last executing test programs: 10.775721262s ago: executing program 0 (id=579): mmap$auto(0x200000003, 0x6b7, 0x20000001000009, 0x17, 0xffffffffffffffff, 0x304000000000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) getsockopt$auto(r0, 0x0, 0xd0, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) socket(0xa, 0x1, 0x84) socket(0xf, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xf, &(0x7f0000000100)=@bpf_attr_11={0xb2, 0x7, 0xfffffffe, 0x3264, 0xb, 0x4b, 0x3}, 0xa3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x2, 0x400008, 0xdf, 0x49b72, 0xffffffffffffffff, 0x6) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x100001, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x111800, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000140)={{0x10001, 0xffffffffffffffff, 0x0, 0x8, 0x3, 0x3, 0x6}, 0x5, 0x9, 0x1, 0x9, @inferred, @raw=0x4, 0x0, 0x0, &(0x7f0000000000)="a92cc5b95cbadeeec0c80a78f129b552aff38f", &(0x7f0000000100)="899f6eff00"}) 9.262773451s ago: executing program 0 (id=583): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0xf8, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "13c366f9244357d432f6e44cc4bf4e5878fe5d"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4a, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e3", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) 8.579983245s ago: executing program 2 (id=585): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002140)=""/4106, 0xfffffffffffffd1b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) select$auto(0x6, &(0x7f0000000000)={[0x5, 0x4, 0x4, 0xa, 0xccf9, 0x9, 0xffffffffffffffff, 0x3, 0xb, 0x1, 0x100000000000000, 0x3, 0xfffffffffffffe8f, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 8.210639564s ago: executing program 1 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r3, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 7.483374039s ago: executing program 2 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x10, 0x2, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setfsuid$auto(0xee00) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 7.400685365s ago: executing program 3 (id=588): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 7.208138022s ago: executing program 0 (id=589): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 6.973662272s ago: executing program 1 (id=590): mmap$auto(0x2001fffffffe, 0x40000001, 0x100000000004c, 0xeb1, 0xffffffffffffffff, 0x8004) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) ioctl$auto_IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1}) r1 = open(0x0, 0x0, 0x408) getdents$auto(r1, 0x0, 0x5f) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xef1, r0, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x9, 0x40000c, 0x2, 0x37, r3, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x43, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) read$auto(r1, 0x0, 0xebc) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x2c, 0x0, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x7fff) write$auto(0x3, 0x0, 0xfdef) 5.863272524s ago: executing program 2 (id=591): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0xffffffffffffffff, 0x100) mmap$auto(0x0, 0x6b, 0x63, 0x100009b72, r0, 0x8000) mmap$auto(0x0, 0x400008, 0x4e852d75, 0x11, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10400, 0x3, 0x0) listen$auto(0x3, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r2 = io_uring_setup$auto(0x88f92b, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20a42, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8542, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/122, 0x7a) close_range$auto(0x0, 0xfffffffffffff001, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002dbd0900fedbdf25"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) socket(0x1f, 0x800, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) 5.616860772s ago: executing program 3 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x10, 0x2, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setfsuid$auto(0xee00) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 4.909145048s ago: executing program 1 (id=593): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0xffffffffffffffff, 0x100) mmap$auto(0x0, 0x6b, 0x63, 0x100009b72, r0, 0x8000) mmap$auto(0x0, 0x400008, 0x4e852d75, 0x11, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10400, 0x3, 0x0) listen$auto(0x3, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r2 = io_uring_setup$auto(0x88f92b, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20a42, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8542, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/122, 0x7a) close_range$auto(0x0, 0xfffffffffffff001, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002dbd0900fedbdf25"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) socket(0x1f, 0x800, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) 4.658177865s ago: executing program 2 (id=594): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getcpu$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r4, &(0x7f0000000180)=""/61, 0xfffffeeb) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) ptrace$auto(0x3, r0, 0x5, 0x4) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) 4.486433806s ago: executing program 3 (id=595): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) 4.453180959s ago: executing program 0 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x10, 0x2, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 3.623147163s ago: executing program 1 (id=597): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x108, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "13c366f9244357d432f6e44cc4bf4e5878fe5d"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5b, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f8", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) 2.963428131s ago: executing program 3 