last executing test programs: 14m51.272698334s ago: executing program 1 (id=1939): r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r1, 0x0, r0, 0x0, 0x20000768, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1020009, 0xdf, 0x4000000eb1, 0xffffffffffffffff, 0x8000) clone$auto(0x801ff, 0x3, 0x0, 0x0, 0x80011) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/team_slave_0/mldv1_unsolicited_report_interval\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1fe) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) 14m51.105693772s ago: executing program 1 (id=1941): mmap$auto(0x0, 0x20009, 0xdf, 0x15, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_TARGET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="d3000002", @ANYRES16=r2, @ANYBLOB="040027bd7000fddbdf2508000000080015000200000008000d00ff070000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) (async) r3 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NET_DM_CMD_START(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10032abd7000fcdbdf6503000000080009000100000002000b0009000000"], 0x24}}, 0x4000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c40, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x8030ae7c, r0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) r6 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/schedstat\x00', 0x100800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(r5, r6, 0x100) (async) r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x4605, 0x0) (async) mincore$auto(0xffff, 0x74a, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/sunplus/remove_id\x00', 0xa081, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) read$auto(r8, 0x0, 0x20) (async) write$auto(0x3, 0x0, 0x81) (async) read$auto_proc_single_file_operations_base(r6, &(0x7f00000000c0)=""/14, 0xe) (async) socket(0x2a, 0x6, 0xfffffffe) 14m49.950122445s ago: executing program 1 (id=1945): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe39b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000002940)={0x2390, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x200, 0x2, 0x0, 0x1, [@typed={0x4, 0x17}, @generic="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"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@generic="75e78a31ab876748194924accd9ab0159619d3898b267eb888958471c8f68fcc22122aab7a96a3a1200019900d663eb95e56bb92309d66aaeb19d1b3b25c0245cf4b6e41ddb5e962ad6ea18c17d1e67f0220b639329c35649b3d756f18fba954a716278e0396010eddda7b3a17da1b821aecac8dc3b01d38260e5e98"]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@typed={0x5b, 0x143, 0x0, 0x0, @binary="35c8114f98d42a5a7a767d834b50d12029c276145fea8abb3f6af8a4a62ac03611d5241190deee79e2a83d298e92e3a9d011d6f1c30a89fd71c7c02ee4621012b1628a68c2abf569801a06890a4cac02a5b7fec2482b6a"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2400000}, @IPVS_CMD_ATTR_SERVICE={0x2079, 0x1, 0x0, 0x1, [@nested={0x22, 0x114, 0x0, 0x1, [@nested={0x4, 0xe2}, @nested={0x4, 0x19}, @generic="218d2113a80e61e85a54", @nested={0x4, 0x36}, @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@remote}]}, @generic="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", @generic="77e68820fac76e0a656d83ef83bbeb322794ea10af1c1996baf3c989d5d1d7c1123e4ea0e5f9b0b21b254b9bc4f67b5be194e09a6578da0fa27ad0035f2ac6b5036f2e21b0e55a20f688049b378694a539d73c1d5dc4fd064fc01689ea2992a02ad68261c78403026975cc55b7cbd45caa3098a3a2", @nested={0xfec, 0xfc, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0xeb}, @generic="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"]}, @generic="148a4465399aa3702093947707b54a7aa8bf2916d8b2b0ee38a119d41f5b2465ac6345e83df46b9d70383ff3a00d0a207640cef45bec", @typed={0x8, 0xf4, 0x0, 0x0, @uid}, @generic="566543b83fb961da8c123febba36aa2753e6f0937858364d101aa2e7804f2c50efe3b0851aa0cf1ad6d7e9e1d8756d40913ee52d32c1b53f7bf90e584dacb9ed61f975bccff61fc1781a114fc599e1ab0fa33e270cf8e77e7f11de5a6d708578a2007c6aa15670ea81ccb5f4f1feefc83af4dadc183edbfeddaaa8c416455a31322d774054d90e872c6f731dc87238e1e7763a71c06461a4563cd5be2d8b544dea29", @generic="4c291ca3ab1ed73ab66f305ed146154db65331d0bd71cd83503a1b5388916b085398cf6c12bd8a079a09b4e57c831449e8e66be26e6f4b2bacf27b5fed92ae68195db50ec9b331a66a02dfacf01e0f5aed0be392e1a95c81c6232a57db55fd8de8da9963e967f4b18744e8", @typed={0x8, 0x14, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8dd}]}, 0x2390}}, 0x1) socket(0xa, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x0, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b4a, 0x9) 14m48.711673575s ago: executing program 1 (id=1950): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) 14m48.255267207s ago: executing program 1 (id=1952): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r0, &(0x7f0000000000)=':\xbf+,\x8a}\x00', 0x0, 0x7bf, 0x1) mprotect$auto(0x0, 0x8000000000000001, 0x8) 14m47.017670516s ago: executing program 1 (id=1958): mmap$auto(0x0, 0x2020009, 0x8000000000000006, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) sendfile$auto(r0, r0, 0x0, 0x407ffff000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) timer_settime$auto(0x0, 0x2, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x2000000003}}, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x20000008) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D1\x00', 0x1202, 0x0) prctl$auto(0x401, 0x1, 0xffffffffffffffff, 0x1, 0x600) io_uring_register$auto(0xffffffffffffffff, 0x1, 0x0, 0xd880bb7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x72042, 0x0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, 0x0) io_uring_setup$auto(0x1000006, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setfsuid$auto(0x0) 14m31.753696534s ago: executing program 32 (id=1958): mmap$auto(0x0, 0x2020009, 0x8000000000000006, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) sendfile$auto(r0, r0, 0x0, 0x407ffff000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) timer_settime$auto(0x0, 0x2, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x2000000003}}, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x20000008) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D1\x00', 0x1202, 0x0) prctl$auto(0x401, 0x1, 0xffffffffffffffff, 0x1, 0x600) io_uring_register$auto(0xffffffffffffffff, 0x1, 0x0, 0xd880bb7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x72042, 0x0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, 0x0) io_uring_setup$auto(0x1000006, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setfsuid$auto(0x0) 7.334092356s ago: executing program 3 (id=5049): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300c0600", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf252e0000000c000180080003000700000020000180140002007663616e300000000000000000000000080003008c9f000054000180140002006d616376746170300000000000000000080003000000008008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=r1, @ANYBLOB="1400020062617461647630000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 6.670139224s ago: executing program 2 (id=5052): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r1 = socket(0x25, 0x1, 0x0) sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01c62952230f7945d8775db9f471fa248204780a7eaeafd68919b6f06dcdfb73396b26f58dbe77c868809b291ff4597e1dc870ecbd249ed381200d72f0063733642206c2be3fcf9b4e2800f0de38da055665615862df0eb02260a6b9844370819e4f22600b90f2782ca3976dcf99049d4719c6b83174fe8c7fba45abcf2a8540ff3462ef4cee08b4b9d1bd5559e117eb4ef0bfdcd891494502ff1e234cb4a892a2f2851f07fb93eb7d606a30a32e48a3eeed4f10f32517ccaf913e55714b24915d08893596d783949384e8684af843308fdecb63711271f6c1a02ff68e14647b637dbc245690a74586000000000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf255400000008009e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c810) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r2, 0x1, 0x2, 0x6653) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="7da15b31", @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) sendmsg$auto_SMC_NETLINK_DUMP_HS_LIMITATION(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x104, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, "30b9eb8502b01cc65bd4356f31bee603d325223c367e491b89850a24a49a335fc4096627222960b871909f3d2c14f4c5601e1a44364c3c3f0b74cbb4a3b7d3cb01766843f1cde1308e4b44c7c072d6a15e1cb9eec8ecbb0ad2142096516e6749911364c008b366b22a291df361fcc012f8842305ffa306f6c25045aae09dba2e09601cc9a7a588819b4472f12c7910568000fac893b3d29ca59de13489ca77112985803f9a5452579deaefd98fc7817eb3d6fee186e1a632e8c037a58b1a29ec90a91c95680afbca56e85cfd7140c89f6c0efa64923b2b988a59c11d0485d6d068f9b60fc24dfcf5b8b8cb86e71ad404"}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev3\x00', 0x16ba00, 0x0) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) 5.754629169s ago: executing program 3 (id=5054): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r0, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) r2 = socket(0x2, 0x1, 0x84) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffefff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x7}, 0x1) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240), 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x2) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) 5.532250644s ago: executing program 4 (id=5055): mmap$auto(0x0, 0x1020009, 0xdf, 0x4000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1000001, 0x5, 0x2, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000000040)="4a0200000000000000899edb610047eb02eff5d2adc245a4e1eded0e91b86c69b6b42ed642438b9d9b81d8e6ecd0", 0x2e) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0x42400, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) socket(0x10, 0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyq4\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) 5.221448479s ago: executing program 2 (id=5056): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x9) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_tty_fops_tty_io(r0, &(0x7f0000000100)="d9124c", 0x3) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) mmap$auto(0x4, 0x8, 0x4, 0x1f, r2, 0x9) read$auto(r3, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0x6) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) 4.388712862s ago: executing program 3 (id=5059): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r1 = socket(0x25, 0x1, 0x0) sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01c62952230f7945d8775db9f471fa248204780a7eaeafd68919b6f06dcdfb73396b26f58dbe77c868809b291ff4597e1dc870ecbd249ed381200d72f0063733642206c2be3fcf9b4e2800f0de38da055665615862df0eb02260a6b9844370819e4f22600b90f2782ca3976dcf99049d4719c6b83174fe8c7fba45abcf2a8540ff3462ef4cee08b4b9d1bd5559e117eb4ef0bfdcd891494502ff1e234cb4a892a2f2851f07fb93eb7d606a30a32e48a3eeed4f10f32517ccaf913e55714b24915d08893596d783949384e8684af843308fdecb63711271f6c1a02ff68e14647b637dbc245690a74586000000000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf255400000008009e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c810) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="7da15b31", @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev3\x00', 0x16ba00, 0x0) ioctl$auto(r4, 0x80885659, r4) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) 4.387997719s ago: executing program 4 (id=5067): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x9) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x7b, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r2, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0x6) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) 4.258529753s ago: executing program 2 (id=5061): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20020c6) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_READ(r1, 0xc0085508, 0x0) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ptyp4/dev\x00', 0x8fa982, 0x0) pipe2$auto(0x0, 0x4800) splice$auto(r2, 0x0, r2, 0x0, 0x1000, 0x1) read$auto(0xca, 0x0, 0x6) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) socket(0xa, 0x5, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) readv$auto(r4, &(0x7f0000000080)={&(0x7f0000000180)="e68e2bd037e3dc29e3a60d7282a03828bb4d7f79ee4f9e84979128093baf50293d8fc2f5a3bd52adaf57a71b0819f8a3990dd4d9fe807992c53f033b9e1b36d702e2580469946d03586c5060820e7207013472003394a545fc61827d801d4768a9eaba07d0ef1580945600e586fb6f527a5ad3692ac370de47e854fd14101ef5c8982b46036431ff9b0d2f3a1b004755442ce75fe52454f1340e86bca959f53eadbdcc81cc957de11a1d504e605f8d1407cf0459e0907f3cbe6c51", 0x8}, 0x6) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x44602, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x4) read$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) 3.87945504s ago: executing program 2 (id=5062): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x143203, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto_PR_GET_TSC(0x19, 0xa, 0xd, 0x4, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x3, 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r0, 0xc0045520, 0xffffffffffffffff) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x462001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x8, 0x0, 0xfffffffffffffffe, 0x6, 0x8000, 0xffffffffffffff81, 0x6]}, 0x0) 3.241884148s ago: executing program 3 (id=5064): symlink$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1112c00, 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x41180, 0x0) r1 = socket(0x1f, 0x5, 0x0) mmap$auto(0x0, 0x20007, 0x4, 0xeb1, 0x401, 0x8000) close_range$auto(r1, 0xfffffffffffff000, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1f, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x6, 0x80000000000000a, 0xf7fffffffffffffe, 0x0, 0x9, 0xffffffff80000000, 0x11, 0x3, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x88000, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) mmap$auto(0x20003fe, 0x2020009, 0x9, 0xebf, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mseal$auto(0x0, 0x7dda, 0x0) setpriority$auto_PRIO_USER(0x2, 0x0, 0x2) r4 = prctl$auto(0x7fffffff, 0x3, r0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = socket(0x11, 0x3, 0x2) mmap$auto(0x24, 0x2020009, 0x3, 0xeb1, r5, 0x200000000008000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r4) inotify_init1$auto(0x2) socket$nl_generic(0x10, 0x3, 0x10) 2.78933393s ago: executing program 2 (id=5065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x900064b6, 0x6162) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x10001, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x4}, 0x1ff, 0x6, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0x0) 2.78770618s ago: executing program 0 (id=5066): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0) read$auto(r1, 0x0, 0x7fff) 2.714921982s ago: executing program 0 (id=5068): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0x1, 0x0, 0x80000000) (fail_nth: 17) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.557037036s ago: executing program 2 (id=5069): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x9, 0x3, 0x1, 0x0, &(0x7f0000000100)=0x14, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="4b002dbd7000fbdbdf250a0000000800038004000100", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) mmap$auto(0x1ee00, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x2000000005, 0x7) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) umask$auto(0xa738) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x10, 0x2, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x1, &(0x7f0000000300)='@+\\!\x00Z\xdf\xe4\xc3`\x99\xd9\xc0\xafZ\ta\xbaxV&<\x8e\xed\xebAG;}\xdc\xd1n\x1a\xa1FZbJF\x1a\x17\f+\xa1]1\xc1\xab_\x13\x02\xb7\x9a\x02\xbf\x03\x9d\xf3\\\x9f\x06\x00\x00\x00\x00\x1b+\xa0\x99\x8b\bu\xbcW\xaf\"~\xe6!s\xcb%\xfa\f\xea\xee?\x1f\rd\xc6\xbb\x01\xdfuCXY>\x82`(\x8c\xe2l\x9fk\x86Pt`D\x8c\xfc_\xcf\b\x9b\x94\x90f\x064\xf8\x00\x1c\x00\xcb!\xb5\x17\x89\xba\x84\xf5\xdd\r\xb1\xfb\xc6?