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x88c00, 0x0) close_range$auto(r0, r1, 0x10001) r2 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = io_uring_setup$auto(0x2, &(0x7f00000000c0)={0x7, 0x8, 0x8, 0x2, 0x9, 0x3, 0xffffffffffffffff, [0x401, 0x5, 0xfffffff9], {0xd0, 0x800, 0x3ff, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2}, {0x4, 0x40, 0x5, 0x10001, 0x8, 0xa, 0x9c, 0x9, 0x4}}) sendmsg$auto_TIPC_NL_LINK_SET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d4, 0x0, 0x206117c1bef1dbaf, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NAME_TABLE={0x100, 0x8, 0x0, 0x1, [@typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x47}, @typed={0xf0, 0x97, 0x0, 0x0, @binary="4d74f45a673c5fe9dcdfd6cb24f4952fb154aa2c62e0ac13537a4a6285766fe27bbb9abe36704310b136d10b35ea09cd91faddd45be3950ed8ca70d75320ab162212da923c890c10e0bdb850a5a7c86e1dea7a42b8e71f0a21624c303a08cc991ae6e5e304b2e94ade562d7dbced24daddaf1c517f2c140f8935ce5ce268ae1871b9eafa71e862da5ff92e486dfbcfd9170905bb18039d907f5e0a33f70ac2584ae67f10eccebb0ed9198ffea622ef8a9bea7464dc47ad80e77a1b0408b64460e976484318c684b003edb134d7a408bf3a2f51a5b96d0bb60622436f78c82a78c341657899e338252af19782"}]}, @TIPC_NLA_PUBL={0xc0, 0x3, 0x0, 0x1, [@nested={0xb9, 0x71, 0x0, 0x1, [@typed={0x2d, 0xf1, 0x0, 0x0, @str='/sys/kernel/tracing/buffer_total_size_kb\x00'}, @generic="245137334dde57f1480add8f4642b9a7c8a89ce4c083623fecdde6af0ab4aeca37a9d018c4fb0b45efe098f61b0c963c42d5376763b6385da6aac7f8eb028e7b6cd84bfa2ec5e92bacb4ea49f73d67edf459c5", @nested={0x4, 0x112}, @generic="39a0b262a284f129e5b2c37a47766a701367598948f470eda528e200b3c34a7dad946e3bc1dd8a9be7f3", @typed={0x4, 0xf}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x10000}, 0x20000840) r5 = fanotify_init$auto(0x80000000, 0x7) r6 = ioctl$auto_TUNGETIFF2(r3, 0x800454d2, &(0x7f0000000400)=0x3) setsockopt$auto_SO_SNDTIMEO_NEW(r6, 0x5, 0x43, &(0x7f0000000440)='-\xf1Y:){:\x00', 0x4) r7 = fanotify_init$auto(0x8, 0x9) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/tracing/current_tracer\x00', 0x2, 0x0) write$auto(r2, &(0x7f00000004c0)='-\xf1Y:){:\x00', 0x4) ioctl$auto_EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c, 0x0) open$auto(&(0x7f0000000500)='./file0\x00', 0x40, 0x70) ioctl$auto_FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000540)="19fb5d77a75826c0ef892c268b9590c9") r8 = syz_clone3(&(0x7f0000000700)={0x208000800, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0, {0x35}, &(0x7f0000000640)=""/55, 0x37, &(0x7f0000000680)=""/14, &(0x7f00000006c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r3}}, 0x58) r10 = prctl$auto_PR_SCHED_CORE_CREATE(0x1, 0x1, r9, 0xfffffffffffffffe, 0x7) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)=@token_create={0xb167, r6}, 0x80000001) fadvise64$auto_POSIX_FADV_WILLNEED(r7, 0x400, 0x3, 0x3) ioctl$auto_FIONCLEX(r11, 0x5450, 0x4) r12 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000880), r4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r12, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x10) writev$auto(r6, &(0x7f0000000a80)={&(0x7f0000000980)="9db7c1a0d5696c0dcc6d002c5fbbb86af147b688f261f8f628190bf207b79f65c47c8b8bd65177b2732734bfacba5bcf85572c23ffd3e473e213f65e19ef79899a7635f79fce470708280ef7a4dc9f5be3c9b756bb9a09edcb8dfd87bbe72383e861358dd823854283c166747e48b75682aa8fff50bd538f775f10483bf64cb291a241f1e20ed28276df947dcf9d414aaa918e5f2ce30fd3131207033ed7f8158c5ce3ec4a59deb2d047928347c61d780c2f96a26fa9b4199307bf6351fe44ed0b67d5f7b24a95c72d050d", 0x10000}, 0x3) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), r6) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r13, 0x40a, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x10}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x8000}]}, 0x24}}, 0x20000000) waitid$auto_P_PGID(0x2, r8, &(0x7f0000000c00)={@_si_pad}, 0x3, &(0x7f0000000c80)={{0x1, 0xf91f}, {0x8000000000000001, 0x3}, 0x7, 0x200, 0xc, 0x100000001, 0xfffffffffffffffc, 0x90, 0x3, 0x9, 0x1ff, 0xc865, 0xffffffffffff0c7e, 0x0, 0x28}) r14 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000d40), 0x282140, 0x0) ioctl$auto_RTC_UIE_ON(r14, 0x7003, 0x0) r15 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000dc0), r10) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r10, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r15, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x17}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x40800) 11.350942205s ago: executing program 2 (id=2426): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytd\x00', 0x800, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r5, 0x2) flock$auto(r5, 0x5) write$auto_sg_fops_sg(r2, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) read$auto(0x3, 0x0, 0x21) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r6, 0x0, 0x4) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x4) r8 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r8, &(0x7f0000000040)='nbd\x00', 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r9, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) 11.200575351s ago: executing program 3 (id=2428): r0 = fspick$auto(0xffffffffffffff9c, 0x0, 0x1) socket(0x2d, 0x2, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r1) r2 = setfsuid$auto(0xee00) io_submit$auto(0x0, 0x400000000000007f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x81, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffbfe, 0x2, 0x8, 0x0, 0x6}) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000140)="b44058ec6940b2b50e05f6587a384858461299ee2963b7b71aca7739b350dccea459a7c5125172e81ffe270f1a2dd86568300a121bc2ec409cc5cc5af675bad7d2a26fa803744973b265a2dcbae7cd9315045947229144d8d936046ab5bde5074012c5132891b15981b44b83fd347a7ba763f0ee67274c0ce34edea97a69b764d0ea48b76c4862949144d993c5dece7ba0e381188d11168f9b0eb62b5111f608f44e6aff500f906b1af580026a6d58b1b3285cd81d4f925d121d71658c099bc78327d9b8604d460ee38fdde778f4699ab2a3907173adccaab01aa0dd030e1d5249d1db12d3709312c485200c8542a14cdc7cb3102803", 0x1}, 0x9) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) (async) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) setreuid$auto(r2, 0x0) (async) setreuid$auto(r2, 0x0) sendmsg$auto_NL80211_CMD_DEL_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000072c0)={0x2a10, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0x290c, 0x131, 0x0, 0x1, [@NL80211_ATTR_NAN_FUNC={0x1014, 0xf0, 0x0, 0x1, [@generic="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", @generic="875e9f9056a7e5ce7d0a29d7c1f7a9de"]}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x43ac}, @NL80211_ATTR_NAN_FUNC={0x335, 0xf0, 0x0, 0x1, [@nested={0x1fc, 0xbf, 0x0, 0x1, [@typed={0x5, 0xf1, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x1}, @nested={0x186, 0x104, 0x0, 0x1, [@generic="94e55d024a1a462a0a53e05ab3fd1d5fbb840695342034ed11e72f0d81b58d9a0e6012b91b918935582cacd0cd058c282fdb49389e31cd66e4b1965e435e9bb5940d5009a1bd1b6e266a94b12aa48a7ba3e6dcd7771e8ed0a89b00174dcb85ef1ddff1e53b8d6096f98a77972cee4f33421f7af5d6b46b9488", @nested={0x4, 0xa}, @generic="9a05f33e0bef7a44c83f8cb971a12fe2ec100eee061f471acf8719b9e2c7423699394bbfad5b755e32602330d115c0934241810c4cad5714a1a38b01ad0b9bd322f4fe", @generic="8c242b8e272bf64b32ce2a8ebf6c87b3b37865d9f0c4312b3b0d270c8239e4b78a1ca406e0b84a1e55cc808af7cee6fd817c531fd5030575785df0e9e77f76f22771f3b464210d018adf86127d2f24bc592ffe4fddc9a34459d0504b17a94f1b542846f3ad1daf52735fe6b50512f106f57634e849bcbd3f6be37a36877e28c98754cb52ab25a326d7996df8df3d5b8a3b9d33f500d057d9a7d3a6d16fc8d1a0472e078e5bba300f8dc7dc7f4b78187d0aba8af135eb85e993121b18d926", @nested={0x4, 0x48, 0x0, 0x1, [@generic]}]}, @typed={0x59, 0xbc, 0x0, 0x0, @binary="0a4263adf831d17ac34fdc1d61dd6190f3ed0d630f42f579eef862ee05269ffce0928ed16012deb51933ebe81176cd5a69e6401849a7de738f79994549115ff4b1a03a8a71aaa60d5d7f9749a8b6b24ab7bc04d776"}, @typed={0x8, 0x3a, 0x0, 0x0, @uid=r2}]}, @generic="aae944cf482578f3de87dfc0a9606b2cf1837f69d67ce92f31ec72cca1ab49dfb0d1a3e8c33ebf8d0092563255c6bcf9e16af09019dd48e54594604d93ecb8c0bf44174a3c7828a272f9cc258d8fd1fc934287aa08af37fe9010ed914a114ac3739e599d66c59b334514854445554d6f21900a24e6034a2d8d8a6f84292d93e90432df163c661ffade90ea4492924fecf17b770555fea30530bc7851e71416c17de671", @generic="9235280567f90b2e6e8bd23ba61d91c31965ba2bace54d5558de31dbdcd790fbb8fbe8379df08b8181afc52929d8db66b41a41a41f7119820b6e98045f87eb2bd6297f7aa2287a41766b6812066c392272804cb5301921352b0da5e9744ab23fb5a6722dad005e379106035d6660a68cad114193b08d29fd383e42ad422186ee5f06f212201d4edf6a16da192ad9", @nested={0x4, 0x101}]}, @NL80211_ATTR_MAC_ADDRS={0x15a0, 0xa6, 0x0, 0x1, [@generic="a97c2297953d4d49e00e6402dedb9c918513d07aa5ca04154e8fb77bbd87bc8e464a802a1892475e7fa86a84163cd719ef", @nested={0x1008, 0x82, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="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"]}, @nested={0x4, 0x22}, @generic="b96930ff1da7091c1ed7817df2b5a192bd63e77b239456f44a6f1256cc1f49da17b8b0eab93cca8dafac6ff602abad7a03d7e6cec328b2b4579a12a0264b0d29b686513b5332c9eea2f142ab2c50e9d0e5b3ea9608554fd21f41be58c08b84c73f72364e44fc7860f1f6fcff09c7bc850cee052c841c8cb132523713060d7822e4a7f8475acdd7af0967b8", @nested={0x4d3, 0xed, 0x0, 0x1, [@nested={0x4, 0x117}, @typed={0x8, 0x93, 0x0, 0x0, @fd=r0}, @generic="91e6340aae65c0ec713996b9359d0bba5f00fa6d289f65b585509ab1a3d886551007004f011d72438de29b5ba838edfa376a382b", @typed={0x8, 0xf4, 0x0, 0x0, @fd=r0}, @generic="fa002cdb84ff7536baef2e475ce3a9786a94a9a4c5edc321a7a284a134c8789c13dbfeaf249a5894de2e2a9d5ab536780a3a51d9f9bf1f87e6d49851d3f6366469ce93e6f91357f272371e7f48b947bb8265f38562c86eb8f43f5b97a405e0d53207ad2f6c846a53fc7581e0a9aff1be3ecab78a438d18a4a7234878e7b099ef4c0483469be7080c94d89b58e175e4351f0845baa8f3f412b7b57d", @typed={0xc4, 0xe9, 0x0, 0x0, @binary="33ba8c51143397d4ebf60d9001644117fe1fccf63bb51f309a560fc8fd4d0e619bb33ee826de4c3ced54e805d91496690680ca4ed50bade6747a246fbfd75c7b3c83ddb292f5c92b0221bbb8d1dab8a6b6bba767ba234b37e01fe8a51491133c374bba7f497943913bdd0a6d0afb76dc1287720e51b67abd9ce2e267f34996dc3f1d48900ff74b40dde81fc5343daee9dd3b325496a8e6f8478ff2067b03d007505d80627507d5dc17421e2cce8232f9823790f03353f9217b1681f2e01e24c5"}, @nested={0x322, 0x4, 0x0, 0x1, [@typed={0x4, 0x31}, @generic="4420460783c1f209463cea33ffe09c37e2ca6ac48297018afcb6e69c995d20e0aee54a34b8f3bf877624f3ff4f583a04fae11790a082f7b33b40a3b3d4aa2063acae7f7cd7c67a17c1b0b9fad944b4a91855adbdb9fd30a79be8b1d6510b9d1288c3687d5ac7d9e81a51755d88bc0c28d244114e4dce4e5809da77de7759e8bd957d343df1853037c0c8fd806ddc697372132283686738f99a31ea89c6550681e2227124e84f", @nested={0x151, 0x55, 0x0, 0x1, [@typed={0xc, 0x127, 0x0, 0x0, @u64=0xa9}, @generic="28f52b2441f9a883b8f9c1a9597992ba153c0797c3d9ba5defdf6edd8e3bc8e950760b9842408540a52463c2e21574f4064015797dee85f69a10", @nested={0x4, 0x108}, @nested={0x4, 0xd8}, @generic="c03b1660b2ed323d9da93181e02644e8ed6cf090eb23c0629acd01c8c114f10ae8fef3460c7a5ce64a58425591fcaa94badbfb2df133fc9ad7e2348ee1458ffb630ad6a7e90d51dd68fe30a11c2fceab03dfaeb673cd1d9bde2a6a9a649fb57447eb18608faf977b478597c080b4fae5945fab0b6eec17dca0c581ca5f67", @generic="bb65751d7b38863cb434c2e9ec441d2e1e0441fc6971d1899870f43214591730ac09a0ce896de97406964b21f96c4cfbc178d953ed4310188c82dcd536ac567552f0b1770664c0fa680afed40abd0a0131326c11183c46fbddce25fb6ee771244cdb4dc3cdfe1b232f5c82d7951efdf2715720a93da13237d50892f57c", @nested={0x4, 0x92}]}, @nested={0x1c, 0x92, 0x0, 0x1, [@nested={0x4, 0x5b}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private2}]}, @nested={0xee, 0x135, 0x0, 0x1, [@generic="43a15ba3279827817a2f63eb72decbd8bba2ea96312c19e6b5479c3ccf9721b368d0971e2a21dac3a974964353658990ae0be8088e73bcf49d986909cc6e1a9a9759778cfce22117f5245700191e35d1e544f5", @typed={0x8, 0xab, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xd0}, @generic="38c1d4e5a42ad4e42b731a6197e86a774d0a11b31496ffaad6e32f5924ea19864463d042f76f3ca793c78638edf43aad6be32d94a069252ac3604a7a73f5d5bc4fdac0111690cb00a74f2460e2a1c81b9f8410318720a1f079c7f4f0b9fcf42d1087783b5a1e8f238ebe5fcc42aa0c2e7e2d8a059d8d7542864e48ab286153", @nested={0x4, 0xf2}, @typed={0x8, 0xf5, 0x0, 0x0, @u32=0x8}]}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0xaa, 0x0, 0x0, @uid=r2}]}, @nested={0x4, 0x115}]}, @generic]}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd3}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x9}, @NL80211_ATTR_TX_RATES={0xd1, 0x5a, 0x0, 0x1, [@generic="47589e111d8b7205ffc99f293bc92dd2bfbd01a283e60b687203642d12b600bff94c182858394bd72b0bd1587a061b5711289d767ea2aef6cd5208b44c292ed7786b764014d07dff8957688e2493a80ff1a29d4f78eab57481904e7ab3a699cd76dc6a4fe781bcb3da5f779cea43ca5a7b340d9547247ec9b0b7742ac482471d7999308ee2f6cee620fe4c90de059108c21f4a4585741f4ecd131e234a65b2b403556db621e668a97ed210fcb23d1f59aa06316fb8f1801f7bafddcaf381159b84e4128985b09cf600a4232de8"]}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}]}, 0x2a10}, 0x1, 0x0, 0x0, 0x40895}, 0x8810) 10.939960359s ago: executing program 3 (id=2429): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r0, 0x10f, 0x89, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x30d042, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xb6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x20000840) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xfffffffe, 0x0, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x100, 0x3eb, 0x5, 0x2, 0x3000, 0xffff, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80000000, 0x4, 0xfffffffffffffffc, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbfffc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x7fff]}, 0x7, 0xd) rt_sigqueueinfo$auto(0x0, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f0000000080)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400005, 0xde, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r6, 0x0, 0x10005, 0x830) write$auto(r5, 0x0, 0x100) 9.177724207s ago: executing program 3 (id=2432): r0 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4, @broadcast}, 0x54) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x9a28) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x0, 0x87, 0x0, 0x18) setsockopt$auto(r0, 0x29, 0x12, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xdeV\x1c\x16\xa8\xb5', 0x110) 8.011416918s ago: executing program 2 (id=2436): r0 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)=0x7fffffff) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r0, 0x0, 0x4014) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = gettid() close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0xffffffffffffaee1, 0xfffffffffffffffe, 0x2, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioperm$auto(0xffffffffffffffff, 0x389, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.0/power/control\x00', 0x32002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) kill$auto(r2, 0x11) setsockopt$auto(r1, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioperm$auto(0x0, 0x7, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) removexattr$auto(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='/dev/mtdblock0\x00') 7.326539352s ago: executing program 1 (id=2394): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getsid$auto(0xffffffffffffffff) prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, r0, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c0302, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 7.069498606s ago: executing program 1 (id=2440): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x2) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00', &(0x7f0000000180), 0x100d1) ioctl$auto(r2, 0xae7c, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) fsconfig$auto_XFS_DAX_NEVER(r4, 0x7f, &(0x7f0000000000)='MAC80211_HWSIM\x00', &(0x7f0000000040)="2afeeef30a2cb01602f92089fcbb29ccc434fd718450150ba7aa017a2fd75f42b2011d28356170fda33b2d755205a588c809c43234186d7884e12a58", 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x800, 0x0, 0x0) mincore$auto(0x4, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x18, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x18, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) open(0x0, 0x22040, 0x75) (async) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) (async) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) 7.064703244s ago: executing program 2 (id=2441): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2201, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop7\x00', 0x80000, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/hw_queues\x00', 0x80800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x1263, r1) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000000c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) fcntl$auto_F_WRLCK(r3, 0x3ff, 0x1) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x64c6, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) gettid() 5.921572487s ago: executing program 1 (id=2443): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) pwritev$auto(r0, &(0x7f0000000040)={&(0x7f0000000000)="172308e4d9cd9477d81da6e8bd", 0x1}, 0x6, 0x3, 0x5) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x614, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_DATA={0xf6, 0x9c, "a92f01740ae1eb5c43c4e7bf83f83cb46d25ac54753b4eda21ae50a18c9553b48ebcad2775b364635d1e74bc64eab5f0b0f62dc2b16cf250e71c9c9a1471d4f355fee7c0aa905f8943a9ab62c2541d27dfa3e37ba53d152ae4909f5559d2a1eaf8159210fd100de0774ce7e9fd686f94f62eae039bc05806e842c2f9143c69e29d478ea2fd525bc6bf897b753b2c28b178b80c7ea6fe068d84044112fd6353b3f96b161dbe43c50e1589b77c7c1de67fd6f9c27d844cda486c9f69149cc690e07bcf6f045a80ab6dfbc50151d16816bbe67fd0c2ddab00af65f4948b9e2077a5aba19647466227ea029732cd79893069d938"}, @NL80211_ATTR_REG_ALPHA2={0xe7, 0x21, "26df0990f00dae0bb602962d2e90281c08e45a9de8c3822be2cb8521732a795a881f0494a5a3a1c1665c84c08462438b712c6f02a6e1d137f4807a76c75e2dbc12fdfab67ccc909c91f2df61bf8713e467cc554a0218f0418a6be05388721615bb03c98b50ec986c536d029e700709ea934192c625b6c92b0953d08b022a2ff95bd7163ee7b5d0d12541d476b25717a9ba6ac2a967292c61d3733f9cfd33b9626d5c9c76e56ccbc58ea8cee85a2728d25a9df01026a5a443f4cd6abd3d53d9b1fcdde786bff96b3b185faf82d16792fc73a52946837dbce285dabf1e1381e92aef4bb7"}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xff}, @NL80211_ATTR_REKEY_DATA={0x368, 0x7a, 0x0, 0x1, [@typed={0x13, 0x95, 0x0, 0x0, @str='/dev/snd/timer\x00'}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@local}, @nested={0x326, 0x59, 0x0, 0x1, [@generic="14994e2293bb4cc00eb99fca03a5ff781d92452a3146616a3773954069f7876194e7f0ad4e6f", @typed={0x32, 0x20, 0x0, 0x0, @binary="bc9604ae5757eadce0be11a446b9874a637de6acea0d22fe74e8a45facac39aaa8b326358a69db60eed4f2db5dba"}, @typed={0x94, 0xd5, 0x0, 0x0, @binary="1ebb466ae90a1980ed65f5ac5314aece5779de3668f0254e076116bf46da1d4a535709e689002cb060d8622d42a36c23a08912871047b9393773a7b4c30df7880fcb1ba107ef0a7ca7ee400ebc5c43727700d5a40f4b636fe7186b0f947b2f5be54ef5c01801acf39af02911e092fd458f281422ad9abf01b3a23e3d16a25ad327e501df0667af4e33cc68b07aef2ad1"}, @generic="0eebdde3a39c6b45d0baa7af6d373b3ff3668788b77e4c0c787b0082e7ffdd8cb06549a510ed09da283ddd9db0a71864ac8fd3496f1321fa90e134369944ba34c6cafee96285c27e9e1c2abb2336315ca88c93fe1d5a79dd34d56d4d4fd2ec", @generic="3223caa954f67ec4563ba4466c963146635c2983331a5c69bd8a80e102847b858c0c465b50ea6941852f59a36bad52a6b6350358f70784bec22e91a6eca991cff3145aca09bc38e7375ec2423ee2e4c2ff318783d83723cd74dccc62385cf9a4ed33ce2b43302b9d4d1ac322299bec6901e6dae2e9535c5af4c930141c916d05db516b6f5047208a5d60bc904b4a3f3fc906a6c420ba4a59997fead8f9", @generic="afee0052ddd7ac26de0400afada9f3b9544f0717c3db97dd1da3a1b791ed0c1912cf1000"/47, @generic="3348a37c133bee2a05c405b9e7c62b8491413995a0f88c86df84019fb2f9812daaccb09951d0bd8554f063d8540dd6fa", @generic="d5e56be1181696dbff9c5b3e3f945f754bb8d08c361ae5a1f6596aa32bea5f484beb4616e5b1dcd27068ed056cf43022c8d092d68a179760c8b5a9ebfd57b330f76cd744cc2233faab54022ebde41af24154adea80a3c037cd5b58c9f024c74189ba47b56d52dde709e2df2240f2ff83172b502c134ee9f3cb18a621bc069eafb2feb0ba154841cddd3e7eae13bd6ac0146fe7ccd8048477b370bb69d117435a25b420f1c804bf2b20effcbdae214a2327b373d2fa1018dad2bf5f9b92f2367d2b1262b9b9c7f76a82ea2046b14adccff18e06f667ac0dccb5"]}, @typed={0xc, 