last executing test programs: 2m29.440445115s ago: executing program 1 (id=4109): pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cbf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80001, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x200000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x80000001, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) mmap$auto(0xfffffffffffffffc, 0x400005, 0x5, 0x9b72, 0x2, 0xf8) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000001c0)) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) socket(0x2, 0x3, 0x104) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r4, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000040)) 2m28.002511347s ago: executing program 1 (id=4118): r0 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$auto(r0, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x8340, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="6e4c2bbd7000fddbdf250000000008000b8df4550000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) 2m27.690871515s ago: executing program 1 (id=4120): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x5, 0x15) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x200007, 0x19) pselect6$auto(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x2, 0x0, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x3f}, 0x8) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00 \x00'/21, 0x100000002, 0x100000001) 2m26.442820314s ago: executing program 1 (id=4127): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) r0 = socket(0x28, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x88282, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendfile$auto(r1, r2, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = bpf$auto(0x2, 0x0, 0x4) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_VENDOR_DATA={0x4}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44110}, 0x2400c000) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000004c0a15770d3c8624268adb31474d65fd988d4ed5775c3cb2e680705a7f66bc6a9dbb2170a54e3795e4114c8b5ac23f458e70273f2135e1529c53db84b52da477735b42e03aa05b30e5d8d17a3aefa82db522bd87c545de0af4f8a753a6b6c28d8f77bfecd10719678e1453a56039ce6fbfce53eeb63f2ef49cc14fe9be963bde73ce595a15b14d11462800"/157, @ANYRES16=r4, @ANYBLOB="00042cbd7000fbdbdf250200000008000400080000000e001400255c2723292626252a28000005000f00030000000d0002002f6465762f66623000000000060002002b2f0000050010000100000005000f0009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0xc044) semctl$auto_GETPID(0x3, 0xffffffff, 0xb, 0xe) r5 = clone$auto(0x4, 0x4853, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0xffff, 0x6) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000340)={{0x3, 0x0, 0xee00, 0xfffffffd, 0xffff, 0x4, 0xda}, 0x1, 0x5, 0x10001, 0x4, @raw=0x7, @inferred, 0xfffb, 0x0, &(0x7f0000000100)="68ca99ca5ead3cd29ec1c625d90d479d6ef427384759afb046bf11f0ea433b2ecc755216930d22a75626fd510edc31c1f93880bbca80a0bdfeb12565f71cf082e146d75261598335c6ff11fc7b9d84dce3c4f488013f1e0686287886966be90fd7767e78f4340a022423820e239ca15190de37aedfa83e3bbe03fb9077aa157111ee3fd687418a3755ef545b9d68298c3f99f675c157345c1c76a124d035b985f67c93f5c5f61937e923697cce126954252df3c62a6594ce1c90b3bec70b653a84f4cffaf03b5b3fd8c88d2215d3ad00cf67573e0be5d4211e57fc6da02099dd9bf4", &(0x7f0000000240)="49acaca7a8ea67f9f77e32fa5e71df14c8de384b85d0285d96dfc99b0f280992cbf2309839f0f67084dc5e4bb7138c6177955e678300cffa74424bb7693d0cacb810cf4801e664851dd389cf815420c20ec8ac6f2be9a374f512b78c158b9e6f91231c2d542a98b2ef41d0f6e9b8b9f0f9744537e0ee191bbdf2a24cc27e2ebecdee8acb7a78c12795b768b6286fe5e1ab05f98157c7cf251df9f65602057fa9ceea92eb6e044d55a29cd8cefddc31202d7b471864d961187fd441e46e47af154be95096619058c961a54f71151b4c42f65165ddfa11a2"}) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f00000003c0)={0x12a8, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x10000}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x5}, @NFC_ATTR_LLC_SDP={0x1274, 0x13, 0x0, 0x1, [@nested={0x100c, 0x9, 0x0, 0x1, [@generic="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", @nested={0x4, 0x6a}, @nested={0x4, 0xb4}]}, @typed={0x8, 0xca, 0x0, 0x0, @pid}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r0}, @generic="1f46603d7e06383593f7f2c9f58a5f3db617260d39aa3c8d21c6f7f0f5ea15133d91948473bfd982958f32cca74ce0c94a20022c23adde05b3e4a7aefc373162347626a1e79c80637a5ce04bfc18a5b60b4d935f19f06047", @nested={0xc, 0xcd, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r5}]}, @nested={0x1ed, 0x90, 0x0, 0x1, [@nested={0x4, 0xa6}, @nested={0x4, 0xce}, @generic="8d972be78d894ab30667d77218a612ecb4aa27190ac17604c8e59b69c944ed4aac74f299ae0e20fccd19976f633210c57655a2aca20ed65ab4b174a1721f0aeaad3346495a11242db98bcb42e156f4068d2d8371c32337d8bbe207161ed628f9610574e2283cd419b89025cfae008c6ec4c3287e669f9eee3d7d85bfb1f268238627ebeb688ae0eec8bb0206107f07bd27fcd649100945df5b786e89", @typed={0x4, 0x89}, @typed={0x8, 0xbf, 0x0, 0x0, @uid=r6}, @generic="eca5b893891bf6077b1c49a7f92ef687fadf7af7f8833caf129d2b5bb209793df07adf700f81cdb9c8f4710ef10838e77e47cfb99ee01a3ba36625ba10db7a64c2c21208c8fc58f7b76a78b06191465c39403a26234a2925d567e90e8524bb599d0ebb3bd36967d9fb3988044ae17c512671f61fe6ae8fd9128424f7c2ab33e2e1092f6e366d3f5fc96f36af24ad6c4a473413b765d8f944ae052a102339c08283189e3546e4f9a614f2", @generic="1041e9b776177c9fd08a8b68ac6ad0e5342b7b8679efceac4fa85518de024ebaf08e83c04a296ea7919d946a4472921eb915d52e937ab0b10e1875d6dcb503b025a963d0b1546af0d7beda17ee354ab427e89494407601548a017d20c56cbebe92850959cc4df6ce481ef198f3c75f190a1c365e8121052e4e73900baf0654e7f2a270b3b2d113cc2cf76ede99292a"]}]}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '+'}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x52b}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m25.69359955s ago: executing program 1 (id=4128): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r3, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d5", 0x29) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r4, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x42400, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0xae41, r1) ioctl$auto(0x3, 0x40a0ae49, 0x38) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) 2m10.647657024s ago: executing program 32 (id=4128): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r3, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d5", 0x29) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r4, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x42400, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0xae41, r1) ioctl$auto(0x3, 0x40a0ae49, 0x38) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) 7.152617087s ago: executing program 4 (id=4707): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) r0 = socket(0x28, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x88282, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendfile$auto(r1, r2, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = bpf$auto(0x2, 0x0, 0x4) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x94, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_VENDOR_DATA={0x70, 0x1f, "4867d901dacc02eee1ab47506566b7c229d22cc8a7fbdfcfd9bd6028aa45e54fa80dca082e29c1e5b387677a7a5ae38f64b5edda851d2e0632b3268a8713d048450c51ae49a3cab3b0434f170ac98a1d4b2af52a1318bc7b75e97377c1719dc4396b8cd427aebea5bd8b9ef8"}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x44110}, 0x2400c000) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000004c0a15770d3c8624268adb31474d65fd988d4ed5775c3cb2e680705a7f66bc6a9dbb2170a54e3795e4114c8b5ac23f458e70273f2135e1529c53db84b52da477735b42e03aa05b30e5d8d17a3aefa82db522bd87c545de0af4f8a753a6b6c28d8f77bfecd10719678e1453a56039ce6fbfce53eeb63f2ef49cc14fe9be963bde73ce595a15b14d11462800"/157, @ANYRES16=r4, @ANYBLOB="00042cbd7000fbdbdf250200000008000400080000000e001400255c2723292626252a28000005000f00030000000d0002002f6465762f66623000000000060002002b2f0000050010000100000005000f00090000"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0xc044) semctl$auto_GETPID(0x3, 0xffffffff, 0xb, 0xe) r5 = clone$auto(0x4, 0x4853, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0xffff, 0x6) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000340)={{0x3, 0x0, 0xee00, 0xfffffffd, 0xffff, 0x4, 0xda}, 0x1, 0x5, 0x10001, 0x4, @raw=0x7, @inferred, 0xfffb, 0x0, &(0x7f0000000100)="68ca99ca5ead3cd29ec1c625d90d479d6ef427384759afb046bf11f0ea433b2ecc755216930d22a75626fd510edc31c1f93880bbca80a0bdfeb12565f71cf082e146d75261598335c6ff11fc7b9d84dce3c4f488013f1e0686287886966be90fd7767e78f4340a022423820e239ca15190de37aedfa83e3bbe03fb9077aa157111ee3fd687418a3755ef545b9d68298c3f99f675c157345c1c76a124d035b985f67c93f5c5f61937e923697cce126954252df3c62a6594ce1c90b3bec70b653a84f4cffaf03b5b3fd8c88d2215d3ad00cf67573e0be5d4211e57fc6da02099dd9bf4", &(0x7f0000000240)="49acaca7a8ea67f9f77e32fa5e71df14c8de384b85d0285d96dfc99b0f280992cbf2309839f0f67084dc5e4bb7138c6177955e678300cffa74424bb7693d0cacb810cf4801e664851dd389cf815420c20ec8ac6f2be9a374f512b78c158b9e6f91231c2d542a98b2ef41d0f6e9b8b9f0f9744537e0ee191bbdf2a24cc27e2ebecdee8acb7a78c12795b768b6286fe5e1ab05f98157c7cf251df9f65602057fa9ceea92eb6e044d55a29cd8cefddc31202d7b471864d961187fd441e46e47af154be95096619058c961a54f71151b4c42f65165ddfa11a2"}) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f00000003c0)={0x12a8, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x10000}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x5}, @NFC_ATTR_LLC_SDP={0x1274, 0x13, 0x0, 0x1, [@nested={0x100c, 0x9, 0x0, 0x1, [@generic="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", @nested={0x4, 0x6a}, @nested={0x4, 0xb4}]}, @typed={0x8, 0xca, 0x0, 0x0, @pid}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r0}, @generic="1f46603d7e06383593f7f2c9f58a5f3db617260d39aa3c8d21c6f7f0f5ea15133d91948473bfd982958f32cca74ce0c94a20022c23adde05b3e4a7aefc373162347626a1e79c80637a5ce04bfc18a5b60b4d935f19f06047", @nested={0xc, 0xcd, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r5}]}, @nested={0x1ed, 0x90, 0x0, 0x1, [@nested={0x4, 0xa6}, @nested={0x4, 0xce}, @generic="8d972be78d894ab30667d77218a612ecb4aa27190ac17604c8e59b69c944ed4aac74f299ae0e20fccd19976f633210c57655a2aca20ed65ab4b174a1721f0aeaad3346495a11242db98bcb42e156f4068d2d8371c32337d8bbe207161ed628f9610574e2283cd419b89025cfae008c6ec4c3287e669f9eee3d7d85bfb1f268238627ebeb688ae0eec8bb0206107f07bd27fcd649100945df5b786e89", @typed={0x4, 0x89}, @typed={0x8, 0xbf, 0x0, 0x0, @uid=r6}, @generic="eca5b893891bf6077b1c49a7f92ef687fadf7af7f8833caf129d2b5bb209793df07adf700f81cdb9c8f4710ef10838e77e47cfb99ee01a3ba36625ba10db7a64c2c21208c8fc58f7b76a78b06191465c39403a26234a2925d567e90e8524bb599d0ebb3bd36967d9fb3988044ae17c512671f61fe6ae8fd9128424f7c2ab33e2e1092f6e366d3f5fc96f36af24ad6c4a473413b765d8f944ae052a102339c08283189e3546e4f9a614f2", @generic="1041e9b776177c9fd08a8b68ac6ad0e5342b7b8679efceac4fa85518de024ebaf08e83c04a296ea7919d946a4472921eb915d52e937ab0b10e1875d6dcb503b025a963d0b1546af0d7beda17ee354ab427e89494407601548a017d20c56cbebe92850959cc4df6ce481ef198f3c75f190a1c365e8121052e4e73900baf0654e7f2a270b3b2d113cc2cf76ede99292a"]}]}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '+'}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x52b}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.787439642s ago: executing program 4 (id=4710): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff003) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x3e) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000040)={0x2, r2, 0x401, "5e4c819e7c4b362099a75cbe67b6238b"}) mmap$auto(0x4, 0x400008, 0xdf, 0x18, r3, 0x1ffffc) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x8) keyctl$auto_KEYCTL_SETPERM(0x5, 0x8001, 0xdbf7, 0x5, 0x10) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 5.912507405s ago: executing program 2 (id=4713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000c9edd8fa6574a16208000300", @ANYRES32=r2], 0x2c}}, 0x4000000) 5.556439202s ago: executing program 2 (id=4715): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540a, r0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 5.049973085s ago: executing program 0 (id=4717): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x400003d, 0xfffffffffffffffe, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\x91;\x9dJ\xd6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4`\xa4m\xffx\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd4lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cE\a\xca\xd36\xe8\xcb?\xff\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00|k4\xb1\xc7l\x8d5C\fm\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\xe3|\x959i\xbaKs\x82?\xe09\xf9q\xcc\xe9+\x9e\xdcmn\x1e\xc0\x04:j\x1cu\xbf\xc9$\xac\xadW\x01\x82', 0x100000a3d4) mmap$auto(0x1, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) mmap$auto(0x58910d4b, 0x8, 0xfffffffffffffffb, 0x10, 0x3, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) uname$auto(0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec29\x00', 0x691b7d753ef0cc2d, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0x2) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r2 = prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x5, 0x7) membarrier$auto(0x2, 0x8000000000000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x18219a99e81f0d3d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2}}, 0x1) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x101, &(0x7f0000000180)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x6) 4.908261925s ago: executing program 2 (id=4718): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) r0 = socket(0x28, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x88282, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendfile$auto(r1, r2, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = bpf$auto(0x2, 0x0, 0x4) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x94, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_VENDOR_DATA={0x70, 0x1f, "4867d901dacc02eee1ab47506566b7c229d22cc8a7fbdfcfd9bd6028aa45e54fa80dca082e29c1e5b387677a7a5ae38f64b5edda851d2e0632b3268a8713d048450c51ae49a3cab3b0434f170ac98a1d4b2af52a1318bc7b75e97377c1719dc4396b8cd427aebea5bd8b9ef8"}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x44110}, 0x2400c000) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000004c0a15770d3c8624268adb31474d65fd988d4ed5775c3cb2e680705a7f66bc6a9dbb2170a54e3795e4114c8b5ac23f458e70273f2135e1529c53db84b52da477735b42e03aa05b30e5d8d17a3aefa82db522bd87c545de0af4f8a753a6b6c28d8f77bfecd10719678e1453a56039ce6fbfce53eeb63f2ef49cc14fe9be963bde73ce595a15b14d11462800"/157, @ANYRES16=r4, @ANYBLOB="00042cbd7000fbdbdf250200000008000400080000000e001400255c2723292626252a28000005000f00030000000d0002002f6465762f66623000000000060002002b2f0000050010000100000005000f00090000"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0xc044) semctl$auto_GETPID(0x3, 0xffffffff, 0xb, 0xe) r5 = clone$auto(0x4, 0x4853, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0xffff, 0x6) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000340)={{0x3, 0x0, 0xee00, 0xfffffffd, 0xffff, 0x4, 0xda}, 0x1, 0x5, 0x10001, 0x4, @raw=0x7, @inferred, 0xfffb, 0x0, &(0x7f0000000100)="68ca99ca5ead3cd29ec1c625d90d479d6ef427384759afb046bf11f0ea433b2ecc755216930d22a75626fd510edc31c1f93880bbca80a0bdfeb12565f71cf082e146d75261598335c6ff11fc7b9d84dce3c4f488013f1e0686287886966be90fd7767e78f4340a022423820e239ca15190de37aedfa83e3bbe03fb9077aa157111ee3fd687418a3755ef545b9d68298c3f99f675c157345c1c76a124d035b985f67c93f5c5f61937e923697cce126954252df3c62a6594ce1c90b3bec70b653a84f4cffaf03b5b3fd8c88d2215d3ad00cf67573e0be5d4211e57fc6da02099dd9bf4", &(0x7f0000000240)="49acaca7a8ea67f9f77e32fa5e71df14c8de384b85d0285d96dfc99b0f280992cbf2309839f0f67084dc5e4bb7138c6177955e678300cffa74424bb7693d0cacb810cf4801e664851dd389cf815420c20ec8ac6f2be9a374f512b78c158b9e6f91231c2d542a98b2ef41d0f6e9b8b9f0f9744537e0ee191bbdf2a24cc27e2ebecdee8acb7a78c12795b768b6286fe5e1ab05f98157c7cf251df9f65602057fa9ceea92eb6e044d55a29cd8cefddc31202d7b471864d961187fd441e46e47af154be95096619058c961a54f71151b4c42f65165ddfa11a2"}) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f00000003c0)={0x12a8, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x10000}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x5}, @NFC_ATTR_LLC_SDP={0x1274, 0x13, 0x0, 0x1, [@nested={0x100c, 0x9, 0x0, 0x1, [@generic="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", @nested={0x4, 0x6a}, @nested={0x4, 0xb4}]}, @typed={0x8, 0xca, 0x0, 0x0, @pid}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r0}, @generic="1f46603d7e06383593f7f2c9f58a5f3db617260d39aa3c8d21c6f7f0f5ea15133d91948473bfd982958f32cca74ce0c94a20022c23adde05b3e4a7aefc373162347626a1e79c80637a5ce04bfc18a5b60b4d935f19f06047", @nested={0xc, 0xcd, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r5}]}, @nested={0x1ed, 0x90, 0x0, 0x1, [@nested={0x4, 0xa6}, @nested={0x4, 0xce}, @generic="8d972be78d894ab30667d77218a612ecb4aa27190ac17604c8e59b69c944ed4aac74f299ae0e20fccd19976f633210c57655a2aca20ed65ab4b174a1721f0aeaad3346495a11242db98bcb42e156f4068d2d8371c32337d8bbe207161ed628f9610574e2283cd419b89025cfae008c6ec4c3287e669f9eee3d7d85bfb1f268238627ebeb688ae0eec8bb0206107f07bd27fcd649100945df5b786e89", @typed={0x4, 0x89}, @typed={0x8, 0xbf, 0x0, 0x0, @uid=r6}, @generic="eca5b893891bf6077b1c49a7f92ef687fadf7af7f8833caf129d2b5bb209793df07adf700f81cdb9c8f4710ef10838e77e47cfb99ee01a3ba36625ba10db7a64c2c21208c8fc58f7b76a78b06191465c39403a26234a2925d567e90e8524bb599d0ebb3bd36967d9fb3988044ae17c512671f61fe6ae8fd9128424f7c2ab33e2e1092f6e366d3f5fc96f36af24ad6c4a473413b765d8f944ae052a102339c08283189e3546e4f9a614f2", @generic="1041e9b776177c9fd08a8b68ac6ad0e5342b7b8679efceac4fa85518de024ebaf08e83c04a296ea7919d946a4472921eb915d52e937ab0b10e1875d6dcb503b025a963d0b1546af0d7beda17ee354ab427e89494407601548a017d20c56cbebe92850959cc4df6ce481ef198f3c75f190a1c365e8121052e4e73900baf0654e7f2a270b3b2d113cc2cf76ede99292a"]}]}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '+'}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x52b}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.423972873s ago: executing program 2 (id=4719): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x7ff}, 0x4, 0x966, 0x3, @raw=0x1000404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (fail_nth: 1) 3.936521603s ago: executing program 0 (id=4720): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000004c0), 0x149f80, 