last executing test programs: 43.613848067s ago: executing program 1 (id=4823): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b1, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68197}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) linkat$auto(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x202, 0x0) 40.655279936s ago: executing program 1 (id=4826): socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x1ff, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x800008000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x7ffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D1c\x00', 0x90000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) msync$auto(0x0, 0x8000, 0x6) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000140), r2) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r3, &(0x7f0000000140)="8e", 0x1) 38.735115976s ago: executing program 1 (id=4830): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xe1d2b27bdc14aabc) rt_sigtimedwait$auto(&(0x7f0000000040)={0x100000001}, &(0x7f0000000180)={@siginfo_0_0={0x7, 0x10000, 0x80000001, @_sigsys={&(0x7f0000000080)="c3ce717a14d50ea760b16e27fcece06ac4a6d056075d0aed105e634e201da37c028178bda9625f669689fda3729170688e0f7a8139ec30907ad8a1b3af3dccefc3cf5967849aa13e944fda05f9ec877d5805e019882a5d8a28a1b11e7825fe2848cce6a930326d0ec5ad397eb9de2bb1bdde9240ddfa06fde5c01d511fcb4f75d9773b7533796d7144f1d94405a52fd946b1ab3332e902551a11e4d929dea33da884c0cc520fda4f526fd2ed30a1da1852d9885dcec59411e8f1123975206ed138e162dcfcd24ff3b8ec936cba3757c52b49dd7c35f9157704bb3ee706b19e529a0c39a2e8e21ce565d29841dff70c2bb933dd6bf343bff34200e4cbcd", 0x7, 0xffff}}}, &(0x7f0000000200)={0x9, 0x2e}, 0x8) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(r1, 0x1, 0x4c, 0x0, 0xb) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x8000000) quotactl$auto(0x6ab, &(0x7f0000000280)='-*&&\x00', 0xee01, &(0x7f00000002c0)="4ba6e97be6abea764711c4de05c92abf1736b18377c3deae4fbf8e494490a7289d19e77ceaff8cfe33f7e47667536e0807c4dc8e0ad001967b8aec3d8777bfdec4d9be17b6a80d39b0dc41d0abf916c7cc88f6b362a42c771d06de2ef374923e3e0c4e4c9b1b92ba7e0e1038c39416174f7e806f6736a8533530d0de85bcd2da76803f8866c1c4dddafb71686bcdf1079ddf4de4daeb665e26c207902a68af6726507a851420e72a237e37f542a0cc4892f68495e10efa6877112eaaf6442b1e85496237a29ca44015928f8daf18bc9eb6d572b3ed958209dc8be8209fcc3d882188757246d8bfa4b3") close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) fallocate$auto(r0, 0xb, 0x2, 0x4cbd5d) 18.760121925s ago: executing program 2 (id=4847): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)="2dfc", 0x2) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r4, 0x0, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdb, 0xebf, r3, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f00000001c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0xffff) fanotify_init$auto(0x5, 0x0) creat$auto(0x0, 0x3ff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) read$auto(r0, 0x0, 0x20) r6 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, 0x0, 0x80001, 0x0) writev$auto(r6, &(0x7f0000000340)={0x0, 0x2}, 0x7) 18.709430169s ago: executing program 3 (id=4848): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) fdatasync$auto(r0) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x810000, 0xff8, 0x8000000008011, 0x3, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002ebd7000dddbdf251500000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) ioctl$auto(r2, 0x0, r0) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1dbc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8175}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) socket(0x2, 0x804, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x24008004) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) getpid() openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) 12.623435429s ago: executing program 3 (id=4850): timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f00000002c0)={@sival_int=0x5, @inferred, 0x0, @_sigev_thread={&(0x7f0000000040), &(0x7f00000001c0)="f822cd7deaad155fde8c7a369495c0a9e31c6af614aee49b66ec19f76a70adfeed6f09c9e81a1a9748c2c78b5caeed705050f65596285542bc8b8cdbc492aa8723c858f430fe7e5468e15f890a6a1b0647235780f988792b2b34003955fe8d8c464042657a688833f30e91ef9538332f69c866620b99135be8d4c8c0b93264ddfc0f79f669dece4bdfa437121c607afd9d5bc510d79a032b54d8028a56e0311da060dd0739c6c0cf"}}, &(0x7f0000000300)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, 0x0}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) 12.551468165s ago: executing program 2 (id=4851): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='efs\x00', 0x5, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, 0x0, 0x8, 0x30f) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x2000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setfsuid$auto(0xffffffffffffffff) shmctl$auto_SHM_INFO(0xff, 0xe, &(0x7f0000001240)={{0xfff, 0xffffffffffffffff, 0xee01, 0xc6, 0xa, 0x7, 0x7}, 0x5, 0xad61, 0x219c, 0x2, @raw=0x4, @inferred, 0x641, 0x0, &(0x7f00000001c0)="93dd9832761d7efb958d40cf71852aa9f850dd4ee013533facda51cc23668897ca66e0805fc9b3a5e003a943b3347c31cca6b8dc0899b486c12b21f4d978784a212e7910651b5825bc765b9fae99f38b96c0dbc29a24845941", &(0x7f0000000240)="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"}) r1 = setfsuid$auto(0xee00) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = pipe$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4096, 0x1000) write$auto(0x1, 0x0, 0x80000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/nfc/nfc1/rfkill1/index\x00', 0x408002, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x40002, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r1, 0xee00, 0x9, 0x17, 0x6, 0x1}, 0x6, 0x4, 0x7, 0x2, @raw=0xfffffff8, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000002800)="98184e760a0f452eb11ea06b99ff21207e3b8c3b220044babfe4265728b83289334ad0fe741aa5ca55a08562caac2a4250362d60e4fa7c638f6df5ce567f74be13b83c270559872f67c6a2b22bf7734c63c04d9ee81bc615e00b15ccc53a5b6ed9157d27379564431ff2b3f0b4fda06486a9c5a82249d257871870a1070a15c7beaadf0dc4213674015e96a424cd97bb46607a111c53e42e0b"}) 10.520456883s ago: executing program 2 (id=4852): socket(0x2, 0x3, 0xa) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, 0x0, &(0x7f0000000180)=0x40) mmap$auto(0x1ff, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x800008000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x7ffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D1c\x00', 0x90000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) msync$auto(0x0, 0x8000, 0x6) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000140), r2) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r3, &(0x7f0000000140)="8e", 0x1) 9.096706473s ago: executing program 2 (id=4855): socket(0x2, 0x3, 0xa) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, 0x0, &(0x7f0000000180)=0x40) mmap$auto(0x1ff, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x800008000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x7ffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D1c\x00', 0x90000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) msync$auto(0x0, 0x8000, 0x6) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000140), r2) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r3, &(0x7f0000000140)="8e", 0x1) 8.662902759s ago: executing program 3 (id=4856): mmap$auto(0x0, 0x20009, 0xdf, 0xeb3, 0x40000000000a5, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyu5\x00', 0x2182, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) rseq$auto(0x0, 0x8002, 0x0, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0x2f5, 0xffff0000) close_range$auto(r0, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) recvmmsg$auto(r2, 0x0, 0x10002, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) sendto$auto(r4, &(0x7f0000000280), 0x961, 0x2, &(0x7f0000000380)=@generic={0x28, "666f609439031b952d7e0226e619"}, 0x681f9ed6) write$auto(0x3, 0x0, 0xfdef) 7.86220679s ago: executing program 2 (id=4857): mmap$auto(0x0, 0x20009, 0xdf, 0xeb3, 0x40000000000a5, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyu5\x00', 0x2182, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) rseq$auto(0x0, 0x8002, 0x0, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0x2f5, 0xffff0000) close_range$auto(r0, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) recvmmsg$auto(r2, 0x0, 0x10002, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) sendto$auto(r4, &(0x7f0000000280), 0x961, 0x2, &(0x7f0000000380)=@generic={0x28, "666f609439031b952d7e0226e619"}, 0x681f9ed6) write$auto(0x3, 0x0, 0xfdef) 6.35236089s ago: executing program 0 (id=4859): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x149402, 0x0) r1 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x1}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/use_zero_pages\x00', 0x101082, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) write$auto_bm_register_operations_binfmt_misc(r1, &(0x7f0000000080)="cdb859", 0x3) close_range$auto(0x2, r0, 0x9) socket(0x29, 0x2, 0x0) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xd, 0x9816}, 0x7f, 0x0) ioctl$auto(0x4000000000000c8, 0x401054d6, r3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb1, 0xfffffffffffffffa, 0x18008000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) getsockopt$auto_SO_BUSY_POLL(r4, 0x29, 0x3a, 0x0, 0x0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, 0x0, 0x4000010) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) kill$auto(r5, 0x45) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) 5.924666688s ago: executing program 2 (id=4860): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) fdatasync$auto(r0) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x810000, 0xff8, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="13002ebd7000dddbdf251500000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) ioctl$auto(r1, 0x0, r0) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1dbc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8175}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) socket(0x2, 0x804, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x24008004) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) getpid() openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) 5.193818643s ago: executing program 0 (id=4861): socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) epoll_create$auto(0x3e) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x2) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400009, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000540)={0x8001, r2}) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250700000008000d0000000100"], 0x1c}}, 0x80) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x430, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xa5}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x3df, 0x2b, 0x0, 0x1, [@nested={0x87, 0xcf, 0x0, 0x1, [@generic="286d666b6cc3c94602f1e4c30515f5f5e52d0ffa7344034252e5c61e6a745b42ecf1a2ee2901b878cade513b8d21480b568bf232697931ccdd67e5313bd80bb67e6d2e3a7f800007ae503f350e64", @generic="089841b724570d7335b55778e204221ce9", @generic="cfc1ea2e7a3bda5e269026b6151495e5543f181e98b2d2368f3d9c5cfb7429a6aeaa430b"]}, @typed={0x8, 0x36, 0x0, 0x0, @uid}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@private2}, @generic="be93b2ab223347176f5ad884a0fafbf1458de1e41e708ed4c1057ffc806dd5f8bd069f41120ca5bce4bef349d08b87efcda8b80f87941e6506e3af04ed3ad4993b99c23787bbdb67f744ee396e9c23653d993a0c7774e6f76994cbb9a55cce1c109cd6ed695bb46524a0f978e0839f208a08462c9f532019ab5521cf8fbcf75a38153b7967316a49aa7703ff9ce0165d1212008138548b5ecd28166d77fa83290b297a8aef66768be1ff36a1ed4437039bb0187af0a14b0dd6f97fc876c1dc066b6e7a1dc2c6cd69f2a532f6e76726531e09c48240b9ca6e8a", @generic="7d1033e906e42bd950158be3aab42b451038fb6afdaa2531755239acdb15f5a37e0840409652fc819ff92d2ac3319433575324e1aa37c2a9ad35b3209473a06f0a977abdf0498bd581a53d0816723041b250adfbc8a834e9c53c41fa9e124cdf03554ef726644b632bde561e800b6e3d134b270b4ceb1db62be02ce0a12f6e54d23ab18dd3defa4fd4f2b753f60a4ad99b241dfc7cd18cf95f13e72bdb642c0ecb7d34de05ae242f6816a2f3e1aa", @nested={0x1ad, 0x92, 0x0, 0x1, [@generic="63f6cf56547ff049b4a32aa12814bb53103c788b2af06596e561ef95cff2c18ce14a3a90f7f52c861a543276e0b45bcdd6686a784b55c1b46763ca2f6c26f2e7a01808f714ed3e4d735958bd973b9160a89ffba96307bd2cea3f6d6886e53387a055c1f20e9a8c5618d13c21220133a5aa089125bd1a18c06881ef656514e6b01a350788eac1bae96c68b9c6fe77dac746e8865723b03ccb060ba4639ff4cfe06d8852ac6bf64d28ad7cdad1a2b0b5ed3f30bb23962a2e79f5cbd71d6f5ad3fe4f65686fc2c304549325e69fff973fea72f89c3a7ab40e4ece2cf61ab5c318", @generic="78597507cb47701cdb031c139e0504cfcceacfaefc99536d0186bdbeacc4877ba8d791af54bd1d3f3fed8e2d89c7bacbee13448eed8d6d19e1c3dc358c2f3907a50d57e395c16501728b6cbd5b1d40466fda8a6fd5af263bde3bbd0d53afeeef13bf991ae57eacc29be06be68e2452eac380fa138a1e63d16b6bbd1873e5eb076c23c0d07eb7b0134b96e310d599fd2b36c028af88d18d1b6ced3a9df1d4f1b7df8aa48690d99c6fec5ddf82d6ad7d8328acbae1a82110bf86c38b81b79492b473825ed12d4d", @nested={0x4, 0x75}]}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x5}]}, 0x430}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.515233491s ago: executing program 0 (id=4862): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec11\x00', 0x0, 0x0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000080)=@link_update={r0, @new_map_fd, 0x9, @old_map_fd}, 0x5) 4.496298824s ago: executing program 3 (id=4863): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xa, 0x9b72, 0xc, 0x800008000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2c65c0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/team0/retrans_time_ms\x00', 0x200400, 0x0) memfd_create$auto(0x0, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0p\x00', 0x2800, 0x0) ioctl$auto(r0, 0x560a, r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0xf000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open(0x0, 0x460342, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mremap$auto(0x3cbc271b, 0x68f, 0x8001, 0x2, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = pipe2$auto(0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, 0x0, 0x0) fsopen$auto(0x0, 0x1) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r2, 0x0, 0x663, 0x6) 4.145641235s ago: executing program 1 (id=4831): mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x4aa02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xe2, 0xeb1, 0x69a5, 0xa800000000000000) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r3 = socket(0x1a, 0x800, 0x0) setsockopt$auto(r3, 0x0, 0x4, 0x0, 0x25) bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x3}, 0x9) setsockopt$auto(0x3, 0x86, 0x2, 0x0, 0x8) mprotect$auto(0x200000000000, 0x806122, 0xc) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r2, 0x0, 0x100009) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop8/hctx0/dispatch_busy\x00', 0x2000, 0x0) unshare$auto(0x80) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000040)=""/163, 0xa3) sendfile$auto(0x3, r1, 0x0, 0x400000000006) semctl$auto_SETALL(0x3, 0xf, 0x11, 0x7) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) 4.138755357s ago: executing program 0 (id=4864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r5) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r0) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x23c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_HE_OBSS_PD={0x7c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4e}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x8}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x55, 0x4, "143f3928f40674ab0fba1456042dbf2dcfd9d9c5b375cb9cc0016bc8114dab57fb2a1aeaabd386a6101fc12e6628592a305d116ad6f78bcae624c73e6ea4443dd8b65f6412d221b5b9785219b47b1e491b"}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x13c, 0x131, 0x0, 0x1, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, "f2"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xad}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x102, 0x125, "62e8289679aee096f12d5dfc8b223d763f264521ad02b4a603021c8a3a8a1d592d732519e07c169cdc0755b575bc7945c6691ddd0fb51778ead0c896fd8046e5a70702c4e4df7985f375964e763ac99a632bb850313797d6245f30268f785a4da96d16dbcbc155d58430e8d80dec7c8af0050d05cefb6ea64d301c2c76b535afb5e3a0bf02215f80a0480d6451a695d4f51d66f618e78a465361337e72b4e47a681a73e3eed853bb6961afecd0b815253ed994462326f364f4946310b9ffa0e1069ce8fec443ffe424c418d8a94cd87fb813cfeaf27fc0fdf904cb93eb3fd562d4ee35301915b47daaefbda9f8a27e7e1384c2e84d650b1aadafa962b116"}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x60, 0x14e, "eef3c85f730e72003a55b20bba65387e9aa3474b0395a1f182605941c83859f9baa8942fcbe3ade87afb8568061e0ece642af054206df9cfbd3f159503c15e0c8d497f7e7f4b094e5eaa53f7b1656c076a57d67a40859054d808b26b"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x810}, 0x24040081) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r8}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r5}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xb, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000fcdbdf250100000008000800", @ANYRES32=r3, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01032cb57000fbdbdf250a0000000600010017"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r11 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf650900000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) 3.620566191s ago: executing program 0 (id=4865): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x10001, 0x8, 0x100000000}}) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560a, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x103) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) unshare$auto(0x40000080) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) acct$auto(&(0x7f0000002380)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00') close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x141041, 0x0) write$auto(r4, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3?f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x7, 0x2, 0x0, 0x6, 0x3) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x1000, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x29, 0x2c, 0x2, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0x16b000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b63, r3) msgctl$auto(0x2, 0x1, &(0x7f0000000200)={{0xb2, 0x0, 0xffffffffffffffff, 0x10000, 0x1, 0x1, 0x44}, &(0x7f0000000180)=0xf5, &(0x7f00000001c0)=0x3, 0x2, 0xe7, 0xa2, 0x6, 0xfffffffffffffff9, 0x0, 0xb69, 0xb, @raw=0x6, @raw=0x7}) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x403) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 1.548047693s ago: executing program 1 (id=4868): unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000400)="42496fe17b780b0548ad3204074b6f01fb4ab25f83fb8b85bfb2f172f2d4c12ef011e35c000458c82d6c2cf1a6de386dee2593b9712d19f9943fcb6796d280d75bd9b951c0156ab4f478c76649d6eb05992a553cfc6190a837fef8a4af5d13e21079c6c25ca78523d319297c047d194400"/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001efc694faf1227c00cb9baa6ae7416c8d65df96d6f24581f882336fde7f31a0180c2f71badbcabf485b5a856f103d68145bd886ff56217802aa9780056ab4c44fc91c5dc0700000053308bf812b504f61b0ea5b765a0ffe5437ff4acd3f9ab8f08403a609566bb9e33a65f5553a38023a80eb45e8d23443df286da6f80ac24e2bc1297d650c1ced5bab90f7a7fe68c5d3560c649f712e62fa0e558ca51f39f449d7e761e7b3adde272f0fa58a5944c33fd6bc456c7fc28607d123a290e27a21f4351fbf273b7e37e0109d59a487eb1662a6d33ba89c1bf0248b6843a34fb7db0ccf0349211f32b859b81a246ad6a90ed112bbc4064b460", @ANYRES16=r2, @ANYBLOB="0100253d7000fddbdf2501000000140007800c0001800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x10309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) 1.277743549s ago: executing program 0 (id=4869): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) fdatasync$auto(r0) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x810000, 0xff8, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="13002ebd7000dddbdf251500000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) ioctl$auto(r1, 0x0, r0) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1dbc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8175}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) socket(0x2, 0x804, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x24008004) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) getpid() openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) 100.187611ms ago: executing program 3 (id=4870): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) r0 = socket(0x10, 0x3, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000a80)=@bpf_attr_3={0x0, 0x1, 0x100000001, 0x2, 0x2, 0x6, 0x6120865b, 0x10, 0xccb, "411ee11343ab7a378e52fa1977c7bc4c", 0x0, 0x7, 0xffffffffffffffff, 0x8001, 0xc, 0x2, 0x8, 0x8, 0x7, 0x8, @attach_btf_obj_fd, 0x825e, 0x1, 0x2, 0x80000001, 0x5}, 0x100) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r3, 0x0, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r4 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000300)="de91b83a075ce51fff544f85b0b6d328f3beb9b8634fd16bf2701cb13a2d93abd414c9a1586e4fbc7b163c42c4783614b2dcf995a43c8cf63d102facaebb7019f67c4241ee77139ef43eac615fcf4ca071ad7ecd284cb135be34415cca234d6a11827f2178354b81a06111504ccdbebb0a5fe8cce82085a67d2b34e551a52a59", 0x80) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) setns(0xffffffffffffffff, 0x2000000) shmctl$auto(0x1d, 0x58, &(0x7f0000000340)={{0x2, 0xee00, 0xee01, 0x6, 0x9, 0x7, 0x5}, 0x2, 0xfffffffffffffffd, 0x7, 0x7, @raw=0x6, @raw=0xbe, 0x1, 0x0, &(0x7f0000000180), &(0x7f0000000240)="0ef32451a60d2cc131fc3bd79f24803892096ce0b6f220150548040098f54447a216bb9ebffa36194bb2811eaf5f8d4d34264b16821295d4fe6bf68c4c2007f60a394f3cf79e0fe1f0decdd2f3a9e30143e5e8e80e7d7a4397d59dad8c6196617da6e6a905e8a6bd1676c13a150fe05dee9f52d591926ac06e243d419e6eb862c59f6bf2f42a55224b3233a82e8068b35229f3b4f5ce6de7440e1b56fe0fe5aa5b444d061d7eb1d011468b205134e67467c67e44b3b97e50a41751492683f287af2f26885424398735818c5f81c7c6848cfaf6334fa40006d78284e1fcda7cf198e3ae0a12fbe6322886b83665ed4487d5d6a78300e9be7d94"}) quotactl_fd$auto(r6, 0x2, r8, &(0x7f00000003c0)="9f52291e498685be2776eab6237834e85f2e25e426a9a6f2a804cd74d3a8a02c9b9d3638d79138a8e5c3b0088e9e776f5f0c5922dd86f7211af986aab3bf") r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}]}, 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) sendmsg$auto_NL80211_CMD_GET_STATION(r4, 0x0, 0x24044081) r11 = fcntl$auto_F_GETOWN(r5, 0x9, 0x1) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={"60dfcb2f3ca90a6e4c554b99e71b2ec9943eb95f5258c7bd86f34d792defe1e5", 0xffff, 0x1000, 0x8, 0xf8b6, 0x6c, r11}) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x3}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040015) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) r12 = socket$nl_generic(0x10, 0x3, 0x10) process_mrelease$auto(0xffffffffffffffff, 0xe89) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r12, 0x1, 0x53, &(0x7f0000000180)='\x91u\xe5?{\x00\x00\x00', 0x7) 0s ago: executing program 1 (id=4871): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrlimit$auto(0x3, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x5, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x2}, 0x0, @bytes=@data_ptr=0x0, "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0603d06, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000003, 0x0, 0x7, 0x0, 0x7, 0x201d55}, 0x2}, 0x800, 0x80000000) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r5 = socket(0x2, 0x3, 0xa) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) pread64$auto(r3, 0x0, 0x7, 0xffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r6 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r6, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) kernel console output (not intermixed with test programs): : 00007ff4a419ce59 [ 2100.712064][T29590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2100.712079][T29590] RBP: 00007ff4a4232d6f R08: 0000000000000000 R09: 0000000000000000 [ 2100.712094][T29590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2100.712109][T29590] R13: 00007ff4a4416038 R14: 00007ff4a4415fa0 R15: 00007ffd8bb68d18 [ 2100.712141][T29590] [ 2101.058255][T29042] syz.1.4083 (29042) used greatest stack depth: 18616 bytes left [ 2102.605836][T29621] futex_wake_op: syz.0.4187 tries to shift op by -2048; fix this program [ 2102.703648][T29621] futex_wake_op: syz.0.4187 tries to shift op by -2048; fix this program [ 2102.829019][ T30] audit: type=1800 audit(2147483799.096:18): pid=29622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4187" name="lu_gp_id" dev="configfs" ino=117432 res=0 errno=0 [ 2102.860479][T29622] kstrtoul() returned -22 for lu_gp_id [ 2103.024079][T29627] futex_wake_op: syz.2.4188 tries to shift op by -2048; fix this program [ 2103.071914][T29627] futex_wake_op: syz.2.4188 tries to shift op by -2048; fix this program [ 2103.130749][T29631] 0x000000000001-0x000000020000 : "" [ 2103.211613][T29631] ftl_cs: FTL header corrupt! [ 2103.407348][ T30] audit: type=1800 audit(2147483799.679:19): pid=29635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4188" name="lu_gp_id" dev="configfs" ino=117563 res=0 errno=0 [ 2103.441396][T29635] kstrtoul() returned -22 for lu_gp_id [ 2104.068065][T29643] bond0: invalid ARP target specified [ 2104.881738][T29646] bond0: invalid ARP target specified [ 2105.400873][T29667] bond0: invalid ARP target specified [ 2105.801491][T29668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'. [ 2107.790815][T29695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'. [ 2109.050932][T29703] futex_wake_op: syz.1.4202 tries to shift op by -2048; fix this program [ 2109.097337][T29703] futex_wake_op: syz.1.4202 tries to shift op by -2048; fix this program [ 2109.161553][T29703] 0x000000000001-0x000000020000 : "" [ 2109.218279][T29703] ftl_cs: FTL header corrupt! [ 2109.482512][ T30] audit: type=1800 audit(2147483805.781:20): pid=29708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4202" name="lu_gp_id" dev="configfs" ino=118038 res=0 errno=0 [ 2109.503902][T29708] kstrtoul() returned -22 for lu_gp_id [ 2110.715718][ T30] audit: type=1807 audit(2147483807.007:21): UNKNOWN=$ res=0 [ 2110.733195][T29722] ima: policy update failed [ 2110.755107][ T30] audit: type=1802 audit(2147483807.017:22): pid=29722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.4205" res=0 errno=0 [ 2110.865024][ T30] audit: type=1802 audit(2147483807.088:23): pid=29722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4205" res=0 errno=0 [ 2110.887197][T29722] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=65544 (2097408 ns) > initial count (61280 ns). Using initial count to start timer. [ 2111.696800][T29721] bond0: invalid ARP target specified [ 2114.551417][T29754] bond0: invalid ARP target specified [ 2115.318349][T29772] FAULT_INJECTION: forcing a failure. [ 2115.318349][T29772] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.460198][T29772] CPU: 0 UID: 0 PID: 29772 Comm: syz.1.4213 Tainted: G L syzkaller #0 PREEMPT(full) [ 2115.460238][T29772] Tainted: [L]=SOFTLOCKUP [ 2115.460247][T29772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2115.460263][T29772] Call Trace: [ 2115.460272][T29772] [ 2115.460282][T29772] dump_stack_lvl+0x100/0x190 [ 2115.460313][T29772] should_fail_ex.cold+0x5/0xa [ 2115.460346][T29772] ? ops_init+0x77/0x5f0 [ 2115.460372][T29772] should_failslab+0xc2/0x120 [ 2115.460402][T29772] __kmalloc_noprof+0xe0/0x850 [ 2115.460425][T29772] ? brnf_init_net+0x2bc/0x450 [ 2115.460455][T29772] ops_init+0x77/0x5f0 [ 2115.460485][T29772] setup_net+0x118/0x3a0 [ 2115.460513][T29772] ? __pfx_setup_net+0x10/0x10 [ 2115.460543][T29772] ? mutex_init_lockdep+0xf1/0x120 [ 2115.460573][T29772] copy_net_ns+0x46f/0x7c0 [ 2115.460605][T29772] create_new_namespaces+0x3ea/0xac0 [ 2115.460646][T29772] unshare_nsproxy_namespaces+0xf2/0x220 [ 2115.460681][T29772] ksys_unshare+0x438/0xab0 [ 2115.460718][T29772] ? __pfx_ksys_unshare+0x10/0x10 [ 2115.460752][T29772] ? xfd_validate_state+0x129/0x190 [ 2115.460776][T29772] ? exit_to_user_mode_loop+0xf3/0x670 [ 2115.460826][T29772] __x64_sys_unshare+0x31/0x40 [ 2115.460862][T29772] do_syscall_64+0x115/0x840 [ 2115.460898][T29772] ? clear_bhb_loop+0x40/0x90 [ 2115.460929][T29772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2115.460955][T29772] RIP: 0033:0x7ff4a419ce59 [ 2115.460975][T29772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2115.461000][T29772] RSP: 002b:00007ff4a510f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2115.461023][T29772] RAX: ffffffffffffffda RBX: 00007ff4a4415fa0 RCX: 00007ff4a419ce59 [ 2115.461047][T29772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2115.461062][T29772] RBP: 00007ff4a4232d6f R08: 0000000000000000 R09: 0000000000000000 [ 2115.461077][T29772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2115.461092][T29772] R13: 00007ff4a4416038 R14: 00007ff4a4415fa0 R15: 00007ffd8bb68d18 [ 2115.461124][T29772] [ 2116.989888][T29785] ubi0: attaching mtd0 [ 2117.162485][T29785] ubi0: scanning is finished [ 2117.259469][T29785] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 2117.765229][T29785] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 2118.932267][T29805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4221'. [ 2122.112640][T29844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4228'. [ 2122.266800][T29851] futex_wake_op: syz.1.4229 tries to shift op by -2048; fix this program [ 2122.348187][T29851] futex_wake_op: syz.1.4229 tries to shift op by -2048; fix this program [ 2122.433957][T29853] 0x000000000001-0x000000020000 : "" [ 2122.503098][T29853] ftl_cs: FTL header corrupt! [ 2122.612665][T29840] block2mtd: too many arguments [ 2122.710999][ T30] audit: type=1800 audit(2147483819.080:24): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4229" name="lu_gp_id" dev="configfs" ino=119024 res=0 errno=0 [ 2122.739663][T29856] kstrtoul() returned -22 for lu_gp_id [ 2123.932194][T29864] futex_wake_op: syz.0.4230 tries to shift op by -2048; fix this program [ 2123.990173][T29860] NFSD: Failed to start, no listeners configured. [ 2124.019461][T29864] futex_wake_op: syz.0.4230 tries to shift op by -2048; fix this program [ 2124.100049][T29867] kstrtoul() returned -22 for lu_gp_id [ 2124.105725][ T30] audit: type=1800 audit(2147483820.467:25): pid=29867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4230" name="lu_gp_id" dev="configfs" ino=119159 res=0 errno=0 [ 2125.436251][T29884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 2127.417422][T29911] futex_wake_op: syz.1.4239 tries to shift op by -2048; fix this program [ 2127.557685][T29911] futex_wake_op: syz.1.4239 tries to shift op by -2048; fix this program [ 2127.673417][ T30] audit: type=1800 audit(2147483824.065:26): pid=29913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4239" name="lu_gp_id" dev="configfs" ino=119360 res=0 errno=0 [ 2127.703488][T29911] kstrtoul() returned -22 for lu_gp_id [ 2127.897950][T29908] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 2130.531540][T29944] ovs_: entered promiscuous mode [ 2130.561017][T29935] bond0: invalid ARP target specified [ 2131.833196][T29976] futex_wake_op: syz.2.4251 tries to shift op by -2048; fix this program [ 2131.924849][T29976] futex_wake_op: syz.2.4251 tries to shift op by -2048; fix this program [ 2132.018620][ T30] audit: type=1800 audit(2147483828.438:27): pid=29979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4251" name="lu_gp_id" dev="configfs" ino=119584 res=0 errno=0 [ 2132.050999][T29979] kstrtoul() returned -22 for lu_gp_id [ 2132.600442][T29956] block2mtd: too many arguments [ 2132.675193][T29989] futex_wake_op: syz.2.4253 tries to shift op by -2048; fix this program [ 2132.806761][T29989] futex_wake_op: syz.2.4253 tries to shift op by -2048; fix this program [ 2132.877450][ T30] audit: type=1800 audit(2147483829.303:28): pid=29994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4253" name="lu_gp_id" dev="configfs" ino=119646 res=0 errno=0 [ 2132.902487][T29994] kstrtoul() returned -22 for lu_gp_id [ 2137.090188][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4260'. [ 2143.131444][T30086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'. [ 2144.260448][ T30] audit: type=1800 audit(2147483840.742:29): pid=30100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4275" name=04 dev="tmpfs" ino=2381 res=0 errno=0 [ 2151.947393][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4287'. [ 2155.495203][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2155.501649][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2156.007959][T30223] futex_wake_op: syz.0.4299 tries to shift op by -2048; fix this program [ 2156.071897][T30223] futex_wake_op: syz.0.4299 tries to shift op by -2048; fix this program [ 2156.128656][T30224] 0x000000000001-0x000000020000 : "" [ 2156.192536][T30224] ftl_cs: FTL header corrupt! [ 2156.617374][ T30] audit: type=1800 audit(2147483853.055:30): pid=30229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4299" name="lu_gp_id" dev="configfs" ino=120707 res=0 errno=0 [ 2158.040150][T30241] futex_wake_op: syz.2.4302 tries to shift op by -2048; fix this program [ 2158.109722][T30241] futex_wake_op: syz.2.4302 tries to shift op by -2048; fix this program [ 2158.177538][ T30] audit: type=1800 audit(2147483854.724:31): pid=30242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4302" name="lu_gp_id" dev="configfs" ino=120844 res=0 errno=0 [ 2158.199630][T30242] kstrtoul() returned -22 for lu_gp_id [ 2159.276803][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'. [ 2161.986904][ T30] audit: type=1800 audit(2147483858.554:32): pid=30274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4307" name=04 dev="tmpfs" ino=2429 res=0 errno=0 [ 2165.167459][T30325] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input37 [ 2167.652154][T30347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4324'. [ 2170.618380][T30399] futex_wake_op: syz.2.4332 tries to shift op by -2048; fix this program [ 2170.854008][T30399] futex_wake_op: syz.2.4332 tries to shift op by -2048; fix this program [ 2170.939293][ T30] audit: type=1800 audit(2147483867.560:33): pid=30402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4332" name="lu_gp_id" dev="configfs" ino=121651 res=0 errno=0 [ 2170.973638][T30399] kstrtoul() returned -22 for lu_gp_id [ 2171.274900][T30406] futex_wake_op: syz.1.4333 tries to shift op by -2048; fix this program [ 2171.359748][T30406] futex_wake_op: syz.1.4333 tries to shift op by -2048; fix this program [ 2171.460724][T30410] 0x000000000001-0x000000020000 : "" [ 2171.586674][T30410] ftl_cs: FTL header corrupt! [ 2171.794990][ T30] audit: type=1800 audit(2147483868.415:34): pid=30406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4333" name="lu_gp_id" dev="configfs" ino=121711 res=0 errno=0 [ 2171.838970][T30406] kstrtoul() returned -22 for lu_gp_id [ 2172.656915][T30423] FAULT_INJECTION: forcing a failure. [ 2172.656915][T30423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2172.736741][T30423] CPU: 0 UID: 0 PID: 30423 Comm: syz.2.4335 Tainted: G L syzkaller #0 PREEMPT(full) [ 2172.736779][T30423] Tainted: [L]=SOFTLOCKUP [ 2172.736788][T30423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2172.736802][T30423] Call Trace: [ 2172.736811][T30423] [ 2172.736819][T30423] dump_stack_lvl+0x100/0x190 [ 2172.736849][T30423] should_fail_ex.cold+0x5/0xa [ 2172.736880][T30423] _copy_to_user+0x32/0xd0 [ 2172.736917][T30423] simple_read_from_buffer+0xcb/0x170 [ 2172.736948][T30423] proc_fail_nth_read+0x1af/0x230 [ 2172.736987][T30423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2172.737028][T30423] ? rw_verify_area+0xce/0x6d0 [ 2172.737051][T30423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2172.737098][T30423] vfs_read+0x1e4/0xb30 [ 2172.737129][T30423] ? __pfx_vfs_read+0x10/0x10 [ 2172.737155][T30423] ? __fget_files+0x215/0x3d0 [ 2172.737189][T30423] ? __fget_files+0x21f/0x3d0 [ 2172.737226][T30423] ksys_read+0x12a/0x250 [ 2172.737252][T30423] ? __pfx_ksys_read+0x10/0x10 [ 2172.737281][T30423] ? rcu_is_watching+0x12/0xc0 [ 2172.737313][T30423] do_syscall_64+0x115/0x840 [ 2172.737350][T30423] ? clear_bhb_loop+0x40/0x90 [ 2172.737379][T30423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.737406][T30423] RIP: 0033:0x7efeb075d68e [ 2172.737425][T30423] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2172.737449][T30423] RSP: 002b:00007efeb1581fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2172.737473][T30423] RAX: ffffffffffffffda RBX: 00007efeb15826c0 RCX: 00007efeb075d68e [ 2172.737489][T30423] RDX: 000000000000000f RSI: 00007efeb15820a0 RDI: 0000000000000005 [ 2172.737504][T30423] RBP: 00007efeb1582090 R08: 0000000000000000 R09: 0000000000000000 [ 2172.737518][T30423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2172.737532][T30423] R13: 00007efeb0a16038 R14: 00007efeb0a15fa0 R15: 00007ffe1f4210c8 [ 2172.737562][T30423] [ 2175.217276][T30456] bond0: invalid ARP target specified [ 2176.949067][T30446] Process accounting resumed [ 2179.937596][T30495] bond0: invalid ARP target specified [ 2180.565679][T30512] futex_wake_op: syz.2.4353 tries to shift op by -2048; fix this program [ 2180.613409][T30512] futex_wake_op: syz.2.4353 tries to shift op by -2048; fix this program [ 2180.711113][T30512] 