0xa6, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x6}, @NL80211_ATTR_BSSID={0x89, 0xf5, "091e270bd8ef1c2c6bc49b979b706b0b1ee065a3965492b6d7dfc534446280682da14137c1aaa177db3a9c052090a243b38167db7a947a13be3830b7d29c08c5fa13dc237415d6ebcd004797550a99708be0ea3574cf5adaa2c24c848ca00592ffc177d9bfe12b99e4e21f5b796b58e7b77b453e668e8c18d0937b289ca580c8530385e3a4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CQM={0x6, 0x5e, 0x0, 0x1, [@generic="93ab"]}]}, 0x614}, 0x1, 0x0, 0x0, 0x840}, 0x80) mmap$auto(0x0, 0x20009, 0x7fffffff, 0x18, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x141241, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x67f00, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) pread64$auto(r1, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x2, 0x1) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(r3, r4, 0x6) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000300)="13548b7e3fb16afc360763d2f02cb7b1e7f9af6242118cdd79e11d41ddec9821652cef45b83352099f6471262753259237c38eda8757514c5bea6b9d000592f9352edb82ae12e060d1dbea6044ea88c0dc0acbac8b390501da2bd4eae068957414fcfdbe600e03cce5ee6c44229ef22a141c2e286858313cbf4a8fd391152a4d552b7f4544d154a16a4a671721ab1f33b5", 0xffff, &(0x7f00000000c0)={&(0x7f00000003c0)="b8f52bf5bd94639605ea1222343843fe1c30747c9496929563fa898ab6093cb64b0f5296ff200accbd96d3ec999ed6f102ac246ea9feadcc4e0fb1354782af070eb91223581cf09b22d5fa0b24f5703c2296bf4a654faa5e938bc3cd6a6277d08163b0556b38b24137128673888662d3fdda9a8f32fc9d17e2fd2d6900255a3f70476aecb8930ad2d4a508887e78fe3309efdd316f0dee9e76ea0ea421fae24aa3139d892b427abc0e2989616707997dd1f814d4e72f0f070cb1c99a64f81645b49698208b910cdf5a8813342bfcf82bac497afd4c", 0x3}, 0x8001, 0x0, 0x0, 0x8}, 0xa0f3}, 0x6, 0x3, 0x0) socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) 5.919141629s ago: executing program 0 (id=2444): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2201, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x7, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x6]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0x6, 0x3, 0x3, 0x5, 0x10005, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x8) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) writev$auto(r1, &(0x7f00000002c0)={&(0x7f00000000c0)="efa4efdc04b057124270430610af06deaa7d57f7cfaf7a7cc6b9efd60e583c4a62c5853721fc3863ccb17c91e3bfbff9e88f6d06c1c0220a35a0d17d077cc3ba92ceb3aa1c0b622c6f8b1018c840e029bf3fc1542598f7a6523b21986083b59d792bedd33577496d8320d0a2d8087f572b85cacfa19d5253e0487638843f4a3a3d57f4b3e5929ab955cd1d2377e8bb5b53e548e8ea99bf1c5c63394be28012e5166841998198df4074a0cf65725ccdfcb6782a328867e02b80aff76e2f71087c61a7"}, 0x9) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0x9, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10, r2, 0xfffffffffffffff9) close_range$auto(0x2, 0x8, 0x1000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2, 0x1, 0x106) 5.136836273s ago: executing program 2 (id=2445): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x68c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc5, 0xbd, "0ef51a019cbe605f02ef6c963c9dbd38eec9aa05dfc18337a8198caa4691853b764d612960b36ce7ab417570912cdffc59950807991698316fe89c18a6f4c7a772d54987ffbf4c3c805f8671f61ee03354b7520650b503da4b8c2456aef3f6962acc3bd2338d5d606e881252b4c2bc6c0af31a6213ba523f360fbe8ccc5d4eac55acbc285e1d4b68eb16fcc01473a9ff2f01d689ff7df0b9f2ef846c651d889fa1a67623019ce804758c94cb4861e7998a7eebd8702a6b758bee122ce243ee8b43"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x28a, 0x7d, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r1}, @typed={0x1d, 0x30, 0x0, 0x0, @binary="1ff9b314301300657024517e2ea99cd5f6133a06314aa1ba96"}, @nested={0x8, 0x9d, 0x0, 0x1, [@nested={0x4, 0x33}]}, @nested={0x21c, 0x2a, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x118}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="47bb53a2163c7de04980cbe635eefb74c0c8dfa68bc862d07ae21ec909c0ade2fc85682713f6f1a1ca11a66b2d65b3c0433312e1e2be79c010a2006853096009796387df2b5e7be5bf7894b82c7ed9b1c8b3f66efe94d647c1eaee41c31a37fba3ca6917f8f74f9207ccae4aaa453accbf097772b809c193801a74d35934605401a7b110f022273d900dbe952b0f15902123b448c80f907704dd1bbb5677838ca2e9404f68316d3f35582472dd597fb5f95587422282916587ff6caae2b5a1e4acc1d63d3741bddd2cfc0e5e7eafa845b6e751ba87", @generic="d49e4f8314cf540a7b23ce1985649e1a62188f282a567d2560a818f9fa531e333ccf03c98f6324f26655dfcf7c6242d485bc95bd42f9bd8041ddf8f15f4e2b478a4e608c6a6d9614006b0e702bc63eb031a343d135f06bee586d179406104f86aad1aabc045fd49c5d5bd907a889304f0a98a1bfb4908ac090eb5aa6c05eb33238c6c849bc07ca66d61f61e96495bfa283931e7b9f2389c00ef57e2cd4650243ac69df689cea7b498a4cd5d4c1645f6d4fa878921ec11f7751c1bc25b9f0512913190d3c86e50205148e89d2d067b036ed27deb8a35aed10206e32a23702bbec2b", @generic="dd52e46ec82638cb31adc65b1b954e8f9d3b9b34d3af70ee6c9b8d882e4f63e7a84c93877ae63939de83de01f0ebc43c26ed9c0369367b172feab270fc40f460bf3ee0e4424fad11ad0ee2f23238"]}, @generic="6c64361a2f0488b49395470cfbf8f61c0c108b15dcda82684f91097e89083f2a5185d829066f7cc51cd04ab448c18d98bfd2"]}, @NL80211_ATTR_SCAN_SSIDS={0x305, 0x2d, 0x0, 0x1, [@generic="4b0b1bbdc0b655979d7a3b87f5eb48097a3a7b4566d17ce38d70e33e3ffcb304adfe37b77b8a2eb6c5ecb1c7653985a15c273c4c068546761d9122c606cd5453d40dce4fabbe7d9d2db7933a25700f4f10cc9c7fcb99dbd8a1e88334d511a2a7d23aba6096cab80afc8766a7af7221dc68a2d3db", @nested={0x77, 0xc1, 0x0, 0x1, [@generic="93181ea4773f98f0d4f24047769068a7c3fe8f9cdc84bf611094d81d96ede58ff7beddb5ab2e2f01486ffbe2df0ca61ab4aa793eeda986e3499d2ae7c820b2d1b93ff3da3aca92cf943e736af19ee2d3c71a169ff342a16e5cece2b4b0a1f3c6bba33dad035eca13f4bbbc56079f141d4ddd13"]}, @typed={0x8, 0x28, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xdd, 0x0, 0x0, @pid=r0}, @generic="3dda6e40af270b356619dc7e5b7aa7dec7bd3339c5a7ae74d4edbf0e85ca4a1391176bcecc7cf63c26f1b3f07797dcc8739118a73b5ff25d0b23a2714cb09fff0fd96da3ec091956a4d641c38a2f08b00fc55d26405b85357e614737670ed76bf18e4185c66dea1af4611d254932053f5807c65c9c648758b65a909cca412c9742f45e0f62a9f04c145955345f8fefee228769e376e05e99aa795262bdec37a4296b74f9c4f2433400ff69f9a6e80abdc54975a1ba99ad1f4cbee6058a55f5916f90249eadbc017295c37c5a998fff402e800e624fea4e64300d0ae974110314899c134f2bb7933d97a997d2bdac41cbdc3b0ae9e07cf1c836cf483f15", @nested={0xbd, 0x4d, 0x0, 0x1, [@nested={0x4, 0xc7}, @nested={0x4, 0xd0}, @nested={0x4, 0x159}, @nested={0x4, 0x15a}, @nested={0x4, 0x122}, @generic="3ffa31eb1f3b929e344624ea0a2b962d5a42a0b6d1e05d36afd33983eb8b0ac3f7bc3e12a6619f86331a1284692846bd0ff423af06a528825eced362679453cce2e2dba4ead820976a1f9501a510440acddf461e04a7947aa46fdf00bbbe06347d51b8ff812dad287360940adee4cc0bc47cfc3fbc67a6186bc7c5725f9825cb329524334ae6457bc8422e4d0502a9424224fb9a636ab5bda2101f67e7f27f9eff2c6f0ec6"]}, @nested={0x47, 0xd0, 0x0, 0x1, [@generic="e01992b59cb9e7e690e68428ce2678ac806c7327dea7d2a4c5f7a7c6e5f3cfbd7db6756333735257d6d12301665e2cb0ab810119e38f04b5a666f3d7592f82", @nested={0x4, 0x114}]}]}]}, 0x68c}, 0x1, 0x0, 0x0, 0x40892}, 0x800) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000001, 0x0, 0x2000000000000003, 0x0, 0x24, 0x1}, 0x401}, 0x800, 0xa0000000) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x1401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0xd8) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xffffffff, 0x3ff, 0xc7, 0x80000001, 0x7]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r6, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x4, 0x6, 0x12a0) madvise$auto(0x0, 0x200007, 0x19) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video7\x00', 0x8200, 0x0) read$auto_v4l2_fops_v4l2_dev(r7, &(0x7f0000000000)=""/133, 0x85) r8 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer1\x00', 0x500, 0x0) ioctl$auto_SOUND_OLD_MIXER_INFO(r8, 0x80304d65, &(0x7f00000004c0)) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r5) 3.08570398s ago: executing program 0 (id=2446): r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x4, 0x1, 0x0, 0xed41, 0x710a) mmap$auto(0x0, 0x108, 0x4000000000dd, 0x10, r0, 0x8001) msgsnd$auto(0x0, &(0x7f0000000080)={0x6, 0x2}, 0xf, 0xc45) msgsnd$auto(0x1, &(0x7f0000000000)={0x4, 0x5}, 0x8457, 0xfffffffe) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x1, 0x0, 0x1d26, 0x9) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001340)='/dev/ram1\x00', 0x4000, 0x0) (async) r2 = socket(0x11, 0x3, 0x6) fsconfig$auto(r2, 0x5, 0x0, 0x0, 0x0) (async) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r2, &(0x7f0000000140)="73243de6296cae81cd9c04184a71a56b520a718bf3c4ebee6252f330fdf83b63af0b9cd0dbfe68b3ca930b08449cb1c8259ca2b7d5c1ec24be5ff0c14075d14e92134101964f2a7a0c439e2e5118e5d4ad2f51a370df7a0e8fbf23abe18567c2ebde44c18021e11963f989c5c3ccca50b75a3714ef25", 0x5, &(0x7f0000000280)="d12bf71c4b6810d8ca703e26fca0", 0x3, &(0x7f0000000300)="aec02126278e7d15393354208f1ec13ac25a6fa6453001a3dff88cb821d558479f9267490f7ee2e6e32bca6e7308f37b57432f3653255d0871b32e85ebafbb1711d9db96f4ff8fe4c4103a23fe6ae5f03d24d97ed897229240d30ccd9ae068bab394927aa5cc81944871be348daf8b9d9e8af5b0fafdeaa801aec7693f992d05626a67e189eb9a", &(0x7f00000003c0)=0x2}) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) (async) r3 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_MARK(r3, 0x6, 0x24, &(0x7f00000001c0)='\\[^:{!$!.-\x00', &(0x7f0000000240)=0x1) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/cells\x00', 0x10740, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000001080)=""/244, 0xf4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00002d653cc805066aaeab000022", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) (async) mmap$auto(0x4, 0x3, 0x6, 0x13, r4, 0x7ce0aacb) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0) 2.815876161s ago: executing program 0 (id=2447): r0 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x40006, 0x22, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x0, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x140}, 0x55) r2 = open(0x0, 0x161340, 0x130) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x3, &(0x7f00000001c0), 0x5, 0xa505}, 0x800}, 0x8, 0x9) statx$auto(r2, 0x0, 0x1003, 0xb8d, 0x0) setsockopt$auto(r1, 0x1, 0x41, 0x0, 0x8001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x868, r4, 0x204, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x24, 0xcd, "ac253d73a2668971157d9d0fd576ace42ee673c79a591a1f7a40a2372e869f83"}, @NL80211_ATTR_FTM_RESPONDER={0x340, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xac, 0x3, "cb6ec6f467915df03d2f3cceaef775f3d9a3354243761effd96aaa0366f517a3a76b6a75a359bddd4cad61d3a56cb85a03f360eb503a4806c9fa514ad6ba04e93db5d07c4656d7c53c7d0709a7aba35ef28f31d9c5bd30929e439f1738b8c3f010b74eb9c89c4dabcef3e0400f1148fcd290946b945d380dc5ebe6880b633bb102b9ab473563229096f3ae724ab76cd7073cb0e731cb4f37fa758ccc7d9dcf5c55c5f65f0c0f97b6"}, @NL80211_FTM_RESP_ATTR_LCI={0x42, 0x2, "58dffe1cbf2e1514739e86b7cde74b485b6484390ffff02a815caf38e88fd5826a10a9350e50cefe0ece9cd076f5d3d092d227156b558d940dade933e0aa"}, @NL80211_FTM_RESP_ATTR_LCI={0xf3, 0x2, "4de172ce1b76b771f6421bb892cfad0dcc0a982d3370e4f177dd095e3f8376e622fce2884d055478290a1a9e653e15c1a71497dabe5aac42aaa9fd9f0e072f038aa9fec0c214c866a01587e7c6af8096903148523fd293fa5a5b7fbdb263c80d7e881f6707b70271354fc86e8be58c203430bee407c85115338420ca1e7505127f7a0662d85f9c3378b4ec7ecc2e6832141fdb714c280aff2ade2b10e3a389c11d3785289ccfb2d0484cc465db6c64c53e11ea8416d13ff70c191e4a11ce29cc703b9add43b5b4e6bba3bba18458e522fa30f25af6e0847b725a3dac5d4b3772f4818af65b37a60f3cb915420464d4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x60, 0x3, "065702129e4d66a949276d6054b72b84117365f2a77f2422416b0be7ad31dff9fc1c0e25555d5880ea84bc62f0ff847376a92ec9d141c4b18b2cd3e2530ba1f608c5b2bdc132cc001fea59c8c1bc1832fd13cb1cbe7a3c1ddca5b06e"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "c090c88afdde0735134592610ae767099c044b2b7958309fdb785c974485b068ab42a212c027cf975230984fb1cbb80b4a27c73689eba96b3c5753103a32419f310ef0712c1ab96c5d25a46b9d72e1b92ec768c5b41fd018f4fdc2a5a4d85a7cebabb6f50c462a836ea489c8b5e977afd0092f026087f169bde669d123f6c4f7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6d, 0x3, "8fdead0c3f6608936cd6171220e909a9f1c6a8901c7eb44c06a94841fb60d72984f4d26ff3135c0955360517ee270f5a9014a44a867d41e26f801f5b4cb796c6e4685780bae29290e975e7e34caebc5b067eb133e1eafac0dbfbd2f121a7716dfe98824f9359e26b75"}]}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x81}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_IE_RIC={0x4d1, 0xb2, "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"}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7fff}]}, 0x868}, 0x1, 0x0, 0x0, 0x40000}, 0x4044880) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000000000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0x5, 0xb0, @raw=0xfffff024}}) 2.59962783s ago: executing program 2 (id=2448): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') statmount$auto(&(0x7f0000000000)={0x18, @inferred=r0, 0x400000080000029, 0x100000001, 0x8}, 0x0, 0x207, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime$auto(0x0, 0xb746, &(0x7f0000000000)={{0x4d4, 0x2}, {0xfe, 0x4}}, 0x0) r1 = socket(0xa, 0x5, 0x84) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009280)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x4fc0}, 0x1, 0x0, 0x0, 0x20000020}, 0x44000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xa3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "1990b5fffff400"}, 0x1f) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1c, &(0x7f0000000000), 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r3, 0x0, 0x6) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) mprotect$auto(0xfffff000, 0xa588, 0x6) 2.226448814s ago: executing program 1 (id=2449): mmap$auto(0x0, 0x7, 0xdf, 0x10, 0xffffffffffffffff, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) connect$auto(r0, &(0x7f0000000140)=@sco, 0xfff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_0={0x21, 0x538, 0x80, 0x10000, 0x4, 0xffffffffffffffff, 0x21000, "72fea04183dce563f03f2a25077b3383", 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x101, 0x1000000000001}, 0x4) r1 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) pipe$auto(0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x9, &(0x7f0000000000)=',\x00', &(0x7f0000000040), 0x0) futimesat$auto(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x6, 0x40}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x40000eb1, 0x0, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/dev_snmp6/team_slave_0\x00', 0x2c0c1, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) ioctl$auto(r3, 0x400454d0, r3) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) 2.146990796s ago: executing program 0 (id=2450): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x22, 0x2, 0x24) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) socket(0x2, 0x2, 0x1) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) 1.239330994s ago: executing program 2 (id=2451): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r0, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3a) close$auto(r1) io_uring_setup$auto(0x7a527d95, 0x0) io_uring_register$auto(r1, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(0x0, 0x4603, 0x56) getdents$auto(r2, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x80000000}, 0x9, 0x9, 0x4, 0x31) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/uptime\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) 1.032201111s ago: executing program 1 (id=2452): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x7) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo$auto(r2, r1, 0x1, &(0x7f0000000600)={@siginfo_0_0={0xffffff88, 0x1, 0x44, @_sigsys={&(0x7f0000001380)="84dfff34c54fa09c13359aec8376a425ea2d081725840ce9b7a43bf26c73aac58bf49930256266fbdd3f9527ff8471e1db15db173d1d414eae65c5fffd606fa03eead4b717106cc4b7e3db15cca5501dc31caed0e01c1caa8c4499c481e4e73e9f9463c6883178a8f4a89c9b0c3b5fe3256401983b9513dfc78be4e53515cb8d", 0x2, 0x2}}}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="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"/324], 0x148}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) getrandom$auto(0x0, 0x3, 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x6, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x223541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd0c, &(0x7f00000001c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) r5 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_BLKALIGNOFF(r5, 0x127a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r7 = ioctl$auto_TUNSETSNDBUF2(r6, 0x400454d4, &(0x7f0000000000)=0x6) ioctl$auto_BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000380)={0x80000001, 0x7, "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"}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 526.832893ms ago: executing program 0 (id=2453): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) time$auto(&(0x7f0000000000)=0x101) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000340)={r1, &(0x7f00000000c0)="4935361846cea8eb168081938c049e691ab05d8c0447242c673a9aead6d0c922d406eb2f0cc9289e2f942553298ecfc33f32913befbb07d66f100caeefe9260df18c47579c", 0x8, &(0x7f0000000140)="72b55de38692", 0x9, &(0x7f0000000240)="c2f688e46e40f01717cb93446ccb4ccd4f0d5ab7b5a4463fc697b2f37b5ca993f6ba54cd35c71fff0cf7c0579ce7988244557a1ad439c474ae65f4181659b31d617e2e03e6dddd65083f3a1dfda9eb219aaacd589c49722ac2c3c781f62d93d8c771b97c9f99bcc02f1fd5aeecba23b20f66297053613952727d60d90a52d0427e0bc5f1dd3f05f769a56c36", &(0x7f0000000300)=0x8}) mmap$auto_proc_iter_file_ops_compat_inode(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r2, 0xf) (async) r3 = waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x7, 0x5, 0x4, 0x2055}) prctl$auto(0x5, 0x80000000, r3, 0x78, 0x8) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zram0\x00', 0x416440, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x11, 0x5, 0x0) (async) socket(0x2b, 0x2, 0x1) (async) userfaultfd$auto(0x3eeb55f0) (async) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x801, 0x106) (async) socket(0xa, 0x1, 0x3a) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x23, 0x4, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 0s ago: executing program 0 (id=2454): r0 = prctl$auto(0x40, 0x3e, 0x0, 0x2, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0xa4001, 0x0) ioctl$auto_VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x2, r1}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) socket(0xa, 0x3, 0x9) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x10, 0x2, 0xf4}, 0x6d) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x2, 0xd76, 0x7, 0x8) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x2, 0x9, 0x7, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) sendfile$auto(r3, r3, 0x0, 0x43) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sysfs$auto(0x9, 0xffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) kernel console output (not intermixed with test programs): ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.870104][T14359] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 815.870119][T14359] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 815.870129][T14359] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000008 [ 815.870138][T14359] RBP: 00007f12eee32c99 R08: 0000000000000002 R09: 0000000000000000 [ 815.870148][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.870156][T14359] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 815.870176][T14359] [ 815.870410][T14359] syz.0.1757: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 817.517882][T14377] scsi_dev_info_list_add_str: bad dev info string 'ñ' '' '' [ 818.107303][T14359] ,cpuset=/,mems_allowed=0-1 [ 818.142787][T14359] CPU: 0 UID: 0 PID: 14359 