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x10, 0x2, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setfsuid$auto(0xee00) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 2.957259815s ago: executing program 2 (id=599): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 2.937160884s ago: executing program 0 (id=600): mmap$auto(0x2001fffffffe, 0x40000001, 0x100000000004c, 0xeb1, 0xffffffffffffffff, 0x8004) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) ioctl$auto_IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1}) r1 = open(0x0, 0x0, 0x408) getdents$auto(r1, 0x0, 0x5f) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xef1, r0, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x9, 0x40000c, 0x2, 0x37, r3, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x43, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x2c, 0x0, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x7fff) write$auto(0x3, 0x0, 0xfdef) 1.57517665s ago: executing program 3 (id=601): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) r0 = socket(0x18, 0x800, 0x2) getpeername$auto(r0, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2502000000260109803c00d98008", @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xfffffffffffffffb, 0x2, 0x4, 0x400000000003, 0x4000000003, 0x10ba9788, 0xffffffffffffffff, 0x6, 0x80020000003ffffc, 0xfffffffffffffffe, 0x6d3c, 0x3, 0x2, 0x534aed11]}, 0x0) 1.236425513s ago: executing program 2 (id=602): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) arch_prctl$auto(0x5003, 0x800000000800) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, 0x0) r4 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(r4, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/340], 0x478}, 0x1, 0x0, 0x0, 0x4010}, 0x4040001) 1.133808357s ago: executing program 1 (id=603): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0xffffffffffffffff, 0x100) mmap$auto(0x0, 0x6b, 0x63, 0x100009b72, r0, 0x8000) mmap$auto(0x0, 0x400008, 0x4e852d75, 0x11, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10400, 0x3, 0x0) listen$auto(0x3, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r2 = io_uring_setup$auto(0x88f92b, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20a42, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8542, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/122, 0x7a) close_range$auto(0x0, 0xfffffffffffff001, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002dbd0900fedbdf25"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) socket(0x1f, 0x800, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) 499.362843ms ago: executing program 0 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x10, 0x2, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r2, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setfsuid$auto(0xee00) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) 62.762524ms ago: executing program 3 (id=605): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)={0x1c, r2, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x6, 0xf, 'P\r'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) socket(0x29, 0x6, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7fffffff, 0x8fb, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000000000000005, 0x62, 0x8000001f, 0x4, 0x2, 0x9, 0x2, 0x6]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x4020009, 0xc, 0x12, 0xffffffffffffffff, 0x800000008000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x400e42, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7fffffff, 0x2, 0x1}, 0x0, 0x0, 0x80000003, 0x9, 0x8000006, 0xffffffff, 0xfffffffffffffffe, 0x7ffe, 0xfc2, 0x400}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 1 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r3, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) kernel console output (not intermixed with test programs): (bridge_slave_0) entered forwarding state [ 106.872058][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.886133][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.893471][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.965890][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.005643][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.012987][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.066334][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.073607][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.086704][ T5845] Bluetooth: hci0: command tx timeout [ 107.158740][ T5845] Bluetooth: hci1: command tx timeout [ 107.161991][ T5835] Bluetooth: hci2: command tx timeout [ 107.164228][ T5845] Bluetooth: hci3: command tx timeout [ 107.254023][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.410607][ T5837] veth0_vlan: entered promiscuous mode [ 107.442892][ T5837] veth1_vlan: entered promiscuous mode [ 107.553241][ T5837] veth0_macvtap: entered promiscuous mode [ 107.593030][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.612842][ T5837] veth1_macvtap: entered promiscuous mode [ 107.682253][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.713756][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.756306][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.763911][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.774246][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.794298][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.805823][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.824989][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.916193][ T5831] veth0_vlan: entered promiscuous mode [ 107.966578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.979581][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.035831][ T5831] veth1_vlan: entered promiscuous mode [ 108.061280][ T5830] veth0_vlan: entered promiscuous mode [ 108.075852][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.086983][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.110668][ T5832] veth0_vlan: entered promiscuous mode [ 108.127821][ T5830] veth1_vlan: entered promiscuous mode [ 108.171925][ T5832] veth1_vlan: entered promiscuous mode [ 108.181824][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.223061][ T5831] veth0_macvtap: entered promiscuous mode [ 108.294671][ T5831] veth1_macvtap: entered promiscuous mode [ 108.325436][ T5830] veth0_macvtap: entered promiscuous mode [ 108.344873][ T5832] veth0_macvtap: entered promiscuous mode [ 108.363458][ T5830] veth1_macvtap: entered promiscuous mode [ 108.377530][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.387562][ T5832] veth1_macvtap: entered promiscuous mode [ 108.409126][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.457796][ T1326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.469257][ T1326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.487908][ T5845] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 108.504076][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.524113][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.531980][ T5918] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.545172][ T1326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.556059][ T1326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.582885][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.598884][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.655295][ T1326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.665142][ T1326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.691648][ T1326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.701312][ T1326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.742721][ T1326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.752670][ T1326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.797601][ T1326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.826315][ T1326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.847189][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.866211][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.981495][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.003902][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.069302][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.089547][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.140573][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.153892][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.161391][ T5845] Bluetooth: hci0: command tx timeout [ 109.240113][ T5845] Bluetooth: hci3: command tx timeout [ 109.240507][ T5835] Bluetooth: hci2: command tx timeout [ 109.245710][ T5845] Bluetooth: hci1: command tx timeout [ 109.324138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.359130][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.369856][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.405851][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.427938][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.610179][ T5924] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.278977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.294080][ T5939] process 'syz.1.7' launched ':,' with NULL argv: empty string added [ 110.447771][ T5936] pim6reg: entered allmulticast mode [ 110.458434][ T5941] Zero length message leads to an empty skb [ 110.535924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.748283][ T5938] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 111.154726][ T5947] aoe: could not set interface list: too many interfaces [ 111.196947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.240025][ T5845] Bluetooth: hci0: command tx timeout [ 111.299342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.328523][ T5845] Bluetooth: hci1: command tx timeout [ 111.328808][ T5835] Bluetooth: hci2: command tx timeout [ 111.334255][ T5845] Bluetooth: hci3: command tx timeout [ 112.113234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.428779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.528591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 112.918387][ T5966] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.928879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.208535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.698731][ T5989] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.025400][ T5989] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.729764][ T6024] bridge0: port 3(gretap0) entered blocking state [ 117.736402][ T6024] bridge0: port 3(gretap0) entered disabled state [ 117.875433][ T6024] gretap0: entered allmulticast mode [ 117.891483][ T6024] FAULT_INJECTION: forcing a failure. [ 117.891483][ T6024] name failslab, interval 1, probability 0, space 0, times 1 [ 117.924689][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(full) [ 117.924740][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 117.924769][ T6024] Call Trace: [ 117.924780][ T6024] [ 117.924792][ T6024] dump_stack_lvl+0x100/0x190 [ 117.924850][ T6024] should_fail_ex.cold+0x5/0xa [ 117.924903][ T6024] should_failslab+0xc2/0x120 [ 117.924949][ T6024] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 117.924992][ T6024] ? __lock_acquire+0x4a5/0x2630 [ 117.925035][ T6024] ? kstrdup_const+0x63/0x80 [ 117.925084][ T6024] ? kstrdup+0x51/0xe0 [ 117.925123][ T6024] kstrdup+0x51/0xe0 [ 117.925166][ T6024] kstrdup_const+0x63/0x80 [ 117.925208][ T6024] __kernfs_new_node+0x9b/0x960 [ 117.925261][ T6024] ? __pfx___kernfs_new_node+0x10/0x10 [ 117.925316][ T6024] ? find_held_lock+0x2b/0x80 [ 117.925347][ T6024] ? kernfs_root+0xee/0x2a0 [ 117.925390][ T6024] ? kernfs_root+0xee/0x2a0 [ 117.925443][ T6024] kernfs_new_node+0x11b/0x1a0 [ 117.925499][ T6024] kernfs_create_link+0xcc/0x240 [ 117.925539][ T6024] sysfs_do_create_link_sd+0x90/0x140 [ 117.925588][ T6024] sysfs_create_link+0x61/0xc0 [ 117.925635][ T6024] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 117.925689][ T6024] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 