last executing test programs: 51.355652505s ago: executing program 3 (id=997): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) open(0x0, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000240)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0943b28e00e9c2f919d54fe990911e4c265c3d23eb66229", 0x83) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r2, 0x4008550c, r2) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c2078027e0dc0023af10e9bfa1babfa20a974ca9a20370a", 0x19) r3 = socket(0xa, 0x801, 0x84) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r4, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x80}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x259544150a25d792}, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyve\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d529b", 0x6) arch_prctl$auto(0x5001, 0x2) getsockopt$auto(r3, 0x1, 0x9, 0x0, 0x0) 50.886261422s ago: executing program 3 (id=999): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) (async) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) (async, rerun: 64) clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009) (rerun: 64) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r0, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0c/info\x00', 0x40101, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x10, 0x2, 0x4) (rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0xe0c882, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/default_smp_affinity\x00', 0x40000, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async, rerun: 32) setitimer$auto(0x5, &(0x7f0000000040)={{0x1b8, 0x4}, {0x8, 0x8000000000000000}}, 0x0) (rerun: 32) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 47.956698931s ago: executing program 3 (id=1006): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x317, r0, 0x4, 0x1) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0xe, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0xfffffffffffffffe, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000100)="8d8cfd72f1c71518ed22169e0b95f9ec78a50679ec2009e4e3018d19c40010000017fab27c8579476acec85237f8ee85a124f668e8") read$auto(0xffffffffffffffff, 0x0, 0x2800000009) write$auto(0x3, 0x0, 0xfdef) 42.288358683s ago: executing program 3 (id=1026): fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x5) socket(0x2, 0x3, 0x6) setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) r1 = open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x101, 0x0) r2 = socket(0x2, 0x5, 0x0) socket(0x2, 0xa, 0x100073) socket(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram8/queue/iostats\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x0, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x6, r4, 0x8}, 0x6c) sendmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendfile$auto(r1, r0, 0x0, 0x2) 40.62685425s ago: executing program 3 (id=1031): r0 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) epoll_ctl$auto(r0, 0x508c, r0, &(0x7f0000000140)={0xe, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r1) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7, 0x10e3, 0x15, r3, 0xffffffffffff0001) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x8208ae63, 0x38) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0106"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x81, 0x0) sendmsg$auto_NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xff}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) 37.994809734s ago: executing program 3 (id=1038): socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0xfc2, 0x0, 0x7, &(0x7f0000000300)="198c4f4d2282dd68e10a768807754db909196243eb5cc4de177c102495af72071d87583e452f7165da3599158638dabe9a0c59ea019792cf59a0b062366bdba330b5fafb0c07285d35bdc084b4c1e5ddbcc51455d05555a5d940082b872c30f806f411fd", 0xff, 0x8}, 0xfffffff9}, 0x2, 0x2) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0xfc2, 0x0, 0x7, &(0x7f0000000300)="198c4f4d2282dd68e10a768807754db909196243eb5cc4de177c102495af72071d87583e452f7165da3599158638dabe9a0c59ea019792cf59a0b062366bdba330b5fafb0c07285d35bdc084b4c1e5ddbcc51455d05555a5d940082b872c30f806f411fd", 0xff, 0x8}, 0xfffffff9}, 0x2, 0x2) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r0 = prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0xffffffffffffffff, 0x0, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(r0, 0x2, 0x0, &(0x7f0000000000)='{[)\'/(\x00', 0x7f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xb, 0x0) fsopen$auto(0x0, 0x1) (async) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) socket(0x1e, 0x5, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) getsockname$auto(r2, 0x0, 0x0) 22.380172436s ago: executing program 32 (id=1038): socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0xfc2, 0x0, 0x7, &(0x7f0000000300)="198c4f4d2282dd68e10a768807754db909196243eb5cc4de177c102495af72071d87583e452f7165da3599158638dabe9a0c59ea019792cf59a0b062366bdba330b5fafb0c07285d35bdc084b4c1e5ddbcc51455d05555a5d940082b872c30f806f411fd", 0xff, 0x8}, 0xfffffff9}, 0x2, 0x2) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0xfc2, 0x0, 0x7, &(0x7f0000000300)="198c4f4d2282dd68e10a768807754db909196243eb5cc4de177c102495af72071d87583e452f7165da3599158638dabe9a0c59ea019792cf59a0b062366bdba330b5fafb0c07285d35bdc084b4c1e5ddbcc51455d05555a5d940082b872c30f806f411fd", 0xff, 0x8}, 0xfffffff9}, 0x2, 0x2) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r0 = prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0xffffffffffffffff, 0x0, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(r0, 0x2, 0x0, &(0x7f0000000000)='{[)\'/(\x00', 0x7f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xb, 0x0) fsopen$auto(0x0, 0x1) (async) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) socket(0x1e, 0x5, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) getsockname$auto(r2, 0x0, 0x0) 7.686960333s ago: executing program 2 (id=1105): r0 = socket(0xa, 0x4, 0x9000300) sendfile$auto(r0, r0, 0x0, 0x8001) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x55d042, 0x0) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) fanotify_init$auto(0xf8, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo$auto(r3, r2, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x1, 0x6, 0x81, @_sigpoll={0x2}}}) r4 = socket(0xa, 0x801, 0x84) r5 = getsockopt$auto(r4, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) unshare$auto(0x40000080) mmap$auto(0x1, 0x1, 0x3, 0xeb1, r5, 0x8000) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r6, 0x921064a0, r4) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x145b00, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) unshare$auto(0x7) socket(0x29, 0xa, 0x0) prctl$auto(0x35, 0x3, 0x8, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) connect$auto(r7, &(0x7f0000000000)=@phonet={0x23, 0x1, 0x3, 0x60}, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0xf, 0x3, &(0x7f0000000140)='$\x00', 0x0) socket(0xf720ab8433665757, 0x1, 0x82) r8 = socket(0x2b, 0x1, 0x0) getsockopt$auto(r8, 0x0, 0x80, 0x0, 0x0) 7.387536514s ago: executing program 1 (id=1106): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x80003, 0x304) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB, @ANYBLOB=']'], 0x1ac}}, 0x40000) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = syz_clone3(&(0x7f0000000400)={0x148000400, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) kill$auto(0x0, 0x21) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r2) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x4, 0x8, 0xb3e5}, &(0x7f00000001c0)=0x2, &(0x7f00000002c0)=0x8, 0x6, 0xfff, 0x93, 0xfffffffffffffffa, 0x800, 0x4, 0x1, 0x9, @inferred=r4, @raw=0x5}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, 0xffffffffffffffff, 0x10000}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000080)) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="00004a14", @ANYRES16=r5, @ANYBLOB="000426bd7000ffdbdf250c000000cb00038007c58297c0cae5c4c31abf5a7e1b7468d9963c8cd07f5c3adb88a024244385d0a2a91258257c00b68a374913df6e1fadbab2763edf366ed10ae96193d0d8b18b9e6088bab29a2cf31f6ed3887340f08befce02c1a3771609f86bb9ffee5685869465af5cb26dbdc81d19674dab2894e890d4f4e2c9f6e408005700", @ANYRES32=r2, @ANYBLOB="08007100640101012c0015800400078013003d002f6465762f76686f73742d6e657400000400d7800400a08004004180040064800c00cf00020000000000000008004600", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="04007d8004001a8000006b02038016005780fcd7b728aeaeb55f8543d3438748e6926216000024005180107614710dc7301636df0c68d8b19e9098a35ced5457180938f47cc03e50edfdbf637e6468a05d090d418fd7f929bee50cec91fdecfe8fd29115c2eef41c89a37d6f88e8dff2342ce112d4f2975ba78ebf704dd225b30ef56535e7e0386f34bcb015a3524ed2835aa13cac88e5a8716433c40bbff053d90e820e39c2d78d329bfa0c646e850e8e1de34b3b6d6e569e61dd5522ab95561de82ff14d22a56feb7cd3e8c29a6cfb2a37244805618b61845d9ee9dd7761e2ff50378d5e907008798c475db61e1e6d6a4696abce16aa63af6dd980e972cc0668a1f502428ef09210033183410fd184fc0454a9c5e5f44553b922284971b9da3f6200f38188daf319f960dafd850c4f2752b6c506de218f75ec64899223086c0d07e37cbe48c582e82f7ef78ea2a6dd75e8e436874257e8afe93c3c752292f51fd3f6d0fe296e885a7d84b8827b276a12ae0196822363fa442eaba357f5023fcf718e7fccce595f603c204c8f0be42fc48f73617c4e921ee0a94dba01bd88f50e280f4871b6157dd7889d1570ea18e4138d73346d80506940242e159315c9f8a5fadba551a2933accde15151571d4303166051c6562c1deaa3a407619415fafd5794e85c6c59d21f0979c2803ec34d662e38e9c1160435caffe684aa43cad4e68cef20456993a52a2705409dce196a7e8e45fd95b564eeb0d945fb6d38136c659b6bf49f7996a7b40c21627361677897346d2ecbd5ad7382b0ea71f4ca2e0c3c8799d1f359e964f0338b3938b9a040e3b376beea388fb2c55aeb7505493d56e270acbca9fce424c5306e1ad5fdbe2d3ff13303ed500"], 0x49c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$', @ANYRES16=r3, @ANYBLOB="13002ebd7000ddc35e3460000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c0f29b00ec1b53302709a2ed567aa642b68e801f4dc4611e2c23a8666f01010000f65fde3649f7f86310fe7b73012da40a3770f6f9b43a6c76056d6a0d47687cc6e457e98e4ad43fd20ce51363712167b26db85585aa4633404da13e0b4e400112c6deb239161b9cab0ee096ae65210919a768836effffffff7963f3f6cb2b547592889a526684d154a91ec8f4a1dab9", @ANYRES16=r3, @ANYBLOB="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"], 0x8c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af03, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.676710681s ago: executing program 2 (id=1107): fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x5) r0 = socket(0x2, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x204, r1, 0x203, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x52, 0x1a, "e2c895577b412e4c1e6112d07edb5a7dc57316cdd314ff4c0ef402033af0d7cc46571f055dac7160f862250f979109cd8b8fa35e4e2362b96e7f4f38dc2c53317570d227d6c1347e6579c4628335"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xb5, 0x84, 0x0, 0x1, [@generic="3eb5659f62f6ef8e77f8f5903e676da9a8e578d1430f9a3f2f6fecaac29938732b56433603fce006a2b9f534c092ebc815fd7f85e5501ed1c096f41c83c828afe12078b3c9fe4f8c82c1e0ddab8dfc4a5db82521752e45f0b5bd77b734d8c8ea2ed3a77554e83dbbb0811822bfedb684408dd0a4f57e31a33a0de02437f5d8bc92fa166c7890639775655cfa798c0a279661303afa41b59d5826326950ff0fc2375bbcd8ffd35ed15fe8ed4c9900379058"]}, @NL80211_ATTR_MLO_TTLM_DLINK={0x3e, 0x148, "29dabbe4b4857a1da49488cc5a1d676a10d04df1239043da0278a091c2f5fbb14b7ae16ccd96db2a3c3d8b709273368608d3cde2ed0599499d2f"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x4e, 0x124, 0x0, 0x1, [@generic="0653c502d34a8521c67a1930afc4233fe1b910cf3cd01dc3b99648f90b1d892987893b26ef6dc93ffb4504ae637a625163eab5b7f2115c9a663b7eddf98d8a7c6a9da185f079e787371d"]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x78f}, @NL80211_ATTR_MLO_TTLM_DLINK={0x2c, 0x148, "ae7478fc1958805cb7c7a271d4dcb80421bbc5d26c12b1811f3f62932b5b3a3a95f93a7086a1e1a4"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x16, 0xbe, "5cfbf1a8daf4807268ee8a5e00260139fb33"}]}, 0x204}, 0x1, 0x0, 0x0, 0x2804c001}, 0x24004000) setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40080, 0xb5d1af1605322ddc) r4 = socket(0x29, 0x5, 0x0) recvmmsg$auto(r0, &(0x7f0000000880)={{&(0x7f0000000600)="8314d192651c7329c952cd5409a23fe7f7e0c41e3c1ae2d9e488f24e1b95457f765c043aa65b1aec75aeb6f521eb11a2faf46bc8a0956867669680aea503e63991e604c4c36f4ed5bc130a2da8ea0a10b54e56b88ee922e9af4bbd817796ca8be963fc87dc1bbfe33aee941f648e10d70da6b3bac108e2e3610408255374b4f75c0ee23f0aeb2d29b87ffcb0bc030c335b1e9e03f0f50ee8bfc425704b574dadfb14bbfaf54259bc731b57b28ee96f913e3676ffdc297bd5a236d33c28dc7997414c10", 0x8, &(0x7f00000007c0)={&(0x7f0000000700)="0de24679edc432d386526ed158e1073f5ff66073f4c8e304433a3ddb2019bea42181af0ab72360000bdcc2ca02b1935f7389ea3e868991079ac2afdbf5ca2b463610bd25fe3b14786907cb786ea3555cf5ea6bd379e138966277634d4b29e498b58576511e7e4abbd5998e49668675e5464e74ee7c00362e95a25b791dece0b325432dcf4157f95114941061716600ed0da6487bcc06b1ffa2327056f07f8a75fabf03065cff1fe9045baafeade9d437314e3e", 0x8000000000000001}, 0xc1, &(0x7f0000000800)="19efcd270bd3067eeba43df9f55019737699552c673c272d777f4a0faf32eeaf469c525c5f8e1d4b592d0f74662cb44df425ee6e37c3007c47c71d5b92afbbc460f9bbf8d880", 0x9f9, 0xa}, 0x3}, 0x4, 0x2, &(0x7f00000008c0)={0x1, 0x5}) write$auto(r4, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) r5 = getpid() getpriority$auto_PRIO_PGRP(0x1, r5) open_by_handle_at$auto(r3, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x101, 0x0) r6 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), r2) socket(0x2, 0xa, 0x100073) socket(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram8/queue/iostats\x00', 0xa001, 0x0) write$auto(r9, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) sendmsg$auto_NET_SHAPER_CMD_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0004a46eea2dbd7000fbdb0026030000000c0005000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x6, r8, 0x8}, 0x6c) sendmmsg$auto(r6, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 5.381573925s ago: executing program 1 (id=1109): setitimer$auto(0x1, &(0x7f0000000000)={{0x802, 0x1000007f}, {0x800100004, 0x3}}, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x40}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x45}, @NL80211_ATTR_MLO_LINKS={0x10, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) setitimer$auto(0x9, &(0x7f0000000140)={{0x3, 0x1}, {0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)={{0x7, 0x230d}, {0x5, 0x148}}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0)="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", 0x6c8, &(0x7f00000012c0)={0x0, 0x3}, 0x9, &(0x7f0000001300)="482a874b65633079386472e0b428b04510966e62503eaec1779ed700559aa2368c170439f5b461a3b2fbfeb16f5835041dd6edeb8909f1a0151f8e14a4e723ac4616b7454b", 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x40005504, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4.841313814s ago: executing program 2 (id=1110): socket(0x5, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f00000011c0)={"8ea04fb36df5554bed21642e5fb6d0061e4aedbc2a1a536dae8b259ab9b62cdc", 0x0, 0x5, 0xffffffce, 0x3, 0x8, 0x0}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f00000010c0)={"c6f0e7200d89a5b21b80b919cb5599dd0b8c3c4c42c16065b807aa63f5167307", 0x425, 0x80000001, 0xffff8001, 0xf, 0x6, r0}) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40001, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1}, 0x200) syz_open_procfs$namespace(r1, &(0x7f0000001140)='ns/uts\x00') mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/004/001\x00', 0x2181, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x2, 0x2a, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) lsetxattr$auto(&(0x7f0000001240)=':,\x00', &(0x7f0000001280)='-\x00', &(0x7f0000001340)="a9ab2c7eabb9740cbd2a50e8db3e6d8c6b8c0d62bef41cf00721a724decb4b4256ec0eea76c51bfc5adb922d91feec77abcfa3991a8d8b8ed95cfb2be1aa60018d5162c0f7cec55c4ee0181dd24caa4ae85b62", 0x7, 0x3) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0x1000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0) r4 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0xc, 0x3, 0x4}) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000001500)="ae81b02c040000006cc9429082425d1107823a3520e5797222487e04cf41e25f9cd53abd051a3ac3ea318fd672ebd50a2c3d9ba73886aea07f4fb32ee05e9e793c59e852344a0efcf51e46e9689c39d94bbffc172266b53770b73389fb058a9b6b57a93b039ae6f1b0a2f5d08f253c87717bb75461e8c2200d28978b1afe5fd11e653e", 0x5aa, &(0x7f0000000100)={&(0x7f0000001480)="f960ad17e4337aa78bbcbfc7e31228ca0cd8dd427958233ecef51de22c2e7cf4d33d3a10d2ded691665dca6c19dd46671e1c1eb21df67d1a3836bf1d936ac4265fba6bfcb0de58346f727a78c843ef0ffc7d8bf8ffab359efa41d7462a29810d23f852f18a252dd89195d65935d3a3829ff387dae77e3fd457d31b715c", 0x49}, 0x4, &(0x7f00000012c0), 0x5, 0x1000}, 0x5}, 0x2, 0x100) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000001180), 0x2000, 0x0) 4.840627262s ago: executing program 4 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20000040) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x8, 0x1, 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) splice$auto(r3, 0x0, r3, 0xfffffffffffffffe, 0x5, 0x1) (async) splice$auto(r3, 0x0, r3, 0xfffffffffffffffe, 0x5, 0x1) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) (async) read$auto(r4, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) writev$auto(r5, &(0x7f0000000340)={0x0, 0x18}, 0x8) (async) writev$auto(r5, &(0x7f0000000340)={0x0, 0x18}, 0x8) ioctl$auto_UI_SET_FFBIT(r5, 0x4004556b, 0x0) 4.816511041s ago: executing program 1 (id=1111): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socketpair$auto(0x5, 0x5, 0x6, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) 4.453520733s ago: executing program 0 (id=1112): close_range$auto(0x2, 0x8000, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x4, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b33, 0x1) mmap$auto(0x0, 0x4020009, 0x4000000000006, 0x15, r0, 0x2) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\"\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb05>ha9\x89|d\x00\x00\x00\x00\x00\x00', 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0xba7d, 0x0, 0xc, 0x3ff, 0x3, 0x10, 0x2000000000000002, 0x0, 0x8, 0xb07, 0xa, 0x4, 0xaab, 0x5, 0x9]}, 0x0, 0x0) sendfile$auto(r3, r3, 0x0, 0x400000000003) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) connect$auto(0x3, &(0x7f00000018c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe002) ioctl$auto(0x3, 0xae41, r2) 4.026787138s ago: executing program 0 (id=1113): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0xf, 0x2, 0x0) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0x5, 0x7, 0x0) bind$auto(r0, 0x0, 0x6f) connect$auto(0x3, 0x0, 0x55) 3.903489024s ago: executing program 4 (id=1114): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x80003, 0x304) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = syz_clone3(&(0x7f0000000400)={0x148000400, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) kill$auto(0x0, 0x21) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r2) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x4, 