\x03\xb0\x82\xdf\xd7\xa9U+\x95\xa0\x8b\xb8\x98\xadU\xd5W\xf71\xf6\xc6\xe6\xbc\xb6\xa5D\x8b\xb2zgy.c\xb4o\xbd\xb3%q\x93\xb4,\x8a_K\xfb\x8bQ', 0x0, 0xfffffffffffffffe) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000004e97c812a762f10bd152771bdab3314073f73d9f761da70ed8a832631714458396cd7661075219e93835f24a2d34ec8c2d0c3bd0538d4d05819a709751f54bafc6228e33594f1d49e4127d87581a80963b5c405a66522d3dbfa34fb6baf6e6decf7022e4dbbd7cc816fb49e0c759e6b18d4b23fc37b8a40f4a6897666ef72d76ef0c13ddbacfeb3d89e80bc3a4f79d2d5f0b6eb8", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf25030000001400010000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) socket(0xa, 0x5, 0x84) 2.254109828s ago: executing program 0 (id=5070): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ram10\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) readlink$auto(&(0x7f0000000c80)='\x00', 0x0, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/offline\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'ip6gre0\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x80}]}, 0x40}, 0x1, 0x0, 0x6000, 0x10}, 0x2000000) r5 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x82, 0x3, "5ab1e60f5ef203802dd769582804374540f57ec05c16cf160221317ed1ab6afb82865ff54b144e641cf13e885b30c3f2d73a23ced1fef490ef3e4c87d0439cacf19681bbda91abac6d3b9f944c76f5fe181594d3487e9f38a3e795b9c15358596339013808adbe8e0722be93607d45083b5109dec1c306118e32f5a48482ab616e5e"}, 0x8) ioctl$auto_VFIO_GET_API_VERSION(r5, 0x3b64, 0x0) msync$auto(0x1ffff002, 0x180000000000000, 0x400000004) read$auto_transactions_fops_(r5, &(0x7f0000000340)=""/229, 0xe5) inotify_add_watch$auto(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xb4) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) 1.517064854s ago: executing program 4 (id=5071): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fsopen$auto(0x0, 0x1) r1 = getegid() fsconfig$auto(r0, 0x4, 0x0, 0x0, r1) write$auto_hwsim_simulate_radar_(r0, &(0x7f00000005c0)="19f794e9d13ace05adfdf3969f94335e05636a94cdd9c4500a22f9c90c06314a7b63ad889a31ed4110d28d6f510834e1b3da9615944866651f7d49a209e9b2e7058bc43c50f734eccf54e402bf5a1772447a8b19c167ccb20cd89a256f47048794fb92dbae1c80b9a4b7846767a4b0eca34b50584cb48549b3cd32e22698f69d52e4fc888ced5061d448d75f703c4861b7fb13fb66585e8606f417c6fc341d9e8b709fecc329a91988ac4bdd0652e3e191a6427c8d297f81545796b2d5510218eab66d95d92a7568e4068e14a139d128306c11300512b74bebefea38475818689360d77de09741cc3727953230e55c5d5ec9bf82900668", 0xf7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x800000000000, 0x800605, 0x3, &(0x7f0000000100)=0xfffe, 0x3, 0x3) 1.347124569s ago: executing program 0 (id=5072): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300c0600", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf252e0000000c000180080003000700000020000180140002007663616e300000000000000000000000080003008c9f000054000180140002006d616376746170300000000000000000080003000000008008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=r1, @ANYBLOB="1400020062617461647630000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 359.68191ms ago: executing program 3 (id=5073): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={"0e4762250007c6926154147c0a34d70159ba98a158289b6ec3fc37abd1bbb12d", 0x3, 0x3, 0xffffff7f, 0xe, 0xffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x202, 0x1) 315.138527ms ago: executing program 0 (id=5074): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) r1 = wait4$auto(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x3, &(0x7f00000001c0)={{0x0, 0x9}, {0x8, 0x40}, 0x401, 0x9, 0x9, 0x6, 0x57, 0xccb0, 0x6, 0x2, 0x3b52294e, 0x1ff, 0x3, 0x4, 0x4, 0x5}) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000280)=@bpf_attr_5={@target_fd=r0, r0, 0x7ff, 0x5, r0, @relative_fd=r0, 0x1}, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x100, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{@inferred=r1, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @integer64={0x9, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x5, 0x3, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) 303.058969ms ago: executing program 4 (id=5075): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x143203, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto_PR_GET_TSC(0x19, 0xa, 0xd, 0x4, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x3, 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r0, 0xc0045520, 0xffffffffffffffff) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/batadv_slave_0/drop_gratuitous_arp\x00', 0x462001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x8, 0x0, 0xfffffffffffffffe, 0x6, 0x8000, 0xffffffffffffff81, 0x6]}, 0x0) 130.80339ms ago: executing program 3 (id=5076): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20020c6) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_READ(r1, 0xc0085508, 0x0) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ptyp4/dev\x00', 0x8fa982, 0x0) pipe2$auto(0x0, 0x4800) splice$auto(r2, 0x0, r2, 0x0, 0x1000, 0x1) read$auto(0xca, 0x0, 0x6) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) socket(0xa, 0x5, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) readv$auto(r4, &(0x7f0000000080)={&(0x7f0000000180)="e68e2bd037e3dc29e3a60d7282a03828bb4d7f79ee4f9e84979128093baf50293d8fc2f5a3bd52adaf57a71b0819f8a3990dd4d9fe807992c53f033b9e1b36d702e2580469946d03586c5060820e7207013472003394a545fc61827d801d4768a9eaba07d0ef1580945600e586fb6f527a5ad3692ac370de47e854fd14101ef5c8982b46036431ff9b0d2f3a1b004755442ce75fe52454f1340e86bca959f53eadbdcc81cc957de11a1d504e605f8d1407cf0459e0907f3cbe6c51", 0x8}, 0x6) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x44602, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x4) read$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) 107.032917ms ago: executing program 4 (id=5077): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x143203, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x534, 0x36, 0x1009b71, 0xffffffffffffffff, 0x9003) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x8, 0x0, 0xfffffffffffffffe, 0x6, 0x8000, 0xffffffffffffff81, 0x6]}, 0x0) 12.674016ms ago: executing program 4 (id=5078): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f42) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0xca, 0x0, 0x7f) socket(0x2, 0x801, 0x100) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000440)={0x81, 0x0, [{0x5, 0x7}]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1c/sub4/xrun_injection\x00', 0x40, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mq_open$auto(&(0x7f0000000100)='\\*\x1f\x8b\xa2!\xb1\xb3\xa7m\xde\x82q\x9b\xa3\xbd7\x9fI\xe5\xae/HC\xb44\x1f\x18\xd7', 0x7e, 0x9, 0x0) setsockopt$auto_SO_RCVBUF(r2, 0x9, 0x8, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyc5/power/runtime_active_time\x00', 0xfffffff9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyc5/power/runtime_active_time\x00', 0x200, 0x0) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) socket(0x2, 0x1, 0x106) 0s ago: executing program 0 (id=5079): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300c0600", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf252e0000000c000180080003000700000020000180140002007663616e300000000000000000000000080003008c9f000054000180140002006d616376746170300000000000000000080003000000008008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="1400020076657468305f746f5f68737200000000080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=r1, @ANYBLOB="1400020062617461647630000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00+'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) kernel console output (not intermixed with test programs): x_hash+0x2c5/0x380 [ 1312.347845][T26253] ? futex_private_hash_put+0x160/0x1b0 [ 1312.347864][T26253] futex_wait+0xe8/0x380 [ 1312.347877][T26253] ? __pfx_futex_wait+0x10/0x10 [ 1312.347895][T26253] ? find_held_lock+0x2b/0x80 [ 1312.347923][T26253] ? __might_fault+0xe3/0x190 [ 1312.347943][T26253] ? __might_fault+0xe3/0x190 [ 1312.347964][T26253] do_futex+0x229/0x350 [ 1312.347983][T26253] ? __pfx_do_futex+0x10/0x10 [ 1312.348009][T26253] ? _copy_from_user+0x59/0xd0 [ 1312.348024][T26253] ? mntput+0x10/0x90 [ 1312.348037][T26253] ? do_handle_open+0x2ce/0xd10 [ 1312.348057][T26253] __x64_sys_futex+0x1e0/0x4c0 [ 1312.348079][T26253] ? __pfx___x64_sys_futex+0x10/0x10 [ 1312.348099][T26253] ? xfd_validate_state+0x61/0x180 [ 1312.348120][T26253] do_syscall_64+0xcd/0xf80 [ 1312.348136][T26253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.348150][T26253] RIP: 0033:0x7f3f41f8f7c9 [ 1312.348162][T26253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.348176][T26253] RSP: 002b:00007f3f42e800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1312.348191][T26253] RAX: ffffffffffffffda RBX: 00007f3f421e5fa8 RCX: 00007f3f41f8f7c9 [ 1312.348200][T26253] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f421e5fa8 [ 1312.348209][T26253] RBP: 00007f3f421e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.348218][T26253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.348226][T26253] R13: 00007f3f421e6038 R14: 00007ffdb0438470 R15: 00007ffdb0438558 [ 1312.348245][T26253] [ 1313.752959][T26282] random: crng reseeded on system resumption [ 1313.781329][T26272] ubi0: attaching mtd0 [ 1313.848459][T26272] ubi0: scanning is finished [ 1313.888897][T26272] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1314.222979][T26272] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1314.656201][T26293] FAULT_INJECTION: forcing a failure. [ 1314.656201][T26293] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1314.730147][T26293] CPU: 1 UID: 0 PID: 26293 Comm: syz.3.4247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1314.730174][T26293] Tainted: [L]=SOFTLOCKUP [ 1314.730179][T26293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1314.730188][T26293] Call Trace: [ 1314.730194][T26293] [ 1314.730200][T26293] dump_stack_lvl+0x16c/0x1f0 [ 1314.730220][T26293] should_fail_ex+0x512/0x640 [ 1314.730237][T26293] ? __schedule+0x114c/0x6150 [ 1314.730262][T26293] get_futex_key+0x1d0/0x15f0 [ 1314.730284][T26293] ? __pfx_get_futex_key+0x10/0x10 [ 1314.730308][T26293] futex_wait_setup+0x9d/0x570 [ 1314.730327][T26293] __futex_wait+0x193/0x2f0 [ 1314.730340][T26293] ? __pfx___futex_wait+0x10/0x10 [ 1314.730356][T26293] ? __pfx_futex_wake_mark+0x10/0x10 [ 1314.730380][T26293] ? futex_hash+0x2c5/0x380 [ 1314.730399][T26293] ? futex_private_hash_put+0x160/0x1b0 [ 1314.730418][T26293] futex_wait+0xe8/0x380 [ 1314.730431][T26293] ? __pfx_futex_wait+0x10/0x10 [ 1314.730448][T26293] ? find_held_lock+0x2b/0x80 [ 1314.730469][T26293] ? __might_fault+0xe3/0x190 [ 1314.730487][T26293] ? __might_fault+0xe3/0x190 [ 1314.730514][T26293] do_futex+0x229/0x350 [ 1314.730534][T26293] ? __pfx_do_futex+0x10/0x10 [ 1314.730554][T26293] ? _copy_from_user+0x59/0xd0 [ 1314.730568][T26293] ? mntput+0x10/0x90 [ 1314.730581][T26293] ? do_handle_open+0x2ce/0xd10 [ 1314.730599][T26293] __x64_sys_futex+0x1e0/0x4c0 [ 1314.730621][T26293] ? __pfx___x64_sys_futex+0x10/0x10 [ 1314.730640][T26293] ? xfd_validate_state+0x61/0x180 [ 1314.730660][T26293] do_syscall_64+0xcd/0xf80 [ 1314.730676][T26293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.730691][T26293] RIP: 0033:0x7f6eb598f7c9 [ 1314.730703][T26293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.730717][T26293] RSP: 002b:00007f6eb67ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1314.730731][T26293] RAX: ffffffffffffffda RBX: 00007f6eb5be6098 RCX: 00007f6eb598f7c9 [ 1314.730741][T26293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6eb5be6098 [ 1314.730750][T26293] RBP: 00007f6eb5be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1314.730758][T26293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.730767][T26293] R13: 00007f6eb5be6128 R14: 00007ffe3100e120 R15: 00007ffe3100e208 [ 1314.730786][T26293] [ 1315.521308][T26313] input: f as /devices/virtual/input/input75 [ 1318.024725][T26356] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76 [ 1320.452564][T26400] zswap: compressor not available [ 1322.323830][T26448] FAULT_INJECTION: forcing a failure. [ 1322.323830][T26448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1322.373044][T26448] CPU: 0 UID: 0 PID: 26448 Comm: syz.3.4281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.373086][T26448] Tainted: [L]=SOFTLOCKUP [ 1322.373096][T26448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1322.373113][T26448] Call Trace: [ 1322.373123][T26448] [ 1322.373135][T26448] dump_stack_lvl+0x16c/0x1f0 [ 1322.373169][T26448] should_fail_ex+0x512/0x640 [ 1322.373204][T26448] should_fail_alloc_page+0xe7/0x130 [ 1322.373237][T26448] prepare_alloc_pages+0x3c2/0x610 [ 1322.373276][T26448] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1322.373316][T26448] ? unwind_get_return_address+0x59/0xa0 [ 1322.373354][T26448] ? arch_stack_walk+0xa6/0x100 [ 1322.373397][T26448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1322.373431][T26448] ? stack_trace_save+0x8e/0xc0 [ 1322.373460][T26448] ? __pfx_stack_trace_save+0x10/0x10 [ 1322.373491][T26448] ? stack_depot_save_flags+0x29/0x9b0 [ 1322.373528][T26448] ? kasan_save_stack+0x42/0x60 [ 1322.373551][T26448] ? kasan_save_stack+0x33/0x60 [ 1322.373575][T26448] ? kasan_save_track+0x14/0x30 [ 1322.373598][T26448] ? __kasan_kmalloc+0xaa/0xb0 [ 1322.373621][T26448] ? fl_create+0x104/0xd30 [ 1322.373654][T26448] ? ipv6_flowlabel_opt+0x964/0x2e50 [ 1322.373686][T26448] ? do_ipv6_setsockopt+0x2009/0x4570 [ 1322.373712][T26448] ? ipv6_setsockopt+0xcb/0x170 [ 1322.373735][T26448] ? tcp_setsockopt+0xa7/0x100 [ 1322.373767][T26448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1322.373795][T26448] ? policy_nodemask+0xea/0x4e0 [ 1322.373827][T26448] alloc_pages_mpol+0x1fb/0x550 [ 1322.373855][T26448] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1322.373895][T26448] ___kmalloc_large_node+0x130/0x1a0 [ 1322.373938][T26448] __kmalloc_large_node_noprof+0x1c/0x70 [ 1322.373971][T26448] __kmalloc_noprof.cold+0xc/0x62 [ 1322.374006][T26448] ? fl_create+0x18a/0xd30 [ 1322.374040][T26448] ? fl_create+0x18a/0xd30 [ 1322.374073][T26448] fl_create+0x18a/0xd30 [ 1322.374114][T26448] ? __pfx_fl_create+0x10/0x10 [ 1322.374158][T26448] ? __lock_acquire+0x433/0x22f0 [ 1322.374229][T26448] ipv6_flowlabel_opt+0x964/0x2e50 [ 1322.374267][T26448] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1322.374313][T26448] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1322.374351][T26448] ? do_raw_spin_lock+0x12c/0x2b0 [ 1322.374403][T26448] ? __local_bh_enable_ip+0xa4/0x120 [ 1322.374448][T26448] ? do_ipv6_setsockopt+0x2009/0x4570 [ 1322.374476][T26448] do_ipv6_setsockopt+0x2009/0x4570 [ 1322.374514][T26448] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1322.374542][T26448] ? __lock_acquire+0x433/0x22f0 [ 1322.374585][T26448] ? lock_acquire+0x179/0x330 [ 1322.374617][T26448] ? __pfx___might_resched+0x10/0x10 [ 1322.374642][T26448] ? rcu_is_watching+0x12/0xc0 [ 1322.374665][T26448] ? trace_contention_end+0xdd/0x110 [ 1322.374696][T26448] ? __mutex_lock+0x27b/0x1b10 [ 1322.374728][T26448] ? smc_setsockopt+0x100/0xa00 [ 1322.374767][T26448] ? __pfx___mutex_lock+0x10/0x10 [ 1322.374810][T26448] ? ipv6_setsockopt+0xcb/0x170 [ 1322.374837][T26448] ipv6_setsockopt+0xcb/0x170 [ 1322.374871][T26448] tcp_setsockopt+0xa7/0x100 [ 1322.374912][T26448] smc_setsockopt+0x1b6/0xa00 [ 1322.374950][T26448] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1322.374994][T26448] ? __pfx_smc_setsockopt+0x10/0x10 [ 1322.375031][T26448] ? aa_sock_opt_perm+0xfd/0x1b0 [ 1322.375073][T26448] ? __pfx_smc_setsockopt+0x10/0x10 [ 1322.375108][T26448] do_sock_setsockopt+0xf3/0x1d0 [ 1322.375150][T26448] __sys_setsockopt+0x120/0x1a0 [ 1322.375189][T26448] __x64_sys_setsockopt+0xbd/0x160 [ 1322.375218][T26448] ? do_syscall_64+0x91/0xf80 [ 1322.375243][T26448] ? lockdep_hardirqs_on+0x7c/0x110 [ 1322.375270][T26448] do_syscall_64+0xcd/0xf80 [ 1322.375299][T26448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.375327][T26448] RIP: 0033:0x7f6eb598f7c9 [ 1322.375350][T26448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.375376][T26448] RSP: 002b:00007f6eb67ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1322.375403][T26448] RAX: ffffffffffffffda RBX: 00007f6eb5be6090 RCX: 00007f6eb598f7c9 [ 1322.375422][T26448] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1322.375440][T26448] RBP: 00007f6eb5a13f91 R08: 0000000000008002 R09: 0000000000000000 [ 1322.375458][T26448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.375475][T26448] R13: 00007f6eb5be6128 R14: 00007f6eb5be6090 R15: 00007ffe3100e208 [ 1322.375516][T26448] [ 1323.075690][T26452] random: crng reseeded on system resumption [ 1324.404283][T26471] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77 [ 1325.572537][T26499] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78 [ 1327.125118][T26528] binder: 26526:26528 unknown command 0 [ 1327.177101][T26528] binder: 26526:26528 ioctl c0306201 2000000000c0 returned -22 [ 1327.292404][T26527] __vm_enough_memory: pid: 26527, comm: syz.4.4300, bytes: 4398046511104 not enough memory for the allocation [ 1328.933885][T26554] random: crng reseeded on system resumption [ 1329.045234][T26557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79 [ 1329.582101][T26573] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80 [ 1332.235460][T26614] FAULT_INJECTION: forcing a failure. [ 1332.235460][T26614] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.375741][T26614] CPU: 1 UID: 0 PID: 26614 Comm: syz.0.4320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.375766][T26614] Tainted: [L]=SOFTLOCKUP [ 1332.375771][T26614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1332.375780][T26614] Call Trace: [ 1332.375785][T26614] [ 1332.375791][T26614] dump_stack_lvl+0x16c/0x1f0 [ 1332.375810][T26614] should_fail_ex+0x512/0x640 [ 1332.375826][T26614] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1332.375848][T26614] should_failslab+0xc2/0x120 [ 1332.375864][T26614] __kmalloc_cache_noprof+0x72/0x800 [ 1332.375883][T26614] ? subsystem_filter_read+0xf4/0x350 [ 1332.375908][T26614] ? subsystem_filter_read+0xf4/0x350 [ 1332.375928][T26614] subsystem_filter_read+0xf4/0x350 [ 1332.375949][T26614] ? __pfx_subsystem_filter_read+0x10/0x10 [ 1332.375977][T26614] vfs_read+0x1e4/0xcf0 [ 1332.375992][T26614] ? __pfx___mutex_lock+0x10/0x10 [ 1332.376009][T26614] ? __pfx_vfs_read+0x10/0x10 [ 1332.376028][T26614] ? __fget_files+0x20e/0x3c0 [ 1332.376048][T26614] ksys_read+0x12a/0x250 [ 1332.376061][T26614] ? __pfx_ksys_read+0x10/0x10 [ 1332.376080][T26614] do_syscall_64+0xcd/0xf80 [ 1332.376096][T26614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.376111][T26614] RIP: 0033:0x7fb17c98f7c9 [ 1332.376122][T26614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.376136][T26614] RSP: 002b:00007fb17d8d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1332.376150][T26614] RAX: ffffffffffffffda RBX: 00007fb17cbe5fa0 RCX: 00007fb17c98f7c9 [ 1332.376159][T26614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1332.376167][T26614] RBP: 00007fb17d8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.376176][T26614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.376184][T26614] R13: 00007fb17cbe6038 R14: 00007fb17cbe5fa0 R15: 00007ffcaf35d378 [ 1332.376217][T26614] [ 1332.627910][T26618] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 1332.874101][T26620] ubi0: attaching mtd0 [ 1332.939392][T26620] ubi0: scanning is finished [ 1332.944248][T26620] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1333.297395][T26620] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1334.294097][T26646] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1335.444936][T26661] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82 [ 1338.587048][T26711] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 1340.517236][T26740] random: crng reseeded on system resumption [ 1341.672760][T26767] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 1341.734516][T26768] FAULT_INJECTION: forcing a failure. [ 1341.734516][T26768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1341.786318][T26768] CPU: 0 UID: 0 PID: 26768 Comm: syz.0.4356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.786343][T26768] Tainted: [L]=SOFTLOCKUP [ 1341.786348][T26768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1341.786356][T26768] Call Trace: [ 1341.786362][T26768] [ 1341.786368][T26768] dump_stack_lvl+0x16c/0x1f0 [ 1341.786388][T26768] should_fail_ex+0x512/0x640 [ 1341.786407][T26768] should_fail_alloc_page+0xe7/0x130 [ 1341.786426][T26768] prepare_alloc_pages+0x3c2/0x610 [ 1341.786445][T26768] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1341.786468][T26768] ? __lock_acquire+0x433/0x22f0 [ 1341.786492][T26768] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1341.786511][T26768] ? do_raw_spin_lock+0x12c/0x2b0 [ 1341.786531][T26768] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1341.786549][T26768] ? find_held_lock+0x2b/0x80 [ 1341.786568][T26768] ? look_up_lock_class+0x59/0x130 [ 1341.786589][T26768] ? __lock_acquire+0x433/0x22f0 [ 1341.786604][T26768] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1341.786627][T26768] ? policy_nodemask+0xea/0x4e0 [ 1341.786644][T26768] alloc_pages_mpol+0x1fb/0x550 [ 1341.786660][T26768] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1341.786681][T26768] folio_alloc_mpol_noprof+0x36/0xe0 [ 1341.786700][T26768] shmem_alloc_folio+0x135/0x160 [ 1341.786717][T26768] shmem_alloc_and_add_folio+0x494/0xc20 [ 1341.786740][T26768] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1341.786760][T26768] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1341.786783][T26768] shmem_get_folio_gfp+0x67f/0x1610 [ 1341.786805][T26768] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1341.786824][T26768] ? filemap_map_pages+0x12dd/0x1e00 [ 1341.786846][T26768] shmem_fault+0x1fe/0xa00 [ 1341.786865][T26768] ? __pfx_shmem_fault+0x10/0x10 [ 1341.786886][T26768] ? __pfx_filemap_map_pages+0x10/0x10 [ 1341.786910][T26768] __do_fault+0x10d/0x490 [ 1341.786931][T26768] do_pte_missing+0xfb2/0x4000 [ 1341.786950][T26768] ? __handle_mm_fault+0x151e/0x2ad0 [ 1341.786973][T26768] __handle_mm_fault+0x154b/0x2ad0 [ 1341.786995][T26768] ? __pfx___handle_mm_fault+0x10/0x10 [ 1341.787023][T26768] ? find_vma+0xbf/0x140 [ 1341.787042][T26768] ? __pfx_find_vma+0x10/0x10 [ 1341.787065][T26768] handle_mm_fault+0x3fe/0xad0 [ 1341.787085][T26768] do_user_addr_fault+0x2e4/0xda0 [ 1341.787104][T26768] ? rcu_is_watching+0x12/0xc0 [ 1341.787120][T26768] exc_page_fault+0x64/0xc0 [ 1341.787135][T26768] asm_exc_page_fault+0x26/0x30 [ 1341.787148][T26768] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1341.787167][T26768] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 77 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1341.787181][T26768] RSP: 0018:ffffc9000219fa30 EFLAGS: 00050206 [ 1341.787193][T26768] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 1341.787202][T26768] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff88802ac45000 [ 1341.787211][T26768] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1005588bff [ 1341.787219][T26768] R10: ffff88802ac45fff R11: 0000000000000000 R12: 0000000000001000 [ 1341.787228][T26768] R13: ffffea0000ab1140 R14: ffffc9000219fd90 R15: ffff88802ac45000 [ 1341.787247][T26768] _copy_from_iter+0x355/0x16c0 [ 1341.787268][T26768] ? __pfx__copy_from_iter+0x10/0x10 [ 1341.787292][T26768] copy_page_from_iter+0xde/0x180 [ 1341.787309][T26768] anon_pipe_write+0xef0/0x1990 [ 1341.787327][T26768] ? __print_lock_name+0xc0/0xe0 [ 1341.787356][T26768] ? __pfx_anon_pipe_write+0x10/0x10 [ 1341.787370][T26768] ? common_file_perm+0x1b1/0x500 [ 1341.787389][T26768] ? bpf_lsm_file_permission+0x9/0x10 [ 1341.787407][T26768] ? security_file_permission+0x71/0x210 [ 1341.787425][T26768] ? rw_verify_area+0xcf/0x6c0 [ 1341.787448][T26768] vfs_write+0x7d3/0x11d0 [ 1341.787463][T26768] ? __pfx_anon_pipe_write+0x10/0x10 [ 1341.787480][T26768] ? __pfx_vfs_write+0x10/0x10 [ 1341.787493][T26768] ? find_held_lock+0x2b/0x80 [ 1341.787525][T26768] ksys_write+0x1f8/0x250 [ 1341.787539][T26768] ? __pfx_ksys_write+0x10/0x10 [ 1341.787559][T26768] do_syscall_64+0xcd/0xf80 [ 1341.787575][T26768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.787588][T26768] RIP: 0033:0x7fb17c98f7c9 [ 1341.787600][T26768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.787617][T26768] RSP: 002b:00007fb17d8b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.787630][T26768] RAX: ffffffffffffffda RBX: 00007fb17cbe6090 RCX: 00007fb17c98f7c9 [ 1341.787639][T26768] RDX: 000000008000003f RSI: 0000000000000000 RDI: 0000000000000001 [ 1341.787648][T26768] RBP: 00007fb17d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.787656][T26768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.787664][T26768] R13: 00007fb17cbe6128 R14: 00007fb17cbe6090 R15: 00007ffcaf35d378 [ 1341.787684][T26768] [ 1342.599469][T26777] FAULT_INJECTION: forcing a failure. [ 1342.599469][T26777] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.649516][T26777] CPU: 1 UID: 0 PID: 26777 Comm: syz.4.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.649545][T26777] Tainted: [L]=SOFTLOCKUP [ 1342.649551][T26777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1342.649561][T26777] Call Trace: [ 1342.649568][T26777] [ 1342.649574][T26777] dump_stack_lvl+0x16c/0x1f0 [ 1342.649596][T26777] should_fail_ex+0x512/0x640 [ 1342.649625][T26777] ? __kmalloc_noprof+0xca/0x8f0 [ 1342.649661][T26777] should_failslab+0xc2/0x120 [ 1342.649690][T26777] __kmalloc_noprof+0xdd/0x8f0 [ 1342.649722][T26777] ? lsm_blob_alloc+0x68/0x90 [ 1342.649762][T26777] ? lsm_blob_alloc+0x68/0x90 [ 1342.649795][T26777] lsm_blob_alloc+0x68/0x90 [ 1342.649833][T26777] security_sk_alloc+0x2f/0x270 [ 1342.649849][T26777] sk_prot_alloc+0xfb/0x2a0 [ 1342.649872][T26777] sk_alloc+0x36/0xc20 [ 1342.649891][T26777] inet_create+0x3a1/0x1040 [ 1342.649909][T26777] ? inet_create+0x93/0x1040 [ 1342.649929][T26777] __sock_create+0x339/0x8a0 [ 1342.649954][T26777] mptcp_subflow_create_socket+0xec/0xa10 [ 1342.649973][T26777] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1342.649992][T26777] ? find_held_lock+0x2b/0x80 [ 1342.650017][T26777] __mptcp_nmpc_sk+0x182/0x880 [ 1342.650034][T26777] ? look_up_lock_class+0x6b/0x130 [ 1342.650048][T26777] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1342.650067][T26777] ? register_lock_class+0x41/0x4b0 [ 1342.650095][T26777] mptcp_connect+0x7e/0xae0 [ 1342.650115][T26777] __inet_stream_connect+0x915/0xf50 [ 1342.650138][T26777] ? __pfx___inet_stream_connect+0x10/0x10 [ 1342.650156][T26777] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1342.650178][T26777] ? __pfx_inet_stream_connect+0x10/0x10 [ 1342.650196][T26777] ? __local_bh_enable_ip+0xa4/0x120 [ 1342.650220][T26777] ? __pfx_inet_stream_connect+0x10/0x10 [ 1342.650236][T26777] inet_stream_connect+0x57/0xa0 [ 1342.650254][T26777] __sys_connect_file+0x141/0x1a0 [ 1342.650271][T26777] __sys_connect+0x13b/0x160 [ 1342.650285][T26777] ? __pfx___sys_connect+0x10/0x10 [ 1342.650307][T26777] ? xfd_validate_state+0x61/0x180 [ 1342.650321][T26777] ? __pfx_ksys_write+0x10/0x10 [ 1342.650339][T26777] __x64_sys_connect+0x72/0xb0 [ 1342.650353][T26777] ? lockdep_hardirqs_on+0x7c/0x110 [ 1342.650367][T26777] do_syscall_64+0xcd/0xf80 [ 1342.650383][T26777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.650397][T26777] RIP: 0033:0x7f3f41f8f7c9 [ 1342.650414][T26777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.650428][T26777] RSP: 002b:00007f3f42e80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1342.650443][T26777] RAX: ffffffffffffffda RBX: 00007f3f421e5fa0 RCX: 00007f3f41f8f7c9 [ 1342.650453][T26777] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1342.650462][T26777] RBP: 00007f3f42013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1342.650471][T26777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.650480][T26777] R13: 00007f3f421e6038 R14: 00007f3f421e5fa0 R15: 00007ffdb0438558 [ 1342.650500][T26777] [ 1344.522699][T26801] ubi0: attaching mtd0 [ 1344.556254][T26801] ubi0: scanning is finished [ 1344.560992][T26801] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1345.105015][T26810] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 1345.282621][T26801] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1346.809055][T26844] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1346.819870][T26844] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1348.138505][T26862] random: crng reseeded on system resumption [ 1349.173056][T26873] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4381'. [ 1349.616489][T26881] FAULT_INJECTION: forcing a failure. [ 1349.616489][T26881] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.762388][T26881] CPU: 0 UID: 0 PID: 26881 Comm: syz.3.4385 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.762413][T26881] Tainted: [L]=SOFTLOCKUP [ 1349.762418][T26881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1349.762427][T26881] Call Trace: [ 1349.762432][T26881] [ 1349.762438][T26881] dump_stack_lvl+0x16c/0x1f0 [ 1349.762458][T26881] should_fail_ex+0x512/0x640 [ 1349.762474][T26881] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 1349.762497][T26881] should_failslab+0xc2/0x120 [ 1349.762513][T26881] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 1349.762533][T26881] ? __d_lookup+0x25c/0x4a0 [ 1349.762552][T26881] ? __d_alloc+0x35/0xa80 [ 1349.762571][T26881] ? __d_alloc+0x35/0xa80 [ 1349.762585][T26881] __d_alloc+0x35/0xa80 [ 1349.762603][T26881] d_alloc+0x4a/0x1e0 [ 1349.762621][T26881] lookup_one_qstr_excl+0x175/0x250 [ 1349.762642][T26881] start_dirop+0x59/0xb0 [ 1349.762657][T26881] simple_start_creating+0xf4/0x100 [ 1349.762672][T26881] ? __pfx_simple_start_creating+0x10/0x10 [ 1349.762685][T26881] ? do_raw_spin_unlock+0x172/0x230 [ 1349.762706][T26881] ? simple_pin_fs+0xa3/0x190 [ 1349.762727][T26881] debugfs_start_creating.part.0+0x82/0x190 [ 1349.762744][T26881] __debugfs_create_file+0xa7/0x6b0 [ 1349.762762][T26881] debugfs_create_file_full+0x41/0x60 [ 1349.762786][T26881] drm_debugfs_clients_add+0xd9/0x200 [ 1349.762803][T26881] drm_file_alloc+0x5c6/0xb40 [ 1349.762823][T26881] drm_open_helper+0x204/0x550 [ 1349.762841][T26881] drm_open+0x1a0/0x3e0 [ 1349.762857][T26881] ? __pfx_drm_open+0x10/0x10 [ 1349.762872][T26881] drm_stub_open+0x20f/0x380 [ 1349.762889][T26881] ? __pfx_drm_stub_open+0x10/0x10 [ 1349.762904][T26881] chrdev_open+0x234/0x6a0 [ 1349.762919][T26881] ? __pfx_apparmor_file_open+0x10/0x10 [ 1349.762933][T26881] ? __pfx_chrdev_open+0x10/0x10 [ 1349.762949][T26881] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1349.762970][T26881] do_dentry_open+0x748/0x1590 [ 1349.762984][T26881] ? __pfx_chrdev_open+0x10/0x10 [ 1349.763004][T26881] vfs_open+0x82/0x3f0 [ 1349.763025][T26881] path_openat+0x2078/0x3140 [ 1349.763047][T26881] ? __pfx_path_openat+0x10/0x10 [ 1349.763069][T26881] do_filp_open+0x20b/0x470 [ 1349.763085][T26881] ? __pfx_do_filp_open+0x10/0x10 [ 1349.763114][T26881] ? alloc_fd+0x471/0x7d0 [ 1349.763134][T26881] do_sys_openat2+0x11f/0x280 [ 1349.763152][T26881] ? __pfx_do_sys_openat2+0x10/0x10 [ 1349.763173][T26881] ? __fget_files+0x20e/0x3c0 [ 1349.763190][T26881] __x64_sys_openat+0x174/0x210 [ 1349.763209][T26881] ? __pfx___x64_sys_openat+0x10/0x10 [ 1349.763228][T26881] ? ksys_write+0x1ac/0x250 [ 1349.763251][T26881] do_syscall_64+0xcd/0xf80 [ 1349.763267][T26881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.763282][T26881] RIP: 0033:0x7f6eb598f7c9 [ 1349.763294][T26881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.763307][T26881] RSP: 002b:00007f6eb680d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1349.763322][T26881] RAX: ffffffffffffffda RBX: 00007f6eb5be5fa0 RCX: 00007f6eb598f7c9 [ 1349.763331][T26881] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1349.763340][T26881] RBP: 00007f6eb680d090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.763349][T26881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.763357][T26881] R13: 00007f6eb5be6038 R14: 00007f6eb5be5fa0 R15: 00007ffe3100e208 [ 1349.763376][T26881] [ 1350.646641][T26894] random: crng reseeded on system resumption [ 1355.397122][T26966] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86 [ 1355.445486][T26969] random: crng reseeded on system resumption [ 1356.543757][T26991] ubi0: attaching mtd0 [ 1356.662447][T26991] ubi0: scanning is finished [ 1356.675724][T26991] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1357.204367][T26991] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1357.249027][T26996] ubi0: attaching mtd0 [ 1357.282925][T26996] ubi0: scanning is finished [ 1357.304823][T26996] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1357.638204][T26996] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1358.738268][T27018] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87 [ 1359.089987][T27022] random: crng reseeded on system resumption [ 1360.673019][T27058] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 1361.568136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.574425][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.803563][T27072] netlink: 186 bytes leftover after parsing attributes in process `syz.4.4429'. [ 1361.914279][T27075] random: crng reseeded on system resumption [ 1362.280146][T15697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.406758][T15697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.513028][T15697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.624331][T15697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.951756][T15697] bridge_slave_1: left allmulticast mode [ 1362.958270][T15697] bridge_slave_1: left promiscuous mode [ 1362.977427][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.058901][T15697] bridge_slave_0: left allmulticast mode [ 1363.067415][T15697] bridge_slave_0: left promiscuous mode [ 1363.080240][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.126700][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1363.138724][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1363.148886][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1363.163248][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1363.175302][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1364.271543][T27113] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4441'. [ 1364.406202][T15697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.416624][T15697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.426536][T15697] bond0 (unregistering): Released all slaves [ 1364.492166][T27118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1365.012435][T15697] hsr_slave_0: left promiscuous mode [ 1365.048271][T15697] hsr_slave_1: left promiscuous mode [ 1365.067108][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.074492][T15697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.105310][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.143361][T15697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.222075][T15697] veth1_macvtap: left promiscuous mode [ 1365.246073][ T5156] Bluetooth: hci3: command tx timeout [ 1365.256313][T15697] veth0_macvtap: left promiscuous mode [ 1365.279594][T15697] veth1_vlan: left promiscuous mode [ 1365.294403][T15697] veth0_vlan: left promiscuous mode [ 1367.133839][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4448'. [ 1367.335107][ T5156] Bluetooth: hci3: command tx timeout [ 1368.389426][T27093] chnl_net:caif_netlink_parms(): no params data found [ 1368.777909][T27093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.791680][T27093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.819503][T27093] bridge_slave_0: entered allmulticast mode [ 1368.841396][T27093] bridge_slave_0: entered promiscuous mode [ 1368.867090][T27093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.879909][T27093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.911890][T27093] bridge_slave_1: entered allmulticast mode [ 1368.937310][T27093] bridge_slave_1: entered promiscuous mode [ 1369.228301][T27093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.280820][T27093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.368807][T27201] FAULT_INJECTION: forcing a failure. [ 1369.368807][T27201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.390857][T27093] team0: Port device team_slave_0 added [ 1369.404757][ T5156] Bluetooth: hci3: command tx timeout [ 1369.409802][T27093] team0: Port device team_slave_1 added [ 1369.458547][T27201] CPU: 1 UID: 0 PID: 27201 Comm: syz.3.4457 Tainted: G L syzkaller #0 PREEMPT(full) [ 1369.458587][T27201] Tainted: [L]=SOFTLOCKUP [ 1369.458595][T27201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1369.458610][T27201] Call Trace: [ 1369.458619][T27201] [ 1369.458630][T27201] dump_stack_lvl+0x16c/0x1f0 [ 1369.458660][T27201] should_fail_ex+0x512/0x640 [ 1369.458690][T27201] _copy_to_iter+0x463/0x1710 [ 1369.458726][T27201] ? __pfx__copy_to_iter+0x10/0x10 [ 1369.458752][T27201] ? __kvmalloc_node_noprof+0x3bb/0xa50 [ 1369.458789][T27201] ? stack_print+0x15f/0x1d0 [ 1369.458818][T27201] ? stack_print+0x181/0x1d0 [ 1369.458847][T27201] seq_read_iter+0xd02/0x12d0 [ 1369.458888][T27201] seq_read+0x3a3/0x570 [ 1369.458912][T27201] ? __pfx_seq_read+0x10/0x10 [ 1369.458951][T27201] ? lock_acquire+0x179/0x330 [ 1369.458999][T27201] full_proxy_read+0x131/0x1a0 [ 1369.459032][T27201] ? __pfx_full_proxy_read+0x10/0x10 [ 1369.459065][T27201] vfs_read+0x1e4/0xcf0 [ 1369.459090][T27201] ? __pfx___mutex_lock+0x10/0x10 [ 1369.459120][T27201] ? __pfx_vfs_read+0x10/0x10 [ 1369.459155][T27201] ? __fget_files+0x20e/0x3c0 [ 1369.459190][T27201] ksys_read+0x12a/0x250 [ 1369.459214][T27201] ? __pfx_ksys_read+0x10/0x10 [ 1369.459251][T27201] do_syscall_64+0xcd/0xf80 [ 1369.459279][T27201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.459303][T27201] RIP: 0033:0x7f6eb598f7c9 [ 1369.459323][T27201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.459348][T27201] RSP: 002b:00007f6eb680d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1369.459372][T27201] RAX: ffffffffffffffda RBX: 00007f6eb5be5fa0 RCX: 00007f6eb598f7c9 [ 1369.459389][T27201] RDX: 0000000000001000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1369.459405][T27201] RBP: 00007f6eb680d090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.459420][T27201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.459434][T27201] R13: 00007f6eb5be6038 R14: 00007f6eb5be5fa0 R15: 00007ffe3100e208 [ 1369.459472][T27201] [ 1369.696831][T27093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.703798][T27093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.729764][T27093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.742400][T27093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.749386][T27093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.775311][T27093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.810544][T27093] hsr_slave_0: entered promiscuous mode [ 1369.816765][T27093] hsr_slave_1: entered promiscuous mode [ 1369.822713][T27093] debugfs: 'hsr0' already exists in 'hsr' [ 1369.828447][T27093] Cannot create hsr debugfs directory [ 1370.219639][T27211] zswap: compressor not available [ 1371.101370][T27093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1371.254016][T27093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1371.313281][T27093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1371.337618][T27093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1371.484684][ T5156] Bluetooth: hci3: command tx timeout [ 1371.626873][T27255] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 1371.992284][T27093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.164462][T27268] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4466'. [ 1372.222204][T27270] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4467'. [ 1372.222931][T27093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.352245][T15697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.359355][T15697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.443003][T15697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.450119][T15697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.495502][T27278] random: crng reseeded on system resumption [ 1373.316074][T27093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.123828][T27093] veth0_vlan: entered promiscuous mode [ 1374.159540][T27093] veth1_vlan: entered promiscuous mode [ 1374.302853][T27093] veth0_macvtap: entered promiscuous mode [ 1374.330916][T27093] veth1_macvtap: entered promiscuous mode [ 1374.362569][T27093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.446875][T27093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.490636][T18356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.534853][T18356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.572993][T18356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.622326][T18356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.669702][T18356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.698529][T18356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.707486][T27322] usbip-vudc usbip-vudc.0: gadget not bound [ 1374.780604][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.885588][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.962758][T27327] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4477'. [ 1375.178339][T27338] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4479'. [ 1375.826028][T27351] random: crng reseeded on system resumption [ 1377.039967][T27374] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1377.128351][T27378] FAULT_INJECTION: forcing a failure. [ 1377.128351][T27378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.224811][T27378] CPU: 0 UID: 0 PID: 27378 Comm: syz.0.4488 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.224860][T27378] Tainted: [L]=SOFTLOCKUP [ 1377.224869][T27378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.224882][T27378] Call Trace: [ 1377.224891][T27378] [ 1377.224901][T27378] dump_stack_lvl+0x16c/0x1f0 [ 1377.224931][T27378] should_fail_ex+0x512/0x640 [ 1377.224963][T27378] _copy_from_user+0x2e/0xd0 [ 1377.224990][T27378] kstrtouint_from_user+0xd6/0x1d0 [ 1377.225023][T27378] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1377.225061][T27378] ? lock_acquire+0x179/0x330 [ 1377.225097][T27378] proc_fail_nth_write+0x83/0x220 [ 1377.225128][T27378] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1377.225167][T27378] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1377.225195][T27378] vfs_write+0x2a0/0x11d0 [ 1377.225222][T27378] ? __pfx___mutex_lock+0x10/0x10 [ 1377.225253][T27378] ? __pfx_vfs_write+0x10/0x10 [ 1377.225282][T27378] ? __fget_files+0x20e/0x3c0 [ 1377.225311][T27378] ksys_write+0x12a/0x250 [ 1377.225332][T27378] ? __pfx_ksys_write+0x10/0x10 [ 1377.225361][T27378] do_syscall_64+0xcd/0xf80 [ 1377.225384][T27378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.225406][T27378] RIP: 0033:0x7fb17c98e27f [ 1377.225423][T27378] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1377.225442][T27378] RSP: 002b:00007fb17d8b5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1377.225462][T27378] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb17c98e27f [ 1377.225475][T27378] RDX: 0000000000000001 RSI: 00007fb17d8b50a0 RDI: 0000000000000004 [ 1377.225486][T27378] RBP: 00007fb17d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.225498][T27378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1377.225509][T27378] R13: 00007fb17cbe6128 R14: 00007fb17cbe6090 R15: 00007ffcaf35d378 [ 1377.225536][T27378] [ 1377.781072][T27385] ubi0: attaching mtd0 [ 1377.812099][T27385] ubi0: scanning is finished [ 1377.844842][T27385] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1378.277391][T27385] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1379.593085][T27417] random: crng reseeded on system resumption [ 1380.730086][T27436] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1380.796503][T27436] FAULT_INJECTION: forcing a failure. [ 1380.796503][T27436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.884272][T27436] CPU: 1 UID: 0 PID: 27436 Comm: syz.4.4500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.884313][T27436] Tainted: [L]=SOFTLOCKUP [ 1380.884322][T27436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1380.884336][T27436] Call Trace: [ 1380.884345][T27436] [ 1380.884355][T27436] dump_stack_lvl+0x16c/0x1f0 [ 1380.884386][T27436] should_fail_ex+0x512/0x640 [ 1380.884420][T27436] _copy_to_user+0x32/0xd0 [ 1380.884450][T27436] simple_read_from_buffer+0xcb/0x170 [ 1380.884493][T27436] proc_fail_nth_read+0x197/0x240 [ 1380.884525][T27436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1380.884556][T27436] ? rw_verify_area+0xcf/0x6c0 [ 1380.884591][T27436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1380.884625][T27436] vfs_read+0x1e4/0xcf0 [ 1380.884650][T27436] ? __pfx___mutex_lock+0x10/0x10 [ 1380.884681][T27436] ? __pfx_vfs_read+0x10/0x10 [ 1380.884714][T27436] ? __fget_files+0x20e/0x3c0 [ 1380.884751][T27436] ksys_read+0x12a/0x250 [ 1380.884783][T27436] ? __pfx_ksys_read+0x10/0x10 [ 1380.884818][T27436] do_syscall_64+0xcd/0xf80 [ 1380.884846][T27436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.884870][T27436] RIP: 0033:0x7fc70478e1dc [ 1380.884891][T27436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1380.884915][T27436] RSP: 002b:00007fc705655030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1380.884940][T27436] RAX: ffffffffffffffda RBX: 00007fc7049e5fa0 RCX: 00007fc70478e1dc [ 1380.884956][T27436] RDX: 000000000000000f RSI: 00007fc7056550a0 RDI: 0000000000000005 [ 1380.884972][T27436] RBP: 00007fc705655090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.884988][T27436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1380.885003][T27436] R13: 00007fc7049e6038 R14: 00007fc7049e5fa0 R15: 00007ffcc80d1f08 [ 1380.885041][T27436] [ 1381.783317][T27449] ubi0: attaching mtd0 [ 1381.813515][T27449] ubi0: scanning is finished [ 1381.863809][T27449] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1382.228250][T27449] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1384.038539][T27483] bond0: option slaves: interface - does not exist! [ 1384.271146][T27487] random: crng reseeded on system resumption [ 1385.165383][T27500] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 1385.828829][T27509] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1385.857287][T27509] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1386.176040][T27519] random: crng reseeded on system resumption [ 1386.540001][T27507] ubi0: attaching mtd0 [ 1386.599098][T27507] ubi0: scanning is finished [ 1386.604012][T27507] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1387.076729][T27507] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1389.509618][T27568] ubi0: attaching mtd0 [ 1389.593546][T27568] ubi0: scanning is finished [ 1389.602093][T27568] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1389.923194][T27568] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1390.324937][T27591] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1390.988768][T27614] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91 [ 1391.439077][T27625] random: crng reseeded on system resumption [ 1391.613984][T27624] ubi0: attaching mtd0 [ 1391.619261][T27624] ubi0: scanning is finished [ 1391.623965][T27624] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1391.974253][T27624] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1392.352285][T27638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 1392.732603][T27651] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93 [ 1393.530231][T27663] random: crng reseeded on system resumption [ 1394.726912][T27683] random: crng reseeded on system resumption [ 1395.873728][T27714] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94 [ 1397.480454][T27744] FAULT_INJECTION: forcing a failure. [ 1397.480454][T27744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1397.541239][T27744] CPU: 0 UID: 0 PID: 27744 Comm: syz.3.4575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1397.541264][T27744] Tainted: [L]=SOFTLOCKUP [ 1397.541269][T27744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1397.541277][T27744] Call Trace: [ 1397.541282][T27744] [ 1397.541288][T27744] dump_stack_lvl+0x16c/0x1f0 [ 1397.541308][T27744] should_fail_ex+0x512/0x640 [ 1397.541327][T27744] should_fail_alloc_page+0xe7/0x130 [ 1397.541345][T27744] prepare_alloc_pages+0x3c2/0x610 [ 1397.541364][T27744] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1397.541390][T27744] ? irqentry_exit+0x1dd/0x8c0 [ 1397.541404][T27744] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.541418][T27744] ? irqentry_exit+0x1dd/0x8c0 [ 1397.541430][T27744] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 1397.541448][T27744] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1397.541475][T27744] ? rep_movs_alternative+0x4a/0x90 [ 1397.541494][T27744] ? _copy_from_iter+0x161/0x16c0 [ 1397.541511][T27744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1397.541527][T27744] ? policy_nodemask+0xea/0x4e0 [ 1397.541544][T27744] alloc_pages_mpol+0x1fb/0x550 [ 1397.541560][T27744] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1397.541580][T27744] alloc_pages_noprof+0x12d/0x180 [ 1397.541596][T27744] anon_pipe_write+0xecb/0x1990 [ 1397.541614][T27744] ? __print_lock_name+0xc0/0xe0 [ 1397.541639][T27744] ? __pfx_anon_pipe_write+0x10/0x10 [ 1397.541654][T27744] ? common_file_perm+0x1b1/0x500 [ 1397.541673][T27744] ? bpf_lsm_file_permission+0x9/0x10 [ 1397.541691][T27744] ? security_file_permission+0x71/0x210 [ 1397.541709][T27744] ? rw_verify_area+0xcf/0x6c0 [ 1397.541731][T27744] vfs_write+0x7d3/0x11d0 [ 1397.541746][T27744] ? __pfx_anon_pipe_write+0x10/0x10 [ 1397.541766][T27744] ? __pfx_vfs_write+0x10/0x10 [ 1397.541778][T27744] ? find_held_lock+0x2b/0x80 [ 1397.541828][T27744] ksys_write+0x1f8/0x250 [ 1397.541853][T27744] ? __pfx_ksys_write+0x10/0x10 [ 1397.541886][T27744] do_syscall_64+0xcd/0xf80 [ 1397.541903][T27744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.541917][T27744] RIP: 0033:0x7f6eb598f7c9 [ 1397.541929][T27744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.541942][T27744] RSP: 002b:00007f6eb67ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1397.541956][T27744] RAX: ffffffffffffffda RBX: 00007f6eb5be6090 RCX: 00007f6eb598f7c9 [ 1397.541966][T27744] RDX: 000000008000003f RSI: 0000000000000000 RDI: 0000000000000001 [ 1397.541974][T27744] RBP: 00007f6eb67ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.541982][T27744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1397.541991][T27744] R13: 00007f6eb5be6128 R14: 00007f6eb5be6090 R15: 00007ffe3100e208 [ 1397.542016][T27744] [ 1397.542925][T27748] random: crng reseeded on system resumption [ 1398.351505][T27760] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1398.455531][T27760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1398.917139][T27771] ubi0: attaching mtd0 [ 1399.098103][T27771] ubi0: scanning is finished [ 1399.126785][T27771] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1399.464414][T27771] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1400.812354][T27800] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95 [ 1401.043754][T27802] zswap: compressor not available [ 1401.056230][T27807] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1401.998664][T27830] ubi0: attaching mtd0 [ 1402.005247][T27830] ubi0: scanning is finished [ 1402.010044][T27830] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1402.422975][T27830] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1402.927189][T27842] FAULT_INJECTION: forcing a failure. [ 1402.927189][T27842] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.024794][T27842] CPU: 0 UID: 0 PID: 27842 Comm: syz.0.4598 Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.024835][T27842] Tainted: [L]=SOFTLOCKUP [ 1403.024843][T27842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1403.024857][T27842] Call Trace: [ 1403.024866][T27842] [ 1403.024875][T27842] dump_stack_lvl+0x16c/0x1f0 [ 1403.024906][T27842] should_fail_ex+0x512/0x640 [ 1403.024934][T27842] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 1403.024972][T27842] should_failslab+0xc2/0x120 [ 1403.025000][T27842] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 1403.025035][T27842] ? alloc_inode+0x64/0x240 [ 1403.025074][T27842] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1403.025098][T27842] ? alloc_inode+0x64/0x240 [ 1403.025135][T27842] alloc_inode+0x64/0x240 [ 1403.025168][T27842] new_inode+0x22/0x1c0 [ 1403.025205][T27842] __debugfs_create_file+0x11c/0x6b0 [ 1403.025238][T27842] debugfs_create_file_full+0x41/0x60 [ 1403.025270][T27842] drm_debugfs_clients_add+0xd9/0x200 [ 1403.025300][T27842] drm_file_alloc+0x5c6/0xb40 [ 1403.025334][T27842] drm_open_helper+0x204/0x550 [ 1403.025367][T27842] drm_open+0x1a0/0x3e0 [ 1403.025395][T27842] ? __pfx_drm_open+0x10/0x10 [ 1403.025423][T27842] drm_stub_open+0x20f/0x380 [ 1403.025453][T27842] ? __pfx_drm_stub_open+0x10/0x10 [ 1403.025480][T27842] chrdev_open+0x234/0x6a0 [ 1403.025508][T27842] ? __pfx_apparmor_file_open+0x10/0x10 [ 1403.025533][T27842] ? __pfx_chrdev_open+0x10/0x10 [ 1403.025563][T27842] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1403.025601][T27842] do_dentry_open+0x748/0x1590 [ 1403.025626][T27842] ? __pfx_chrdev_open+0x10/0x10 [ 1403.025663][T27842] vfs_open+0x82/0x3f0 [ 1403.025701][T27842] path_openat+0x2078/0x3140 [ 1403.025740][T27842] ? __pfx_path_openat+0x10/0x10 [ 1403.025782][T27842] do_filp_open+0x20b/0x470 [ 1403.025811][T27842] ? __pfx_do_filp_open+0x10/0x10 [ 1403.025865][T27842] ? alloc_fd+0x471/0x7d0 [ 1403.025900][T27842] do_sys_openat2+0x11f/0x280 [ 1403.025930][T27842] ? __pfx_do_sys_openat2+0x10/0x10 [ 1403.025964][T27842] ? __fget_files+0x20e/0x3c0 [ 1403.025984][T27842] __x64_sys_openat+0x174/0x210 [ 1403.026004][T27842] ? __pfx___x64_sys_openat+0x10/0x10 [ 1403.026022][T27842] ? ksys_write+0x1ac/0x250 [ 1403.026043][T27842] do_syscall_64+0xcd/0xf80 [ 1403.026059][T27842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.026074][T27842] RIP: 0033:0x7fb17c98f7c9 [ 1403.026086][T27842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.026100][T27842] RSP: 002b:00007fb17d8d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1403.026119][T27842] RAX: ffffffffffffffda RBX: 00007fb17cbe5fa0 RCX: 00007fb17c98f7c9 [ 1403.026129][T27842] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1403.026138][T27842] RBP: 00007fb17d8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.026147][T27842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.026155][T27842] R13: 00007fb17cbe6038 R14: 00007fb17cbe5fa0 R15: 00007ffcaf35d378 [ 1403.026175][T27842] [ 1403.026181][T27842] debugfs: out of free dentries, can not create file 'proc_info' [ 1404.226420][T27862] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96 [ 1405.860474][T27882] ubi0: attaching mtd0 [ 1405.873876][T27882] ubi0: scanning is finished [ 1406.066957][T27882] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1406.123927][T27888] FAULT_INJECTION: forcing a failure. [ 1406.123927][T27888] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.157827][T27888] CPU: 0 UID: 0 PID: 27888 Comm: syz.2.4608 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.157850][T27888] Tainted: [L]=SOFTLOCKUP [ 