Comm: syz.0.1757 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.142814][T14359] Tainted: [L]=SOFTLOCKUP [ 818.142819][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 818.142828][T14359] Call Trace: [ 818.142834][T14359] [ 818.142839][T14359] dump_stack_lvl+0x100/0x190 [ 818.142866][T14359] warn_alloc.cold+0x95/0x1c1 [ 818.142891][T14359] ? __pfx_warn_alloc+0x10/0x10 [ 818.142910][T14359] ? lockdep_hardirqs_on+0x78/0x100 [ 818.142933][T14359] ? __get_vm_area_node+0x2c5/0x330 [ 818.142953][T14359] ? __get_vm_area_node+0x208/0x330 [ 818.142973][T14359] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 818.142991][T14359] ? find_held_lock+0x2b/0x80 [ 818.143005][T14359] ? local_lock_release+0x99/0x130 [ 818.143022][T14359] ? local_lock_release+0x99/0x130 [ 818.143041][T14359] ? kernel_clone+0xfc/0x9a0 [ 818.143059][T14359] ? find_held_lock+0x2b/0x80 [ 818.143072][T14359] ? rcu_read_unlock+0x17/0x60 [ 818.143087][T14359] ? rcu_read_unlock+0x17/0x60 [ 818.143102][T14359] ? obj_cgroup_charge_account+0x46d/0x640 [ 818.143119][T14359] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 818.143138][T14359] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 818.143157][T14359] ? rcu_is_watching+0x12/0xc0 [ 818.143178][T14359] ? trace_kmem_cache_alloc+0xf3/0x120 [ 818.143195][T14359] ? kernel_clone+0xfc/0x9a0 [ 818.143210][T14359] __vmalloc_node_noprof+0xad/0xf0 [ 818.143234][T14359] ? kernel_clone+0xfc/0x9a0 [ 818.143252][T14359] copy_process+0x5ec/0x7a40 [ 818.143270][T14359] ? __pfx___futex_wait+0x10/0x10 [ 818.143290][T14359] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 818.143310][T14359] ? lockdep_hardirqs_on+0x78/0x100 [ 818.143335][T14359] ? __pfx_copy_process+0x10/0x10 [ 818.143351][T14359] ? find_held_lock+0x2b/0x80 [ 818.143372][T14359] kernel_clone+0xfc/0x9a0 [ 818.143387][T14359] ? __pfx_futex_wait+0x10/0x10 [ 818.143409][T14359] ? __pfx_kernel_clone+0x10/0x10 [ 818.143435][T14359] __do_sys_clone+0xd9/0x120 [ 818.143452][T14359] ? __pfx___do_sys_clone+0x10/0x10 [ 818.143484][T14359] do_syscall_64+0x106/0xf80 [ 818.143504][T14359] ? clear_bhb_loop+0x40/0x90 [ 818.143526][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.143541][T14359] RIP: 0033:0x7f12eed9c799 [ 818.143554][T14359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.143568][T14359] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 818.143583][T14359] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 818.143593][T14359] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000008 [ 818.143601][T14359] RBP: 00007f12eee32c99 R08: 0000000000000002 R09: 0000000000000000 [ 818.143610][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.143618][T14359] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 818.143637][T14359] [ 818.143643][T14359] Mem-Info: [ 819.226484][T14408] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 819.992645][T14359] active_anon:6089 inactive_anon:30955 isolated_anon:0 [ 819.992645][T14359] active_file:21327 inactive_file:41296 isolated_file:0 [ 819.992645][T14359] unevictable:768 dirty:663 writeback:0 [ 819.992645][T14359] slab_reclaimable:15010 slab_unreclaimable:92068 [ 819.992645][T14359] mapped:36886 shmem:22412 pagetables:1343 [ 819.992645][T14359] sec_pagetables:0 bounce:0 [ 819.992645][T14359] kernel_misc_reclaimable:0 [ 819.992645][T14359] free:1273932 free_pcp:20202 free_cma:0 [ 820.281438][T14359] Node 0 active_anon:24356kB inactive_anon:126500kB active_file:85328kB inactive_file:165024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157792kB dirty:2688kB writeback:0kB shmem:93676kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:28672kB kernel_stack:12096kB pagetables:5300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 820.501323][T14359] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 820.736539][T14359] Node 0 DMA free:15232kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 820.942118][T14434] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 821.010173][T14359] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 821.032848][T14359] Node 0 DMA32 free:1140408kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24356kB inactive_anon:127212kB active_file:85328kB inactive_file:165024kB unevictable:1536kB writepending:2688kB zspages:420kB present:3129332kB managed:2537368kB mlocked:0kB bounce:0kB free_pcp:63908kB local_pcp:63908kB free_cma:0kB [ 821.265069][T14359] lowmem_reserve[]: 0 0 1 1 1 [ 821.319523][T14359] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 821.467415][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'. [ 821.543327][T14359] lowmem_reserve[]: 0 0 0 0 0 [ 821.578171][T14359] Node 1 Normal free:3933696kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19484kB local_pcp:19484kB free_cma:0kB [ 821.862006][T14359] lowmem_reserve[]: 0 0 0 0 0 [ 822.004633][T14359] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15232kB [ 822.109794][T14359] Node 0 DMA32: 4345*4kB (U) 3094*8kB (UME) 2129*16kB (UM) 862*32kB (U) 834*64kB (UE) 654*128kB (UME) 535*256kB (UE) 502*512kB (UME) 348*1024kB (UM) 46*2048kB (UM) 9*4096kB (M) = 1122276kB [ 822.227679][T14359] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 822.294493][T14359] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 2*16kB (U) 9*32kB (UM) 7*64kB (UM) 4*128kB (UM) 1*256kB (M) 0*512kB 2*1024kB (U) 1*2048kB (M) 959*4096kB (UM) = 3933740kB [ 822.294627][T14359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.294639][T14359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 822.294651][T14359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 822.294662][T14359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 822.294674][T14359] 89247 total pagecache pages [ 822.294680][T14359] 48 pages in swap cache [ 822.294685][T14359] Free swap = 124664kB [ 822.294691][T14359] Total swap = 124996kB [ 822.294697][T14359] 2097051 pages RAM [ 822.294703][T14359] 0 pages HighMem/MovableOnly [ 822.294708][T14359] 430829 pages reserved [ 822.294713][T14359] 0 pages cma reserved [ 823.505045][T14466] FAULT_INJECTION: forcing a failure. [ 823.505045][T14466] name fail_futex, interval 1, probability 0, space 0, times 0 [ 823.592898][T14466] CPU: 0 UID: 0 PID: 14466 Comm: syz.0.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.592924][T14466] Tainted: [L]=SOFTLOCKUP [ 823.592929][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 823.592938][T14466] Call Trace: [ 823.592942][T14466] [ 823.592948][T14466] dump_stack_lvl+0x100/0x190 [ 823.592973][T14466] should_fail_ex.cold+0x5/0xa [ 823.592990][T14466] get_futex_key+0x295/0x1620 [ 823.593009][T14466] ? __pfx_get_futex_key+0x10/0x10 [ 823.593024][T14466] ? lock_acquire+0x1cf/0x380 [ 823.593048][T14466] futex_wake+0xea/0x530 [ 823.593069][T14466] ? __pfx_futex_wake+0x10/0x10 [ 823.593089][T14466] ? exit_mm_release+0x19/0x30 [ 823.593112][T14466] do_futex+0x32b/0x350 [ 823.593129][T14466] ? __pfx_do_futex+0x10/0x10 [ 823.593145][T14466] ? __might_fault+0xc5/0x140 [ 823.593169][T14466] mm_release+0x24a/0x2f0 [ 823.593184][T14466] do_exit+0x704/0x2b60 [ 823.593210][T14466] ? __pfx_do_exit+0x10/0x10 [ 823.593227][T14466] ? do_raw_spin_lock+0x128/0x260 [ 823.593246][T14466] ? find_held_lock+0x2b/0x80 [ 823.593259][T14466] ? get_signal+0x7e0/0x21e0 [ 823.593275][T14466] do_group_exit+0xd5/0x2a0 [ 823.593294][T14466] get_signal+0x1ec7/0x21e0 [ 823.593313][T14466] ? ksys_write+0x190/0x250 [ 823.593328][T14466] ? __pfx_get_signal+0x10/0x10 [ 823.593343][T14466] ? do_futex+0x192/0x350 [ 823.593362][T14466] arch_do_signal_or_restart+0x91/0x770 [ 823.593379][T14466] ? kfree+0x2ec/0x6b0 [ 823.593399][T14466] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 823.593421][T14466] ? __pfx___x64_sys_futex+0x10/0x10 [ 823.593443][T14466] exit_to_user_mode_loop+0x86/0x4a0 [ 823.593463][T14466] do_syscall_64+0x668/0xf80 [ 823.593482][T14466] ? clear_bhb_loop+0x40/0x90 [ 823.593499][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.593513][T14466] RIP: 0033:0x7f12eed9c799 [ 823.593526][T14466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.593539][T14466] RSP: 002b:00007f12efc980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 823.593554][T14466] RAX: fffffffffffffe00 RBX: 00007f12ef015fa8 RCX: 00007f12eed9c799 [ 823.593563][T14466] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f12ef015fa8 [ 823.593572][T14466] RBP: 00007f12ef015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 823.593580][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.593588][T14466] R13: 00007f12ef016038 R14: 00007ffca619e800 R15: 00007ffca619e8e8 [ 823.593606][T14466] [ 827.346520][T14537] netlink: 218 bytes leftover after parsing attributes in process `syz.2.1787'. [ 827.788001][T14545] FAULT_INJECTION: forcing a failure. [ 827.788001][T14545] name failslab, interval 1, probability 0, space 0, times 0 [ 827.893012][T14545] CPU: 0 UID: 0 PID: 14545 Comm: syz.2.1791 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.893039][T14545] Tainted: [L]=SOFTLOCKUP [ 827.893045][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.893054][T14545] Call Trace: [ 827.893059][T14545] [ 827.893066][T14545] dump_stack_lvl+0x100/0x190 [ 827.893093][T14545] should_fail_ex.cold+0x5/0xa [ 827.893112][T14545] should_failslab+0xc2/0x120 [ 827.893128][T14545] __kmalloc_cache_noprof+0x7a/0x6f0 [ 827.893148][T14545] ? ptp_open+0xe4/0x550 [ 827.893173][T14545] ptp_open+0xe4/0x550 [ 827.893197][T14545] ? __pfx_ptp_open+0x10/0x10 [ 827.893224][T14545] ? __pfx_ptp_open+0x10/0x10 [ 827.893246][T14545] posix_clock_open+0x17b/0x290 [ 827.893272][T14545] ? __pfx_posix_clock_open+0x10/0x10 [ 827.893289][T14545] chrdev_open+0x234/0x6a0 [ 827.893305][T14545] ? __pfx_apparmor_file_open+0x10/0x10 [ 827.893320][T14545] ? __pfx_chrdev_open+0x10/0x10 [ 827.893337][T14545] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 827.893356][T14545] do_dentry_open+0x6d8/0x1660 [ 827.893371][T14545] ? __pfx_chrdev_open+0x10/0x10 [ 827.893391][T14545] vfs_open+0x82/0x3f0 [ 827.893413][T14545] path_openat+0x208c/0x31a0 [ 827.893434][T14545] ? __pfx_path_openat+0x10/0x10 [ 827.893456][T14545] do_file_open+0x20e/0x430 [ 827.893473][T14545] ? __pfx_do_file_open+0x10/0x10 [ 827.893502][T14545] ? alloc_fd+0x476/0x790 [ 827.893518][T14545] ? do_getname+0x191/0x390 [ 827.893537][T14545] do_sys_openat2+0x10d/0x1e0 [ 827.893556][T14545] ? __pfx_do_sys_openat2+0x10/0x10 [ 827.893575][T14545] ? __fget_files+0x21f/0x3d0 [ 827.893593][T14545] __x64_sys_openat+0x12d/0x210 [ 827.893612][T14545] ? __pfx___x64_sys_openat+0x10/0x10 [ 827.893638][T14545] do_syscall_64+0x106/0xf80 [ 827.893659][T14545] ? clear_bhb_loop+0x40/0x90 [ 827.893677][T14545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.893692][T14545] RIP: 0033:0x7f585f19c799 [ 827.893705][T14545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.893719][T14545] RSP: 002b:00007f585ffc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 827.893734][T14545] RAX: ffffffffffffffda RBX: 00007f585f415fa0 RCX: 00007f585f19c799 [ 827.893744][T14545] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 827.893753][T14545] RBP: 00007f585f232c99 R08: 0000000000000000 R09: 0000000000000000 [ 827.893762][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.893772][T14545] R13: 00007f585f416038 R14: 00007f585f415fa0 R15: 00007ffcf4557bf8 [ 827.893792][T14545] [ 829.233012][T14555] bond0: option all_slaves_active: invalid value () [ 829.294833][T14552] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 830.974904][T14589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 830.988476][T14589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 831.026414][T14589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 831.060782][T14589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 831.169401][T14569] Process accounting paused [ 831.756342][T14608] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 831.949761][T14604] bond0: option all_slaves_active: invalid value () [ 833.049665][T12372] Bluetooth: hci1: command 0x0c1a tx timeout [ 833.056291][T12372] Bluetooth: hci0: command 0x0c1a tx timeout [ 833.062303][T12747] Bluetooth: hci3: command 0x0c1a tx timeout [ 833.125516][T14630] Bluetooth: hci2: command 0x0c1a tx timeout [ 835.069109][T14660] FAULT_INJECTION: forcing a failure. [ 835.069109][T14660] name failslab, interval 1, probability 0, space 0, times 0 [ 835.250957][T14660] CPU: 0 UID: 0 PID: 14660 Comm: syz.3.1817 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.250984][T14660] Tainted: [L]=SOFTLOCKUP [ 835.250989][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.250998][T14660] Call Trace: [ 835.251004][T14660] [ 835.251010][T14660] dump_stack_lvl+0x100/0x190 [ 835.251036][T14660] should_fail_ex.cold+0x5/0xa [ 835.251054][T14660] should_failslab+0xc2/0x120 [ 835.251070][T14660] __kmalloc_cache_noprof+0x7a/0x6f0 [ 835.251089][T14660] ? vhost_net_open+0x128/0x8b0 [ 835.251114][T14660] vhost_net_open+0x128/0x8b0 [ 835.251133][T14660] ? __pfx_vhost_net_open+0x10/0x10 [ 835.251154][T14660] misc_open+0x26d/0x450 [ 835.251171][T14660] ? __pfx_misc_open+0x10/0x10 [ 835.251187][T14660] chrdev_open+0x234/0x6a0 [ 835.251201][T14660] ? __pfx_apparmor_file_open+0x10/0x10 [ 835.251217][T14660] ? __pfx_chrdev_open+0x10/0x10 [ 835.251233][T14660] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 835.251253][T14660] do_dentry_open+0x6d8/0x1660 [ 835.251268][T14660] ? __pfx_chrdev_open+0x10/0x10 [ 835.251288][T14660] vfs_open+0x82/0x3f0 [ 835.251308][T14660] path_openat+0x208c/0x31a0 [ 835.251330][T14660] ? __pfx_path_openat+0x10/0x10 [ 835.251352][T14660] do_file_open+0x20e/0x430 [ 835.251368][T14660] ? __pfx_do_file_open+0x10/0x10 [ 835.251397][T14660] ? alloc_fd+0x476/0x790 [ 835.251413][T14660] ? do_getname+0x191/0x390 [ 835.251433][T14660] do_sys_openat2+0x10d/0x1e0 [ 835.251452][T14660] ? __pfx_do_sys_openat2+0x10/0x10 [ 835.251478][T14660] __x64_sys_openat+0x12d/0x210 [ 835.251497][T14660] ? __pfx___x64_sys_openat+0x10/0x10 [ 835.251523][T14660] do_syscall_64+0x106/0xf80 [ 835.251543][T14660] ? clear_bhb_loop+0x40/0x90 [ 835.251561][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.251584][T14660] RIP: 0033:0x7f45d3b9c799 [ 835.251598][T14660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.251613][T14660] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 835.251629][T14660] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 835.251639][T14660] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 835.251649][T14660] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 835.251658][T14660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.251667][T14660] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 835.251687][T14660] [ 836.020597][T14665] NFSD: Failed to start, no listeners configured. [ 839.202954][T14711] [U] ^\ [ 839.872549][T14737] NFSD: Failed to start, no listeners configured. [ 840.577795][T14749] binder: 14748:14749 ioctl c00c6211 0 returned -14 [ 840.673824][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 842.230030][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1840'. [ 842.239248][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1840'. [ 843.307501][T14800] futex_wake_op: syz.0.1845 tries to shift op by -2048; fix this program [ 843.560864][T14800] futex_wake_op: syz.0.1845 tries to shift op by -2048; fix this program [ 846.191219][T14822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 846.226005][T14822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 846.268475][T14822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 846.303659][T14822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 846.343006][T14826] FAULT_INJECTION: forcing a failure. [ 846.343006][T14826] name failslab, interval 1, probability 0, space 0, times 0 [ 846.400651][T14826] CPU: 0 UID: 0 PID: 14826 Comm: syz.0.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.400680][T14826] Tainted: [L]=SOFTLOCKUP [ 846.400685][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 846.400695][T14826] Call Trace: [ 846.400700][T14826] [ 846.400707][T14826] dump_stack_lvl+0x100/0x190 [ 846.400733][T14826] should_fail_ex.cold+0x5/0xa [ 846.400752][T14826] should_failslab+0xc2/0x120 [ 846.400768][T14826] __kmalloc_cache_noprof+0x7a/0x6f0 [ 846.400787][T14826] ? vhost_net_open+0x128/0x8b0 [ 846.400812][T14826] vhost_net_open+0x128/0x8b0 [ 846.400832][T14826] ? __pfx_vhost_net_open+0x10/0x10 [ 846.400853][T14826] misc_open+0x26d/0x450 [ 846.400870][T14826] ? __pfx_misc_open+0x10/0x10 [ 846.400886][T14826] chrdev_open+0x234/0x6a0 [ 846.400901][T14826] ? __pfx_apparmor_file_open+0x10/0x10 [ 846.400916][T14826] ? __pfx_chrdev_open+0x10/0x10 [ 846.400932][T14826] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 846.400952][T14826] do_dentry_open+0x6d8/0x1660 [ 846.400966][T14826] ? __pfx_chrdev_open+0x10/0x10 [ 846.400987][T14826] vfs_open+0x82/0x3f0 [ 846.401008][T14826] path_openat+0x208c/0x31a0 [ 846.401030][T14826] ? __pfx_path_openat+0x10/0x10 [ 846.401052][T14826] do_file_open+0x20e/0x430 [ 846.401069][T14826] ? __pfx_do_file_open+0x10/0x10 [ 846.401097][T14826] ? alloc_fd+0x476/0x790 [ 846.401117][T14826] ? do_getname+0x191/0x390 [ 846.401137][T14826] do_sys_openat2+0x10d/0x1e0 [ 846.401156][T14826] ? __pfx_do_sys_openat2+0x10/0x10 [ 846.401182][T14826] __x64_sys_openat+0x12d/0x210 [ 846.401203][T14826] ? __pfx___x64_sys_openat+0x10/0x10 [ 846.401230][T14826] do_syscall_64+0x106/0xf80 [ 846.401250][T14826] ? clear_bhb_loop+0x40/0x90 [ 846.401269][T14826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.401284][T14826] RIP: 0033:0x7f12eed9c799 [ 846.401299][T14826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.401314][T14826] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 846.401329][T14826] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 846.401339][T14826] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 846.401348][T14826] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 846.401358][T14826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.401366][T14826] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 846.401386][T14826] [ 847.556666][T14858] [U] ^\ [ 847.773658][T14630] Bluetooth: hci0: command 0x0c1a tx timeout [ 848.252889][T14630] Bluetooth: hci1: command 0x0c1a tx timeout [ 848.349419][T14630] Bluetooth: hci2: command 0x0c1a tx timeout [ 848.355620][T14630] Bluetooth: hci3: command 0x0c1a tx timeout [ 849.948589][T14876] futex_wake_op: syz.0.1860 tries to shift op by -2048; fix this program [ 849.997364][T14879] 0x000000000001-0x000000020000 : "" [ 850.045685][T14879] ftl_cs: FTL header corrupt! [ 850.157679][T14876] misc userio: No port type given on /dev/userio [ 850.445999][T14882] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 851.428460][T14893] zswap: compressor not available [ 853.686017][T14919] FAULT_INJECTION: forcing a failure. [ 853.686017][T14919] name failslab, interval 1, probability 0, space 0, times 0 [ 853.782751][T14919] CPU: 0 UID: 0 PID: 14919 Comm: syz.3.