0x8, 0xb3e5}, &(0x7f00000001c0)=0x2, &(0x7f00000002c0)=0x8, 0x6, 0xfff, 0x93, 0xfffffffffffffffa, 0x800, 0x4, 0x1, 0x9, @inferred=r4, @raw=0x5}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, 0xffffffffffffffff, 0x10000}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000080)) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="00004a14", @ANYRES16=r5, @ANYBLOB="000426bd7000ffdbdf250c000000cb00038007c58297c0cae5c4c31abf5a7e1b7468d9963c8cd07f5c3adb88a024244385d0a2a91258257c00b68a374913df6e1fadbab2763edf366ed10ae96193d0d8b18b9e6088bab29a2cf31f6ed3887340f08befce02c1a3771609f86bb9ffee5685869465af5cb26dbdc81d19674dab2894e890d4f4e2c9f6e408005700", @ANYRES32=r2, @ANYBLOB="08007100640101012c0015800400078013003d002f6465762f76686f73742d6e657400000400d7800400a08004004180040064800c00cf00020000000000000008004600", @ANYRES32=r0, @ANYBLOB="0050010380bbaee137a3a51585799b8c773a47d96186eb7138ec976db6629bed618dc18b5ec1199e70023b6a5d0de79becaba63dba9d548c25fa1be5bac375b6738c5cf0ca6bcefefd7646c4a1983b0f60d8c7e5860d3015602873eadf559e69fc3ee86addc86cd74c3d4e0039ebdbeced43e14f1236100a9189051f6a75a1512c74498e3633fe60119a24f29f001fb03047fba68a7aec008d206889f2232132c3443eb3d42a8fa6c414cbd79f38c0498871ae7cbed868421defdccc6309bf87254c2bfb172f94c010e5dea0018a277828989468b3a118f210b62ec5962d91591631a54ef26c14c844d52daa8604003b005e009a800400cf800c009100ffffffffffffffff130041002f6465762f76686f73742d6e6574000004003a80e8128e166d3d9aa5ae47e456032c08003300ac1414bb0c00b100000000000000000008005700", @ANYRES32=r6, @ANYBLOB="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"], 0x49c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$', @ANYRES16=r3, @ANYBLOB="13002ebd7000ddc35e3460000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c0f29b00ec1b53302709a2ed567aa642b68e801f4dc4611e2c23a8666f01010000f65fde3649f7f86310fe7b73012da40a3770f6f9b43a6c76056d6a0d47687cc6e457e98e4ad43fd20ce51363712167b26db85585aa4633404da13e0b4e400112c6deb239161b9cab0ee096ae65210919a768836effffffff7963f3f6cb2b547592889a526684d154a91ec8f4a1dab9", @ANYRES16=r3, @ANYBLOB="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"], 0x8c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af03, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.840850512s ago: executing program 1 (id=1115): mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0xffffffffffffffff, 0x3ff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) read$auto(0xffffffffffffffff, 0x0, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40100, 0x0) unshare$auto(0x40000080) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0xc01) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x149202, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000300)=""/17, 0xc) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/statistics/dot11ACKFailureCount\x00', 0x2240, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) madvise$auto(0x4009, 0xffffffbfffff0004, 0x9) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x9a28) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r5, r5, 0x0, 0x7ffff000) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) process_madvise$auto_MADV_DOFORK(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x9) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6003000028377ba00b071bf0b70fa33b9ee519", @ANYRES16=r6, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004011) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0), 0x55) unshare$auto(0x6c000000) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x6, 0x9, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0x7fc, 0x40000000000a5, 0x8000) 3.699402915s ago: executing program 0 (id=1116): getpid() r0 = eventfd$auto(0x1) readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r0, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) 3.507823255s ago: executing program 0 (id=1117): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r1 = eventfd$auto(0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/net/lapb2/carrier_up_count\x00', 0x111000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mmap$auto(0x0, 0x3, 0x4000000000df, 0x12, r1, 0x300000000000) socket(0x1e, 0x5, 0x0) setsockopt$auto_SO_PASSSEC(r2, 0x10000, 0x22, &(0x7f00000000c0)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0xffffffff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/arp_tables_matches\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x80, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x6, 0x5, 0x5, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x478, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x8, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.012001774s ago: executing program 0 (id=1118): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\v\f\t\x00\x00\x00\x00\x00\x00\x00\xac.X_|\xc8R\x99!\xd2\x14\xff\xa7\xe4&#sn\x91p\xe6\x1e\x00\x1f8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\xce\xef\xd8!\x8e\xcf\xcd\xb3\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'I\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x06n\xb1\xcb\x1f\xbe\x1f\t\xfe\xaa\xb4\xa9{\xd8\xbez\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\xbc\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87M\x80X\x1ak7g\xff\x04\xb6R\xa5X\x02\xcaG\x96?9\xf1\t\x005\x8d7B\xd8$\xf7\xc6\xdb[\"p\xf4\x11\n\xcb\xfd\x1e', 0x52, 0x5228) unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0x11, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x20000009, &(0x7f00000000c0)={@_si_pad}) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="30d337509512cb8658a4dce11e35d2dd9d6d96a4eaf8b74e64a022319096652a3fc6027065d148cf9541d4e691313b4556aedfc94617572aaaaa152fd2cceef80647c0c4cfecaacfc2195a95f5aff99a356ea29020640871f422b426ad4e002c7b4bbd2bd9b40e9e0f7b59", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25190000002000018014000200776c616e3000000000000000000000000800030005000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x480302, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000040)={@padding, 0x8e}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x10001) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) unshare$auto(0x40000080) 3.010998829s ago: executing program 2 (id=1119): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @inferred=r1, 0x0, "5059d805d689f01a18c00f29b5fa494a020800fced42bcfab52ac63a1562e39e060000007c7fd574bccc81a93bf6de84233c"}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x402, 0x0) write$auto(r3, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8\xe4\x145\x90e\xd3\xe0);\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x1e\xe1\xdb\x03\x19\xba\xda\x19\xbbW\xc6\x8c\xd54\x0eJ\xcdpq\xedv\x93\x89\r\xb5\xe06:\x85\xc0\x982]dy/\xff', 0x100000001) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) write$auto(r3, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) ioctl$auto_EVIOCSMASK(r0, 0x40104593, &(0x7f00000003c0)={0x1, 0x0, 0x8}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x724541, 0x0) 16.298216ms ago: executing program 2 (id=1126): socket(0x21, 0x5, 0x3) mmap$auto(0x0, 0x4020009, 0x40000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) memfd_create$auto(0x0, 0x4) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/028/001\x00', 0xb2c00, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0xa, 0xac, 0xfff8, 0xfffffffe, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40088c4) r3 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/status\x00', 0x441, 0x0) write$auto(r4, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) write$auto(r3, 0x0, 0x8000) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x3) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x16a9e236, &(0x7f00000000c0)={{0x26b, 0xd191}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000640)={{@raw=0x9, 0x801, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @raw=0x4}, 0xfffffffc, 0x3, 0x2, @inferred, @integer={0xa, 0x0, 0x2528}, "18a801006a0900000000000000d4bd5359eeadc8357752b72fa176254d8797cdffd024b626f54ad9d763dcdc9120af8b7c848ceb55a700"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x1, 0x810006, 0xffb, 0x8000000008011, r5, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) setsockopt$auto(0x400000000000003, 0x8, 0x6, 0x0, 0x8) 0s ago: executing program 4 (id=1127): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs\x00', 0x20000, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x5, 0x200, 0x3, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x9, 0x7, 0x7, 0x6}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x1000200) kernel console output (not intermixed with test programs): team_slave_1 added [ 99.485501][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.518613][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.525929][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.552487][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.601039][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.608162][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.635020][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.658495][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.665619][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.691649][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.703412][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.711489][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.738523][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.762454][ T5627] team0: Port device team_slave_0 added [ 99.768844][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.776056][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.802719][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.814579][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.821596][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.847667][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.869660][ T5627] team0: Port device team_slave_1 added [ 99.912729][ T5629] hsr_slave_0: entered promiscuous mode [ 99.919498][ T5629] hsr_slave_1: entered promiscuous mode [ 99.952742][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.960309][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.986664][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.000120][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.007245][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.033332][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.110086][ T5628] hsr_slave_0: entered promiscuous mode [ 100.116618][ T5628] hsr_slave_1: entered promiscuous mode [ 100.122815][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 100.128985][ T5628] Cannot create hsr debugfs directory [ 100.161640][ T5630] hsr_slave_0: entered promiscuous mode [ 100.168248][ T5630] hsr_slave_1: entered promiscuous mode [ 100.174435][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 100.181165][ T5630] Cannot create hsr debugfs directory [ 100.261893][ T5627] hsr_slave_0: entered promiscuous mode [ 100.268568][ T5627] hsr_slave_1: entered promiscuous mode [ 100.275219][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 100.281009][ T5627] Cannot create hsr debugfs directory [ 100.747580][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.770879][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.779223][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.790698][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.800188][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.812153][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.820452][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.832872][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.931354][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.942044][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.950443][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.962028][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.974810][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.988479][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.002131][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.012551][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.119168][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.133222][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.144377][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.151703][ T5632] Bluetooth: hci2: command tx timeout [ 101.156932][ T5632] Bluetooth: hci0: command tx timeout [ 101.160561][ T5643] Bluetooth: hci1: command tx timeout [ 101.172396][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.180706][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.191906][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.201287][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.212597][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.224656][ T5643] Bluetooth: hci3: command tx timeout [ 101.341086][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.353161][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.370404][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.381222][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.391155][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.401926][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.412492][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.425693][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.488041][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.532966][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.573505][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.609075][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.616756][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.631546][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.652434][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.659704][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.678729][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.685937][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.706014][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.713234][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.765799][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.856950][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.899957][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.907285][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.924870][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.959788][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.967230][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.040637][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.099739][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.107108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.147933][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.155203][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.114341][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.181678][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.226156][ T5643] Bluetooth: hci0: command tx timeout [ 103.226791][ T5632] Bluetooth: hci2: command tx timeout [ 103.231658][ T5640] Bluetooth: hci1: command tx timeout [ 103.305693][ T5632] Bluetooth: hci3: command tx timeout [ 103.362442][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.403819][ T5629] veth0_vlan: entered promiscuous mode [ 103.426079][ T5630] veth0_vlan: entered promiscuous mode [ 103.450296][ T5629] veth1_vlan: entered promiscuous mode [ 103.486412][ T5630] veth1_vlan: entered promiscuous mode [ 103.502132][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.591060][ T5629] veth0_macvtap: entered promiscuous mode [ 103.618154][ T5628] veth0_vlan: entered promiscuous mode [ 103.651996][ T5629] veth1_macvtap: entered promiscuous mode [ 103.673672][ T5630] veth0_macvtap: entered promiscuous mode [ 103.686057][ T5630] veth1_macvtap: entered promiscuous mode [ 103.695891][ T5627] veth0_vlan: entered promiscuous mode [ 103.704397][ T5628] veth1_vlan: entered promiscuous mode [ 103.731541][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.742529][ T5627] veth1_vlan: entered promiscuous mode [ 103.762593][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.781665][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.821864][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.843410][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.851291][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.860900][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.889180][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.919660][ T5628] veth0_macvtap: entered promiscuous mode [ 103.933947][ T1055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.948404][ T1055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.971603][ T1055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.980970][ T1055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.006975][ T5628] veth1_macvtap: entered promiscuous mode [ 104.035244][ T5627] veth0_macvtap: entered promiscuous mode [ 104.078637][ T5627] veth1_macvtap: entered promiscuous mode [ 104.122791][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.169571][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.195032][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.206529][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.230447][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.240599][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.261724][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.282614][ T1009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.301465][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.310061][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.325566][ T1009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.345295][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.401827][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.411577][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.429432][ T1055] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.439129][ T1055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.459322][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.467212][ T1055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.479208][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.488277][ T1055] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.644840][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.668321][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.683623][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.789968][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.809252][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.871469][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.914618][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.044343][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.081947][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.305985][ T5632] Bluetooth: hci2: command tx timeout [ 105.306737][ T5640] Bluetooth: hci1: command tx timeout [ 105.317533][ T5643] Bluetooth: hci0: command tx timeout [ 105.386411][ T5640] Bluetooth: hci3: command tx timeout [ 105.682025][ T5794] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.260788][ T5800] Zero length message leads to an empty skb [ 106.292740][ T5805] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.853025][ T5793] tipc: can't start tipc receive workqueue [ 108.261608][ T5830] random: crng reseeded on system resumption [ 109.455841][ T5846] random: crng reseeded on system resumption [ 110.988700][ T5865] ubi9: attaching mtd0 [ 111.102740][ T5865] ubi9 error: ubi_attach_mtd_dev: bad VID header (32768) or data offsets (32832) [ 112.394201][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 112.541770][ T5887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 112.822404][ T5884] syz.3.20 (5884) used greatest stack depth: 19720 bytes left [ 113.301996][ T5895] FAULT_INJECTION: forcing a failure. [ 113.301996][ T5895] name failslab, interval 1, probability 0, space 0, times 1 [ 113.315881][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 113.315924][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.315950][ T5895] Call Trace: [ 113.315962][ T5895] [ 113.315974][ T5895] dump_stack_lvl+0x100/0x190 [ 113.316031][ T5895] should_fail_ex.cold+0x5/0xa [ 113.316075][ T5895] should_failslab+0xc2/0x120 [ 113.316117][ T5895] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 113.316176][ T5895] ? __alloc_skb+0x140/0x710 [ 113.316217][ T5895] __alloc_skb+0x140/0x710 [ 113.316247][ T5895] ? __alloc_skb+0x5b7/0x710 [ 113.316278][ T5895] ? __pfx___alloc_skb+0x10/0x10 [ 113.316321][ T5895] __neigh_notify+0xe6/0x350 [ 113.316366][ T5895] neigh_cleanup_and_release+0x99/0x2e0 [ 113.316417][ T5895] neigh_remove_one+0x1fb/0x280 [ 113.316467][ T5895] ___neigh_create+0x1b84/0x2950 [ 113.316536][ T5895] ? __pfx____neigh_create+0x10/0x10 [ 113.316592][ T5895] ip6_finish_output2+0xffa/0x1ce0 [ 113.316658][ T5895] __ip6_finish_output+0x357/0xdf0 [ 113.316716][ T5895] ip6_output+0x2aa/0xa60 [ 113.316767][ T5895] ? __pfx_ip6_output+0x10/0x10 [ 113.316822][ T5895] ? __pfx_ip6_finish_output+0x10/0x10 [ 113.316873][ T5895] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 113.316914][ T5895] ? ip6table_mangle_hook+0xcb/0x770 [ 113.316971][ T5895] ip6_mr_output+0x233/0x1180 [ 113.317051][ T5895] ? __pfx_ip6_mr_output+0x10/0x10 [ 113.317118][ T5895] ? __ip6_local_out+0x38c/0xaf0 [ 113.317184][ T5895] ? __pfx_dst_output+0x10/0x10 [ 113.317241][ T5895] ? __pfx_ip6_mr_output+0x10/0x10 [ 113.317301][ T5895] ? ip6_local_out+0x1ad/0x1f0 [ 113.317351][ T5895] ip6_local_out+0x1ad/0x1f0 [ 113.317405][ T5895] ip6_send_skb+0x112/0x430 [ 113.317459][ T5895] ip6_push_pending_frames+0x3b/0x50 [ 113.317513][ T5895] rawv6_sendmsg+0x2d0c/0x4420 [ 113.317560][ T5895] ? aa_profile_af_perm+0x320/0x3a0 [ 113.317605][ T5895] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 113.317646][ T5895] ? lock_downgrade+0x270/0x2a0 [ 113.317690][ T5895] ? rcu_is_watching+0x12/0xc0 [ 113.317776][ T5895] ? __import_iovec+0x1d2/0x640 [ 113.317812][ T5895] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 113.317856][ T5895] ? inet_sendmsg+0x11c/0x140 [ 113.317902][ T5895] inet_sendmsg+0x11c/0x140 [ 113.317953][ T5895] ____sys_sendmsg+0x98d/0xb70 [ 113.317995][ T5895] ? __pfx_inet_sendmsg+0x10/0x10 [ 113.318058][ T5895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.318109][ T5895] ? futex_unqueue+0x133/0x2c0 [ 113.318156][ T5895] ___sys_sendmsg+0x190/0x1e0 [ 113.318208][ T5895] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.318256][ T5895] ? __pfx___futex_wait+0x10/0x10 [ 113.318298][ T5895] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 113.318355][ T5895] ? find_held_lock+0x2b/0x80 [ 113.318424][ T5895] __sys_sendmmsg+0x205/0x430 [ 113.318468][ T5895] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.318518][ T5895] ? __pfx_do_futex+0x10/0x10 [ 113.318576][ T5895] ? xfd_validate_state+0x129/0x190 [ 113.318611][ T5895] ? ksys_write+0x1ac/0x250 [ 113.318662][ T5895] __x64_sys_sendmmsg+0x9c/0x100 [ 113.318700][ T5895] ? lockdep_hardirqs_on+0x78/0x100 [ 113.318744][ T5895] do_syscall_64+0x10b/0xf80 [ 113.318787][ T5895] ? clear_bhb_loop+0x40/0x90 [ 113.318830][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.318865][ T5895] RIP: 0033:0x7f1f0a19cdd9 [ 113.318893][ T5895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.318925][ T5895] RSP: 002b:00007f1f0af83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.318959][ T5895] RAX: ffffffffffffffda RBX: 00007f1f0a415fa0 RCX: 00007f1f0a19cdd9 [ 113.318980][ T5895] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 113.319008][ T5895] RBP: 00007f1f0a232d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.319028][ T5895] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.319047][ T5895] R13: 00007f1f0a416038 R14: 00007f1f0a415fa0 R15: 00007fff71c96368 [ 113.319103][ T5895] [ 113.729787][ T5906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.031671][ T5941] mmap: syz.3.31 (5941) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.469988][ T5959] random: crng reseeded on system resumption [ 118.747633][ T5965] can: request_module (can-proto-5) failed. [ 120.048390][ T5986] ubi0: attaching mtd0 [ 120.091488][ T5986] ubi0: scanning is finished [ 120.099223][ T5986] ubi0: empty MTD device detected [ 120.616621][ T5986] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 120.629770][ T5986] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 120.649271][ T5986] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 120.658640][ T5986] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 120.669027][ T5986] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 120.677204][ T5986] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 120.686529][ T5986] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3273177692 [ 120.724602][ T5986] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 120.736658][ T5992] ubi0: background thread "ubi_bgt0d" started, PID 5992 [ 120.754060][ T5989] ubi0: detaching mtd0 [ 120.876324][ T5989] ubi0: mtd0 is detached [ 121.254097][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 121.631162][ T5998] random: crng reseeded on system resumption [ 122.075166][ T6013] FAULT_INJECTION: forcing a failure. [ 122.075166][ T6013] name failslab, interval 1, probability 0, space 0, times 0 [ 122.124080][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: syz.3.44 Not tainted syzkaller #0 PREEMPT(full) [ 122.124121][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.124139][ T6013] Call Trace: [ 122.124149][ T6013] [ 122.124160][ T6013] dump_stack_lvl+0x100/0x190 [ 122.124242][ T6013] should_fail_ex.cold+0x5/0xa [ 122.124283][ T6013] should_failslab+0xc2/0x120 [ 122.124327][ T6013] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 122.124375][ T6013] ? security_file_alloc+0x34/0x2c0 [ 122.124417][ T6013] ? trace_kmem_cache_alloc+0xd5/0x100 [ 122.124462][ T6013] security_file_alloc+0x34/0x2c0 [ 122.124497][ T6013] init_file+0x95/0x480 [ 122.124543][ T6013] alloc_empty_file_noaccount+0x45/0xd0 [ 122.124594][ T6013] alloc_file_pseudo_noaccount+0x13a/0x230 [ 122.124649][ T6013] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 122.124706][ T6013] ? iput+0x3a/0x40 [ 122.124768][ T6013] bdev_file_open_by_dev+0x13a/0x210 [ 122.124806][ T6013] blkdev_bszset+0x170/0x240 [ 122.124840][ T6013] ? __pfx_blkdev_bszset+0x10/0x10 [ 122.124874][ T6013] ? find_held_lock+0x2b/0x80 [ 122.124914][ T6013] ? __fget_files+0x215/0x3d0 [ 122.124948][ T6013] ? hook_file_ioctl_common+0x149/0x410 [ 122.125002][ T6013] blkdev_ioctl+0x513/0x6f0 [ 122.125038][ T6013] ? __pfx_blkdev_ioctl+0x10/0x10 [ 122.125086][ T6013] ? __pfx_blkdev_ioctl+0x10/0x10 [ 122.125123][ T6013] __x64_sys_ioctl+0x18e/0x210 [ 122.125159][ T6013] do_syscall_64+0x10b/0xf80 [ 122.125198][ T6013] ? clear_bhb_loop+0x40/0x90 [ 122.125239][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.125271][ T6013] RIP: 0033:0x7f63bf39cdd9 [ 122.125302][ T6013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.125335][ T6013] RSP: 002b:00007f63c017a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.125364][ T6013] RAX: ffffffffffffffda RBX: 00007f63bf616180 RCX: 00007f63bf39cdd9 [ 122.125385][ T6013] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000007 [ 122.125410][ T6013] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 122.125429][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.125447][ T6013] R13: 00007f63bf616218 R14: 00007f63bf616180 R15: 00007ffcc3b3ceb8 [ 122.125487][ T6013] [ 122.653511][ T6022] FAULT_INJECTION: forcing a failure. [ 122.653511][ T6022] name failslab, interval 1, probability 0, space 0, times 0 [ 122.671132][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.3.47 Not tainted syzkaller #0 PREEMPT(full) [ 122.671171][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.671189][ T6022] Call Trace: [ 122.671199][ T6022] [ 122.671211][ T6022] dump_stack_lvl+0x100/0x190 [ 122.671252][ T6022] should_fail_ex.cold+0x5/0xa [ 122.671294][ T6022] should_failslab+0xc2/0x120 [ 122.671333][ T6022] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 122.671389][ T6022] ? __d_alloc+0x34/0xa40 [ 122.671441][ T6022] __d_alloc+0x34/0xa40 [ 122.671489][ T6022] d_alloc+0x4a/0x1e0 [ 122.671535][ T6022] lookup_one_qstr_excl+0x171/0x250 [ 122.671589][ T6022] start_dirop+0x59/0xb0 [ 122.671635][ T6022] simple_start_creating+0xf9/0x110 [ 122.671673][ T6022] ? __pfx_simple_start_creating+0x10/0x10 [ 122.671711][ T6022] ? mntput+0x70/0xa0 [ 122.671743][ T6022] ? simple_pin_fs+0xa3/0x190 [ 122.671777][ T6022] debugfs_start_creating.part.0+0x82/0x170 [ 122.671828][ T6022] __debugfs_create_file+0xb3/0x4f0 [ 122.671881][ T6022] debugfs_create_file_full+0x41/0x60 [ 122.671935][ T6022] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 122.671975][ T6022] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 122.672009][ T6022] ? ida_alloc_range+0x70d/0x830 [ 122.672085][ T6022] ? lockdep_init_map_type+0x5c/0x250 [ 122.672126][ T6022] preinit_net.part.0+0x252/0x920 [ 122.672165][ T6022] copy_net_ns+0x339/0x7c0 [ 122.672209][ T6022] create_new_namespaces+0x3ea/0xac0 [ 122.672258][ T6022] unshare_nsproxy_namespaces+0xf2/0x220 [ 122.672301][ T6022] ksys_unshare+0x438/0xab0 [ 122.672349][ T6022] ? __pfx_ksys_unshare+0x10/0x10 [ 122.672392][ T6022] ? xfd_validate_state+0x129/0x190 [ 122.672435][ T6022] __x64_sys_unshare+0x31/0x40 [ 122.672475][ T6022] do_syscall_64+0x10b/0xf80 [ 122.672508][ T6022] ? clear_bhb_loop+0x40/0x90 [ 122.672542][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.672568][ T6022] RIP: 0033:0x7f63bf39cdd9 [ 122.672590][ T6022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.672627][ T6022] RSP: 002b:00007f63c01bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.672655][ T6022] RAX: ffffffffffffffda RBX: 00007f63bf615fa0 RCX: 00007f63bf39cdd9 [ 122.672674][ T6022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 122.672690][ T6022] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 122.672708][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.672725][ T6022] R13: 00007f63bf616038 R14: 00007f63bf615fa0 R15: 00007ffcc3b3ceb8 [ 122.672763][ T6022] [ 123.805090][ T6032] hub 1-0:1.0: USB hub found [ 123.818540][ T6032] hub 1-0:1.0: 1 port detected [ 124.629655][ T6043] syz.3.50(6043): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 125.961628][ T6082] random: crng reseeded on system resumption [ 126.858677][ T6099] ovs_: entered promiscuous mode [ 128.952414][ T6151] syz.2.69 uses obsolete (PF_INET,SOCK_PACKET) syzkaller syzkaller login: [ 129.765181][ T6160] random: crng reseeded on system resumption [ 130.071085][ T6168] netlink: 25 bytes leftover after parsing attributes in process `syz.3.74'. [ 130.327008][ T6174] raw_sendmsg: syz.2.75 forgot to set AF_INET. Fix it! [ 130.478878][ T6176] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.323730][ T6191] netlink: 342 bytes leftover after parsing attributes in process `syz.1.80'. [ 132.172173][ T6220] nfs: Unknown parameter 'yk' [ 133.070292][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078264][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.122674][ T6222] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 136.290260][ T6330] MTRR 1 not used [ 136.311588][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 136.390589][ T6335] process 'syz.1.102' launched './file0' with NULL argv: empty string added [ 136.518365][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 136.791596][ T6339] random: crng reseeded on system resumption [ 136.882365][ T6338] hub 1-0:1.0: USB hub found [ 136.901261][ T6338] hub 1-0:1.0: 1 port detected [ 137.305714][ T5640] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.154939][ T6388] netlink: 'syz.3.115': attribute type 33 has an invalid length. [ 140.648296][ T6421] kAFS: Invalid Command on /proc/fs/afs/cells file [ 141.134232][ T6427] FAULT_INJECTION: forcing a failure. [ 141.134232][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 141.149943][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.3.129 Not tainted syzkaller #0 PREEMPT(full) [ 141.149988][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.150007][ T6427] Call Trace: [ 141.150017][ T6427] [ 141.150029][ T6427] dump_stack_lvl+0x100/0x190 [ 141.150071][ T6427] should_fail_ex.cold+0x5/0xa [ 141.150124][ T6427] should_failslab+0xc2/0x120 [ 141.150163][ T6427] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 141.150215][ T6427] ? __kernfs_new_node+0xd2/0x9f0 [ 141.150259][ T6427] __kernfs_new_node+0xd2/0x9f0 [ 141.150300][ T6427] ? __pfx___kernfs_new_node+0x10/0x10 [ 141.150347][ T6427] ? find_held_lock+0x2b/0x80 [ 141.150390][ T6427] ? kernfs_root+0xee/0x2a0 [ 141.150423][ T6427] ? kernfs_root+0xee/0x2a0 [ 141.150466][ T6427] kernfs_new_node+0x11b/0x1a0 [ 141.150513][ T6427] __kernfs_create_file+0x53/0x350 [ 141.150566][ T6427] sysfs_add_file_mode_ns+0x207/0x3c0 [ 141.150610][ T6427] internal_create_group+0x593/0xf40 [ 141.150660][ T6427] ? __pfx_internal_create_group+0x10/0x10 [ 141.150706][ T6427] ? kernfs_create_link+0x1bd/0x240 [ 141.150764][ T6427] internal_create_groups+0x9d/0x150 [ 141.150808][ T6427] device_add+0x71a/0x1950 [ 141.150854][ T6427] ? __pfx_device_add+0x10/0x10 [ 141.150895][ T6427] ? lockdep_init_map_type+0x5c/0x250 [ 141.150930][ T6427] ? __init_waitqueue_head+0xca/0x150 [ 141.150981][ T6427] rfkill_register+0x1ad/0xb30 [ 141.151023][ T6427] nfc_register_device+0x11f/0x3e0 [ 141.151069][ T6427] nci_register_device+0x7f1/0xb80 [ 141.151104][ T6427] ? __pfx_nci_register_device+0x10/0x10 [ 141.151152][ T6427] ? lockdep_init_map_type+0x5c/0x250 [ 141.151194][ T6427] virtual_ncidev_open+0x141/0x220 [ 141.151250][ T6427] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 141.151300][ T6427] misc_open+0x26d/0x450 [ 141.151339][ T6427] ? __pfx_misc_open+0x10/0x10 [ 141.151375][ T6427] chrdev_open+0x234/0x6a0 [ 141.151415][ T6427] ? __pfx_chrdev_open+0x10/0x10 [ 141.151457][ T6427] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 141.151509][ T6427] do_dentry_open+0x6d8/0x1660 [ 141.151547][ T6427] ? __pfx_chrdev_open+0x10/0x10 [ 141.151599][ T6427] vfs_open+0x82/0x3f0 [ 141.151652][ T6427] path_openat+0x208c/0x31a0 [ 141.151707][ T6427] ? __pfx_path_openat+0x10/0x10 [ 141.151760][ T6427] do_file_open+0x20e/0x430 [ 141.151802][ T6427] ? __pfx_do_file_open+0x10/0x10 [ 141.151873][ T6427] ? alloc_fd+0x476/0x790 [ 141.151916][ T6427] ? do_getname+0x191/0x390 [ 141.151970][ T6427] do_sys_openat2+0x10d/0x1e0 [ 141.152022][ T6427] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.152087][ T6427] __x64_sys_openat+0x12d/0x210 [ 141.152149][ T6427] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.152209][ T6427] ? rcu_is_watching+0x12/0xc0 [ 141.152255][ T6427] do_syscall_64+0x10b/0xf80 [ 141.152297][ T6427] ? clear_bhb_loop+0x40/0x90 [ 141.152338][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.152374][ T6427] RIP: 0033:0x7f63bf39cdd9 [ 141.152400][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.152430][ T6427] RSP: 002b:00007f63c01bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.152457][ T6427] RAX: ffffffffffffffda RBX: 00007f63bf615fa0 RCX: 00007f63bf39cdd9 [ 141.152478][ T6427] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 141.152498][ T6427] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 141.152517][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.152535][ T6427] R13: 00007f63bf616038 R14: 00007f63bf615fa0 R15: 00007ffcc3b3ceb8 [ 141.152577][ T6427] [ 143.721910][ T6490] zswap: compressor not available [ 143.955356][ T6500] FAULT_INJECTION: forcing a failure. [ 143.955356][ T6500] name fail_futex, interval 1, probability 0, space 0, times 1 [ 143.984852][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.0.142 Not tainted syzkaller #0 PREEMPT(full) [ 143.984896][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.984917][ T6500] Call Trace: [ 143.984927][ T6500] [ 143.984940][ T6500] dump_stack_lvl+0x100/0x190 [ 143.984985][ T6500] should_fail_ex.cold+0x5/0xa [ 143.985029][ T6500] get_futex_key+0x1d2/0x1510 [ 143.985067][ T6500] ? __pfx_get_futex_key+0x10/0x10 [ 143.985114][ T6500] futex_wake+0xea/0x530 [ 143.985159][ T6500] ? rcu_is_watching+0x12/0xc0 [ 143.985214][ T6500] ? __pfx_futex_wake+0x10/0x10 [ 143.985264][ T6500] ? putname+0xb1/0x110 [ 143.985307][ T6500] ? kmem_cache_free+0x127/0x6c0 [ 143.985368][ T6500] do_futex+0x32b/0x350 [ 143.985406][ T6500] ? __pfx_do_futex+0x10/0x10 [ 143.985441][ T6500] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.985505][ T6500] __x64_sys_futex+0x34f/0x4d0 [ 143.985545][ T6500] ? __x64_sys_openat+0x12d/0x210 [ 143.985598][ T6500] ? __pfx___x64_sys_futex+0x10/0x10 [ 143.985635][ T6500] ? ksys_write+0x1ac/0x250 [ 143.985684][ T6500] ? rcu_is_watching+0x12/0xc0 [ 143.985730][ T6500] do_syscall_64+0x10b/0xf80 [ 143.985773][ T6500] ? clear_bhb_loop+0x40/0x90 [ 143.985816][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.985851][ T6500] RIP: 0033:0x7f656b19cdd9 [ 143.985881][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.985915][ T6500] RSP: 002b:00007f656c05f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.985948][ T6500] RAX: ffffffffffffffda RBX: 00007f656b415fa8 RCX: 00007f656b19cdd9 [ 143.985970][ T6500] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f656b415fac [ 143.985990][ T6500] RBP: 00007f656b415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 143.986010][ T6500] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 143.986029][ T6500] R13: 00007f656b416038 R14: 00007ffe72152620 R15: 00007ffe72152708 [ 143.986072][ T6500] [ 144.561323][ T6502] FAULT_INJECTION: forcing a failure. [ 144.561323][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 144.609429][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.0.143 Not tainted syzkaller #0 PREEMPT(full) [ 