0x0) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000001c0)="5253a17c459ceb632081027d0a57b15c786691dcef8c402877cac5a7a07eb029e4f30bfb86252b8127b493be23b72bb1e634d3363cf3b1507702ca9ac4aeb9e315a6e2236c10eee1e4ebdefdfebc22b252110f4d70749742397f65ab6602a829d75f322e8a30870fbe61914be9ea7172a157da62b0c0833e1e88223eeee4eda333b1958ac041e505f45ac6350a03cabb07d2f50506b50a83bb", 0x8, &(0x7f0000000340)={&(0x7f0000000280)="281c10fc6851e41270f042ac2dbc34438cf5f786ca839a98b07af9c1b1d7457c3365f36dd26c02c9eaa893366743f9ef81c3395616a65e5b60ec5ba5355a0fdb9fe3b6fa50effac0641776af2a7d94c4924ff782c19ecce3de8ab24b04acd43d1c2d92bb04f51d4b82a624ececc116a5653b694db93f6f770e3bd95b320adbb5942164630f6613eaa0b8f2d659917c4dc1b8c6fc270600dd8c036d67c28be809ef809476c711fb9a73f1eb95d5", 0x2}, 0x9895, &(0x7f0000000380)="cc0551ab4ec1bfa309923f2a285c7c90f1116040ac73f5d898ffd861663be563e9a696b72471ee87d4752feb66452952bc8d5fc0fb215aad2b8b07b82366af716b6e701f871916815f44720e41fef112a4fef68e4d397796bcc717f1951bac89a4d10f1b70dd38d496a2f3947bad249787d178050d9c8de6fc1afa78759bcf764c5b701638a87ceda3fcdaede8836f15f53ea04e5313321a96e3578100ca27913174f6055a55dc7346b76a403cff8c017adb43023cfc007a9bad99456cd051a54c843a0772b37a5bffdb4a652dc3acdb6e1c1c6775fa2a59b3963659c0e7addafd4ea4990c548bfe5bee9e2622a3088589", 0x46f, 0xfffffff8}, 0xeef9}, 0x5e, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = socket(0x21, 0x2, 0x2) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xf449}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x18, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x10894) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, r1) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/softirqs\x00', 0x682, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) 3.817411126s ago: executing program 0 (id=4721): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x9, 0x7, 0x2e}, 0x6f4) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x4) r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x9e) read$auto(r1, 0x0, 0x8004000000) r2 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x782, 0x0) read$auto_transaction_log_fops_(r2, &(0x7f0000000100)=""/3, 0x3) write$auto(r0, 0x0, 0x6) 3.73539421s ago: executing program 4 (id=4722): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0xa7, 0x1, 0x7, 0x5c, "59df86df5f18306e5e71c50f31a64b2db12e3c7fa0cb36a05c96434bc19b442bd862657dda55187dbc55df9db5f72781765ccf9517d0e3b7f6919e430f1a1bbd043dcd15a1df6d00f52b5231ff22088f6021a3f69369518e756aca17"}, 0x5, 0x9) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x4000050) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x1) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x20000000000, 0x1000000020009, 0x40, 0xeb1, r2, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x3f, 0x5, 0x2000000000948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000000040)=""/26, 0x1a) 3.254226442s ago: executing program 2 (id=4723): select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x2a02c0, 0x0) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x5, &(0x7f00000003c0)=@raw_tracepoint={0x10, 0xffffffffffffffff, 0x0, 0xa}, 0x6f6) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0) write$auto(r3, 0x0, 0x6) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) socketpair$auto(0xfff, 0x7fffffff, 0x2, &(0x7f00000000c0)=0x9) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="b2", 0x1) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) 2.819580709s ago: executing program 3 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000c9edd8fa6574a16208000300", @ANYRES32=r2], 0x2c}}, 0x4000000) 2.498355351s ago: executing program 0 (id=4725): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4c, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x201, 0x6, 0x74, 0x6, 0x64, 0xa, 0x7, 0x8000000008, 0x80000000009, 0x8, 0x81000003, 0x0, 0x10004, 0x9, 0x1, 0xffffffffffffffff]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x200) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto_hwflags_ops_debugfs(0xffffffffffffffff, &(0x7f0000000240)=""/221, 0xdd) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) ioctl$auto(0x1, 0x8983, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket(0x2000000000000021, 0x2, 0xb0) setsockopt$auto(r3, 0x110, 0x2, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x80087601, 0xffffffffffffffff) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/isolated\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/58, 0x3a) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xe4, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 2.426340569s ago: executing program 3 (id=4726): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x84) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setgroups$auto(0x9, &(0x7f0000000080)=0xc8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8100, 0x0) socket(0x80000000000002d, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f00000001c0)=@can, 0xff) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) 2.040075696s ago: executing program 0 (id=4727): bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x3, 0x4) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000081) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 1.239929623s ago: executing program 4 (id=4728): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x20480, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26fddb7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "72ad000cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925a872857fd2f672f85343275f80200000000000000ab45f7259ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c200"}) 989.778619ms ago: executing program 3 (id=4729): pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cbf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 635.538915ms ago: executing program 3 (id=4732): openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) mmap$auto(0x0, 0x810004, 0xffc, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x114, 0x8100000c, 0x0, 0x4) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/blkio.bfq.io_wait_time\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) mmap$auto(0x0, 0x2, 0x800000df, 0x9b72, 0xffffffffffffffff, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0xf000000) writev$auto(r1, &(0x7f0000000080)={0x0, 0x66}, 0x3) 441.524275ms ago: executing program 0 (id=4733): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000100)='B\x00\x00\x00\x00\x00\x00\x001\x00', 0xe, 0x7) r0 = semctl$auto(0x1, 0x7, 0x2, 0xffffffffffffff7e) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fc5bdf250200000008000900", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="0800050000000000080005000100000008000900", @ANYRES32=r2, @ANYBLOB="0d0001002f6465762f73646100000000060001003a00000008000900", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2, @ANYBLOB="735de61fbeb76727b2d2204be8ea68fd5d512e8977e79bf09bec963ce1b9b14b73cded196d4afb38000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24008840}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000000)={0x31, 0xff, 0x0, @inferred=r4}}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x18, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 341.620062ms ago: executing program 3 (id=4734): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r0 = socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fremovexattr$auto(0x3, 0x0) mmap$auto(0x9, 0x696, 0x8, 0xeb2, 0x405, 0x8000) r1 = socket(0xa, 0x3, 0x73) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x404, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000014) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = open(0x0, 0x14c1c2, 0x106) io_uring_setup$auto(0x9, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec3\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) close_range$auto(r3, 0xfffffffffffff000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) 223.916194ms ago: executing program 2 (id=4735): socket(0x2a, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76158c045ff86707a23e18496d5d7129a8e340b7ebcd1806c7b26420ea05ca", 0x3d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/net/rose7/name_assign_type\x00', 0x4c0280, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf", 0x2) 0s ago: executing program 3 (id=4736): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000100)='B\x00\x00\x00\x00\x00\x00\x001\x00', 0xe, 0x7) r0 = semctl$auto(0x1, 0x7, 0x2, 0xffffffffffffff7e) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fc5bdf250200000008000900", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="0800050000000000080005000100000008000900", @ANYRES32=r2, @ANYBLOB="0d0001002f6465762f73646100000000060001003a00000008000900", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2, @ANYBLOB="735de61fbeb76727b2d2204be8ea68fd5d512e8977e79bf09bec963ce1b9b14b73cded196d4afb38000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24008840}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000000)={0x31, 0xff, 0x0, @inferred=r4}}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x18, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) kernel console output (not intermixed with test programs): ne, BIOS Google 02/12/2026 [ 990.999061][T22091] Call Trace: [ 990.999067][T22091] [ 990.999073][T22091] dump_stack_lvl+0x100/0x190 [ 990.999100][T22091] should_fail_ex.cold+0x5/0xa [ 990.999118][T22091] ? udp_init_sock+0x24e/0x450 [ 990.999134][T22091] should_failslab+0xc2/0x120 [ 990.999158][T22091] __kmalloc_noprof+0xe0/0x850 [ 990.999178][T22091] ? lockdep_init_map_type+0x5c/0x250 [ 990.999200][T22091] udp_init_sock+0x24e/0x450 [ 990.999216][T22091] ? __pfx_udp_init_sock+0x10/0x10 [ 990.999234][T22091] inet_create+0x94c/0x1060 [ 990.999249][T22091] ? inet_create+0x94/0x1060 [ 990.999267][T22091] __sock_create+0x339/0x860 [ 990.999294][T22091] __sys_socket+0x14d/0x260 [ 990.999309][T22091] ? __pfx___sys_socket+0x10/0x10 [ 990.999330][T22091] __x64_sys_socket+0x72/0xb0 [ 990.999344][T22091] ? lockdep_hardirqs_on+0x78/0x100 [ 990.999364][T22091] do_syscall_64+0x106/0xf80 [ 990.999382][T22091] ? clear_bhb_loop+0x40/0x90 [ 990.999400][T22091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.999416][T22091] RIP: 0033:0x7fb73539bf79 [ 990.999429][T22091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.999444][T22091] RSP: 002b:00007fb73632e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 990.999459][T22091] RAX: ffffffffffffffda RBX: 00007fb735615fa0 RCX: 00007fb73539bf79 [ 990.999469][T22091] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 990.999478][T22091] RBP: 00007fb7354327e0 R08: 0000000000000000 R09: 0000000000000000 [ 990.999487][T22091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.999497][T22091] R13: 00007fb735616038 R14: 00007fb735615fa0 R15: 00007ffecd9f29e8 [ 990.999516][T22091] [ 992.411873][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 992.961394][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.967914][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.272633][T22136] syz.3.4006 uses obsolete (PF_INET,SOCK_PACKET) [ 993.431860][T22138] random: crng reseeded on system resumption [ 993.886714][T22150] Zero length message leads to an empty skb [ 994.547063][T22162] process 'syz.1.4015' launched './file0' with NULL argv: empty string added [ 995.705057][T22186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4022'. [ 996.585372][T22203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 997.274379][T22219] ======================================================= [ 997.274379][T22219] WARNING: The mand mount option has been deprecated and [ 997.274379][T22219] and is ignored by this kernel. Remove the mand [ 997.274379][T22219] option from the mount to silence this warning. [ 997.274379][T22219] ======================================================= [ 999.301648][T22264] can: request_module (can-proto-4) failed. [ 999.593715][T22273] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4044'. [ 999.629538][T22273] Zero length message leads to an empty skb [ 1002.307863][T22331] hub 1-0:1.0: USB hub found [ 1002.364536][T22331] hub 1-0:1.0: 1 port detected [ 1002.946534][T22362] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1003.221200][T22370] netlink: 'syz.3.4071': attribute type 1 has an invalid length. [ 1003.316004][T22370] netlink: 306 bytes leftover after parsing attributes in process `syz.3.4071'. [ 1003.402135][T22367] FAULT_INJECTION: forcing a failure. [ 1003.402135][T22367] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.581413][T22367] CPU: 0 UID: 0 PID: 22367 Comm: syz.0.4072 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.581440][T22367] Tainted: [L]=SOFTLOCKUP [ 1003.581446][T22367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1003.581456][T22367] Call Trace: [ 1003.581462][T22367] [ 1003.581470][T22367] dump_stack_lvl+0x100/0x190 [ 1003.581497][T22367] should_fail_ex.cold+0x5/0xa [ 1003.581516][T22367] should_failslab+0xc2/0x120 [ 1003.581538][T22367] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1003.581559][T22367] ? __d_alloc+0x34/0xa80 [ 1003.581585][T22367] __d_alloc+0x34/0xa80 [ 1003.581610][T22367] d_alloc_parallel+0x111/0x14e0 [ 1003.581634][T22367] ? find_held_lock+0x2b/0x80 [ 1003.581657][T22367] ? __d_lookup+0x25c/0x4a0 [ 1003.581674][T22367] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1003.581703][T22367] ? __d_lookup+0x266/0x4a0 [ 1003.581726][T22367] lookup_open.isra.0+0x57c/0x11b0 [ 1003.581750][T22367] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1003.581780][T22367] ? mnt_get_write_access+0x1e9/0x2f0 [ 1003.581801][T22367] path_openat+0xa98/0x31a0 [ 1003.581829][T22367] ? __pfx_path_openat+0x10/0x10 [ 1003.581857][T22367] do_file_open+0x20e/0x430 [ 1003.581880][T22367] ? __pfx_do_file_open+0x10/0x10 [ 1003.581916][T22367] ? alloc_fd+0x476/0x790 [ 1003.581938][T22367] ? do_getname+0x191/0x390 [ 1003.581955][T22367] do_sys_openat2+0x10d/0x1e0 [ 1003.581972][T22367] ? __pfx_do_sys_openat2+0x10/0x10 [ 1003.581996][T22367] __x64_sys_openat+0x12d/0x210 [ 1003.582013][T22367] ? __pfx___x64_sys_openat+0x10/0x10 [ 1003.582038][T22367] do_syscall_64+0x106/0xf80 [ 1003.582061][T22367] ? clear_bhb_loop+0x40/0x90 [ 1003.582086][T22367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.582102][T22367] RIP: 0033:0x7f0c5b59bf79 [ 1003.582118][T22367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.582133][T22367] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1003.582149][T22367] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1003.582160][T22367] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1003.582169][T22367] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.582178][T22367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.582188][T22367] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1003.582208][T22367] [ 1004.265959][T22380] process 'syz.1.4074' launched './file0' with NULL argv: empty string added [ 1005.786767][T22408] input: f¬ as /devices/virtual/input/input165 [ 1006.306037][T22420] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input166 [ 1006.961575][T18940] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1006.961602][T18940] Bluetooth: hci4: unexpected subevent 0x06 length: 725 > 10 [ 1007.782236][T22451] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1008.690495][T22469] Zero length message leads to an empty skb [ 1008.842942][T22476] FAULT_INJECTION: forcing a failure. [ 1008.842942][T22476] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.893904][T22476] CPU: 0 UID: 0 PID: 22476 Comm: syz.2.4107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.893929][T22476] Tainted: [L]=SOFTLOCKUP [ 1008.893934][T22476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1008.893943][T22476] Call Trace: [ 1008.893949][T22476] [ 1008.893955][T22476] dump_stack_lvl+0x100/0x190 [ 1008.893981][T22476] should_fail_ex.cold+0x5/0xa [ 1008.893998][T22476] ? tomoyo_encode2+0xfb/0x3c0 [ 1008.894016][T22476] should_failslab+0xc2/0x120 [ 1008.894038][T22476] __kmalloc_noprof+0xe0/0x850 [ 1008.894056][T22476] ? d_absolute_path+0x136/0x1b0 [ 1008.894076][T22476] tomoyo_encode2+0xfb/0x3c0 [ 1008.894098][T22476] tomoyo_encode+0x29/0x50 [ 1008.894115][T22476] tomoyo_realpath_from_path+0x18c/0x690 [ 1008.894139][T22476] tomoyo_path_number_perm+0x23c/0x580 [ 1008.894155][T22476] ? tomoyo_path_number_perm+0x22e/0x580 [ 1008.894172][T22476] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1008.894207][T22476] ? find_held_lock+0x2b/0x80 [ 1008.894229][T22476] ? __fget_files+0x215/0x3d0 [ 1008.894247][T22476] ? hook_file_ioctl_common+0x146/0x410 [ 1008.894268][T22476] ? __fget_files+0x21f/0x3d0 [ 1008.894290][T22476] security_file_ioctl+0xd3/0x230 [ 1008.894308][T22476] __x64_sys_ioctl+0xb7/0x210 [ 1008.894327][T22476] do_syscall_64+0x106/0xf80 [ 1008.894346][T22476] ? clear_bhb_loop+0x40/0x90 [ 1008.894364][T22476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.894379][T22476] RIP: 0033:0x7f8e7c19bf79 [ 1008.894392][T22476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.894406][T22476] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.894419][T22476] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1008.894429][T22476] RDX: 00002000000012c0 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 1008.894438][T22476] RBP: 00007f8e7d044090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.894446][T22476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.894454][T22476] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1008.894474][T22476] [ 1008.894489][T22476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1009.138406][T18940] Bluetooth: hci4: command 0x0c1a tx timeout [ 1009.559301][T22492] : Can't lookup blockdev [ 1009.823468][T22471] Process accounting paused [ 1010.177308][T22504] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input167 [ 1010.768406][T22509] capability: warning: `syz.2.4117' uses 32-bit capabilities (legacy support in use) [ 1010.789419][T22511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1014.017022][T22570] random: crng reseeded on system resumption [ 1014.962820][T22583] mmap: syz.3.4133 (22583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1015.435164][T22593] syz.2.4137 uses obsolete (PF_INET,SOCK_PACKET) [ 1015.529347][T22593] process 'syz.2.4137' launched './file0' with NULL argv: empty string added [ 1015.793202][T22595] dyndbg: bad flag-op p, at start of print-parent [ 1015.870100][T22595] dyndbg: flags parse failed [ 1015.951000][T22595] dyndbg: bad flag-op n, at start of nosym-o [ 1016.029149][T22595] dyndbg: flags parse failed [ 1016.403876][ T29] audit: type=1800 audit(4294967457.500:32): pid=22609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4140" name="features" dev="configfs" ino=104883 