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.782779][T14919] Tainted: [L]=SOFTLOCKUP [ 853.782785][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 853.782794][T14919] Call Trace: [ 853.782799][T14919] [ 853.782814][T14919] dump_stack_lvl+0x100/0x190 [ 853.782841][T14919] should_fail_ex.cold+0x5/0xa [ 853.782859][T14919] should_failslab+0xc2/0x120 [ 853.782875][T14919] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 853.782897][T14919] ? prepare_creds+0x2c/0x950 [ 853.782918][T14919] ? from_kuid_munged+0xaa/0x130 [ 853.782935][T14919] prepare_creds+0x2c/0x950 [ 853.782958][T14919] __sys_setfsuid+0xda/0x380 [ 853.782975][T14919] do_syscall_64+0x106/0xf80 [ 853.782995][T14919] ? clear_bhb_loop+0x40/0x90 [ 853.783013][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.783028][T14919] RIP: 0033:0x7f45d3b9c799 [ 853.783041][T14919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.783055][T14919] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 853.783070][T14919] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 853.783080][T14919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 853.783089][T14919] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 853.783097][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.783106][T14919] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 853.783124][T14919] [ 854.158063][T14930] futex_wake_op: syz.1.1869 tries to shift op by -2048; fix this program [ 854.166811][T14918] [U] ^@ [ 854.230512][T14930] futex_wake_op: syz.1.1869 tries to shift op by -2048; fix this program [ 855.189038][T14937] FAULT_INJECTION: forcing a failure. [ 855.189038][T14937] name failslab, interval 1, probability 0, space 0, times 0 [ 855.523930][T14937] CPU: 0 UID: 0 PID: 14937 Comm: syz.2.1871 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.523959][T14937] Tainted: [L]=SOFTLOCKUP [ 855.523965][T14937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.523974][T14937] Call Trace: [ 855.523980][T14937] [ 855.523986][T14937] dump_stack_lvl+0x100/0x190 [ 855.524013][T14937] should_fail_ex.cold+0x5/0xa [ 855.524032][T14937] should_failslab+0xc2/0x120 [ 855.524047][T14937] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 855.524071][T14937] ? __d_alloc+0x34/0xa80 [ 855.524091][T14937] __d_alloc+0x34/0xa80 [ 855.524110][T14937] d_alloc_pseudo+0x1c/0xc0 [ 855.524130][T14937] alloc_file_pseudo+0xcf/0x230 [ 855.524149][T14937] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 855.524167][T14937] ? alloc_fd+0x476/0x790 [ 855.524185][T14937] sock_alloc_file+0x50/0x210 [ 855.524207][T14937] __sys_socket+0x1c0/0x260 [ 855.524223][T14937] ? __pfx___sys_socket+0x10/0x10 [ 855.524245][T14937] __x64_sys_socket+0x72/0xb0 [ 855.524261][T14937] ? lockdep_hardirqs_on+0x78/0x100 [ 855.524282][T14937] do_syscall_64+0x106/0xf80 [ 855.524301][T14937] ? clear_bhb_loop+0x40/0x90 [ 855.524319][T14937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.524333][T14937] RIP: 0033:0x7f585f19c799 [ 855.524347][T14937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.524361][T14937] RSP: 002b:00007f585ffc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 855.524376][T14937] RAX: ffffffffffffffda RBX: 00007f585f415fa0 RCX: 00007f585f19c799 [ 855.524385][T14937] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028 [ 855.524393][T14937] RBP: 00007f585f232c99 R08: 0000000000000000 R09: 0000000000000000 [ 855.524402][T14937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.524410][T14937] R13: 00007f585f416038 R14: 00007f585f415fa0 R15: 00007ffcf4557bf8 [ 855.524430][T14937] [ 856.875207][T14961] mkiss: ax0: crc mode is auto. [ 857.783349][T14982] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 857.826507][T14982] pci 0000:00:01.3: PCI INT A: no GSI [ 858.645158][T14999] mkiss: ax0: crc mode is auto. [ 859.053001][T15008] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1883'. [ 861.225563][T15038] Process accounting resumed [ 861.470115][T15043] syz.0.1888 (15043): /proc/15041/oom_adj is deprecated, please use /proc/15041/oom_score_adj instead. [ 862.370165][T15065] FAULT_INJECTION: forcing a failure. [ 862.370165][T15065] name failslab, interval 1, probability 0, space 0, times 0 [ 862.500418][T15065] CPU: 0 UID: 0 PID: 15065 Comm: syz.3.1893 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.500445][T15065] Tainted: [L]=SOFTLOCKUP [ 862.500451][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.500460][T15065] Call Trace: [ 862.500465][T15065] [ 862.500472][T15065] dump_stack_lvl+0x100/0x190 [ 862.500499][T15065] should_fail_ex.cold+0x5/0xa [ 862.500517][T15065] ? tomoyo_realpath_from_path+0xb6/0x690 [ 862.500537][T15065] should_failslab+0xc2/0x120 [ 862.500553][T15065] __kmalloc_noprof+0xe0/0x850 [ 862.500579][T15065] tomoyo_realpath_from_path+0xb6/0x690 [ 862.500603][T15065] tomoyo_check_open_permission+0x2af/0x3c0 [ 862.500620][T15065] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 862.500654][T15065] ? lock_acquire+0x1cf/0x380 [ 862.500672][T15065] ? find_held_lock+0x2b/0x80 [ 862.500690][T15065] tomoyo_file_open+0x6b/0x90 [ 862.500712][T15065] security_file_open+0xb5/0x1e0 [ 862.500730][T15065] do_dentry_open+0x5aa/0x1660 [ 862.500750][T15065] vfs_open+0x82/0x3f0 [ 862.500770][T15065] path_openat+0x208c/0x31a0 [ 862.500792][T15065] ? __pfx_path_openat+0x10/0x10 [ 862.500814][T15065] do_file_open+0x20e/0x430 [ 862.500831][T15065] ? __pfx_do_file_open+0x10/0x10 [ 862.500859][T15065] ? alloc_fd+0x476/0x790 [ 862.500876][T15065] ? do_getname+0x191/0x390 [ 862.500895][T15065] do_sys_openat2+0x10d/0x1e0 [ 862.500914][T15065] ? __pfx_do_sys_openat2+0x10/0x10 [ 862.500940][T15065] __x64_sys_openat+0x12d/0x210 [ 862.500959][T15065] ? __pfx___x64_sys_openat+0x10/0x10 [ 862.500995][T15065] do_syscall_64+0x106/0xf80 [ 862.501016][T15065] ? clear_bhb_loop+0x40/0x90 [ 862.501034][T15065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.501050][T15065] RIP: 0033:0x7f45d3b9c799 [ 862.501062][T15065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.501082][T15065] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 862.501098][T15065] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 862.501108][T15065] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 862.501118][T15065] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 862.501127][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.501136][T15065] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 862.501156][T15065] [ 862.501163][T15065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 862.880872][T15073] FAULT_INJECTION: forcing a failure. [ 862.880872][T15073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.963376][T15073] CPU: 0 UID: 0 PID: 15073 Comm: syz.0.1896 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.963404][T15073] Tainted: [L]=SOFTLOCKUP [ 862.963410][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.963420][T15073] Call Trace: [ 862.963425][T15073] [ 862.963431][T15073] dump_stack_lvl+0x100/0x190 [ 862.963458][T15073] should_fail_ex.cold+0x5/0xa [ 862.963477][T15073] _copy_from_user+0x2e/0xd0 [ 862.963495][T15073] copy_mount_options+0x76/0x190 [ 862.963518][T15073] __x64_sys_mount+0x1ab/0x310 [ 862.963537][T15073] ? __pfx___x64_sys_mount+0x10/0x10 [ 862.963560][T15073] do_syscall_64+0x106/0xf80 [ 862.963580][T15073] ? clear_bhb_loop+0x40/0x90 [ 862.963598][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.963612][T15073] RIP: 0033:0x7f12eed9c799 [ 862.963626][T15073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.963640][T15073] RSP: 002b:00007f12efc77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 862.963655][T15073] RAX: ffffffffffffffda RBX: 00007f12ef016090 RCX: 00007f12eed9c799 [ 862.963664][T15073] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000200000000180 [ 862.963674][T15073] RBP: 00007f12eee32c99 R08: 0000200000000280 R09: 0000000000000000 [ 862.963682][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.963691][T15073] R13: 00007f12ef016128 R14: 00007f12ef016090 R15: 00007ffca619e8e8 [ 862.963710][T15073] [ 866.780148][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1913'. [ 867.294272][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 868.289189][T15165] FAULT_INJECTION: forcing a failure. [ 868.289189][T15165] name fail_futex, interval 1, probability 0, space 0, times 0 [ 868.401818][T15165] CPU: 0 UID: 0 PID: 15165 Comm: syz.0.1918 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.401844][T15165] Tainted: [L]=SOFTLOCKUP [ 868.401849][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.401858][T15165] Call Trace: [ 868.401863][T15165] [ 868.401869][T15165] dump_stack_lvl+0x100/0x190 [ 868.401893][T15165] should_fail_ex.cold+0x5/0xa [ 868.401907][T15165] ? rcu_is_watching+0x12/0xc0 [ 868.401930][T15165] get_futex_key+0x295/0x1620 [ 868.401949][T15165] ? __pfx_get_futex_key+0x10/0x10 [ 868.401964][T15165] ? lock_acquire+0x1cf/0x380 [ 868.401987][T15165] futex_wake+0xea/0x530 [ 868.402009][T15165] ? __pfx_futex_wake+0x10/0x10 [ 868.402029][T15165] ? exit_mm_release+0x19/0x30 [ 868.402051][T15165] do_futex+0x32b/0x350 [ 868.402069][T15165] ? __pfx_do_futex+0x10/0x10 [ 868.402084][T15165] ? __might_fault+0xc5/0x140 [ 868.402109][T15165] mm_release+0x24a/0x2f0 [ 868.402123][T15165] do_exit+0x704/0x2b60 [ 868.402144][T15165] ? __pfx_do_exit+0x10/0x10 [ 868.402161][T15165] ? do_raw_spin_lock+0x128/0x260 [ 868.402180][T15165] ? find_held_lock+0x2b/0x80 [ 868.402192][T15165] ? get_signal+0x7e0/0x21e0 [ 868.402209][T15165] do_group_exit+0xd5/0x2a0 [ 868.402228][T15165] get_signal+0x1ec7/0x21e0 [ 868.402249][T15165] ? __pfx_get_signal+0x10/0x10 [ 868.402265][T15165] ? do_futex+0x192/0x350 [ 868.402284][T15165] arch_do_signal_or_restart+0x91/0x770 [ 868.402301][T15165] ? find_held_lock+0x2b/0x80 [ 868.402314][T15165] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 868.402336][T15165] ? __pfx___x64_sys_futex+0x10/0x10 [ 868.402358][T15165] exit_to_user_mode_loop+0x86/0x4a0 [ 868.402378][T15165] do_syscall_64+0x668/0xf80 [ 868.402397][T15165] ? clear_bhb_loop+0x40/0x90 [ 868.402414][T15165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.402429][T15165] RIP: 0033:0x7f12eed9c799 [ 868.402441][T15165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.402454][T15165] RSP: 002b:00007f12efc350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 868.402469][T15165] RAX: fffffffffffffe00 RBX: 00007f12ef016278 RCX: 00007f12eed9c799 [ 868.402484][T15165] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f12ef016278 [ 868.402492][T15165] RBP: 00007f12ef016270 R08: 0000000000000000 R09: 0000000000000000 [ 868.402501][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.402509][T15165] R13: 00007f12ef016308 R14: 00007ffca619e800 R15: 00007ffca619e8e8 [ 868.402527][T15165] [ 869.137097][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 869.321514][T15182] can: request_module (can-proto-4) failed. [ 870.270013][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.277068][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.020223][T15226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1931'. [ 873.363402][T15231] [U] hpfs [ 873.366468][T15231] [U] [ 873.369141][T15231] [U] [ 873.371811][T15231] [U] [ 873.479448][T15231] [U] [ 873.482163][T15231] [U] [ 873.484837][T15231] [U] [ 873.487507][T15231] [U] [ 873.643589][T15231] [U] [ 873.646296][T15231] [U] [ 873.648969][T15231] [U] [ 873.651637][T15231] [U] [ 873.854523][T15231] [U] [ 873.857245][T15231] [U] [ 873.859924][T15231] [U] [ 873.862592][T15231] [U] [ 874.044579][T15231] [U] [ 874.047303][T15231] [U] [ 874.049975][T15231] [U] [ 874.052643][T15231] [U] [ 874.175054][T15231] [U] [ 874.177776][T15231] [U] [ 874.180445][T15231] [U] [ 874.183112][T15231] [U] [ 874.301089][T15231] [U] [ 874.303804][T15231] [U] [ 874.306478][T15231] [U] [ 874.309155][T15231] [U] [ 874.394606][T15231] [U] [ 878.576169][T15286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 878.607445][T15286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 878.613550][T15286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 878.705222][T15286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 878.963294][ T29] audit: type=1800 audit(1773998185.759:25): pid=15298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1945" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 880.506915][T12388] Bluetooth: hci0: command 0x0c1a tx timeout [ 880.664815][T12388] Bluetooth: hci3: command 0x0c1a tx timeout [ 880.670897][T14630] Bluetooth: hci1: command 0x0c1a tx timeout [ 880.765121][T12388] Bluetooth: hci2: command 0x0c1a tx timeout [ 880.854317][T15321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 880.994364][T15321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 881.075731][T15321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 881.081754][T15321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 882.907059][T14630] Bluetooth: hci0: command 0x0c1a tx timeout [ 883.070207][T14630] Bluetooth: hci1: command 0x0c1a tx timeout [ 883.148023][T14630] Bluetooth: hci2: command 0x0c1a tx timeout [ 883.154186][T12388] Bluetooth: hci3: command 0x0c1a tx timeout [ 883.552712][T15337] HfR: entered promiscuous mode [ 883.592971][T15338] openvswitch: HfR: Dropping previously announced user features [ 884.864290][T15361] Invalid ELF header magic: != ELF [ 885.065869][T15367] netlink: 'syz.2.1955': attribute type 11 has an invalid length. [ 886.026109][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'. [ 886.100160][T15379] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1960'. [ 886.525221][T14630] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18 [ 888.041098][T15403] Invalid ELF header magic: != ELF [ 889.883074][T15416] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1968'. [ 890.267974][T15416] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1968'. [ 890.297050][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 890.347652][T15419] unsupported nlmsg_type 40 [ 890.640945][T15421] FAULT_INJECTION: forcing a failure. [ 890.640945][T15421] name failslab, interval 1, probability 0, space 0, times 0 [ 890.708696][T15421] CPU: 0 UID: 0 PID: 15421 Comm: syz.0.1970 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.708722][T15421] Tainted: [L]=SOFTLOCKUP [ 890.708728][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.708738][T15421] Call Trace: [ 890.708743][T15421] [ 890.708751][T15421] dump_stack_lvl+0x100/0x190 [ 890.708777][T15421] should_fail_ex.cold+0x5/0xa [ 890.708795][T15421] should_failslab+0xc2/0x120 [ 890.708812][T15421] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 890.708834][T15421] ? __d_alloc+0x34/0xa80 [ 890.708854][T15421] __d_alloc+0x34/0xa80 [ 890.708871][T15421] d_alloc_pseudo+0x1c/0xc0 [ 890.708891][T15421] alloc_file_pseudo+0xcf/0x230 [ 890.708911][T15421] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 890.708930][T15421] ? __lock_acquire+0x4a5/0x2630 [ 890.708951][T15421] __shmem_file_setup+0x221/0x490 [ 890.708972][T15421] ? __pfx___shmem_file_setup+0x10/0x10 [ 890.708992][T15421] ? do_raw_spin_lock+0x128/0x260 [ 890.709012][T15421] ? find_held_lock+0x2b/0x80 [ 890.709025][T15421] ? alloc_fd+0x476/0x790 [ 890.709038][T15421] ? alloc_fd+0x476/0x790 [ 890.709053][T15421] memfd_alloc_file+0x247/0x620 [ 890.709072][T15421] ? _raw_spin_unlock+0x28/0x50 [ 890.709090][T15421] ? __pfx_memfd_alloc_file+0x10/0x10 [ 890.709114][T15421] __do_sys_memfd_create+0x236/0x3d0 [ 890.709135][T15421] do_syscall_64+0x106/0xf80 [ 890.709156][T15421] ? clear_bhb_loop+0x40/0x90 [ 890.709173][T15421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.709189][T15421] RIP: 0033:0x7f12eed9c799 [ 890.709202][T15421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.709216][T15421] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 890.709231][T15421] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 890.709241][T15421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 890.709249][T15421] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 890.709258][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.709267][T15421] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 890.709286][T15421] [ 893.798521][T15388] Process accounting paused [ 894.501700][T15458] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 894.817124][T15453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 894.877209][T15453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 894.883226][T15453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 894.969616][T15453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 895.001818][T15467] FAULT_INJECTION: forcing a failure. [ 895.001818][T15467] name failslab, interval 1, probability 0, space 0, times 0 [ 895.084801][T15467] CPU: 0 UID: 0 PID: 15467 Comm: syz.3.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.084828][T15467] Tainted: [L]=SOFTLOCKUP [ 895.084834][T15467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.084844][T15467] Call Trace: [ 895.084849][T15467] [ 895.084856][T15467] dump_stack_lvl+0x100/0x190 [ 895.084884][T15467] should_fail_ex.cold+0x5/0xa [ 895.084901][T15467] ? __register_sysctl_table+0xbe4/0x1650 [ 895.084924][T15467] should_failslab+0xc2/0x120 [ 895.084948][T15467] __kmalloc_noprof+0xe0/0x850 [ 895.084975][T15467] __register_sysctl_table+0xbe4/0x1650 [ 895.085004][T15467] ? __pfx___register_sysctl_table+0x10/0x10 [ 895.085025][T15467] ? __pfx_rcu_is_watching+0x1/0x10 [ 895.085049][T15467] ? __asan_memcpy+0x3c/0x60 [ 895.085070][T15467] register_pidns_sysctls+0x11d/0x1c0 [ 895.085090][T15467] ? __ns_common_init+0x299/0x4b0 [ 895.085109][T15467] copy_pid_ns+0x680/0x10a0 [ 895.085126][T15467] ? __pfx_copy_pid_ns+0x10/0x10 [ 895.085149][T15467] ? rcu_is_watching+0x12/0xc0 [ 895.085175][T15467] ? copy_mnt_ns+0x106/0xc30 [ 895.085192][T15467] ? create_new_namespaces+0x30/0xac0 [ 895.085210][T15467] create_new_namespaces+0x2aa/0xac0 [ 895.085230][T15467] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 895.085247][T15467] ksys_unshare+0x473/0xad0 [ 895.085267][T15467] ? __pfx_ksys_unshare+0x10/0x10 [ 895.085291][T15467] __x64_sys_unshare+0x31/0x40 [ 895.085309][T15467] do_syscall_64+0x106/0xf80 [ 895.085329][T15467] ? clear_bhb_loop+0x40/0x90 [ 895.085347][T15467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.085363][T15467] RIP: 0033:0x7f45d3b9c799 [ 895.085376][T15467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.085391][T15467] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 895.085405][T15467] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 895.085415][T15467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 895.085424][T15467] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 895.085433][T15467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.085442][T15467] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 895.085462][T15467] [ 895.085469][T15467] sysctl could not get directory: /kernel -12 [ 896.141352][T12388] Bluetooth: hci0: command 0x0c1a tx timeout [ 896.904625][T12388] Bluetooth: hci3: command 0x0c1a tx timeout [ 896.910691][T14630] Bluetooth: hci1: command 0x0c1a tx timeout [ 896.985572][T12388] Bluetooth: hci2: command 0x0c1a tx timeout [ 897.986785][T15500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 898.385693][T15506] FAULT_INJECTION: forcing a failure. [ 898.385693][T15506] name failslab, interval 1, probability 0, space 0, times 0 [ 898.488025][T15506] CPU: 0 UID: 0 PID: 15506 Comm: syz.2.