1406.157856][T27888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1406.157864][T27888] Call Trace: [ 1406.157869][T27888] [ 1406.157876][T27888] dump_stack_lvl+0x16c/0x1f0 [ 1406.157894][T27888] should_fail_ex+0x512/0x640 [ 1406.157910][T27888] ? kmem_cache_alloc_noprof+0x62/0x760 [ 1406.157932][T27888] should_failslab+0xc2/0x120 [ 1406.157948][T27888] kmem_cache_alloc_noprof+0x75/0x760 [ 1406.157967][T27888] ? __pfx_acct_collect+0x10/0x10 [ 1406.157979][T27888] ? taskstats_exit+0x654/0xbe0 [ 1406.157996][T27888] ? taskstats_exit+0x654/0xbe0 [ 1406.158007][T27888] taskstats_exit+0x654/0xbe0 [ 1406.158021][T27888] ? __pfx_taskstats_exit+0x10/0x10 [ 1406.158035][T27888] ? hrtimer_try_to_cancel+0x3a/0x4d0 [ 1406.158060][T27888] do_exit+0x5e4/0x2bd0 [ 1406.158080][T27888] ? __pfx_do_exit+0x10/0x10 [ 1406.158094][T27888] ? do_raw_spin_lock+0x12c/0x2b0 [ 1406.158113][T27888] ? find_held_lock+0x2b/0x80 [ 1406.158136][T27888] do_group_exit+0xd3/0x2a0 [ 1406.158153][T27888] get_signal+0x2671/0x26d0 [ 1406.158173][T27888] ? __pfx_futex_wake+0x10/0x10 [ 1406.158199][T27888] ? __pfx_get_signal+0x10/0x10 [ 1406.158221][T27888] ? do_futex+0x122/0x350 [ 1406.158240][T27888] arch_do_signal_or_restart+0x8f/0x7a0 [ 1406.158260][T27888] ? mntput+0x10/0x90 [ 1406.158273][T27888] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1406.158298][T27888] ? __pfx___x64_sys_futex+0x10/0x10 [ 1406.158320][T27888] exit_to_user_mode_loop+0x8c/0x540 [ 1406.158343][T27888] do_syscall_64+0x4ee/0xf80 [ 1406.158360][T27888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.158374][T27888] RIP: 0033:0x7f2858b8f7c9 [ 1406.158385][T27888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.158399][T27888] RSP: 002b:00007f285999e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1406.158413][T27888] RAX: 0000000000000001 RBX: 00007f2858de5fa8 RCX: 00007f2858b8f7c9 [ 1406.158422][T27888] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2858de5fac [ 1406.158431][T27888] RBP: 00007f2858de5fa0 R08: 00007f285999f000 R09: 0000000000000000 [ 1406.158439][T27888] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1406.158448][T27888] R13: 00007f2858de6038 R14: 00007ffecaa20450 R15: 00007ffecaa20538 [ 1406.158467][T27888] [ 1406.841193][T27882] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1406.952977][T27898] FAULT_INJECTION: forcing a failure. [ 1406.952977][T27898] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1406.975971][T27898] CPU: 0 UID: 0 PID: 27898 Comm: syz.4.4611 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.975995][T27898] Tainted: [L]=SOFTLOCKUP [ 1406.976001][T27898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1406.976010][T27898] Call Trace: [ 1406.976015][T27898] [ 1406.976022][T27898] dump_stack_lvl+0x16c/0x1f0 [ 1406.976042][T27898] should_fail_ex+0x512/0x640 [ 1406.976058][T27898] ? __schedule+0x114c/0x6150 [ 1406.976083][T27898] get_futex_key+0x1d0/0x15f0 [ 1406.976104][T27898] ? __pfx_get_futex_key+0x10/0x10 [ 1406.976128][T27898] futex_wait_setup+0x9d/0x570 [ 1406.976146][T27898] __futex_wait+0x193/0x2f0 [ 1406.976160][T27898] ? __pfx___futex_wait+0x10/0x10 [ 1406.976180][T27898] ? __pfx_futex_wake_mark+0x10/0x10 [ 1406.976204][T27898] ? futex_hash+0x2c5/0x380 [ 1406.976223][T27898] ? futex_private_hash_put+0x160/0x1b0 [ 1406.976243][T27898] futex_wait+0xe8/0x380 [ 1406.976256][T27898] ? __pfx_futex_wait+0x10/0x10 [ 1406.976275][T27898] ? find_held_lock+0x2b/0x80 [ 1406.976295][T27898] ? __might_fault+0xe3/0x190 [ 1406.976314][T27898] ? __might_fault+0xe3/0x190 [ 1406.976333][T27898] do_futex+0x229/0x350 [ 1406.976352][T27898] ? __pfx_do_futex+0x10/0x10 [ 1406.976370][T27898] ? _copy_from_user+0x59/0xd0 [ 1406.976383][T27898] ? mntput+0x10/0x90 [ 1406.976396][T27898] ? do_handle_open+0x2ce/0xd10 [ 1406.976414][T27898] __x64_sys_futex+0x1e0/0x4c0 [ 1406.976435][T27898] ? __pfx___x64_sys_futex+0x10/0x10 [ 1406.976454][T27898] ? xfd_validate_state+0x61/0x180 [ 1406.976474][T27898] do_syscall_64+0xcd/0xf80 [ 1406.976490][T27898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.976505][T27898] RIP: 0033:0x7fc70478f7c9 [ 1406.976517][T27898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.976531][T27898] RSP: 002b:00007fc7056550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1406.976545][T27898] RAX: ffffffffffffffda RBX: 00007fc7049e5fa8 RCX: 00007fc70478f7c9 [ 1406.976554][T27898] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc7049e5fa8 [ 1406.976563][T27898] RBP: 00007fc7049e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.976572][T27898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.976580][T27898] R13: 00007fc7049e6038 R14: 00007ffcc80d1e20 R15: 00007ffcc80d1f08 [ 1406.976600][T27898] [ 1409.174021][T27939] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1409.237174][T27938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4620'. [ 1409.643476][T27946] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1409.868977][T27949] random: crng reseeded on system resumption [ 1410.466686][T14143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1410.479706][T14143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1410.489437][T14143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1410.497550][T14143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1410.523200][T14143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1411.440505][T27955] chnl_net:caif_netlink_parms(): no params data found [ 1411.772010][T27955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.797305][T27955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.830881][T27955] bridge_slave_0: entered allmulticast mode [ 1411.857143][T27955] bridge_slave_0: entered promiscuous mode [ 1411.870783][T27955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.886595][T27955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.915745][T27955] bridge_slave_1: entered allmulticast mode [ 1411.933156][T27955] bridge_slave_1: entered promiscuous mode [ 1412.085710][ T8789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.320239][ T8789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.388706][T27955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.410014][T27955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.460654][ T8789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.604832][ T5156] Bluetooth: hci4: command tx timeout [ 1412.737233][ T8789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.811717][T27955] team0: Port device team_slave_0 added [ 1412.863924][T27955] team0: Port device team_slave_1 added [ 1413.025134][T27955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.037340][T27955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.116865][T27955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.181288][T27955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.190286][T27955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.217486][T27955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.423729][T27986] FAULT_INJECTION: forcing a failure. [ 1413.423729][T27986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1413.432213][T27955] hsr_slave_0: entered promiscuous mode [ 1413.443500][T27986] CPU: 0 UID: 0 PID: 27986 Comm: syz.4.4632 Tainted: G L syzkaller #0 PREEMPT(full) [ 1413.443536][T27986] Tainted: [L]=SOFTLOCKUP [ 1413.443546][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1413.443561][T27986] Call Trace: [ 1413.443570][T27986] [ 1413.443582][T27986] dump_stack_lvl+0x16c/0x1f0 [ 1413.443613][T27986] should_fail_ex+0x512/0x640 [ 1413.443640][T27986] ? __schedule+0x114c/0x6150 [ 1413.443679][T27986] get_futex_key+0x1d0/0x15f0 [ 1413.443716][T27986] ? __pfx_get_futex_key+0x10/0x10 [ 1413.443757][T27986] futex_wait_setup+0x9d/0x570 [ 1413.443793][T27986] __futex_wait+0x193/0x2f0 [ 1413.443819][T27986] ? __pfx___futex_wait+0x10/0x10 [ 1413.443850][T27986] ? __pfx_futex_wake_mark+0x10/0x10 [ 1413.443890][T27986] ? futex_hash+0x2c5/0x380 [ 1413.443924][T27986] ? futex_private_hash_put+0x160/0x1b0 [ 1413.443957][T27986] futex_wait+0xe8/0x380 [ 1413.443980][T27986] ? __pfx_futex_wait+0x10/0x10 [ 1413.444010][T27986] ? find_held_lock+0x2b/0x80 [ 1413.444045][T27986] ? __might_fault+0xe3/0x190 [ 1413.444077][T27986] ? __might_fault+0xe3/0x190 [ 1413.444115][T27986] do_futex+0x229/0x350 [ 1413.444150][T27986] ? __pfx_do_futex+0x10/0x10 [ 1413.444183][T27986] ? _copy_from_user+0x59/0xd0 [ 1413.444209][T27986] ? mntput+0x10/0x90 [ 1413.444233][T27986] ? do_handle_open+0x2ce/0xd10 [ 1413.444276][T27986] __x64_sys_futex+0x1e0/0x4c0 [ 1413.444317][T27986] ? __pfx___x64_sys_futex+0x10/0x10 [ 1413.444352][T27986] ? xfd_validate_state+0x61/0x180 [ 1413.444390][T27986] do_syscall_64+0xcd/0xf80 [ 1413.444421][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.444449][T27986] RIP: 0033:0x7fc70478f7c9 [ 1413.444471][T27986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.444497][T27986] RSP: 002b:00007fc7056550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1413.444522][T27986] RAX: ffffffffffffffda RBX: 00007fc7049e5fa8 RCX: 00007fc70478f7c9 [ 1413.444541][T27986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc7049e5fa8 [ 1413.444558][T27986] RBP: 00007fc7049e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1413.444574][T27986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1413.444591][T27986] R13: 00007fc7049e6038 R14: 00007ffcc80d1e20 R15: 00007ffcc80d1f08 [ 1413.444630][T27986] [ 1413.485808][T27955] hsr_slave_1: entered promiscuous mode [ 1413.695891][T27955] debugfs: 'hsr0' already exists in 'hsr' [ 1413.701641][T27955] Cannot create hsr debugfs directory [ 1413.707583][ T8789] bridge_slave_1: left allmulticast mode [ 1413.713243][ T8789] bridge_slave_1: left promiscuous mode [ 1413.727563][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.745419][ T8789] bridge_slave_0: left allmulticast mode [ 1413.754488][ T8789] bridge_slave_0: left promiscuous mode [ 1413.762872][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.861334][T28003] random: crng reseeded on system resumption [ 1414.572132][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.608416][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.625572][ T8789] bond0 (unregistering): Released all slaves [ 1414.684844][ T5156] Bluetooth: hci4: command tx timeout [ 1414.743173][ T8789] HfR: left promiscuous mode [ 1414.924128][T28011] FAULT_INJECTION: forcing a failure. [ 1414.924128][T28011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1415.004863][T28011] CPU: 1 UID: 0 PID: 28011 Comm: syz.2.4638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.004903][T28011] Tainted: [L]=SOFTLOCKUP [ 1415.004912][T28011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1415.004927][T28011] Call Trace: [ 1415.004935][T28011] [ 1415.004946][T28011] dump_stack_lvl+0x16c/0x1f0 [ 1415.004977][T28011] should_fail_ex+0x512/0x640 [ 1415.005009][T28011] get_futex_key+0x293/0x15f0 [ 1415.005046][T28011] ? __pfx_get_futex_key+0x10/0x10 [ 1415.005080][T28011] ? __pfx___might_resched+0x10/0x10 [ 1415.005109][T28011] futex_wake+0xea/0x530 [ 1415.005148][T28011] ? __pfx_futex_wake+0x10/0x10 [ 1415.005200][T28011] do_futex+0x1e3/0x350 [ 1415.005231][T28011] ? __pfx_do_futex+0x10/0x10 [ 1415.005259][T28011] ? __might_fault+0xe3/0x190 [ 1415.005302][T28011] mm_release+0x24e/0x300 [ 1415.005338][T28011] do_exit+0x69e/0x2bd0 [ 1415.005372][T28011] ? __pfx_do_exit+0x10/0x10 [ 1415.005398][T28011] ? do_raw_spin_lock+0x12c/0x2b0 [ 1415.005429][T28011] ? find_held_lock+0x2b/0x80 [ 1415.005468][T28011] do_group_exit+0xd3/0x2a0 [ 1415.005496][T28011] get_signal+0x2671/0x26d0 [ 1415.005545][T28011] ? __pfx_get_signal+0x10/0x10 [ 1415.005583][T28011] ? do_futex+0x122/0x350 [ 1415.005617][T28011] arch_do_signal_or_restart+0x8f/0x7a0 [ 1415.005650][T28011] ? mntput+0x10/0x90 [ 1415.005673][T28011] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1415.005725][T28011] ? __pfx___x64_sys_futex+0x10/0x10 [ 1415.005764][T28011] exit_to_user_mode_loop+0x8c/0x540 [ 1415.005802][T28011] do_syscall_64+0x4ee/0xf80 [ 1415.005830][T28011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.005860][T28011] RIP: 0033:0x7f2858b8f7c9 [ 1415.005880][T28011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.005903][T28011] RSP: 002b:00007f285999e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1415.005926][T28011] RAX: fffffffffffffe00 RBX: 00007f2858de5fa8 RCX: 00007f2858b8f7c9 [ 1415.005943][T28011] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2858de5fa8 [ 1415.005958][T28011] RBP: 00007f2858de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.005973][T28011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.005988][T28011] R13: 00007f2858de6038 R14: 00007ffecaa20450 R15: 00007ffecaa20538 [ 1415.006023][T28011] [ 1415.939974][ T8789] hsr_slave_0: left promiscuous mode [ 1416.026374][ T8789] hsr_slave_1: left promiscuous mode [ 1416.032346][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.067183][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.113143][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.144525][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.243258][ T8789] veth1_macvtap: left promiscuous mode [ 1416.298372][ T8789] veth0_macvtap: left promiscuous mode [ 1416.322902][ T8789] veth1_vlan: left promiscuous mode [ 1416.338823][ T8789] veth0_vlan: left promiscuous mode [ 1416.765450][ T5156] Bluetooth: hci4: command tx timeout [ 1416.860133][T28044] FAULT_INJECTION: forcing a failure. [ 1416.860133][T28044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1416.886166][T28044] CPU: 0 UID: 0 PID: 28044 Comm: syz.2.4643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.886202][T28044] Tainted: [L]=SOFTLOCKUP [ 1416.886209][T28044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1416.886222][T28044] Call Trace: [ 1416.886230][T28044] [ 1416.886239][T28044] dump_stack_lvl+0x16c/0x1f0 [ 1416.886267][T28044] should_fail_ex+0x512/0x640 [ 1416.886296][T28044] should_fail_alloc_page+0xe7/0x130 [ 1416.886325][T28044] prepare_alloc_pages+0x3c2/0x610 [ 1416.886349][T28044] ? rcu_is_watching+0x12/0xc0 [ 1416.886375][T28044] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1416.886410][T28044] ? __lock_acquire+0x433/0x22f0 [ 1416.886447][T28044] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1416.886478][T28044] ? do_raw_spin_lock+0x12c/0x2b0 [ 1416.886508][T28044] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1416.886537][T28044] ? find_held_lock+0x2b/0x80 [ 1416.886581][T28044] ? __lock_acquire+0x433/0x22f0 [ 1416.886604][T28044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1416.886629][T28044] ? policy_nodemask+0xea/0x4e0 [ 1416.886667][T28044] alloc_pages_mpol+0x1fb/0x550 [ 1416.886692][T28044] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1416.886717][T28044] ? __lock_acquire+0x433/0x22f0 [ 1416.886748][T28044] folio_alloc_mpol_noprof+0x36/0xe0 [ 1416.886778][T28044] shmem_alloc_folio+0x135/0x160 [ 1416.886806][T28044] shmem_alloc_and_add_folio+0x494/0xc20 [ 1416.886841][T28044] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1416.886872][T28044] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1416.886909][T28044] shmem_get_folio_gfp+0x67f/0x1610 [ 1416.886945][T28044] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1416.886979][T28044] ? filemap_map_pages+0x12dd/0x1e00 [ 1416.887014][T28044] shmem_fault+0x1fe/0xa00 [ 1416.887043][T28044] ? __pfx_shmem_fault+0x10/0x10 [ 1416.887077][T28044] ? __pfx_filemap_map_pages+0x10/0x10 [ 1416.887114][T28044] __do_fault+0x10d/0x490 [ 1416.887152][T28044] do_pte_missing+0xfb2/0x4000 [ 1416.887183][T28044] ? __handle_mm_fault+0x151e/0x2ad0 [ 1416.887213][T28044] __handle_mm_fault+0x154b/0x2ad0 [ 1416.887249][T28044] ? __pfx___handle_mm_fault+0x10/0x10 [ 1416.887295][T28044] ? find_vma+0xbf/0x140 [ 1416.887325][T28044] ? __pfx_find_vma+0x10/0x10 [ 1416.887361][T28044] handle_mm_fault+0x3fe/0xad0 [ 1416.887393][T28044] do_user_addr_fault+0x2e4/0xda0 [ 1416.887424][T28044] ? rcu_is_watching+0x12/0xc0 [ 1416.887450][T28044] exc_page_fault+0x64/0xc0 [ 1416.887474][T28044] asm_exc_page_fault+0x26/0x30 [ 1416.887496][T28044] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1416.887525][T28044] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 77 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1416.887546][T28044] RSP: 0018:ffffc9000f6efa30 EFLAGS: 00050206 [ 1416.887564][T28044] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 1416.887578][T28044] RDX: 0000000000000000 RSI: 0000000000003000 RDI: ffff888034704000 [ 1416.887592][T28044] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10068e09ff [ 1416.887605][T28044] R10: ffff888034704fff R11: 0000000000000000 R12: 0000000000003000 [ 1416.887619][T28044] R13: ffffea0000d1c100 R14: ffffc9000f6efd90 R15: ffff888034704000 [ 1416.887659][T28044] _copy_from_iter+0x355/0x16c0 [ 1416.887687][T28044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1416.887715][T28044] ? __pfx__copy_from_iter+0x10/0x10 [ 1416.887741][T28044] ? alloc_pages_mpol+0x25a/0x550 [ 1416.887767][T28044] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1416.887797][T28044] copy_page_from_iter+0xde/0x180 [ 1416.887826][T28044] anon_pipe_write+0xef0/0x1990 [ 1416.887854][T28044] ? __print_lock_name+0xc0/0xe0 [ 1416.887895][T28044] ? __pfx_anon_pipe_write+0x10/0x10 [ 1416.887924][T28044] ? common_file_perm+0x1b1/0x500 [ 1416.887953][T28044] ? bpf_lsm_file_permission+0x9/0x10 [ 1416.887982][T28044] ? security_file_permission+0x71/0x210 [ 1416.888009][T28044] ? rw_verify_area+0xcf/0x6c0 [ 1416.888045][T28044] vfs_write+0x7d3/0x11d0 [ 1416.888070][T28044] ? __pfx_anon_pipe_write+0x10/0x10 [ 1416.888097][T28044] ? __pfx_vfs_write+0x10/0x10 [ 1416.888118][T28044] ? find_held_lock+0x2b/0x80 [ 1416.888172][T28044] ksys_write+0x1f8/0x250 [ 1416.888194][T28044] ? __pfx_ksys_write+0x10/0x10 [ 