0x000000000001-0x000000020000 : "" [ 2180.740212][T30502] bond0: invalid ARP target specified [ 2180.765520][T30512] ftl_cs: FTL header corrupt! [ 2181.036820][T30510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4352'. [ 2181.116479][ T30] audit: type=1800 audit(2147483877.783:35): pid=30518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4353" name="lu_gp_id" dev="configfs" ino=122357 res=0 errno=0 [ 2181.160882][T30518] kstrtoul() returned -22 for lu_gp_id [ 2181.500623][T30521] No such timeout policy "" [ 2185.940950][T30548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4358'. [ 2187.123208][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4360'. [ 2187.584586][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 2190.001416][T30593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'. [ 2194.330431][T30647] futex_wake_op: syz.3.4373 tries to shift op by -2048; fix this program [ 2194.391130][T30647] futex_wake_op: syz.3.4373 tries to shift op by -2048; fix this program [ 2194.429166][T30648] 0x000000000001-0x000000020000 : "" [ 2194.465004][T30648] ftl_cs: FTL header corrupt! [ 2194.769038][ T30] audit: type=1800 audit(2147483891.504:36): pid=30653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4373" name="lu_gp_id" dev="configfs" ino=122962 res=0 errno=0 [ 2194.794572][T30653] kstrtoul() returned -22 for lu_gp_id [ 2196.372094][T30671] futex_wake_op: syz.2.4377 tries to shift op by -2048; fix this program [ 2196.422248][T30671] futex_wake_op: syz.2.4377 tries to shift op by -2048; fix this program [ 2196.497531][T30678] 0x000000000001-0x000000020000 : "" [ 2196.630839][T30678] ftl_cs: FTL header corrupt! [ 2196.826738][T30685] futex_wake_op: syz.3.4379 tries to shift op by -2048; fix this program [ 2196.846927][ T30] audit: type=1800 audit(2147483893.595:37): pid=30682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4377" name="lu_gp_id" dev="configfs" ino=123114 res=0 errno=0 [ 2196.874791][T30682] kstrtoul() returned -22 for lu_gp_id [ 2196.902604][T30685] futex_wake_op: syz.3.4379 tries to shift op by -2048; fix this program [ 2197.052454][T30685] kstrtoul() returned -22 for lu_gp_id [ 2200.863736][T30724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4387'. [ 2201.102872][T30724] ipvlan1: entered promiscuous mode [ 2201.127841][T30724] ipvlan1: entered allmulticast mode [ 2201.166750][T30724] veth0_vlan: entered allmulticast mode [ 2203.813540][T30757] FAULT_INJECTION: forcing a failure. [ 2203.813540][T30757] name failslab, interval 1, probability 0, space 0, times 0 [ 2203.966730][T30757] CPU: 0 UID: 0 PID: 30757 Comm: syz.2.4394 Tainted: G L syzkaller #0 PREEMPT(full) [ 2203.966768][T30757] Tainted: [L]=SOFTLOCKUP [ 2203.966777][T30757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2203.966794][T30757] Call Trace: [ 2203.966801][T30757] [ 2203.966811][T30757] dump_stack_lvl+0x100/0x190 [ 2203.966845][T30757] should_fail_ex.cold+0x5/0xa [ 2203.966876][T30757] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2203.966913][T30757] should_failslab+0xc2/0x120 [ 2203.966943][T30757] __kmalloc_noprof+0xe0/0x850 [ 2203.966968][T30757] ? kfree+0x1dd/0x6c0 [ 2203.967005][T30757] tomoyo_realpath_from_path+0xb6/0x690 [ 2203.967047][T30757] tomoyo_path_number_perm+0x23c/0x580 [ 2203.967076][T30757] ? tomoyo_path_number_perm+0x22e/0x580 [ 2203.967108][T30757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2203.967165][T30757] ? find_held_lock+0x2b/0x80 [ 2203.967195][T30757] ? __fget_files+0x215/0x3d0 [ 2203.967223][T30757] ? hook_file_ioctl_common+0x149/0x410 [ 2203.967253][T30757] ? __fget_files+0x215/0x3d0 [ 2203.967285][T30757] ? __fget_files+0x21f/0x3d0 [ 2203.967317][T30757] security_file_ioctl+0xd3/0x230 [ 2203.967355][T30757] __x64_sys_ioctl+0xb7/0x210 [ 2203.967381][T30757] do_syscall_64+0x115/0x840 [ 2203.967417][T30757] ? clear_bhb_loop+0x40/0x90 [ 2203.967447][T30757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.967471][T30757] RIP: 0033:0x7efeb079ce59 [ 2203.967491][T30757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2203.967523][T30757] RSP: 002b:00007efeae9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2203.967546][T30757] RAX: ffffffffffffffda RBX: 00007efeb0a16180 RCX: 00007efeb079ce59 [ 2203.967562][T30757] RDX: 000020000000c380 RSI: 00000000c0606610 RDI: 0000000000000003 [ 2203.967578][T30757] RBP: 00007efeae9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2203.967595][T30757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.967609][T30757] R13: 00007efeb0a16218 R14: 00007efeb0a16180 R15: 00007ffe1f4210c8 [ 2203.967640][T30757] [ 2204.224633][T30757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2204.487785][T30767] futex_wake_op: syz.3.4398 tries to shift op by -2048; fix this program [ 2204.497000][T30767] futex_wake_op: syz.3.4398 tries to shift op by -2048; fix this program [ 2204.509443][T30767] 0x000000000001-0x000000020000 : "" [ 2204.623869][T30767] ftl_cs: FTL header corrupt! [ 2204.668425][T30770] kstrtoul() returned -22 for lu_gp_id [ 2204.674034][ T30] audit: type=1800 audit(2147483901.456:38): pid=30770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4398" name="lu_gp_id" dev="configfs" ino=123623 res=0 errno=0 [ 2205.809682][T30782] mtrr: base(0x2000000) is not aligned on a size(0x0000) boundary [ 2205.850148][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4395'. [ 2206.465876][T30789] futex_wake_op: syz.3.4401 tries to shift op by -2048; fix this program [ 2206.843102][T30789] futex_wake_op: syz.3.4401 tries to shift op by -2048; fix this program [ 2207.382505][ T30] audit: type=1800 audit(2147483904.069:39): pid=30790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4401" name="lu_gp_id" dev="configfs" ino=123809 res=0 errno=0 [ 2208.655946][T30795] bond0: invalid ARP target specified [ 2210.116341][T30788] Process accounting paused [ 2210.284495][T30800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 2211.806886][T30826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4407'. [ 2212.980891][T30848] futex_wake_op: syz.3.4413 tries to shift op by -2048; fix this program [ 2213.050418][T30848] futex_wake_op: syz.3.4413 tries to shift op by -2048; fix this program [ 2213.168449][ T30] audit: type=1800 audit(2147483910.010:40): pid=30851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4413" name="lu_gp_id" dev="configfs" ino=124047 res=0 errno=0 [ 2213.199170][T30851] kstrtoul() returned -22 for lu_gp_id [ 2213.302122][T30852] FAULT_INJECTION: forcing a failure. [ 2213.302122][T30852] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2213.504700][T30852] CPU: 0 UID: 0 PID: 30852 Comm: syz.0.4408 Tainted: G L syzkaller #0 PREEMPT(full) [ 2213.504739][T30852] Tainted: [L]=SOFTLOCKUP [ 2213.504748][T30852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2213.504763][T30852] Call Trace: [ 2213.504771][T30852] [ 2213.504781][T30852] dump_stack_lvl+0x100/0x190 [ 2213.504811][T30852] should_fail_ex.cold+0x5/0xa [ 2213.504843][T30852] get_futex_key+0x1d2/0x1510 [ 2213.504891][T30852] ? __pfx_get_futex_key+0x10/0x10 [ 2213.504931][T30852] ? find_held_lock+0x2b/0x80 [ 2213.504961][T30852] ? futex_wake+0x456/0x530 [ 2213.504997][T30852] futex_wake+0xea/0x530 [ 2213.505030][T30852] ? __pfx_futex_wake+0x10/0x10 [ 2213.505064][T30852] ? find_held_lock+0x2b/0x80 [ 2213.505093][T30852] ? do_sys_openat2+0x1b4/0x1e0 [ 2213.505138][T30852] do_futex+0x32b/0x350 [ 2213.505164][T30852] ? __pfx_do_futex+0x10/0x10 [ 2213.505196][T30852] __x64_sys_futex+0x34f/0x4d0 [ 2213.505224][T30852] ? fdget_pos+0x2c0/0x380 [ 2213.505255][T30852] ? __pfx___x64_sys_futex+0x10/0x10 [ 2213.505281][T30852] ? ksys_write+0x1ac/0x250 [ 2213.505308][T30852] ? __pfx_ksys_write+0x10/0x10 [ 2213.505339][T30852] ? rcu_is_watching+0x12/0xc0 [ 2213.505371][T30852] do_syscall_64+0x115/0x840 [ 2213.505406][T30852] ? clear_bhb_loop+0x40/0x90 [ 2213.505435][T30852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2213.505471][T30852] RIP: 0033:0x7fcc4f59ce59 [ 2213.505491][T30852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2213.505515][T30852] RSP: 002b:00007fcc504cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2213.505538][T30852] RAX: ffffffffffffffda RBX: 00007fcc4f816188 RCX: 00007fcc4f59ce59 [ 2213.505554][T30852] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc4f81618c [ 2213.505570][T30852] RBP: 00007fcc4f816180 R08: 0000000000000001 R09: 0000000000000000 [ 2213.505584][T30852] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2213.505599][T30852] R13: 00007fcc4f816218 R14: 00007ffc26a66d40 R15: 00007ffc26a66e28 [ 2213.505629][T30852] [ 2216.620615][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2216.632596][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2218.373098][T30893] futex_wake_op: syz.3.4419 tries to shift op by -2048; fix this program [ 2218.477931][T30893] futex_wake_op: syz.3.4419 tries to shift op by -2048; fix this program [ 2218.603478][ T30] audit: type=1800 audit(2147483915.468:41): pid=30895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4419" name="lu_gp_id" dev="configfs" ino=124279 res=0 errno=0 [ 2218.630083][T30895] kstrtoul() returned -22 for lu_gp_id [ 2218.914430][T30900] futex_wake_op: syz.2.4421 tries to shift op by -2048; fix this program [ 2218.992819][T30900] futex_wake_op: syz.2.4421 tries to shift op by -2048; fix this program [ 2219.039617][T30901] 0x000000000001-0x000000020000 : "" [ 2219.131747][T30901] ftl_cs: FTL header corrupt! [ 2221.956062][T30926] block2mtd: too many arguments [ 2224.464740][T30971] futex_wake_op: syz.0.4435 tries to shift op by -2048; fix this program [ 2224.506554][T30971] futex_wake_op: syz.0.4435 tries to shift op by -2048; fix this program [ 2224.588295][ T30] audit: type=1800 audit(2147483921.489:42): pid=30971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4435" name="lu_gp_id" dev="configfs" ino=124838 res=0 errno=0 [ 2224.610391][T30971] kstrtoul() returned -22 for lu_gp_id [ 2225.589058][T30983] block2mtd: error: cannot open device çi [ 2226.274484][T30990] block2mtd: too many arguments [ 2228.484733][T31012] bond0: invalid ARP target specified [ 2229.439518][T31030] bond0: invalid ARP target specified [ 2230.102258][T31041] futex_wake_op: syz.0.4449 tries to shift op by -2048; fix this program [ 2230.130500][T31041] futex_wake_op: syz.0.4449 tries to shift op by -2048; fix this program [ 2230.200779][ T30] audit: type=1800 audit(2147483927.129:43): pid=31041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4449" name="lu_gp_id" dev="configfs" ino=125378 res=0 errno=0 [ 2230.226037][T31041] kstrtoul() returned -22 for lu_gp_id [ 2232.118432][T31063] FAULT_INJECTION: forcing a failure. [ 2232.118432][T31063] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.194097][T31063] CPU: 0 UID: 0 PID: 31063 Comm: syz.0.4454 Tainted: G L syzkaller #0 PREEMPT(full) [ 2232.194137][T31063] Tainted: [L]=SOFTLOCKUP [ 2232.194147][T31063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2232.194162][T31063] Call Trace: [ 2232.194171][T31063] [ 2232.194181][T31063] dump_stack_lvl+0x100/0x190 [ 2232.194212][T31063] should_fail_ex.cold+0x5/0xa [ 2232.194244][T31063] should_failslab+0xc2/0x120 [ 2232.194275][T31063] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2232.194315][T31063] ? do_epoll_ctl+0x2434/0x36a0 [ 2232.194356][T31063] do_epoll_ctl+0x2434/0x36a0 [ 2232.194402][T31063] ? __pfx_do_epoll_ctl+0x10/0x10 [ 2232.194434][T31063] ? find_held_lock+0x2b/0x80 [ 2232.194464][T31063] ? __might_fault+0xc5/0x140 [ 2232.194508][T31063] ? __might_fault+0xc5/0x140 [ 2232.194558][T31063] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 2232.194594][T31063] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 2232.194630][T31063] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 2232.194681][T31063] ? rcu_is_watching+0x12/0xc0 [ 2232.194714][T31063] do_syscall_64+0x115/0x840 [ 2232.194750][T31063] ? clear_bhb_loop+0x40/0x90 [ 2232.194781][T31063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.194816][T31063] RIP: 0033:0x7fcc4f59ce59 [ 2232.194838][T31063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2232.194863][T31063] RSP: 002b:00007fcc5050d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2232.194887][T31063] RAX: ffffffffffffffda RBX: 00007fcc4f815fa0 RCX: 00007fcc4f59ce59 [ 2232.194904][T31063] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 2232.194919][T31063] RBP: 00007fcc4f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 2232.194935][T31063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2232.194950][T31063] R13: 00007fcc4f816038 R14: 00007fcc4f815fa0 R15: 00007ffc26a66e28 [ 2232.194982][T31063] [ 2232.763882][T31074] futex_wake_op: syz.1.4455 tries to shift op by -2048; fix this program [ 2232.819896][T31074] futex_wake_op: syz.1.4455 tries to shift op by -2048; fix this program [ 2232.917725][T31074] kstrtoul() returned -22 for lu_gp_id [ 2232.948637][ T30] audit: type=1800 audit(2147483929.853:44): pid=31074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4455" name="lu_gp_id" dev="configfs" ino=125632 res=0 errno=0 [ 2234.441734][T31096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4461'. [ 2234.649367][T31099] openvswitch: netlink: Tunnel attr 7 has unexpected len 20 expected 0 [ 2235.246388][T31109] FAULT_INJECTION: forcing a failure. [ 2235.246388][T31109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2235.304374][T31109] CPU: 0 UID: 0 PID: 31109 Comm: syz.0.4464 Tainted: G L syzkaller #0 PREEMPT(full) [ 2235.304412][T31109] Tainted: [L]=SOFTLOCKUP [ 2235.304427][T31109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2235.304442][T31109] Call Trace: [ 2235.304451][T31109] [ 2235.304460][T31109] dump_stack_lvl+0x100/0x190 [ 2235.304489][T31109] should_fail_ex.cold+0x5/0xa [ 2235.304520][T31109] _copy_from_user+0x2e/0xd0 [ 2235.304557][T31109] copy_msghdr_from_user+0x9f/0x4f0 [ 2235.304594][T31109] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2235.304634][T31109] ? __pfx__kstrtoull+0x10/0x10 [ 2235.304663][T31109] ___sys_sendmsg+0x106/0x1e0 [ 2235.304698][T31109] ? __pfx____sys_sendmsg+0x10/0x10 [ 2235.304745][T31109] ? find_held_lock+0x2b/0x80 [ 2235.304793][T31109] __sys_sendmmsg+0x205/0x430 [ 2235.304822][T31109] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2235.304856][T31109] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2235.304904][T31109] ? fput+0x79/0x100 [ 2235.304936][T31109] ? ksys_write+0x1ac/0x250 [ 2235.304963][T31109] ? __pfx_ksys_write+0x10/0x10 [ 2235.304997][T31109] __x64_sys_sendmmsg+0x9c/0x100 [ 2235.305022][T31109] ? lockdep_hardirqs_on+0x78/0x100 [ 2235.305056][T31109] do_syscall_64+0x115/0x840 [ 2235.305088][T31109] ? clear_bhb_loop+0x40/0x90 [ 2235.305118][T31109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.305142][T31109] RIP: 0033:0x7fcc4f59ce59 [ 2235.305161][T31109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2235.305184][T31109] RSP: 002b:00007fcc5050d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2235.305207][T31109] RAX: ffffffffffffffda RBX: 00007fcc4f815fa0 RCX: 00007fcc4f59ce59 [ 2235.305223][T31109] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2235.305237][T31109] RBP: 00007fcc5050d090 R08: 0000000000000000 R09: 0000000000000000 [ 2235.305251][T31109] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.305265][T31109] R13: 00007fcc4f816038 R14: 00007fcc4f815fa0 R15: 00007ffc26a66e28 [ 2235.305295][T31109] [ 2238.545834][T31140] bond0: invalid ARP target specified [ 2241.156755][T31161] Process accounting resumed [ 2241.824806][T31183] ecryptfs_miscdev_write: Invalid packet size [0] [ 2243.621531][T31209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 2244.631458][T16034] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2249.960501][T31239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'. [ 2253.847971][T31261] bond0: invalid ARP target specified [ 2256.048978][T31302] FAULT_INJECTION: forcing a failure. [ 2256.048978][T31302] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.134199][T31302] CPU: 0 UID: 0 PID: 31302 Comm: syz.3.4496 Tainted: G L syzkaller #0 PREEMPT(full) [ 2256.134238][T31302] Tainted: [L]=SOFTLOCKUP [ 2256.134246][T31302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2256.134261][T31302] Call Trace: [ 2256.134270][T31302] [ 2256.134279][T31302] dump_stack_lvl+0x100/0x190 [ 2256.134310][T31302] should_fail_ex.cold+0x5/0xa [ 2256.134341][T31302] should_failslab+0xc2/0x120 [ 2256.134371][T31302] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2256.134419][T31302] ? __alloc_skb+0x140/0x710 [ 2256.134447][T31302] __alloc_skb+0x140/0x710 [ 2256.134468][T31302] ? __alloc_skb+0x5b7/0x710 [ 2256.134489][T31302] ? __pfx___alloc_skb+0x10/0x10 [ 2256.134520][T31302] netlink_dump+0x194/0xd00 [ 2256.134554][T31302] ? __pfx_netlink_dump+0x10/0x10 [ 2256.134593][T31302] ? __asan_memset+0x23/0x50 [ 2256.134630][T31302] ? genl_start+0x67a/0x970 [ 2256.134668][T31302] __netlink_dump_start+0x6d6/0x990 [ 2256.134703][T31302] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 2256.134743][T31302] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 2256.134788][T31302] ? __pfx_genl_get_cmd+0x10/0x10 [ 2256.134820][T31302] ? __pfx_genl_start+0x10/0x10 [ 2256.134853][T31302] ? __pfx_genl_dumpit+0x10/0x10 [ 2256.134890][T31302] ? __pfx_genl_done+0x10/0x10 [ 2256.134927][T31302] ? __dev_queue_xmit+0xa10/0x4950 [ 2256.135038][T31302] ? __radix_tree_lookup+0x217/0x2b0 [ 2256.135074][T31302] genl_rcv_msg+0x471/0x800 [ 2256.135114][T31302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2256.135151][T31302] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 2256.135222][T31302] netlink_rcv_skb+0x159/0x420 [ 2256.135254][T31302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2256.135292][T31302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2256.135336][T31302] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2256.135370][T31302] genl_rcv+0x28/0x40 [ 2256.135408][T31302] netlink_unicast+0x585/0x850 [ 2256.135444][T31302] ? __pfx_netlink_unicast+0x10/0x10 [ 2256.135484][T31302] netlink_sendmsg+0x8b0/0xda0 [ 2256.135520][T31302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2256.135551][T31302] ? __import_iovec+0x1d2/0x640 [ 2256.135589][T31302] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2256.135620][T31302] ____sys_sendmsg+0x9e1/0xb70 [ 2256.135650][T31302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2256.135685][T31302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2256.135730][T31302] ___sys_sendmsg+0x190/0x1e0 [ 2256.135765][T31302] ? __pfx____sys_sendmsg+0x10/0x10 [ 2256.135833][T31302] __sys_sendmsg+0x170/0x220 [ 2256.135858][T31302] ? __pfx___sys_sendmsg+0x10/0x10 [ 2256.135896][T31302] ? rcu_is_watching+0x12/0xc0 [ 2256.135934][T31302] do_syscall_64+0x115/0x840 [ 2256.135967][T31302] ? clear_bhb_loop+0x40/0x90 [ 2256.135996][T31302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2256.136020][T31302] RIP: 0033:0x7f2329b9ce59 [ 2256.136044][T31302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2256.136066][T31302] RSP: 002b:00007f232aa4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2256.136089][T31302] RAX: ffffffffffffffda RBX: 00007f2329e15fa0 RCX: 00007f2329b9ce59 [ 2256.136104][T31302] RDX: 0000000020000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 2256.136119][T31302] RBP: 00007f232aa4c090 R08: 0000000000000000 R09: 0000000000000000 [ 2256.136133][T31302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2256.136147][T31302] R13: 00007f2329e16038 R14: 00007f2329e15fa0 R15: 00007ffc50ee38a8 [ 2256.136177][T31302] [ 2256.610071][T31305] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 2257.579962][T31310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4499'. [ 2259.977412][T31350] futex_wake_op: syz.2.4504 tries to shift op by -2048; fix this program [ 2260.066722][T31349] futex_wake_op: syz.1.4505 tries to shift op by -2048; fix this program [ 2260.142024][ T30] audit: type=1800 audit(2147483957.224:45): pid=31350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4504" name="lu_gp_id" dev="configfs" ino=127016 res=0 errno=0 [ 2260.173419][T31350] kstrtoul() returned -22 for lu_gp_id [ 2260.195603][T31349] futex_wake_op: syz.1.4505 tries to shift op by -2048; fix this program [ 2264.361969][T31393] futex_wake_op: syz.1.4514 tries to shift op by -2048; fix this program [ 2264.452372][T31393] futex_wake_op: syz.1.4514 tries to shift op by -2048; fix this program [ 2264.501757][T31395] 0x000000000001-0x000000020000 : "" [ 2264.618718][T31399] futex_wake_op: syz.2.4516 tries to shift op by -2048; fix this program [ 2264.649629][T31395] ftl_cs: FTL header corrupt! [ 2264.675120][T31399] futex_wake_op: syz.2.4516 tries to shift op by -2048; fix this program [ 2264.710133][ T30] audit: type=1800 audit(2147483961.818:46): pid=31393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4514" name="lu_gp_id" dev="configfs" ino=127443 res=0 errno=0 [ 2264.748229][T31393] kstrtoul() returned -22 for lu_gp_id [ 2265.203682][T31406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 2268.451837][T31456] random: crng reseeded on system resumption [ 2268.561711][T31455] FAULT_INJECTION: forcing a failure. [ 2268.561711][T31455] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.678361][T31455] CPU: 0 UID: 0 PID: 31455 Comm: syz.0.4524 Tainted: G L syzkaller #0 PREEMPT(full) [ 2268.678401][T31455] Tainted: [L]=SOFTLOCKUP [ 2268.678410][T31455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2268.678425][T31455] Call Trace: [ 2268.678433][T31455] [ 2268.678443][T31455] dump_stack_lvl+0x100/0x190 [ 2268.678473][T31455] should_fail_ex.cold+0x5/0xa [ 2268.678505][T31455] ? __register_sysctl_table+0xac/0x1650 [ 2268.678539][T31455] should_failslab+0xc2/0x120 [ 2268.678569][T31455] __kmalloc_noprof+0xe0/0x850 [ 2268.678598][T31455] __register_sysctl_table+0xac/0x1650 [ 2268.678631][T31455] ? is_module_address+0x5f/0xf0 [ 2268.678660][T31455] ? __pfx___register_sysctl_table+0x10/0x10 [ 2268.678693][T31455] ? is_module_address+0x69/0xf0 [ 2268.678715][T31455] ? register_net_sysctl_sz+0x222/0x430 [ 2268.678831][T31455] ? __asan_memcpy+0x3c/0x60 [ 2268.678873][T31455] sctp_sysctl_net_register+0x15e/0x200 [ 2268.678924][T31455] ? __pfx_sctp_defaults_init+0x10/0x10 [ 2268.678951][T31455] sctp_defaults_init+0x6d2/0xd90 [ 2268.678979][T31455] ? __pfx_sctp_defaults_init+0x10/0x10 [ 2268.679006][T31455] ops_init+0x1e2/0x5f0 [ 2268.679037][T31455] setup_net+0x118/0x3a0 [ 2268.679067][T31455] ? __pfx_setup_net+0x10/0x10 [ 2268.679095][T31455] ? mutex_init_lockdep+0xf1/0x120 [ 2268.679126][T31455] copy_net_ns+0x46f/0x7c0 [ 2268.679159][T31455] create_new_namespaces+0x3ea/0xac0 [ 2268.679206][T31455] unshare_nsproxy_namespaces+0xf2/0x220 [ 2268.679240][T31455] ksys_unshare+0x438/0xab0 [ 2268.679278][T31455] ? __pfx_ksys_unshare+0x10/0x10 [ 2268.679313][T31455] ? xfd_validate_state+0x129/0x190 [ 2268.679349][T31455] __x64_sys_unshare+0x31/0x40 [ 2268.679384][T31455] do_syscall_64+0x115/0x840 [ 2268.679419][T31455] ? clear_bhb_loop+0x40/0x90 [ 2268.679449][T31455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2268.679475][T31455] RIP: 0033:0x7fcc4f59ce59 [ 2268.679496][T31455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2268.679521][T31455] RSP: 002b:00007fcc5050d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2268.679546][T31455] RAX: ffffffffffffffda RBX: 00007fcc4f815fa0 RCX: 00007fcc4f59ce59 [ 2268.679562][T31455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2268.679578][T31455] RBP: 00007fcc4f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 2268.679593][T31455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2268.679608][T31455] R13: 00007fcc4f816038 R14: 00007fcc4f815fa0 R15: 00007ffc26a66e28 [ 2268.679640][T31455] [ 2271.127864][T31456] hub 1-0:1.0: USB hub found [ 2271.246497][T31456] hub 1-0:1.0: 1 port detected [ 2271.681398][T31498] futex_wake_op: syz.2.4529 tries to shift op by -2048; fix this program [ 2271.727651][T31498] futex_wake_op: syz.2.4529 tries to shift op by -2048; fix this program [ 2271.816070][T31499] 0x000000000001-0x000000020000 : "" [ 2271.919426][T31499] ftl_cs: FTL header corrupt! [ 2272.060946][ T30] audit: type=1800 audit(2147483969.196:47): pid=31498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4529" name="lu_gp_id" dev="configfs" ino=127854 res=0 errno=0 [ 2272.086082][T31498] kstrtoul() returned -22 for lu_gp_id [ 2272.092976][T31507] futex_wake_op: syz.0.4531 tries to shift op by -2048; fix this program [ 2272.145494][T31507] futex_wake_op: syz.0.4531 tries to shift op by -2048; fix this program [ 2272.347050][T31507] kstrtoul() returned -22 for lu_gp_id [ 2272.568164][T31458] Process accounting paused [ 2272.933340][T31516] FAULT_INJECTION: forcing a failure. [ 2272.933340][T31516] name failslab, interval 1, probability 0, space 0, times 0 [ 2272.993437][T31516] CPU: 0 UID: 0 PID: 31516 Comm: syz.3.4533 Tainted: G L syzkaller #0 PREEMPT(full) [ 2272.993475][T31516] Tainted: [L]=SOFTLOCKUP [ 2272.993484][T31516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2272.993499][T31516] Call Trace: [ 2272.993507][T31516] [ 2272.993516][T31516] dump_stack_lvl+0x100/0x190 [ 2272.993545][T31516] should_fail_ex.cold+0x5/0xa [ 2272.993577][T31516] should_failslab+0xc2/0x120 [ 2272.993606][T31516] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2272.993647][T31516] ? __alloc_skb+0x140/0x710 [ 2272.993668][T31516] ? __alloc_skb+0x5b7/0x710 [ 2272.993693][T31516] __alloc_skb+0x140/0x710 [ 2272.993714][T31516] ? __alloc_skb+0x5b7/0x710 [ 2272.993734][T31516] ? __pfx___alloc_skb+0x10/0x10 [ 2272.993756][T31516] ? __pfx___might_resched+0x10/0x10 [ 2272.993783][T31516] ? __lock_acquire+0x4a5/0x2630 [ 2272.993825][T31516] netlink_alloc_large_skb+0x69/0x150 [ 2272.993860][T31516] netlink_sendmsg+0x680/0xda0 [ 2272.993897][T31516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2272.993928][T31516] ? __import_iovec+0x1d2/0x640 [ 2272.993973][T31516] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2272.994003][T31516] ____sys_sendmsg+0x9e1/0xb70 [ 2272.994036][T31516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2272.994070][T31516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2272.994115][T31516] ___sys_sendmsg+0x190/0x1e0 [ 2272.994149][T31516] ? __pfx____sys_sendmsg+0x10/0x10 [ 2272.994216][T31516] __sys_sendmsg+0x170/0x220 [ 2272.994241][T31516] ? __pfx___sys_sendmsg+0x10/0x10 [ 2272.994278][T31516] ? rcu_is_watching+0x12/0xc0 [ 2272.994309][T31516] do_syscall_64+0x115/0x840 [ 2272.994343][T31516] ? clear_bhb_loop+0x40/0x90 [ 2272.994371][T31516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.994396][T31516] RIP: 0033:0x7f2329b9ce59 [ 2272.994415][T31516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2272.994440][T31516] RSP: 002b:00007f232aa4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2272.994462][T31516] RAX: ffffffffffffffda RBX: 00007f2329e15fa0 RCX: 00007f2329b9ce59 [ 2272.994478][T31516] RDX: 0000000000000000 RSI: 0000200000002f40 RDI: 0000000000000006 [ 2272.994492][T31516] RBP: 00007f232aa4c090 R08: 0000000000000000 R09: 0000000000000000 [ 2272.994507][T31516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2272.994521][T31516] R13: 00007f2329e16038 R14: 00007f2329e15fa0 R15: 00007ffc50ee38a8 [ 2272.994551][T31516] [ 2273.706902][T31528] bond0: invalid ARP target specified [ 2274.330428][T31533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4536'. [ 2274.454198][T31534] warning: `syz.0.4536' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2276.081957][T31551] block2mtd: too many arguments [ 2276.613059][T31569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4542'. [ 2277.626758][T31578] futex_wake_op: syz.2.4543 tries to shift op by -2048; fix this program [ 2277.683947][T31578] futex_wake_op: syz.2.4543 tries to shift op by -2048; fix this program [ 2277.731745][T31580] 0x000000000001-0x000000020000 : "" [ 2277.739925][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2277.750084][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2277.821779][T31580] ftl_cs: FTL header corrupt! [ 2278.035660][ T30] audit: type=1800 audit(2147483975.207:48): pid=31584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4543" name="lu_gp_id" dev="configfs" ino=128425 res=0 errno=0 [ 2278.068304][T31584] kstrtoul() returned -22 for lu_gp_id [ 2281.850286][T31634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'. [ 2286.995645][T31671] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 2287.310972][T31683] program syz.3.4562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2291.653329][T31731] bond0: invalid ARP target specified [ 2292.900889][T31751] FAULT_INJECTION: forcing a failure. [ 2292.900889][T31751] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.957240][T31751] CPU: 0 UID: 0 PID: 31751 Comm: syz.0.4575 Tainted: G L syzkaller #0 PREEMPT(full) [ 2292.957280][T31751] Tainted: [L]=SOFTLOCKUP [ 2292.957290][T31751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2292.957305][T31751] Call Trace: [ 2292.957315][T31751] [ 2292.957324][T31751] dump_stack_lvl+0x100/0x190 [ 2292.957354][T31751] should_fail_ex.cold+0x5/0xa [ 2292.957392][T31751] ? udp_init_sock+0x24e/0x450 [ 2292.957419][T31751] should_failslab+0xc2/0x120 [ 2292.957450][T31751] __kmalloc_noprof+0xe0/0x850 [ 2292.957473][T31751] ? lockdep_init_map_type+0x5c/0x250 [ 2292.957519][T31751] udp_init_sock+0x24e/0x450 [ 2292.957544][T31751] ? __pfx_udp_init_sock+0x10/0x10 [ 2292.957573][T31751] inet_create+0x94c/0x1060 [ 2292.957613][T31751] ? inet_create+0x94/0x1060 [ 2292.957656][T31751] __sock_create+0x339/0x860 [ 2292.957696][T31751] __sys_socket+0x14d/0x260 [ 2292.957731][T31751] ? __pfx___sys_socket+0x10/0x10 [ 2292.957765][T31751] ? ksys_write+0x1ac/0x250 [ 2292.957801][T31751] __x64_sys_socket+0x72/0xb0 [ 2292.957841][T31751] ? lockdep_hardirqs_on+0x78/0x100 [ 2292.957878][T31751] do_syscall_64+0x115/0x840 [ 2292.957913][T31751] ? clear_bhb_loop+0x40/0x90 [ 2292.957943][T31751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2292.957970][T31751] RIP: 0033:0x7fcc4f59ce59 [ 2292.957990][T31751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2292.958014][T31751] RSP: 002b:00007fcc5050d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2292.958038][T31751] RAX: ffffffffffffffda RBX: 00007fcc4f815fa0 RCX: 00007fcc4f59ce59 [ 2292.958054][T31751] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 2292.958069][T31751] RBP: 00007fcc4f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 2292.958084][T31751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2292.958099][T31751] R13: 00007fcc4f816038 R14: 00007fcc4f815fa0 R15: 00007ffc26a66e28 [ 2292.958130][T31751] [ 2293.240309][T31753] ubi0: attaching mtd0 [ 2293.246099][T31753] ubi0: scanning is finished [ 2293.250826][T31753] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 2293.682608][T31753] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 2294.455047][T31772] FAULT_INJECTION: forcing a failure. [ 2294.455047][T31772] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2294.565690][T31772] CPU: 0 UID: 0 PID: 31772 Comm: syz.3.4580 Tainted: G L syzkaller #0 PREEMPT(full) [ 2294.565731][T31772] Tainted: [L]=SOFTLOCKUP [ 2294.565741][T31772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2294.565756][T31772] Call Trace: [ 2294.565764][T31772] [ 2294.565773][T31772] dump_stack_lvl+0x100/0x190 [ 2294.565803][T31772] should_fail_ex.cold+0x5/0xa [ 2294.565836][T31772] get_futex_key+0x1d2/0x1510 [ 2294.565879][T31772] ? __pfx_get_futex_key+0x10/0x10 [ 2294.565929][T31772] futex_wake+0xea/0x530 [ 2294.565963][T31772] ? __pfx_futex_wake+0x10/0x10 [ 2294.565997][T31772] ? vfs_write+0x911/0x1070 [ 2294.566023][T31772] ? vfs_write+0x15d/0x1070 [ 2294.566051][T31772] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2294.566084][T31772] do_futex+0x32b/0x350 [ 2294.566110][T31772] ? __pfx_do_futex+0x10/0x10 [ 2294.566142][T31772] __x64_sys_futex+0x34f/0x4d0 [ 2294.566170][T31772] ? fput+0x79/0x100 [ 2294.566203][T31772] ? __pfx___x64_sys_futex+0x10/0x10 [ 2294.566230][T31772] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 2294.566264][T31772] ? rcu_is_watching+0x12/0xc0 [ 2294.566299][T31772] do_syscall_64+0x115/0x840 [ 2294.566334][T31772] ? clear_bhb_loop+0x40/0x90 [ 2294.566365][T31772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2294.566390][T31772] RIP: 0033:0x7f2329b9ce59 [ 2294.566411][T31772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2294.566435][T31772] RSP: 002b:00007f232aa2b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2294.566458][T31772] RAX: ffffffffffffffda RBX: 00007f2329e16098 RCX: 00007f2329b9ce59 [ 2294.566474][T31772] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2329e1609c [ 2294.566489][T31772] RBP: 00007f2329e16090 R08: 0000000000000001 R09: 0000000000000000 [ 2294.566505][T31772] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000000 [ 2294.566519][T31772] R13: 00007f2329e16128 R14: 00007ffc50ee37c0 R15: 00007ffc50ee38a8 [ 2294.566550][T31772] [ 2300.064962][T31831] bond0: invalid ARP target specified [ 2300.717847][T31848] mtrr: base(0x2000000) is not aligned on a size(0x0000) boundary [ 2302.869035][T31868] Process accounting resumed [ 2303.221018][T31890] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 2305.099175][T31909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4606'. [ 2306.215179][T31900] block2mtd: too many arguments [ 2307.499564][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4611'. [ 2308.752697][T31943] futex_wake_op: syz.0.4613 tries to shift op by -2048; fix this program [ 2309.313817][T31943] futex_wake_op: syz.0.4613 tries to shift op by -2048; fix this program [ 2309.324142][ T30] audit: type=1800 audit(2147484006.650:49): pid=31947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4613" name="lu_gp_id" dev="configfs" ino=130573 res=0 errno=0 [ 2309.461403][T31947] kstrtoul() returned -22 for lu_gp_id [ 2310.211258][T31948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4614'. [ 2310.980751][T31955] bond0: invalid ARP target specified [ 2312.979595][T31977] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 2312.979595][T31977] program syz.2.4619 not setting count and/or reply_len properly [ 2314.250389][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4622'. [ 2314.878735][T32005] futex_wake_op: syz.0.4623 tries to shift op by -2048; fix this program [ 2315.031265][T32005] futex_wake_op: syz.0.4623 tries to shift op by -2048; fix this program [ 2315.218273][ T30] audit: type=1800 audit(2147484012.591:50): pid=32006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4623" name="lu_gp_id" dev="configfs" ino=130882 res=0 errno=0 [ 2315.265159][T32006] kstrtoul() returned -22 for lu_gp_id [ 2315.772860][T32010] bond0: invalid ARP target specified [ 2323.057078][T32080] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2323.222020][T32084] futex_wake_op: syz.0.4636 tries to shift op by -2048; fix this program [ 2323.299972][T32084] futex_wake_op: syz.0.4636 tries to shift op by -2048; fix this program [ 2323.351933][T32064] zswap: compressor 000 not available [ 2323.415329][T32088] kstrtoul() returned -22 for lu_gp_id [ 2323.423704][ T30] audit: type=1800 audit(2147484020.823:51): pid=32088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4636" name="lu_gp_id" dev="configfs" ino=131386 res=0 errno=0 [ 2323.951177][T32092] netlink: 'syz.2.4635': attribute type 11 has an invalid length. [ 2324.098748][T32092] netlink: 'syz.2.4635': attribute type 11 has an invalid length. [ 2324.342408][T32092] netlink: 'syz.2.4635': attribute type 11 has an invalid length. [ 2325.090943][T32107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 2325.483275][T32109] bond0: invalid ARP target specified [ 2325.761440][T32118] FAULT_INJECTION: forcing a failure. [ 2325.761440][T32118] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.871782][T32118] CPU: 0 UID: 0 PID: 32118 Comm: syz.2.4642 Tainted: G L syzkaller #0 PREEMPT(full) [ 2325.871836][T32118] Tainted: [L]=SOFTLOCKUP [ 2325.871846][T32118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2325.871862][T32118] Call Trace: [ 2325.871870][T32118] [ 2325.871880][T32118] dump_stack_lvl+0x100/0x190 [ 2325.871915][T32118] should_fail_ex.cold+0x5/0xa [ 2325.871948][T32118] ? __register_sysctl_table+0xac/0x1650 [ 2325.871983][T32118] should_failslab+0xc2/0x120 [ 2325.872014][T32118] __kmalloc_noprof+0xe0/0x850 [ 2325.872044][T32118] __register_sysctl_table+0xac/0x1650 [ 2325.872076][T32118] ? rcu_is_watching+0x12/0xc0 [ 2325.872106][T32118] ? trace_kmalloc+0xe3/0x110 [ 2325.872138][T32118] ? __pfx___register_sysctl_table+0x10/0x10 [ 2325.872172][T32118] ? mq_init_ns+0x3e0/0x820 [ 2325.872202][T32118] ? __asan_memcpy+0x3c/0x60 [ 2325.872243][T32118] setup_ipc_sysctls+0x1aa/0x300 [ 2325.872286][T32118] copy_ipcs+0x57a/0x7e0 [ 2325.872316][T32118] create_new_namespaces+0x20a/0xac0 [ 2325.872351][T32118] ? security_capable+0x80/0x260 [ 2325.872382][T32118] copy_namespaces+0x468/0x5e0 [ 2325.872414][T32118] copy_process+0x3531/0x7ed0 [ 2325.872447][T32118] ? futex_unqueue+0x133/0x2c0 [ 2325.872486][T32118] ? __pfx_copy_process+0x10/0x10 [ 2325.872527][T32118] ? _copy_from_user+0x59/0xd0 [ 2325.872565][T32118] kernel_clone+0x176/0x9e0 [ 2325.872600][T32118] ? __pfx_kernel_clone+0x10/0x10 [ 2325.872639][T32118] ? __pfx_futex_wait+0x10/0x10 [ 2325.872677][T32118] __do_sys_clone3+0x214/0x290 [ 2325.872710][T32118] ? __pfx___do_sys_clone3+0x10/0x10 [ 2325.872774][T32118] ? rcu_is_watching+0x12/0xc0 [ 2325.872806][T32118] do_syscall_64+0x115/0x840 [ 2325.872850][T32118] ? clear_bhb_loop+0x40/0x90 [ 2325.872881][T32118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2325.872907][T32118] RIP: 0033:0x7efeb079ce59 [ 2325.872928][T32118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2325.872952][T32118] RSP: 002b:00007efeae9f5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2325.872976][T32118] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007efeb079ce59 [ 2325.872993][T32118] RDX: 00007efeae9f5f10 RSI: 0000000000000058 RDI: 00007efeae9f5f10 [ 2325.873009][T32118] RBP: 00007efeb0832d6f R08: 0000000000000000 R09: 0000000000000058 [ 2325.873024][T32118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2325.873039][T32118] R13: 00007efeb0a16128 R14: 00007efeb0a16090 R15: 00007ffe1f4210c8 [ 2325.873070][T32118] [ 2328.804470][T32157] futex_wake_op: syz.3.4648 tries to shift op by -2048; fix this program [ 2328.857610][T32157] futex_wake_op: syz.3.4648 tries to shift op by -2048; fix this program [ 2328.910626][T32157] 0x000000000001-0x000000020000 : "" [ 2329.077644][T32157] ftl_cs: FTL header corrupt! [ 2329.203964][ T30] audit: type=1800 audit(2147484026.643:52): pid=32160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4648" name="lu_gp_id" dev="configfs" ino=131783 res=0 errno=0 [ 2329.258299][T32160] kstrtoul() returned -22 for lu_gp_id [ 2329.662838][T32152] block2mtd: too many arguments [ 2330.792269][T32177] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2331.089584][T32173] zswap: compressor 000 not available [ 2331.597324][T32188] FAULT_INJECTION: forcing a failure. [ 2331.597324][T32188] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.673316][T32188] CPU: 0 UID: 0 PID: 32188 Comm: syz.3.4653 Tainted: G L syzkaller #0 PREEMPT(full) [ 2331.673354][T32188] Tainted: [L]=SOFTLOCKUP [ 2331.673362][T32188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2331.673377][T32188] Call Trace: [ 2331.673385][T32188] [ 2331.673394][T32188] dump_stack_lvl+0x100/0x190 [ 2331.673424][T32188] should_fail_ex.cold+0x5/0xa [ 2331.673459][T32188] should_failslab+0xc2/0x120 [ 2331.673488][T32188] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2331.673528][T32188] ? __alloc_skb+0x140/0x710 [ 2331.673551][T32188] ? __alloc_skb+0x5b7/0x710 [ 2331.673576][T32188] __alloc_skb+0x140/0x710 [ 2331.673597][T32188] ? __alloc_skb+0x5b7/0x710 [ 2331.673618][T32188] ? __pfx___alloc_skb+0x10/0x10 [ 2331.673647][T32188] netlink_ack+0x117/0xb80 [ 2331.673689][T32188] netlink_rcv_skb+0x333/0x420 [ 2331.673721][T32188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2331.673818][T32188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2331.673861][T32188] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2331.673896][T32188] netlink_unicast+0x585/0x850 [ 2331.673932][T32188] ? __pfx_netlink_unicast+0x10/0x10 [ 2331.673971][T32188] netlink_sendmsg+0x8b0/0xda0 [ 2331.674008][T32188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2331.674039][T32188] ? __import_iovec+0x1d2/0x640 [ 2331.674083][T32188] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2331.674114][T32188] ____sys_sendmsg+0x9e1/0xb70 [ 2331.674145][T32188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2331.674180][T32188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2331.674224][T32188] ___sys_sendmsg+0x190/0x1e0 [ 2331.674259][T32188] ? __pfx____sys_sendmsg+0x10/0x10 [ 2331.674325][T32188] __sys_sendmsg+0x170/0x220 [ 2331.674350][T32188] ? __pfx___sys_sendmsg+0x10/0x10 [ 2331.674386][T32188] ? rcu_is_watching+0x12/0xc0 [ 2331.674418][T32188] do_syscall_64+0x115/0x840 [ 2331.674451][T32188] ? clear_bhb_loop+0x40/0x90 [ 2331.674480][T32188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2331.674505][T32188] RIP: 0033:0x7f2329b9ce59 [ 2331.674525][T32188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2331.674548][T32188] RSP: 002b:00007f232aa4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2331.674570][T32188] RAX: ffffffffffffffda RBX: 00007f2329e15fa0 RCX: 00007f2329b9ce59 [ 2331.674587][T32188] RDX: 0000000000000000 RSI: 0000200000002cc0 RDI: 0000000000000003 [ 2331.674601][T32188] RBP: 00007f232aa4c090 R08: 0000000000000000 R09: 0000000000000000 [ 2331.674616][T32188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2331.674630][T32188] R13: 00007f2329e16038 R14: 00007f2329e15fa0 R15: 00007ffc50ee38a8 [ 2331.674659][T32188] [ 2332.323300][T23624] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 2332.441794][T32193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 2333.599382][T32200] Process accounting paused [ 2333.890270][T32217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4659'. [ 2334.029839][T32217] ipvlan1: entered promiscuous mode [ 2334.056236][T32217] ipvlan1: entered allmulticast mode [ 2334.084217][T32217] veth0_vlan: entered allmulticast mode [ 2334.814018][T32223] futex_wake_op: syz.3.4660 tries to shift op by -2048; fix this program [ 2334.905931][T32223] futex_wake_op: syz.3.4660 tries to shift op by -2048; fix this program [ 2334.965514][T32225] 0x000000000001-0x000000020000 : "" [ 2335.082175][T32225] ftl_cs: FTL header corrupt! [ 2335.252170][ T30] audit: type=1800 audit(2147484032.725:53): pid=32223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4660" name="lu_gp_id" dev="configfs" ino=132248 res=0 errno=0 [ 2335.303122][T32223] kstrtoul() returned -22 for lu_gp_id [ 2335.375063][T32224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4661'. [ 2337.689823][T32250] FAULT_INJECTION: forcing a failure. [ 2337.689823][T32250] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2337.982267][T32250] CPU: 0 UID: 0 PID: 32250 Comm: syz.2.4666 Tainted: G L syzkaller #0 PREEMPT(full) [ 2337.982308][T32250] Tainted: [L]=SOFTLOCKUP [ 2337.982317][T32250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2337.982332][T32250] Call Trace: [ 2337.982340][T32250] [ 2337.982350][T32250] dump_stack_lvl+0x100/0x190 [ 2337.982380][T32250] should_fail_ex.cold+0x5/0xa [ 2337.982410][T32250] get_futex_key+0x1d2/0x1510 [ 2337.982453][T32250] ? __pfx_get_futex_key+0x10/0x10 [ 2337.982489][T32250] ? __kasan_slab_free+0x5f/0x80 [ 2337.982515][T32250] ? fcntl_setlk+0x4f4/0xe20 [ 2337.982548][T32250] ? do_fcntl+0xf39/0x1670 [ 2337.982583][T32250] ? __x64_sys_fcntl+0x163/0x200 [ 2337.982625][T32250] ? do_syscall_64+0x115/0x840 [ 2337.982658][T32250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2337.982690][T32250] futex_wait_setup+0x83/0x510 [ 2337.982728][T32250] __futex_wait+0x19f/0x300 [ 2337.982760][T32250] ? __pfx___futex_wait+0x10/0x10 [ 2337.982795][T32250] ? __pfx_futex_wake_mark+0x10/0x10 [ 2337.982829][T32250] ? futex_hash+0x2ad/0x370 [ 2337.982868][T32250] ? futex_hash+0x141/0x370 [ 2337.982909][T32250] futex_wait+0xe6/0x370 [ 2337.982940][T32250] ? __pfx_futex_wait+0x10/0x10 [ 2337.982976][T32250] ? __might_fault+0xc5/0x140 [ 2337.983013][T32250] ? __might_fault+0xc5/0x140 [ 2337.983055][T32250] do_futex+0x1ef/0x350 [ 2337.983079][T32250] ? __pfx_do_futex+0x10/0x10 [ 2337.983104][T32250] ? do_fcntl+0x811/0x1670 [ 2337.983145][T32250] __x64_sys_futex+0x34f/0x4d0 [ 2337.983173][T32250] ? __pfx___x64_sys_futex+0x10/0x10 [ 2337.983199][T32250] ? tomoyo_file_fcntl+0x6c/0xc0 [ 2337.983225][T32250] ? rcu_is_watching+0x12/0xc0 [ 2337.983256][T32250] do_syscall_64+0x115/0x840 [ 2337.983288][T32250] ? clear_bhb_loop+0x40/0x90 [ 2337.983318][T32250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2337.983342][T32250] RIP: 0033:0x7efeb079ce59 [ 2337.983362][T32250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2337.983386][T32250] RSP: 002b:00007efeae9d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2337.983408][T32250] RAX: ffffffffffffffda RBX: 00007efeb0a16188 RCX: 00007efeb079ce59 [ 2337.983424][T32250] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efeb0a16188 [ 2337.983439][T32250] RBP: 00007efeb0a16180 R08: 0000000000000000 R09: 0000000000000000 [ 2337.983454][T32250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2337.983468][T32250] R13: 00007efeb0a16218 R14: 00007ffe1f420fe0 R15: 00007ffe1f4210c8 [ 2337.983497][T32250] [ 2338.939701][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2338.981654][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2339.247183][T32268] FAULT_INJECTION: forcing a failure. [ 2339.247183][T32268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2339.285007][T32268] CPU: 0 UID: 0 PID: 32268 Comm: syz.3.4669 Tainted: G L syzkaller #0 PREEMPT(full) [ 2339.285045][T32268] Tainted: [L]=SOFTLOCKUP [ 2339.285054][T32268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2339.285068][T32268] Call Trace: [ 2339.285076][T32268] [ 2339.285085][T32268] dump_stack_lvl+0x100/0x190 [ 2339.285116][T32268] should_fail_ex.cold+0x5/0xa [ 2339.285148][T32268] _copy_to_user+0x32/0xd0 [ 2339.285184][T32268] simple_read_from_buffer+0xcb/0x170 [ 2339.285215][T32268] proc_fail_nth_read+0x1af/0x230 [ 2339.285255][T32268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2339.285295][T32268] ? rw_verify_area+0xce/0x6d0 [ 2339.285318][T32268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2339.285356][T32268] vfs_read+0x1e4/0xb30 [ 2339.285387][T32268] ? __pfx_vfs_read+0x10/0x10 [ 2339.285413][T32268] ? __fget_files+0x215/0x3d0 [ 2339.285447][T32268] ? __fget_files+0x21f/0x3d0 [ 2339.285483][T32268] ksys_read+0x12a/0x250 [ 2339.285519][T32268] ? __pfx_ksys_read+0x10/0x10 [ 2339.285549][T32268] ? rcu_is_watching+0x12/0xc0 [ 2339.285580][T32268] do_syscall_64+0x115/0x840 [ 2339.285615][T32268] ? clear_bhb_loop+0x40/0x90 [ 2339.285644][T32268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2339.285670][T32268] RIP: 0033:0x7f2329b5d68e [ 2339.285690][T32268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2339.285713][T32268] RSP: 002b:00007f232aa4bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2339.285736][T32268] RAX: ffffffffffffffda RBX: 00007f232aa4c6c0 RCX: 00007f2329b5d68e [ 2339.285751][T32268] RDX: 000000000000000f RSI: 00007f232aa4c0a0 RDI: 0000000000000003 [ 2339.285766][T32268] RBP: 00007f232aa4c090 R08: 0000000000000000 R09: 0000000000000000 [ 2339.285780][T32268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2339.285795][T32268] R13: 00007f2329e16038 R14: 00007f2329e15fa0 R15: 00007ffc50ee38a8 [ 2339.285825][T32268] [ 2339.842525][ T30] audit: type=1806 audit(2147484037.309:54): xattr="" res=-22 [ 2340.850521][T23624] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2341.327009][T32266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4668'. [ 2342.394862][T32298] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 2342.492732][T32298] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 2342.590362][T32298] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 2342.826264][T32301] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 2343.669387][T32262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2343.688486][T32262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2343.698963][T32262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2343.712521][T32262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2343.727654][T32262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2344.553324][T32330] futex_wake_op: syz.1.4680 tries to shift op by -2048; fix this program [ 2344.613774][T32330] futex_wake_op: syz.1.4680 tries to shift op by -2048; fix this program [ 2344.676578][T32331] 0x000000000001-0x000000020000 : "" [ 2344.695739][T32071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.744681][T32331] ftl_cs: FTL header corrupt! [ 2344.929426][ T30] audit: type=1800 audit(2147484042.445:55): pid=32334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4680" name="lu_gp_id" dev="configfs" ino=132775 res=0 errno=0 [ 2344.956051][T32334] kstrtoul() returned -22 for lu_gp_id [ 2345.058611][T32339] : Can't lookup blockdev [ 2345.489059][T32071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2345.788683][T32262] Bluetooth: hci2: command tx timeout [ 2345.819965][T32071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.092018][T32071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.965115][T32071] bridge_slave_1: left allmulticast mode [ 2347.002941][T32071] bridge_slave_1: left promiscuous mode [ 2347.041091][T32071] bridge0: port 2(bridge_slave_1) entered disabled state [ 2347.119652][T32071] bridge_slave_0: left allmulticast mode [ 2347.169547][T32071] bridge_slave_0: left promiscuous mode [ 2347.200020][T32071] bridge0: port 1(bridge_slave_0) entered disabled state [ 2347.468081][T32357] FAULT_INJECTION: forcing a failure. [ 2347.468081][T32357] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2347.641612][T32357] CPU: 0 UID: 0 PID: 32357 Comm: syz.0.4684 Tainted: G L syzkaller #0 PREEMPT(full) [ 2347.641650][T32357] Tainted: [L]=SOFTLOCKUP [ 2347.641659][T32357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2347.641673][T32357] Call Trace: [ 2347.641681][T32357] [ 2347.641690][T32357] dump_stack_lvl+0x100/0x190 [ 2347.641727][T32357] should_fail_ex.cold+0x5/0xa [ 2347.641758][T32357] should_fail_futex+0x4c/0x60 [ 2347.641796][T32357] __x64_sys_futex+0x1f0/0x4d0 [ 2347.641825][T32357] ? __pfx___x64_sys_futex+0x10/0x10 [ 2347.641855][T32357] ? rcu_is_watching+0x12/0xc0 [ 2347.641887][T32357] do_syscall_64+0x115/0x840 [ 2347.641921][T32357] ? clear_bhb_loop+0x40/0x90 [ 2347.641951][T32357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2347.641975][T32357] RIP: 0033:0x7fcc4f59ce59 [ 2347.641995][T32357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2347.642018][T32357] RSP: 002b:00007ffc26a66f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2347.642041][T32357] RAX: ffffffffffffffda RBX: 000000000023e922 RCX: 00007fcc4f59ce59 [ 2347.642057][T32357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcc4f81609c [ 2347.642071][T32357] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 2347.642086][T32357] R10: 00007ffc26a67090 R11: 0000000000000246 R12: 00007ffc26a670b0 [ 2347.642100][T32357] R13: 00007fcc4f81609c R14: 000000000023e954 R15: 00007ffc26a67090 [ 2347.642129][T32357] [ 2347.995890][T32262] Bluetooth: hci2: command tx timeout [ 2348.223029][T32071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2348.246664][T32071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2348.268229][T32071] bond0 (unregistering): Released all slaves [ 2349.512862][T32390] FAULT_INJECTION: forcing a failure. [ 2349.512862][T32390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2349.619615][T32390] CPU: 0 UID: 0 PID: 32390 Comm: syz.0.4686 Tainted: G L syzkaller #0 PREEMPT(full) [ 2349.619655][T32390] Tainted: [L]=SOFTLOCKUP [ 2349.619664][T32390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2349.619679][T32390] Call Trace: [ 2349.619688][T32390] [ 2349.619698][T32390] dump_stack_lvl+0x100/0x190 [ 2349.619728][T32390] should_fail_ex.cold+0x5/0xa [ 2349.619759][T32390] ? prepare_alloc_pages+0x16d/0x5f0 [ 2349.619794][T32390] should_fail_alloc_page+0xeb/0x140 [ 2349.619827][T32390] prepare_alloc_pages+0x1f0/0x5f0 [ 2349.619865][T32390] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 2349.619914][T32390] ? rcu_is_watching+0x12/0xc0 [ 2349.619943][T32390] ? trace_mm_page_alloc+0x163/0x1d0 [ 2349.619976][T32390] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 2349.620020][T32390] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2349.620068][T32390] ? find_held_lock+0x2b/0x80 [ 2349.620098][T32390] ? is_bpf_text_address+0x8a/0x1a0 [ 2349.620132][T32390] ? is_bpf_text_address+0x8a/0x1a0 [ 2349.620167][T32390] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2349.620209][T32390] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2349.620245][T32390] ? is_bpf_text_address+0x94/0x1a0 [ 2349.620279][T32390] ? kernel_text_address+0x8d/0x100 [ 2349.620305][T32390] ? __kernel_text_address+0xd/0x30 [ 2349.620329][T32390] ? unwind_get_return_address+0x59/0xa0 [ 2349.620370][T32390] alloc_pages_bulk_noprof+0x649/0x1360 [ 2349.620418][T32390] ? policy_nodemask+0xed/0x4f0 [ 2349.620451][T32390] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2349.620504][T32390] ? kasan_save_stack+0x30/0x50 [ 2349.620542][T32390] __kasan_populate_vmalloc+0xf0/0x210 [ 2349.620591][T32390] alloc_vmap_area+0x95d/0x2b70 [ 2349.620632][T32390] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2349.620670][T32390] __get_vm_area_node+0x1ca/0x330 [ 2349.620713][T32390] __vmalloc_node_range_noprof+0x228/0x1630 [ 2349.620750][T32390] ? n_tty_open+0x1a/0x170 [ 2349.620790][T32390] ? do_raw_spin_lock+0x128/0x260 [ 2349.620818][T32390] ? look_up_lock_class+0x64/0x120 [ 2349.620859][T32390] ? n_tty_open+0x1a/0x170 [ 2349.620904][T32390] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2349.620940][T32390] ? __ldsem_down_write_nested+0xfd/0x830 [ 2349.620979][T32390] ? __ldsem_down_write_nested+0x10e/0x830 [ 2349.621023][T32390] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 2349.621065][T32390] ? n_tty_open+0x1a/0x170 [ 2349.621100][T32390] __vmalloc_node_noprof+0xad/0xf0 [ 2349.621133][T32390] ? n_tty_open+0x1a/0x170 [ 2349.621171][T32390] ? __pfx_n_tty_open+0x10/0x10 [ 2349.621207][T32390] n_tty_open+0x1a/0x170 [ 2349.621245][T32390] tty_ldisc_open+0xa2/0x120 [ 2349.621273][T32390] tty_ldisc_setup+0x40/0xf0 [ 2349.621304][T32390] tty_init_dev.part.0+0x1b5/0x470 [ 2349.621341][T32390] tty_init_dev+0x60/0x80 [ 2349.621376][T32390] ? __pfx_ptmx_open+0x10/0x10 [ 2349.621399][T32390] ptmx_open+0x128/0x370 [ 2349.621425][T32390] ? __pfx_ptmx_open+0x10/0x10 [ 2349.621459][T32390] chrdev_open+0x234/0x6a0 [ 2349.621492][T32390] ? __pfx_apparmor_file_open+0x10/0x10 [ 2349.621520][T32390] ? __pfx_chrdev_open+0x10/0x10 [ 2349.621554][T32390] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2349.621595][T32390] do_dentry_open+0x6ab/0x14d0 [ 2349.621626][T32390] ? __pfx_chrdev_open+0x10/0x10 [ 2349.621664][T32390] vfs_open+0x82/0x3f0 [ 2349.621705][T32390] path_openat+0x208c/0x31a0 [ 2349.621746][T32390] ? __pfx_path_openat+0x10/0x10 [ 2349.621789][T32390] do_file_open+0x20e/0x430 [ 2349.621823][T32390] ? __pfx_do_file_open+0x10/0x10 [ 2349.621876][T32390] ? alloc_fd+0x476/0x790 [ 2349.621911][T32390] ? do_getname+0x191/0x390 [ 2349.621951][T32390] do_sys_openat2+0x10d/0x1e0 [ 2349.621990][T32390] ? __pfx_do_sys_openat2+0x10/0x10 [ 2349.622031][T32390] ? __sys_sendmsg+0x18f/0x220 [ 2349.622064][T32390] __x64_sys_openat+0x12d/0x210 [ 2349.622104][T32390] ? __pfx___x64_sys_openat+0x10/0x10 [ 