res=0 errno=0 [ 1017.397776][T22624] nvme_fcloop: unknown parameter or missing value '7' [ 1017.565605][T22624] netlink: 167 bytes leftover after parsing attributes in process `syz.2.4146'. [ 1017.687491][T22624] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4146'. [ 1018.634985][T22640] netlink: 'syz.2.4151': attribute type 2 has an invalid length. [ 1020.152700][T22652] Zero length message leads to an empty skb [ 1022.402864][T22669] bridge0: port 4(gretap0) entered blocking state [ 1022.423604][T22677] can: request_module (can-proto-4) failed. [ 1022.537956][T22669] bridge0: port 4(gretap0) entered disabled state [ 1022.598000][T22669] gretap0: entered allmulticast mode [ 1022.719258][T22669] FAULT_INJECTION: forcing a failure. [ 1022.719258][T22669] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.882071][T22669] CPU: 0 UID: 0 PID: 22669 Comm: syz.0.4157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1022.882099][T22669] Tainted: [L]=SOFTLOCKUP [ 1022.882105][T22669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1022.882115][T22669] Call Trace: [ 1022.882121][T22669] [ 1022.882134][T22669] dump_stack_lvl+0x100/0x190 [ 1022.882162][T22669] should_fail_ex.cold+0x5/0xa [ 1022.882181][T22669] should_failslab+0xc2/0x120 [ 1022.882203][T22669] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1022.882223][T22669] ? __kernfs_new_node+0xd2/0x960 [ 1022.882243][T22669] __kernfs_new_node+0xd2/0x960 [ 1022.882260][T22669] ? __pfx___kernfs_new_node+0x10/0x10 [ 1022.882280][T22669] ? find_held_lock+0x2b/0x80 [ 1022.882302][T22669] ? kernfs_root+0xee/0x2a0 [ 1022.882316][T22669] ? kernfs_root+0xee/0x2a0 [ 1022.882336][T22669] kernfs_new_node+0x11b/0x1a0 [ 1022.882356][T22669] kernfs_create_link+0xcc/0x240 [ 1022.882379][T22669] sysfs_do_create_link_sd+0x90/0x140 [ 1022.882396][T22669] sysfs_create_link+0x61/0xc0 [ 1022.882411][T22669] __netdev_adjacent_dev_insert+0x43e/0xbf0 [ 1022.882433][T22669] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 1022.882459][T22669] __netdev_upper_dev_link+0x3d8/0x7e0 [ 1022.882485][T22669] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 1022.882508][T22669] ? kernfs_root+0xf8/0x2a0 [ 1022.882525][T22669] ? kernfs_add_one+0x214/0x850 [ 1022.882548][T22669] netdev_master_upper_dev_link+0x9f/0xd0 [ 1022.882572][T22669] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 1022.882596][T22669] ? lockdep_rtnl_is_held+0x26/0x40 [ 1022.882611][T22669] ? netdev_is_rx_handler_busy+0x83/0x140 [ 1022.882634][T22669] br_add_if+0x9fd/0x1b40 [ 1022.882654][T22669] ? security_capable+0x80/0x260 [ 1022.882681][T22669] add_del_if+0x114/0x160 [ 1022.882701][T22669] br_dev_siocdevprivate+0x8ac/0x1650 [ 1022.882722][T22669] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1022.882753][T22669] ? lock_acquire+0x1cf/0x380 [ 1022.882777][T22669] ? netdev_name_node_lookup+0x107/0x150 [ 1022.882793][T22669] ? __mutex_lock+0x26a/0x1b90 [ 1022.882816][T22669] dev_ifsioc+0xc1e/0x1e90 [ 1022.882836][T22669] ? __pfx_dev_ifsioc+0x10/0x10 [ 1022.882852][T22669] ? __pfx___mutex_lock+0x10/0x10 [ 1022.882881][T22669] ? dev_load+0x8e/0x240 [ 1022.882897][T22669] ? dev_load+0x8e/0x240 [ 1022.882917][T22669] dev_ioctl+0x70e/0x1070 [ 1022.882937][T22669] sock_ioctl+0x494/0x6b0 [ 1022.882953][T22669] ? __pfx_sock_ioctl+0x10/0x10 [ 1022.882966][T22669] ? hook_file_ioctl_common+0x146/0x410 [ 1022.882988][T22669] ? __fget_files+0x21f/0x3d0 [ 1022.883011][T22669] ? __pfx_sock_ioctl+0x10/0x10 [ 1022.883027][T22669] __x64_sys_ioctl+0x18e/0x210 [ 1022.883046][T22669] do_syscall_64+0x106/0xf80 [ 1022.883065][T22669] ? clear_bhb_loop+0x40/0x90 [ 1022.883084][T22669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.883099][T22669] RIP: 0033:0x7f0c5b59bf79 [ 1022.883113][T22669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.883134][T22669] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1022.883149][T22669] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1022.883160][T22669] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 1022.883171][T22669] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1022.883181][T22669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.883191][T22669] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1022.883211][T22669] [ 1023.378586][T22669] gretap0: left allmulticast mode [ 1024.474793][T22701] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4164'. [ 1025.171070][T22715] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input168 [ 1027.504220][T22744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1027.534361][T22744] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1027.560017][T22744] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1027.579526][T22744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1028.161199][T22763] FAULT_INJECTION: forcing a failure. [ 1028.161199][T22763] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.264243][T22763] CPU: 0 UID: 0 PID: 22763 Comm: syz.2.4185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.264271][T22763] Tainted: [L]=SOFTLOCKUP [ 1028.264278][T22763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1028.264288][T22763] Call Trace: [ 1028.264294][T22763] [ 1028.264301][T22763] dump_stack_lvl+0x100/0x190 [ 1028.264328][T22763] should_fail_ex.cold+0x5/0xa [ 1028.264347][T22763] should_failslab+0xc2/0x120 [ 1028.264369][T22763] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1028.264389][T22763] ? alloc_inode+0x183/0x250 [ 1028.264410][T22763] alloc_inode+0x183/0x250 [ 1028.264427][T22763] new_inode+0x22/0x1c0 [ 1028.264445][T22763] configfs_new_inode+0x24/0x4a0 [ 1028.264463][T22763] configfs_create+0xd9/0x370 [ 1028.264482][T22763] configfs_lookup+0x38f/0x780 [ 1028.264504][T22763] lookup_open.isra.0+0x631/0x11b0 [ 1028.264528][T22763] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1028.264559][T22763] ? mnt_get_write_access+0x1e9/0x2f0 [ 1028.264579][T22763] path_openat+0xa98/0x31a0 [ 1028.264617][T22763] ? __pfx_path_openat+0x10/0x10 [ 1028.264647][T22763] do_file_open+0x20e/0x430 [ 1028.264672][T22763] ? __pfx_do_file_open+0x10/0x10 [ 1028.264709][T22763] ? alloc_fd+0x476/0x790 [ 1028.264733][T22763] ? do_getname+0x191/0x390 [ 1028.264750][T22763] do_sys_openat2+0x10d/0x1e0 [ 1028.264767][T22763] ? __pfx_do_sys_openat2+0x10/0x10 [ 1028.264791][T22763] __x64_sys_openat+0x12d/0x210 [ 1028.264808][T22763] ? __pfx___x64_sys_openat+0x10/0x10 [ 1028.264833][T22763] do_syscall_64+0x106/0xf80 [ 1028.264852][T22763] ? clear_bhb_loop+0x40/0x90 [ 1028.264871][T22763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.264886][T22763] RIP: 0033:0x7f8e7c19bf79 [ 1028.264900][T22763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.264915][T22763] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1028.264931][T22763] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1028.264941][T22763] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1028.264950][T22763] RBP: 00007f8e7c2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1028.264959][T22763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.264968][T22763] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1028.264988][T22763] [ 1029.069104][T16269] Bluetooth: hci4: command 0x0c1a tx timeout [ 1029.535926][T22784] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1029.596926][T16269] Bluetooth: hci2: command 0x0c1a tx timeout [ 1029.602976][T18940] Bluetooth: hci1: command 0x0c1a tx timeout [ 1029.609348][T15983] Bluetooth: hci0: command 0x0c1a tx timeout [ 1029.667004][T22784] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1029.751950][T18940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.762771][T18940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.771807][T18940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.779724][T18940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.787378][T18940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1029.821220][T22784] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1029.938419][T22784] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1030.151707][T22800] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1030.282165][T22800] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1030.367238][T22800] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1030.470725][T22800] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1030.602406][T22808] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1030.713623][T22808] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1030.799319][T22808] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1030.822424][T22790] chnl_net:caif_netlink_parms(): no params data found [ 1030.901702][T22808] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1031.182344][T22790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.220144][T22790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.251235][T22790] bridge_slave_0: entered allmulticast mode [ 1031.282357][T22790] bridge_slave_0: entered promiscuous mode [ 1031.323868][T22790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.362099][T22790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.394519][T22790] bridge_slave_1: entered allmulticast mode [ 1031.436471][T22790] bridge_slave_1: entered promiscuous mode [ 1031.554126][T22790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.620363][T22790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.788460][T22790] team0: Port device team_slave_0 added [ 1031.820296][T22790] team0: Port device team_slave_1 added [ 1031.837286][T18940] Bluetooth: hci3: command tx timeout [ 1031.936171][T22790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.966920][T22790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.069344][T22790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.138411][T22790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.164529][T22790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.212873][T22836] netlink: 'syz.2.4199': attribute type 2 has an invalid length. [ 1032.266918][T22790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.398499][T22837] warning: `syz.0.4198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1032.658372][T22790] hsr_slave_0: entered promiscuous mode [ 1032.687787][T22790] hsr_slave_1: entered promiscuous mode [ 1032.715283][T22790] debugfs: 'hsr0' already exists in 'hsr' [ 1032.743866][T22790] Cannot create hsr debugfs directory [ 1032.838576][T22847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1033.914844][T22790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1033.924836][T18940] Bluetooth: hci3: command tx timeout [ 1034.111891][T22790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1034.204341][T22790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1034.276525][T22790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1034.417022][T22863] can: request_module (can-proto-4) failed. [ 1034.723735][T22790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.797671][T22790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.845541][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.852710][T16617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.929133][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.936271][T16617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.043304][T22790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1035.085121][T22888] netlink: 146 bytes leftover after parsing attributes in process `syz.3.4211'. [ 1035.585740][T22790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.897168][T22908] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1035.997694][T18940] Bluetooth: hci3: command tx timeout [ 1036.006892][T22908] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1036.068961][T22908] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1036.156525][T22908] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1036.193878][T22917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1036.581277][T22790] veth0_vlan: entered promiscuous mode [ 1036.630423][T22790] veth1_vlan: entered promiscuous mode [ 1036.720254][T22790] veth0_macvtap: entered promiscuous mode [ 1036.768871][T22790] veth1_macvtap: entered promiscuous mode [ 1036.834453][T22790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.888894][T22790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.123478][T15978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.175265][T15978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.225782][T15978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.287193][T15978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.502317][T22940] can: request_module (can-proto-4) failed. [ 1037.517495][T22944] FAULT_INJECTION: forcing a failure. [ 1037.517495][T22944] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.583757][T22944] CPU: 0 UID: 0 PID: 22944 Comm: syz.2.4221 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.583785][T22944] Tainted: [L]=SOFTLOCKUP [ 1037.583791][T22944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.583801][T22944] Call Trace: [ 1037.583807][T22944] [ 1037.583813][T22944] dump_stack_lvl+0x100/0x190 [ 1037.583841][T22944] should_fail_ex.cold+0x5/0xa [ 1037.583859][T22944] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1037.583881][T22944] should_failslab+0xc2/0x120 [ 1037.583904][T22944] __kmalloc_noprof+0xe0/0x850 [ 1037.583928][T22944] tomoyo_realpath_from_path+0xb6/0x690 [ 1037.583953][T22944] tomoyo_check_open_permission+0x2af/0x3c0 [ 1037.583972][T22944] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1037.584009][T22944] ? do_raw_spin_lock+0x128/0x260 [ 1037.584031][T22944] ? path_get+0x61/0x80 [ 1037.584055][T22944] tomoyo_file_open+0x6b/0x90 [ 1037.584078][T22944] security_file_open+0xb5/0x1e0 [ 1037.584097][T22944] do_dentry_open+0x5aa/0x1660 [ 1037.584120][T22944] ? security_inode_permission+0xbf/0x250 [ 1037.584141][T22944] vfs_open+0x82/0x3f0 [ 1037.584159][T22944] path_openat+0x208c/0x31a0 [ 1037.584186][T22944] ? __pfx_path_openat+0x10/0x10 [ 1037.584215][T22944] do_file_open+0x20e/0x430 [ 1037.584246][T22944] ? __pfx_do_file_open+0x10/0x10 [ 1037.584282][T22944] ? alloc_fd+0x476/0x790 [ 1037.584305][T22944] ? do_getname+0x191/0x390 [ 1037.584322][T22944] do_sys_openat2+0x10d/0x1e0 [ 1037.584339][T22944] ? __pfx_do_sys_openat2+0x10/0x10 [ 1037.584363][T22944] __x64_sys_openat+0x12d/0x210 [ 1037.584380][T22944] ? __pfx___x64_sys_openat+0x10/0x10 [ 1037.584403][T22944] do_syscall_64+0x106/0xf80 [ 1037.584423][T22944] ? clear_bhb_loop+0x40/0x90 [ 1037.584441][T22944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.584457][T22944] RIP: 0033:0x7f8e7c19bf79 [ 1037.584471][T22944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.584486][T22944] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1037.584501][T22944] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1037.584511][T22944] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1037.584521][T22944] RBP: 00007f8e7c2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.584531][T22944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.584539][T22944] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1037.584559][T22944] [ 1037.584567][T22944] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1038.152886][T18940] Bluetooth: hci3: command tx timeout [ 1038.384662][T15977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.400719][T16617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.440777][T16617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.449580][T15977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.577793][T22790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1038.745911][T22956] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1038.785958][T22956] Zero length message leads to an empty skb [ 1039.890675][T22973] can: request_module (can-proto-4) failed. [ 1040.160133][T22976] Process accounting resumed [ 1040.261828][T22979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1040.551228][T22981] zswap: compressor not available [ 1040.837887][T18940] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 1041.378226][T23003] program syz.0.4238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1042.396604][ T29] audit: type=1804 audit(4294967483.490:33): pid=23039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4246" name="/newroot/431/file0" dev="tmpfs" ino=2301 res=1 errno=0 [ 1042.597805][ T797] usb usb40-port2: attempt power cycle [ 1043.206879][ T797] usb usb40-port2: unable to enumerate USB device [ 1045.675304][T23094] Invalid ELF header magic: != ELF [ 1046.544934][T23112] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input169 [ 1046.600182][T23106] FAULT_INJECTION: forcing a failure. [ 1046.600182][T23106] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.849565][T23106] CPU: 0 UID: 0 PID: 23106 Comm: syz.4.4263 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.849594][T23106] Tainted: [L]=SOFTLOCKUP [ 1046.849600][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1046.849609][T23106] Call Trace: [ 1046.849614][T23106] [ 1046.849621][T23106] dump_stack_lvl+0x100/0x190 [ 1046.849649][T23106] should_fail_ex.cold+0x5/0xa [ 1046.849668][T23106] should_failslab+0xc2/0x120 [ 1046.849691][T23106] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1046.849710][T23106] ? __d_alloc+0x34/0xa80 [ 1046.849745][T23106] __d_alloc+0x34/0xa80 [ 1046.849771][T23106] d_alloc_parallel+0x111/0x14e0 [ 1046.849795][T23106] ? find_held_lock+0x2b/0x80 [ 1046.849817][T23106] ? __d_lookup+0x25c/0x4a0 [ 1046.849834][T23106] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1046.849854][T23106] ? __d_lookup+0x266/0x4a0 [ 1046.849877][T23106] lookup_open.isra.0+0x57c/0x11b0 [ 1046.849899][T23106] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1046.849929][T23106] ? mnt_get_write_access+0x1e9/0x2f0 [ 1046.849949][T23106] path_openat+0xa98/0x31a0 [ 1046.849977][T23106] ? __pfx_path_openat+0x10/0x10 [ 1046.850006][T23106] do_file_open+0x20e/0x430 [ 1046.850028][T23106] ? __pfx_do_file_open+0x10/0x10 [ 1046.850064][T23106] ? alloc_fd+0x476/0x790 [ 1046.850086][T23106] ? do_getname+0x191/0x390 [ 1046.850103][T23106] do_sys_openat2+0x10d/0x1e0 [ 1046.850120][T23106] ? __pfx_do_sys_openat2+0x10/0x10 [ 1046.850147][T23106] __x64_sys_openat+0x12d/0x210 [ 1046.850164][T23106] ? __pfx___x64_sys_openat+0x10/0x10 [ 1046.850189][T23106] do_syscall_64+0x106/0xf80 [ 1046.850208][T23106] ? clear_bhb_loop+0x40/0x90 [ 1046.850226][T23106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.850242][T23106] RIP: 