144.609478][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.609499][ T6502] Call Trace: [ 144.609511][ T6502] [ 144.609524][ T6502] dump_stack_lvl+0x100/0x190 [ 144.609569][ T6502] should_fail_ex.cold+0x5/0xa [ 144.609612][ T6502] ? acpi_ex_allocate_name_string+0x8c/0x340 [ 144.609657][ T6502] should_failslab+0xc2/0x120 [ 144.609697][ T6502] __kmalloc_noprof+0xe0/0x850 [ 144.609763][ T6502] acpi_ex_allocate_name_string+0x8c/0x340 [ 144.609820][ T6502] acpi_ex_get_name_string+0x322/0xb90 [ 144.609874][ T6502] ? __pfx_acpi_ex_get_name_string+0x10/0x10 [ 144.609936][ T6502] acpi_ds_create_operand+0x3fd/0xc20 [ 144.609976][ T6502] ? __pfx_acpi_ds_create_operand+0x10/0x10 [ 144.610015][ T6502] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 144.610061][ T6502] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 144.610105][ T6502] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 144.610157][ T6502] ? acpi_ut_track_stack_ptr+0x114/0x180 [ 144.610208][ T6502] acpi_ds_evaluate_name_path+0x158/0x4a0 [ 144.610249][ T6502] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 144.610292][ T6502] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 144.610331][ T6502] ? acpi_ut_trace_ptr+0x1d1/0x2a0 [ 144.610381][ T6502] acpi_ds_exec_end_op+0xb78/0x1e60 [ 144.610424][ T6502] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 144.610471][ T6502] acpi_ps_parse_loop+0x5dd/0x24a0 [ 144.610531][ T6502] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 144.610574][ T6502] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 144.610635][ T6502] ? acpi_ut_create_thread_state+0x6d/0x170 [ 144.610687][ T6502] acpi_ps_parse_aml+0x81e/0x1120 [ 144.610742][ T6502] acpi_ps_execute_method+0x5c4/0xe90 [ 144.610805][ T6502] acpi_ns_evaluate+0x640/0x1670 [ 144.610868][ T6502] acpi_evaluate_object+0x420/0xe00 [ 144.610903][ T6502] ? kasan_save_stack+0x30/0x50 [ 144.610935][ T6502] ? kasan_save_track+0x14/0x30 [ 144.610972][ T6502] ? __kasan_kmalloc+0xaa/0xb0 [ 144.611002][ T6502] ? __kvmalloc_node_noprof+0x360/0xa00 [ 144.611043][ T6502] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 144.611084][ T6502] ? lock_acquire+0x1b1/0x370 [ 144.611146][ T6502] acpi_evaluate_integer+0xdf/0x220 [ 144.611198][ T6502] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 144.611268][ T6502] ? __pfx_status_show+0x10/0x10 [ 144.611322][ T6502] status_show+0xa0/0x120 [ 144.611359][ T6502] ? __pfx_status_show+0x10/0x10 [ 144.611420][ T6502] dev_attr_show+0x52/0xa0 [ 144.611475][ T6502] ? __pfx_dev_attr_show+0x10/0x10 [ 144.611523][ T6502] sysfs_kf_seq_show+0x217/0x3a0 [ 144.611589][ T6502] seq_read_iter+0x32f/0x1270 [ 144.611625][ T6502] ? lock_acquire+0x1b1/0x370 [ 144.611675][ T6502] kernfs_fop_read_iter+0x46c/0x610 [ 144.611728][ T6502] ? rw_verify_area+0xce/0x6d0 [ 144.611761][ T6502] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 144.611817][ T6502] vfs_read+0x825/0xb30 [ 144.611861][ T6502] ? __pfx_vfs_read+0x10/0x10 [ 144.611934][ T6502] ksys_read+0x12a/0x250 [ 144.611984][ T6502] ? __pfx_ksys_read+0x10/0x10 [ 144.612033][ T6502] ? rcu_is_watching+0x12/0xc0 [ 144.612082][ T6502] do_syscall_64+0x10b/0xf80 [ 144.612126][ T6502] ? clear_bhb_loop+0x40/0x90 [ 144.612177][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.612214][ T6502] RIP: 0033:0x7f656b19cdd9 [ 144.612239][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.612277][ T6502] RSP: 002b:00007f656c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.612305][ T6502] RAX: ffffffffffffffda RBX: 00007f656b415fa0 RCX: 00007f656b19cdd9 [ 144.612323][ T6502] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 144.612340][ T6502] RBP: 00007f656b232d69 R08: 0000000000000000 R09: 0000000000000000 [ 144.612357][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.612375][ T6502] R13: 00007f656b416038 R14: 00007f656b415fa0 R15: 00007ffe72152708 [ 144.612411][ T6502] [ 145.005412][ T6502] ACPI Error: Could not allocate size 7 (20251212/exnames-68) [ 145.014075][ T6502] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 147.872125][ T6557] zswap: compressor not available [ 148.783666][ T6584] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 149.791425][ T6609] FAULT_INJECTION: forcing a failure. [ 149.791425][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 149.841414][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(full) [ 149.841457][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.841476][ T6609] Call Trace: [ 149.841486][ T6609] [ 149.841497][ T6609] dump_stack_lvl+0x100/0x190 [ 149.841549][ T6609] should_fail_ex.cold+0x5/0xa [ 149.841591][ T6609] should_failslab+0xc2/0x120 [ 149.841630][ T6609] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 149.841681][ T6609] ? alloc_empty_file+0x5b/0x1c0 [ 149.841738][ T6609] alloc_empty_file+0x5b/0x1c0 [ 149.841787][ T6609] alloc_file_pseudo+0x13a/0x230 [ 149.841837][ T6609] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 149.841886][ T6609] ? alloc_fd+0x476/0x790 [ 149.841930][ T6609] sock_alloc_file+0x50/0x210 [ 149.841970][ T6609] __sys_socket+0x1c0/0x260 [ 149.842013][ T6609] ? exc_page_fault+0x6f/0xd0 [ 149.842052][ T6609] ? __pfx___sys_socket+0x10/0x10 [ 149.842109][ T6609] __x64_sys_socket+0x72/0xb0 [ 149.842154][ T6609] ? lockdep_hardirqs_on+0x78/0x100 [ 149.842198][ T6609] do_syscall_64+0x10b/0xf80 [ 149.842237][ T6609] ? clear_bhb_loop+0x40/0x90 [ 149.842277][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.842310][ T6609] RIP: 0033:0x7f7b35f9e647 [ 149.842336][ T6609] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.842364][ T6609] RSP: 002b:00007f7b36dd1f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 149.842395][ T6609] RAX: ffffffffffffffda RBX: 00007f7b36216090 RCX: 00007f7b35f9e647 [ 149.842414][ T6609] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 149.842438][ T6609] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 149.842456][ T6609] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 149.842474][ T6609] R13: 00007f7b36216128 R14: 00007f7b36216090 R15: 00007ffcfd654598 [ 149.842511][ T6609] [ 150.464595][ T6623] sg_write: data in/out 1685414155/2147479510 bytes for SCSI command 0x3-- guessing data in; [ 150.464595][ T6623] program syz.0.175 not setting count and/or reply_len properly [ 150.740470][ T6632] FAULT_INJECTION: forcing a failure. [ 150.740470][ T6632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.767533][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.3.178 Not tainted syzkaller #0 PREEMPT(full) [ 150.767575][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.767592][ T6632] Call Trace: [ 150.767603][ T6632] [ 150.767614][ T6632] dump_stack_lvl+0x100/0x190 [ 150.767656][ T6632] should_fail_ex.cold+0x5/0xa [ 150.767698][ T6632] _copy_to_user+0x32/0xd0 [ 150.767754][ T6632] simple_read_from_buffer+0xcb/0x170 [ 150.767796][ T6632] proc_fail_nth_read+0x1af/0x230 [ 150.767857][ T6632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.767908][ T6632] ? rw_verify_area+0xce/0x6d0 [ 150.767938][ T6632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.767994][ T6632] vfs_read+0x1e4/0xb30 [ 150.768035][ T6632] ? __pfx_vfs_read+0x10/0x10 [ 150.768070][ T6632] ? __fget_files+0x215/0x3d0 [ 150.768115][ T6632] ? __fget_files+0x21f/0x3d0 [ 150.768165][ T6632] ksys_read+0x12a/0x250 [ 150.768208][ T6632] ? __pfx_ksys_read+0x10/0x10 [ 150.768247][ T6632] ? rcu_is_watching+0x12/0xc0 [ 150.768293][ T6632] do_syscall_64+0x10b/0xf80 [ 150.768333][ T6632] ? clear_bhb_loop+0x40/0x90 [ 150.768373][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.768407][ T6632] RIP: 0033:0x7f63bf35d60e [ 150.768433][ T6632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.768463][ T6632] RSP: 002b:00007f63c01bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.768493][ T6632] RAX: ffffffffffffffda RBX: 00007f63c01bc6c0 RCX: 00007f63bf35d60e [ 150.768513][ T6632] RDX: 000000000000000f RSI: 00007f63c01bc0a0 RDI: 0000000000000003 [ 150.768531][ T6632] RBP: 00007f63c01bc090 R08: 0000000000000000 R09: 0000000000000000 [ 150.768550][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.768568][ T6632] R13: 00007f63bf616038 R14: 00007f63bf615fa0 R15: 00007ffcc3b3ceb8 [ 150.768610][ T6632] [ 152.378310][ T6668] block2mtd: illegal erase size [ 153.282121][ T6685] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 154.375085][ T6705] random: crng reseeded on system resumption [ 154.791583][ T6706] netlink: 342 bytes leftover after parsing attributes in process `syz.3.198'. [ 156.031275][ T6723] random: crng reseeded on system resumption [ 156.056317][ T6723] FAULT_INJECTION: forcing a failure. [ 156.056317][ T6723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.096309][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(full) [ 156.096356][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.096376][ T6723] Call Trace: [ 156.096387][ T6723] [ 156.096400][ T6723] dump_stack_lvl+0x100/0x190 [ 156.096443][ T6723] should_fail_ex.cold+0x5/0xa [ 156.096482][ T6723] ? prepare_alloc_pages+0x16d/0x5f0 [ 156.096531][ T6723] should_fail_alloc_page+0xeb/0x140 [ 156.096576][ T6723] prepare_alloc_pages+0x1f0/0x5f0 [ 156.096628][ T6723] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 156.096701][ T6723] ? stack_trace_save+0x8e/0xc0 [ 156.096749][ T6723] ? __pfx_stack_trace_save+0x10/0x10 [ 156.096795][ T6723] ? arch_stack_walk+0xa6/0xf0 [ 156.096839][ T6723] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.096898][ T6723] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.096960][ T6723] ? kasan_save_stack+0x30/0x50 [ 156.096991][ T6723] ? kasan_save_track+0x14/0x30 [ 156.097022][ T6723] ? __kasan_kmalloc+0xaa/0xb0 [ 156.097052][ T6723] ? memory_bm_create+0x14d/0xba0 [ 156.097110][ T6723] ? do_syscall_64+0x10b/0xf80 [ 156.097153][ T6723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.097204][ T6723] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.097258][ T6723] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.097311][ T6723] ? policy_nodemask+0xed/0x4f0 [ 156.097355][ T6723] alloc_pages_mpol+0x1fb/0x540 [ 156.097397][ T6723] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 156.097450][ T6723] alloc_pages_noprof+0x1a/0x160 [ 156.097497][ T6723] get_zeroed_page_noprof+0x18/0xb0 [ 156.097540][ T6723] get_image_page+0x18/0x1a0 [ 156.097585][ T6723] memory_bm_create+0x432/0xba0 [ 156.097649][ T6723] create_basic_memory_bitmaps+0x10b/0x350 [ 156.097706][ T6723] snapshot_open+0x230/0x2a0 [ 156.097758][ T6723] ? __pfx_snapshot_open+0x10/0x10 [ 156.097816][ T6723] misc_open+0x26d/0x450 [ 156.097858][ T6723] ? __pfx_misc_open+0x10/0x10 [ 156.097904][ T6723] chrdev_open+0x234/0x6a0 [ 156.097947][ T6723] ? __pfx_apparmor_file_open+0x10/0x10 [ 156.098002][ T6723] ? __pfx_chrdev_open+0x10/0x10 [ 156.098049][ T6723] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 156.098105][ T6723] do_dentry_open+0x6d8/0x1660 [ 156.098148][ T6723] ? __pfx_chrdev_open+0x10/0x10 [ 156.098318][ T6723] vfs_open+0x82/0x3f0 [ 156.098384][ T6723] path_openat+0x208c/0x31a0 [ 156.098443][ T6723] ? __pfx_path_openat+0x10/0x10 [ 156.098502][ T6723] do_file_open+0x20e/0x430 [ 156.098549][ T6723] ? __pfx_do_file_open+0x10/0x10 [ 156.098624][ T6723] ? alloc_fd+0x476/0x790 [ 156.098668][ T6723] ? do_getname+0x191/0x390 [ 156.098723][ T6723] do_sys_openat2+0x10d/0x1e0 [ 156.098778][ T6723] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.098833][ T6723] ? find_held_lock+0x2b/0x80 [ 156.098893][ T6723] __x64_sys_openat+0x12d/0x210 [ 156.098951][ T6723] ? __pfx___x64_sys_openat+0x10/0x10 [ 156.099046][ T6723] ? rcu_is_watching+0x12/0xc0 [ 156.099096][ T6723] do_syscall_64+0x10b/0xf80 [ 156.099163][ T6723] ? clear_bhb_loop+0x40/0x90 [ 156.099211][ T6723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.099251][ T6723] RIP: 0033:0x7f63bf39cdd9 [ 156.099282][ T6723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.099316][ T6723] RSP: 002b:00007f63c019b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.099349][ T6723] RAX: ffffffffffffffda RBX: 00007f63bf616090 RCX: 00007f63bf39cdd9 [ 156.099371][ T6723] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 156.099393][ T6723] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 156.099411][ T6723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.099432][ T6723] R13: 00007f63bf616128 R14: 00007f63bf616090 R15: 00007ffcc3b3ceb8 [ 156.099477][ T6723] [ 157.391152][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 157.880794][ T6740] FAULT_INJECTION: forcing a failure. [ 157.880794][ T6740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.902208][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.0.206 Not tainted syzkaller #0 PREEMPT(full) [ 157.902253][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.902272][ T6740] Call Trace: [ 157.902283][ T6740] [ 157.902295][ T6740] dump_stack_lvl+0x100/0x190 [ 157.902343][ T6740] should_fail_ex.cold+0x5/0xa [ 157.902383][ T6740] ? prepare_alloc_pages+0x16d/0x5f0 [ 157.902430][ T6740] should_fail_alloc_page+0xeb/0x140 [ 157.902474][ T6740] prepare_alloc_pages+0x1f0/0x5f0 [ 157.902522][ T6740] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 157.902589][ T6740] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 157.902639][ T6740] ? mark_held_locks+0x40/0x70 [ 157.902672][ T6740] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 157.902718][ T6740] ? lockdep_hardirqs_on+0x78/0x100 [ 157.902763][ T6740] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 157.902811][ T6740] ? rcu_is_watching+0x12/0xc0 [ 157.902853][ T6740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.902916][ T6740] ? __lock_acquire+0x4a5/0x2630 [ 157.902948][ T6740] ? __lock_acquire+0x4a5/0x2630 [ 157.902977][ T6740] ? css_rstat_updated+0x1ce/0x5a0 [ 157.903044][ T6740] ? lock_acquire+0x1b1/0x370 [ 157.903086][ T6740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.903141][ T6740] ? policy_nodemask+0xed/0x4f0 [ 157.903184][ T6740] alloc_pages_mpol+0x1fb/0x540 [ 157.903225][ T6740] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 157.903270][ T6740] ? __lock_acquire+0x4a5/0x2630 [ 157.903306][ T6740] folio_alloc_mpol_noprof+0x36/0x260 [ 157.903352][ T6740] vma_alloc_folio_noprof+0xed/0x1d0 [ 157.903396][ T6740] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 157.903455][ T6740] do_anonymous_page+0xb46/0x2050 [ 157.903512][ T6740] ? rcu_read_unlock+0x2d/0xb0 [ 157.903584][ T6740] __handle_mm_fault+0x1d2c/0x2a00 [ 157.903645][ T6740] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.903687][ T6740] ? __pfx___handle_mm_fault+0x10/0x10 [ 157.903739][ T6740] ? pte_offset_map_lock+0x174/0x320 [ 157.903776][ T6740] ? find_held_lock+0x2b/0x80 [ 157.903824][ T6740] ? follow_page_pte+0x4d0/0x13f0 [ 157.903870][ T6740] handle_mm_fault+0x36d/0xa20 [ 157.903931][ T6740] __get_user_pages+0x1178/0x32a0 [ 157.903980][ T6740] ? __pfx___get_user_pages+0x10/0x10 [ 157.904026][ T6740] populate_vma_page_range+0x267/0x3f0 [ 157.904074][ T6740] ? __pfx_populate_vma_page_range+0x10/0x10 [ 157.904112][ T6740] ? __pfx_find_vma_intersection+0x10/0x10 [ 157.904149][ T6740] ? do_mmap+0x93f/0x12f0 [ 157.904188][ T6740] __mm_populate+0x107/0x3a0 [ 157.904227][ T6740] ? __pfx___mm_populate+0x10/0x10 [ 157.904266][ T6740] ? up_write+0x28c/0x4f0 [ 157.904300][ T6740] vm_mmap_pgoff+0x37f/0x470 [ 157.904342][ T6740] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 157.904385][ T6740] ? do_futex+0x192/0x350 [ 157.904417][ T6740] ? __pfx_do_futex+0x10/0x10 [ 157.904449][ T6740] ? fd_install+0x223/0x580 [ 157.904490][ T6740] ksys_mmap_pgoff+0xe4/0x610 [ 157.904531][ T6740] ? __x64_sys_futex+0x358/0x4d0 [ 157.904566][ T6740] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 157.904605][ T6740] ? xfd_validate_state+0x129/0x190 [ 157.904649][ T6740] __x64_sys_mmap+0x125/0x190 [ 157.904691][ T6740] do_syscall_64+0x10b/0xf80 [ 157.904735][ T6740] ? clear_bhb_loop+0x40/0x90 [ 157.904776][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.904810][ T6740] RIP: 0033:0x7f656b19cdd9 [ 157.904837][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.904865][ T6740] RSP: 002b:00007f656c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 157.904893][ T6740] RAX: ffffffffffffffda RBX: 00007f656b415fa0 RCX: 00007f656b19cdd9 [ 157.904912][ T6740] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 157.904929][ T6740] RBP: 00007f656b232d69 R08: 0000000000000047 R09: 0000000000008000 [ 157.904946][ T6740] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 157.904965][ T6740] R13: 00007f656b416038 R14: 00007f656b415fa0 R15: 00007ffe72152708 [ 157.905009][ T6740] [ 157.967029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 159.688950][ T6777] random: crng reseeded on system resumption [ 161.974405][ T6816] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 161.974405][ T6816] M' is too long [ 162.008331][ T6816] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 162.008331][ T6816] W ' is too long [ 163.189316][ T6844] random: crng reseeded on system resumption [ 166.690911][ T6900] sd 0:0:1:0: PR command failed: 1026 [ 166.744084][ T6900] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 166.808049][ T6900] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 169.682550][ T6956] __vm_enough_memory: pid: 6956, comm: syz.1.251, bytes: 4398046457856 not enough memory for the allocation [ 169.769430][ T6957] netlink: 186 bytes leftover after parsing attributes in process `syz.2.250'. [ 169.875847][ T6959] sd 0:0:1:0: PR command failed: 1026 [ 169.889443][ T6959] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 169.905051][ T6959] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 170.673285][ T6980] netlink: 198 bytes leftover after parsing attributes in process `syz.2.258'. [ 170.847283][ T5640] block nbd0: Receive control failed (result -32) [ 171.077424][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 171.727774][ T6993] Invalid ELF header magic: != ELF [ 172.787028][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 174.410315][ T7049] FAULT_INJECTION: forcing a failure. [ 174.410315][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 174.456761][ T7049] CPU: 1 UID: 0 PID: 7049 Comm: syz.0.276 Not tainted syzkaller #0 PREEMPT(full) [ 174.456805][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.456820][ T7049] Call Trace: [ 174.456833][ T7049] [ 174.456843][ T7049] dump_stack_lvl+0x100/0x190 [ 174.456877][ T7049] should_fail_ex.cold+0x5/0xa [ 174.456908][ T7049] ? constrain_params_by_rules+0x175/0xcc0 [ 174.456953][ T7049] should_failslab+0xc2/0x120 [ 174.456992][ T7049] __kmalloc_noprof+0xe0/0x850 [ 174.457059][ T7049] ? unwind_get_return_address+0x59/0xa0 [ 174.457102][ T7049] constrain_params_by_rules+0x175/0xcc0 [ 174.457160][ T7049] ? stack_trace_save+0x8e/0xc0 [ 174.457243][ T7049] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 174.457309][ T7049] ? __kasan_kmalloc+0xaa/0xb0 [ 174.457331][ T7049] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 174.457369][ T7049] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 