2349.622149][T32390] ? rcu_is_watching+0x12/0xc0 [ 2349.622182][T32390] do_syscall_64+0x115/0x840 [ 2349.622216][T32390] ? clear_bhb_loop+0x40/0x90 [ 2349.622248][T32390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2349.622274][T32390] RIP: 0033:0x7fcc4f59ce59 [ 2349.622295][T32390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2349.622320][T32390] RSP: 002b:00007fcc504ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2349.622344][T32390] RAX: ffffffffffffffda RBX: 00007fcc4f816090 RCX: 00007fcc4f59ce59 [ 2349.622361][T32390] RDX: 0000000000001f00 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2349.622378][T32390] RBP: 00007fcc4f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 2349.622393][T32390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2349.622408][T32390] R13: 00007fcc4f816128 R14: 00007fcc4f816090 R15: 00007ffc26a66e28 [ 2349.622440][T32390] [ 2350.150315][T32390] syz.0.4686: vmalloc error: size 9112, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2350.165824][T32390] CPU: 0 UID: 0 PID: 32390 Comm: syz.0.4686 Tainted: G L syzkaller #0 PREEMPT(full) [ 2350.165862][T32390] Tainted: [L]=SOFTLOCKUP [ 2350.165871][T32390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2350.165887][T32390] Call Trace: [ 2350.165895][T32390] [ 2350.165904][T32390] dump_stack_lvl+0x100/0x190 [ 2350.165938][T32390] warn_alloc.cold+0x95/0x1c1 [ 2350.165965][T32390] ? __pfx_warn_alloc+0x10/0x10 [ 2350.166005][T32390] ? lockdep_hardirqs_on+0x78/0x100 [ 2350.166044][T32390] ? __get_vm_area_node+0x2cd/0x330 [ 2350.166082][T32390] ? __get_vm_area_node+0x208/0x330 [ 2350.166119][T32390] __vmalloc_node_range_noprof+0xccd/0x1630 [ 2350.166155][T32390] ? do_raw_spin_lock+0x128/0x260 [ 2350.166183][T32390] ? look_up_lock_class+0x64/0x120 [ 2350.166222][T32390] ? n_tty_open+0x1a/0x170 [ 2350.166267][T32390] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2350.166303][T32390] ? __ldsem_down_write_nested+0xfd/0x830 [ 2350.166339][T32390] ? __ldsem_down_write_nested+0x10e/0x830 [ 2350.166383][T32390] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 2350.166431][T32390] ? n_tty_open+0x1a/0x170 [ 2350.166466][T32390] __vmalloc_node_noprof+0xad/0xf0 [ 2350.166500][T32390] ? n_tty_open+0x1a/0x170 [ 2350.166537][T32390] ? __pfx_n_tty_open+0x10/0x10 [ 2350.166574][T32390] n_tty_open+0x1a/0x170 [ 2350.166611][T32390] tty_ldisc_open+0xa2/0x120 [ 2350.166639][T32390] tty_ldisc_setup+0x40/0xf0 [ 2350.166669][T32390] tty_init_dev.part.0+0x1b5/0x470 [ 2350.166708][T32390] tty_init_dev+0x60/0x80 [ 2350.166742][T32390] ? __pfx_ptmx_open+0x10/0x10 [ 2350.166766][T32390] ptmx_open+0x128/0x370 [ 2350.166798][T32390] ? __pfx_ptmx_open+0x10/0x10 [ 2350.166823][T32390] chrdev_open+0x234/0x6a0 [ 2350.166858][T32390] ? __pfx_apparmor_file_open+0x10/0x10 [ 2350.166886][T32390] ? __pfx_chrdev_open+0x10/0x10 [ 2350.166920][T32390] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2350.166959][T32390] do_dentry_open+0x6ab/0x14d0 [ 2350.166989][T32390] ? __pfx_chrdev_open+0x10/0x10 [ 2350.167029][T32390] vfs_open+0x82/0x3f0 [ 2350.167069][T32390] path_openat+0x208c/0x31a0 [ 2350.167110][T32390] ? __pfx_path_openat+0x10/0x10 [ 2350.167153][T32390] do_file_open+0x20e/0x430 [ 2350.167187][T32390] ? __pfx_do_file_open+0x10/0x10 [ 2350.167239][T32390] ? alloc_fd+0x476/0x790 [ 2350.167272][T32390] ? do_getname+0x191/0x390 [ 2350.167317][T32390] do_sys_openat2+0x10d/0x1e0 [ 2350.167356][T32390] ? __pfx_do_sys_openat2+0x10/0x10 [ 2350.167396][T32390] ? __sys_sendmsg+0x18f/0x220 [ 2350.167436][T32390] __x64_sys_openat+0x12d/0x210 [ 2350.167476][T32390] ? __pfx___x64_sys_openat+0x10/0x10 [ 2350.167521][T32390] ? rcu_is_watching+0x12/0xc0 [ 2350.167554][T32390] do_syscall_64+0x115/0x840 [ 2350.167589][T32390] ? clear_bhb_loop+0x40/0x90 [ 2350.167619][T32390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2350.167646][T32390] RIP: 0033:0x7fcc4f59ce59 [ 2350.167667][T32390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2350.167691][T32390] RSP: 002b:00007fcc504ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2350.167715][T32390] RAX: ffffffffffffffda RBX: 00007fcc4f816090 RCX: 00007fcc4f59ce59 [ 2350.167731][T32390] RDX: 0000000000001f00 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2350.167747][T32390] RBP: 00007fcc4f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 2350.167763][T32390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2350.167779][T32390] R13: 00007fcc4f816128 R14: 00007fcc4f816090 R15: 00007ffc26a66e28 [ 2350.167811][T32390] [ 2350.167895][T32390] Mem-Info: [ 2350.549445][T32390] active_anon:15990 inactive_anon:9 isolated_anon:0 [ 2350.549445][T32390] active_file:10602 inactive_file:42887 isolated_file:0 [ 2350.549445][T32390] unevictable:768 dirty:684 writeback:0 [ 2350.549445][T32390] slab_reclaimable:13153 slab_unreclaimable:102292 [ 2350.549445][T32390] mapped:26519 shmem:1298 pagetables:1071 [ 2350.549445][T32390] sec_pagetables:0 bounce:0 [ 2350.549445][T32390] kernel_misc_reclaimable:0 [ 2350.549445][T32390] free:1298073 free_pcp:16691 free_cma:0 [ 2350.596240][T32390] Node 0 active_anon:63960kB inactive_anon:36kB active_file:42408kB inactive_file:171420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106076kB dirty:2728kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11072kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2350.636267][T32262] Bluetooth: hci2: command tx timeout [ 2350.646985][T32390] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2350.694415][T32390] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2350.735798][T32390] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 2350.748553][T32390] Node 0 DMA32 free:1261852kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63924kB inactive_anon:36kB active_file:42408kB inactive_file:171416kB unevictable:1536kB writepending:2736kB zspages:340kB present:3129332kB managed:2537500kB mlocked:0kB bounce:0kB free_pcp:42312kB local_pcp:42312kB free_cma:0kB [ 2350.822512][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2350.867590][T32390] lowmem_reserve[]: 0 0 1 1 1 [ 2350.877492][T32390] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2350.942283][T32308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2350.951412][T32390] lowmem_reserve[]: 0 0 0 0 0 [ 2350.967063][T32390] Node 1 Normal free:3915648kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23780kB local_pcp:23780kB free_cma:0kB [ 2351.000844][T32308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2351.012758][T32308] bridge_slave_0: entered allmulticast mode [ 2351.027765][T32308] bridge_slave_0: entered promiscuous mode [ 2351.045051][T32308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2351.061560][T32308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2351.075102][T32390] lowmem_reserve[]: 0 0 0 0 0 [ 2351.087677][T32308] bridge_slave_1: entered allmulticast mode [ 2351.095299][T32390] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2351.117938][T32308] bridge_slave_1: entered promiscuous mode [ 2351.131953][T32390] Node 0 DMA32: 10303*4kB (UME) 8344*8kB (UME) 6204*16kB (UME) 1695*32kB (UME) 1425*64kB (UME) 513*128kB (UM) 496*256kB (UME) 107*512kB (UM) 88*1024kB (UME) 5*2048kB (UM) 135*4096kB (UM) = 1253404kB [ 2351.172354][T32390] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2351.215508][T32390] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (U) 0*32kB 4*64kB (UM) 1*128kB (U) 2*256kB (U) 2*512kB (U) 2*1024kB (U) 4*2048kB (UM) 953*4096kB (UM) = 3915692kB [ 2351.235190][T32262] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 2351.250564][T32390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2351.283306][T32390] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2351.305295][T32390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2351.325250][T32390] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2351.358241][T32390] 58764 total pagecache pages [ 2351.371401][T32390] 14 pages in swap cache [ 2351.383887][T32390] Free swap = 124804kB [ 2351.398485][T32390] Total swap = 124996kB [ 2351.405400][T32308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2351.420671][T32390] 2097051 pages RAM [ 2351.427727][T32390] 0 pages HighMem/MovableOnly [ 2351.442533][T32390] 430784 pages reserved [ 2351.455584][T32390] 0 pages cma reserved [ 2351.464587][T32390] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2351.527613][T32308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2351.699712][T32308] team0: Port device team_slave_0 added [ 2351.730564][T32308] team0: Port device team_slave_1 added [ 2351.989794][T32308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2352.031545][T32308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2352.203633][T32308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2352.420877][T32407] bond0: invalid ARP target specified [ 2352.565663][T32308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2352.619468][T32308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2352.712353][T32262] Bluetooth: hci2: command tx timeout [ 2352.812591][T32308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2353.725578][T32308] hsr_slave_0: entered promiscuous mode [ 2353.745047][T32308] hsr_slave_1: entered promiscuous mode [ 2353.786052][T32308] debugfs: 'hsr0' already exists in 'hsr' [ 2353.828973][T32308] Cannot create hsr debugfs directory [ 2354.023681][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2355.226303][T32071] hsr_slave_0: left promiscuous mode [ 2355.255187][T32071] hsr_slave_1: left promiscuous mode [ 2355.294274][T32071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2355.336955][T32071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2355.384922][T32071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2355.433326][T32071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2355.538801][T32071] veth1_macvtap: left promiscuous mode [ 2355.569029][T32071] veth0_macvtap: left promiscuous mode [ 2355.595527][T32071] veth1_vlan: left promiscuous mode [ 2355.621371][T32071] veth0_vlan: left promiscuous mode [ 2356.237573][T32473] futex_wake_op: syz.1.4697 tries to shift op by -2048; fix this program [ 2356.281755][T32473] futex_wake_op: syz.1.4697 tries to shift op by -2048; fix this program [ 2356.338407][T32476] 0x000000000001-0x000000020000 : "" [ 2356.384349][T32476] ftl_cs: FTL header corrupt! [ 2356.601704][ T30] audit: type=1800 audit(2147484054.186:56): pid=32478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4697" name="lu_gp_id" dev="configfs" ino=133612 res=0 errno=0 [ 2356.626648][T32478] kstrtoul() returned -22 for lu_gp_id [ 2356.696625][T32071] team0 (unregistering): Port device team_slave_1 removed [ 2356.764699][T32071] team0 (unregistering): Port device team_slave_0 removed [ 2357.053778][T32071] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 2357.160216][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2359.335201][T32508] bond0: invalid ARP target specified [ 2359.396037][T32499] netlink: 'syz.0.4701': attribute type 33 has an invalid length. [ 2359.528903][T32499] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4701'. [ 2360.292914][T32308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2360.343540][T32308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2360.388554][T32308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2360.447118][T32308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2360.624104][T32308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2360.718835][T32308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2360.794618][T32308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2360.863387][T32308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2361.300810][T32525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4704'. [ 2362.182268][T32308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2362.848375][T32308] 8021q: adding VLAN 0 to HW filter on device team0 [ 2363.159557][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.166813][T16177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2363.246541][T32072] bridge0: port 2(bridge_slave_1) entered blocking state [ 2363.253735][T32072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2364.805539][T32262] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2366.425573][T32611] futex_wake_op: syz.0.4712 tries to shift op by -2048; fix this program [ 2366.491877][T32611] futex_wake_op: syz.0.4712 tries to shift op by -2048; fix this program [ 2366.576231][ T30] audit: type=1800 audit(2147484064.218:57): pid=32615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4712" name="lu_gp_id" dev="configfs" ino=134307 res=0 errno=0 [ 2366.604252][T32615] kstrtoul() returned -22 for lu_gp_id [ 2366.619133][T32308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2367.695118][T32308] veth0_vlan: entered promiscuous mode [ 2367.788284][T32308] veth1_vlan: entered promiscuous mode [ 2368.015306][T32308] veth0_macvtap: entered promiscuous mode [ 2368.075177][T32308] veth1_macvtap: entered promiscuous mode [ 2368.190349][T32308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2368.252416][T32308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2368.339873][T16050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.391760][T16050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.668116][T16050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.740020][T16050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.679368][T32658] futex_wake_op: syz.0.4716 tries to shift op by -2048; fix this program [ 2369.714502][T32658] futex_wake_op: syz.0.4716 tries to shift op by -2048; fix this program [ 2369.754096][T32658] 0x000000000001-0x000000020000 : "" [ 2369.797807][T32658] ftl_cs: FTL header corrupt! [ 2370.074565][ T30] audit: type=1800 audit(2147484067.726:58): pid=32664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4716" name="lu_gp_id" dev="configfs" ino=134704 res=0 errno=0 [ 2370.115860][T32664] kstrtoul() returned -22 for lu_gp_id [ 2370.130739][T16177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2370.203791][T16177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2370.602056][T19781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2370.647929][T19781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2371.477430][T32680] futex_wake_op: syz.0.4718 tries to shift op by -2048; fix this program [ 2371.524952][T32680] futex_wake_op: syz.0.4718 tries to shift op by -2048; fix this program [ 2371.587848][T32683] 0x000000000001-0x000000020000 : "" [ 2371.667140][T32683] ftl_cs: FTL header corrupt! [ 2371.886139][ T30] audit: type=1800 audit(2147484069.545:59): pid=32686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4718" name="lu_gp_id" dev="configfs" ino=134997 res=0 errno=0 [ 2371.915531][T32686] kstrtoul() returned -22 for lu_gp_id [ 2372.180267][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 2377.171120][T32701] bond0: invalid ARP target specified [ 2377.445446][T32721] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2377.499010][T32721] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2377.553318][T32721] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2377.595148][T32721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2377.647999][T32721] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2377.854403][T32721] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2378.006200][T32716] [U] ^\ [ 2378.732062][T32726] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2379.347276][T32728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4726'. [ 2379.449039][T32262] Bluetooth: hci4: command 0x0406 tx timeout [ 2379.528778][T32262] Bluetooth: hci1: command 0x0406 tx timeout [ 2379.608565][T23624] Bluetooth: hci0: command 0x0406 tx timeout [ 2379.614667][T32262] Bluetooth: hci2: command 0x0c1a tx timeout [ 2379.778081][T32750] futex_wake_op: syz.1.4730 tries to shift op by -2048; fix this program [ 2379.912018][T32750] futex_wake_op: syz.1.4730 tries to shift op by -2048; fix this program [ 2380.009330][ T30] audit: type=1800 audit(2147484077.718:60): pid=32752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4730" name="lu_gp_id" dev="configfs" ino=135406 res=0 errno=0 [ 2380.032030][T32752] kstrtoul() returned -22 for lu_gp_id [ 2380.668287][T32760] bond0: invalid ARP target specified [ 2381.681370][T32262] Bluetooth: hci2: command 0x0c1a tx timeout [ 2383.746843][T32262] Bluetooth: hci2: command 0x0c1a tx timeout [ 2384.857884][ T320] futex_wake_op: syz.3.4736 tries to shift op by -2048; fix this program [ 2384.927241][ T320] futex_wake_op: syz.3.4736 tries to shift op by -2048; fix this program [ 2384.992784][ T321] 0x000000000001-0x000000020000 : "" [ 2385.070258][ T321] ftl_cs: FTL header corrupt! [ 2385.297726][ T30] audit: type=1800 audit(2147484083.025:61): pid=320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4736" name="lu_gp_id" dev="configfs" ino=135580 res=0 errno=0 [ 2385.344472][ T320] kstrtoul() returned -22 for lu_gp_id [ 2387.768900][ T348] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 2387.768900][ T348] program syz.2.4743 not setting count and/or reply_len properly [ 2388.042172][ T348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4743'. [ 2388.949011][ T369] futex_wake_op: syz.0.4747 tries to shift op by -2048; fix this program [ 2389.005168][ T369] futex_wake_op: syz.0.4747 tries to shift op by -2048; fix this program [ 2389.041194][ T361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4745'. [ 2389.171253][ T30] audit: type=1800 audit(2147484086.915:62): pid=369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4747" name="lu_gp_id" dev="configfs" ino=136077 res=0 errno=0 [ 2389.204119][ T369] kstrtoul() returned -22 for lu_gp_id [ 2390.309476][ T30] audit: type=1800 audit(2147484088.071:63): pid=381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4749" name="discovery_nqn" dev="configfs" ino=136200 res=0 errno=0 [ 2390.437085][ T384] futex_wake_op: syz.3.4751 tries to shift op by -2048; fix this program [ 2390.478410][ T384] futex_wake_op: syz.3.4751 tries to shift op by -2048; fix this program [ 2390.524962][ T384] 0x000000000001-0x000000020000 : "" [ 2390.607132][ T384] ftl_cs: FTL header corrupt! [ 2390.698781][ T30] audit: type=1800 audit(2147484088.453:64): pid=388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4751" name="lu_gp_id" dev="configfs" ino=136215 res=0 errno=0 [ 2390.739009][ T388] kstrtoul() returned -22 for lu_gp_id [ 2391.025372][ T385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4750'. [ 2393.743463][ T423] futex_wake_op: syz.0.4758 tries to shift op by -2048; fix this program [ 2393.818358][ T423] futex_wake_op: syz.0.4758 tries to shift op by -2048; fix this program [ 2393.904157][ T425] 0x000000000001-0x000000020000 : "" [ 2394.004920][ T425] ftl_cs: FTL header corrupt! [ 2394.180785][ T430] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2394.206033][ T30] audit: type=1800 audit(2147484091.981:65): pid=423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4758" name="lu_gp_id" dev="configfs" ino=136513 res=0 errno=0 [ 2394.236555][ T423] kstrtoul() returned -22 for lu_gp_id [ 2394.356144][ T420] zswap: compressor 000 not available [ 2395.672979][ T449] random: crng reseeded on system resumption [ 2395.697537][ T450] futex_wake_op: syz.2.4762 tries to shift op by -2048; fix this program [ 2395.742294][ T450] futex_wake_op: syz.2.4762 tries to shift op by -2048; fix this program [ 2395.835002][ T450] 0x000000000001-0x000000020000 : "" [ 2395.918694][ T450] ftl_cs: FTL header corrupt! [ 2395.952809][ T455] futex_wake_op: syz.0.4763 tries to shift op by -2048; fix this program [ 2396.011450][ T452] hub 1-0:1.0: USB hub found [ 2396.020100][ T455] futex_wake_op: syz.0.4763 tries to shift op by -2048; fix this program [ 2396.047933][ T452] hub 1-0:1.0: 1 port detected [ 2396.143875][ T30] audit: type=1800 audit(2147484093.932:66): pid=455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4763" name="lu_gp_id" dev="configfs" ino=136732 res=0 errno=0 [ 2396.172598][ T455] kstrtoul() returned -22 for lu_gp_id [ 2396.229277][ T459] kstrtoul() returned -22 for lu_gp_id [ 2396.527926][ T461] FAULT_INJECTION: forcing a failure. [ 2396.527926][ T461] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.576563][ T461] CPU: 0 UID: 0 PID: 461 Comm: syz.1.4764 Tainted: G L syzkaller #0 PREEMPT(full) [ 2396.576601][ T461] Tainted: [L]=SOFTLOCKUP [ 2396.576610][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2396.576626][ T461] Call Trace: [ 2396.576634][ T461] [ 2396.576644][ T461] dump_stack_lvl+0x100/0x190 [ 2396.576689][ T461] should_fail_ex.cold+0x5/0xa [ 2396.576721][ T461] should_failslab+0xc2/0x120 [ 2396.576752][ T461] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2396.576792][ T461] ? sk_prot_alloc+0x60/0x2a0 [ 2396.576828][ T461] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 2396.576867][ T461] ? security_inode_alloc+0x3b/0x2c0 [ 2396.576900][ T461] sk_prot_alloc+0x60/0x2a0 [ 2396.576933][ T461] sk_alloc+0x36/0xe80 [ 2396.576957][ T461] unix_create1+0xa6/0x700 [ 2396.576995][ T461] unix_create+0x145/0x270 [ 2396.577031][ T461] __sock_create+0x339/0x860 [ 2396.577070][ T461] __sys_socketpair+0x1e4/0x5b0 [ 2396.577108][ T461] ? __pfx___sys_socketpair+0x10/0x10 [ 2396.577145][ T461] ? xfd_validate_state+0x129/0x190 [ 2396.577178][ T461] __x64_sys_socketpair+0x96/0x100 [ 2396.577214][ T461] ? lockdep_hardirqs_on+0x78/0x100 [ 2396.577250][ T461] do_syscall_64+0x115/0x840 [ 2396.577288][ T461] ? clear_bhb_loop+0x40/0x90 [ 2396.577319][ T461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.577345][ T461] RIP: 0033:0x7ff4a419ce59 [ 2396.577370][ T461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2396.577398][ T461] RSP: 002b:00007ff4a510f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2396.577427][ T461] RAX: ffffffffffffffda RBX: 00007ff4a4415fa0 RCX: 00007ff4a419ce59 [ 2396.577445][ T461] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 2396.577460][ T461] RBP: 00007ff4a4232d6f R08: 0000000000000000 R09: 0000000000000000 [ 2396.577476][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2396.577491][ T461] R13: 00007ff4a4416038 R14: 00007ff4a4415fa0 R15: 00007ffd8bb68d18 [ 2396.577523][ T461] [ 2398.152640][ T476] bond0: invalid ARP target specified [ 2398.982085][ T483] block2mtd: too many arguments [ 2399.304644][ T488] futex_wake_op: syz.3.4770 tries to shift op by -2048; fix this program [ 2399.364079][ T488] futex_wake_op: syz.3.4770 tries to shift op by -2048; fix this program [ 2399.417958][ T489] 0x000000000001-0x000000020000 : "" [ 2399.516406][ T489] ftl_cs: FTL header corrupt! [ 2399.656204][ T30] audit: type=1800 audit(2147484097.470:67): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4770" name="lu_gp_id" dev="configfs" ino=137066 res=0 errno=0 [ 2399.700557][ T488] kstrtoul() returned -22 for lu_gp_id [ 2399.984979][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2399.991395][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2404.160987][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 2404.686379][ T546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4780'. [ 2404.847907][ T550] netlink: 'syz.0.4781': attribute type 1 has an invalid length. [ 2404.874771][ T546] hsr_slave_0 (unregistering): left promiscuous mode [ 2407.121298][ T548] block2mtd: too many arguments [ 2407.558232][ T570] bond0: invalid ARP target specified [ 2408.854002][ T580] FAULT_INJECTION: forcing a failure. [ 2408.854002][ T580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2409.030644][ T580] CPU: 0 UID: 0 PID: 580 Comm: syz.2.4786 Tainted: G L syzkaller #0 PREEMPT(full) [ 2409.030684][ T580] Tainted: [L]=SOFTLOCKUP [ 2409.030693][ T580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2409.030708][ T580] Call Trace: [ 2409.030716][ T580] [ 2409.030725][ T580] dump_stack_lvl+0x100/0x190 [ 2409.030757][ T580] should_fail_ex.cold+0x5/0xa [ 2409.030790][ T580] _copy_to_iter+0x1f3/0x1720 [ 2409.030827][ T580] ? do_raw_spin_lock+0x128/0x260 [ 2409.030856][ T580] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2409.030884][ T580] ? __pfx__copy_to_iter+0x10/0x10 [ 2409.030916][ T580] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2409.030953][ T580] ? _raw_spin_lock_irqsave+0x52/0x60 [ 2409.030986][ T580] ? find_held_lock+0x2b/0x80 [ 2409.031026][ T580] ? mark_held_locks+0x40/0x70 [ 2409.031064][ T580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2409.031101][ T580] simple_copy_to_iter+0x46/0x90 [ 2409.031139][ T580] __skb_datagram_iter+0x5c8/0x900 [ 2409.031173][ T580] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2409.031219][ T580] skb_copy_datagram_iter+0xa5/0x270 [ 2409.031259][ T580] tcp_recvmsg_locked+0x1b74/0x2a20 [ 2409.031369][ T580] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 2409.031400][ T580] ? __local_bh_enable_ip+0x9e/0x120 [ 2409.031437][ T580] tcp_recvmsg+0x141/0x630 [ 2409.031463][ T580] ? __pfx_tcp_recvmsg+0x10/0x10 [ 2409.031493][ T580] ? __fget_files+0x215/0x3d0 [ 2409.031522][ T580] ? __fget_files+0x215/0x3d0 [ 2409.031556][ T580] ? __pfx_tcp_recvmsg+0x10/0x10 [ 2409.031580][ T580] inet_recvmsg+0xd5/0x4c0 [ 2409.031624][ T580] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2409.031663][ T580] ? __pfx_inet_recvmsg+0x10/0x10 [ 2409.031704][ T580] sock_recvmsg+0x187/0x1f0 [ 2409.031739][ T580] __sys_recvfrom+0x200/0x300 [ 2409.031762][ T580] ? 0xffffffff81000000 [ 2409.031781][ T580] ? __pfx___sys_recvfrom+0x10/0x10 [ 2409.031831][ T580] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 2409.031881][ T580] ? xfd_validate_state+0x129/0x190 [ 2409.031905][ T580] ? exit_to_user_mode_loop+0xf3/0x670 [ 2409.031952][ T580] __x64_sys_recvfrom+0xe0/0x1c0 [ 2409.031975][ T580] ? do_syscall_64+0x90/0x840 [ 2409.032010][ T580] ? lockdep_hardirqs_on+0x78/0x100 [ 2409.032045][ T580] do_syscall_64+0x115/0x840 [ 2409.032079][ T580] ? clear_bhb_loop+0x40/0x90 [ 2409.032110][ T580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2409.032136][ T580] RIP: 0033:0x7efeb079ce59 [ 2409.032155][ T580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2409.032179][ T580] RSP: 002b:00007efeb1582028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2409.032204][ T580] RAX: ffffffffffffffda RBX: 00007efeb0a15fa0 RCX: 00007efeb079ce59 [ 2409.032221][ T580] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 2409.032236][ T580] RBP: 00007efeb0832d6f R08: 0000000000000000 R09: ffffffff81000000 [ 2409.032252][ T580] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 2409.032267][ T580] R13: 00007efeb0a16038 R14: 00007efeb0a15fa0 R15: 00007ffe1f4210c8 [ 2409.032288][ T580] ? 0xffffffff81000000 [ 2409.032314][ T580] [ 2411.122394][T23624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2411.142688][T23624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2411.154443][T23624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2411.172332][T23624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2411.180005][T23624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2411.293142][ T605] bond0: invalid ARP target specified [ 2412.818260][T32073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.075145][ T626] bond0: invalid ARP target specified [ 2413.273141][T23624] Bluetooth: hci3: command tx timeout [ 2413.295335][T32073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.455444][T32073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.546040][ T648] ubi0: attaching mtd0 [ 2414.674110][T32073] bridge_slave_1: left allmulticast mode [ 2414.688474][ T648] ubi0: scanning is finished [ 2414.701639][T32073] bridge_slave_1: left promiscuous mode [ 2414.725819][ T648] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 2414.739153][T32073] bridge0: port 2(bridge_slave_1) entered disabled state [ 2414.769433][T32073] bridge_slave_0: left allmulticast mode [ 2414.791928][T32073] bridge_slave_0: left promiscuous mode [ 2414.818649][T32073] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.078326][ T648] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 2415.342372][T23624] Bluetooth: hci3: command tx timeout [ 2415.680028][T32073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2415.724670][T32073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2415.756803][T32073] bond0 (unregistering): Released all slaves [ 2415.924092][ T676] bridge_slave_0: left allmulticast mode [ 2416.044081][ T676] bridge_slave_0: left promiscuous mode [ 2416.120888][ T676] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.564691][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2417.160803][ T611] bridge0: port 1(bridge_slave_0) entered blocking state [ 2417.199392][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 2417.226766][ T611] bridge_slave_0: entered allmulticast mode [ 2417.250752][ T611] bridge_slave_0: entered promiscuous mode [ 2417.330581][ T611] bridge0: port 2(bridge_slave_1) entered blocking state [ 2417.364410][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.408539][ T611] bridge_slave_1: entered allmulticast mode [ 2417.415007][T23624] Bluetooth: hci3: command tx timeout [ 2417.457347][ T611] bridge_slave_1: entered promiscuous mode [ 2417.726175][ T611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2417.910578][ T611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2418.186690][ T611] team0: Port device team_slave_0 added [ 2418.346130][ T611] team0: Port device team_slave_1 added [ 2418.810537][ T611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2418.848401][ T611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2418.922342][ T717] futex_wake_op: syz.3.4806 tries to shift op by -2048; fix this program [ 2418.960418][ T717] futex_wake_op: syz.3.4806 tries to shift op by -2048; fix this program [ 2418.989656][ T611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2419.018072][ T719] 0x000000000001-0x000000020000 : "" [ 2419.111842][ T719] ftl_cs: FTL header corrupt! [ 2419.168429][ T611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2419.208055][ T611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2419.272826][ T710] block2mtd: too many arguments [ 2419.323330][ T722] kstrtoul() returned -22 for lu_gp_id [ 2419.332173][ T30] audit: type=1800 audit(2147484117.232:68): pid=722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4806" name="lu_gp_id" dev="configfs" ino=138460 res=0 errno=0 [ 2419.380929][ T611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2419.483149][T23624] Bluetooth: hci3: command tx timeout [ 2419.497369][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2419.970929][ T611] hsr_slave_0: entered promiscuous mode [ 2419.990371][ T611] hsr_slave_1: entered promiscuous mode [ 2420.013976][ T611] debugfs: 'hsr0' already exists in 'hsr' [ 2420.034967][ T611] Cannot create hsr debugfs directory [ 2421.448821][T32073] hsr_slave_0: left promiscuous mode [ 2421.500021][T32073] hsr_slave_1: left promiscuous mode [ 2421.533188][T32073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2421.586908][T32073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2421.638577][ T745] : Can't lookup blockdev [ 2421.669374][T32073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2421.714066][T32073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2421.812820][T32073] veth1_macvtap: left promiscuous mode [ 2421.860707][T32073] veth0_macvtap: left promiscuous mode [ 2421.919774][T32073] veth1_vlan: left promiscuous mode [ 2421.953571][T32073] veth0_vlan: left promiscuous mode [ 2423.029560][T32073] team0 (unregistering): Port device team_slave_1 removed [ 2423.073418][T32073] team0 (unregistering): Port device team_slave_0 removed [ 2423.318751][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2427.205548][ T611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2427.277594][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2427.327941][ T611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2427.410981][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2427.522197][ T611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2427.610400][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2427.715018][ T611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2427.771216][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2429.065911][ T611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2429.616979][ T611] 8021q: adding VLAN 0 to HW filter on device team0 [ 2429.969427][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.976625][T16177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2430.410541][T16177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.417815][T16177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2430.602147][ T851] futex_wake_op: syz.1.4820 tries to shift op by -2048; fix this program [ 2430.640880][ T851] futex_wake_op: syz.1.4820 tries to shift op by -2048; fix this program [ 2430.728464][ T856] 0x000000000001-0x000000020000 : "" [ 2430.929810][ T856] ftl_cs: FTL header corrupt! [ 2431.040941][ T30] audit: type=1800 audit(2147484129.013:69): pid=851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4820" name="lu_gp_id" dev="configfs" ino=139169 res=0 errno=0 [ 2431.098733][ T851] kstrtoul() returned -22 for lu_gp_id [ 2431.404939][ T861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4821'. [ 2434.615689][ T611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2435.305866][ T611] veth0_vlan: entered promiscuous mode [ 2435.430528][ T611] veth1_vlan: entered promiscuous mode [ 2435.646441][ T611] veth0_macvtap: entered promiscuous mode [ 2435.710017][ T931] futex_wake_op: syz.1.4826 tries to shift op by -2048; fix this program [ 2435.720484][ T611] veth1_macvtap: entered promiscuous mode [ 2435.812707][ T931] futex_wake_op: syz.1.4826 tries to shift op by -2048; fix this program [ 2435.849151][ T937] 0x000000000001-0x000000020000 : "" [ 2435.980029][ T611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2436.025532][ T937] ftl_cs: FTL header corrupt! [ 2436.131226][ T611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2436.167493][ T30] audit: type=1800 audit(2147484134.160:70): pid=931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4826" name="lu_gp_id" dev="configfs" ino=139536 res=0 errno=0 [ 2436.188293][ T931] kstrtoul() returned -22 for lu_gp_id [ 2436.334428][T32073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.368585][T32073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.554894][T32073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.616953][T32073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.274746][T32072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2437.344301][T32072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2437.501067][T32072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2437.541626][T32072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2437.742595][ T975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4829'. [ 2438.433469][ T978] Process accounting resumed [ 2439.082745][T32262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2439.090677][T32262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2439.093345][T32262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2439.095236][T32262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2439.105378][T32262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2440.595571][T32073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2441.096650][T32073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2441.208136][T32262] Bluetooth: hci4: command tx timeout [ 2441.676391][T32073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2442.075129][T32073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2443.278679][T32262] Bluetooth: hci4: command tx timeout [ 2443.355050][ T1029] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2443.680461][T32073] bridge_slave_1: left allmulticast mode [ 2443.712585][T32073] bridge_slave_1: left promiscuous mode [ 2443.747544][T32073] bridge0: port 2(bridge_slave_1) entered disabled state [ 2443.806589][T32073] bridge_slave_0: left allmulticast mode [ 2443.842982][T32073] bridge_slave_0: left promiscuous mode [ 2443.879159][T32073] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.780649][T32073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2444.845918][T32073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2444.914046][T32073] bond0 (unregistering): Released all slaves [ 2445.201044][T32073] ovs_: left promiscuous mode [ 2445.347907][T32262] Bluetooth: hci4: command tx timeout [ 2445.749850][ T1071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4838'. [ 2446.046446][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2446.631582][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.672922][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.713762][ T992] bridge_slave_0: entered allmulticast mode [ 2446.759395][ T992] bridge_slave_0: entered promiscuous mode [ 2446.827699][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.876161][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.917777][ T992] bridge_slave_1: entered allmulticast mode [ 2446.967830][ T992] bridge_slave_1: entered promiscuous mode [ 2447.032849][ T1084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4839'. [ 2447.368215][ T992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2447.418814][T32262] Bluetooth: hci4: command tx timeout [ 2447.815741][ T992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2448.572173][ T992] team0: Port device team_slave_0 added [ 2450.152463][ T992] team0: Port device team_slave_1 added [ 2451.372072][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2453.171781][ T992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2453.188974][ T992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2453.218883][ T992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2453.273769][ T992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2453.281020][ T992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2453.313033][ T992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2453.830886][ T992] hsr_slave_0: entered promiscuous mode [ 2453.880644][ T992] hsr_slave_1: entered promiscuous mode [ 2453.915457][ T992] debugfs: 'hsr0' already exists in 'hsr' [ 2453.938366][ T992] Cannot create hsr debugfs directory [ 2454.065316][ T1126] futex_wake_op: syz.2.4842 tries to shift op by -2048; fix this program [ 2454.113178][ T1126] futex_wake_op: syz.2.4842 tries to shift op by -2048; fix this program [ 2454.169697][ T1129] 0x000000000001-0x000000020000 : "" [ 2454.326007][ T1129] ftl_cs: FTL header corrupt! [ 2454.502484][ T30] audit: type=1800 audit(2147484152.575:71): pid=1130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4842" name="lu_gp_id" dev="configfs" ino=140711 res=0 errno=0 [ 2454.560042][ T1130] kstrtoul() returned -22 for lu_gp_id [ 2454.806832][ T1137] futex_wake_op: syz.3.4843 tries to shift op by -2048; fix this program [ 2454.860819][ T1137] futex_wake_op: syz.3.4843 tries to shift op by -2048; fix this program [ 2455.069153][ T30] audit: type=1800 audit(2147484153.168:72): pid=1137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4843" name="lu_gp_id" dev="configfs" ino=140809 res=0 errno=0 [ 2455.098499][ T1137] kstrtoul() returned -22 for lu_gp_id [ 2455.751101][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2455.943113][T32073] hsr_slave_0: left promiscuous mode [ 2455.966299][T32073] hsr_slave_1: left promiscuous mode [ 2455.988445][T32073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2456.016072][T32073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2456.057049][T32073] veth1_macvtap: left promiscuous mode [ 2456.082051][T32073] veth0_macvtap: left promiscuous mode [ 2456.102290][T32073] veth1_vlan: left promiscuous mode [ 2456.118094][T32073] veth0_vlan: left promiscuous mode [ 2456.629520][T32073] team0 (unregistering): Port device team_slave_1 removed [ 2457.163768][ T1156] bond0: invalid ARP target specified [ 2458.462945][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4848'. [ 2461.115539][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2461.125966][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2463.742593][ T992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2463.811306][ T1212] : Can't lookup blockdev [ 2463.852205][ T992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2463.922918][ T992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2464.016577][ T992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2464.231962][ T992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2464.301077][ T992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2464.326602][ T1210] could not allocate digest TFM handle [ 2464.353973][ T992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2464.420999][ T992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2465.604139][ T992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2465.719574][ T992] 8021q: adding VLAN 0 to HW filter on device team0 [ 2465.784504][T32073] bridge0: port 1(bridge_slave_0) entered blocking state [ 2465.791779][T32073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2465.836054][ T1244] futex_wake_op: syz.2.4852 tries to shift op by -2048; fix this program [ 2465.884834][T32073] bridge0: port 2(bridge_slave_1) entered blocking state [ 2465.892062][T32073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2465.922755][ T1244] futex_wake_op: syz.2.4852 tries to shift op by -2048; fix this program [ 2466.016034][ T30] audit: type=1800 audit(2147484164.165:73): pid=1246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4852" name="lu_gp_id" dev="configfs" ino=141385 res=0 errno=0 [ 2466.066015][ T1244] kstrtoul() returned -22 for lu_gp_id [ 2467.289462][ T1266] futex_wake_op: syz.2.4855 tries to shift op by -2048; fix this program [ 2467.459120][ T1266] futex_wake_op: syz.2.4855 tries to shift op by -2048; fix this program [ 2467.618774][ T30] audit: type=1800 audit(2147484165.783:74): pid=1267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4855" name="lu_gp_id" dev="configfs" ino=141488 res=0 errno=0 [ 2467.656675][ T1267] kstrtoul() returned -22 for lu_gp_id [ 2468.472484][ T1260] Process accounting paused [ 2468.805205][ T1297] futex_wake_op: syz.0.4858 tries to shift op by -2048; fix this program [ 2468.941560][ T1297] futex_wake_op: syz.0.4858 tries to shift op by -2048; fix this program [ 2469.098729][ T30] audit: type=1800 audit(2147484167.271:75): pid=1299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4858" name="lu_gp_id" dev="configfs" ino=141559 res=0 errno=0 [ 2469.150572][ T1297] kstrtoul() returned -22 for lu_gp_id [ 2469.238232][ T992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2469.535562][ T992] veth0_vlan: entered promiscuous mode [ 2469.602780][ T992] veth1_vlan: entered promiscuous mode [ 2470.007502][ T992] veth0_macvtap: entered promiscuous mode [ 2470.066388][ T992] veth1_macvtap: entered promiscuous mode [ 2470.184481][ T992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2470.281163][ T992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2470.373106][T16050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.438655][T16050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.519151][T16050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.584014][T16050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2471.078930][T16059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.148372][T16059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.227700][ T1326] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4861'. [ 2471.359260][T32072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.418881][T32072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2472.271397][ T1343] futex_wake_op: syz.3.4863 tries to shift op by -2048; fix this program [ 2472.417029][ T1343] futex_wake_op: syz.3.4863 tries to shift op by -2048; fix this program [ 2472.600465][ T1362] FAULT_INJECTION: forcing a failure. [ 2472.600465][ T1362] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.680349][ T1362] CPU: 0 UID: 0 PID: 1362 Comm: syz.0.4865 Tainted: G L syzkaller #0 PREEMPT(full) [ 2472.680389][ T1362] Tainted: [L]=SOFTLOCKUP [ 2472.680398][ T1362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2472.680427][ T1362] Call Trace: [ 2472.680436][ T1362] [ 2472.680446][ T1362] dump_stack_lvl+0x100/0x190 [ 2472.680481][ T1362] should_fail_ex.cold+0x5/0xa [ 2472.680515][ T1362] should_failslab+0xc2/0x120 [ 2472.680546][ T1362] __kvmalloc_node_noprof+0xfa/0xa00 [ 2472.680576][ T1362] ? io_uring_setup.cold+0x171/0x1c6e [ 2472.680616][ T1362] ? lockdep_init_map_type+0x5c/0x250 [ 2472.680663][ T1362] io_uring_setup.cold+0x171/0x1c6e [ 2472.680707][ T1362] ? __pfx_io_uring_setup+0x10/0x10 [ 2472.680827][ T1362] ? do_futex+0x192/0x350 [ 2472.680854][ T1362] ? __pfx_do_futex+0x10/0x10 [ 2472.680892][ T1362] ? xfd_validate_state+0x129/0x190 [ 2472.680926][ T1362] __x64_sys_io_uring_setup+0xc2/0x170 [ 2472.680968][ T1362] do_syscall_64+0x115/0x840 [ 2472.681005][ T1362] ? clear_bhb_loop+0x40/0x90 [ 2472.681036][ T1362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2472.681061][ T1362] RIP: 0033:0x7f309f39ce59 [ 2472.681083][ T1362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2472.681106][ T1362] RSP: 002b:00007f30a0217028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2472.681131][ T1362] RAX: ffffffffffffffda RBX: 00007f309f615fa0 RCX: 00007f309f39ce59 [ 2472.681148][ T1362] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 2472.681163][ T1362] RBP: 00007f309f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 2472.681178][ T1362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2472.681192][ T1362] R13: 00007f309f616038 R14: 00007f309f615fa0 R15: 00007fff54ef34d8 [ 2472.681223][ T1362] [ 2474.960005][ T1386] bond0: invalid ARP target specified [ 2475.528824][T23624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2475.549499][T23624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2475.561876][T23624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2475.577934][T23624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2475.587370][T23624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2476.070611][T20436] ------------[ cut here ]------------ [ 2476.076683][T20436] ODEBUG: free active (active state 0) object: ffff888042e01438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 2476.089719][T20436] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz-executor/20436 [ 2476.100315][T20436] Modules linked in: [ 2476.104292][T20436] CPU: 0 UID: 0 PID: 20436 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2476.115542][T20436] Tainted: [L]=SOFTLOCKUP [ 2476.120867][T20436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2476.131740][T20436] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 2476.137860][T20436] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 04 e2 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 80 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 2476.157617][T20436] RSP: 0018:ffffc900054e76f8 EFLAGS: 00010246 [ 2476.163705][T20436] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2476.171776][T20436] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1f3e0 [ 2476.179800][T20436] RBP: 0000000000000001 R08: ffff888042e01438 R09: ffffffff8bb2c6a0 [ 2476.188069][T20436] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 2476.196366][T20436] R13: ffffffff8bb2c6e0 R14: ffffffff8a915ec0 R15: ffffc900054e77f8 [ 2476.204522][T20436] FS: 0000000000000000(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 2476.213584][T20436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2476.221282][T20436] CR2: 0000555556bd04e8 CR3: 000000007db10000 CR4: 00000000003526f0 [ 2476.230099][T20436] Call Trace: [ 2476.233416][T20436] [ 2476.236421][T20436] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 2476.241915][T20436] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2476.247836][T20436] debug_check_no_obj_freed+0x4da/0x630 [ 2476.253426][T20436] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2476.259582][T20436] ? __page_table_check_zero+0x333/0x410 [ 2476.265277][T20436] ? __page_table_check_zero+0x338/0x410 [ 2476.271191][T20436] __free_frozen_pages+0x3fc/0x10a0 [ 2476.276497][T20436] hci_release_dev+0x4ef/0x630 [ 2476.281383][T20436] ? __pfx_hci_release_dev+0x10/0x10 [ 2476.286777][T20436] ? device_release+0x97/0x270 [ 2476.291623][T20436] ? rcu_is_watching+0x12/0xc0 [ 2476.296603][T20436] ? device_release+0x97/0x270 [ 2476.301421][T20436] bt_host_release+0x6a/0xb0 [ 2476.306713][T20436] ? __pfx_bt_host_release+0x10/0x10 [ 2476.312051][T20436] device_release+0xd2/0x270 [ 2476.316803][T20436] kobject_put+0x1f7/0x640 [ 2476.321277][T20436] put_device+0x1f/0x30 [ 2476.326480][T20436] vhci_release+0x185/0x230 [ 2476.331773][T20436] ? __pfx_vhci_release+0x10/0x10 [ 2476.336883][T20436] __fput+0x3ff/0xb50 [ 2476.340897][T20436] task_work_run+0x150/0x240 [ 2476.345556][T20436] ? __pfx_task_work_run+0x10/0x10 [ 2476.350711][T20436] do_exit+0x951/0x2af0 [ 2476.354931][T20436] ? anon_pipe_read+0xc1c/0x1200 [ 2476.359920][T20436] ? __pfx_do_exit+0x10/0x10 [ 2476.364595][T20436] ? do_raw_spin_lock+0x128/0x260 [ 2476.369702][T20436] ? find_held_lock+0x2b/0x80 [ 2476.374403][T20436] ? get_signal+0x7e5/0x2210 [ 2476.379055][T20436] do_group_exit+0xd5/0x2a0 [ 2476.383608][T20436] get_signal+0x20ff/0x2210 [ 2476.389289][T20436] ? security_file_permission+0x76/0x210 [ 2476.395194][T20436] ? rw_verify_area+0xce/0x6d0 [ 2476.400140][T20436] ? __pfx_get_signal+0x10/0x10 [ 2476.405076][T20436] ? __pfx_vfs_read+0x10/0x10 [ 2476.409769][T20436] ? __fput+0x68d/0xb50 [ 2476.414408][T20436] arch_do_signal_or_restart+0x91/0x7a0 [ 2476.420046][T20436] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2476.427229][T20436] ? rcu_is_watching+0x12/0xc0 [ 2476.432707][T20436] exit_to_user_mode_loop+0x98/0x670 [ 2476.438098][T20436] ? rcu_is_watching+0x12/0xc0 [ 2476.442886][T20436] do_syscall_64+0x652/0x840 [ 2476.447581][T20436] ? clear_bhb_loop+0x40/0x90 [ 2476.452283][T20436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2476.458276][T20436] RIP: 0033:0x7efeb075d68e [ 2476.462708][T20436] Code: Unable to access opcode bytes at 0x7efeb075d664. [ 2476.470011][T20436] RSP: 002b:00007ffe1f4213c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2476.478497][T20436] RAX: 0000000000000000 RBX: 0000555575b86500 RCX: 00007efeb075d68e [ 2476.486540][T20436] RDX: 0000000000000030 RSI: 00007ffe1f4214c0 RDI: 00000000000000f9 [ 2476.494633][T20436] RBP: 00007ffe1f42146c R08: 0000000000000000 R09: 0000000000000000 [ 2476.502815][T20436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000025a [ 2476.510888][T20436] R13: 00000000000927c0 R14: 000000000025d960 R15: 00007ffe1f4214c0 [ 2476.518945][T20436] [ 2476.522010][T20436] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2476.529307][T20436] CPU: 0 UID: 0 PID: 20436 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2476.540447][T20436] Tainted: [L]=SOFTLOCKUP [ 2476.544790][T20436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2476.554850][T20436] Call Trace: [ 2476.558136][T20436] [ 2476.561076][T20436] dump_stack_lvl+0x100/0x190 [ 2476.565767][T20436] vpanic+0x552/0x970 [ 2476.569763][T20436] ? __pfx_vpanic+0x10/0x10 [ 2476.574282][T20436] panic+0xd1/0xe0 [ 2476.578011][T20436] ? __pfx_panic+0x10/0x10 [ 2476.582463][T20436] ? check_panic_on_warn+0x1f/0x90 [ 2476.587612][T20436] check_panic_on_warn.cold+0x19/0x34 [ 2476.592999][T20436] ? debug_print_object+0x18e/0x2a0 [ 2476.598229][T20436] __warn.cold+0x191/0x328 [ 2476.602665][T20436] __report_bug+0x296/0x3d0 [ 2476.607271][T20436] ? debug_print_object+0x18e/0x2a0 [ 2476.612496][T20436] ? __pfx___report_bug+0x10/0x10 [ 2476.617554][T20436] ? unwind_next_frame+0x3c8/0x2090 [ 2476.622777][T20436] report_bug_entry+0xe1/0x290 [ 2476.627752][T20436] ? debug_print_object+0x19b/0x2a0 [ 2476.632968][T20436] handle_bug+0x1cd/0x2a0 [ 2476.637321][T20436] exc_invalid_op+0x17/0x50 [ 2476.641852][T20436] asm_exc_invalid_op+0x1a/0x20 [ 2476.646723][T20436] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 2476.652558][T20436] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 04 e2 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 80 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 2476.672273][T20436] RSP: 0018:ffffc900054e76f8 EFLAGS: 00010246 [ 2476.678366][T20436] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2476.686367][T20436] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1f3e0 [ 2476.694363][T20436] RBP: 0000000000000001 R08: ffff888042e01438 R09: ffffffff8bb2c6a0 [ 2476.702375][T20436] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 2476.710365][T20436] R13: ffffffff8bb2c6e0 R14: ffffffff8a915ec0 R15: ffffc900054e77f8 [ 2476.718364][T20436] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 2476.723867][T20436] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 2476.729351][T20436] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2476.735180][T20436] debug_check_no_obj_freed+0x4da/0x630 [ 2476.740757][T20436] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2476.746841][T20436] ? __page_table_check_zero+0x333/0x410 [ 2476.752496][T20436] ? __page_table_check_zero+0x338/0x410 [ 2476.758165][T20436] __free_frozen_pages+0x3fc/0x10a0 [ 2476.763391][T20436] hci_release_dev+0x4ef/0x630 [ 2476.768183][T20436] ? __pfx_hci_release_dev+0x10/0x10 [ 2476.773483][T20436] ? device_release+0x97/0x270 [ 2476.778273][T20436] ? rcu_is_watching+0x12/0xc0 [ 2476.783054][T20436] ? device_release+0x97/0x270 [ 2476.787843][T20436] bt_host_release+0x6a/0xb0 [ 2476.792454][T20436] ? __pfx_bt_host_release+0x10/0x10 [ 2476.797759][T20436] device_release+0xd2/0x270 [ 2476.802371][T20436] kobject_put+0x1f7/0x640 [ 2476.806818][T20436] put_device+0x1f/0x30 [ 2476.810991][T20436] vhci_release+0x185/0x230 [ 2476.815523][T20436] ? __pfx_vhci_release+0x10/0x10 [ 2476.820567][T20436] __fput+0x3ff/0xb50 [ 2476.824576][T20436] task_work_run+0x150/0x240 [ 2476.829199][T20436] ? __pfx_task_work_run+0x10/0x10 [ 2476.834368][T20436] do_exit+0x951/0x2af0 [ 2476.838571][T20436] ? anon_pipe_read+0xc1c/0x1200 [ 2476.843527][T20436] ? __pfx_do_exit+0x10/0x10 [ 2476.848139][T20436] ? do_raw_spin_lock+0x128/0x260 [ 2476.853179][T20436] ? find_held_lock+0x2b/0x80 [ 2476.857877][T20436] ? get_signal+0x7e5/0x2210 [ 2476.862484][T20436] do_group_exit+0xd5/0x2a0 [ 2476.867014][T20436] get_signal+0x20ff/0x2210 [ 2476.871555][T20436] ? security_file_permission+0x76/0x210 [ 2476.877214][T20436] ? rw_verify_area+0xce/0x6d0 [ 2476.882005][T20436] ? __pfx_get_signal+0x10/0x10 [ 2476.886872][T20436] ? __pfx_vfs_read+0x10/0x10 [ 2476.891559][T20436] ? __fput+0x68d/0xb50 [ 2476.895762][T20436] arch_do_signal_or_restart+0x91/0x7a0 [ 2476.901337][T20436] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2476.907547][T20436] ? rcu_is_watching+0x12/0xc0 [ 2476.912334][T20436] exit_to_user_mode_loop+0x98/0x670 [ 2476.917651][T20436] ? rcu_is_watching+0x12/0xc0 [ 2476.922436][T20436] do_syscall_64+0x652/0x840 [ 2476.927051][T20436] ? clear_bhb_loop+0x40/0x90 [ 2476.931745][T20436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2476.937651][T20436] RIP: 0033:0x7efeb075d68e [ 2476.942075][T20436] Code: Unable to access opcode bytes at 0x7efeb075d664. [ 2476.949096][T20436] RSP: 002b:00007ffe1f4213c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2476.957518][T20436] RAX: 0000000000000000 RBX: 0000555575b86500 RCX: 00007efeb075d68e [ 2476.965506][T20436] RDX: 0000000000000030 RSI: 00007ffe1f4214c0 RDI: 00000000000000f9 [ 2476.973483][T20436] RBP: 00007ffe1f42146c R08: 0000000000000000 R09: 0000000000000000 [ 2476.981480][T20436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000025a [ 2476.989464][T20436] R13: 00000000000927c0 R14: 000000000025d960 R15: 00007ffe1f4214c0 [ 2476.997467][T20436] [ 2477.000584][T20436] Kernel Offset: disabled [ 2477.004924][T20436] Rebooting in 86400 seconds..