0033:0x7f8f3099bf79 [ 1046.850257][T23106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.850271][T23106] RSP: 002b:00007f8f31892028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1046.850285][T23106] RAX: ffffffffffffffda RBX: 00007f8f30c15fa0 RCX: 00007f8f3099bf79 [ 1046.850296][T23106] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1046.850306][T23106] RBP: 00007f8f30a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.850315][T23106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.850324][T23106] R13: 00007f8f30c16038 R14: 00007f8f30c15fa0 R15: 00007fffc3556658 [ 1046.850346][T23106] [ 1048.396342][T23113] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input170 [ 1049.121816][T23156] netlink: 'syz.0.4276': attribute type 15 has an invalid length. [ 1049.187756][T23156] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1049.533320][T23165] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1049.614952][T23165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1050.120857][T23176] FAULT_INJECTION: forcing a failure. [ 1050.120857][T23176] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.251799][T23176] CPU: 0 UID: 0 PID: 23176 Comm: syz.2.4280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.251825][T23176] Tainted: [L]=SOFTLOCKUP [ 1050.251830][T23176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1050.251840][T23176] Call Trace: [ 1050.251845][T23176] [ 1050.251852][T23176] dump_stack_lvl+0x100/0x190 [ 1050.251878][T23176] should_fail_ex.cold+0x5/0xa [ 1050.251895][T23176] should_failslab+0xc2/0x120 [ 1050.251917][T23176] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1050.251933][T23176] ? proc_self_get_link+0x189/0x1f0 [ 1050.251953][T23176] proc_self_get_link+0x189/0x1f0 [ 1050.251968][T23176] pick_link+0xac2/0x13c0 [ 1050.251986][T23176] ? __pfx_proc_self_get_link+0x10/0x10 [ 1050.252003][T23176] step_into_slowpath+0x9ba/0xf90 [ 1050.252025][T23176] ? __pfx_step_into_slowpath+0x10/0x10 [ 1050.252046][T23176] ? lookup_fast+0x2da/0x600 [ 1050.252061][T23176] ? inode_permission+0x374/0x620 [ 1050.252079][T23176] link_path_walk+0xf28/0x1cc0 [ 1050.252104][T23176] path_openat+0x1be/0x31a0 [ 1050.252123][T23176] ? kasan_save_stack+0x3f/0x50 [ 1050.252141][T23176] ? kasan_save_stack+0x30/0x50 [ 1050.252159][T23176] ? kasan_save_track+0x14/0x30 [ 1050.252177][T23176] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1050.252200][T23176] ? __pfx_path_openat+0x10/0x10 [ 1050.252227][T23176] do_file_open+0x20e/0x430 [ 1050.252249][T23176] ? __pfx_do_file_open+0x10/0x10 [ 1050.252283][T23176] ? alloc_fd+0x476/0x790 [ 1050.252306][T23176] ? do_getname+0x191/0x390 [ 1050.252322][T23176] do_sys_openat2+0x10d/0x1e0 [ 1050.252344][T23176] ? __pfx_do_sys_openat2+0x10/0x10 [ 1050.252367][T23176] __x64_sys_openat+0x12d/0x210 [ 1050.252383][T23176] ? __pfx___x64_sys_openat+0x10/0x10 [ 1050.252406][T23176] do_syscall_64+0x106/0xf80 [ 1050.252425][T23176] ? clear_bhb_loop+0x40/0x90 [ 1050.252443][T23176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.252458][T23176] RIP: 0033:0x7f8e7c19bf79 [ 1050.252471][T23176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.252486][T23176] RSP: 002b:00007f8e7d023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1050.252501][T23176] RAX: ffffffffffffffda RBX: 00007f8e7c416090 RCX: 00007f8e7c19bf79 [ 1050.252514][T23176] RDX: 0000000000101000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1050.252523][T23176] RBP: 00007f8e7c2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.252532][T23176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.252541][T23176] R13: 00007f8e7c416128 R14: 00007f8e7c416090 R15: 00007ffde1cd60f8 [ 1050.252560][T23176] [ 1051.971591][T23275] can: request_module (can-proto-4) failed. [ 1052.063627][T23281] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1052.207053][T23281] CIFS mount error: No usable UNC path provided in device string! [ 1052.207053][T23281] [ 1052.238828][T23281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1053.057965][T23299] CIFS mount error: No usable UNC path provided in device string! [ 1053.057965][T23299] [ 1053.089173][T23299] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1054.050320][T23316] mmap: syz.2.4299 (23316) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1054.400810][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.407272][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.857321][T23321] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1056.560156][T23335] netlink: 306 bytes leftover after parsing attributes in process `syz.0.4306'. [ 1057.803035][T23362] process 'syz.2.4312' launched '/dev/fd/3' with NULL argv: empty string added [ 1058.912523][T23383] FAULT_INJECTION: forcing a failure. [ 1058.912523][T23383] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.038777][T23383] CPU: 0 UID: 0 PID: 23383 Comm: syz.0.4316 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.038804][T23383] Tainted: [L]=SOFTLOCKUP [ 1059.038809][T23383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.038817][T23383] Call Trace: [ 1059.038823][T23383] [ 1059.038830][T23383] dump_stack_lvl+0x100/0x190 [ 1059.038855][T23383] should_fail_ex.cold+0x5/0xa [ 1059.038873][T23383] should_failslab+0xc2/0x120 [ 1059.038895][T23383] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1059.038914][T23383] ? security_inode_alloc+0x3b/0x2c0 [ 1059.038930][T23383] ? lockdep_init_map_type+0x5c/0x250 [ 1059.038950][T23383] security_inode_alloc+0x3b/0x2c0 [ 1059.038967][T23383] inode_init_always_gfp+0xced/0x1040 [ 1059.038990][T23383] alloc_inode+0x8e/0x250 [ 1059.039006][T23383] sock_alloc+0x44/0x280 [ 1059.039026][T23383] ? security_socket_create+0x7f/0x250 [ 1059.039049][T23383] __sock_create+0xc2/0x860 [ 1059.039075][T23383] __sys_socketpair+0x261/0x5b0 [ 1059.039091][T23383] ? __pfx___sys_socketpair+0x10/0x10 [ 1059.039105][T23383] ? __x64_sys_openat+0x12d/0x210 [ 1059.039121][T23383] ? xfd_validate_state+0x129/0x190 [ 1059.039147][T23383] __x64_sys_socketpair+0x96/0x100 [ 1059.039161][T23383] ? lockdep_hardirqs_on+0x78/0x100 [ 1059.039181][T23383] do_syscall_64+0x106/0xf80 [ 1059.039198][T23383] ? clear_bhb_loop+0x40/0x90 [ 1059.039216][T23383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.039231][T23383] RIP: 0033:0x7f0c5b59bf79 [ 1059.039245][T23383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.039260][T23383] RSP: 002b:00007f0c5c424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1059.039274][T23383] RAX: ffffffffffffffda RBX: 00007f0c5b816090 RCX: 00007f0c5b59bf79 [ 1059.039284][T23383] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1059.039293][T23383] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.039302][T23383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.039310][T23383] R13: 00007f0c5b816128 R14: 00007f0c5b816090 R15: 00007ffd3c7f61c8 [ 1059.039329][T23383] [ 1059.039350][T23383] socket: no more sockets [ 1059.534615][T23388] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1059.915659][T23392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'. [ 1061.843091][T23416] syz.4.4324 uses obsolete (PF_INET,SOCK_PACKET) [ 1062.107288][T23420] FAULT_INJECTION: forcing a failure. [ 1062.107288][T23420] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.298052][T23420] CPU: 0 UID: 0 PID: 23420 Comm: syz.0.4325 Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.298087][T23420] Tainted: [L]=SOFTLOCKUP [ 1062.298093][T23420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1062.298103][T23420] Call Trace: [ 1062.298109][T23420] [ 1062.298116][T23420] dump_stack_lvl+0x100/0x190 [ 1062.298144][T23420] should_fail_ex.cold+0x5/0xa [ 1062.298163][T23420] should_failslab+0xc2/0x120 [ 1062.298187][T23420] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1062.298206][T23420] ? __d_alloc+0x34/0xa80 [ 1062.298234][T23420] __d_alloc+0x34/0xa80 [ 1062.298258][T23420] d_alloc_parallel+0x111/0x14e0 [ 1062.298282][T23420] ? find_held_lock+0x2b/0x80 [ 1062.298304][T23420] ? __d_lookup+0x25c/0x4a0 [ 1062.298321][T23420] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1062.298342][T23420] ? __d_lookup+0x266/0x4a0 [ 1062.298368][T23420] lookup_open.isra.0+0x57c/0x11b0 [ 1062.298392][T23420] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1062.298423][T23420] ? mnt_get_write_access+0x1e9/0x2f0 [ 1062.298443][T23420] path_openat+0xa98/0x31a0 [ 1062.298473][T23420] ? __pfx_path_openat+0x10/0x10 [ 1062.298502][T23420] do_file_open+0x20e/0x430 [ 1062.298525][T23420] ? __pfx_do_file_open+0x10/0x10 [ 1062.298560][T23420] ? alloc_fd+0x476/0x790 [ 1062.298583][T23420] ? do_getname+0x191/0x390 [ 1062.298600][T23420] do_sys_openat2+0x10d/0x1e0 [ 1062.298617][T23420] ? __pfx_do_sys_openat2+0x10/0x10 [ 1062.298641][T23420] __x64_sys_openat+0x12d/0x210 [ 1062.298658][T23420] ? __pfx___x64_sys_openat+0x10/0x10 [ 1062.298683][T23420] do_syscall_64+0x106/0xf80 [ 1062.298702][T23420] ? clear_bhb_loop+0x40/0x90 [ 1062.298721][T23420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.298738][T23420] RIP: 0033:0x7f0c5b59bf79 [ 1062.298752][T23420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.298768][T23420] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1062.298783][T23420] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1062.298794][T23420] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1062.298804][T23420] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1062.298814][T23420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.298824][T23420] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1062.298845][T23420] [ 1062.947364][T23426] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1063.406133][T23432] FAULT_INJECTION: forcing a failure. [ 1063.406133][T23432] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1063.556391][T23432] CPU: 0 UID: 0 PID: 23432 Comm: syz.4.4328 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.556418][T23432] Tainted: [L]=SOFTLOCKUP [ 1063.556424][T23432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1063.556434][T23432] Call Trace: [ 1063.556440][T23432] [ 1063.556447][T23432] dump_stack_lvl+0x100/0x190 [ 1063.556474][T23432] should_fail_ex.cold+0x5/0xa [ 1063.556493][T23432] get_futex_key+0x1d2/0x1620 [ 1063.556512][T23432] ? __pfx_get_futex_key+0x10/0x10 [ 1063.556535][T23432] futex_wake+0xea/0x530 [ 1063.556558][T23432] ? __pfx_futex_wake+0x10/0x10 [ 1063.556585][T23432] ? putname+0xb1/0x110 [ 1063.556605][T23432] ? kmem_cache_free+0x124/0x6a0 [ 1063.556626][T23432] do_futex+0x32b/0x350 [ 1063.556644][T23432] ? __pfx_do_futex+0x10/0x10 [ 1063.556660][T23432] ? __pfx_do_sys_openat2+0x10/0x10 [ 1063.556678][T23432] ? __fget_files+0x21f/0x3d0 [ 1063.556700][T23432] __x64_sys_futex+0x34f/0x4d0 [ 1063.556718][T23432] ? __x64_sys_openat+0x12d/0x210 [ 1063.556734][T23432] ? __pfx___x64_sys_futex+0x10/0x10 [ 1063.556759][T23432] do_syscall_64+0x106/0xf80 [ 1063.556778][T23432] ? clear_bhb_loop+0x40/0x90 [ 1063.556796][T23432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.556812][T23432] RIP: 0033:0x7f8f3099bf79 [ 1063.556826][T23432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.556841][T23432] RSP: 002b:00007f8f318920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1063.556856][T23432] RAX: ffffffffffffffda RBX: 00007f8f30c15fa8 RCX: 00007f8f3099bf79 [ 1063.556867][T23432] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f30c15fac [ 1063.556876][T23432] RBP: 00007f8f30c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.556885][T23432] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1063.556894][T23432] R13: 00007f8f30c16038 R14: 00007fffc3556570 R15: 00007fffc3556658 [ 1063.556914][T23432] [ 1065.353933][T23438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.399047][T23438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1065.496905][T23438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1065.542578][T23438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1065.601893][T23438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1065.693164][T23438] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1066.127329][T23438] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1067.428436][T23444] Invalid ELF header magic: != ELF [ 1067.439047][T18940] Bluetooth: hci1: command 0x0c1a tx timeout [ 1067.445674][T16269] Bluetooth: hci0: command 0x0c1a tx timeout [ 1067.452403][T15983] Bluetooth: hci4: command 0x0c1a tx timeout [ 1067.606918][T18940] Bluetooth: hci2: command 0x0c1a tx timeout [ 1067.680590][T18940] Bluetooth: hci3: command 0x0c1a tx timeout [ 1069.758616][T18940] Bluetooth: hci3: command 0x0c1a tx timeout [ 1070.150236][T23493] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4348'. [ 1070.572264][T23504] netlink: 306 bytes leftover after parsing attributes in process `syz.2.4351'. [ 1071.400309][T23503] FAULT_INJECTION: forcing a failure. [ 1071.400309][T23503] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1071.520932][T23503] CPU: 0 UID: 0 PID: 23503 Comm: syz.4.4350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.520958][T23503] Tainted: [L]=SOFTLOCKUP [ 1071.520964][T23503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.520972][T23503] Call Trace: [ 1071.520978][T23503] [ 1071.520985][T23503] dump_stack_lvl+0x100/0x190 [ 1071.521010][T23503] should_fail_ex.cold+0x5/0xa [ 1071.521025][T23503] ? __fput+0x68a/0xb40 [ 1071.521040][T23503] get_futex_key+0x106f/0x1620 [ 1071.521059][T23503] ? __pfx_get_futex_key+0x10/0x10 [ 1071.521073][T23503] ? lock_acquire+0x1cf/0x380 [ 1071.521096][T23503] futex_wake+0xea/0x530 [ 1071.521117][T23503] ? __pfx_futex_wake+0x10/0x10 [ 1071.521137][T23503] ? exit_mm_release+0x19/0x30 [ 1071.521160][T23503] do_futex+0x32b/0x350 [ 1071.521176][T23503] ? __pfx_do_futex+0x10/0x10 [ 1071.521191][T23503] ? __might_fault+0xc5/0x140 [ 1071.521214][T23503] mm_release+0x24a/0x2f0 [ 1071.521229][T23503] do_exit+0x675/0x2a90 [ 1071.521246][T23503] ? __pfx___might_resched+0x10/0x10 [ 1071.521275][T23503] ? __pfx_do_exit+0x10/0x10 [ 1071.521293][T23503] ? do_raw_spin_lock+0x128/0x260 [ 1071.521312][T23503] ? find_held_lock+0x2b/0x80 [ 1071.521333][T23503] ? get_signal+0x7e0/0x21e0 [ 1071.521349][T23503] do_group_exit+0xd5/0x2a0 [ 1071.521369][T23503] get_signal+0x1ec7/0x21e0 [ 1071.521386][T23503] ? task_work_add+0x201/0x3b0 [ 1071.521407][T23503] ? __pfx_get_signal+0x10/0x10 [ 1071.521421][T23503] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1071.521445][T23503] arch_do_signal_or_restart+0x91/0x770 [ 1071.521462][T23503] ? __pfx___fput_deferred+0x10/0x10 [ 1071.521477][T23503] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1071.521499][T23503] ? ksys_read+0x1ac/0x250 [ 1071.521522][T23503] exit_to_user_mode_loop+0x86/0x4a0 [ 1071.521542][T23503] do_syscall_64+0x668/0xf80 [ 1071.521560][T23503] ? clear_bhb_loop+0x40/0x90 [ 1071.521578][T23503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.521593][T23503] RIP: 0033:0x7f8f3099bf79 [ 1071.521607][T23503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.521621][T23503] RSP: 002b:00007f8f31892028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1071.521635][T23503] RAX: 0000000000000000 RBX: 00007f8f30c15fa0 RCX: 00007f8f3099bf79 [ 1071.521645][T23503] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 1071.521654][T23503] RBP: 00007f8f31892090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.521662][T23503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.521671][T23503] R13: 00007f8f30c16038 R14: 00007f8f30c15fa0 R15: 00007fffc3556658 [ 1071.521690][T23503] [ 1072.209447][T18940] Bluetooth: hci3: command 0x0c1a tx timeout [ 1072.319007][T23526] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input171 [ 1073.709753][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4359'. [ 1073.892808][T23108] syz.4.4263 (23108) used greatest stack depth: 18440 bytes left [ 1073.963533][T23539] can: request_module (can-proto-4) failed. [ 1074.181028][T23500] Process accounting paused [ 1074.519949][T23553] netlink: 306 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1074.732158][T23556] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4365'. [ 1075.210645][T23566] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1075.346392][T23566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.361029][T23569] can: request_module (can-proto-4) failed. [ 1075.459290][T23566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1075.637577][T23566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1075.743234][T23566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1076.622510][T23595] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1076.896394][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4376'. [ 1076.969574][T23601] ima: policy update failed [ 1077.008904][ T29] audit: type=1802 audit(4294967518.100:34): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4376" res=0 errno=0 [ 1077.164129][T23605] bridge_slave_1: left allmulticast mode [ 1077.189384][T23605] bridge_slave_1: left promiscuous mode [ 1077.232737][T23605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.277737][T18940] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.358405][T18940] Bluetooth: hci0: command 0x0c1a tx timeout [ 1077.517941][T18940] Bluetooth: hci1: command 0x0c1a tx timeout [ 1077.681072][T18940] Bluetooth: hci2: command 0x0c1a tx timeout [ 1077.760719][T18940] Bluetooth: hci3: command 0x0c1a tx timeout [ 1079.007237][T23650] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1079.694622][T23642] Process accounting resumed [ 1081.025818][T23693] FAULT_INJECTION: forcing a failure. [ 1081.025818][T23693] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.061242][T23694] FAULT_INJECTION: forcing a failure. [ 1081.061242][T23694] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1081.131527][T23693] CPU: 0 UID: 0 PID: 23693 Comm: syz.2.4404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.131556][T23693] Tainted: [L]=SOFTLOCKUP [ 1081.131562][T23693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.131572][T23693] Call Trace: [ 1081.131577][T23693] [ 1081.131584][T23693] dump_stack_lvl+0x100/0x190 [ 1081.131611][T23693] should_fail_ex.cold+0x5/0xa [ 1081.131630][T23693] should_failslab+0xc2/0x120 [ 1081.131653][T23693] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1081.131674][T23693] ? __d_alloc+0x34/0xa80 [ 1081.131701][T23693] __d_alloc+0x34/0xa80 [ 1081.131725][T23693] d_alloc_parallel+0x111/0x14e0 [ 1081.131750][T23693] ? find_held_lock+0x2b/0x80 [ 1081.131772][T23693] ? __d_lookup+0x25c/0x4a0 [ 