174.457404][ T7049] ? snd_pcm_oss_sync+0x1de/0x840 [ 174.457454][ T7049] ? snd_interval_refine+0x2d0/0x580 [ 174.457489][ T7049] snd_pcm_hw_refine+0x7e7/0xad0 [ 174.457536][ T7049] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 174.457589][ T7049] ? snd_interval_refine+0x2d0/0x580 [ 174.457621][ T7049] snd_pcm_oss_change_params_locked+0xdb3/0x39f0 [ 174.457672][ T7049] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 174.457709][ T7049] ? __pfx___mutex_lock+0x10/0x10 [ 174.457743][ T7049] ? task_work_add+0x201/0x3b0 [ 174.457806][ T7049] ? __pfx_task_work_add+0x10/0x10 [ 174.457863][ T7049] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 174.457934][ T7049] snd_pcm_oss_sync+0x1de/0x840 [ 174.457989][ T7049] snd_pcm_oss_release+0x238/0x300 [ 174.458039][ T7049] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 174.458097][ T7049] __fput+0x3ff/0xb50 [ 174.458154][ T7049] task_work_run+0x150/0x240 [ 174.458189][ T7049] ? __pfx_task_work_run+0x10/0x10 [ 174.458226][ T7049] ? rcu_is_watching+0x12/0xc0 [ 174.458281][ T7049] exit_to_user_mode_loop+0x100/0x4a0 [ 174.458313][ T7049] ? do_syscall_64+0x519/0xf80 [ 174.458361][ T7049] do_syscall_64+0x6f2/0xf80 [ 174.458403][ T7049] ? clear_bhb_loop+0x40/0x90 [ 174.458445][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.458479][ T7049] RIP: 0033:0x7f656b19cdd9 [ 174.458507][ T7049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.458540][ T7049] RSP: 002b:00007f656c05f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 174.458572][ T7049] RAX: 0000000000000000 RBX: 00007f656b415fa0 RCX: 00007f656b19cdd9 [ 174.458593][ T7049] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 174.458612][ T7049] RBP: 00007f656b232d69 R08: 0000000000000000 R09: 0000000000000000 [ 174.458631][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.458650][ T7049] R13: 00007f656b416038 R14: 00007f656b415fa0 R15: 00007ffe72152708 [ 174.458692][ T7049] [ 176.264808][ T7080] [ 177.134772][ T7107] random: crng reseeded on system resumption [ 177.244789][ T7107] hub 1-0:1.0: USB hub found [ 177.266863][ T7107] hub 1-0:1.0: 1 port detected [ 179.602672][ T7143] FAULT_INJECTION: forcing a failure. [ 179.602672][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 179.649141][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT(full) [ 179.649186][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.649206][ T7143] Call Trace: [ 179.649217][ T7143] [ 179.649231][ T7143] dump_stack_lvl+0x100/0x190 [ 179.649275][ T7143] should_fail_ex.cold+0x5/0xa [ 179.649319][ T7143] should_failslab+0xc2/0x120 [ 179.649360][ T7143] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 179.649416][ T7143] ? security_file_alloc+0x34/0x2c0 [ 179.649454][ T7143] ? trace_kmem_cache_alloc+0xd5/0x100 [ 179.649502][ T7143] security_file_alloc+0x34/0x2c0 [ 179.649542][ T7143] init_file+0x95/0x480 [ 179.649596][ T7143] alloc_empty_file+0x79/0x1c0 [ 179.649648][ T7143] path_openat+0xe8/0x31a0 [ 179.649691][ T7143] ? kasan_save_stack+0x3f/0x50 [ 179.649722][ T7143] ? kasan_save_stack+0x30/0x50 [ 179.649752][ T7143] ? kasan_save_track+0x14/0x30 [ 179.649783][ T7143] ? __kasan_slab_alloc+0x89/0x90 [ 179.649825][ T7143] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 179.649879][ T7143] ? do_getname+0x35/0x390 [ 179.649930][ T7143] ? do_syscall_64+0x10b/0xf80 [ 179.649972][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.650013][ T7143] ? __pfx_path_openat+0x10/0x10 [ 179.650071][ T7143] do_file_open+0x20e/0x430 [ 179.650117][ T7143] ? __pfx_do_file_open+0x10/0x10 [ 179.650190][ T7143] ? _raw_spin_unlock+0x28/0x50 [ 179.650227][ T7143] ? alloc_fd+0x476/0x790 [ 179.650279][ T7143] do_sys_openat2+0x10d/0x1e0 [ 179.650332][ T7143] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.650387][ T7143] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 179.650440][ T7143] __x64_sys_open+0xfe/0x1d0 [ 179.650493][ T7143] ? __pfx___x64_sys_open+0x10/0x10 [ 179.650554][ T7143] ? rcu_is_watching+0x12/0xc0 [ 179.650602][ T7143] do_syscall_64+0x10b/0xf80 [ 179.650649][ T7143] ? clear_bhb_loop+0x40/0x90 [ 179.650691][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.650726][ T7143] RIP: 0033:0x7f63bf39cdd9 [ 179.650754][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.650787][ T7143] RSP: 002b:00007f63c01bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 179.650824][ T7143] RAX: ffffffffffffffda RBX: 00007f63bf615fa0 RCX: 00007f63bf39cdd9 [ 179.650845][ T7143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 179.650865][ T7143] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 179.650884][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.650903][ T7143] R13: 00007f63bf616038 R14: 00007f63bf615fa0 R15: 00007ffcc3b3ceb8 [ 179.650945][ T7143] [ 180.053614][ T7159] binder: 7158:7159 ioctl 40046210 0 returned -14 [ 182.638492][ T7204] ovs_: entered promiscuous mode [ 184.483177][ T7242] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 184.551077][ T7256] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 184.817717][ T7232] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.285223][ T7294] random: crng reseeded on system resumption [ 189.689715][ T7378] netlink: 334 bytes leftover after parsing attributes in process `syz.0.348'. [ 189.707887][ T7378] netlink: 334 bytes leftover after parsing attributes in process `syz.0.348'. [ 189.734116][ T7378] netlink: 334 bytes leftover after parsing attributes in process `syz.0.348'. [ 189.753762][ T7377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'. [ 189.779165][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.790936][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.803969][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.818534][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.417469][ T7410] FAULT_INJECTION: forcing a failure. [ 192.417469][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 192.549037][ T7410] CPU: 0 UID: 0 PID: 7410 Comm: syz.3.357 Not tainted syzkaller #0 PREEMPT(full) [ 192.549081][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.549101][ T7410] Call Trace: [ 192.549111][ T7410] [ 192.549123][ T7410] dump_stack_lvl+0x100/0x190 [ 192.549165][ T7410] should_fail_ex.cold+0x5/0xa [ 192.549209][ T7410] ? __register_sysctl_table+0xac/0x1650 [ 192.549254][ T7410] should_failslab+0xc2/0x120 [ 192.549296][ T7410] __kmalloc_noprof+0xe0/0x850 [ 192.549362][ T7410] __register_sysctl_table+0xac/0x1650 [ 192.549403][ T7410] ? rcu_is_watching+0x12/0xc0 [ 192.549446][ T7410] ? trace_kmalloc+0xe3/0x110 [ 192.549491][ T7410] ? __pfx___register_sysctl_table+0x10/0x10 [ 192.549537][ T7410] ? rcu_is_cpu_rrupt_from_idle+0x241/0x270 [ 192.549586][ T7410] ? __asan_memcpy+0x3c/0x60 [ 192.549648][ T7410] register_pidns_sysctls+0x11d/0x1c0 [ 192.549683][ T7410] ? __ns_common_init+0x299/0x4b0 [ 192.549737][ T7410] copy_pid_ns+0x680/0x10a0 [ 192.549805][ T7410] ? __pfx_copy_pid_ns+0x10/0x10 [ 192.549864][ T7410] ? __pfx_copy_mnt_ns+0x10/0x10 [ 192.549920][ T7410] ? create_new_namespaces+0x30/0xac0 [ 192.549974][ T7410] create_new_namespaces+0x2aa/0xac0 [ 192.550029][ T7410] unshare_nsproxy_namespaces+0xf2/0x220 [ 192.550080][ T7410] ksys_unshare+0x438/0xab0 [ 192.550136][ T7410] ? __pfx_ksys_unshare+0x10/0x10 [ 192.550185][ T7410] ? xfd_validate_state+0x129/0x190 [ 192.550220][ T7410] ? ksys_write+0x1ac/0x250 [ 192.550271][ T7410] __x64_sys_unshare+0x31/0x40 [ 192.550323][ T7410] do_syscall_64+0x10b/0xf80 [ 192.550366][ T7410] ? clear_bhb_loop+0x40/0x90 [ 192.550409][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.550444][ T7410] RIP: 0033:0x7f63bf39cdd9 [ 192.550472][ T7410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.550505][ T7410] RSP: 002b:00007f63c017a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.550537][ T7410] RAX: ffffffffffffffda RBX: 00007f63bf616180 RCX: 00007f63bf39cdd9 [ 192.550559][ T7410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 192.550579][ T7410] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 192.550599][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.550619][ T7410] R13: 00007f63bf616218 R14: 00007f63bf616180 R15: 00007ffcc3b3ceb8 [ 192.550661][ T7410] [ 194.508437][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518065][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.694245][ T7445] Unable to find swap-space signature [ 195.048229][ T7445] zswap: compressor not available [ 195.344707][ T7464] mmap: syz.0.371 (7464): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 195.764032][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 198.603999][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 199.606449][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 200.603052][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 200.853576][ T7559] phram: not enough arguments [ 201.555044][ T7586] FAULT_INJECTION: forcing a failure. [ 201.555044][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 201.590301][ T7586] CPU: 1 UID: 0 PID: 7586 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(full) [ 201.590339][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.590356][ T7586] Call Trace: [ 201.590366][ T7586] [ 201.590376][ T7586] dump_stack_lvl+0x100/0x190 [ 201.590414][ T7586] should_fail_ex.cold+0x5/0xa [ 201.590452][ T7586] should_failslab+0xc2/0x120 [ 201.590486][ T7586] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 201.590533][ T7586] ? mas_preallocate+0x1105/0x14a0 [ 201.590585][ T7586] mas_preallocate+0x1105/0x14a0 [ 201.590637][ T7586] ? __pfx_mas_preallocate+0x10/0x10 [ 201.590689][ T7586] ? vm_area_alloc+0x1f/0x160 [ 201.590735][ T7586] ? lockdep_init_map_type+0x5c/0x250 [ 201.590769][ T7586] __mmap_region+0x124a/0x2da0 [ 201.590820][ T7586] ? __pfx___mmap_region+0x10/0x10 [ 201.590863][ T7586] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 201.590917][ T7586] ? post_alloc_hook+0x140/0x170 [ 201.590973][ T7586] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.591075][ T7586] ? folio_free_swap+0x60a/0x9f0 [ 201.591108][ T7586] ? folio_free_swap+0x60a/0x9f0 [ 201.591202][ T7586] ? do_swap_page+0xd43/0x6180 [ 201.591257][ T7586] mmap_region+0x35d/0x620 [ 201.591285][ T7586] ? rcu_is_watching+0x12/0xc0 [ 201.591321][ T7586] ? __pfx_mmap_region+0x10/0x10 [ 201.591352][ T7586] ? cap_mmap_addr+0x4b/0x120 [ 201.591395][ T7586] ? bpf_lsm_mmap_addr+0x9/0x30 [ 201.591422][ T7586] ? security_mmap_addr+0x71/0x1e0 [ 201.591456][ T7586] ? __get_unmapped_area+0x255/0x3e0 [ 201.591496][ T7586] do_mmap+0xc63/0x12f0 [ 201.591539][ T7586] ? __pfx_do_mmap+0x10/0x10 [ 201.591575][ T7586] ? __pfx_down_write_killable+0x10/0x10 [ 201.591628][ T7586] vm_mmap_pgoff+0x29e/0x470 [ 201.591672][ T7586] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 201.591717][ T7586] ? find_held_lock+0x2b/0x80 [ 201.591754][ T7586] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 201.591794][ T7586] ksys_mmap_pgoff+0xe4/0x610 [ 201.591830][ T7586] ? find_held_lock+0x2b/0x80 [ 201.591868][ T7586] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 201.591900][ T7586] ? exc_page_fault+0x6f/0xd0 [ 201.591946][ T7586] __x64_sys_mmap+0x125/0x190 [ 201.591982][ T7586] do_syscall_64+0x10b/0xf80 [ 201.592019][ T7586] ? clear_bhb_loop+0x40/0x90 [ 201.592056][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.592086][ T7586] RIP: 0033:0x7f656b19cdd9 [ 201.592111][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.592138][ T7586] RSP: 002b:00007f656c03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 201.592165][ T7586] RAX: ffffffffffffffda RBX: 00007f656b416090 RCX: 00007f656b19cdd9 [ 201.592193][ T7586] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 201.592210][ T7586] RBP: 00007f656b232d69 R08: 0000000000000002 R09: 0000000000008000 [ 201.592227][ T7586] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 201.592244][ T7586] R13: 00007f656b416128 R14: 00007f656b416090 R15: 00007ffe72152708 [ 201.592282][ T7586] [ 201.606205][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 202.032925][ T7592] random: crng reseeded on system resumption [ 202.602712][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 203.608509][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 204.610215][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 205.602739][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 206.602719][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 207.602688][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 207.880040][ T7685] NFSD: Failed to start, no listeners configured. [ 208.602669][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 209.408456][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.418850][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.428882][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.438824][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.451456][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.461835][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.483073][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.519933][ T7734] futex_wake_op: syz.3.435 tries to shift op by -2048; fix this program [ 209.539169][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.551681][ T7734] futex_wake_op: syz.3.435 tries to shift op by -2048; fix this program [ 209.602666][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 209.604203][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.643170][ T7751] netlink: 'syz.2.440': attribute type 4 has an invalid length. [ 209.654221][ T7751] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 209.681025][ T7742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.438'. [ 210.063090][ T7758] FAULT_INJECTION: forcing a failure. [ 210.063090][ T7758] name failslab, interval 1, probability 0, space 0, times 0 [ 210.089864][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.3.443 Not tainted syzkaller #0 PREEMPT(full) [ 210.089908][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.089927][ T7758] Call Trace: [ 210.089938][ T7758] [ 210.089951][ T7758] dump_stack_lvl+0x100/0x190 [ 210.089996][ T7758] should_fail_ex.cold+0x5/0xa [ 210.090041][ T7758] should_failslab+0xc2/0x120 [ 210.090081][ T7758] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 210.090135][ T7758] ? ptlock_alloc+0x1f/0x70 [ 210.090195][ T7758] ptlock_alloc+0x1f/0x70 [ 210.090243][ T7758] pte_alloc_one+0x82/0x3d0 [ 210.090291][ T7758] __pte_alloc+0x6d/0x3e0 [ 210.090329][ T7758] ? __pfx___pte_alloc+0x10/0x10 [ 210.090366][ T7758] ? __pfx___might_resched+0x10/0x10 [ 210.090403][ T7758] ? copy_page_range+0x1c2d/0x5b00 [ 210.090461][ T7758] copy_page_range+0x3dbb/0x5b00 [ 210.090617][ T7758] ? mas_wr_store_entry+0xa1/0x1e80 [ 210.090671][ T7758] ? __pfx_copy_page_range+0x10/0x10 [ 210.090755][ T7758] ? __pfx___might_resched+0x10/0x10 [ 210.090823][ T7758] ? up_write+0x28c/0x4f0 [ 210.090864][ T7758] dup_mmap+0xd25/0x2180 [ 210.090925][ T7758] ? __pfx_dup_mmap+0x10/0x10 [ 210.090971][ T7758] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 210.091018][ T7758] ? __lock_acquire+0x4a5/0x2630 [ 210.091059][ T7758] ? find_held_lock+0x2b/0x80 [ 210.091100][ T7758] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 210.091158][ T7758] copy_process+0x6c63/0x7e00 [ 210.091198][ T7758] ? futex_unqueue+0x133/0x2c0 [ 210.091243][ T7758] ? __pfx_copy_process+0x10/0x10 [ 210.091292][ T7758] ? _copy_from_user+0x59/0xd0 [ 210.091347][ T7758] kernel_clone+0x12e/0x9c0 [ 210.091390][ T7758] ? __pfx_kernel_clone+0x10/0x10 [ 210.091437][ T7758] ? __pfx_futex_wait+0x10/0x10 [ 210.091483][ T7758] __do_sys_clone3+0x214/0x290 [ 210.091529][ T7758] ? __pfx___do_sys_clone3+0x10/0x10 [ 210.091585][ T7758] ? __do_sys_capset+0xfb/0x460 [ 210.091639][ T7758] ? rcu_is_watching+0x12/0xc0 [ 210.091678][ T7758] do_syscall_64+0x10b/0xf80 [ 210.091714][ T7758] ? clear_bhb_loop+0x40/0x90 [ 210.091748][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.091777][ T7758] RIP: 0033:0x7f63bf39cdd9 [ 210.091801][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.091839][ T7758] RSP: 002b:00007f63c01bbef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 210.091867][ T7758] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f63bf39cdd9 [ 210.091886][ T7758] RDX: 00007f63c01bbf10 RSI: 0000000000000058 RDI: 00007f63c01bbf10 [ 210.091904][ T7758] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000058 [ 210.091921][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.091938][ T7758] R13: 00007f63bf616038 R14: 00007f63bf615fa0 R15: 00007ffcc3b3ceb8 [ 210.091974][ T7758] [ 211.604205][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) syzkaller syzkaller login: [ 212.602715][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 213.602716][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 214.170190][ T7857] zswap: compressor not available [ 214.309944][ T7867] random: crng reseeded on system resumption [ 214.602687][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 215.064696][ T5640] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 215.602740][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 215.670547][ T7863] syz.2.462 (7863) used greatest stack depth: 18704 bytes left [ 216.602608][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 217.075738][ T7904] __nla_validate_parse: 7 callbacks suppressed [ 217.075763][ T7904] netlink: 350 bytes leftover after parsing attributes in process `syz.1.472'. [ 217.603127][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 217.864176][ T7910] zswap: compressor not available [ 218.068317][ T7921] random: crng reseeded on system resumption [ 218.132846][ T7923] futex_wake_op: syz.2.476 tries to shift op by -2048; fix this program [ 218.155112][ T7923] futex_wake_op: syz.2.476 tries to shift op by -2048; fix this program [ 218.602675][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 219.602551][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 220.602661][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 221.300547][ T7980] zram0: detected capacity change from 0 to 8 [ 221.602676][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 221.709322][ T7990] random: crng reseeded on system resumption [ 221.846821][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 222.147732][ T8002] netlink: 342 bytes leftover after parsing attributes in process `syz.0.493'. [ 222.184870][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 222.186131][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 222.192708][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 222.200068][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 222.602968][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 223.604193][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 224.344791][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 224.576534][ T8045] FAULT_INJECTION: forcing a failure. [ 224.576534][ T8045] name failslab, interval 1, probability 0, space 0, times 0 [ 