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.488052][T15506] Tainted: [L]=SOFTLOCKUP [ 898.488058][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.488067][T15506] Call Trace: [ 898.488073][T15506] [ 898.488079][T15506] dump_stack_lvl+0x100/0x190 [ 898.488110][T15506] should_fail_ex.cold+0x5/0xa [ 898.488129][T15506] should_failslab+0xc2/0x120 [ 898.488147][T15506] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 898.488183][T15506] ? __d_alloc+0x34/0xa80 [ 898.488205][T15506] __d_alloc+0x34/0xa80 [ 898.488224][T15506] d_alloc_pseudo+0x1c/0xc0 [ 898.488249][T15506] alloc_file_pseudo+0xcf/0x230 [ 898.488272][T15506] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 898.488294][T15506] ? __lock_acquire+0x4a5/0x2630 [ 898.488318][T15506] __shmem_file_setup+0x221/0x490 [ 898.488342][T15506] ? __pfx___shmem_file_setup+0x10/0x10 [ 898.488366][T15506] ? do_raw_spin_lock+0x128/0x260 [ 898.488390][T15506] ? find_held_lock+0x2b/0x80 [ 898.488405][T15506] ? alloc_fd+0x476/0x790 [ 898.488419][T15506] ? alloc_fd+0x476/0x790 [ 898.488435][T15506] memfd_alloc_file+0x247/0x620 [ 898.488459][T15506] ? _raw_spin_unlock+0x28/0x50 [ 898.488480][T15506] ? __pfx_memfd_alloc_file+0x10/0x10 [ 898.488508][T15506] __do_sys_memfd_create+0x236/0x3d0 [ 898.488533][T15506] do_syscall_64+0x106/0xf80 [ 898.488558][T15506] ? clear_bhb_loop+0x40/0x90 [ 898.488578][T15506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.488595][T15506] RIP: 0033:0x7f585f19c799 [ 898.488608][T15506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.488623][T15506] RSP: 002b:00007f585ffc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 898.488645][T15506] RAX: ffffffffffffffda RBX: 00007f585f415fa0 RCX: 00007f585f19c799 [ 898.488656][T15506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 898.488665][T15506] RBP: 00007f585f232c99 R08: 0000000000000000 R09: 0000000000000000 [ 898.488674][T15506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.488684][T15506] R13: 00007f585f416038 R14: 00007f585f415fa0 R15: 00007ffcf4557bf8 [ 898.488703][T15506] [ 900.366104][T12388] block nbd0: Receive control failed (result -32) [ 900.626279][T15519] zswap: compressor not available [ 901.966927][T15551] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 902.467374][T15555] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 903.363428][T15580] random: crng reseeded on system resumption [ 906.051744][T15619] zswap: compressor not available [ 911.568571][T15731] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 913.424548][T15767] netlink: 'syz.1.2039': attribute type 4 has an invalid length. [ 913.510004][T15767] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 914.745807][T15784] ubi3: attaching mtd1 [ 914.763601][T15784] ubi3 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585) [ 916.801741][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2049'. [ 922.343878][T15871] tc_dump_action: action bad kind [ 923.029046][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'. [ 923.560787][T15877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 923.582824][T15877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 923.625348][T15877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 923.674293][T15877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 923.718121][T15889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 924.173443][T15893] serio: Serial port pty6 [ 924.417921][T15893] Process accounting resumed [ 925.156795][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2074'. [ 925.225626][T12388] Bluetooth: hci0: command 0x0c1a tx timeout [ 925.626375][T12388] Bluetooth: hci1: command 0x0c1a tx timeout [ 925.704669][T12388] Bluetooth: hci2: command 0x0c1a tx timeout [ 925.710697][T12388] Bluetooth: hci3: command 0x0c1a tx timeout [ 926.374493][T15934] Invalid ELF header magic: != ELF [ 928.787853][T15969] FAULT_INJECTION: forcing a failure. [ 928.787853][T15969] name failslab, interval 1, probability 0, space 0, times 0 [ 928.915439][T15969] CPU: 0 UID: 0 PID: 15969 Comm: syz.0.2083 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.915468][T15969] Tainted: [L]=SOFTLOCKUP [ 928.915473][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 928.915483][T15969] Call Trace: [ 928.915488][T15969] [ 928.915495][T15969] dump_stack_lvl+0x100/0x190 [ 928.915523][T15969] should_fail_ex.cold+0x5/0xa [ 928.915542][T15969] should_failslab+0xc2/0x120 [ 928.915558][T15969] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 928.915580][T15969] ? seq_open+0x55/0x170 [ 928.915602][T15969] seq_open+0x55/0x170 [ 928.915621][T15969] do_dentry_open+0x6d8/0x1660 [ 928.915635][T15969] ? __pfx_children_seq_open+0x10/0x10 [ 928.915657][T15969] vfs_open+0x82/0x3f0 [ 928.915677][T15969] path_openat+0x208c/0x31a0 [ 928.915708][T15969] ? __pfx_path_openat+0x10/0x10 [ 928.915732][T15969] do_file_open+0x20e/0x430 [ 928.915749][T15969] ? __pfx_do_file_open+0x10/0x10 [ 928.915771][T15969] ? __pfx_kfree_link+0x10/0x10 [ 928.915797][T15969] ? alloc_fd+0x476/0x790 [ 928.915814][T15969] ? do_getname+0x191/0x390 [ 928.915834][T15969] do_sys_openat2+0x10d/0x1e0 [ 928.915852][T15969] ? __pfx_do_sys_openat2+0x10/0x10 [ 928.915878][T15969] __x64_sys_openat+0x12d/0x210 [ 928.915897][T15969] ? __pfx___x64_sys_openat+0x10/0x10 [ 928.915923][T15969] do_syscall_64+0x106/0xf80 [ 928.915943][T15969] ? clear_bhb_loop+0x40/0x90 [ 928.915965][T15969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.915981][T15969] RIP: 0033:0x7f12eed9c799 [ 928.915994][T15969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.916008][T15969] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 928.916024][T15969] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 928.916034][T15969] RDX: 0000000000082000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 928.916043][T15969] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 928.916052][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.916061][T15969] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 928.916081][T15969] [ 929.550145][T12388] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 930.288171][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 930.398821][T15986] nbd: must specify at least one socket [ 931.338233][T16003] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input22 [ 931.719149][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.744261][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.486736][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 933.667019][T16049] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 935.051629][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 935.116758][T16042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 935.205554][T16042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 935.211581][T16042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 935.291923][T16042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 935.626255][T14630] Bluetooth: hci0: command 0x0c1a tx timeout [ 937.224315][T14630] Bluetooth: hci3: command 0x0c1a tx timeout [ 937.230338][T14630] Bluetooth: hci1: command 0x0c1a tx timeout [ 937.304292][T14630] Bluetooth: hci2: command 0x0c1a tx timeout [ 938.020686][T12375] netdevsim netdevsim1336 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.858654][T16204] FAULT_INJECTION: forcing a failure. [ 942.858654][T16204] name failslab, interval 1, probability 0, space 0, times 0 [ 943.026573][T16204] CPU: 0 UID: 0 PID: 16204 Comm: syz.0.2132 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.026601][T16204] Tainted: [L]=SOFTLOCKUP [ 943.026607][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.026617][T16204] Call Trace: [ 943.026622][T16204] [ 943.026630][T16204] dump_stack_lvl+0x100/0x190 [ 943.026658][T16204] should_fail_ex.cold+0x5/0xa [ 943.026676][T16204] should_failslab+0xc2/0x120 [ 943.026693][T16204] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 943.026715][T16204] ? __proc_create+0x2cb/0x8c0 [ 943.026741][T16204] __proc_create+0x2cb/0x8c0 [ 943.026764][T16204] ? __pfx___proc_create+0x10/0x10 [ 943.026789][T16204] ? _raw_write_unlock+0x28/0x50 [ 943.026809][T16204] ? proc_register+0x559/0x8a0 [ 943.026825][T16204] proc_create_reg+0x75/0x170 [ 943.026841][T16204] proc_create_net_data+0x8e/0x1c0 [ 943.026856][T16204] ? __pfx_proc_create_net_data+0x10/0x10 [ 943.026870][T16204] ? sctp_defaults_init+0x720/0xd90 [ 943.026895][T16204] sctp_proc_init+0xfb/0x270 [ 943.026915][T16204] ? __pfx_sctp_defaults_init+0x10/0x10 [ 943.026935][T16204] sctp_defaults_init+0x758/0xd90 [ 943.026956][T16204] ? __pfx_sctp_defaults_init+0x10/0x10 [ 943.026976][T16204] ops_init+0x1e2/0x5f0 [ 943.026999][T16204] setup_net+0x118/0x3a0 [ 943.027021][T16204] ? __pfx_setup_net+0x10/0x10 [ 943.027040][T16204] ? lockdep_init_map_type+0x5c/0x250 [ 943.027061][T16204] ? mutex_init_lockep+0x110/0x150 [ 943.027083][T16204] copy_net_ns+0x46f/0x7c0 [ 943.027099][T16204] create_new_namespaces+0x3ea/0xac0 [ 943.027120][T16204] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 943.027138][T16204] ksys_unshare+0x473/0xad0 [ 943.027157][T16204] ? __pfx_ksys_unshare+0x10/0x10 [ 943.027182][T16204] __x64_sys_unshare+0x31/0x40 [ 943.027199][T16204] do_syscall_64+0x106/0xf80 [ 943.027219][T16204] ? clear_bhb_loop+0x40/0x90 [ 943.027237][T16204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.027252][T16204] RIP: 0033:0x7f12eed9c799 [ 943.027266][T16204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.027281][T16204] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 943.027296][T16204] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 943.027306][T16204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 943.027314][T16204] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 943.027323][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.027332][T16204] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 943.027352][T16204] [ 949.027382][T16295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 949.033521][T16295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 949.099460][T16295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 949.155346][T16295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 951.064588][T14630] Bluetooth: hci0: command 0x0c1a tx timeout [ 951.070776][T12388] Bluetooth: hci1: command 0x0c1a tx timeout [ 951.144753][T12388] Bluetooth: hci3: command 0x0c1a tx timeout [ 951.224618][T12388] Bluetooth: hci2: command 0x0c1a tx timeout [ 951.358672][T16353] vmstat_refresh: nr_hugetlb -25088 [ 952.503787][T16380] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.3.2169: 7 [ 952.989553][T16390] binder: 16389:16390 ioctl 4068aea3 200000000080 returned -22 [ 953.047621][T16390] binder: 16389:16390 ioctl 40045613 0 returned -22 [ 953.391199][T16408] FAULT_INJECTION: forcing a failure. [ 953.391199][T16408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.473170][T16408] CPU: 0 UID: 0 PID: 16408 Comm: syz.0.2177 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.473196][T16408] Tainted: [L]=SOFTLOCKUP [ 953.473201][T16408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 953.473210][T16408] Call Trace: [ 953.473215][T16408] [ 953.473222][T16408] dump_stack_lvl+0x100/0x190 [ 953.473248][T16408] should_fail_ex.cold+0x5/0xa [ 953.473265][T16408] _copy_to_user+0x32/0xd0 [ 953.473284][T16408] simple_read_from_buffer+0xcb/0x170 [ 953.473306][T16408] proc_fail_nth_read+0x1af/0x230 [ 953.473326][T16408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 953.473350][T16408] ? rw_verify_area+0xce/0x6d0 [ 953.473369][T16408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 953.473386][T16408] vfs_read+0x1e4/0xb30 [ 953.473409][T16408] ? __pfx_vfs_read+0x10/0x10 [ 953.473429][T16408] ? __fget_files+0x215/0x3d0 [ 953.473447][T16408] ? __fget_files+0x21f/0x3d0 [ 953.473465][T16408] ksys_read+0x12a/0x250 [ 953.473477][T16408] ? __pfx_ksys_read+0x10/0x10 [ 953.473496][T16408] do_syscall_64+0x106/0xf80 [ 953.473516][T16408] ? clear_bhb_loop+0x40/0x90 [ 953.473533][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.473548][T16408] RIP: 0033:0x7f12eed5cfce [ 953.473560][T16408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 953.473574][T16408] RSP: 002b:00007f12efc97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 953.473588][T16408] RAX: ffffffffffffffda RBX: 00007f12efc986c0 RCX: 00007f12eed5cfce [ 953.473597][T16408] RDX: 000000000000000f RSI: 00007f12efc980a0 RDI: 0000000000000006 [ 953.473606][T16408] RBP: 00007f12efc98090 R08: 0000000000000000 R09: 0000000000000000 [ 953.473614][T16408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.473622][T16408] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 953.473640][T16408] [ 954.376263][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 954.600242][T16418] zswap: compressor not available [ 955.911825][T16417] Process accounting paused [ 956.205382][T16459] futex_wake_op: syz.1.2189 tries to shift op by -2048; fix this program [ 956.213906][T16459] futex_wake_op: syz.1.2189 tries to shift op by -2048; fix this program [ 956.347868][T16463] 0x000000000001-0x000000020000 : "" [ 956.439139][T16463] ftl_cs: FTL header corrupt! [ 957.561347][T16489] FAULT_INJECTION: forcing a failure. [ 957.561347][T16489] name failslab, interval 1, probability 0, space 0, times 0 [ 957.677221][T16489] CPU: 0 UID: 0 PID: 16489 Comm: syz.3.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.677247][T16489] Tainted: [L]=SOFTLOCKUP [ 957.677252][T16489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 957.677261][T16489] Call Trace: [ 957.677266][T16489] [ 957.677271][T16489] dump_stack_lvl+0x100/0x190 [ 957.677296][T16489] should_fail_ex.cold+0x5/0xa [ 957.677313][T16489] ? sk_prot_alloc+0x10b/0x2a0 [ 957.677326][T16489] should_failslab+0xc2/0x120 [ 957.677341][T16489] __kmalloc_noprof+0xe0/0x850 [ 957.677365][T16489] sk_prot_alloc+0x10b/0x2a0 [ 957.677381][T16489] sk_alloc+0x36/0xe80 [ 957.677399][T16489] __netlink_create+0x5e/0x2c0 [ 957.677417][T16489] ? __wake_up+0x3f/0x60 [ 957.677433][T16489] netlink_create+0x293/0x610 [ 957.677451][T16489] ? __pfx_genl_bind+0x10/0x10 [ 957.677463][T16489] ? __pfx_genl_unbind+0x10/0x10 [ 957.677475][T16489] ? __pfx_genl_release+0x10/0x10 [ 957.677490][T16489] __sock_create+0x339/0x860 [ 957.677509][T16489] __sys_socket+0x14d/0x260 [ 957.677525][T16489] ? __pfx___sys_socket+0x10/0x10 [ 957.677546][T16489] __x64_sys_socket+0x72/0xb0 [ 957.677560][T16489] ? lockdep_hardirqs_on+0x78/0x100 [ 957.677580][T16489] do_syscall_64+0x106/0xf80 [ 957.677599][T16489] ? clear_bhb_loop+0x40/0x90 [ 957.677616][T16489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.677631][T16489] RIP: 0033:0x7f45d3b9c799 [ 957.677643][T16489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.677657][T16489] RSP: 002b:00007f45d4a0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 957.677674][T16489] RAX: ffffffffffffffda RBX: 00007f45d3e16090 RCX: 00007f45d3b9c799 [ 957.677684][T16489] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 957.677692][T16489] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 957.677700][T16489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.677708][T16489] R13: 00007f45d3e16128 R14: 00007f45d3e16090 R15: 00007fff4e77b518 [ 957.677726][T16489] [ 958.363383][T16504] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 959.026034][T16504] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 960.544436][T16543] block2mtd: parameter too long [ 960.608993][T12388] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 960.870173][T16550] FAULT_INJECTION: forcing a failure. [ 960.870173][T16550] name failslab, interval 1, probability 0, space 0, times 0 [ 961.047219][T16550] CPU: 0 UID: 0 PID: 16550 Comm: syz.0.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.047246][T16550] Tainted: [L]=SOFTLOCKUP [ 961.047251][T16550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 961.047261][T16550] Call Trace: [ 961.047266][T16550] [ 961.047272][T16550] dump_stack_lvl+0x100/0x190 [ 961.047298][T16550] should_fail_ex.cold+0x5/0xa [ 961.047317][T16550] should_failslab+0xc2/0x120 [ 961.047333][T16550] __kvmalloc_node_noprof+0xfa/0xa00 [ 961.047355][T16550] ? seq_read_iter+0x819/0x1270 [ 961.047385][T16550] seq_read_iter+0x819/0x1270 [ 961.047408][T16550] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 961.047436][T16550] kernfs_fop_read_iter+0x46c/0x610 [ 961.047457][T16550] copy_splice_read+0x4ba/0xb90 [ 961.047477][T16550] ? __pfx_copy_splice_read+0x10/0x10 [ 961.047510][T16550] ? look_up_lock_class+0x55/0x120 [ 961.047535][T16550] ? lockdep_init_map_type+0x5c/0x250 [ 961.047556][T16550] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 961.047579][T16550] ? __pfx_copy_splice_read+0x10/0x10 [ 961.047593][T16550] do_splice_read+0x285/0x370 [ 961.047617][T16550] splice_direct_to_actor+0x2a1/0xa30 [ 961.047634][T16550] ? __pfx_direct_splice_actor+0x10/0x10 [ 961.047652][T16550] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 961.047673][T16550] do_splice_direct+0x174/0x240 [ 961.047689][T16550] ? __pfx_do_splice_direct+0x10/0x10 [ 961.047706][T16550] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 961.047732][T16550] ? rw_verify_area+0xce/0x6d0 [ 961.047756][T16550] do_sendfile+0xadc/0xe20 [ 961.047782][T16550] ? __pfx_do_sendfile+0x10/0x10 [ 961.047801][T16550] ? apparmor_capable+0x1d7/0x4d0 [ 961.047819][T16550] ? __x64_sys_futex+0x34f/0x4d0 [ 961.047838][T16550] ? __x64_sys_futex+0x358/0x4d0 [ 961.047858][T16550] __x64_sys_sendfile64+0x1d8/0x220 [ 961.047876][T16550] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 961.047899][T16550] do_syscall_64+0x106/0xf80 [ 961.047918][T16550] ? clear_bhb_loop+0x40/0x90 [ 961.047936][T16550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.047951][T16550] RIP: 0033:0x7f12eed9c799 [ 961.047966][T16550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.047980][T16550] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 961.047995][T16550] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 961.048006][T16550] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 961.048014][T16550] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 961.048023][T16550] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 961.048032][T16550] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 961.048053][T16550] [ 963.399508][T16572] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 964.118707][T16591] bond0: no command found in slaves file - use +ifname or -ifname [ 966.785403][T16615] FAULT_INJECTION: forcing a failure. [ 966.785403][T16615] name failslab, interval 1, probability 0, space 0, times 0 [ 966.890134][T16615] CPU: 0 UID: 0 PID: 16615 Comm: syz.0.2226 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.890161][T16615] Tainted: [L]=SOFTLOCKUP [ 966.890167][T16615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.890177][T16615] Call Trace: [ 966.890182][T16615] [ 966.890188][T16615] dump_stack_lvl+0x100/0x190 [ 966.890215][T16615] should_fail_ex.cold+0x5/0xa [ 966.890234][T16615] should_failslab+0xc2/0x120 [ 966.890250][T16615] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 966.890271][T16615] ? sock_alloc_inode+0x25/0x1c0 [ 966.890288][T16615] ? __pfx_sock_alloc_inode+0x10/0x10 [ 966.890312][T16615] sock_alloc_inode+0x25/0x1c0 [ 966.890325][T16615] alloc_inode+0x68/0x250 [ 966.890346][T16615] sock_alloc+0x44/0x280 [ 966.890367][T16615] ? security_socket_create+0x7f/0x250 [ 966.890392][T16615] __sock_create+0xc2/0x860 [ 966.890411][T16615] __sys_socket+0x14d/0x260 [ 966.890427][T16615] ? __pfx___sys_socket+0x10/0x10 [ 966.890448][T16615] __x64_sys_socket+0x72/0xb0 [ 966.890464][T16615] ? lockdep_hardirqs_on+0x78/0x100 [ 966.890484][T16615] do_syscall_64+0x106/0xf80 [ 966.890503][T16615] ? clear_bhb_loop+0x40/0x90 [ 966.890521][T16615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.890536][T16615] RIP: 0033:0x7f12eed9c799 [ 966.890549][T16615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.890563][T16615] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 966.890578][T16615] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 966.890588][T16615] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 966.890596][T16615] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 966.890605][T16615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.890613][T16615] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 966.890637][T16615] [ 966.890646][T16615] socket: no more sockets [ 969.405822][T16649] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 971.368901][ T29] audit: type=1804 audit(1774016622.169:26): pid=16690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2240" name="/newroot/558/file0" dev="tmpfs" ino=2905 res=1 errno=0 [ 971.526048][ T29] audit: type=1804 audit(1774016622.229:27): pid=16692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2240" name="/newroot/558/file0" dev="tmpfs" ino=2905 res=1 errno=0 [ 973.111107][T16719] Invalid ELF header magic: != ELF [ 973.299755][T16721] zswap: compressor not available [ 979.979167][T16806] FAULT_INJECTION: forcing a failure. [ 979.979167][T16806] name failslab, interval 1, probability 0, space 0, times 0 [ 980.049993][T16806] CPU: 0 UID: 0 PID: 16806 Comm: syz.0.2268 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.050020][T16806] Tainted: [L]=SOFTLOCKUP [ 980.050026][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.050035][T16806] Call Trace: [ 980.050041][T16806] [ 980.050047][T16806] dump_stack_lvl+0x100/0x190 [ 980.050083][T16806] should_fail_ex.cold+0x5/0xa [ 980.050101][T16806] should_failslab+0xc2/0x120 [ 980.050117][T16806] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 980.050139][T16806] ? seq_open+0x55/0x170 [ 980.050161][T16806] seq_open+0x55/0x170 [ 980.050179][T16806] do_dentry_open+0x6d8/0x1660 [ 980.050194][T16806] ? __pfx_children_seq_open+0x10/0x10 [ 980.050216][T16806] vfs_open+0x82/0x3f0 [ 980.050236][T16806] path_openat+0x208c/0x31a0 [ 980.050257][T16806] ? __pfx_path_openat+0x10/0x10 [ 980.050280][T16806] do_file_open+0x20e/0x430 [ 980.050297][T16806] ? __pfx_do_file_open+0x10/0x10 [ 980.050319][T16806] ? __pfx_kfree_link+0x10/0x10 [ 980.050345][T16806] ? alloc_fd+0x476/0x790 [ 980.050361][T16806] ? do_getname+0x191/0x390 [ 980.050380][T16806] do_sys_openat2+0x10d/0x1e0 [ 980.050399][T16806] ? __pfx_do_sys_openat2+0x10/0x10 [ 980.050424][T16806] __x64_sys_openat+0x12d/0x210 [ 980.050444][T16806] ? __pfx___x64_sys_openat+0x10/0x10 [ 980.050470][T16806] do_syscall_64+0x106/0xf80 [ 980.050490][T16806] ? clear_bhb_loop+0x40/0x90 [ 980.050508][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.050524][T16806] RIP: 0033:0x7f12eed9c799 [ 980.050536][T16806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.050551][T16806] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 980.050565][T16806] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 980.050575][T16806] RDX: 0000000000082000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 980.050585][T16806] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 980.050594][T16806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.050603][T16806] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 980.050622][T16806] [ 981.376668][T16825] FAULT_INJECTION: forcing a failure. [ 981.376668][T16825] name fail_futex, interval 1, probability 0, space 0, times 0 [ 981.516926][T16825] CPU: 0 UID: 0 PID: 16825 Comm: syz.0.