1081.131789][T23693] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1081.131809][T23693] ? __d_lookup+0x266/0x4a0 [ 1081.131832][T23693] lookup_open.isra.0+0x57c/0x11b0 [ 1081.131855][T23693] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1081.131886][T23693] ? mnt_get_write_access+0x1e9/0x2f0 [ 1081.131907][T23693] path_openat+0xa98/0x31a0 [ 1081.131935][T23693] ? __pfx_path_openat+0x10/0x10 [ 1081.131968][T23693] do_file_open+0x20e/0x430 [ 1081.131991][T23693] ? __pfx_do_file_open+0x10/0x10 [ 1081.132031][T23693] ? alloc_fd+0x476/0x790 [ 1081.132054][T23693] ? do_getname+0x191/0x390 [ 1081.132071][T23693] do_sys_openat2+0x10d/0x1e0 [ 1081.132088][T23693] ? __pfx_do_sys_openat2+0x10/0x10 [ 1081.132112][T23693] __x64_sys_openat+0x12d/0x210 [ 1081.132129][T23693] ? __pfx___x64_sys_openat+0x10/0x10 [ 1081.132153][T23693] do_syscall_64+0x106/0xf80 [ 1081.132172][T23693] ? clear_bhb_loop+0x40/0x90 [ 1081.132191][T23693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.132207][T23693] RIP: 0033:0x7f8e7c19bf79 [ 1081.132221][T23693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.132244][T23693] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1081.132260][T23693] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1081.132271][T23693] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1081.132281][T23693] RBP: 00007f8e7c2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.132291][T23693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.132300][T23693] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1081.132321][T23693] [ 1081.656761][T23694] CPU: 0 UID: 0 PID: 23694 Comm: syz.4.4403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.656788][T23694] Tainted: [L]=SOFTLOCKUP [ 1081.656793][T23694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.656802][T23694] Call Trace: [ 1081.656808][T23694] [ 1081.656814][T23694] dump_stack_lvl+0x100/0x190 [ 1081.656840][T23694] should_fail_ex.cold+0x5/0xa [ 1081.656857][T23694] get_futex_key+0x295/0x1620 [ 1081.656876][T23694] ? __pfx_get_futex_key+0x10/0x10 [ 1081.656889][T23694] ? lock_acquire+0x1cf/0x380 [ 1081.656913][T23694] futex_wake+0xea/0x530 [ 1081.656934][T23694] ? __pfx_futex_wake+0x10/0x10 [ 1081.656953][T23694] ? exit_mm_release+0x19/0x30 [ 1081.656976][T23694] do_futex+0x32b/0x350 [ 1081.656993][T23694] ? __pfx_do_futex+0x10/0x10 [ 1081.657008][T23694] ? __might_fault+0xc5/0x140 [ 1081.657031][T23694] mm_release+0x24a/0x2f0 [ 1081.657045][T23694] do_exit+0x675/0x2a90 [ 1081.657066][T23694] ? __pfx_do_exit+0x10/0x10 [ 1081.657084][T23694] ? do_raw_spin_lock+0x128/0x260 [ 1081.657102][T23694] ? find_held_lock+0x2b/0x80 [ 1081.657123][T23694] ? get_signal+0x7e0/0x21e0 [ 1081.657145][T23694] do_group_exit+0xd5/0x2a0 [ 1081.657165][T23694] get_signal+0x1ec7/0x21e0 [ 1081.657185][T23694] ? __pfx_get_signal+0x10/0x10 [ 1081.657200][T23694] ? do_futex+0x192/0x350 [ 1081.657219][T23694] arch_do_signal_or_restart+0x91/0x770 [ 1081.657238][T23694] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1081.657260][T23694] ? __pfx___x64_sys_futex+0x10/0x10 [ 1081.657276][T23694] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1081.657301][T23694] exit_to_user_mode_loop+0x86/0x4a0 [ 1081.657321][T23694] do_syscall_64+0x668/0xf80 [ 1081.657340][T23694] ? clear_bhb_loop+0x40/0x90 [ 1081.657358][T23694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.657373][T23694] RIP: 0033:0x7f8f3099bf79 [ 1081.657386][T23694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.657401][T23694] RSP: 002b:00007f8f318710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1081.657416][T23694] RAX: fffffffffffffe00 RBX: 00007f8f30c16098 RCX: 00007f8f3099bf79 [ 1081.657426][T23694] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f30c16098 [ 1081.657434][T23694] RBP: 00007f8f30c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.657443][T23694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.657452][T23694] R13: 00007f8f30c16128 R14: 00007fffc3556570 R15: 00007fffc3556658 [ 1081.657471][T23694] [ 1082.734217][T23701] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4406'. [ 1083.266372][T23714] netlink: 'syz.2.4411': attribute type 11 has an invalid length. [ 1085.775783][T23762] netlink: 306 bytes leftover after parsing attributes in process `syz.3.4425'. [ 1086.401912][T23769] can: request_module (can-proto-4) failed. [ 1088.004486][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4435'. [ 1090.211030][T23846] FAULT_INJECTION: forcing a failure. [ 1090.211030][T23846] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.269967][T23846] CPU: 0 UID: 0 PID: 23846 Comm: syz.0.4449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.270000][T23846] Tainted: [L]=SOFTLOCKUP [ 1090.270006][T23846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1090.270015][T23846] Call Trace: [ 1090.270021][T23846] [ 1090.270028][T23846] dump_stack_lvl+0x100/0x190 [ 1090.270055][T23846] should_fail_ex.cold+0x5/0xa [ 1090.270074][T23846] should_failslab+0xc2/0x120 [ 1090.270097][T23846] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1090.270116][T23846] ? __d_alloc+0x34/0xa80 [ 1090.270143][T23846] __d_alloc+0x34/0xa80 [ 1090.270167][T23846] d_alloc_parallel+0x111/0x14e0 [ 1090.270191][T23846] ? find_held_lock+0x2b/0x80 [ 1090.270213][T23846] ? __d_lookup+0x25c/0x4a0 [ 1090.270231][T23846] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1090.270251][T23846] ? __d_lookup+0x266/0x4a0 [ 1090.270281][T23846] lookup_open.isra.0+0x57c/0x11b0 [ 1090.270306][T23846] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1090.270337][T23846] ? mnt_get_write_access+0x1e9/0x2f0 [ 1090.270358][T23846] path_openat+0xa98/0x31a0 [ 1090.270387][T23846] ? __pfx_path_openat+0x10/0x10 [ 1090.270416][T23846] do_file_open+0x20e/0x430 [ 1090.270439][T23846] ? __pfx_do_file_open+0x10/0x10 [ 1090.270475][T23846] ? alloc_fd+0x476/0x790 [ 1090.270498][T23846] ? do_getname+0x191/0x390 [ 1090.270515][T23846] do_sys_openat2+0x10d/0x1e0 [ 1090.270532][T23846] ? __pfx_do_sys_openat2+0x10/0x10 [ 1090.270556][T23846] __x64_sys_openat+0x12d/0x210 [ 1090.270573][T23846] ? __pfx___x64_sys_openat+0x10/0x10 [ 1090.270598][T23846] do_syscall_64+0x106/0xf80 [ 1090.270617][T23846] ? clear_bhb_loop+0x40/0x90 [ 1090.270637][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.270653][T23846] RIP: 0033:0x7f0c5b59bf79 [ 1090.270668][T23846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.270682][T23846] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1090.270698][T23846] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1090.270708][T23846] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1090.270718][T23846] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.270729][T23846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.270738][T23846] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1090.270759][T23846] [ 1090.982663][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1091.004842][T23853] random: crng reseeded on system resumption [ 1091.595578][T23868] CIFS mount error: No usable UNC path provided in device string! [ 1091.595578][T23868] [ 1091.655767][T23868] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1091.737985][T23872] netlink: 'syz.4.4459': attribute type 1 has an invalid length. [ 1091.786703][T23872] netlink: 306 bytes leftover after parsing attributes in process `syz.4.4459'. [ 1092.282087][T23877] can: request_module (can-proto-4) failed. [ 1092.845206][T23891] Invalid ELF header magic: != ELF [ 1099.230761][T23990] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4491'. [ 1100.019536][T24007] FAULT_INJECTION: forcing a failure. [ 1100.019536][T24007] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.126873][T24007] CPU: 0 UID: 0 PID: 24007 Comm: syz.0.4494 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.126901][T24007] Tainted: [L]=SOFTLOCKUP [ 1100.126906][T24007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1100.126917][T24007] Call Trace: [ 1100.126922][T24007] [ 1100.126929][T24007] dump_stack_lvl+0x100/0x190 [ 1100.126957][T24007] should_fail_ex.cold+0x5/0xa [ 1100.126977][T24007] should_failslab+0xc2/0x120 [ 1100.127000][T24007] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1100.127019][T24007] ? vm_area_alloc+0x1f/0x160 [ 1100.127036][T24007] ? vma_merge_new_range+0x38b/0xa30 [ 1100.127058][T24007] vm_area_alloc+0x1f/0x160 [ 1100.127074][T24007] __mmap_region+0x1027/0x2760 [ 1100.127096][T24007] ? __pfx___mmap_region+0x10/0x10 [ 1100.127128][T24007] ? finish_task_switch.isra.0+0x205/0xb80 [ 1100.127143][T24007] ? lockdep_hardirqs_on+0x78/0x100 [ 1100.127163][T24007] ? finish_task_switch.isra.0+0x205/0xb80 [ 1100.127213][T24007] ? rcu_is_watching+0x12/0xc0 [ 1100.127234][T24007] ? cap_capable+0x107/0x460 [ 1100.127261][T24007] mmap_region+0x180/0x3e0 [ 1100.127284][T24007] do_mmap+0xc63/0x12f0 [ 1100.127310][T24007] ? __pfx_do_mmap+0x10/0x10 [ 1100.127340][T24007] ? __pfx_down_write_killable+0x10/0x10 [ 1100.127367][T24007] vm_mmap_pgoff+0x29e/0x470 [ 1100.127395][T24007] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1100.127423][T24007] ? __x64_sys_futex+0x34f/0x4d0 [ 1100.127441][T24007] ? __x64_sys_futex+0x358/0x4d0 [ 1100.127460][T24007] ksys_mmap_pgoff+0x7d/0x5b0 [ 1100.127486][T24007] __x64_sys_mmap+0x125/0x190 [ 1100.127510][T24007] do_syscall_64+0x106/0xf80 [ 1100.127528][T24007] ? clear_bhb_loop+0x40/0x90 [ 1100.127547][T24007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.127563][T24007] RIP: 0033:0x7f0c5b59bf79 [ 1100.127578][T24007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.127593][T24007] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1100.127609][T24007] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1100.127619][T24007] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1100.127628][T24007] RBP: 00007f0c5b6327e0 R08: 0000000000000002 R09: 0000000000008000 [ 1100.127638][T24007] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1100.127648][T24007] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1100.127668][T24007] [ 1102.343581][ T29] audit: type=1800 audit(4294967316.479:35): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4499" name="lu_gp_id" dev="configfs" ino=112677 res=0 errno=0 [ 1102.670900][T24030] FAULT_INJECTION: forcing a failure. [ 1102.670900][T24030] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1102.729796][T24030] CPU: 0 UID: 0 PID: 24030 Comm: syz.2.4500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.729823][T24030] Tainted: [L]=SOFTLOCKUP [ 1102.729828][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1102.729837][T24030] Call Trace: [ 1102.729842][T24030] [ 1102.729849][T24030] dump_stack_lvl+0x100/0x190 [ 1102.729875][T24030] should_fail_ex.cold+0x5/0xa [ 1102.729892][T24030] get_futex_key+0x295/0x1620 [ 1102.729910][T24030] ? __pfx_get_futex_key+0x10/0x10 [ 1102.729924][T24030] ? lock_acquire+0x1cf/0x380 [ 1102.729947][T24030] futex_wake+0xea/0x530 [ 1102.729968][T24030] ? __pfx_futex_wake+0x10/0x10 [ 1102.729987][T24030] ? exit_mm_release+0x19/0x30 [ 1102.730010][T24030] do_futex+0x32b/0x350 [ 1102.730034][T24030] ? __pfx_do_futex+0x10/0x10 [ 1102.730049][T24030] ? __might_fault+0xc5/0x140 [ 1102.730071][T24030] mm_release+0x24a/0x2f0 [ 1102.730086][T24030] do_exit+0x675/0x2a90 [ 1102.730108][T24030] ? __pfx_do_exit+0x10/0x10 [ 1102.730125][T24030] ? do_raw_spin_lock+0x128/0x260 [ 1102.730144][T24030] ? find_held_lock+0x2b/0x80 [ 1102.730165][T24030] ? get_signal+0x7e0/0x21e0 [ 1102.730181][T24030] do_group_exit+0xd5/0x2a0 [ 1102.730201][T24030] get_signal+0x1ec7/0x21e0 [ 1102.730222][T24030] ? __pfx_get_signal+0x10/0x10 [ 1102.730237][T24030] ? do_futex+0x192/0x350 [ 1102.730255][T24030] arch_do_signal_or_restart+0x91/0x770 [ 1102.730274][T24030] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1102.730296][T24030] ? __pfx___x64_sys_futex+0x10/0x10 [ 1102.730312][T24030] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1102.730337][T24030] exit_to_user_mode_loop+0x86/0x4a0 [ 1102.730357][T24030] do_syscall_64+0x668/0xf80 [ 1102.730375][T24030] ? clear_bhb_loop+0x40/0x90 [ 1102.730393][T24030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.730408][T24030] RIP: 0033:0x7f8e7c19bf79 [ 1102.730422][T24030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.730436][T24030] RSP: 002b:00007f8e7d0440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1102.730451][T24030] RAX: fffffffffffffe00 RBX: 00007f8e7c415fa8 RCX: 00007f8e7c19bf79 [ 1102.730461][T24030] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8e7c415fa8 [ 1102.730470][T24030] RBP: 00007f8e7c415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.730479][T24030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.730487][T24030] R13: 00007f8e7c416038 R14: 00007ffde1cd6010 R15: 00007ffde1cd60f8 [ 1102.730506][T24030] [ 1103.488415][T24039] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input172 [ 1103.557043][T18940] Bluetooth: hci0: Malformed Event: 0x02 [ 1104.813509][T24063] can: request_module (can-proto-4) failed. [ 1105.019814][T23999] Process accounting resumed [ 1105.715630][T24077] FAULT_INJECTION: forcing a failure. [ 1105.715630][T24077] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.775168][T24077] CPU: 0 UID: 0 PID: 24077 Comm: syz.2.4512 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.775196][T24077] Tainted: [L]=SOFTLOCKUP [ 1105.775202][T24077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1105.775211][T24077] Call Trace: [ 1105.775217][T24077] [ 1105.775223][T24077] dump_stack_lvl+0x100/0x190 [ 1105.775250][T24077] should_fail_ex.cold+0x5/0xa [ 1105.775269][T24077] should_failslab+0xc2/0x120 [ 1105.775293][T24077] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1105.775309][T24077] ? snd_virmidi_input_open+0xc8/0x4d0 [ 1105.775332][T24077] ? __kasan_kmalloc+0xaa/0xb0 [ 1105.775355][T24077] snd_virmidi_input_open+0xc8/0x4d0 [ 1105.775381][T24077] open_substream+0x480/0x9e0 [ 1105.775400][T24077] rawmidi_open_priv+0x524/0x6f0 [ 1105.775421][T24077] snd_rawmidi_open+0x4c9/0xba0 [ 1105.775442][T24077] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1105.775462][T24077] ? __pfx_default_wake_function+0x10/0x10 [ 1105.775486][T24077] ? soundcore_open+0x231/0x5a0 [ 1105.775507][T24077] ? soundcore_open+0x231/0x5a0 [ 1105.775530][T24077] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1105.775549][T24077] soundcore_open+0x2e3/0x5a0 [ 1105.775572][T24077] ? __pfx_soundcore_open+0x10/0x10 [ 1105.775594][T24077] chrdev_open+0x234/0x6a0 [ 1105.775615][T24077] ? __pfx_apparmor_file_open+0x10/0x10 [ 1105.775632][T24077] ? __pfx_chrdev_open+0x10/0x10 [ 1105.775654][T24077] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1105.775680][T24077] do_dentry_open+0x6d8/0x1660 [ 1105.775710][T24077] ? __pfx_chrdev_open+0x10/0x10 [ 1105.775737][T24077] vfs_open+0x82/0x3f0 [ 1105.775756][T24077] path_openat+0x208c/0x31a0 [ 1105.775785][T24077] ? __pfx_path_openat+0x10/0x10 [ 1105.775814][T24077] do_file_open+0x20e/0x430 [ 1105.775837][T24077] ? __pfx_do_file_open+0x10/0x10 [ 1105.775872][T24077] ? alloc_fd+0x476/0x790 [ 1105.775895][T24077] ? do_getname+0x191/0x390 [ 1105.775912][T24077] do_sys_openat2+0x10d/0x1e0 [ 1105.775929][T24077] ? __pfx_do_sys_openat2+0x10/0x10 [ 1105.775947][T24077] ? __fget_files+0x21f/0x3d0 [ 1105.775971][T24077] __x64_sys_openat+0x12d/0x210 [ 1105.775988][T24077] ? __pfx___x64_sys_openat+0x10/0x10 [ 1105.776013][T24077] do_syscall_64+0x106/0xf80 [ 1105.776033][T24077] ? clear_bhb_loop+0x40/0x90 [ 1105.776052][T24077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.776069][T24077] RIP: 0033:0x7f8e7c19bf79 [ 1105.776083][T24077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.776098][T24077] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1105.776113][T24077] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1105.776124][T24077] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1105.776135][T24077] RBP: 00007f8e7c2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.776145][T24077] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000000 [ 1105.776154][T24077] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1105.776175][T24077] [ 1107.510453][T24104] FAULT_INJECTION: forcing a failure. [ 1107.510453][T24104] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.595213][T24104] CPU: 0 UID: 0 PID: 24104 Comm: syz.0.4520 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.595242][T24104] Tainted: [L]=SOFTLOCKUP [ 1107.595248][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1107.595258][T24104] Call Trace: [ 1107.595264][T24104] [ 1107.595272][T24104] dump_stack_lvl+0x100/0x190 [ 1107.595299][T24104] should_fail_ex.cold+0x5/0xa [ 1107.595318][T24104] ? __register_sysctl_table+0xbe4/0x1650 [ 1107.595337][T24104] should_failslab+0xc2/0x120 [ 1107.595359][T24104] __kmalloc_noprof+0xe0/0x850 [ 1107.595384][T24104] __register_sysctl_table+0xbe4/0x1650 [ 1107.595413][T24104] ? __pfx___register_sysctl_table+0x10/0x10 [ 1107.595432][T24104] ? is_module_address+0x69/0xf0 [ 1107.595449][T24104] ? register_net_sysctl_sz+0x222/0x430 [ 1107.595474][T24104] ? __asan_memcpy+0x3c/0x60 [ 1107.595493][T24104] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1107.595522][T24104] nf_lwtunnel_net_init+0x60/0xf0 [ 1107.595545][T24104] ops_init+0x1e2/0x5f0 [ 1107.595569][T24104] setup_net+0x118/0x3a0 [ 1107.595589][T24104] ? __pfx_setup_net+0x10/0x10 [ 1107.595607][T24104] ? lockdep_init_map_type+0x5c/0x250 [ 1107.595626][T24104] ? mutex_init_lockep+0x110/0x150 [ 1107.595648][T24104] copy_net_ns+0x46f/0x7c0 [ 1107.595672][T24104] create_new_namespaces+0x3ea/0xac0 [ 1107.595700][T24104] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1107.595717][T24104] ksys_unshare+0x455/0xab0 [ 1107.595737][T24104] ? __pfx_ksys_unshare+0x10/0x10 [ 1107.595762][T24104] __x64_sys_unshare+0x31/0x40 [ 1107.595779][T24104] do_syscall_64+0x106/0xf80 [ 1107.595798][T24104] ? clear_bhb_loop+0x40/0x90 [ 1107.595816][T24104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.595832][T24104] RIP: 0033:0x7f0c5b59bf79 [ 1107.595846][T24104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.595861][T24104] RSP: 002b:00007f0c5c424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1107.595877][T24104] RAX: ffffffffffffffda RBX: 00007f0c5b816090 RCX: 00007f0c5b59bf79 [ 1107.595887][T24104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1107.595896][T24104] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.595906][T24104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.595915][T24104] R13: 00007f0c5b816128 R14: 00007f0c5b816090 R15: 00007ffd3c7f61c8 [ 