224.602949][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 224.632002][ T8065] Invalid ELF header magic: != ELF [ 224.632754][ T8045] CPU: 1 UID: 0 PID: 8045 Comm: syz.3.501 Not tainted syzkaller #0 PREEMPT(full) [ 224.632888][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.632921][ T8045] Call Trace: [ 224.632952][ T8045] [ 224.632985][ T8045] dump_stack_lvl+0x100/0x190 [ 224.633098][ T8045] should_fail_ex.cold+0x5/0xa [ 224.633246][ T8045] ? tomoyo_realpath_from_path+0xb6/0x690 [ 224.633367][ T8045] should_failslab+0xc2/0x120 [ 224.633477][ T8045] __kmalloc_noprof+0xe0/0x850 [ 224.633645][ T8045] ? kfree+0x1dd/0x6c0 [ 224.633802][ T8045] tomoyo_realpath_from_path+0xb6/0x690 [ 224.633931][ T8045] ? putname+0xb6/0x110 [ 224.634053][ T8045] tomoyo_realpath_nofollow+0xe0/0x100 [ 224.634170][ T8045] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 224.634289][ T8045] ? tomoyo_profile+0x47/0x60 [ 224.634410][ T8045] ? tomoyo_init_request_info+0x101/0x370 [ 224.634557][ T8045] tomoyo_find_next_domain+0x2a8/0x2010 [ 224.634738][ T8045] ? __pfx___kernel_read+0x10/0x10 [ 224.634834][ T8045] ? __pfx___might_resched+0x10/0x10 [ 224.634986][ T8045] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 224.635190][ T8045] tomoyo_bprm_check_security+0x12d/0x1d0 [ 224.635319][ T8045] ? tomoyo_bprm_check_security+0x11f/0x1d0 [ 224.635453][ T8045] security_bprm_check+0x87/0x1e0 [ 224.635583][ T8045] bprm_execve+0x845/0x1650 [ 224.635705][ T8045] ? __pfx_bprm_execve+0x10/0x10 [ 224.635801][ T8045] ? copy_string_kernel+0x339/0x3f0 [ 224.635922][ T8045] do_execveat_common.isra.0+0x4a5/0x580 [ 224.636043][ T8045] __x64_sys_execve+0x93/0xd0 [ 224.636132][ T8045] do_syscall_64+0x10b/0xf80 [ 224.636250][ T8045] ? clear_bhb_loop+0x40/0x90 [ 224.636389][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.636484][ T8045] RIP: 0033:0x7f63bf39cdd9 [ 224.636558][ T8045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.636632][ T8045] RSP: 002b:00007f63c019b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 224.636718][ T8045] RAX: ffffffffffffffda RBX: 00007f63bf616090 RCX: 00007f63bf39cdd9 [ 224.636780][ T8045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 224.636834][ T8045] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 224.636889][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.636942][ T8045] R13: 00007f63bf616128 R14: 00007f63bf616090 R15: 00007ffcc3b3ceb8 [ 224.637060][ T8045] [ 224.665747][ T8045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.602680][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 226.424697][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 226.602667][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 227.133300][ T30] audit: type=1800 audit(4294967385.020:2): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.510" name="dbroot" dev="configfs" ino=20239 res=0 errno=0 [ 227.602696][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 227.899753][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.516'. [ 228.602701][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 229.602679][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 230.602687][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 231.503350][ T8172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.526'. [ 231.602572][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 231.619991][ T8183] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 232.602728][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 233.070353][ T8235] random: crng reseeded on system resumption [ 233.539007][ T5643] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 233.548898][ T5643] Bluetooth: hci0: unexpected subevent 0x0c length: 118 > 5 [ 233.602656][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 234.045410][ T8261] pim6reg: entered allmulticast mode [ 234.602688][ T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 235.375257][ T8295] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 235.439705][ T8292] nbd: couldn't find device at index 33904 [ 235.602666][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 236.603706][ T992] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 236.950137][ T8332] random: crng reseeded on system resumption [ 237.605181][ T5734] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 239.398991][ T8380] NFSD: Failed to start, no listeners configured. [ 240.864189][ T8414] random: crng reseeded on system resumption [ 241.910274][ T8437] capability: warning: `syz.3.577' uses deprecated v2 capabilities in a way that may be insecure [ 241.958592][ T8425] zswap: compressor not available [ 242.046471][ T8435] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 242.092184][ T8434] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 243.771637][ T8478] random: crng reseeded on system resumption [ 246.418339][ T8518] hub 1-0:1.0: USB hub found [ 246.478636][ T8518] hub 1-0:1.0: 1 port detected [ 246.932273][ T8539] random: crng reseeded on system resumption [ 247.235406][ T8535] input: f as /devices/virtual/input/input7 [ 247.251087][ T30] audit: type=1800 audit(4294967305.530:3): pid=8543 uid=3 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.602" name="file0" dev="tmpfs" ino=750 res=0 errno=0 [ 248.683442][ T8571] hub 1-0:1.0: USB hub found [ 248.712024][ T8571] hub 1-0:1.0: 1 port detected [ 249.927611][ T8540] Process accounting resumed [ 250.458780][ T8612] netlink: 186 bytes leftover after parsing attributes in process `syz.3.616'. [ 255.949429][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.959916][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.276144][ T8756] cgroup: fork rejected by pids controller in /syz3 [ 258.285913][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.656'. [ 258.310127][ T8960] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 261.868347][ T9028] netlink: 13 bytes leftover after parsing attributes in process `syz.0.670'. [ 262.309131][ T9040] capability: warning: `syz.0.673' uses 32-bit capabilities (legacy support in use) [ 262.461530][ T9051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 263.458760][ T9069] zswap: compressor not available [ 265.898209][ T9112] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 266.016161][ T9112] FAULT_INJECTION: forcing a failure. [ 266.016161][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 266.071648][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.3.690 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.071700][ T9112] Tainted: [L]=SOFTLOCKUP [ 266.071713][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.071740][ T9112] Call Trace: [ 266.071752][ T9112] [ 266.071765][ T9112] dump_stack_lvl+0x100/0x190 [ 266.071809][ T9112] should_fail_ex.cold+0x5/0xa [ 266.071867][ T9112] should_failslab+0xc2/0x120 [ 266.071917][ T9112] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 266.071973][ T9112] ? acpi_ut_create_update_state+0x72/0x130 [ 266.072016][ T9112] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 266.072067][ T9112] acpi_ut_create_update_state+0x72/0x130 [ 266.072107][ T9112] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 266.072165][ T9112] acpi_ut_update_object_reference+0x32f/0x800 [ 266.072221][ T9112] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 266.072276][ T9112] ? __pfx_acpi_ut_trace+0x10/0x10 [ 266.072316][ T9112] ? __pfx_acpi_ut_trace+0x10/0x10 [ 266.072357][ T9112] ? acpi_ut_status_exit+0x111/0x1c0 [ 266.072408][ T9112] acpi_ut_add_reference+0x80/0x170 [ 266.072454][ T9112] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 266.072511][ T9112] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 266.072565][ T9112] ? acpi_ut_acquire_mutex+0x2d7/0x500 [ 266.072625][ T9112] acpi_ns_evaluate+0xb95/0x1670 [ 266.072676][ T9112] ? kasan_save_track+0x14/0x30 [ 266.072713][ T9112] acpi_ut_evaluate_object+0xf7/0x610 [ 266.072770][ T9112] acpi_rs_get_prt_method_data+0xa0/0x150 [ 266.072822][ T9112] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 266.072872][ T9112] ? acpi_ut_status_exit+0x111/0x1c0 [ 266.072928][ T9112] ? acpi_rs_validate_parameters+0x104/0x210 [ 266.072984][ T9112] acpi_get_irq_routing_table+0xb8/0x140 [ 266.073037][ T9112] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 266.073098][ T9112] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 266.073156][ T9112] ? preempt_schedule_thunk+0x16/0x30 [ 266.073213][ T9112] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 266.073277][ T9112] acpi_pci_irq_lookup+0x8e/0x6b0 [ 266.073329][ T9112] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 266.073379][ T9112] ? pci_write+0x122/0x1d0 [ 266.073444][ T9112] acpi_pci_irq_enable+0x1f5/0x6f0 [ 266.073491][ T9112] ? pci_write_config_word+0xc9/0x110 [ 266.073549][ T9112] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 266.073607][ T9112] ? __pfx_pci_enable_resources+0x10/0x10 [ 266.073652][ T9112] ? enable_store+0xd3/0x260 [ 266.073711][ T9112] pcibios_enable_device+0xb6/0xe0 [ 266.073747][ T9112] do_pci_enable_device+0x21f/0x4a0 [ 266.073805][ T9112] ? __pfx_do_pci_enable_device+0x10/0x10 [ 266.073857][ T9112] ? pci_update_current_state+0x102/0x240 [ 266.073916][ T9112] ? __pfx_pci_update_current_state+0x10/0x10 [ 266.073980][ T9112] pci_enable_device_flags+0x27c/0x370 [ 266.074024][ T9112] enable_store+0x1e1/0x260 [ 266.074083][ T9112] ? __pfx_enable_store+0x10/0x10 [ 266.074139][ T9112] ? find_held_lock+0x2b/0x80 [ 266.074187][ T9112] ? sysfs_file_kobj+0xe4/0x290 [ 266.074243][ T9112] ? sysfs_file_kobj+0xe4/0x290 [ 266.074307][ T9112] ? __pfx_enable_store+0x10/0x10 [ 266.074363][ T9112] dev_attr_store+0x58/0x80 [ 266.074410][ T9112] ? __pfx_dev_attr_store+0x10/0x10 [ 266.074450][ T9112] sysfs_kf_write+0xf2/0x150 [ 266.074507][ T9112] kernfs_fop_write_iter+0x3e0/0x5f0 [ 266.074554][ T9112] ? __pfx_sysfs_kf_write+0x10/0x10 [ 266.074615][ T9112] vfs_write+0x6ac/0x1070 [ 266.074657][ T9112] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 266.074712][ T9112] ? __pfx_vfs_write+0x10/0x10 [ 266.074781][ T9112] ksys_write+0x12a/0x250 [ 266.074821][ T9112] ? __pfx_ksys_write+0x10/0x10 [ 266.074865][ T9112] ? rcu_is_watching+0x12/0xc0 [ 266.074954][ T9112] do_syscall_64+0x10b/0xf80 [ 266.074999][ T9112] ? clear_bhb_loop+0x40/0x90 [ 266.075044][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.075079][ T9112] RIP: 0033:0x7f63bf39cdd9 [ 266.075109][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.075143][ T9112] RSP: 002b:00007f63c01bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.075185][ T9112] RAX: ffffffffffffffda RBX: 00007f63bf615fa0 RCX: 00007f63bf39cdd9 [ 266.075208][ T9112] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000008 [ 266.075228][ T9112] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 266.075248][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.075268][ T9112] R13: 00007f63bf616038 R14: 00007f63bf615fa0 R15: 00007ffcc3b3ceb8 [ 266.075313][ T9112] [ 266.642487][ T9112] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20251212/utdelete-651) [ 266.855672][ T9112] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 266.917805][ T9112] pci 0000:00:01.3: PCI INT A: no GSI [ 268.311544][ T9129] Process accounting resumed [ 268.326644][ T5643] Bluetooth: hci2: unexpected subevent 0x03 length: 123 > 9 [ 270.377353][ T9184] random: crng reseeded on system resumption [ 272.792517][ T9230] vivid-007: ================= START STATUS ================= [ 272.813117][ T9230] vivid-007: Generate PTS: true [ 272.831929][ T9230] vivid-007: Generate SCR: true [ 272.837536][ T9230] tpg source WxH: 320x240 (Y'CbCr) [ 272.849310][ T9230] tpg field: 1 [ 272.852763][ T9230] tpg crop: (0,0)/320x240 [ 272.859276][ T9230] tpg compose: (0,0)/320x240 [ 272.866338][ T9230] tpg colorspace: 8 [ 272.870214][ T9230] tpg transfer function: 0/0 [ 272.878393][ T9230] tpg Y'CbCr encoding: 0/0 [ 272.883123][ T9230] tpg quantization: 0/0 [ 272.889064][ T9230] tpg RGB range: 0/2 [ 272.893427][ T9230] vivid-007: ================== END STATUS ================== [ 273.047050][ T9230] random: crng reseeded on system resumption [ 274.552119][ T9275] TCP: TCP_TX_DELAY enabled [ 280.918858][ T9359] Process accounting resumed [ 281.793804][ T9401] Format for deleting device is "id" (uint). [ 281.973743][ T9406] can: request_module (can-proto-3) failed. [ 283.486202][ T9440] FAULT_INJECTION: forcing a failure. [ 283.486202][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 283.548008][ T9440] CPU: 0 UID: 0 PID: 9440 Comm: syz.3.757 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.548061][ T9440] Tainted: [L]=SOFTLOCKUP [ 283.548072][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.548091][ T9440] Call Trace: [ 283.548102][ T9440] [ 283.548114][ T9440] dump_stack_lvl+0x100/0x190 [ 283.548155][ T9440] should_fail_ex.cold+0x5/0xa [ 283.548200][ T9440] should_failslab+0xc2/0x120 [ 283.548245][ T9440] __kmalloc_cache_noprof+0x7a/0x6f0 [ 283.548295][ T9440] ? ring_buffer_read_start+0x149/0x450 [ 283.548347][ T9440] ring_buffer_read_start+0x149/0x450 [ 283.548396][ T9440] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 283.548440][ T9440] ? lockdep_init_map_type+0x5c/0x250 [ 283.548478][ T9440] ? ring_buffer_overruns+0x14e/0x1a0 [ 283.548519][ T9440] __tracing_open+0x74e/0xa80 [ 283.548561][ T9440] tracing_open+0x26b/0x4d0 [ 283.548600][ T9440] do_dentry_open+0x6d8/0x1660 [ 283.548642][ T9440] ? __pfx_tracing_open+0x10/0x10 [ 283.548688][ T9440] vfs_open+0x82/0x3f0 [ 283.548744][ T9440] path_openat+0x208c/0x31a0 [ 283.548802][ T9440] ? __pfx_path_openat+0x10/0x10 [ 283.548861][ T9440] do_file_open+0x20e/0x430 [ 283.548908][ T9440] ? __pfx_do_file_open+0x10/0x10 [ 283.548988][ T9440] ? alloc_fd+0x476/0x790 [ 283.549035][ T9440] ? do_getname+0x191/0x390 [ 283.549121][ T9440] do_sys_openat2+0x10d/0x1e0 [ 283.549173][ T9440] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.549229][ T9440] ? __fget_files+0x21f/0x3d0 [ 283.549285][ T9440] __x64_sys_openat+0x12d/0x210 [ 283.549341][ T9440] ? __pfx___x64_sys_openat+0x10/0x10 [ 283.549402][ T9440] ? rcu_is_watching+0x12/0xc0 [ 283.549448][ T9440] do_syscall_64+0x10b/0xf80 [ 283.549491][ T9440] ? clear_bhb_loop+0x40/0x90 [ 283.549533][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.549567][ T9440] RIP: 0033:0x7f63bf39cdd9 [ 283.549596][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.549628][ T9440] RSP: 002b:00007f63c01bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 283.549659][ T9440] RAX: ffffffffffffffda RBX: 00007f63bf615fa0 RCX: 00007f63bf39cdd9 [ 283.549679][ T9440] RDX: 1a6b75d638828712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 283.549700][ T9440] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 283.549718][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.549737][ T9440] R13: 00007f63bf616038 R14: 00007f63bf615fa0 R15: 00007ffcc3b3ceb8 [ 283.549779][ T9440] [ 283.814852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 284.919152][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'. [ 284.943709][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'. [ 284.976385][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'. [ 285.018446][ T9475] FAULT_INJECTION: forcing a failure. [ 285.018446][ T9475] name failslab, interval 1, probability 0, space 0, times 0 [ 285.041758][ T9475] CPU: 0 UID: 0 PID: 9475 Comm: syz.2.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.041822][ T9475] Tainted: [L]=SOFTLOCKUP [ 285.041832][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.041850][ T9475] Call Trace: [ 285.041869][ T9475] [ 285.041880][ T9475] dump_stack_lvl+0x100/0x190 [ 285.041893][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'. [ 285.041925][ T9475] should_fail_ex.cold+0x5/0xa [ 285.042044][ T9475] ? tomoyo_encode2+0xfb/0x3c0 [ 285.042191][ T9475] should_failslab+0xc2/0x120 [ 285.042290][ T9475] __kmalloc_noprof+0xe0/0x850 [ 285.042421][ T9475] ? d_absolute_path+0x136/0x1b0 [ 285.042526][ T9475] tomoyo_encode2+0xfb/0x3c0 [ 285.042627][ T9475] tomoyo_encode+0x29/0x50 [ 285.042733][ T9475] tomoyo_realpath_from_path+0x18c/0x690 [ 285.042885][ T9475] tomoyo_path_number_perm+0x23c/0x580 [ 285.042971][ T9475] ? tomoyo_path_number_perm+0x22e/0x580 [ 285.043068][ T9475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.043192][ T9475] ? do_raw_spin_lock+0x128/0x260 [ 285.043293][ T9475] ? find_held_lock+0x2b/0x80 [ 285.043503][ T9475] ? current_check_access_path+0x269/0x430 [ 285.043620][ T9475] ? __pfx_current_check_access_path+0x10/0x10 [ 285.043710][ T9475] ? do_raw_spin_unlock+0x145/0x1e0 [ 285.043827][ T9475] ? simple_lookup+0x105/0x1d0 [ 285.043959][ T9475] ? lookup_one_qstr_excl+0xaf/0x250 [ 285.044088][ T9475] tomoyo_path_mkdir+0x9b/0xe0 [ 285.044209][ T9475] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 285.044360][ T9475] security_path_mkdir+0x154/0x2e0 [ 285.044471][ T9475] filename_mkdirat+0x168/0x5e0 [ 285.044586][ T9475] ? __pfx_filename_mkdirat+0x10/0x10 [ 285.044701][ T9475] ? strncpy_from_user+0x19d/0x2d0 [ 285.044818][ T9475] ? do_getname+0x191/0x390 [ 285.044992][ T9475] __x64_sys_mkdir+0x6b/0x90 [ 285.045103][ T9475] do_syscall_64+0x10b/0xf80 [ 285.045210][ T9475] ? clear_bhb_loop+0x40/0x90 [ 285.045317][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.045416][ T9475] RIP: 0033:0x7f7b35f9cdd9 [ 285.045483][ T9475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.045560][ T9475] RSP: 002b:00007f7b36dd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 285.045630][ T9475] RAX: ffffffffffffffda RBX: 00007f7b36216090 RCX: 00007f7b35f9cdd9 [ 285.045684][ T9475] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000300 [ 285.045737][ T9475] RBP: 00007f7b36032d69 R08: 0000000000000000 R09: 0000000000000000 [ 285.045791][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.045843][ T9475] R13: 00007f7b36216128 R14: 00007f7b36216090 R15: 00007ffcfd654598 [ 285.045965][ T9475] [ 285.401494][ T9475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.500417][ T9469] Process accounting resumed [ 286.097868][ T9502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 289.376527][ T9567] netlink: 342 bytes leftover after parsing attributes in process `syz.2.783'. [ 296.348787][ T9712] bond0: no command found in slaves file - use +ifname or -ifname [ 297.212612][ T9730] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 298.240613][ T9753] random: crng reseeded on system resumption [ 300.296786][ T9743] Process accounting paused [ 303.219064][ T9841] random: crng reseeded on system resumption [ 306.200832][ T5643] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 306.976104][ T9882] WARNING! power/level is deprecated; use power/control instead [ 310.106711][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 311.208769][ T9959] netlink: 330 bytes leftover after parsing attributes in process `syz.1.864'. [ 311.673361][ T9914] Process accounting paused [ 316.130624][T10039] zram: Cannot change disksize for initialized device [ 317.389929][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.402534][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.792847][T10072] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 318.006518][T10080] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 318.955121][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 320.163131][T10121] random: crng reseeded on system resumption [ 320.283627][T10124] openvswitch: ovs_: Dropping previously announced user features [ 322.970566][T10165] FAULT_INJECTION: forcing a failure. [ 322.970566][T10165] name fail_futex, interval 1, probability 0, space 0, times 0 [ 323.018439][T10165] CPU: 1 UID: 0 PID: 10165 Comm: syz.0.