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.516951][T16825] Tainted: [L]=SOFTLOCKUP [ 981.516956][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.516965][T16825] Call Trace: [ 981.516970][T16825] [ 981.516976][T16825] dump_stack_lvl+0x100/0x190 [ 981.517001][T16825] should_fail_ex.cold+0x5/0xa [ 981.517018][T16825] get_futex_key+0x1d2/0x1620 [ 981.517038][T16825] ? __pfx_get_futex_key+0x10/0x10 [ 981.517061][T16825] futex_wake+0xea/0x530 [ 981.517082][T16825] ? __pfx_futex_wake+0x10/0x10 [ 981.517104][T16825] ? putname+0xb1/0x110 [ 981.517118][T16825] ? kmem_cache_free+0x124/0x6a0 [ 981.517140][T16825] do_futex+0x32b/0x350 [ 981.517158][T16825] ? __pfx_do_futex+0x10/0x10 [ 981.517174][T16825] ? __pfx_do_sys_openat2+0x10/0x10 [ 981.517193][T16825] ? __fget_files+0x21f/0x3d0 [ 981.517209][T16825] __x64_sys_futex+0x34f/0x4d0 [ 981.517227][T16825] ? __x64_sys_openat+0x12d/0x210 [ 981.517245][T16825] ? __pfx___x64_sys_futex+0x10/0x10 [ 981.517270][T16825] do_syscall_64+0x106/0xf80 [ 981.517289][T16825] ? clear_bhb_loop+0x40/0x90 [ 981.517307][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.517321][T16825] RIP: 0033:0x7f12eed9c799 [ 981.517333][T16825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.517347][T16825] RSP: 002b:00007f12efc980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 981.517360][T16825] RAX: ffffffffffffffda RBX: 00007f12ef015fa8 RCX: 00007f12eed9c799 [ 981.517370][T16825] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12ef015fac [ 981.517379][T16825] RBP: 00007f12ef015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 981.517387][T16825] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 981.517395][T16825] R13: 00007f12ef016038 R14: 00007ffca619e800 R15: 00007ffca619e8e8 [ 981.517413][T16825] [ 982.315238][T16840] FAULT_INJECTION: forcing a failure. [ 982.315238][T16840] name failslab, interval 1, probability 0, space 0, times 0 [ 982.364755][T16840] CPU: 0 UID: 0 PID: 16840 Comm: syz.2.2278 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.364784][T16840] Tainted: [L]=SOFTLOCKUP [ 982.364789][T16840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.364799][T16840] Call Trace: [ 982.364805][T16840] [ 982.364812][T16840] dump_stack_lvl+0x100/0x190 [ 982.364840][T16840] should_fail_ex.cold+0x5/0xa [ 982.364865][T16840] should_failslab+0xc2/0x120 [ 982.364882][T16840] __kvmalloc_node_noprof+0xfa/0xa00 [ 982.364905][T16840] ? traverse.part.0.constprop.0+0x397/0x650 [ 982.364935][T16840] traverse.part.0.constprop.0+0x397/0x650 [ 982.364957][T16840] ? aa_file_perm+0x7e4/0x14d0 [ 982.364977][T16840] ? aa_file_perm+0x7e4/0x14d0 [ 982.364999][T16840] seq_read_iter+0x93f/0x1270 [ 982.365028][T16840] seq_read+0x33b/0x4c0 [ 982.365049][T16840] ? __pfx_seq_read+0x10/0x10 [ 982.365070][T16840] ? __pfx___might_resched+0x10/0x10 [ 982.365105][T16840] ? rw_verify_area+0xce/0x6d0 [ 982.365125][T16840] ? __pfx_seq_read+0x10/0x10 [ 982.365146][T16840] vfs_read+0x1e4/0xb30 [ 982.365170][T16840] ? __pfx_vfs_read+0x10/0x10 [ 982.365191][T16840] ? find_held_lock+0x2b/0x80 [ 982.365205][T16840] ? __fget_files+0x215/0x3d0 [ 982.365218][T16840] ? __fget_files+0x215/0x3d0 [ 982.365235][T16840] ? __fget_files+0x21f/0x3d0 [ 982.365253][T16840] __x64_sys_pread64+0x1eb/0x250 [ 982.365268][T16840] ? __pfx___x64_sys_pread64+0x10/0x10 [ 982.365288][T16840] do_syscall_64+0x106/0xf80 [ 982.365309][T16840] ? clear_bhb_loop+0x40/0x90 [ 982.365327][T16840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.365342][T16840] RIP: 0033:0x7f585f19c799 [ 982.365356][T16840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.365371][T16840] RSP: 002b:00007f585ffc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 982.365386][T16840] RAX: ffffffffffffffda RBX: 00007f585f415fa0 RCX: 00007f585f19c799 [ 982.365395][T16840] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 982.365404][T16840] RBP: 00007f585f232c99 R08: 0000000000000000 R09: 0000000000000000 [ 982.365413][T16840] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 982.365421][T16840] R13: 00007f585f416038 R14: 00007f585f415fa0 R15: 00007ffcf4557bf8 [ 982.365440][T16840] [ 983.794068][T16859] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2282'. [ 983.895991][T16862] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2282'. [ 984.459562][T16865] ubi0: detaching mtd0 [ 984.587884][T16865] ubi0: mtd0 is detached [ 985.796645][T16889] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78005 [ 985.940208][T16889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 986.008711][T16889] page_type: f2(table) [ 986.059570][T16889] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 986.163565][T16889] raw: 0000000000000000 ffff888078527660 00000001f2000000 0000000000000000 [ 986.213734][T16889] page dumped because: unmovable page [ 986.253462][T16889] page_owner tracks the page as allocated [ 986.330545][T16889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5851, tgid 5851 (sshd-session), ts 333898786616, free_ts 24699601878 [ 986.554992][T16889] post_alloc_hook+0x153/0x170 [ 986.625349][T16889] get_page_from_freelist+0x111d/0x3140 [ 986.630957][T16889] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 986.697851][T16889] alloc_pages_mpol+0x1fb/0x550 [ 986.702750][T16889] alloc_pages_noprof+0x131/0x390 [ 986.755679][T16889] pte_alloc_one+0x1c/0x3d0 [ 986.781963][T16889] do_fault+0x88e/0x1990 [ 986.804189][T16889] __handle_mm_fault+0x180f/0x2b60 [ 986.809339][T16889] handle_mm_fault+0x36d/0xa20 [ 986.857136][T16889] do_user_addr_fault+0x5a3/0x12f0 [ 986.862294][T16889] exc_page_fault+0x6f/0xd0 [ 986.908043][T16889] asm_exc_page_fault+0x26/0x30 [ 986.912952][T16889] page last free pid 1 tgid 1 stack trace: [ 986.964177][T16889] __free_frozen_pages+0x7e1/0x10d0 [ 987.002279][T16889] free_contig_range+0xde/0x1d0 [ 987.019832][T16889] destroy_args+0xa8/0x7a0 [ 987.044617][T16889] debug_vm_pgtable+0x1b66/0x34c0 [ 987.049692][T16889] do_one_initcall+0x11d/0x760 [ 987.114220][T16889] kernel_init_freeable+0x6e5/0x7a0 [ 987.143023][T16889] kernel_init+0x1f/0x1e0 [ 987.168023][T16889] ret_from_fork+0x754/0xd80 [ 987.196381][T16889] ret_from_fork_asm+0x1a/0x30 [ 987.251745][T16895] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78005 [ 987.393433][T16895] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 987.469969][T16895] page_type: f2(table) [ 987.474065][T16895] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 987.617240][T16895] raw: 0000000000000000 ffff888078527660 00000001f2000000 0000000000000000 [ 987.671849][T16895] page dumped because: unmovable page [ 987.736979][T16895] page_owner tracks the page as allocated [ 987.742716][T16895] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5851, tgid 5851 (sshd-session), ts 333898786616, free_ts 24699601878 [ 987.894226][T16895] post_alloc_hook+0x153/0x170 [ 987.899048][T16895] get_page_from_freelist+0x111d/0x3140 [ 987.954765][T16895] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 987.960697][T16895] alloc_pages_mpol+0x1fb/0x550 [ 988.016918][T16895] alloc_pages_noprof+0x131/0x390 [ 988.046659][T16895] pte_alloc_one+0x1c/0x3d0 [ 988.079902][T16895] do_fault+0x88e/0x1990 [ 988.103460][T16895] __handle_mm_fault+0x180f/0x2b60 [ 988.136970][T16895] handle_mm_fault+0x36d/0xa20 [ 988.170993][T16895] do_user_addr_fault+0x5a3/0x12f0 [ 988.198383][T16895] exc_page_fault+0x6f/0xd0 [ 988.233821][T16895] asm_exc_page_fault+0x26/0x30 [ 988.268325][T16895] page last free pid 1 tgid 1 stack trace: [ 988.303027][T16895] __free_frozen_pages+0x7e1/0x10d0 [ 988.326278][T16895] free_contig_range+0xde/0x1d0 [ 988.354566][T16895] destroy_args+0xa8/0x7a0 [ 988.367620][T16895] debug_vm_pgtable+0x1b66/0x34c0 [ 988.387590][T16895] do_one_initcall+0x11d/0x760 [ 988.410053][T16895] kernel_init_freeable+0x6e5/0x7a0 [ 988.432371][T16895] kernel_init+0x1f/0x1e0 [ 988.451506][T16895] ret_from_fork+0x754/0xd80 [ 988.479557][T16895] ret_from_fork_asm+0x1a/0x30 [ 991.090187][T16967] zswap: compressor x [ 991.090187][T16967] ™Urx^où!*õ) not available [ 991.466634][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 992.484491][T17000] FAULT_INJECTION: forcing a failure. [ 992.484491][T17000] name failslab, interval 1, probability 0, space 0, times 0 [ 992.497330][T17000] CPU: 0 UID: 0 PID: 17000 Comm: syz.2.2315 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.497357][T17000] Tainted: [L]=SOFTLOCKUP [ 992.497362][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 992.497372][T17000] Call Trace: [ 992.497378][T17000] [ 992.497385][T17000] dump_stack_lvl+0x100/0x190 [ 992.497413][T17000] should_fail_ex.cold+0x5/0xa [ 992.497431][T17000] should_failslab+0xc2/0x120 [ 992.497447][T17000] __kmalloc_cache_noprof+0x7a/0x6f0 [ 992.497465][T17000] ? tipc_nametbl_insert_publ+0x5a/0x1570 [ 992.497493][T17000] tipc_nametbl_insert_publ+0x5a/0x1570 [ 992.497516][T17000] ? do_raw_spin_lock+0x128/0x260 [ 992.497537][T17000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 992.497563][T17000] tipc_nametbl_publish+0x137/0x260 [ 992.497588][T17000] tipc_sk_publish+0x1d8/0x430 [ 992.497611][T17000] ? __pfx_tipc_sk_publish+0x10/0x10 [ 992.497635][T17000] ? __local_bh_enable_ip+0x9e/0x120 [ 992.497654][T17000] tipc_sk_bind+0x16f/0x380 [ 992.497669][T17000] tipc_bind+0x18d/0x280 [ 992.497684][T17000] __sys_bind+0x1a9/0x260 [ 992.497721][T17000] ? __pfx___sys_bind+0x10/0x10 [ 992.497750][T17000] __x64_sys_bind+0x72/0xb0 [ 992.497767][T17000] ? lockdep_hardirqs_on+0x78/0x100 [ 992.497788][T17000] do_syscall_64+0x106/0xf80 [ 992.497808][T17000] ? clear_bhb_loop+0x40/0x90 [ 992.497826][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.497843][T17000] RIP: 0033:0x7f585f19c799 [ 992.497857][T17000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.497871][T17000] RSP: 002b:00007f585ffc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 992.497886][T17000] RAX: ffffffffffffffda RBX: 00007f585f415fa0 RCX: 00007f585f19c799 [ 992.497896][T17000] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000002 [ 992.497905][T17000] RBP: 00007f585f232c99 R08: 0000000000000000 R09: 0000000000000000 [ 992.497914][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.497923][T17000] R13: 00007f585f416038 R14: 00007f585f415fa0 R15: 00007ffcf4557bf8 [ 992.497943][T17000] [ 993.172404][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.184391][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.505780][T17014] vivid-007: ================= START STATUS ================= [ 993.568090][T17006] FAULT_INJECTION: forcing a failure. [ 993.568090][T17006] name failslab, interval 1, probability 0, space 0, times 0 [ 993.595494][T17006] CPU: 0 UID: 0 PID: 17006 Comm: syz.3.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 993.595521][T17006] Tainted: [L]=SOFTLOCKUP [ 993.595526][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 993.595543][T17006] Call Trace: [ 993.595549][T17006] [ 993.595556][T17006] dump_stack_lvl+0x100/0x190 [ 993.595584][T17006] should_fail_ex.cold+0x5/0xa [ 993.595603][T17006] should_failslab+0xc2/0x120 [ 993.595619][T17006] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 993.595642][T17006] ? vm_area_dup+0x27/0x8e0 [ 993.595664][T17006] vm_area_dup+0x27/0x8e0 [ 993.595684][T17006] __split_vma+0x18c/0xd90 [ 993.595706][T17006] ? __pfx___split_vma+0x10/0x10 [ 993.595730][T17006] ? __mpol_equal+0xaf/0x340 [ 993.595751][T17006] vma_modify+0x1121/0x2250 [ 993.595776][T17006] ? __pfx_vma_modify+0x10/0x10 [ 993.595800][T17006] vma_modify_policy+0x238/0x300 [ 993.595822][T17006] ? __pfx_vma_modify_policy+0x10/0x10 [ 993.595859][T17006] mbind_range+0x175/0x550 [ 993.595879][T17006] do_mbind+0x7de/0xfd0 [ 993.595901][T17006] ? __might_fault+0xc5/0x140 [ 993.595920][T17006] ? __pfx_do_mbind+0x10/0x10 [ 993.595942][T17006] ? _copy_from_user+0x59/0xd0 [ 993.595965][T17006] ? __pfx_get_nodes+0x10/0x10 [ 993.595993][T17006] kernel_mbind+0x1b7/0x200 [ 993.596020][T17006] ? __pfx_kernel_mbind+0x10/0x10 [ 993.596045][T17006] do_syscall_64+0x106/0xf80 [ 993.596067][T17006] ? clear_bhb_loop+0x40/0x90 [ 993.596084][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.596100][T17006] RIP: 0033:0x7f45d3b9c799 [ 993.596114][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.596129][T17006] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 993.596144][T17006] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 993.596154][T17006] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 993.596164][T17006] RBP: 00007f45d3c32c99 R08: 0000000000000003 R09: 0000000000000003 [ 993.596173][T17006] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 993.596182][T17006] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 993.596202][T17006] [ 993.850530][T17014] vivid-007: Generate PTS: true [ 993.855470][T17014] vivid-007: Generate SCR: true [ 993.860351][T17014] tpg source WxH: 320x240 (Y'CbCr) [ 993.865504][T17014] tpg field: 1 [ 993.868856][T17014] tpg crop: (0,0)/320x240 [ 993.873162][T17014] tpg compose: (0,0)/320x240 [ 993.877764][T17014] tpg colorspace: 8 [ 993.881567][T17014] tpg transfer function: 0/0 [ 993.886266][T17014] tpg Y'CbCr encoding: 0/0 [ 993.890695][T17014] tpg quantization: 0/0 [ 993.894884][T17014] tpg RGB range: 0/2 [ 993.898781][T17014] vivid-007: ================== END STATUS ================== [ 995.325761][T17030] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2322'. [ 995.972527][T17036] FAULT_INJECTION: forcing a failure. [ 995.972527][T17036] name failslab, interval 1, probability 0, space 0, times 0 [ 996.136397][T17036] CPU: 0 UID: 0 PID: 17036 Comm: syz.2.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.136424][T17036] Tainted: [L]=SOFTLOCKUP [ 996.136430][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 996.136439][T17036] Call Trace: [ 996.136445][T17036] [ 996.136451][T17036] dump_stack_lvl+0x100/0x190 [ 996.136477][T17036] should_fail_ex.cold+0x5/0xa [ 996.136495][T17036] should_failslab+0xc2/0x120 [ 996.136511][T17036] __kmalloc_cache_noprof+0x7a/0x6f0 [ 996.136531][T17036] ? snd_virmidi_output_open+0xc4/0x670 [ 996.136551][T17036] snd_virmidi_output_open+0xc4/0x670 [ 996.136569][T17036] open_substream+0x480/0x9e0 [ 996.136591][T17036] rawmidi_open_priv+0x595/0x6f0 [ 996.136613][T17036] snd_rawmidi_open+0x4c9/0xba0 [ 996.136637][T17036] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 996.136657][T17036] ? __pfx_default_wake_function+0x10/0x10 [ 996.136675][T17036] ? kobject_get_unless_zero+0x156/0x200 [ 996.136700][T17036] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 996.136719][T17036] snd_open+0x22d/0x4c0 [ 996.136735][T17036] ? __pfx_snd_open+0x10/0x10 [ 996.136750][T17036] chrdev_open+0x234/0x6a0 [ 996.136766][T17036] ? __pfx_apparmor_file_open+0x10/0x10 [ 996.136781][T17036] ? __pfx_chrdev_open+0x10/0x10 [ 996.136797][T17036] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 996.136817][T17036] do_dentry_open+0x6d8/0x1660 [ 996.136832][T17036] ? __pfx_chrdev_open+0x10/0x10 [ 996.136853][T17036] vfs_open+0x82/0x3f0 [ 996.136874][T17036] path_openat+0x208c/0x31a0 [ 996.136896][T17036] ? __pfx_path_openat+0x10/0x10 [ 996.136919][T17036] do_file_open+0x20e/0x430 [ 996.136936][T17036] ? __pfx_do_file_open+0x10/0x10 [ 996.136964][T17036] ? alloc_fd+0x476/0x790 [ 996.136981][T17036] ? do_getname+0x191/0x390 [ 996.137000][T17036] do_sys_openat2+0x10d/0x1e0 [ 996.137019][T17036] ? __pfx_do_sys_openat2+0x10/0x10 [ 996.137038][T17036] ? find_held_lock+0x2b/0x80 [ 996.137057][T17036] __x64_sys_openat+0x12d/0x210 [ 996.137077][T17036] ? __pfx___x64_sys_openat+0x10/0x10 [ 996.137103][T17036] do_syscall_64+0x106/0xf80 [ 996.137123][T17036] ? clear_bhb_loop+0x40/0x90 [ 996.137141][T17036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.137157][T17036] RIP: 0033:0x7f585f19c799 [ 996.137170][T17036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.137191][T17036] RSP: 002b:00007f585ffc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 996.137210][T17036] RAX: ffffffffffffffda RBX: 00007f585f415fa0 RCX: 00007f585f19c799 [ 996.137221][T17036] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 996.137230][T17036] RBP: 00007f585f232c99 R08: 0000000000000000 R09: 0000000000000000 [ 996.137239][T17036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.137248][T17036] R13: 00007f585f416038 R14: 00007f585f415fa0 R15: 00007ffcf4557bf8 [ 996.137268][T17036] [ 996.138628][T17034] delete_channel: no stack [ 996.465969][T17039] FAULT_INJECTION: forcing a failure. [ 996.465969][T17039] name failslab, interval 1, probability 0, space 0, times 0 [ 996.565379][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.3.2325 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.565406][T17039] Tainted: [L]=SOFTLOCKUP [ 996.565412][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 996.565421][T17039] Call Trace: [ 996.565426][T17039] [ 996.565432][T17039] dump_stack_lvl+0x100/0x190 [ 996.565459][T17039] should_fail_ex.cold+0x5/0xa [ 996.565477][T17039] should_failslab+0xc2/0x120 [ 996.565494][T17039] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 996.565515][T17039] ? seq_open+0x55/0x170 [ 996.565537][T17039] seq_open+0x55/0x170 [ 996.565556][T17039] do_dentry_open+0x6d8/0x1660 [ 996.565570][T17039] ? __pfx_children_seq_open+0x10/0x10 [ 996.565591][T17039] vfs_open+0x82/0x3f0 [ 996.565611][T17039] path_openat+0x208c/0x31a0 [ 996.565632][T17039] ? __pfx_path_openat+0x10/0x10 [ 996.565655][T17039] do_file_open+0x20e/0x430 [ 996.565671][T17039] ? __pfx_do_file_open+0x10/0x10 [ 996.565694][T17039] ? __pfx_kfree_link+0x10/0x10 [ 996.565718][T17039] ? alloc_fd+0x476/0x790 [ 996.565734][T17039] ? do_getname+0x191/0x390 [ 996.565754][T17039] do_sys_openat2+0x10d/0x1e0 [ 996.565772][T17039] ? __pfx_do_sys_openat2+0x10/0x10 [ 996.565797][T17039] __x64_sys_openat+0x12d/0x210 [ 996.565816][T17039] ? __pfx___x64_sys_openat+0x10/0x10 [ 996.565842][T17039] do_syscall_64+0x106/0xf80 [ 996.565862][T17039] ? clear_bhb_loop+0x40/0x90 [ 996.565879][T17039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.565894][T17039] RIP: 0033:0x7f45d3b9c799 [ 996.565906][T17039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.565922][T17039] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 996.565937][T17039] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 996.565947][T17039] RDX: 0000000000082000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 996.565957][T17039] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 996.565972][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.565981][T17039] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 996.566001][T17039] [ 999.056869][T14630] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 999.056895][T14630] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 999.072503][T14630] Bluetooth: hci0: Dropping invalid advertising data [ 999.080798][T14630] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 999.080830][T14630] Bluetooth: hci0: Dropping invalid advertising data [ 999.095059][T14630] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1000.987857][T17127] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1001.145186][T17127] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1001.252759][T17127] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1002.043448][T12388] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1002.054307][T12388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1002.064365][T12388] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1002.071992][T12388] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1002.079826][T12388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1004.188673][T12388] Bluetooth: hci4: command tx timeout [ 1004.727637][T13210] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.042650][T13210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.419882][T13210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.453693][T17171] openvswitch: netlink: Missing valid actions attribute. [ 1005.576010][T13210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.867745][T13210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.940058][T17150] chnl_net:caif_netlink_parms(): no params data found [ 1006.264481][T12388] Bluetooth: hci4: command tx timeout [ 1006.376555][ T29] audit: type=1804 audit(56312.960:28): pid=17183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2354" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1006.739985][T17150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.794570][T17150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.833297][T17150] bridge_slave_0: entered allmulticast mode [ 1006.875655][T17150] bridge_slave_0: entered promiscuous mode [ 1006.915676][T17150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.998040][T17150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.046918][T17150] bridge_slave_1: entered allmulticast mode [ 1007.098093][T17150] bridge_slave_1: entered promiscuous mode [ 1007.133659][T17191] FAULT_INJECTION: forcing a failure. [ 1007.133659][T17191] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.222008][T17191] CPU: 0 UID: 0 PID: 17191 Comm: syz.3.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.222036][T17191] Tainted: [L]=SOFTLOCKUP [ 1007.222041][T17191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1007.222050][T17191] Call Trace: [ 1007.222056][T17191] [ 1007.222062][T17191] dump_stack_lvl+0x100/0x190 [ 1007.222090][T17191] should_fail_ex.cold+0x5/0xa [ 1007.222108][T17191] should_failslab+0xc2/0x120 [ 1007.222124][T17191] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1007.222143][T17191] ? ptp_open+0xe4/0x550 [ 1007.222169][T17191] ptp_open+0xe4/0x550 [ 1007.222193][T17191] ? __pfx_ptp_open+0x10/0x10 [ 1007.222221][T17191] ? __pfx_ptp_open+0x10/0x10 [ 1007.222243][T17191] posix_clock_open+0x17b/0x290 [ 1007.222261][T17191] ? __pfx_posix_clock_open+0x10/0x10 [ 1007.222276][T17191] chrdev_open+0x234/0x6a0 [ 1007.222291][T17191] ? __pfx_apparmor_file_open+0x10/0x10 [ 1007.222306][T17191] ? __pfx_chrdev_open+0x10/0x10 [ 1007.222322][T17191] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1007.222342][T17191] do_dentry_open+0x6d8/0x1660 [ 1007.222356][T17191] ? __pfx_chrdev_open+0x10/0x10 [ 1007.222376][T17191] vfs_open+0x82/0x3f0 [ 1007.222397][T17191] path_openat+0x208c/0x31a0 [ 1007.222418][T17191] ? __pfx_path_openat+0x10/0x10 [ 1007.222440][T17191] do_file_open+0x20e/0x430 [ 1007.222456][T17191] ? __pfx_do_file_open+0x10/0x10 [ 1007.222486][T17191] ? alloc_fd+0x476/0x790 [ 1007.222502][T17191] ? do_getname+0x191/0x390 [ 1007.222522][T17191] do_sys_openat2+0x10d/0x1e0 [ 1007.222549][T17191] ? __pfx_do_sys_openat2+0x10/0x10 [ 1007.222570][T17191] ? __fget_files+0x21f/0x3d0 [ 1007.222589][T17191] __x64_sys_openat+0x12d/0x210 [ 1007.222610][T17191] ? __pfx___x64_sys_openat+0x10/0x10 [ 1007.222637][T17191] do_syscall_64+0x106/0xf80 [ 1007.222658][T17191] ? clear_bhb_loop+0x40/0x90 [ 1007.222676][T17191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.222692][T17191] RIP: 0033:0x7f45d3b9c799 [ 1007.222705][T17191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.222719][T17191] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1007.222735][T17191] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 1007.222745][T17191] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1007.222754][T17191] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1007.222763][T17191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.222772][T17191] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 1007.222792][T17191] [ 1007.932050][T13210] bridge_slave_1: left allmulticast mode [ 1007.957486][T13210] bridge_slave_1: left promiscuous mode [ 1007.976147][T13210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.309665][T13210] bridge_slave_0: left allmulticast mode [ 1008.316841][T13210] bridge_slave_0: left promiscuous mode [ 1008.323325][T13210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.347345][T12388] Bluetooth: hci4: command tx timeout [ 1009.227204][T13210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.339710][T13210] bond0 (unregistering): Released all slaves [ 1009.975029][T17150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.168480][T17150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.401606][T17150] team0: Port device team_slave_0 added [ 1010.426461][T12388] Bluetooth: hci4: command tx timeout [ 1010.490496][T17150] team0: Port device team_slave_1 added [ 1010.772404][T17150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.819554][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.994676][T17150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.091289][T17150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.147991][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.205742][T17227] random: crng reseeded on system resumption [ 1011.295853][T17227] hub 1-0:1.0: USB hub found [ 1011.302788][T17150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.352308][T17227] hub 1-0:1.0: 1 port detected [ 1011.687072][T17150] hsr_slave_0: entered promiscuous mode [ 1011.765555][T17150] hsr_slave_1: entered promiscuous mode [ 1011.771609][T17150] debugfs: 'hsr0' already exists in 'hsr' [ 1011.828929][T17150] Cannot create hsr debugfs directory [ 1012.708784][T17259] FAULT_INJECTION: forcing a failure. [ 1012.708784][T17259] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.721460][T17259] CPU: 0 UID: 0 PID: 17259 Comm: syz.0.2366 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.721486][T17259] Tainted: [L]=SOFTLOCKUP [ 1012.721491][T17259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1012.721501][T17259] Call Trace: [ 1012.721507][T17259] [ 1012.721513][T17259] dump_stack_lvl+0x100/0x190 [ 1012.721541][T17259] should_fail_ex.cold+0x5/0xa [ 1012.721559][T17259] should_failslab+0xc2/0x120 [ 1012.721575][T17259] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1012.721594][T17259] ? tipc_service_create+0xb1/0x340 [ 1012.721619][T17259] tipc_service_create+0xb1/0x340 [ 1012.721639][T17259] ? tipc_service_find+0x161/0x1c0 [ 1012.721662][T17259] tipc_nametbl_subscribe+0x892/0xa80 [ 1012.721690][T17259] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 1012.721716][T17259] ? lockdep_init_map_type+0x5c/0x250 [ 1012.721738][T17259] tipc_sub_subscribe+0x4ba/0x730 [ 1012.721760][T17259] tipc_conn_rcv_sub+0x21e/0x3d0 [ 1012.721780][T17259] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 1012.721800][T17259] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 1012.721821][T17259] ? net_generic+0xea/0x2a0 [ 1012.721843][T17259] tipc_group_create+0x4ab/0x660 [ 1012.721865][T17259] tipc_setsockopt+0x611/0xe30 [ 1012.721880][T17259] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1012.721902][T17259] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1012.721917][T17259] do_sock_setsockopt+0xf3/0x1d0 [ 1012.721943][T17259] __sys_setsockopt+0x119/0x190 [ 1012.721966][T17259] __x64_sys_setsockopt+0xbd/0x160 [ 1012.721984][T17259] ? do_syscall_64+0x95/0xf80 [ 1012.722005][T17259] ? lockdep_hardirqs_on+0x78/0x100 [ 1012.722025][T17259] do_syscall_64+0x106/0xf80 [ 1012.722045][T17259] ? clear_bhb_loop+0x40/0x90 [ 1012.722070][T17259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.722086][T17259] RIP: 0033:0x7f12eed9c799 [ 1012.722101][T17259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.722116][T17259] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1012.722131][T17259] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 1012.722141][T17259] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1012.722150][T17259] RBP: 00007f12eee32c99 R08: 0000000000000014 R09: 0000000000000000 [ 1012.722160][T17259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.722169][T17259] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 1012.722189][T17259] [ 1012.722203][T17259] tipc: Service creation failed, no memory [ 1012.972620][T17259] tipc: Failed to subscribe for {4022962592,0,4294967295} [ 1013.309525][T17268] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1013.341711][T17268] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1013.605802][T12388] Bluetooth: hci3: unexpected event 0x3e length: 505 > 260 [ 1013.605827][T12388] Bluetooth: hci3: unexpected subevent 0x02 length: 504 > 260 [ 1013.621097][T12388] Bluetooth: hci3: Dropping invalid advertising data [ 1013.629086][T12388] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 1013.853671][T13210] hsr_slave_0: left promiscuous mode [ 1013.905144][T13210] hsr_slave_1: left promiscuous mode [ 1013.928330][T13210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.976302][T13210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.048204][T13210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.077515][T13210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.190984][T13210] veth1_macvtap: left promiscuous mode [ 1014.261744][T13210] veth0_macvtap: left promiscuous mode [ 1014.296858][T13210] veth1_vlan: left promiscuous mode [ 1014.326209][T13210] veth0_vlan: left promiscuous mode [ 1015.275429][T13210] team0 (unregistering): Port device team_slave_1 removed [ 1015.369232][T13210] team0 (unregistering): Port device team_slave_0 removed [ 1017.919703][T17150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1018.035186][T17150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1018.084023][T17150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1018.175329][T17150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1018.646498][T17150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.800403][T17150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.975229][T13214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.982404][T13214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.062959][T17368] random: crng reseeded on system resumption [ 1019.073881][T13214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.081224][T13214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.526554][T17369] Invalid ELF header magic: != ELF [ 1020.236185][T17150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.540935][T17150] veth0_vlan: entered promiscuous mode [ 1020.661745][T17150] veth1_vlan: entered promiscuous mode [ 1020.750093][T17395] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2385'. [ 1020.896316][T17150] veth0_macvtap: entered promiscuous mode [ 1021.071787][T17150] veth1_macvtap: entered promiscuous mode [ 1021.203434][T17150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.313805][T17150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.397422][T12375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.475510][T12375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.568480][T12375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.702383][T13213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.761397][T17423] netlink: get zone limit has 4 unknown bytes [ 1022.010807][T13214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.092111][T13214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.381498][T12385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.436828][T12385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.452242][T14630] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1023.398608][T17454] Invalid ELF header magic: != ELF [ 1024.008732][ T5868] bridge0: port 3(syz_tun) entered disabled state [ 1024.138574][T12388] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1024.149682][T12388] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1024.158091][T12388] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1024.175366][T12388] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1024.182887][T12388] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1024.258349][ T5868] syz_tun (unregistering): left allmulticast mode [ 1024.336031][ T5868] syz_tun (unregistering): left promiscuous mode [ 1024.342449][ T5868] bridge0: port 3(syz_tun) entered disabled state [ 1026.100871][T17467] chnl_net:caif_netlink_parms(): no params data found [ 1026.265126][T12388] Bluetooth: hci2: command tx timeout [ 1027.650899][T17467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.699899][T17467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.752895][T17467] bridge_slave_0: entered allmulticast mode [ 1027.791052][T17467] bridge_slave_0: entered promiscuous mode [ 1027.992511][T17467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.039079][T17467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.089978][T17467] bridge_slave_1: entered allmulticast mode [ 1028.133663][T17467] bridge_slave_1: entered promiscuous mode [ 1028.316673][T12375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.348500][T12388] Bluetooth: hci2: command tx timeout [ 1028.759865][T17531] FAULT_INJECTION: forcing a failure. [ 1028.759865][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.799822][T12375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.837448][T17531] CPU: 0 UID: 0 PID: 17531 Comm: syz.3.2400 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.837477][T17531] Tainted: [L]=SOFTLOCKUP [ 1028.837483][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1028.837492][T17531] Call Trace: [ 1028.837498][T17531] [ 1028.837505][T17531] dump_stack_lvl+0x100/0x190 [ 1028.837533][T17531] should_fail_ex.cold+0x5/0xa [ 1028.837552][T17531] should_failslab+0xc2/0x120 [ 1028.837568][T17531] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1028.837589][T17531] ? seq_open+0x55/0x170 [ 1028.837611][T17531] seq_open+0x55/0x170 [ 1028.837630][T17531] do_dentry_open+0x6d8/0x1660 [ 1028.837644][T17531] ? __pfx_children_seq_open+0x10/0x10 [ 1028.837665][T17531] vfs_open+0x82/0x3f0 [ 1028.837685][T17531] path_openat+0x208c/0x31a0 [ 1028.837707][T17531] ? __pfx_path_openat+0x10/0x10 [ 1028.837730][T17531] do_file_open+0x20e/0x430 [ 1028.837746][T17531] ? __pfx_do_file_open+0x10/0x10 [ 1028.837767][T17531] ? __pfx_kfree_link+0x10/0x10 [ 1028.837792][T17531] ? alloc_fd+0x476/0x790 [ 1028.837808][T17531] ? do_getname+0x191/0x390 [ 1028.837827][T17531] do_sys_openat2+0x10d/0x1e0 [ 1028.837846][T17531] ? __pfx_do_sys_openat2+0x10/0x10 [ 1028.837871][T17531] __x64_sys_openat+0x12d/0x210 [ 1028.837891][T17531] ? __pfx___x64_sys_openat+0x10/0x10 [ 1028.837917][T17531] do_syscall_64+0x106/0xf80 [ 1028.837938][T17531] ? clear_bhb_loop+0x40/0x90 [ 1028.837957][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.837973][T17531] RIP: 0033:0x7f45d3b9c799 [ 1028.837986][T17531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.838002][T17531] RSP: 002b:00007f45d4a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1028.838018][T17531] RAX: ffffffffffffffda RBX: 00007f45d3e15fa0 RCX: 00007f45d3b9c799 [ 1028.838027][T17531] RDX: 0000000000082000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1028.838037][T17531] RBP: 00007f45d3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1028.838046][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.838056][T17531] R13: 00007f45d3e16038 R14: 00007f45d3e15fa0 R15: 00007fff4e77b518 [ 1028.838075][T17531] [ 1029.312829][T17539] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1029.342905][T17467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.370758][T17467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.502479][T12375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.552680][T17467] team0: Port device team_slave_0 added [ 1029.560655][T17467] team0: Port device team_slave_1 added [ 1029.648028][T17544] Invalid ELF header magic: != ELF [ 1029.796291][T12375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.404771][T17467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.425016][T12388] Bluetooth: hci2: command tx timeout [ 1030.484406][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.709470][T17467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.820574][T17467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.873050][T17567] netlink: 'syz.0.2407': attribute type 64 has an invalid length. [ 1030.884230][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.952536][T17567] netlink: 74 bytes leftover after parsing attributes in process `syz.0.2407'. [ 1031.082412][T17467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.412399][T17467] hsr_slave_0: entered promiscuous mode [ 1031.518024][T17467] hsr_slave_1: entered promiscuous mode [ 1031.567086][T17467] debugfs: 'hsr0' already exists in 'hsr' [ 1031.572853][T17467] Cannot create hsr debugfs directory [ 1032.085029][T17591] vivid-007: ================= START STATUS ================= [ 1032.155056][T12375] bridge_slave_1: left allmulticast mode [ 1032.160719][T12375] bridge_slave_1: left promiscuous mode [ 1032.173791][T17591] vivid-007: Generate PTS: true [ 1032.221136][T17591] vivid-007: Generate SCR: true [ 1032.275240][T12375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.294751][T17591] tpg source WxH: 320x240 (Y'CbCr) [ 1032.299884][T17591] tpg field: 1 [ 1032.303272][T17591] tpg crop: (0,0)/320x240 [ 1032.340779][T12375] bridge_slave_0: left allmulticast mode [ 1032.398212][T12375] bridge_slave_0: left promiscuous mode [ 1032.436188][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.449481][T17591] tpg compose: (0,0)/320x240 [ 1032.506814][T12388] Bluetooth: hci2: command tx timeout [ 1032.576105][T17591] tpg colorspace: 8 [ 1032.648568][T17591] tpg transfer function: 0/0 [ 1032.773376][T17591] tpg Y'CbCr encoding: 0/0 [ 1032.807504][T17591] tpg quantization: 0/0 [ 1032.893506][T17591] tpg RGB range: 0/2 [ 1032.966925][T17591] vivid-007: ================== END STATUS ================== [ 1033.383056][T12375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.564043][T12375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.622576][T12375] bond0 (unregistering): Released all slaves [ 1033.827923][T12375] HfR: left promiscuous mode [ 1035.776634][T17646] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1036.882702][T12375] hsr_slave_0: left promiscuous mode [ 1036.902232][T12375] hsr_slave_1: left promiscuous mode [ 1036.922308][T12375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.948794][T12375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.977294][T12375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.002514][T12375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.038911][T12375] veth1_macvtap: left promiscuous mode [ 1037.060347][T12375] veth0_macvtap: left promiscuous mode [ 1037.082560][T12375] veth1_vlan: left promiscuous mode [ 1037.102242][T12375] veth0_vlan: left promiscuous mode [ 1037.652947][T12375] team0 (unregistering): Port device team_slave_1 removed [ 1037.698401][T12375] team0 (unregistering): Port device team_slave_0 removed [ 1038.361084][T17467] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1038.460308][T17467] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1038.557359][T17467] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1038.711691][T17467] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1038.891736][T17664] random: crng reseeded on system resumption [ 1039.029178][T17665] can: request_module (can-proto-0) failed. [ 1039.111249][T17678] hub 1-0:1.0: USB hub found [ 1039.194492][T17678] hub 1-0:1.0: 1 port detected [ 1039.476952][T17467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.596449][T17467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.685027][T13210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.692183][T13210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.838811][T13214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.845969][T13214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.072714][T17467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1040.225067][T17467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1040.502365][T17716] FAULT_INJECTION: forcing a failure. [ 1040.502365][T17716] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.627868][T17716] CPU: 0 UID: 0 PID: 17716 Comm: syz.0.