1107.595936][T24104] [ 1107.596048][T24104] sysctl could not get directory: /net -12 [ 1108.143953][T24112] binder: 24111:24112 ioctl c0306201 200000000000 returned -14 [ 1108.615598][T24122] netlink: 'syz.2.4526': attribute type 1 has an invalid length. [ 1108.701029][T24122] netlink: 306 bytes leftover after parsing attributes in process `syz.2.4526'. [ 1110.038572][T24159] FAULT_INJECTION: forcing a failure. [ 1110.038572][T24159] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.260883][T24159] CPU: 0 UID: 0 PID: 24159 Comm: syz.4.4539 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.260911][T24159] Tainted: [L]=SOFTLOCKUP [ 1110.260917][T24159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.260927][T24159] Call Trace: [ 1110.260933][T24159] [ 1110.260940][T24159] dump_stack_lvl+0x100/0x190 [ 1110.260967][T24159] should_fail_ex.cold+0x5/0xa [ 1110.260985][T24159] ? memcg_list_lru_alloc+0x4ec/0x740 [ 1110.261004][T24159] should_failslab+0xc2/0x120 [ 1110.261026][T24159] __kmalloc_noprof+0xe0/0x850 [ 1110.261046][T24159] ? do_syscall_64+0x106/0xf80 [ 1110.261067][T24159] memcg_list_lru_alloc+0x4ec/0x740 [ 1110.261092][T24159] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1110.261111][T24159] ? rcu_read_unlock+0x17/0x60 [ 1110.261139][T24159] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1110.261160][T24159] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 1110.261187][T24159] ? kasan_save_track+0x14/0x30 [ 1110.261209][T24159] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 1110.261234][T24159] ? alloc_inode+0x183/0x250 [ 1110.261256][T24159] alloc_inode+0x183/0x250 [ 1110.261273][T24159] alloc_anon_inode+0x2a/0x3e0 [ 1110.261297][T24159] dma_buf_export+0x267/0xcb0 [ 1110.261321][T24159] ? sg_alloc_table+0x4c/0x1c0 [ 1110.261346][T24159] system_heap_allocate+0xb5e/0x1170 [ 1110.261374][T24159] ? __pfx_system_heap_allocate+0x10/0x10 [ 1110.261405][T24159] ? __might_fault+0xc5/0x140 [ 1110.261433][T24159] dma_heap_ioctl+0x37f/0x5e0 [ 1110.261459][T24159] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1110.261481][T24159] ? __do_sys_close_range+0x230/0x740 [ 1110.261509][T24159] ? xfd_validate_state+0x129/0x190 [ 1110.261531][T24159] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1110.261554][T24159] __x64_sys_ioctl+0x18e/0x210 [ 1110.261574][T24159] do_syscall_64+0x106/0xf80 [ 1110.261593][T24159] ? clear_bhb_loop+0x40/0x90 [ 1110.261611][T24159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.261626][T24159] RIP: 0033:0x7f8f3099bf79 [ 1110.261640][T24159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.261655][T24159] RSP: 002b:00007f8f31871028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.261670][T24159] RAX: ffffffffffffffda RBX: 00007f8f30c16090 RCX: 00007f8f3099bf79 [ 1110.261680][T24159] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 1110.261690][T24159] RBP: 00007f8f30a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.261700][T24159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.261709][T24159] R13: 00007f8f30c16128 R14: 00007f8f30c16090 R15: 00007fffc3556658 [ 1110.261730][T24159] [ 1110.879077][T24162] F-\ [ 1111.026123][T24161] Process accounting paused [ 1112.173818][T24192] kstrtoul() returned -22 for lu_gp_id [ 1112.193904][ T29] audit: type=1800 audit(4294967326.309:36): pid=24192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4548" name="lu_gp_id" dev="configfs" ino=113618 res=0 errno=0 [ 1112.647952][T24200] zswap: compressor  not available [ 1113.115805][T24218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1113.126312][T18940] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 1113.126336][T18940] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 1113.141919][T18940] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1113.242855][T24218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1113.261834][T24219] can: request_module (can-proto-4) failed. [ 1114.186574][T24238] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1115.847620][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.859354][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.983163][T24268] FAULT_INJECTION: forcing a failure. [ 1115.983163][T24268] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.092089][T24268] CPU: 0 UID: 0 PID: 24268 Comm: syz.2.4571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.092115][T24268] Tainted: [L]=SOFTLOCKUP [ 1116.092121][T24268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1116.092132][T24268] Call Trace: [ 1116.092138][T24268] [ 1116.092145][T24268] dump_stack_lvl+0x100/0x190 [ 1116.092171][T24268] should_fail_ex.cold+0x5/0xa [ 1116.092191][T24268] should_failslab+0xc2/0x120 [ 1116.092214][T24268] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1116.092235][T24268] ? __d_alloc+0x34/0xa80 [ 1116.092262][T24268] __d_alloc+0x34/0xa80 [ 1116.092286][T24268] d_alloc_parallel+0x111/0x14e0 [ 1116.092310][T24268] ? find_held_lock+0x2b/0x80 [ 1116.092332][T24268] ? __d_lookup+0x25c/0x4a0 [ 1116.092349][T24268] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1116.092370][T24268] ? __d_lookup+0x266/0x4a0 [ 1116.092392][T24268] lookup_open.isra.0+0x57c/0x11b0 [ 1116.092415][T24268] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1116.092445][T24268] ? mnt_get_write_access+0x1e9/0x2f0 [ 1116.092465][T24268] path_openat+0xa98/0x31a0 [ 1116.092493][T24268] ? __pfx_path_openat+0x10/0x10 [ 1116.092521][T24268] do_file_open+0x20e/0x430 [ 1116.092544][T24268] ? __pfx_do_file_open+0x10/0x10 [ 1116.092579][T24268] ? alloc_fd+0x476/0x790 [ 1116.092602][T24268] ? do_getname+0x191/0x390 [ 1116.092619][T24268] do_sys_openat2+0x10d/0x1e0 [ 1116.092636][T24268] ? __pfx_do_sys_openat2+0x10/0x10 [ 1116.092660][T24268] __x64_sys_openat+0x12d/0x210 [ 1116.092677][T24268] ? __pfx___x64_sys_openat+0x10/0x10 [ 1116.092701][T24268] do_syscall_64+0x106/0xf80 [ 1116.092730][T24268] ? clear_bhb_loop+0x40/0x90 [ 1116.092749][T24268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.092766][T24268] RIP: 0033:0x7f8e7c19bf79 [ 1116.092780][T24268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.092796][T24268] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1116.092811][T24268] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1116.092822][T24268] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1116.092832][T24268] RBP: 00007f8e7c2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.092841][T24268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.092850][T24268] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1116.092871][T24268] [ 1117.737297][T24297] futex_wake_op: syz.0.4579 tries to shift op by -2048; fix this program [ 1117.793399][T24297] futex_wake_op: syz.0.4579 tries to shift op by -2048; fix this program [ 1119.003855][T18940] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1119.003879][T18940] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 1119.018998][T18940] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1119.495599][T24326] FAULT_INJECTION: forcing a failure. [ 1119.495599][T24326] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.571204][T24326] CPU: 0 UID: 0 PID: 24326 Comm: syz.4.4588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1119.571232][T24326] Tainted: [L]=SOFTLOCKUP [ 1119.571238][T24326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1119.571248][T24326] Call Trace: [ 1119.571254][T24326] [ 1119.571261][T24326] dump_stack_lvl+0x100/0x190 [ 1119.571289][T24326] should_fail_ex.cold+0x5/0xa [ 1119.571308][T24326] should_failslab+0xc2/0x120 [ 1119.571339][T24326] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1119.571360][T24326] ? sock_alloc_inode+0x25/0x1c0 [ 1119.571383][T24326] ? do_raw_spin_lock+0x128/0x260 [ 1119.571405][T24326] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1119.571429][T24326] sock_alloc_inode+0x25/0x1c0 [ 1119.571450][T24326] alloc_inode+0x68/0x250 [ 1119.571467][T24326] sock_alloc+0x44/0x280 [ 1119.571486][T24326] ? security_socket_create+0x7f/0x250 [ 1119.571512][T24326] sock_create_lite+0x82/0x120 [ 1119.571535][T24326] __netlink_kernel_create+0xbd/0x750 [ 1119.571557][T24326] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1119.571582][T24326] ? __pfx_genl_pernet_init+0x10/0x10 [ 1119.571604][T24326] genl_pernet_init+0xbd/0x160 [ 1119.571626][T24326] ? __pfx_genl_pernet_init+0x10/0x10 [ 1119.571647][T24326] ? lockdep_init_map_type+0x5c/0x250 [ 1119.571665][T24326] ? __pfx_genl_rcv+0x10/0x10 [ 1119.571685][T24326] ? __pfx_genl_bind+0x10/0x10 [ 1119.571705][T24326] ? __pfx_genl_unbind+0x10/0x10 [ 1119.571724][T24326] ? __pfx_genl_release+0x10/0x10 [ 1119.571746][T24326] ? mutex_init_lockep+0x110/0x150 [ 1119.571768][T24326] ops_init+0x1e2/0x5f0 [ 1119.571790][T24326] setup_net+0x118/0x3a0 [ 1119.571810][T24326] ? __pfx_setup_net+0x10/0x10 [ 1119.571829][T24326] ? lockdep_init_map_type+0x5c/0x250 [ 1119.571847][T24326] ? mutex_init_lockep+0x110/0x150 [ 1119.571868][T24326] copy_net_ns+0x46f/0x7c0 [ 1119.571891][T24326] create_new_namespaces+0x3ea/0xac0 [ 1119.571920][T24326] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1119.571942][T24326] ksys_unshare+0x455/0xab0 [ 1119.571965][T24326] ? __pfx_ksys_unshare+0x10/0x10 [ 1119.571990][T24326] __x64_sys_unshare+0x31/0x40 [ 1119.572008][T24326] do_syscall_64+0x106/0xf80 [ 1119.572027][T24326] ? clear_bhb_loop+0x40/0x90 [ 1119.572045][T24326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.572061][T24326] RIP: 0033:0x7f8f3099bf79 [ 1119.572076][T24326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.572091][T24326] RSP: 002b:00007f8f31892028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1119.572107][T24326] RAX: ffffffffffffffda RBX: 00007f8f30c15fa0 RCX: 00007f8f3099bf79 [ 1119.572118][T24326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1119.572128][T24326] RBP: 00007f8f30a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.572138][T24326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.572147][T24326] R13: 00007f8f30c16038 R14: 00007f8f30c15fa0 R15: 00007fffc3556658 [ 1119.572168][T24326] [ 1120.951762][T24339] can: request_module (can-proto-4) failed. [ 1121.325452][ T29] audit: type=1804 audit(4294967335.459:37): pid=24356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4599" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1121.550265][T24365] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input173 [ 1123.215328][T24403] F-\ [ 1123.763185][T24416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1123.800511][T24419] random: crng reseeded on system resumption [ 1123.953546][T24419] process 'syz.0.4619' launched '/dev/fd/4' with NULL argv: empty string added [ 1124.412943][T15983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1124.425000][T15983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1124.433672][T15983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1124.441378][T15983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1124.464077][T15983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1124.509291][T24432] F-\ [ 1124.933918][T24434] Invalid ELF header magic: != ELF [ 1125.263474][T24431] chnl_net:caif_netlink_parms(): no params data found [ 1125.648782][T24431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.693951][T24431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.730106][T24431] bridge_slave_0: entered allmulticast mode [ 1125.738194][ T29] audit: type=1800 audit(4294967339.869:38): pid=24453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4626" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1125.787039][T24431] bridge_slave_0: entered promiscuous mode [ 1125.877980][T24431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.924659][T24431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.967025][T24431] bridge_slave_1: entered allmulticast mode [ 1126.010019][T24431] bridge_slave_1: entered promiscuous mode [ 1126.212995][T24431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.285879][T24431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.556978][T15983] Bluetooth: hci5: command tx timeout [ 1126.871737][T24431] team0: Port device team_slave_0 added [ 1126.924866][T24431] team0: Port device team_slave_1 added [ 1127.554120][T23221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.866282][T23221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.029718][T24461] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1128.072419][T23221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.124137][T24431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.148566][T24431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.241945][T24431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.362293][T23221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.429843][T24431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.459596][T24431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.546179][T24431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.641832][T15983] Bluetooth: hci5: command tx timeout [ 1128.839682][T24431] hsr_slave_0: entered promiscuous mode [ 1128.857341][T24431] hsr_slave_1: entered promiscuous mode [ 1128.888764][T24431] debugfs: 'hsr0' already exists in 'hsr' [ 1128.910555][T24431] Cannot create hsr debugfs directory [ 1129.485497][T24481] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1129.604869][T23221] team0: left allmulticast mode [ 1129.623319][T24481] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1129.651415][T23221] team_slave_0: left allmulticast mode [ 1129.666909][T23221] team_slave_1: left allmulticast mode [ 1129.682072][T24481] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1129.699671][T23221] team0: left promiscuous mode [ 1129.724462][T23221] team_slave_0: left promiscuous mode [ 1129.751883][T23221] team_slave_1: left promiscuous mode [ 1129.777408][T24481] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1129.792893][T23221] bridge0: port 3(team0) entered disabled state [ 1129.802283][T24487] FAULT_INJECTION: forcing a failure. [ 1129.802283][T24487] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.899075][T24487] CPU: 0 UID: 0 PID: 24487 Comm: syz.4.4635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.899104][T24487] Tainted: [L]=SOFTLOCKUP [ 1129.899110][T24487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1129.899120][T24487] Call Trace: [ 1129.899126][T24487] [ 1129.899134][T24487] dump_stack_lvl+0x100/0x190 [ 1129.899161][T24487] should_fail_ex.cold+0x5/0xa [ 1129.899180][T24487] should_failslab+0xc2/0x120 [ 1129.899203][T24487] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1129.899223][T24487] ? __d_alloc+0x34/0xa80 [ 1129.899256][T24487] __d_alloc+0x34/0xa80 [ 1129.899282][T24487] d_alloc_parallel+0x111/0x14e0 [ 1129.899306][T24487] ? find_held_lock+0x2b/0x80 [ 1129.899329][T24487] ? __d_lookup+0x25c/0x4a0 [ 1129.899346][T24487] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1129.899367][T24487] ? __d_lookup+0x266/0x4a0 [ 1129.899389][T24487] lookup_open.isra.0+0x57c/0x11b0 [ 1129.899412][T24487] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1129.899441][T24487] ? mnt_get_write_access+0x1e9/0x2f0 [ 1129.899461][T24487] path_openat+0xa98/0x31a0 [ 1129.899488][T24487] ? __pfx_path_openat+0x10/0x10 [ 1129.899516][T24487] do_file_open+0x20e/0x430 [ 1129.899539][T24487] ? __pfx_do_file_open+0x10/0x10 [ 1129.899575][T24487] ? alloc_fd+0x476/0x790 [ 1129.899597][T24487] ? do_getname+0x191/0x390 [ 1129.899614][T24487] do_sys_openat2+0x10d/0x1e0 [ 1129.899631][T24487] ? __pfx_do_sys_openat2+0x10/0x10 [ 1129.899654][T24487] __x64_sys_openat+0x12d/0x210 [ 1129.899671][T24487] ? __pfx___x64_sys_openat+0x10/0x10 [ 1129.899695][T24487] do_syscall_64+0x106/0xf80 [ 1129.899715][T24487] ? clear_bhb_loop+0x40/0x90 [ 1129.899733][T24487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.899750][T24487] RIP: 0033:0x7f8f3099bf79 [ 1129.899764][T24487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.899778][T24487] RSP: 002b:00007f8f31892028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1129.899794][T24487] RAX: ffffffffffffffda RBX: 00007f8f30c15fa0 RCX: 00007f8f3099bf79 [ 1129.899804][T24487] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1129.899813][T24487] RBP: 00007f8f30a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1129.899823][T24487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.899832][T24487] R13: 00007f8f30c16038 R14: 00007f8f30c15fa0 R15: 00007fffc3556658 [ 1129.899852][T24487] [ 1129.900679][T23221] bridge_slave_1: left allmulticast mode [ 1130.175425][T24491] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1130.272370][T24491] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1130.328790][T24491] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1130.407900][T24491] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1130.784000][T15983] Bluetooth: hci5: command tx timeout [ 1131.112313][T23221] bridge_slave_1: left promiscuous mode [ 1131.139017][T23221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.234738][T23221] bridge_slave_0: left allmulticast mode [ 1131.241373][T23221] bridge_slave_0: left promiscuous mode [ 1131.272699][T23221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.738831][T23221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.861416][T23221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.878119][T23221] bond0 (unregistering): Released all slaves [ 1132.797222][T15983] Bluetooth: hci5: command tx timeout [ 1133.331918][T24523] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1133.463605][T24523] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1133.527527][T24523] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1133.623788][T24523] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1133.681262][T23221] hsr_slave_0: left promiscuous mode [ 1133.751679][T23221] hsr_slave_1: left promiscuous mode [ 1133.772356][T24524] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1133.800558][T23221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.834563][T23221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.883567][T24524] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1133.917875][T23221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.958395][T23221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.977264][T24524] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1134.070844][T23221] veth1_macvtap: left promiscuous mode [ 1134.076343][T23221] veth0_macvtap: left promiscuous mode [ 1134.084831][T24524] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1134.120096][T23221] veth1_vlan: left promiscuous mode [ 1134.150084][T23221] veth0_vlan: left promiscuous mode [ 1134.253782][T24528] NFSD: Failed to start, no listeners configured. [ 1134.429202][T24530] netlink: 186 bytes leftover after parsing attributes in process `syz.4.4643'. [ 1134.540371][T24538] mmap: syz.4.4643 (24538) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1134.633363][T24540] FAULT_INJECTION: forcing a failure. [ 1134.633363][T24540] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.751624][T24540] CPU: 0 UID: 0 PID: 24540 Comm: syz.0.4646 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.751653][T24540] Tainted: [L]=SOFTLOCKUP [ 1134.751659][T24540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1134.751669][T24540] Call Trace: [ 1134.751676][T24540] [ 1134.751683][T24540] dump_stack_lvl+0x100/0x190 [ 1134.751711][T24540] should_fail_ex.cold+0x5/0xa [ 1134.751730][T24540] should_failslab+0xc2/0x120 [ 1134.751755][T24540] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1134.751783][T24540] ? __d_alloc+0x34/0xa80 [ 1134.751811][T24540] __d_alloc+0x34/0xa80 [ 1134.751837][T24540] d_alloc_parallel+0x111/0x14e0 [ 1134.751861][T24540] ? find_held_lock+0x2b/0x80 [ 1134.751884][T24540] ? __d_lookup+0x25c/0x4a0 [ 1134.751902][T24540] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1134.751923][T24540] ? __d_lookup+0x266/0x4a0 [ 1134.751945][T24540] lookup_open.isra.0+0x57c/0x11b0 [ 1134.751969][T24540] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1134.752000][T24540] ? mnt_get_write_access+0x1e9/0x2f0 [ 1134.752021][T24540] path_openat+0xa98/0x31a0 [ 1134.752049][T24540] ? __pfx_path_openat+0x10/0x10 [ 1134.752078][T24540] do_file_open+0x20e/0x430 [ 1134.752101][T24540] ? __pfx_do_file_open+0x10/0x10 [ 1134.752137][T24540] ? alloc_fd+0x476/0x790 [ 1134.752160][T24540] ? do_getname+0x191/0x390 [ 1134.752178][T24540] do_sys_openat2+0x10d/0x1e0 [ 1134.752195][T24540] ? __pfx_do_sys_openat2+0x10/0x10 [ 1134.752219][T24540] __x64_sys_openat+0x12d/0x210 [ 1134.752236][T24540] ? __pfx___x64_sys_openat+0x10/0x10 [ 1134.752261][T24540] do_syscall_64+0x106/0xf80 [ 1134.752281][T24540] ? clear_bhb_loop+0x40/0x90 [ 1134.752300][T24540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.752317][T24540] RIP: 0033:0x7f0c5b59bf79 [ 1134.752331][T24540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.752346][T24540] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1134.752361][T24540] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1134.752372][T24540] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1134.752382][T24540] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.752392][T24540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.752401][T24540] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1134.752423][T24540] [ 1135.237672][T24537] Invalid ELF header magic: != ELF [ 1135.427630][T23221] team0 (unregistering): Port device team_slave_1 removed [ 1135.495698][T23221] team0 (unregistering): Port device team_slave_0 removed [ 1135.522997][T24545] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1135.634259][T24540] Process accounting paused [ 1135.968593][T24431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1136.026703][T24555] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1136.050687][T24431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1136.135222][T24431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1136.142679][T24555] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1136.184215][T24431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1136.219649][T24555] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1136.329254][T24555] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1136.586593][T24431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.595803][T24571] Zero length message leads to an empty skb [ 1136.614407][T24569] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1136.693927][T24569] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1136.709576][T24431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.799389][T23210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.806548][T23210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.815393][T24569] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1136.868191][T24557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1136.893420][T23210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.900561][T23210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.917840][T24569] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1137.125245][T24576] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1137.244029][T24576] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1137.322195][T24576] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1137.414333][T24576] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1137.613678][T24582] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1137.715587][T24582] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1137.752004][T24431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.782354][T24582] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1137.880477][T24588] FAULT_INJECTION: forcing a failure. [ 1137.880477][T24588] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.903626][T24582] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1137.936561][T24431] veth0_vlan: entered promiscuous mode [ 1138.040600][T24588] CPU: 0 UID: 0 PID: 24588 Comm: syz.0.4657 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.040628][T24588] Tainted: [L]=SOFTLOCKUP [ 1138.040634][T24588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1138.040644][T24588] Call Trace: [ 1138.040650][T24588] [ 1138.040658][T24588] dump_stack_lvl+0x100/0x190 [ 1138.040685][T24588] should_fail_ex.cold+0x5/0xa [ 1138.040708][T24588] should_failslab+0xc2/0x120 [ 1138.040733][T24588] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1138.040752][T24588] ? __d_alloc+0x34/0xa80 [ 1138.040780][T24588] __d_alloc+0x34/0xa80 [ 1138.040805][T24588] d_alloc_parallel+0x111/0x14e0 [ 1138.040829][T24588] ? find_held_lock+0x2b/0x80 [ 1138.040851][T24588] ? __d_lookup+0x25c/0x4a0 [ 1138.040869][T24588] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1138.040889][T24588] ? __d_lookup+0x266/0x4a0 [ 1138.040912][T24588] lookup_open.isra.0+0x57c/0x11b0 [ 1138.040935][T24588] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1138.040965][T24588] ? mnt_get_write_access+0x1e9/0x2f0 [ 1138.040985][T24588] path_openat+0xa98/0x31a0 [ 1138.041014][T24588] ? __pfx_path_openat+0x10/0x10 [ 1138.041042][T24588] do_file_open+0x20e/0x430 [ 1138.041065][T24588] ? __pfx_do_file_open+0x10/0x10 [ 1138.041102][T24588] ? alloc_fd+0x476/0x790 [ 1138.041124][T24588] ? do_getname+0x191/0x390 [ 1138.041141][T24588] do_sys_openat2+0x10d/0x1e0 [ 1138.041159][T24588] ? __pfx_do_sys_openat2+0x10/0x10 [ 1138.041183][T24588] __x64_sys_openat+0x12d/0x210 [ 1138.041200][T24588] ? __pfx___x64_sys_openat+0x10/0x10 [ 1138.041225][T24588] do_syscall_64+0x106/0xf80 [ 1138.041244][T24588] ? clear_bhb_loop+0x40/0x90 [ 1138.041262][T24588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.041278][T24588] RIP: 0033:0x7f0c5b59bf79 [ 1138.041293][T24588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.041308][T24588] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1138.041324][T24588] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1138.041334][T24588] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1138.041344][T24588] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1138.041353][T24588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.041362][T24588] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1138.041383][T24588] [ 1138.042728][T24431] veth1_vlan: entered promiscuous mode [ 1139.225815][T24431] veth0_macvtap: entered promiscuous mode [ 1139.285230][T24431] veth1_macvtap: entered promiscuous mode [ 1139.563186][T24431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.626444][T24431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.681185][T23218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.774051][T23218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.838213][T23218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.940903][T23218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.963353][T24618] FAULT_INJECTION: forcing a failure. [ 1139.963353][T24618] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.113894][T24618] CPU: 0 UID: 0 PID: 24618 Comm: syz.0.4665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.113920][T24618] Tainted: [L]=SOFTLOCKUP [ 1140.113925][T24618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.113934][T24618] Call Trace: [ 1140.113940][T24618] [ 1140.113946][T24618] dump_stack_lvl+0x100/0x190 [ 1140.113972][T24618] should_fail_ex.cold+0x5/0xa [ 1140.113989][T24618] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1140.114009][T24618] should_failslab+0xc2/0x120 [ 1140.114030][T24618] __kmalloc_noprof+0xe0/0x850 [ 1140.114053][T24618] tomoyo_realpath_from_path+0xb6/0x690 [ 1140.114077][T24618] tomoyo_path_number_perm+0x23c/0x580 [ 1140.114092][T24618] ? tomoyo_path_number_perm+0x22e/0x580 [ 1140.114109][T24618] ? __lock_acquire+0x485/0x2630 [ 1140.114126][T24618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1140.114150][T24618] ? __lock_acquire+0x4a5/0x2630 [ 1140.114178][T24618] ? __pfx___might_resched+0x10/0x10 [ 1140.114197][T24618] ? find_held_lock+0x2b/0x80 [ 1140.114223][T24618] ? mnt_get_write_access+0x52/0x2f0 [ 1140.114241][T24618] ? down_write_killable+0x152/0x250 [ 1140.114263][T24618] ? __pfx_down_write_killable+0x10/0x10 [ 1140.114287][T24618] security_path_chmod+0x121/0x2c0 [ 1140.114304][T24618] chmod_common+0x19a/0x4d0 [ 1140.114329][T24618] ? __pfx_chmod_common+0x10/0x10 [ 1140.114350][T24618] ? find_held_lock+0x2b/0x80 [ 1140.114371][T24618] ? __fget_files+0x215/0x3d0 [ 1140.114389][T24618] ? __fget_files+0x215/0x3d0 [ 1140.114419][T24618] __x64_sys_fchmod+0x10e/0x1b0 [ 1140.114434][T24618] do_syscall_64+0x106/0xf80 [ 1140.114452][T24618] ? clear_bhb_loop+0x40/0x90 [ 1140.114469][T24618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.114484][T24618] RIP: 0033:0x7f0c5b59bf79 [ 1140.114508][T24618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.114522][T24618] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 1140.114537][T24618] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1140.114547][T24618] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000000000000003 [ 1140.114556][T24618] RBP: 00007f0c5c445090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.114565][T24618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.114573][T24618] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1140.114593][T24618] [ 1140.114600][T24618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1140.473583][T23210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.496822][T23210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.753568][T23218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.787963][T23218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.885597][T24431] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1141.140309][T24621] Process accounting resumed [ 1141.464753][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4669'. [ 1141.675089][T24633] bridge_slave_1: left allmulticast mode [ 1141.779927][T24633] bridge_slave_1: left promiscuous mode [ 1141.785674][T24633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.815444][T24642] can: request_module (can-proto-4) failed. [ 1141.826284][T24641] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1142.038292][T24633] bridge_slave_0: left allmulticast mode [ 1142.075068][T24633] bridge_slave_0: left promiscuous mode [ 1142.127835][T24633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.406103][T24651] FAULT_INJECTION: forcing a failure. [ 1142.406103][T24651] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.463663][T24651] CPU: 0 UID: 0 PID: 24651 Comm: syz.0.4673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.463691][T24651] Tainted: [L]=SOFTLOCKUP [ 1142.463697][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1142.463706][T24651] Call Trace: [ 1142.463712][T24651] [ 1142.463719][T24651] dump_stack_lvl+0x100/0x190 [ 1142.463745][T24651] should_fail_ex.cold+0x5/0xa [ 1142.463765][T24651] should_failslab+0xc2/0x120 [ 1142.463788][T24651] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1142.463809][T24651] ? __d_alloc+0x34/0xa80 [ 1142.463832][T24651] ? lockdep_init_map_type+0x5c/0x250 [ 1142.463854][T24651] __d_alloc+0x34/0xa80 [ 1142.463879][T24651] d_alloc_pseudo+0x1c/0xc0 [ 1142.463896][T24651] alloc_file_pseudo+0xcf/0x230 [ 1142.463914][T24651] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1142.463930][T24651] ? alloc_fd+0x476/0x790 [ 1142.463953][T24651] sock_alloc_file+0x50/0x210 [ 1142.463976][T24651] __sys_socket+0x1c0/0x260 [ 1142.463991][T24651] ? __pfx___sys_socket+0x10/0x10 [ 1142.464017][T24651] __x64_sys_socket+0x72/0xb0 [ 1142.464032][T24651] ? lockdep_hardirqs_on+0x78/0x100 [ 1142.464053][T24651] do_syscall_64+0x106/0xf80 [ 1142.464073][T24651] ? clear_bhb_loop+0x40/0x90 [ 1142.464091][T24651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.464106][T24651] RIP: 0033:0x7f0c5b59bf79 [ 1142.464122][T24651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.464137][T24651] RSP: 002b:00007f0c5c445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1142.464152][T24651] RAX: ffffffffffffffda RBX: 00007f0c5b815fa0 RCX: 00007f0c5b59bf79 [ 1142.464163][T24651] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 1142.464172][T24651] RBP: 00007f0c5b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1142.464182][T24651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.464191][T24651] R13: 00007f0c5b816038 R14: 00007f0c5b815fa0 R15: 00007ffd3c7f61c8 [ 1142.464211][T24651] [ 1143.149955][T24659] FAULT_INJECTION: forcing a failure. [ 1143.149955][T24659] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.178067][T24659] CPU: 0 UID: 0 PID: 24659 Comm: syz.3.4676 Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.178095][T24659] Tainted: [L]=SOFTLOCKUP [ 1143.178101][T24659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1143.178110][T24659] Call Trace: [ 1143.178117][T24659] [ 1143.178124][T24659] dump_stack_lvl+0x100/0x190 [ 1143.178151][T24659] should_fail_ex.cold+0x5/0xa [ 1143.178171][T24659] should_failslab+0xc2/0x120 [ 1143.178193][T24659] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1143.178212][T24659] ? security_file_alloc+0x34/0x2c0 [ 1143.178231][T24659] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1143.178256][T24659] security_file_alloc+0x34/0x2c0 [ 1143.178275][T24659] init_file+0x95/0x480 [ 1143.178291][T24659] alloc_empty_file+0x73/0x1c0 [ 1143.178307][T24659] path_openat+0xe8/0x31a0 [ 1143.178328][T24659] ? kasan_save_stack+0x3f/0x50 [ 1143.178346][T24659] ? kasan_save_stack+0x30/0x50 [ 1143.178364][T24659] ? kasan_save_track+0x14/0x30 [ 1143.178382][T24659] ? __kasan_slab_alloc+0x89/0x90 [ 1143.178402][T24659] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1143.178420][T24659] ? do_getname+0x35/0x390 [ 1143.178433][T24659] ? do_sys_openat2+0xc5/0x1e0 [ 1143.178449][T24659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.178468][T24659] ? __pfx_path_openat+0x10/0x10 [ 1143.178496][T24659] do_file_open+0x20e/0x430 [ 1143.178518][T24659] ? __pfx_do_file_open+0x10/0x10 [ 1143.178553][T24659] ? alloc_fd+0x476/0x790 [ 1143.178575][T24659] ? do_getname+0x191/0x390 [ 1143.178592][T24659] do_sys_openat2+0x10d/0x1e0 [ 1143.178608][T24659] ? __pfx_do_sys_openat2+0x10/0x10 [ 1143.178632][T24659] __x64_sys_openat+0x12d/0x210 [ 1143.178649][T24659] ? __pfx___x64_sys_openat+0x10/0x10 [ 1143.178672][T24659] do_syscall_64+0x106/0xf80 [ 1143.178691][T24659] ? clear_bhb_loop+0x40/0x90 [ 1143.178710][T24659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.178726][T24659] RIP: 0033:0x7f6aeb35c84e [ 1143.178740][T24659] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1143.178756][T24659] RSP: 002b:00007f6aec22cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1143.178772][T24659] RAX: ffffffffffffffda RBX: 00007f6aec22d6c0 RCX: 00007f6aeb35c84e [ 1143.178782][T24659] RDX: 0000000000000002 RSI: 00007f6aec22cf90 RDI: ffffffffffffff9c [ 1143.178791][T24659] RBP: 00007f6aeb4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.178801][T24659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.178809][T24659] R13: 00007f6aeb616038 R14: 00007f6aeb615fa0 R15: 00007ffe59e5c378 [ 1143.178829][T24659] [ 1143.494745][ T29] audit: type=1800 audit(4294967357.619:39): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4678" name="trace_pipe" dev="tracefs" ino=687 res=0 errno=0 [ 1144.223753][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fb55800: rx timeout, send abort [ 1144.223898][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032caa800: rx timeout, send abort [ 1144.224003][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fb55800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1144.224107][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032caa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1144.311520][T24661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1144.311713][T24661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1144.311856][T24661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1144.311987][T24661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1144.312122][T24661] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1144.312182][T24661] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1144.386018][T24661] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1145.357270][T15983] Bluetooth: hci4: command 0x0c1a tx timeout [ 1145.495596][T24700] netlink: 'syz.2.4686': attribute type 4 has an invalid length. [ 1145.495664][T24700] netlink: 'syz.2.4686': attribute type 1 has an invalid length. [ 1146.317331][T15983] Bluetooth: hci5: command 0x0c1a tx timeout [ 1146.324145][T18940] Bluetooth: hci3: command 0x0c1a tx timeout [ 1146.330572][T18940] Bluetooth: hci2: command 0x0c1a tx timeout [ 1146.336666][T18940] Bluetooth: hci1: command 0x0c1a tx timeout [ 1146.422119][T24711] FAULT_INJECTION: forcing a failure. [ 1146.422119][T24711] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.600513][T24711] CPU: 0 UID: 0 PID: 24711 Comm: syz.4.4689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.600545][T24711] Tainted: [L]=SOFTLOCKUP [ 