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.018487][T10165] Tainted: [L]=SOFTLOCKUP [ 323.018497][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.018514][T10165] Call Trace: [ 323.018524][T10165] [ 323.018535][T10165] dump_stack_lvl+0x100/0x190 [ 323.018574][T10165] should_fail_ex.cold+0x5/0xa [ 323.018608][T10165] ? rcu_is_watching+0x12/0xc0 [ 323.018651][T10165] get_futex_key+0x1d2/0x1510 [ 323.018687][T10165] ? __pfx_get_futex_key+0x10/0x10 [ 323.018731][T10165] futex_wait_setup+0x83/0x510 [ 323.018778][T10165] __futex_wait+0x19f/0x300 [ 323.018825][T10165] ? __pfx___futex_wait+0x10/0x10 [ 323.018867][T10165] ? __pfx_futex_wake_mark+0x10/0x10 [ 323.018908][T10165] ? find_held_lock+0x2b/0x80 [ 323.018943][T10165] ? futex_wake+0x456/0x530 [ 323.018984][T10165] futex_wait+0xe6/0x370 [ 323.019020][T10165] ? __pfx_futex_wait+0x10/0x10 [ 323.019074][T10165] ? proc_id_connector+0x2ed/0x650 [ 323.019123][T10165] do_futex+0x1ef/0x350 [ 323.019153][T10165] ? __pfx_do_futex+0x10/0x10 [ 323.019182][T10165] ? find_held_lock+0x2b/0x80 [ 323.019216][T10165] ? setid_policy_lookup+0x10c/0x350 [ 323.019256][T10165] __x64_sys_futex+0x34f/0x4d0 [ 323.019290][T10165] ? __pfx___x64_sys_futex+0x10/0x10 [ 323.019319][T10165] ? set_cred_ucounts+0x10f/0x200 [ 323.019354][T10165] ? rcu_is_watching+0x12/0xc0 [ 323.019397][T10165] do_syscall_64+0x10b/0xf80 [ 323.019432][T10165] ? clear_bhb_loop+0x40/0x90 [ 323.019465][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.019493][T10165] RIP: 0033:0x7f656b19cdd9 [ 323.019514][T10165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.019540][T10165] RSP: 002b:00007f656bfdb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 323.019565][T10165] RAX: ffffffffffffffda RBX: 00007f656b416368 RCX: 00007f656b19cdd9 [ 323.019583][T10165] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f656b416368 [ 323.019598][T10165] RBP: 00007f656b416360 R08: 0000000000000000 R09: 0000000000000000 [ 323.019614][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.019630][T10165] R13: 00007f656b4163f8 R14: 00007ffe72152620 R15: 00007ffe72152708 [ 323.019663][T10165] [ 326.116282][ T5643] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 326.116327][ T5643] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 326.134192][ T5643] Bluetooth: hci0: Unknown advertising packet type: 0x3e [ 326.134258][ T5643] Bluetooth: hci0: adv larger than maximum supported [ 326.141684][ T5643] Bluetooth: hci0: Unknown advertising packet type: 0x52 [ 326.148538][ T5643] Bluetooth: hci0: adv larger than maximum supported [ 326.155783][ T5643] Bluetooth: hci0: Malformed LE Event: 0x0d [ 326.692625][T10245] netlink: 'syz.1.922': attribute type 27 has an invalid length. [ 326.702796][T10244] FAULT_INJECTION: forcing a failure. [ 326.702796][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 326.727601][T10244] CPU: 1 UID: 0 PID: 10244 Comm: syz.3.921 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.727654][T10244] Tainted: [L]=SOFTLOCKUP [ 326.727665][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.727684][T10244] Call Trace: [ 326.727694][T10244] [ 326.727706][T10244] dump_stack_lvl+0x100/0x190 [ 326.727748][T10244] should_fail_ex.cold+0x5/0xa [ 326.727792][T10244] should_failslab+0xc2/0x120 [ 326.727831][T10244] __kmalloc_cache_noprof+0x7a/0x6f0 [ 326.727907][T10244] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 326.727970][T10244] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 326.728020][T10244] ? trace_contention_end+0xc5/0x170 [ 326.728061][T10244] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 326.728121][T10244] ? kasan_quarantine_put+0x104/0x240 [ 326.728178][T10244] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 326.728229][T10244] ? __pfx___mutex_lock+0x10/0x10 [ 326.728274][T10244] ? find_held_lock+0x2b/0x80 [ 326.728317][T10244] ? tomoyo_path_number_perm+0x28f/0x580 [ 326.728352][T10244] ? tomoyo_path_number_perm+0x28f/0x580 [ 326.728398][T10244] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 326.728436][T10244] ? futex_wait+0x11e/0x370 [ 326.728488][T10244] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 326.728547][T10244] snd_pcm_oss_get_formats+0x7d/0x350 [ 326.728595][T10244] ? do_vfs_ioctl+0x226/0x13e0 [ 326.728626][T10244] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 326.728683][T10244] snd_pcm_oss_ioctl+0x1795/0x37c0 [ 326.728735][T10244] ? find_held_lock+0x2b/0x80 [ 326.728777][T10244] ? __fget_files+0x215/0x3d0 [ 326.728811][T10244] ? hook_file_ioctl_common+0x149/0x410 [ 326.728848][T10244] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 326.728899][T10244] ? __fget_files+0x21f/0x3d0 [ 326.728940][T10244] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 326.728990][T10244] __x64_sys_ioctl+0x18e/0x210 [ 326.729023][T10244] do_syscall_64+0x10b/0xf80 [ 326.729063][T10244] ? clear_bhb_loop+0x40/0x90 [ 326.729109][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.729143][T10244] RIP: 0033:0x7f63bf39cdd9 [ 326.729169][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.729201][T10244] RSP: 002b:00007f63c019b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.729232][T10244] RAX: ffffffffffffffda RBX: 00007f63bf616090 RCX: 00007f63bf39cdd9 [ 326.729254][T10244] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000003 [ 326.729273][T10244] RBP: 00007f63bf432d69 R08: 0000000000000000 R09: 0000000000000000 [ 326.729292][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.729311][T10244] R13: 00007f63bf616128 R14: 00007f63bf616090 R15: 00007ffcc3b3ceb8 [ 326.729355][T10244] [ 327.144599][T10245] netlink: 334 bytes leftover after parsing attributes in process `syz.1.922'. [ 327.248345][T10250] random: crng reseeded on system resumption [ 327.331537][T10250] Restarting kernel threads ... [ 327.367948][T10250] Done restarting kernel threads. [ 329.451484][T10292] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 329.837324][T10301] Process accounting resumed [ 330.837262][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.844321][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.851841][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.864218][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.871373][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.878438][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.885439][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.892812][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.901366][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.908378][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.915681][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.923324][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.930423][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.937469][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.944514][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.951483][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.958663][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.965719][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.972802][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.979838][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.986985][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 330.994409][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.001384][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.008402][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.015399][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.022501][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.029495][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.036530][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.043469][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.050486][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.057469][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.064508][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.071480][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.078583][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.085685][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.092651][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.100244][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.107252][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.114265][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.121283][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.128426][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.135632][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.142690][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.150164][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.157196][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.164124][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.171244][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.178231][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.185206][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.192162][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.199689][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.206692][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.214062][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.221093][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.228401][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.235399][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.242359][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.249376][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.256380][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.263305][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.270340][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.277332][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.284265][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.291330][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.298304][ T5643] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 331.497055][T10327] Process accounting resumed [ 331.868300][T10337] phram: not enough arguments [ 332.113876][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 332.131545][T10347] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 332.140264][T10347] netlink: 'syz.1.945': attribute type 6 has an invalid length. [ 332.773264][T10357] netlink: Unknown conntrack attr (type=257, max=9) [ 333.219260][ T5643] Bluetooth: hci2: unexpected subevent 0x01 length: 126 > 18 [ 334.662794][T10400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'. [ 337.502505][ T5643] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 337.502549][ T5643] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 337.721723][T10455] binder: 10451:10455 ioctl 40046210 0 returned -14 [ 338.291678][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 342.579107][T10567] FAULT_INJECTION: forcing a failure. [ 342.579107][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 342.622010][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.0.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.622065][T10567] Tainted: [L]=SOFTLOCKUP [ 342.622086][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.622106][T10567] Call Trace: [ 342.622116][T10567] [ 342.622128][T10567] dump_stack_lvl+0x100/0x190 [ 342.622179][T10567] should_fail_ex.cold+0x5/0xa [ 342.622223][T10567] should_failslab+0xc2/0x120 [ 342.622264][T10567] __kmalloc_cache_noprof+0x7a/0x6f0 [ 342.622314][T10567] ? blk_mq_init_allocated_queue+0xcf/0x1440 [ 342.622373][T10567] blk_mq_init_allocated_queue+0xcf/0x1440 [ 342.622429][T10567] ? blk_alloc_queue+0x627/0x790 [ 342.622462][T10567] ? blk_alloc_queue+0x1a3/0x790 [ 342.622500][T10567] blk_mq_alloc_queue+0x1bd/0x290 [ 342.622544][T10567] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 342.622613][T10567] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 342.622669][T10567] __blk_mq_alloc_disk+0x29/0x120 [ 342.622715][T10567] loop_add+0x498/0xb60 [ 342.622767][T10567] ? __pfx_loop_add+0x10/0x10 [ 342.622842][T10567] ? find_held_lock+0x2b/0x80 [ 342.622887][T10567] ? __fget_files+0x215/0x3d0 [ 342.622932][T10567] loop_control_ioctl+0xae/0x620 [ 342.622985][T10567] ? __pfx_loop_control_ioctl+0x10/0x10 [ 342.623044][T10567] ? __pfx_loop_control_ioctl+0x10/0x10 [ 342.623107][T10567] __x64_sys_ioctl+0x18e/0x210 [ 342.623137][T10567] do_syscall_64+0x10b/0xf80 [ 342.623175][T10567] ? clear_bhb_loop+0x40/0x90 [ 342.623212][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.623244][T10567] RIP: 0033:0x7f656b19cdd9 [ 342.623269][T10567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.623300][T10567] RSP: 002b:00007f656c03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.623330][T10567] RAX: ffffffffffffffda RBX: 00007f656b416090 RCX: 00007f656b19cdd9 [ 342.623349][T10567] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000a [ 342.623367][T10567] RBP: 00007f656b232d69 R08: 0000000000000000 R09: 0000000000000000 [ 342.623384][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.623403][T10567] R13: 00007f656b416128 R14: 00007f656b416090 R15: 00007ffe72152708 [ 342.623444][T10567] [ 344.470282][T10584] netlink: 17 bytes leftover after parsing attributes in process `syz.0.994'. [ 345.376999][T10573] kexec: Could not allocate control_code_buffer [ 345.476219][T10601] openvswitch: netlink: Flow key attr not present in new flow. [ 349.162968][T10688] openvswitch: netlink: Message has 4 unknown bytes. [ 350.038396][T10698] ecryptfs_miscdev_write: Invalid packet size [0] [ 351.740393][T10741] sysfs_service_op_store: Client not running :-5: [ 352.411023][T10748] FAULT_INJECTION: forcing a failure. [ 352.411023][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 352.445631][T10748] CPU: 1 UID: 0 PID: 10748 Comm: syz.2.1022 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.445687][T10748] Tainted: [L]=SOFTLOCKUP [ 352.445699][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.445719][T10748] Call Trace: [ 352.445730][T10748] [ 352.445743][T10748] dump_stack_lvl+0x100/0x190 [ 352.445790][T10748] should_fail_ex.cold+0x5/0xa [ 352.445836][T10748] should_failslab+0xc2/0x120 [ 352.445877][T10748] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 352.445932][T10748] ? acpi_ut_create_thread_state+0x6d/0x170 [ 352.445970][T10748] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 352.446025][T10748] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 352.446091][T10748] acpi_ut_create_thread_state+0x6d/0x170 [ 352.446133][T10748] acpi_ps_parse_aml+0x12e/0x1120 [ 352.446183][T10748] ? acpi_ut_ptr_exit+0x10c/0x180 [ 352.446227][T10748] acpi_ps_execute_method+0x5c4/0xe90 [ 352.446273][T10748] acpi_ns_evaluate+0x640/0x1670 [ 352.446321][T10748] acpi_evaluate_object+0x420/0xe00 [ 352.446350][T10748] ? kasan_save_stack+0x30/0x50 [ 352.446376][T10748] ? kasan_save_track+0x14/0x30 [ 352.446402][T10748] ? __kasan_kmalloc+0xaa/0xb0 [ 352.446426][T10748] ? __kvmalloc_node_noprof+0x360/0xa00 [ 352.446458][T10748] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 352.446493][T10748] ? lock_acquire+0x1b1/0x370 [ 352.446529][T10748] acpi_evaluate_integer+0xdf/0x220 [ 352.446572][T10748] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 352.446628][T10748] ? __pfx_status_show+0x10/0x10 [ 352.446656][T10748] status_show+0xa0/0x120 [ 352.446683][T10748] ? __pfx_status_show+0x10/0x10 [ 352.446719][T10748] dev_attr_show+0x52/0xa0 [ 352.446756][T10748] ? __pfx_dev_attr_show+0x10/0x10 [ 352.446791][T10748] sysfs_kf_seq_show+0x217/0x3a0 [ 352.446844][T10748] seq_read_iter+0x32f/0x1270 [ 352.446874][T10748] ? lock_acquire+0x1b1/0x370 [ 352.446913][T10748] kernfs_fop_read_iter+0x46c/0x610 [ 352.446956][T10748] ? rw_verify_area+0xce/0x6d0 [ 352.446983][T10748] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 352.447028][T10748] vfs_read+0x825/0xb30 [ 352.447067][T10748] ? __pfx_vfs_read+0x10/0x10 [ 352.447125][T10748] ksys_read+0x12a/0x250 [ 352.447157][T10748] ? __pfx_ksys_read+0x10/0x10 [ 352.447192][T10748] ? rcu_is_watching+0x12/0xc0 [ 352.447233][T10748] do_syscall_64+0x10b/0xf80 [ 352.447271][T10748] ? clear_bhb_loop+0x40/0x90 [ 352.447306][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.447336][T10748] RIP: 0033:0x7f7b35f9cdd9 [ 352.447360][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.447390][T10748] RSP: 002b:00007f7b36df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.447417][T10748] RAX: ffffffffffffffda RBX: 00007f7b36215fa0 RCX: 00007f7b35f9cdd9 [ 352.447437][T10748] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 352.447455][T10748] RBP: 00007f7b36032d69 R08: 0000000000000000 R09: 0000000000000000 [ 352.447478][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.447496][T10748] R13: 00007f7b36216038 R14: 00007f7b36215fa0 R15: 00007ffcfd654598 [ 352.447532][T10748] [ 352.449677][T10748] ACPI Error: ffff888078c54000 walk still has a scope list (20251212/dswstate-694) [ 352.790119][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1022'. [ 353.525871][T10755] random: crng reseeded on system resumption [ 354.486820][T10775] random: crng reseeded on system resumption [ 355.159254][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 355.795639][T10790] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1032'. [ 360.724165][T10837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.757292][T10837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 360.901485][T10837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.922422][T10837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 360.974418][T10837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.994558][T10837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 361.026716][T10837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.053213][T10837] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 361.242686][T10837] Process accounting paused [ 361.822734][T10830] Process accounting paused [ 362.187212][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 362.907720][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 362.984641][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 363.065561][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 364.264977][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 364.998353][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 