1416.888227][T28044] do_syscall_64+0xcd/0xf80 [ 1416.888252][T28044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.888275][T28044] RIP: 0033:0x7f2858b8f7c9 [ 1416.888294][T28044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.888315][T28044] RSP: 002b:00007f285997d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1416.888336][T28044] RAX: ffffffffffffffda RBX: 00007f2858de6090 RCX: 00007f2858b8f7c9 [ 1416.888351][T28044] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1416.888364][T28044] RBP: 00007f285997d090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.888378][T28044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.888391][T28044] R13: 00007f2858de6128 R14: 00007f2858de6090 R15: 00007ffecaa20538 [ 1416.888425][T28044] [ 1417.694859][T28050] random: crng reseeded on system resumption [ 1418.733872][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 1418.791231][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 1418.844724][ T5156] Bluetooth: hci4: command tx timeout [ 1419.611861][T28073] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97 [ 1421.079239][T27955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1421.112396][T28101] random: crng reseeded on system resumption [ 1421.120719][T27955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1421.149690][T27955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1421.174387][T27955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1421.546726][T27955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.602014][T27955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.664227][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.671354][ T8786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.723794][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.730978][ T8789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.865017][T28139] zswap: compressor not available [ 1422.898135][T27955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.010431][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.016825][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.108959][T27955] veth0_vlan: entered promiscuous mode [ 1423.138457][T27955] veth1_vlan: entered promiscuous mode [ 1423.208361][T27955] veth0_macvtap: entered promiscuous mode [ 1423.239512][T27955] veth1_macvtap: entered promiscuous mode [ 1423.351811][T27955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.373078][T27955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.410706][ T4515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.467485][ T4515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.513552][ T4515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.550155][ T4515] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.952471][T15062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.983494][T15062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.150449][T15062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.172719][T15062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.340984][T28176] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1425.002746][T28189] zswap: compressor not available [ 1425.567103][T28213] random: crng reseeded on system resumption [ 1426.632253][T28243] random: crng reseeded on system resumption [ 1428.611969][T28289] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1428.807857][T28293] random: crng reseeded on system resumption [ 1429.982578][T28322] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4689'. [ 1430.844953][T28331] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4691'. [ 1432.579351][T28361] zswap: compressor not available [ 1432.823278][T28363] zswap: compressor not available [ 1432.837489][T28378] random: crng reseeded on system resumption [ 1433.095506][T28381] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1433.278662][T28387] random: crng reseeded on system resumption [ 1435.016301][T28412] zswap: compressor not available [ 1436.180160][T28438] random: crng reseeded on system resumption [ 1436.881520][T28448] zswap: compressor not available [ 1437.282563][T28461] random: crng reseeded on system resumption [ 1438.657036][T28489] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1439.141536][T28496] random: crng reseeded on system resumption [ 1439.379411][T28496] ubi31: attaching mtd0 [ 1439.426095][T28496] ubi31: scanning is finished [ 1439.452542][T28499] zswap: compressor not available [ 1439.462888][T28496] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1439.793785][T28496] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1442.781201][T28555] random: crng reseeded on system resumption [ 1445.093372][T28598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.857232][T28623] zswap: compressor not available [ 1448.210469][T28649] zswap: compressor not available [ 1448.421572][T28660] zswap: compressor not available [ 1451.670375][T28716] FAULT_INJECTION: forcing a failure. [ 1451.670375][T28716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.756901][T28716] CPU: 1 UID: 0 PID: 28716 Comm: syz.2.4779 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.756946][T28716] Tainted: [L]=SOFTLOCKUP [ 1451.756958][T28716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1451.756973][T28716] Call Trace: [ 1451.756981][T28716] [ 1451.756990][T28716] dump_stack_lvl+0x16c/0x1f0 [ 1451.757021][T28716] should_fail_ex+0x512/0x640 [ 1451.757051][T28716] _copy_from_user+0x2e/0xd0 [ 1451.757078][T28716] get_timespec64+0x8b/0x1b0 [ 1451.757108][T28716] ? __pfx_get_timespec64+0x10/0x10 [ 1451.757144][T28716] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 1451.757170][T28716] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1451.757204][T28716] do_syscall_64+0xcd/0xf80 [ 1451.757230][T28716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.757254][T28716] RIP: 0033:0x7f2858b8f7c9 [ 1451.757274][T28716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.757297][T28716] RSP: 002b:00007f285995c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1451.757320][T28716] RAX: ffffffffffffffda RBX: 00007f2858de6180 RCX: 00007f2858b8f7c9 [ 1451.757336][T28716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1451.757351][T28716] RBP: 00007f285995c090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.757364][T28716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.757378][T28716] R13: 00007f2858de6218 R14: 00007f2858de6180 R15: 00007ffecaa20538 [ 1451.757412][T28716] [ 1452.165693][T28718] random: crng reseeded on system resumption [ 1452.296494][T14143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1452.316684][T14143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1452.324495][T14143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1452.334164][T28711] ubi0: attaching mtd0 [ 1452.339045][T14143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1452.346862][T14143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1452.373578][T28711] ubi0: scanning is finished [ 1452.392500][T28711] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1452.567723][ T4515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.777050][ T4515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.796719][T28711] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1452.937759][ T4515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.185740][T28719] chnl_net:caif_netlink_parms(): no params data found [ 1453.624454][T28719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.657040][T28719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.701037][T28719] bridge_slave_0: entered allmulticast mode [ 1453.735070][T28719] bridge_slave_0: entered promiscuous mode [ 1453.756803][T28719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.775501][T28719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.794466][T28719] bridge_slave_1: entered allmulticast mode [ 1453.826257][T28719] bridge_slave_1: entered promiscuous mode [ 1453.982818][ T4515] bridge_slave_1: left allmulticast mode [ 1454.002391][ T4515] bridge_slave_1: left promiscuous mode [ 1454.026581][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.062729][ T4515] bridge_slave_0: left allmulticast mode [ 1454.081364][ T4515] bridge_slave_0: left promiscuous mode [ 1454.095884][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.454891][ T5156] Bluetooth: hci0: command tx timeout [ 1454.637074][T28776] ubi0: attaching mtd0 [ 1454.693530][T28776] ubi0: scanning is finished [ 1454.707608][T28776] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1454.942147][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.037552][T28776] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1455.068101][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.114813][ T4515] bond0 (unregistering): Released all slaves [ 1455.155716][T28719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.197829][T28719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.315308][T28789] FAULT_INJECTION: forcing a failure. [ 1455.315308][T28789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.328697][T28789] CPU: 0 UID: 0 PID: 28789 Comm: syz.3.4793 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.328734][T28789] Tainted: [L]=SOFTLOCKUP [ 1455.328744][T28789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1455.328758][T28789] Call Trace: [ 1455.328767][T28789] [ 1455.328777][T28789] dump_stack_lvl+0x16c/0x1f0 [ 1455.328808][T28789] should_fail_ex+0x512/0x640 [ 1455.328840][T28789] _copy_from_user+0x2e/0xd0 [ 1455.328868][T28789] ip6_mroute_setsockopt+0x2a1e/0x39e0 [ 1455.328914][T28789] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1455.328946][T28789] ? find_held_lock+0x2b/0x80 [ 1455.328985][T28789] ? bpf_ksym_find+0x124/0x1c0 [ 1455.329016][T28789] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1455.329045][T28789] ? is_bpf_text_address+0x94/0x1a0 [ 1455.329080][T28789] ? kernel_text_address+0x8d/0x100 [ 1455.329112][T28789] ? __kernel_text_address+0xd/0x40 [ 1455.329142][T28789] ? unwind_get_return_address+0x59/0xa0 [ 1455.329175][T28789] ? arch_stack_walk+0xa6/0x100 [ 1455.329221][T28789] ? _parse_integer_limit+0x17f/0x1d0 [ 1455.329257][T28789] ? do_ipv6_setsockopt+0x880/0x4570 [ 1455.329282][T28789] ? __pfx__kstrtoull+0x10/0x10 [ 1455.329310][T28789] do_ipv6_setsockopt+0x880/0x4570 [ 1455.329343][T28789] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1455.329376][T28789] ? __lock_acquire+0x433/0x22f0 [ 1455.329408][T28789] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1455.329446][T28789] ? find_held_lock+0x2b/0x80 [ 1455.329482][T28789] ? get_pid_task+0xfc/0x250 [ 1455.329518][T28789] ? find_held_lock+0x2b/0x80 [ 1455.329552][T28789] ? __pfx___might_resched+0x10/0x10 [ 1455.329585][T28789] ? ipv6_setsockopt+0xcb/0x170 [ 1455.329604][T28789] ipv6_setsockopt+0xcb/0x170 [ 1455.329627][T28789] rawv6_setsockopt+0xd1/0x6a0 [ 1455.329646][T28789] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1455.329669][T28789] ? sock_common_setsockopt+0x2e/0xf0 [ 1455.329696][T28789] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1455.329724][T28789] do_sock_setsockopt+0xf3/0x1d0 [ 1455.329754][T28789] __sys_setsockopt+0x120/0x1a0 [ 1455.329782][T28789] __x64_sys_setsockopt+0xbd/0x160 [ 1455.329808][T28789] ? do_syscall_64+0x91/0xf80 [ 1455.329828][T28789] ? lockdep_hardirqs_on+0x7c/0x110 [ 1455.329851][T28789] do_syscall_64+0xcd/0xf80 [ 1455.329876][T28789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.329899][T28789] RIP: 0033:0x7ff7e9b8f7c9 [ 1455.329914][T28789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1455.329932][T28789] RSP: 002b:00007ff7eaab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1455.329949][T28789] RAX: ffffffffffffffda RBX: 00007ff7e9de6090 RCX: 00007ff7e9b8f7c9 [ 1455.329960][T28789] RDX: 00000000000000cd RSI: 0000000000000029 RDI: 0400000000000003 [ 1455.329972][T28789] RBP: 00007ff7eaab3090 R08: 0000000000000567 R09: 0000000000000000 [ 1455.329982][T28789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.329992][T28789] R13: 00007ff7e9de6128 R14: 00007ff7e9de6090 R15: 00007ffda6256dd8 [ 1455.330017][T28789] [ 1455.333391][T28783] zswap: compressor not available [ 1455.350753][T28719] team0: Port device team_slave_0 added [ 1455.761112][T28719] team0: Port device team_slave_1 added [ 1455.927142][T28719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.938478][T28719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.035474][T28719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.100009][ T4515] hsr_slave_0: left promiscuous mode [ 1456.122877][ T4515] hsr_slave_1: left promiscuous mode [ 1456.130137][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.156735][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.245980][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.254717][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.288465][ T4515] veth1_macvtap: left promiscuous mode [ 1456.294385][ T4515] veth0_macvtap: left promiscuous mode [ 1456.300142][ T4515] veth1_vlan: left promiscuous mode [ 1456.309055][ T4515] veth0_vlan: left promiscuous mode [ 1456.524926][ T5156] Bluetooth: hci0: command tx timeout [ 1457.086400][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 1457.177706][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 1457.692006][T28719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.706294][T28719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.732858][T28719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.847034][T28719] hsr_slave_0: entered promiscuous mode [ 1457.859748][T28719] hsr_slave_1: entered promiscuous mode [ 1458.604751][ T5156] Bluetooth: hci0: command tx timeout [ 1459.280455][T28719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1459.330156][T28719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1459.415445][T28719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1459.442850][T28719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1459.464431][T28847] random: crng reseeded on system resumption [ 1459.854137][T28719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.920032][T28719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.981381][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.988536][ T8786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.039355][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.046483][T15062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.684863][ T5156] Bluetooth: hci0: command tx timeout [ 1460.816055][T28719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.886770][T28885] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.4806: 7 [ 1460.970409][T28719] veth0_vlan: entered promiscuous mode [ 1461.086935][T28719] veth1_vlan: entered promiscuous mode [ 1461.149547][T28719] veth0_macvtap: entered promiscuous mode [ 1461.185547][T28719] veth1_macvtap: entered promiscuous mode [ 1461.318410][T28897] FAULT_INJECTION: forcing a failure. [ 1461.318410][T28897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.380126][T28719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.431690][T28719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.451283][ T4515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.496070][T28897] CPU: 1 UID: 0 PID: 28897 Comm: syz.2.4807 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.496110][T28897] Tainted: [L]=SOFTLOCKUP [ 1461.496119][T28897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1461.496133][T28897] Call Trace: [ 1461.496141][T28897] [ 1461.496151][T28897] dump_stack_lvl+0x16c/0x1f0 [ 1461.496182][T28897] should_fail_ex+0x512/0x640 [ 1461.496213][T28897] _copy_from_iter+0x2a4/0x16c0 [ 1461.496242][T28897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1461.496271][T28897] ? __pfx__copy_from_iter+0x10/0x10 [ 1461.496301][T28897] ? alloc_pages_mpol+0x25a/0x550 [ 1461.496329][T28897] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1461.496362][T28897] copy_page_from_iter+0xde/0x180 [ 1461.496394][T28897] anon_pipe_write+0xef0/0x1990 [ 1461.496425][T28897] ? __print_lock_name+0xc0/0xe0 [ 1461.496470][T28897] ? __pfx_anon_pipe_write+0x10/0x10 [ 1461.496495][T28897] ? common_file_perm+0x1b1/0x500 [ 1461.496527][T28897] ? bpf_lsm_file_permission+0x9/0x10 [ 1461.496558][T28897] ? security_file_permission+0x71/0x210 [ 1461.496588][T28897] ? rw_verify_area+0xcf/0x6c0 [ 1461.496626][T28897] vfs_write+0x7d3/0x11d0 [ 1461.496651][T28897] ? __pfx_anon_pipe_write+0x10/0x10 [ 1461.496680][T28897] ? __pfx_vfs_write+0x10/0x10 [ 1461.496702][T28897] ? find_held_lock+0x2b/0x80 [ 1461.496758][T28897] ksys_write+0x1f8/0x250 [ 1461.496782][T28897] ? __pfx_ksys_write+0x10/0x10 [ 1461.496817][T28897] do_syscall_64+0xcd/0xf80 [ 1461.496845][T28897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.496869][T28897] RIP: 0033:0x7f2858b8f7c9 [ 1461.496888][T28897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1461.496920][T28897] RSP: 002b:00007f285997d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1461.496943][T28897] RAX: ffffffffffffffda RBX: 00007f2858de6090 RCX: 00007f2858b8f7c9 [ 1461.496960][T28897] RDX: 000000008000003f RSI: 0000000000000000 RDI: 0000000000000001 [ 1461.496975][T28897] RBP: 00007f285997d090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.496990][T28897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1461.497006][T28897] R13: 00007f2858de6128 R14: 00007f2858de6090 R15: 00007ffecaa20538 [ 1461.497042][T28897] [ 1461.789748][ T4515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.915531][ T4515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.951833][ T4515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 Ijn9_UVQ8j@:Un M%Ux0 [ 1462.202536][T20464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.211312][T20464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.307532][T28909] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1462.434235][T15023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.496038][T15023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.844436][T28929] random: crng reseeded on system resumption [ 1464.463317][T14143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1464.488474][T14143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1464.496812][T14143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1464.535521][T14143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1464.543263][T14143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1465.149213][T20464] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.178131][T28965] chnl_net:caif_netlink_parms(): no params data found [ 1465.489148][T20464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.697037][T28965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.704305][T28965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.731999][T28965] bridge_slave_0: entered allmulticast mode [ 1465.779591][T28965] bridge_slave_0: entered promiscuous mode [ 1465.922057][T20464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.033464][T28965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.077179][T28965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.102167][T28965] bridge_slave_1: entered allmulticast mode [ 1466.156134][T28965] bridge_slave_1: entered promiscuous mode [ 1466.383718][T20464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.582285][T28965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.604964][T14143] Bluetooth: hci1: command tx timeout [ 1466.761984][T20464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.790258][T28965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.855558][T28965] team0: Port device team_slave_0 added [ 1466.880179][T28965] team0: Port device team_slave_1 added [ 1466.990293][T28965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.001332][T28965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1467.099828][T28965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.208818][T28965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.224760][T28965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1467.251966][T28965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.455578][T28965] hsr_slave_0: entered promiscuous mode [ 1467.482877][T28965] hsr_slave_1: entered promiscuous mode [ 1467.501087][T28965] debugfs: 'hsr0' already exists in 'hsr' [ 1467.522957][T28965] Cannot create hsr debugfs directory [ 1467.543422][T20464] bridge_slave_1: left allmulticast mode [ 1467.569029][T20464] bridge_slave_1: left promiscuous mode [ 1467.593151][T20464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.607668][T20464] bridge_slave_0: left allmulticast mode [ 1467.613473][T20464] bridge_slave_0: left promiscuous mode [ 1467.624080][T20464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.383728][T20464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.460168][T20464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.499102][T20464] bond0 (unregistering): Released all slaves [ 1468.696419][T14143] Bluetooth: hci1: command tx timeout [ 1469.172293][T20464] hsr_slave_0: left promiscuous mode [ 1469.189673][T20464] hsr_slave_1: left promiscuous mode [ 1469.214539][T20464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.232647][T20464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.251240][T20464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.280528][T20464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.322919][T20464] veth1_macvtap: left promiscuous mode [ 1469.346081][T20464] veth0_macvtap: left promiscuous mode [ 1469.353136][T20464] veth0_vlan: left promiscuous mode [ 1470.598279][T29077] zswap: compressor not available [ 1470.766306][T14143] Bluetooth: hci1: command tx timeout [ 1470.843487][T20464] team0 (unregistering): Port device team_slave_1 removed [ 1470.907531][T20464] team0 (unregistering): Port device team_slave_0 removed [ 1472.845049][T14143] Bluetooth: hci1: command tx timeout [ 1472.933232][T29113] zswap: compressor not available [ 1472.970205][T28965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1473.026034][T28965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1473.105995][T28965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1473.223532][T28965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1473.476612][T28965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.500916][T28965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.533755][T15023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.540948][T15023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.614307][T15023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.621414][T15023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.607014][T28965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.774155][T28965] veth0_vlan: entered promiscuous mode [ 1474.793807][T28965] veth1_vlan: entered promiscuous mode [ 1474.891617][T28965] veth0_macvtap: entered promiscuous mode [ 1474.898516][T29163] ubi0: attaching mtd0 [ 1474.924232][T29163] ubi0: scanning is finished [ 1474.987991][T29168] random: crng reseeded on system resumption [ 1475.000121][T29163] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1475.108175][T28965] veth1_macvtap: entered promiscuous mode [ 1475.239530][T28965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.261714][T28965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.282888][T15697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.350290][T29170] zswap: compressor not available [ 1475.392490][T20464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.440505][T20464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.522179][T20464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.596215][T29163] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1475.792560][T28904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.855979][T28904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.979909][T28904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.019663][T28904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.115920][T29195] FAULT_INJECTION: forcing a failure. [ 1476.115920][T29195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.209947][T29195] CPU: 0 UID: 0 PID: 29195 Comm: syz.4.4848 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.209972][T29195] Tainted: [L]=SOFTLOCKUP [ 1476.209977][T29195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1476.209985][T29195] Call Trace: [ 1476.209991][T29195] [ 1476.209996][T29195] dump_stack_lvl+0x16c/0x1f0 [ 1476.210016][T29195] should_fail_ex+0x512/0x640 [ 1476.210036][T29195] _copy_from_iter+0x2a4/0x16c0 [ 1476.210057][T29195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1476.210074][T29195] ? __pfx__copy_from_iter+0x10/0x10 [ 1476.210090][T29195] ? alloc_pages_mpol+0x25a/0x550 [ 1476.210107][T29195] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1476.210126][T29195] copy_page_from_iter+0xde/0x180 [ 1476.210144][T29195] anon_pipe_write+0xef0/0x1990 [ 1476.210162][T29195] ? __print_lock_name+0xc1/0xe0 [ 1476.210188][T29195] ? __pfx_anon_pipe_write+0x10/0x10 [ 1476.210202][T29195] ? common_file_perm+0x1b1/0x500 [ 1476.210221][T29195] ? bpf_lsm_file_permission+0x9/0x10 [ 1476.210242][T29195] ? security_file_permission+0x71/0x210 [ 1476.210259][T29195] ? rw_verify_area+0xcf/0x6c0 [ 1476.210282][T29195] vfs_write+0x7d3/0x11d0 [ 1476.210297][T29195] ? __pfx_anon_pipe_write+0x10/0x10 [ 1476.210314][T29195] ? __pfx_vfs_write+0x10/0x10 [ 1476.210327][T29195] ? find_held_lock+0x2b/0x80 [ 1476.210369][T29195] ksys_write+0x1f8/0x250 [ 1476.210391][T29195] ? __pfx_ksys_write+0x10/0x10 [ 1476.210425][T29195] do_syscall_64+0xcd/0xf80 [ 1476.210452][T29195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.210477][T29195] RIP: 0033:0x7fc70478f7c9 [ 1476.210497][T29195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1476.210521][T29195] RSP: 002b:00007fc705634038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1476.210545][T29195] RAX: ffffffffffffffda RBX: 00007fc7049e6090 RCX: 00007fc70478f7c9 [ 1476.210562][T29195] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1476.210576][T29195] RBP: 00007fc705634090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.210591][T29195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.210605][T29195] R13: 00007fc7049e6128 R14: 00007fc7049e6090 R15: 00007ffcc80d1f08 [ 1476.210641][T29195] [ 1477.733579][T29222] zswap: compressor not available [ 1478.438112][T29244] zswap: compressor not available [ 1478.551796][T29257] ubi0: attaching mtd0 [ 1478.591072][T29257] ubi0: scanning is finished [ 1478.596598][T29257] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1479.120359][T29257] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1481.058452][T29307] random: crng reseeded on system resumption [ 1481.952083][T29323] ubi0: attaching mtd0 [ 1481.989315][T29323] ubi0: scanning is finished [ 1482.054003][T29323] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1482.162845][T14143] Bluetooth: hci4: unexpected subevent 0x0c length: 118 > 5 [ 1482.333734][T29323] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1482.696852][T29337] zswap: compressor not available [ 1482.828918][T29346] FAULT_INJECTION: forcing a failure. [ 1482.828918][T29346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.843272][T29346] CPU: 1 UID: 0 PID: 29346 Comm: syz.3.4879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.843312][T29346] Tainted: [L]=SOFTLOCKUP [ 1482.843322][T29346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1482.843337][T29346] Call Trace: [ 1482.843345][T29346] [ 1482.843355][T29346] dump_stack_lvl+0x16c/0x1f0 [ 1482.843386][T29346] should_fail_ex+0x512/0x640 [ 1482.843421][T29346] _copy_from_user+0x2e/0xd0 [ 1482.843451][T29346] do_handle_open+0xeb/0xd10 [ 1482.843484][T29346] ? __pfx_do_handle_open+0x10/0x10 [ 1482.843513][T29346] ? __x64_sys_futex+0x1e0/0x4c0 [ 1482.843556][T29346] ? xfd_validate_state+0x61/0x180 [ 1482.843594][T29346] ? do_syscall_64+0xcd/0xf80 [ 1482.843618][T29346] do_syscall_64+0xcd/0xf80 [ 1482.843657][T29346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.843685][T29346] RIP: 0033:0x7ff7e9b8f7c9 [ 1482.843705][T29346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1482.843731][T29346] RSP: 002b:00007ff7eaad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1482.843756][T29346] RAX: ffffffffffffffda RBX: 00007ff7e9de5fa0 RCX: 00007ff7e9b8f7c9 [ 1482.843774][T29346] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000006 [ 1482.843791][T29346] RBP: 00007ff7e9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1482.843809][T29346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.843825][T29346] R13: 00007ff7e9de6038 R14: 00007ff7e9de5fa0 R15: 00007ffda6256dd8 [ 1482.843864][T29346] [ 1483.177931][T29349] zswap: compressor not available [ 1484.453008][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.459380][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.028091][T29378] zswap: compressor not available [ 1485.564033][T29391] ubi0: attaching mtd0 [ 1485.570235][T29391] ubi0: scanning is finished [ 1485.575036][T29391] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1485.899059][T29391] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1486.528249][T27095] Bluetooth: hci3: command 0x0406 tx timeout [ 1486.684936][ T5156] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1487.174219][T29413] ubi0: attaching mtd0 [ 1487.182443][T29413] ubi0: scanning is finished [ 1487.187236][T29413] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1487.686226][T29413] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1488.415176][T29442] ubi0: attaching mtd0 [ 1488.420296][T29442] ubi0: scanning is finished [ 1488.435114][T29442] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1488.855194][T29450] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1488.982174][T29442] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1490.737376][T29481] ubi0: attaching mtd0 [ 1490.780109][T29497] random: crng reseeded on system resumption [ 1490.806330][T29481] ubi0: scanning is finished [ 1490.929967][T29481] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1491.639347][T29481] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1491.995194][T29518] ovs_: entered promiscuous mode [ 1492.001389][T29519] openvswitch: ovs_: Dropping previously announced user features [ 1492.539314][T29529] zswap: compressor not available [ 1492.942457][T29542] random: crng reseeded on system resumption [ 1496.194488][T29596] FAULT_INJECTION: forcing a failure. [ 1496.194488][T29596] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1496.213373][T29596] CPU: 1 UID: 0 PID: 29596 Comm: syz.0.4935 Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.213414][T29596] Tainted: [L]=SOFTLOCKUP [ 1496.213425][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1496.213441][T29596] Call Trace: [ 1496.213451][T29596] [ 1496.213469][T29596] dump_stack_lvl+0x16c/0x1f0 [ 1496.213499][T29596] should_fail_ex+0x512/0x640 [ 1496.213519][T29596] should_fail_alloc_page+0xe7/0x130 [ 1496.213539][T29596] prepare_alloc_pages+0x3c2/0x610 [ 1496.213556][T29596] ? __lock_acquire+0x433/0x22f0 [ 1496.213575][T29596] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1496.213599][T29596] ? lock_acquire+0x179/0x330 [ 1496.213615][T29596] ? find_held_lock+0x2b/0x80 [ 1496.213636][T29596] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1496.213659][T29596] ? rcu_is_watching+0x12/0xc0 [ 1496.213673][T29596] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1496.213692][T29596] ? lockdep_hardirqs_on+0x7c/0x110 [ 1496.213708][T29596] ? rcu_is_watching+0x12/0xc0 [ 1496.213730][T29596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1496.213745][T29596] ? policy_nodemask+0xea/0x4e0 [ 1496.213762][T29596] alloc_pages_mpol+0x1fb/0x550 [ 1496.213778][T29596] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1496.213792][T29596] ? __pfx___resched_curr+0x10/0x10 [ 1496.213817][T29596] folio_alloc_mpol_noprof+0x36/0xe0 [ 1496.213836][T29596] vma_alloc_folio_noprof+0xed/0x1e0 [ 1496.213858][T29596] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1496.213881][T29596] do_pte_missing+0x224d/0x4000 [ 1496.213898][T29596] ? find_held_lock+0x2b/0x80 [ 1496.213925][T29596] __handle_mm_fault+0x154b/0x2ad0 [ 1496.213945][T29596] ? reacquire_held_locks+0xcd/0x1f0 [ 1496.213963][T29596] ? __pfx___handle_mm_fault+0x10/0x10 [ 1496.213982][T29596] ? lock_vma_under_rcu+0x176/0x580 [ 1496.214012][T29596] handle_mm_fault+0x3fe/0xad0 [ 1496.214032][T29596] do_user_addr_fault+0x423/0xda0 [ 1496.214051][T29596] ? rcu_is_watching+0x12/0xc0 [ 1496.214067][T29596] exc_page_fault+0x64/0xc0 [ 1496.214081][T29596] asm_exc_page_fault+0x26/0x30 [ 1496.214095][T29596] RIP: 0033:0x7f2def65a65b [ 1496.214108][T29596] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1496.214122][T29596] RSP: 002b:00007f2df056cfb0 EFLAGS: 00010202 [ 1496.214135][T29596] RAX: 0000000000000000 RBX: 00007f2def9e5fa0 RCX: 0000000000000000 [ 1496.214145][T29596] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000040 [ 1496.214154][T29596] RBP: 00007f2def813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1496.214163][T29596] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000000 [ 1496.214173][T29596] R13: 00007f2def9e6038 R14: 00007f2def9e5fa0 R15: 00007ffc4eaecd68 [ 1496.214193][T29596] [ 1496.520818][T29596] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1496.593584][T29600] hub 1-0:1.0: USB hub found [ 1496.601660][T29600] hub 1-0:1.0: 1 port detected [ 1496.763190][T29606] hub 1-0:1.0: USB hub found [ 1496.818424][T29606] hub 1-0:1.0: 1 port detected [ 1497.229465][T29620] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4939'. [ 1497.769556][T29629] random: crng reseeded on system resumption [ 1497.945708][T29630] zswap: compressor not available [ 1498.587862][T29643] ubi0: attaching mtd0 [ 1498.660414][T29643] ubi0: scanning is finished [ 1498.686178][T29643] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1498.936395][T29643] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1499.161471][T29650] ubi0: attaching mtd0 [ 1499.205517][T29650] ubi0: scanning is finished [ 1499.312590][T29650] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1499.717497][T29650] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1500.838353][T29669] zswap: compressor not available [ 1501.971138][T29698] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98 [ 1503.338661][T29725] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1504.191467][T29741] zswap: compressor not available [ 1505.461392][T29762] random: crng reseeded on system resumption [ 1506.911507][T29787] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1509.990696][T29842] ubi0: attaching mtd0 [ 1510.012776][T29842] ubi0: scanning is finished [ 1510.038116][T29842] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1510.588854][T29842] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1511.990011][T29874] FAULT_INJECTION: forcing a failure. [ 1511.990011][T29874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.006915][T29874] CPU: 1 UID: 0 PID: 29874 Comm: syz.0.4995 Tainted: G L syzkaller #0 PREEMPT(full) [ 1512.006959][T29874] Tainted: [L]=SOFTLOCKUP [ 1512.006968][T29874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1512.006982][T29874] Call Trace: [ 1512.006991][T29874] [ 1512.007001][T29874] dump_stack_lvl+0x16c/0x1f0 [ 1512.007031][T29874] should_fail_ex+0x512/0x640 [ 1512.007065][T29874] _copy_to_user+0x32/0xd0 [ 1512.007094][T29874] simple_read_from_buffer+0xcb/0x170 [ 1512.007136][T29874] proc_fail_nth_read+0x197/0x240 [ 1512.007170][T29874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1512.007204][T29874] ? rw_verify_area+0xcf/0x6c0 [ 