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.627895][T17716] Tainted: [L]=SOFTLOCKUP [ 1040.627901][T17716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1040.627911][T17716] Call Trace: [ 1040.627917][T17716] [ 1040.627923][T17716] dump_stack_lvl+0x100/0x190 [ 1040.627951][T17716] should_fail_ex.cold+0x5/0xa [ 1040.627969][T17716] should_failslab+0xc2/0x120 [ 1040.627985][T17716] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1040.628004][T17716] ? sync_file_alloc+0x3c/0x160 [ 1040.628019][T17716] ? find_held_lock+0x2b/0x80 [ 1040.628035][T17716] sync_file_alloc+0x3c/0x160 [ 1040.628050][T17716] sync_file_create+0x17/0xf0 [ 1040.628065][T17716] sw_sync_ioctl+0x849/0xf80 [ 1040.628084][T17716] ? find_held_lock+0x2b/0x80 [ 1040.628108][T17716] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 1040.628133][T17716] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 1040.628150][T17716] __x64_sys_ioctl+0x18e/0x210 [ 1040.628174][T17716] do_syscall_64+0x106/0xf80 [ 1040.628194][T17716] ? clear_bhb_loop+0x40/0x90 [ 1040.628212][T17716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.628227][T17716] RIP: 0033:0x7f12eed9c799 [ 1040.628240][T17716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.628255][T17716] RSP: 002b:00007f12efc35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1040.628269][T17716] RAX: ffffffffffffffda RBX: 00007f12ef016270 RCX: 00007f12eed9c799 [ 1040.628279][T17716] RDX: 0000000000000000 RSI: 00000000c0285700 RDI: 0000000000000006 [ 1040.628288][T17716] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1040.628297][T17716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.628305][T17716] R13: 00007f12ef016308 R14: 00007f12ef016270 R15: 00007ffca619e8e8 [ 1040.628324][T17716] [ 1041.224209][T17720] FAULT_INJECTION: forcing a failure. [ 1041.224209][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.259662][T17720] CPU: 0 UID: 0 PID: 17720 Comm: syz.2.2426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.259691][T17720] Tainted: [L]=SOFTLOCKUP [ 1041.259696][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1041.259706][T17720] Call Trace: [ 1041.259712][T17720] [ 1041.259719][T17720] dump_stack_lvl+0x100/0x190 [ 1041.259747][T17720] should_fail_ex.cold+0x5/0xa [ 1041.259766][T17720] ? tracepoint_add_func+0x2c5/0xf30 [ 1041.259782][T17720] should_failslab+0xc2/0x120 [ 1041.259799][T17720] __kmalloc_noprof+0xe0/0x850 [ 1041.259825][T17720] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1041.259841][T17720] tracepoint_add_func+0x2c5/0xf30 [ 1041.259855][T17720] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1041.259887][T17720] ? __pfx___mutex_lock+0x10/0x10 [ 1041.259914][T17720] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1041.259929][T17720] tracepoint_probe_register+0xc4/0x110 [ 1041.259946][T17720] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1041.259962][T17720] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1041.259990][T17720] tracing_start_sched_switch+0xaf/0x170 [ 1041.260020][T17720] __ftrace_event_enable_disable+0x557/0x6f0 [ 1041.260040][T17720] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1041.260065][T17720] ftrace_set_clr_event+0x16e/0x330 [ 1041.260087][T17720] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1041.260105][T17720] ? trace_get_user+0x3ae/0xa70 [ 1041.260130][T17720] ftrace_event_write+0x259/0x2c0 [ 1041.260150][T17720] ? __pfx_ftrace_event_write+0x10/0x10 [ 1041.260177][T17720] vfs_write+0x2aa/0x1070 [ 1041.260194][T17720] ? __pfx_ftrace_event_write+0x10/0x10 [ 1041.260215][T17720] ? __pfx_vfs_write+0x10/0x10 [ 1041.260229][T17720] ? __fget_files+0x215/0x3d0 [ 1041.260248][T17720] ? __fget_files+0x21f/0x3d0 [ 1041.260268][T17720] ksys_write+0x12a/0x250 [ 1041.260282][T17720] ? __pfx_ksys_write+0x10/0x10 [ 1041.260302][T17720] do_syscall_64+0x106/0xf80 [ 1041.260322][T17720] ? clear_bhb_loop+0x40/0x90 [ 1041.260341][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.260357][T17720] RIP: 0033:0x7f5a8a99c799 [ 1041.260370][T17720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.260393][T17720] RSP: 002b:00007f5a8b8b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1041.260408][T17720] RAX: ffffffffffffffda RBX: 00007f5a8ac16180 RCX: 00007f5a8a99c799 [ 1041.260419][T17720] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000007 [ 1041.260428][T17720] RBP: 00007f5a8aa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1041.260437][T17720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.260446][T17720] R13: 00007f5a8ac16218 R14: 00007f5a8ac16180 R15: 00007fff5f12a018 [ 1041.260466][T17720] [ 1041.260482][T17720] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 1041.747031][T17467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.825749][T17467] veth0_vlan: entered promiscuous mode [ 1041.907935][T17467] veth1_vlan: entered promiscuous mode [ 1042.009355][T17467] veth0_macvtap: entered promiscuous mode [ 1042.055415][T17467] veth1_macvtap: entered promiscuous mode [ 1042.133159][T17467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.198370][T17467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.307644][T12910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.335574][T17727] FAULT_INJECTION: forcing a failure. [ 1042.335574][T17727] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1042.375399][T12910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.440710][T12910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.453740][T17727] CPU: 0 UID: 0 PID: 17727 Comm: syz.3.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.453766][T17727] Tainted: [L]=SOFTLOCKUP [ 1042.453772][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1042.453782][T17727] Call Trace: [ 1042.453787][T17727] [ 1042.453793][T17727] dump_stack_lvl+0x100/0x190 [ 1042.453820][T17727] should_fail_ex.cold+0x5/0xa [ 1042.453836][T17727] ? __kernel_text_address+0xd/0x30 [ 1042.453859][T17727] get_futex_key+0x1d2/0x1620 [ 1042.453879][T17727] ? __pfx_get_futex_key+0x10/0x10 [ 1042.453897][T17727] ? putname+0xb1/0x110 [ 1042.453914][T17727] ? stack_trace_save+0x8e/0xc0 [ 1042.453936][T17727] ? __pfx_stack_trace_save+0x10/0x10 [ 1042.453954][T17727] futex_wait_setup+0x83/0x510 [ 1042.453982][T17727] __futex_wait+0x19f/0x300 [ 1042.454005][T17727] ? __pfx___futex_wait+0x10/0x10 [ 1042.454030][T17727] ? __pfx_futex_wake_mark+0x10/0x10 [ 1042.454055][T17727] ? futex_hash+0x2c5/0x380 [ 1042.454081][T17727] futex_wait+0xed/0x380 [ 1042.454102][T17727] ? __pfx_futex_wait+0x10/0x10 [ 1042.454127][T17727] ? putname+0xb1/0x110 [ 1042.454141][T17727] ? kmem_cache_free+0x124/0x6a0 [ 1042.454164][T17727] do_futex+0x1ef/0x350 [ 1042.454183][T17727] ? __pfx_do_futex+0x10/0x10 [ 1042.454200][T17727] ? __pfx_do_sys_openat2+0x10/0x10 [ 1042.454220][T17727] ? __fget_files+0x21f/0x3d0 [ 1042.454236][T17727] __x64_sys_futex+0x34f/0x4d0 [ 1042.454255][T17727] ? __x64_sys_openat+0x12d/0x210 [ 1042.454274][T17727] ? __pfx___x64_sys_futex+0x10/0x10 [ 1042.454300][T17727] do_syscall_64+0x106/0xf80 [ 1042.454320][T17727] ? clear_bhb_loop+0x40/0x90 [ 1042.454337][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.454353][T17727] RIP: 0033:0x7f45d3b9c799 [ 1042.454366][T17727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.454381][T17727] RSP: 002b:00007f45d4a2b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1042.454396][T17727] RAX: ffffffffffffffda RBX: 00007f45d3e15fa8 RCX: 00007f45d3b9c799 [ 1042.454405][T17727] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45d3e15fa8 [ 1042.454414][T17727] RBP: 00007f45d3e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1042.454423][T17727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.454432][T17727] R13: 00007f45d3e16038 R14: 00007fff4e77b430 R15: 00007fff4e77b518 [ 1042.454452][T17727] [ 1042.723800][T12910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.625161][T12910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.632995][T12910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.804557][T12903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.866430][T12903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.028660][T14630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1045.047831][T14630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.059920][T14630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.068461][T14630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.076152][T14630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.376544][T12375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.144438][T14630] Bluetooth: hci3: command tx timeout [ 1047.206602][T12375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.718535][T12375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.949903][T12375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.246438][T17768] chnl_net:caif_netlink_parms(): no params data found [ 1048.886346][T17768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.893442][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.977596][T17768] bridge_slave_0: entered allmulticast mode [ 1049.025484][T17768] bridge_slave_0: entered promiscuous mode [ 1049.099845][T17768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.189407][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.226951][T14630] Bluetooth: hci3: command tx timeout [ 1049.274565][T17768] bridge_slave_1: entered allmulticast mode [ 1049.315201][T17768] bridge_slave_1: entered promiscuous mode [ 1049.561309][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.689123][T12375] netdevsim netdevsim1336 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.822905][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.835601][T17824] delete_channel: no stack [ 1050.097229][T17768] team0: Port device team_slave_0 added [ 1050.217613][T17768] team0: Port device team_slave_1 added [ 1050.424473][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.486312][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.624310][T17836] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1050.694221][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.764157][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.771191][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.017704][T17836] File: /dev/nullb0 PID: 17836 Comm: syz.2.2451 [ 1051.034622][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.334169][T14630] Bluetooth: hci3: command tx timeout [ 1051.514855][T17855] ------------[ cut here ]------------ [ 1051.521149][T17855] IS_ERR(old) [ 1051.521170][T17855] WARNING: kernel/tracepoint.c:367 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.0.2454/17855 [ 1051.535775][T17855] Modules linked in: [ 1051.540449][T17855] CPU: 0 UID: 0 PID: 17855 Comm: syz.0.2454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.551467][T17855] Tainted: [L]=SOFTLOCKUP [ 1051.555818][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1051.566418][T17855] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1051.573227][T17855] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 a0 df 09 82 48 c7 c7 c0 32 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1051.593907][T17855] RSP: 0018:ffffc900048978a8 EFLAGS: 00010287 [ 1051.600670][T17855] RAX: 00000000000073af RBX: 00000000fffffffe RCX: ffffc90005ae2000 [ 1051.608941][T17855] RDX: 0000000000080000 RSI: ffffffff8209f096 RDI: ffff8880288e3d00 [ 1051.617129][T17855] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1051.625233][T17855] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82100b60 [ 1051.633194][T17855] R13: 0000000000000302 R14: 0000000000000002 R15: ffffffff8f786f20 [ 1051.641535][T17855] FS: 00007f12efc986c0(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 [ 1051.650565][T17855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1051.657196][T17855] CR2: 0000001b33510ff8 CR3: 000000005004e000 CR4: 00000000003526f0 [ 1051.665512][T17855] Call Trace: [ 1051.669071][T17855] [ 1051.672022][T17855] tracing_stop_cmdline_record+0x66/0xa0 [ 1051.677747][T17855] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1051.684289][T17855] ftrace_event_set_open+0x224/0x380 [ 1051.689577][T17855] do_dentry_open+0x6d8/0x1660 [ 1051.694365][T17855] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1051.700172][T17855] vfs_open+0x82/0x3f0 [ 1051.704535][T17855] path_openat+0x208c/0x31a0 [ 1051.709373][T17855] ? __pfx_path_openat+0x10/0x10 [ 1051.714602][T17855] do_file_open+0x20e/0x430 [ 1051.719162][T17855] ? __pfx_do_file_open+0x10/0x10 [ 1051.724265][T17855] ? alloc_fd+0x476/0x790 [ 1051.729007][T17855] ? do_getname+0x191/0x390 [ 1051.733555][T17855] do_sys_openat2+0x10d/0x1e0 [ 1051.738328][T17855] ? __pfx_do_sys_openat2+0x10/0x10 [ 1051.743532][T17855] __x64_sys_openat+0x12d/0x210 [ 1051.748436][T17855] ? __pfx___x64_sys_openat+0x10/0x10 [ 1051.753825][T17855] do_syscall_64+0x106/0xf80 [ 1051.758442][T17855] ? clear_bhb_loop+0x40/0x90 [ 1051.763378][T17855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.769491][T17855] RIP: 0033:0x7f12eed9c799 [ 1051.773897][T17855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.793922][T17855] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1051.802931][T17855] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 1051.811282][T17855] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1051.819551][T17855] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1051.827614][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.835658][T17855] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 1051.843635][T17855] [ 1051.846705][T17855] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1051.853978][T17855] CPU: 0 UID: 0 PID: 17855 Comm: syz.0.2454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.864897][T17855] Tainted: [L]=SOFTLOCKUP [ 1051.869201][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1051.879233][T17855] Call Trace: [ 1051.882504][T17855] [ 1051.885425][T17855] dump_stack_lvl+0x100/0x190 [ 1051.890105][T17855] vpanic+0x552/0x970 [ 1051.894069][T17855] ? __pfx_vpanic+0x10/0x10 [ 1051.898558][T17855] panic+0xd1/0xe0 [ 1051.902259][T17855] ? __pfx_panic+0x10/0x10 [ 1051.906670][T17855] check_panic_on_warn.cold+0x19/0x34 [ 1051.912031][T17855] ? tracepoint_probe_unregister+0x837/0xd10 [ 1051.917991][T17855] __warn.cold+0x191/0x348 [ 1051.922405][T17855] __report_bug+0x296/0x3d0 [ 1051.926895][T17855] ? tracepoint_probe_unregister+0x837/0xd10 [ 1051.932860][T17855] ? __pfx___report_bug+0x10/0x10 [ 1051.937870][T17855] ? rcu_is_watching+0x12/0xc0 [ 1051.942622][T17855] ? trace_contention_end+0x140/0x180 [ 1051.947982][T17855] ? __mutex_lock+0x26a/0x1b90 [ 1051.952757][T17855] ? tracepoint_probe_unregister+0x31/0xd10 [ 1051.958636][T17855] ? tracepoint_probe_unregister+0x837/0xd10 [ 1051.964598][T17855] report_bug+0xb2/0x220 [ 1051.968830][T17855] ? tracepoint_probe_unregister+0x837/0xd10 [ 1051.974801][T17855] handle_bug+0x16a/0x2a0 [ 1051.979115][T17855] exc_invalid_op+0x17/0x50 [ 1051.983599][T17855] asm_exc_invalid_op+0x1a/0x20 [ 1051.988432][T17855] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1051.995090][T17855] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 a0 df 09 82 48 c7 c7 c0 32 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1052.014764][T17855] RSP: 0018:ffffc900048978a8 EFLAGS: 00010287 [ 1052.020903][T17855] RAX: 00000000000073af RBX: 00000000fffffffe RCX: ffffc90005ae2000 [ 1052.028859][T17855] RDX: 0000000000080000 RSI: ffffffff8209f096 RDI: ffff8880288e3d00 [ 1052.036906][T17855] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1052.044882][T17855] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82100b60 [ 1052.052842][T17855] R13: 0000000000000302 R14: 0000000000000002 R15: ffffffff8f786f20 [ 1052.060802][T17855] ? __pfx_probe_sched_switch+0x10/0x10 [ 1052.066337][T17855] ? tracepoint_probe_unregister+0x836/0xd10 [ 1052.072304][T17855] ? tracepoint_probe_unregister+0x836/0xd10 [ 1052.078272][T17855] tracing_stop_cmdline_record+0x66/0xa0 [ 1052.083893][T17855] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1052.089862][T17855] ftrace_event_set_open+0x224/0x380 [ 1052.095132][T17855] do_dentry_open+0x6d8/0x1660 [ 1052.099883][T17855] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1052.105676][T17855] vfs_open+0x82/0x3f0 [ 1052.109738][T17855] path_openat+0x208c/0x31a0 [ 1052.114343][T17855] ? __pfx_path_openat+0x10/0x10 [ 1052.119270][T17855] do_file_open+0x20e/0x430 [ 1052.123757][T17855] ? __pfx_do_file_open+0x10/0x10 [ 1052.128784][T17855] ? alloc_fd+0x476/0x790 [ 1052.133096][T17855] ? do_getname+0x191/0x390 [ 1052.137585][T17855] do_sys_openat2+0x10d/0x1e0 [ 1052.142249][T17855] ? __pfx_do_sys_openat2+0x10/0x10 [ 1052.147439][T17855] __x64_sys_openat+0x12d/0x210 [ 1052.152276][T17855] ? __pfx___x64_sys_openat+0x10/0x10 [ 1052.157641][T17855] do_syscall_64+0x106/0xf80 [ 1052.162237][T17855] ? clear_bhb_loop+0x40/0x90 [ 1052.166903][T17855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.172777][T17855] RIP: 0033:0x7f12eed9c799 [ 1052.177172][T17855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.196762][T17855] RSP: 002b:00007f12efc98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1052.205592][T17855] RAX: ffffffffffffffda RBX: 00007f12ef015fa0 RCX: 00007f12eed9c799 [ 1052.213547][T17855] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1052.221497][T17855] RBP: 00007f12eee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1052.229449][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.237398][T17855] R13: 00007f12ef016038 R14: 00007f12ef015fa0 R15: 00007ffca619e8e8 [ 1052.245364][T17855] [ 1052.248415][T17855] Kernel Offset: disabled [ 1052.252727][T17855] Rebooting in 86400 seconds..