365.065249][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 365.144543][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 374.176433][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.193319][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.203545][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.220012][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.234874][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.392749][T10988] warning: `syz.0.1074' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 375.109395][ T30] audit: type=1800 audit(4294967342.220:4): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1076" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 376.248976][ T5643] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 376.340021][ T5643] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 376.347904][ T5640] Bluetooth: hci4: command tx timeout [ 376.355209][ T5643] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 376.380499][T11025] futex_wake_op: syz.1.1080 tries to shift op by -2048; fix this program [ 376.422597][T11025] futex_wake_op: syz.1.1080 tries to shift op by -2048; fix this program [ 378.424792][ T5643] Bluetooth: hci4: command tx timeout [ 378.836274][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.853608][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.212650][T10651] syz.3.999 (10651) used greatest stack depth: 18064 bytes left [ 379.282539][T10986] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.290148][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.301665][T10986] bridge_slave_0: entered allmulticast mode [ 379.322960][T10986] bridge_slave_0: entered promiscuous mode [ 379.352594][T10986] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.371707][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.393393][T10986] bridge_slave_1: entered allmulticast mode [ 379.414007][T10986] bridge_slave_1: entered promiscuous mode [ 379.807158][T10986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.894799][T10986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.252289][T10986] team0: Port device team_slave_0 added [ 380.439222][T10986] team0: Port device team_slave_1 added [ 380.505248][ T5643] Bluetooth: hci4: command tx timeout [ 380.692485][ T6298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.793869][T10986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.805189][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.832630][T10986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.905915][T10986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.913063][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.942260][T10986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.001866][ T6298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.120199][ T6298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.189100][T10986] hsr_slave_0: entered promiscuous mode [ 381.195974][T10986] hsr_slave_1: entered promiscuous mode [ 381.206205][T10986] debugfs: 'hsr0' already exists in 'hsr' [ 381.212040][T10986] Cannot create hsr debugfs directory [ 381.247086][ T6298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.693663][T11067] nfsd: Unknown parameter '' [ 382.043771][T10986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.092497][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.114261][T10986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.137689][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.173165][T10986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.211088][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.271097][ T6298] bridge_slave_1: left allmulticast mode [ 382.284463][ T6298] bridge_slave_1: left promiscuous mode [ 382.296221][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.346817][ T6298] bridge_slave_0: left allmulticast mode [ 382.358868][ T6298] bridge_slave_0: left promiscuous mode [ 382.373060][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.589905][ T5643] Bluetooth: hci4: command tx timeout [ 382.944116][ T5643] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 382.944173][ T5643] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 382.959690][ T5643] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 383.118798][ T6298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.132037][ T6298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.150239][ T6298] bond0 (unregistering): Released all slaves [ 383.183055][T10986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.227746][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.624024][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 384.544273][T10986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.642473][ T6298] hsr_slave_0: left promiscuous mode [ 384.674148][ T6298] hsr_slave_1: left promiscuous mode [ 384.692990][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.712553][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.756696][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.774475][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.890103][ T6298] veth1_macvtap: left promiscuous mode [ 384.919790][ T6298] veth0_macvtap: left promiscuous mode [ 384.937341][ T6298] veth1_vlan: left promiscuous mode [ 384.957464][ T6298] veth0_vlan: left promiscuous mode [ 385.350215][ T6298] pim6reg (unregistering): left allmulticast mode [ 385.581332][ T5643] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 385.748690][ T6298] team0 (unregistering): Port device team_slave_1 removed [ 385.779983][ T6298] team0 (unregistering): Port device team_slave_0 removed [ 385.984522][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 386.057674][T10986] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.194707][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.201966][T11106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.338273][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.345543][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.755129][T11204] zswap: compressor not available [ 387.840559][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 389.138451][T10986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.040922][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 390.217274][T10986] veth0_vlan: entered promiscuous mode [ 390.246980][T10986] veth1_vlan: entered promiscuous mode [ 390.340612][T10986] veth0_macvtap: entered promiscuous mode [ 390.383465][T10986] veth1_macvtap: entered promiscuous mode [ 390.450469][T10986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.479115][T10986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.527216][ T6300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.549819][ T6300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.577235][ T6300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.618466][ T6300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.846424][ T6298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.865878][ T6298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.955812][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.983734][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.578516][T11293] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 392.644679][T11289] Process accounting resumed [ 392.746900][T11328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1117'. [ 393.287426][ T30] audit: type=1800 audit(4294967360.410:5): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1118" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 396.142449][T11381] ================================================================== [ 396.150559][T11381] BUG: KASAN: use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 396.158959][T11381] Read of size 1 at addr ffff8880216de8f8 by task syz.2.1126/11381 [ 396.166890][T11381] [ 396.169254][T11381] CPU: 0 UID: 0 PID: 11381 Comm: syz.2.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.169300][T11381] Tainted: [L]=SOFTLOCKUP [ 396.169312][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.169331][T11381] Call Trace: [ 396.169343][T11381] [ 396.169355][T11381] dump_stack_lvl+0x100/0x190 [ 396.169391][T11381] print_report+0x13d/0x4b0 [ 396.169442][T11381] ? __virt_addr_valid+0x239/0x430 [ 396.169494][T11381] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 396.169547][T11381] kasan_report+0xdf/0x1d0 [ 396.169587][T11381] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 396.169643][T11381] acpi_ns_get_attached_object+0x148/0x1b0 [ 396.169695][T11381] acpi_ns_evaluate+0x158/0x1670 [ 396.169743][T11381] ? kasan_save_track+0x14/0x30 [ 396.169778][T11381] acpi_ut_evaluate_object+0xf7/0x610 [ 396.169832][T11381] acpi_rs_get_prt_method_data+0xa0/0x150 [ 396.169883][T11381] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 396.169934][T11381] ? acpi_ut_status_exit+0x111/0x1c0 [ 396.169978][T11381] ? acpi_rs_validate_parameters+0x104/0x210 [ 396.170042][T11381] acpi_get_irq_routing_table+0xb8/0x140 [ 396.170092][T11381] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 396.170146][T11381] ? do_raw_spin_lock+0x128/0x260 [ 396.170186][T11381] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 396.170238][T11381] ? mark_held_locks+0x40/0x70 [ 396.170271][T11381] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 396.170321][T11381] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.170363][T11381] ? pci_conf1_read+0x138/0x240 [ 396.170423][T11381] acpi_pci_irq_lookup+0x8e/0x6b0 [ 396.170474][T11381] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 396.170524][T11381] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 396.170577][T11381] ? look_up_lock_class+0x55/0x120 [ 396.170623][T11381] acpi_pci_irq_enable+0x1f5/0x6f0 [ 396.170672][T11381] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 396.170724][T11381] ? __pfx_pci_enable_resources+0x10/0x10 [ 396.170759][T11381] ? enable_store+0xd3/0x260 [ 396.170812][T11381] pcibios_enable_device+0xb6/0xe0 [ 396.170845][T11381] do_pci_enable_device+0x21f/0x4a0 [ 396.170897][T11381] ? __pfx_do_pci_enable_device+0x10/0x10 [ 396.170948][T11381] ? pci_update_current_state+0x102/0x240 [ 396.170997][T11381] ? __pfx_pci_update_current_state+0x10/0x10 [ 396.171047][T11381] pci_enable_device_flags+0x27c/0x370 [ 396.171078][T11381] enable_store+0x1e1/0x260 [ 396.171118][T11381] ? __pfx_enable_store+0x10/0x10 [ 396.171158][T11381] ? find_held_lock+0x2b/0x80 [ 396.171193][T11381] ? sysfs_file_kobj+0xe4/0x290 [ 396.171237][T11381] ? sysfs_file_kobj+0xe4/0x290 [ 396.171280][T11381] ? __pfx_enable_store+0x10/0x10 [ 396.171321][T11381] dev_attr_store+0x58/0x80 [ 396.171354][T11381] ? __pfx_dev_attr_store+0x10/0x10 [ 396.171387][T11381] sysfs_kf_write+0xf2/0x150 [ 396.171445][T11381] kernfs_fop_write_iter+0x3e0/0x5f0 [ 396.171482][T11381] ? __pfx_sysfs_kf_write+0x10/0x10 [ 396.171527][T11381] vfs_write+0x6ac/0x1070 [ 396.171557][T11381] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 396.171597][T11381] ? __pfx_vfs_write+0x10/0x10 [ 396.171638][T11381] ksys_write+0x12a/0x250 [ 396.171671][T11381] ? __pfx_ksys_write+0x10/0x10 [ 396.171703][T11381] ? rcu_is_watching+0x12/0xc0 [ 396.171737][T11381] do_syscall_64+0x10b/0xf80 [ 396.171772][T11381] ? clear_bhb_loop+0x40/0x90 [ 396.171804][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.171833][T11381] RIP: 0033:0x7f7b35f9cdd9 [ 396.171857][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.171890][T11381] RSP: 002b:00007f7b36df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.171919][T11381] RAX: ffffffffffffffda RBX: 00007f7b36215fa0 RCX: 00007f7b35f9cdd9 [ 396.171940][T11381] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000003 [ 396.171960][T11381] RBP: 00007f7b36032d69 R08: 0000000000000000 R09: 0000000000000000 [ 396.171979][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.171997][T11381] R13: 00007f7b36216038 R14: 00007f7b36215fa0 R15: 00007ffcfd654598 [ 396.172028][T11381] [ 396.172040][T11381] [ 396.574463][T11381] The buggy address belongs to the physical page: [ 396.580880][T11381] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4b pfn:0x216de [ 396.589744][T11381] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 396.596866][T11381] page_type: f0(buddy) [ 396.600954][T11381] raw: 00fff00000000000 ffffea0000ab0808 ffffea0000a7ef48 0000000000000000 [ 396.609571][T11381] raw: 000000000000004b 0000000000000000 00000000f0000000 0000000000000000 [ 396.618157][T11381] page dumped because: kasan: bad access detected [ 396.624584][T11381] page_owner tracks the page as freed [ 396.629954][T11381] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100cc2(GFP_HIGHUSER), pid 10859, tgid 10858 (syz.1.1050), ts 363170141420, free_ts 364039095485 [ 396.646405][T11381] post_alloc_hook+0x153/0x170 [ 396.651201][T11381] get_page_from_freelist+0x11a6/0x33b0 [ 396.656775][T11381] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 396.662698][T11381] alloc_pages_mpol+0x1fb/0x540 [ 396.667570][T11381] alloc_pages_noprof+0x1a/0x160 [ 396.672529][T11381] kimage_alloc_pages+0x72/0x380 [ 396.677493][T11381] kimage_alloc_page+0x232/0x910 [ 396.682456][T11381] kimage_load_segment+0x507/0xde0 [ 396.687595][T11381] do_kexec_load+0x58d/0x810 [ 396.692215][T11381] __x64_sys_kexec_load+0x1bf/0x230 [ 396.697458][T11381] do_syscall_64+0x10b/0xf80 [ 396.702069][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.707976][T11381] page last free pid 10859 tgid 10858 stack trace: [ 396.714482][T11381] __free_frozen_pages+0x747/0x1040 [ 396.719704][T11381] kimage_free+0x245/0x5a0 [ 396.724160][T11381] do_kexec_load+0x34c/0x810 [ 396.728774][T11381] __x64_sys_kexec_load+0x1bf/0x230 [ 396.733997][T11381] do_syscall_64+0x10b/0xf80 [ 396.738603][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.744515][T11381] [ 396.746858][T11381] Memory state around the buggy address: [ 396.752495][T11381] ffff8880216de780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 396.760579][T11381] ffff8880216de800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 396.768659][T11381] >ffff8880216de880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 396.776728][T11381] ^ [ 396.784709][T11381] ffff8880216de900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 396.792783][T11381] ffff8880216de980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 396.800851][T11381] ================================================================== [ 396.844480][T11381] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 396.851761][T11381] CPU: 1 UID: 0 PID: 11381 Comm: syz.2.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.862772][T11381] Tainted: [L]=SOFTLOCKUP [ 396.867144][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.877337][T11381] Call Trace: [ 396.880651][T11381] [ 396.883597][T11381] dump_stack_lvl+0x100/0x190 [ 396.888302][T11381] vpanic+0x552/0x970 [ 396.892314][T11381] ? __pfx_vpanic+0x10/0x10 [ 396.896856][T11381] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 396.902916][T11381] panic+0xd1/0xe0 [ 396.906704][T11381] ? __pfx_panic+0x10/0x10 [ 396.911180][T11381] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 396.917258][T11381] ? preempt_schedule_common+0x42/0xc0 [ 396.922797][T11381] check_panic_on_warn.cold+0x19/0x34 [ 396.928222][T11381] end_report.part.0+0x3a/0x90 [ 396.933022][T11381] kasan_report.cold+0xe/0x18 [ 396.937733][T11381] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 396.943750][T11381] acpi_ns_get_attached_object+0x148/0x1b0 [ 396.949591][T11381] acpi_ns_evaluate+0x158/0x1670 [ 396.954560][T11381] ? kasan_save_track+0x14/0x30 [ 396.959426][T11381] acpi_ut_evaluate_object+0xf7/0x610 [ 396.964829][T11381] acpi_rs_get_prt_method_data+0xa0/0x150 [ 396.970596][T11381] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 396.976996][T11381] ? acpi_ut_status_exit+0x111/0x1c0 [ 396.982312][T11381] ? acpi_rs_validate_parameters+0x104/0x210 [ 396.988328][T11381] acpi_get_irq_routing_table+0xb8/0x140 [ 396.994023][T11381] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 397.000298][T11381] ? do_raw_spin_lock+0x128/0x260 [ 397.005342][T11381] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 397.011183][T11381] ? mark_held_locks+0x40/0x70 [ 397.015979][T11381] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 397.022339][T11381] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 397.028169][T11381] ? pci_conf1_read+0x138/0x240 [ 397.033056][T11381] acpi_pci_irq_lookup+0x8e/0x6b0 [ 397.038146][T11381] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 397.043827][T11381] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 397.049928][T11381] ? look_up_lock_class+0x55/0x120 [ 397.055094][T11381] acpi_pci_irq_enable+0x1f5/0x6f0 [ 397.060245][T11381] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 397.065919][T11381] ? __pfx_pci_enable_resources+0x10/0x10 [ 397.071715][T11381] ? enable_store+0xd3/0x260 [ 397.076377][T11381] pcibios_enable_device+0xb6/0xe0 [ 397.081530][T11381] do_pci_enable_device+0x21f/0x4a0 [ 397.086761][T11381] ? __pfx_do_pci_enable_device+0x10/0x10 [ 397.092512][T11381] ? pci_update_current_state+0x102/0x240 [ 397.098272][T11381] ? __pfx_pci_update_current_state+0x10/0x10 [ 397.104385][T11381] pci_enable_device_flags+0x27c/0x370 [ 397.109890][T11381] enable_store+0x1e1/0x260 [ 397.114439][T11381] ? __pfx_enable_store+0x10/0x10 [ 397.119522][T11381] ? find_held_lock+0x2b/0x80 [ 397.124253][T11381] ? sysfs_file_kobj+0xe4/0x290 [ 397.129136][T11381] ? sysfs_file_kobj+0xe4/0x290 [ 397.134019][T11381] ? __pfx_enable_store+0x10/0x10 [ 397.139085][T11381] dev_attr_store+0x58/0x80 [ 397.143612][T11381] ? __pfx_dev_attr_store+0x10/0x10 [ 397.148836][T11381] sysfs_kf_write+0xf2/0x150 [ 397.153464][T11381] kernfs_fop_write_iter+0x3e0/0x5f0 [ 397.158802][T11381] ? __pfx_sysfs_kf_write+0x10/0x10 [ 397.164036][T11381] vfs_write+0x6ac/0x1070 [ 397.168382][T11381] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 397.174235][T11381] ? __pfx_vfs_write+0x10/0x10 [ 397.179055][T11381] ksys_write+0x12a/0x250 [ 397.183456][T11381] ? __pfx_ksys_write+0x10/0x10 [ 397.188328][T11381] ? rcu_is_watching+0x12/0xc0 [ 397.193119][T11381] do_syscall_64+0x10b/0xf80 [ 397.197734][T11381] ? clear_bhb_loop+0x40/0x90 [ 397.202466][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.208381][T11381] RIP: 0033:0x7f7b35f9cdd9 [ 397.212808][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.232433][T11381] RSP: 002b:00007f7b36df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.240869][T11381] RAX: ffffffffffffffda RBX: 00007f7b36215fa0 RCX: 00007f7b35f9cdd9 [ 397.248853][T11381] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000003 [ 397.256848][T11381] RBP: 00007f7b36032d69 R08: 0000000000000000 R09: 0000000000000000 [ 397.264833][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.272819][T11381] R13: 00007f7b36216038 R14: 00007f7b36215fa0 R15: 00007ffcfd654598 [ 397.280813][T11381] [ 397.284625][T11381] Kernel Offset: disabled [ 397.288968][T11381] Rebooting in 86400 seconds..