1512.007241][T29874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1512.007272][T29874] vfs_read+0x1e4/0xcf0 [ 1512.007299][T29874] ? __pfx___mutex_lock+0x10/0x10 [ 1512.007329][T29874] ? __pfx_vfs_read+0x10/0x10 [ 1512.007365][T29874] ? __fget_files+0x20e/0x3c0 [ 1512.007401][T29874] ksys_read+0x12a/0x250 [ 1512.007426][T29874] ? __pfx_ksys_read+0x10/0x10 [ 1512.007462][T29874] do_syscall_64+0xcd/0xf80 [ 1512.007490][T29874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.007516][T29874] RIP: 0033:0x7f2def78e1dc [ 1512.007536][T29874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1512.007567][T29874] RSP: 002b:00007f2ded9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1512.007591][T29874] RAX: ffffffffffffffda RBX: 00007f2def9e6180 RCX: 00007f2def78e1dc [ 1512.007608][T29874] RDX: 000000000000000f RSI: 00007f2ded9f60a0 RDI: 0000000000000007 [ 1512.007624][T29874] RBP: 00007f2ded9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.007639][T29874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.007654][T29874] R13: 00007f2def9e6218 R14: 00007f2def9e6180 R15: 00007ffc4eaecd68 [ 1512.007691][T29874] [ 1513.868795][T29899] zswap: compressor not available [ 1514.575752][T29907] ubi0: attaching mtd0 [ 1514.650500][T29907] ubi0: scanning is finished [ 1514.683470][T29907] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1515.015930][T29922] FAULT_INJECTION: forcing a failure. [ 1515.015930][T29922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1515.040535][T29922] CPU: 1 UID: 0 PID: 29922 Comm: syz.3.5009 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.040573][T29922] Tainted: [L]=SOFTLOCKUP [ 1515.040583][T29922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1515.040597][T29922] Call Trace: [ 1515.040606][T29922] [ 1515.040615][T29922] dump_stack_lvl+0x16c/0x1f0 [ 1515.040646][T29922] should_fail_ex+0x512/0x640 [ 1515.040679][T29922] _copy_from_user+0x2e/0xd0 [ 1515.040707][T29922] core_sys_select+0x361/0xae0 [ 1515.040743][T29922] ? __pfx_core_sys_select+0x10/0x10 [ 1515.040776][T29922] ? proc_fail_nth_write+0x9f/0x220 [ 1515.040836][T29922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1515.040874][T29922] kern_select+0x15d/0x1e0 [ 1515.040898][T29922] ? __pfx_kern_select+0x10/0x10 [ 1515.040928][T29922] ? __pfx_ksys_write+0x10/0x10 [ 1515.040959][T29922] __x64_sys_select+0xbd/0x160 [ 1515.040983][T29922] ? do_syscall_64+0x91/0xf80 [ 1515.041006][T29922] ? lockdep_hardirqs_on+0x7c/0x110 [ 1515.041031][T29922] do_syscall_64+0xcd/0xf80 [ 1515.041059][T29922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.041084][T29922] RIP: 0033:0x7ff7e9b8f7c9 [ 1515.041103][T29922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1515.041127][T29922] RSP: 002b:00007ff7eaab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1515.041150][T29922] RAX: ffffffffffffffda RBX: 00007ff7e9de6090 RCX: 00007ff7e9b8f7c9 [ 1515.041168][T29922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 1515.041183][T29922] RBP: 00007ff7eaab3090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.041198][T29922] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1515.041221][T29922] R13: 00007ff7e9de6128 R14: 00007ff7e9de6090 R15: 00007ffda6256dd8 [ 1515.041258][T29922] [ 1515.246892][T29907] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1515.681412][T29930] FAULT_INJECTION: forcing a failure. [ 1515.681412][T29930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1515.695161][T29930] CPU: 0 UID: 0 PID: 29930 Comm: syz.0.5012 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.695198][T29930] Tainted: [L]=SOFTLOCKUP [ 1515.695207][T29930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1515.695222][T29930] Call Trace: [ 1515.695231][T29930] [ 1515.695241][T29930] dump_stack_lvl+0x16c/0x1f0 [ 1515.695272][T29930] should_fail_ex+0x512/0x640 [ 1515.695305][T29930] should_fail_alloc_page+0xe7/0x130 [ 1515.695336][T29930] prepare_alloc_pages+0x3c2/0x610 [ 1515.695370][T29930] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1515.695411][T29930] ? __lock_acquire+0x433/0x22f0 [ 1515.695449][T29930] ? __lock_acquire+0x433/0x22f0 [ 1515.695477][T29930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1515.695527][T29930] ? find_held_lock+0x2b/0x80 [ 1515.695565][T29930] ? is_bpf_text_address+0x8a/0x1a0 [ 1515.695600][T29930] ? bpf_ksym_find+0x124/0x1c0 [ 1515.695628][T29930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1515.695656][T29930] ? policy_nodemask+0xea/0x4e0 [ 1515.695686][T29930] alloc_pages_mpol+0x1fb/0x550 [ 1515.695715][T29930] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1515.695753][T29930] alloc_pages_noprof+0x12d/0x180 [ 1515.695785][T29930] __pmd_alloc+0x3b/0x8b0 [ 1515.695816][T29930] __handle_mm_fault+0xa77/0x2ad0 [ 1515.695856][T29930] ? __pfx___handle_mm_fault+0x10/0x10 [ 1515.695908][T29930] ? find_vma+0xbf/0x140 [ 1515.695943][T29930] ? __pfx_find_vma+0x10/0x10 [ 1515.695983][T29930] handle_mm_fault+0x3fe/0xad0 [ 1515.696021][T29930] do_user_addr_fault+0x2e4/0xda0 [ 1515.696054][T29930] ? rcu_is_watching+0x12/0xc0 [ 1515.696083][T29930] exc_page_fault+0x64/0xc0 [ 1515.696108][T29930] asm_exc_page_fault+0x26/0x30 [ 1515.696132][T29930] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1515.696169][T29930] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 77 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1515.696194][T29930] RSP: 0018:ffffc900043cf7e0 EFLAGS: 00050202 [ 1515.696215][T29930] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000005c [ 1515.696231][T29930] RDX: fffff52000879f3b RSI: 0000000000000000 RDI: ffffc900043cf980 [ 1515.696248][T29930] RBP: 000000000000005c R08: 0000000000000001 R09: fffff52000879f3b [ 1515.696264][T29930] R10: 0000000000000003 R11: 00000000ffffffff R12: 0000000000000000 [ 1515.696280][T29930] R13: ffffc900043cf980 R14: ffff8880311a0030 R15: 00000000ffffffff [ 1515.696316][T29930] _copy_from_user+0x98/0xd0 [ 1515.696345][T29930] ip6_mroute_setsockopt+0x2a1e/0x39e0 [ 1515.696392][T29930] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1515.696423][T29930] ? find_held_lock+0x2b/0x80 [ 1515.696461][T29930] ? bpf_ksym_find+0x124/0x1c0 [ 1515.696491][T29930] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1515.696520][T29930] ? is_bpf_text_address+0x94/0x1a0 [ 1515.696555][T29930] ? kernel_text_address+0x8d/0x100 [ 1515.696586][T29930] ? __kernel_text_address+0xd/0x40 [ 1515.696617][T29930] ? unwind_get_return_address+0x59/0xa0 [ 1515.696650][T29930] ? arch_stack_walk+0xa6/0x100 [ 1515.696697][T29930] ? _parse_integer_limit+0x17f/0x1d0 [ 1515.696736][T29930] ? do_ipv6_setsockopt+0x880/0x4570 [ 1515.696761][T29930] ? __pfx__kstrtoull+0x10/0x10 [ 1515.696790][T29930] do_ipv6_setsockopt+0x880/0x4570 [ 1515.696824][T29930] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1515.696858][T29930] ? __lock_acquire+0x433/0x22f0 [ 1515.696890][T29930] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1515.696929][T29930] ? find_held_lock+0x2b/0x80 [ 1515.696965][T29930] ? get_pid_task+0xfc/0x250 [ 1515.697004][T29930] ? find_held_lock+0x2b/0x80 [ 1515.697038][T29930] ? __pfx___might_resched+0x10/0x10 [ 1515.697072][T29930] ? ipv6_setsockopt+0xcb/0x170 [ 1515.697096][T29930] ipv6_setsockopt+0xcb/0x170 [ 1515.697127][T29930] rawv6_setsockopt+0xd1/0x6a0 [ 1515.697164][T29930] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1515.697195][T29930] ? sock_common_setsockopt+0x2e/0xf0 [ 1515.697230][T29930] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1515.697270][T29930] do_sock_setsockopt+0xf3/0x1d0 [ 1515.697308][T29930] __sys_setsockopt+0x120/0x1a0 [ 1515.697343][T29930] __x64_sys_setsockopt+0xbd/0x160 [ 1515.697371][T29930] ? do_syscall_64+0x91/0xf80 [ 1515.697395][T29930] ? lockdep_hardirqs_on+0x7c/0x110 [ 1515.697420][T29930] do_syscall_64+0xcd/0xf80 [ 1515.697448][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.697473][T29930] RIP: 0033:0x7f2def78f7c9 [ 1515.697493][T29930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1515.697517][T29930] RSP: 002b:00007f2df054d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1515.697540][T29930] RAX: ffffffffffffffda RBX: 00007f2def9e6090 RCX: 00007f2def78f7c9 [ 1515.697557][T29930] RDX: 00000000000000cd RSI: 0000000000000029 RDI: 0400000000000003 [ 1515.697573][T29930] RBP: 00007f2df054d090 R08: 0000000000000567 R09: 0000000000000000 [ 1515.697589][T29930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.697604][T29930] R13: 00007f2def9e6128 R14: 00007f2def9e6090 R15: 00007ffc4eaecd68 [ 1515.697642][T29930] [ 1519.439973][T30000] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1519.439973][T30000] M' is too long [ 1519.450417][T30000] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1519.450417][T30000] W ' is too long [ 1519.510944][T30002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1523.193157][T30061] random: crng reseeded on system resumption [ 1523.482543][T30065] zswap: compressor not available [ 1525.672113][T30110] random: crng reseeded on system resumption [ 1527.859074][T30148] random: crng reseeded on system resumption [ 1529.570067][T30183] FAULT_INJECTION: forcing a failure. [ 1529.570067][T30183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.586120][T30183] CPU: 0 UID: 0 PID: 30183 Comm: syz.0.5068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1529.586143][T30183] Tainted: [L]=SOFTLOCKUP [ 1529.586149][T30183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1529.586157][T30183] Call Trace: [ 1529.586162][T30183] [ 1529.586168][T30183] dump_stack_lvl+0x16c/0x1f0 [ 1529.586187][T30183] should_fail_ex+0x512/0x640 [ 1529.586206][T30183] _copy_from_iter+0x2a4/0x16c0 [ 1529.586223][T30183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1529.586240][T30183] ? __pfx__copy_from_iter+0x10/0x10 [ 1529.586256][T30183] ? alloc_pages_mpol+0x25a/0x550 [ 1529.586273][T30183] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1529.586292][T30183] copy_page_from_iter+0xde/0x180 [ 1529.586309][T30183] anon_pipe_write+0xef0/0x1990 [ 1529.586328][T30183] ? __print_lock_name+0xc0/0xe0 [ 1529.586353][T30183] ? __pfx_anon_pipe_write+0x10/0x10 [ 1529.586368][T30183] ? common_file_perm+0x1b1/0x500 [ 1529.586386][T30183] ? bpf_lsm_file_permission+0x9/0x10 [ 1529.586405][T30183] ? security_file_permission+0x71/0x210 [ 1529.586423][T30183] ? rw_verify_area+0xcf/0x6c0 [ 1529.586446][T30183] vfs_write+0x7d3/0x11d0 [ 1529.586460][T30183] ? __pfx_anon_pipe_write+0x10/0x10 [ 1529.586477][T30183] ? __pfx_vfs_write+0x10/0x10 [ 1529.586490][T30183] ? find_held_lock+0x2b/0x80 [ 1529.586521][T30183] ksys_write+0x1f8/0x250 [ 1529.586535][T30183] ? __pfx_ksys_write+0x10/0x10 [ 1529.586554][T30183] do_syscall_64+0xcd/0xf80 [ 1529.586571][T30183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.586585][T30183] RIP: 0033:0x7f2def78f7c9 [ 1529.586597][T30183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.586611][T30183] RSP: 002b:00007f2df054d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1529.586624][T30183] RAX: ffffffffffffffda RBX: 00007f2def9e6090 RCX: 00007f2def78f7c9 [ 1529.586634][T30183] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1529.586643][T30183] RBP: 00007f2df054d090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.586651][T30183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1529.586659][T30183] R13: 00007f2def9e6128 R14: 00007f2def9e6090 R15: 00007ffc4eaecd68 [ 1529.586679][T30183] [ 1530.002689][T30188] netlink: 'syz.2.5069': attribute type 1 has an invalid length. [ 1530.819590][T30194] zswap: compressor not available [ 1532.271605][T30218] FAULT_INJECTION: forcing a failure. [ 1532.271605][T30218] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.284406][T30218] CPU: 0 UID: 0 PID: 30218 Comm: syz.4.5078 Tainted: G L syzkaller #0 PREEMPT(full) [ 1532.284444][T30218] Tainted: [L]=SOFTLOCKUP [ 1532.284453][T30218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1532.284468][T30218] Call Trace: [ 1532.284478][T30218] [ 1532.284489][T30218] dump_stack_lvl+0x16c/0x1f0 [ 1532.284520][T30218] should_fail_ex+0x512/0x640 [ 1532.284548][T30218] ? kmem_cache_alloc_noprof+0x62/0x760 [ 1532.284585][T30218] should_failslab+0xc2/0x120 [ 1532.284617][T30218] kmem_cache_alloc_noprof+0x75/0x760 [ 1532.284659][T30218] ? alloc_empty_file+0x55/0x1e0 [ 1532.284700][T30218] ? alloc_empty_file+0x55/0x1e0 [ 1532.284731][T30218] alloc_empty_file+0x55/0x1e0 [ 1532.284764][T30218] alloc_file_pseudo+0x13a/0x230 [ 1532.284800][T30218] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1532.284836][T30218] ? alloc_fd+0x471/0x7d0 [ 1532.284867][T30218] sock_alloc_file+0x50/0x210 [ 1532.284900][T30218] __sys_socket+0x1c6/0x2d0 [ 1532.284921][T30218] ? fput+0x70/0xf0 [ 1532.284950][T30218] ? __pfx___sys_socket+0x10/0x10 [ 1532.284973][T30218] ? xfd_validate_state+0x61/0x180 [ 1532.284997][T30218] ? __pfx_ksys_write+0x10/0x10 [ 1532.285030][T30218] __x64_sys_socket+0x72/0xb0 [ 1532.285052][T30218] ? lockdep_hardirqs_on+0x7c/0x110 [ 1532.285078][T30218] do_syscall_64+0xcd/0xf80 [ 1532.285107][T30218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.285132][T30218] RIP: 0033:0x7fc70478f7c9 [ 1532.285154][T30218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.285178][T30218] RSP: 002b:00007fc705655038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1532.285203][T30218] RAX: ffffffffffffffda RBX: 00007fc7049e5fa0 RCX: 00007fc70478f7c9 [ 1532.285220][T30218] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 1532.285236][T30218] RBP: 00007fc704813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1532.285252][T30218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.285267][T30218] R13: 00007fc7049e6038 R14: 00007fc7049e5fa0 R15: 00007ffcc80d1f08 [ 1532.285304][T30218] [ 1532.545342][T30218] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff88807d837980 [ 1532.545342][T30218] fs sockfs mode 140777 opflags 0xc flags 0x0 state 0x300 count 0 [ 1532.616806][T30218] ------------[ cut here ]------------ [ 1532.622302][T30218] kernel BUG at fs/inode.c:1971! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1532.757560][T30218] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1532.763849][T30218] CPU: 0 UID: 0 PID: 30218 Comm: syz.4.5078 Tainted: G L syzkaller #0 PREEMPT(full) [ 1532.774804][T30218] Tainted: [L]=SOFTLOCKUP [ 1532.779133][T30218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1532.789193][T30218] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 1532.794472][T30218] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 a0 79 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 00 7a a0 8b 48 89 df e8 0f 68 ff ff [ 1532.814146][T30218] RSP: 0018:ffffc9000b917dc8 EFLAGS: 00010296 [ 1532.820204][T30218] RAX: 000000000000009f RBX: ffff88807d837980 RCX: ffffc9000cecb000 [ 1532.828186][T30218] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 1532.836168][T30218] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 1532.844141][T30218] R10: 0000000080000000 R11: 000000000002e140 R12: 0000000000000000 [ 1532.852121][T30218] R13: ffffffff90878234 R14: ffff88807d837a50 R15: dffffc0000000000 [ 1532.860105][T30218] FS: 00007fc7056556c0(0000) GS:ffff888124967000(0000) knlGS:0000000000000000 [ 1532.869051][T30218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1532.875634][T30218] CR2: 0000200000200000 CR3: 00000000672fe000 CR4: 00000000003526f0 [ 1532.883603][T30218] Call Trace: [ 1532.886873][T30218] [ 1532.889797][T30218] iput+0x35/0x40 [ 1532.893436][T30218] __sock_release+0x20b/0x270 [ 1532.898120][T30218] __sys_socket+0x23a/0x2d0 [ 1532.902615][T30218] ? fput+0x70/0xf0 [ 1532.906424][T30218] ? __pfx___sys_socket+0x10/0x10 [ 1532.911443][T30218] ? xfd_validate_state+0x61/0x180 [ 1532.916550][T30218] ? __pfx_ksys_write+0x10/0x10 [ 1532.921404][T30218] __x64_sys_socket+0x72/0xb0 [ 1532.926076][T30218] ? lockdep_hardirqs_on+0x7c/0x110 [ 1532.931281][T30218] do_syscall_64+0xcd/0xf80 [ 1532.935794][T30218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.941685][T30218] RIP: 0033:0x7fc70478f7c9 [ 1532.946091][T30218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.965692][T30218] RSP: 002b:00007fc705655038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1532.974105][T30218] RAX: ffffffffffffffda RBX: 00007fc7049e5fa0 RCX: 00007fc70478f7c9 [ 1532.982068][T30218] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 1532.990030][T30218] RBP: 00007fc704813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1532.997991][T30218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.005953][T30218] R13: 00007fc7049e6038 R14: 00007fc7049e5fa0 R15: 00007ffcc80d1f08 [ 1533.013924][T30218] [ 1533.016934][T30218] Modules linked in: [ 1533.021900][T30218] ---[ end trace 0000000000000000 ]--- [ 1533.284791][T30218] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 1533.290133][T30218] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 a0 79 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 00 7a a0 8b 48 89 df e8 0f 68 ff ff [ 1533.355293][T30218] RSP: 0018:ffffc9000b917dc8 EFLAGS: 00010296 [ 1533.361408][T30218] RAX: 000000000000009f RBX: ffff88807d837980 RCX: ffffc9000cecb000 [ 1533.395498][T30218] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 1533.403487][T30218] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 1533.454866][T30218] R10: 0000000080000000 R11: 000000000002e140 R12: 0000000000000000 [ 1533.462874][T30218] R13: ffffffff90878234 R14: ffff88807d837a50 R15: dffffc0000000000 [ 1533.497513][T30218] FS: 00007fc7056556c0(0000) GS:ffff888124967000(0000) knlGS:0000000000000000 [ 1533.524707][T30218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1533.531324][T30218] CR2: 0000001b31be6ff8 CR3: 00000000672fe000 CR4: 00000000003526f0 [ 1533.555450][T30218] Kernel panic - not syncing: Fatal exception [ 1533.561874][T30218] Kernel Offset: disabled [ 1533.566183][T30218] Rebooting in 86400 seconds..