1146.600551][T24711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1146.600561][T24711] Call Trace: [ 1146.600574][T24711] [ 1146.600581][T24711] dump_stack_lvl+0x100/0x190 [ 1146.600609][T24711] should_fail_ex.cold+0x5/0xa [ 1146.600629][T24711] should_failslab+0xc2/0x120 [ 1146.600652][T24711] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1146.600672][T24711] ? __d_alloc+0x34/0xa80 [ 1146.600699][T24711] __d_alloc+0x34/0xa80 [ 1146.600723][T24711] d_alloc+0x4a/0x1e0 [ 1146.600746][T24711] lookup_one_qstr_excl+0x175/0x250 [ 1146.600765][T24711] start_dirop+0x59/0xb0 [ 1146.600785][T24711] simple_start_creating+0xf9/0x110 [ 1146.600806][T24711] ? __pfx_simple_start_creating+0x10/0x10 [ 1146.600826][T24711] ? mntput+0x70/0xa0 [ 1146.600844][T24711] ? simple_pin_fs+0xa3/0x190 [ 1146.600863][T24711] debugfs_start_creating.part.0+0x82/0x170 [ 1146.600882][T24711] debugfs_create_symlink+0x7f/0x220 [ 1146.600900][T24711] ref_tracker_dir_symlink+0x257/0x3b0 [ 1146.600924][T24711] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 1146.600945][T24711] ? __lock_acquire+0x4a5/0x2630 [ 1146.600978][T24711] ? lockdep_hardirqs_on+0x78/0x100 [ 1146.600998][T24711] ? crng_make_state+0x2b0/0x6c0 [ 1146.601020][T24711] ? __pfx_net_ns_net_init+0x10/0x10 [ 1146.601042][T24711] net_ns_net_init+0xd2/0x120 [ 1146.601062][T24711] ops_init+0x1e2/0x5f0 [ 1146.601084][T24711] setup_net+0x118/0x3a0 [ 1146.601104][T24711] ? __pfx_setup_net+0x10/0x10 [ 1146.601122][T24711] ? lockdep_init_map_type+0x5c/0x250 [ 1146.601145][T24711] ? mutex_init_lockep+0x110/0x150 [ 1146.601167][T24711] copy_net_ns+0x46f/0x7c0 [ 1146.601193][T24711] create_new_namespaces+0x3ea/0xac0 [ 1146.601223][T24711] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1146.601243][T24711] ksys_unshare+0x455/0xab0 [ 1146.601266][T24711] ? __pfx_ksys_unshare+0x10/0x10 [ 1146.601297][T24711] __x64_sys_unshare+0x31/0x40 [ 1146.601315][T24711] do_syscall_64+0x106/0xf80 [ 1146.601334][T24711] ? clear_bhb_loop+0x40/0x90 [ 1146.601353][T24711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.601369][T24711] RIP: 0033:0x7f8f3099bf79 [ 1146.601384][T24711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.601400][T24711] RSP: 002b:00007f8f31892028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1146.601415][T24711] RAX: ffffffffffffffda RBX: 00007f8f30c15fa0 RCX: 00007f8f3099bf79 [ 1146.601426][T24711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1146.601436][T24711] RBP: 00007f8f30a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.601445][T24711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.601455][T24711] R13: 00007f8f30c16038 R14: 00007f8f30c15fa0 R15: 00007fffc3556658 [ 1146.601476][T24711] [ 1147.847091][T24713] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 1147.847116][T24713] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 1147.863017][T24713] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1148.404609][T24713] Bluetooth: hci5: command 0x0c1a tx timeout [ 1148.723652][T24713] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1148.723677][T24713] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 1148.740615][T24713] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1149.184420][T24747] can: request_module (can-proto-4) failed. [ 1149.880650][T24757] FAULT_INJECTION: forcing a failure. [ 1149.880650][T24757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1150.007684][T24757] CPU: 0 UID: 0 PID: 24757 Comm: syz.2.4702 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.007711][T24757] Tainted: [L]=SOFTLOCKUP [ 1150.007717][T24757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1150.007727][T24757] Call Trace: [ 1150.007733][T24757] [ 1150.007740][T24757] dump_stack_lvl+0x100/0x190 [ 1150.007768][T24757] should_fail_ex.cold+0x5/0xa [ 1150.007783][T24757] ? prepare_alloc_pages+0x16d/0x5f0 [ 1150.007808][T24757] should_fail_alloc_page+0xeb/0x140 [ 1150.007831][T24757] prepare_alloc_pages+0x1f0/0x5f0 [ 1150.007858][T24757] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1150.007881][T24757] ? pcpu_get_vm_areas+0x21e3/0x53e0 [ 1150.007903][T24757] ? stack_trace_save+0x8e/0xc0 [ 1150.007931][T24757] ? __pfx_stack_trace_save+0x10/0x10 [ 1150.007954][T24757] ? stack_depot_save_flags+0x27/0x9d0 [ 1150.007974][T24757] ? __lock_acquire+0x4a5/0x2630 [ 1150.007992][T24757] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1150.008011][T24757] ? pcpu_get_vm_areas+0x21e3/0x53e0 [ 1150.008032][T24757] ? kasan_save_stack+0x3f/0x50 [ 1150.008052][T24757] ? kasan_save_track+0x14/0x30 [ 1150.008070][T24757] ? __kasan_slab_free+0x5f/0x80 [ 1150.008090][T24757] ? kmem_cache_free+0x124/0x6a0 [ 1150.008106][T24757] ? pcpu_get_vm_areas+0x21e3/0x53e0 [ 1150.008126][T24757] ? pcpu_create_chunk+0x254/0x730 [ 1150.008144][T24757] ? pcpu_alloc_noprof+0x18c4/0x1c50 [ 1150.008162][T24757] ? bpf_map_alloc_percpu+0x9a/0xf0 [ 1150.008183][T24757] ? htab_map_alloc+0x1054/0x14e0 [ 1150.008202][T24757] ? map_create+0x84e/0x2ba0 [ 1150.008232][T24757] ? __sys_bpf+0x2091/0x4b90 [ 1150.008253][T24757] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1150.008279][T24757] ? policy_nodemask+0xed/0x4f0 [ 1150.008304][T24757] alloc_pages_mpol+0x1fb/0x550 [ 1150.008328][T24757] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1150.008351][T24757] ? pcpu_get_vm_areas+0x21e3/0x53e0 [ 1150.008375][T24757] alloc_pages_noprof+0x131/0x390 [ 1150.008397][T24757] get_free_pages_noprof+0x10/0xb0 [ 1150.008419][T24757] __kasan_populate_vmalloc+0xa0/0x210 [ 1150.008442][T24757] pcpu_get_vm_areas+0x2cc3/0x53e0 [ 1150.008477][T24757] ? __pfx_pcpu_get_vm_areas+0x10/0x10 [ 1150.008505][T24757] pcpu_create_chunk+0x254/0x730 [ 1150.008525][T24757] pcpu_alloc_noprof+0x18c4/0x1c50 [ 1150.008553][T24757] bpf_map_alloc_percpu+0x9a/0xf0 [ 1150.008575][T24757] ? __pfx_bpf_map_alloc_percpu+0x10/0x10 [ 1150.008598][T24757] ? __pfx___might_resched+0x10/0x10 [ 1150.008619][T24757] ? __bpf_map_area_alloc+0x13a/0x200 [ 1150.008637][T24757] htab_map_alloc+0x1054/0x14e0 [ 1150.008661][T24757] ? ns_capable+0xd2/0xf0 [ 1150.008685][T24757] ? __pfx_htab_map_mem_usage+0x10/0x10 [ 1150.008705][T24757] map_create+0x84e/0x2ba0 [ 1150.008726][T24757] ? futex_unqueue+0x13d/0x2c0 [ 1150.008743][T24757] ? __futex_wait+0x256/0x300 [ 1150.008767][T24757] ? __pfx_map_create+0x10/0x10 [ 1150.008788][T24757] ? __might_fault+0xc5/0x140 [ 1150.008805][T24757] ? __might_fault+0xc5/0x140 [ 1150.008830][T24757] __sys_bpf+0x2091/0x4b90 [ 1150.008847][T24757] ? __pfx___sys_bpf+0x10/0x10 [ 1150.008862][T24757] ? __pfx_futex_wait+0x10/0x10 [ 1150.008886][T24757] ? do_writev+0x214/0x340 [ 1150.008910][T24757] ? do_futex+0x192/0x350 [ 1150.008938][T24757] ? xfd_validate_state+0x129/0x190 [ 1150.008963][T24757] __x64_sys_bpf+0x7b/0xc0 [ 1150.008979][T24757] ? lockdep_hardirqs_on+0x78/0x100 [ 1150.008999][T24757] do_syscall_64+0x106/0xf80 [ 1150.009017][T24757] ? clear_bhb_loop+0x40/0x90 [ 1150.009035][T24757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.009051][T24757] RIP: 0033:0x7f8e7c19bf79 [ 1150.009066][T24757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.009081][T24757] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.009096][T24757] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1150.009106][T24757] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 1150.009116][T24757] RBP: 00007f8e7c2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.009126][T24757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.009134][T24757] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1150.009156][T24757] [ 1150.863288][T24731] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1151.108815][T24713] Bluetooth: hci5: command 0x0c1a tx timeout [ 1151.688228][T24776] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1152.809464][T24806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1153.359703][T24810] syz.0.4714 uses obsolete (PF_INET,SOCK_PACKET) [ 1154.234375][T24830] FAULT_INJECTION: forcing a failure. [ 1154.234375][T24830] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.296939][T24830] CPU: 0 UID: 0 PID: 24830 Comm: syz.2.4719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1154.296965][T24830] Tainted: [L]=SOFTLOCKUP [ 1154.296970][T24830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1154.296979][T24830] Call Trace: [ 1154.296985][T24830] [ 1154.296991][T24830] dump_stack_lvl+0x100/0x190 [ 1154.297017][T24830] should_fail_ex.cold+0x5/0xa [ 1154.297034][T24830] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1154.297054][T24830] should_failslab+0xc2/0x120 [ 1154.297075][T24830] __kmalloc_noprof+0xe0/0x850 [ 1154.297098][T24830] tomoyo_realpath_from_path+0xb6/0x690 [ 1154.297125][T24830] tomoyo_path_number_perm+0x23c/0x580 [ 1154.297141][T24830] ? tomoyo_path_number_perm+0x22e/0x580 [ 1154.297159][T24830] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1154.297194][T24830] ? find_held_lock+0x2b/0x80 [ 1154.297215][T24830] ? __fget_files+0x215/0x3d0 [ 1154.297234][T24830] ? hook_file_ioctl_common+0x146/0x410 [ 1154.297256][T24830] ? __fget_files+0x21f/0x3d0 [ 1154.297277][T24830] security_file_ioctl+0xd3/0x230 [ 1154.297296][T24830] __x64_sys_ioctl+0xb7/0x210 [ 1154.297315][T24830] do_syscall_64+0x106/0xf80 [ 1154.297334][T24830] ? clear_bhb_loop+0x40/0x90 [ 1154.297352][T24830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.297366][T24830] RIP: 0033:0x7f8e7c19bf79 [ 1154.297380][T24830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.297394][T24830] RSP: 002b:00007f8e7d044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.297409][T24830] RAX: ffffffffffffffda RBX: 00007f8e7c415fa0 RCX: 00007f8e7c19bf79 [ 1154.297419][T24830] RDX: 0000200000000580 RSI: 00000000c1105517 RDI: 0000000000000003 [ 1154.297428][T24830] RBP: 00007f8e7d044090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.297436][T24830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.297445][T24830] R13: 00007f8e7c416038 R14: 00007f8e7c415fa0 R15: 00007ffde1cd60f8 [ 1154.297464][T24830] [ 1154.299748][T24830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1156.006567][T24852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4724'. [ 1156.963341][T24861] can: request_module (can-proto-4) failed. [ 1158.716952][ T30] INFO: task syz.1.4128:22557 blocked for more than 143 seconds. [ 1158.726425][ T30] Tainted: G L syzkaller #0 [ 1158.749774][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1158.805790][ T30] task:syz.1.4128 state:D stack:25656 pid:22557 tgid:22556 ppid:14530 task_flags:0x400140 flags:0x00080002 [ 1158.885741][ T30] Call Trace: [ 1158.912656][ T30] [ 1158.915613][ T30] __schedule+0xfee/0x60e0 [ 1158.958551][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1158.963533][ T30] ? __pfx___schedule+0x10/0x10 [ 1159.083699][ T30] ? find_held_lock+0x2b/0x80 [ 1159.126914][ T30] ? schedule+0x2bf/0x390 [ 1159.131282][ T30] ? kvm_swap_active_memslots+0x2a2/0x7c0 [ 1159.175341][ T30] schedule+0xdd/0x390 [ 1159.195685][ T30] kvm_swap_active_memslots+0x2e0/0x7c0 [ 1159.226229][ T30] kvm_set_memslot+0xbde/0x1740 [ 1159.256854][ T30] ? kasan_save_track+0x14/0x30 [ 1159.262105][ T30] kvm_set_memory_region+0xe1c/0x1570 [ 1159.286166][ T30] kvm_set_internal_memslot+0x9f/0xf0 [ 1159.319409][ T30] __x86_set_memory_region+0x2f6/0x730 [ 1159.324934][ T30] ? __pfx___x86_set_memory_region+0x10/0x10 [ 1159.367439][ T30] ? __asan_memset+0x23/0x50 [ 1159.372082][ T30] ? alloc_loaded_vmcs+0x1b9/0x2e0 [ 1159.406837][ T30] kvm_alloc_apic_access_page+0xc5/0x140 [ 1159.412506][ T30] vmx_vcpu_create+0x79b/0xb90 [ 1159.440640][ T30] ? intel_pmu_init+0x3ac/0x560 [ 1159.445537][ T30] ? __pfx_vmx_vcpu_create+0x10/0x10 [ 1159.476830][ T30] ? rcu_is_watching+0x12/0xc0 [ 1159.481629][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1159.502709][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1159.527368][ T30] kvm_arch_vcpu_create+0x683/0xac0 [ 1159.546838][ T30] kvm_vm_ioctl+0x756/0x4080 [ 1159.551644][ T30] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1159.556673][ T30] ? tomoyo_path_number_perm+0x46d/0x580 [ 1159.593337][ T30] ? kasan_quarantine_put+0x104/0x240 [ 1159.606808][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1159.612074][ T30] ? find_held_lock+0x2b/0x80 [ 1159.639203][ T30] ? tomoyo_path_number_perm+0x28f/0x580 [ 1159.644882][ T30] ? tomoyo_path_number_perm+0x28f/0x580 [ 1159.676850][ T30] ? tomoyo_path_number_perm+0x188/0x580 [ 1159.682523][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1159.713907][ T30] ? futex_wait+0x125/0x380 [ 1159.726536][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1159.747030][ T30] ? do_vfs_ioctl+0x226/0x13e0 [ 1159.751824][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1159.780451][ T30] ? find_held_lock+0x2b/0x80 [ 1159.785181][ T30] ? __fget_files+0x215/0x3d0 [ 1159.812116][ T30] ? hook_file_ioctl_common+0x146/0x410 [ 1159.828622][ T30] ? __fget_files+0x21f/0x3d0 [ 1159.833339][ T30] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1159.860621][ T30] __x64_sys_ioctl+0x18e/0x210 [ 1159.865426][ T30] do_syscall_64+0x106/0xf80 [ 1159.889555][ T30] ? clear_bhb_loop+0x40/0x90 [ 1159.894283][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.916822][ T30] RIP: 0033:0x7fb73539bf79 [ 1159.921266][ T30] RSP: 002b:00007fb73632e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.941993][ T30] RAX: ffffffffffffffda RBX: 00007fb735615fa0 RCX: 00007fb73539bf79 [ 1159.956971][ T30] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1159.964961][ T30] RBP: 00007fb7354327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.997935][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.014899][ T30] R13: 00007fb735616038 R14: 00007fb735615fa0 R15: 00007ffecd9f29e8 [ 1160.036852][ T30] [ 1160.039983][ T30] [ 1160.039983][ T30] Showing all locks held in the system: [ 1160.056848][ T30] 4 locks held by kworker/0:1/10: [ 1160.061949][ T30] #0: ffff88813fe5d148 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1160.186884][ T30] #1: ffffc900000f7d08 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1160.237107][ T30] #2: ffffffff8e874f38 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x77/0x1ab0 [ 1160.266960][ T30] #3: ffffffff8e7f4ef8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1160.310116][ T30] 1 lock held by khungtaskd/30: [ 1160.315078][ T30] #0: ffffffff8e7e92e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1160.376933][ T30] 2 locks held by getty/5583: [ 1160.381629][ T30] #0: ffff8880331450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1160.416796][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1160.453948][ T30] 2 locks held by syz.1.4128/22557: [ 1160.471924][ T30] #0: ffff888061a080a8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_alloc_apic_access_page+0x27/0x140 [ 1160.506146][ T30] #1: ffff888061a08138 (&kvm->slots_arch_lock){+.+.}-{4:4}, at: kvm_set_memslot+0x34/0x1740 [ 1160.531220][ T30] 1 lock held by syz-executor/22790: [ 1160.536519][ T30] #0: ffffffff9060f2e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1160.548923][ T30] 3 locks held by kworker/0:3/24620: [ 1160.554219][ T30] #0: ffff88813fe5f548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1160.567651][ T30] #1: ffffc900033d7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1160.577624][ T30] #2: ffffffff8e7f4ef8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1160.587939][ T30] 1 lock held by syz.2.4723/24845: [ 1160.593624][ T30] #0: ffffffff9060f2e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1160.602962][ T30] 1 lock held by syz.3.4736/24888: [ 1160.608413][ T30] #0: ffffffff8e7f4dc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1160.698294][ T30] [ 1160.700649][ T30] ============================================= [ 1160.700649][ T30] [ 1160.761105][ T30] NMI backtrace for cpu 0 [ 1160.761123][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.761144][ T30] Tainted: [L]=SOFTLOCKUP [ 1160.761149][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.761158][ T30] Call Trace: [ 1160.761163][ T30] [ 1160.761175][ T30] dump_stack_lvl+0x100/0x190 [ 1160.761200][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1160.761223][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1160.761244][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1160.761262][ T30] sys_info+0x141/0x190 [ 1160.761282][ T30] watchdog+0xd25/0x1050 [ 1160.761309][ T30] ? __pfx_watchdog+0x10/0x10 [ 1160.761329][ T30] ? __kthread_parkme+0x18c/0x230 [ 1160.761347][ T30] ? kthread+0x13a/0x450 [ 1160.761363][ T30] ? __pfx_watchdog+0x10/0x10 [ 1160.761383][ T30] kthread+0x370/0x450 [ 1160.761399][ T30] ? __pfx_kthread+0x10/0x10 [ 1160.761417][ T30] ret_from_fork+0x754/0xd80 [ 1160.761439][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1160.761460][ T30] ? __switch_to+0x7b4/0x1120 [ 1160.761475][ T30] ? __pfx_kthread+0x10/0x10 [ 1160.761493][ T30] ret_from_fork_asm+0x1a/0x30 [ 1160.761517][ T30] [ 1161.221354][T24845] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.4723: bg 2: bad block bitmap checksum [ 1161.259816][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1161.266688][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.277364][ T30] Tainted: [L]=SOFTLOCKUP [ 1161.281674][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.291712][ T30] Call Trace: [ 1161.294991][ T30] [ 1161.297903][ T30] dump_stack_lvl+0x100/0x190 [ 1161.302592][ T30] vpanic+0x552/0x970 [ 1161.306555][ T30] ? __pfx_vpanic+0x10/0x10 [ 1161.311043][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1161.317184][ T30] panic+0xd1/0xe0 [ 1161.320890][ T30] ? __pfx_panic+0x10/0x10 [ 1161.325302][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1161.331439][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1161.337585][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1161.343719][ T30] ? watchdog.cold+0x198/0x1ca [ 1161.348467][ T30] ? watchdog+0xd35/0x1050 [ 1161.352885][ T30] watchdog.cold+0x1a9/0x1ca [ 1161.357553][ T30] ? __pfx_watchdog+0x10/0x10 [ 1161.362218][ T30] ? __kthread_parkme+0x18c/0x230 [ 1161.367236][ T30] ? kthread+0x13a/0x450 [ 1161.371481][ T30] ? __pfx_watchdog+0x10/0x10 [ 1161.376168][ T30] kthread+0x370/0x450 [ 1161.380234][ T30] ? __pfx_kthread+0x10/0x10 [ 1161.384818][ T30] ret_from_fork+0x754/0xd80 [ 1161.389402][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1161.394501][ T30] ? __switch_to+0x7b4/0x1120 [ 1161.399162][ T30] ? __pfx_kthread+0x10/0x10 [ 1161.403739][ T30] ret_from_fork_asm+0x1a/0x30 [ 1161.408495][ T30] [ 1161.411637][ T30] Kernel Offset: disabled [ 1161.415970][ T30] Rebooting in 86400 seconds..