117.925764][ T6024] __netdev_upper_dev_link+0x3d8/0x7e0 [ 117.925809][ T6024] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 117.925854][ T6024] ? kernfs_add_one+0x214/0x850 [ 117.925916][ T6024] netdev_master_upper_dev_link+0x9f/0xd0 [ 117.925957][ T6024] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 117.925998][ T6024] ? lockdep_rtnl_is_held+0x26/0x40 [ 117.926037][ T6024] ? netdev_is_rx_handler_busy+0x83/0x140 [ 117.926097][ T6024] br_add_if+0x9fd/0x1b40 [ 117.926144][ T6024] ? security_capable+0x80/0x260 [ 117.926191][ T6024] add_del_if+0x114/0x160 [ 117.926239][ T6024] br_dev_siocdevprivate+0x8ac/0x1650 [ 117.926289][ T6024] ? __lock_acquire+0x4a5/0x2630 [ 117.926333][ T6024] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 117.926396][ T6024] ? do_raw_spin_lock+0x128/0x260 [ 117.926456][ T6024] ? mark_held_locks+0x40/0x70 [ 117.926507][ T6024] ? netdev_name_node_lookup+0x107/0x150 [ 117.926549][ T6024] ? __mutex_lock+0x26a/0x1b90 [ 117.926595][ T6024] dev_ifsioc+0xc15/0x1eb0 [ 117.926647][ T6024] ? __pfx_dev_ifsioc+0x10/0x10 [ 117.926691][ T6024] ? __pfx___mutex_lock+0x10/0x10 [ 117.926756][ T6024] ? dev_load+0x8e/0x240 [ 117.926798][ T6024] ? dev_load+0x8e/0x240 [ 117.926853][ T6024] dev_ioctl+0x70e/0x1070 [ 117.926902][ T6024] sock_ioctl+0x494/0x6b0 [ 117.926944][ T6024] ? __pfx_sock_ioctl+0x10/0x10 [ 117.927001][ T6024] ? __pfx_sock_ioctl+0x10/0x10 [ 117.927043][ T6024] __x64_sys_ioctl+0x18e/0x210 [ 117.927099][ T6024] do_syscall_64+0xc9/0xf80 [ 117.927143][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.927179][ T6024] RIP: 0033:0x7fb182f9aeb9 [ 117.927222][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.927255][ T6024] RSP: 002b:00007fb183ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.927293][ T6024] RAX: ffffffffffffffda RBX: 00007fb183216180 RCX: 00007fb182f9aeb9 [ 117.927315][ T6024] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 117.927336][ T6024] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 117.927357][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.927377][ T6024] R13: 00007fb183216218 R14: 00007fb183216180 R15: 00007ffe361893c8 [ 117.927421][ T6024] [ 118.379139][ T6024] gretap0: left allmulticast mode [ 119.505916][ T6029] syz.2.20 (6029) used greatest stack depth: 19688 bytes left [ 129.779084][ T6198] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.757524][ T6257] futex_wake_op: syz.0.55 tries to shift op by -2048; fix this program [ 133.777713][ T6257] futex_wake_op: syz.0.55 tries to shift op by -2048; fix this program [ 134.476825][ T6271] Invalid ELF header magic: != ELF [ 135.833545][ T6271] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input5 [ 135.863165][ T6271] FAULT_INJECTION: forcing a failure. [ 135.863165][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 135.897844][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(full) [ 135.897894][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 135.897908][ T6271] Call Trace: [ 135.897916][ T6271] [ 135.897926][ T6271] dump_stack_lvl+0x100/0x190 [ 135.897959][ T6271] should_fail_ex.cold+0x5/0xa [ 135.898006][ T6271] should_failslab+0xc2/0x120 [ 135.898040][ T6271] __kmalloc_cache_noprof+0x80/0x810 [ 135.898064][ T6271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.898095][ T6271] ? device_add+0xd3a/0x1950 [ 135.898133][ T6271] ? device_add+0xd3a/0x1950 [ 135.898166][ T6271] device_add+0xd3a/0x1950 [ 135.898248][ T6271] ? __pfx_device_add+0x10/0x10 [ 135.898301][ T6271] ? kobject_get+0xbb/0x150 [ 135.898347][ T6271] cdev_device_add+0x12b/0x270 [ 135.898392][ T6271] evdev_connect+0x3a8/0x4b0 [ 135.898442][ T6271] input_attach_handler.isra.0+0x177/0x1e0 [ 135.898492][ T6271] input_register_device.cold+0x139/0x375 [ 135.898556][ T6271] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 135.898614][ T6271] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 135.898667][ T6271] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 135.898729][ T6271] ? find_held_lock+0x2b/0x80 [ 135.898762][ T6271] ? hook_file_ioctl_common+0x146/0x410 [ 135.898828][ T6271] ? __pfx_uinput_ioctl+0x10/0x10 [ 135.898882][ T6271] __x64_sys_ioctl+0x18e/0x210 [ 135.898937][ T6271] do_syscall_64+0xc9/0xf80 [ 135.898990][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.899023][ T6271] RIP: 0033:0x7f523739aeb9 [ 135.899050][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.899083][ T6271] RSP: 002b:00007f52382e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.899115][ T6271] RAX: ffffffffffffffda RBX: 00007f5237615fa0 RCX: 00007f523739aeb9 [ 135.899136][ T6271] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 135.899155][ T6271] RBP: 00007f5237408c1f R08: 0000000000000000 R09: 0000000000000000 [ 135.899170][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.899185][ T6271] R13: 00007f5237616038 R14: 00007f5237615fa0 R15: 00007ffd0b85ca88 [ 135.899219][ T6271] [ 136.361649][ T6271] input: failed to attach handler evdev to device input5, error: -12 [ 139.451901][ T6350] warning: `syz.2.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.965186][ T6395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.403629][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.410467][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.512779][ T6576] sp0: Synchronizing with TNC [ 154.064857][ T6596] tipc: can't start tipc send workqueue [ 157.383494][ T6666] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 157.451245][ T6666] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.524678][ T6666] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 157.561915][ T6666] page_type: f5(slab) [ 157.566021][ T6666] raw: 00fff00000000040 ffff88813ff26dc0 dead000000000100 dead000000000122 [ 157.723128][ T6666] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 157.785156][ T6666] head: 00fff00000000040 ffff88813ff26dc0 dead000000000100 dead000000000122 [ 157.857371][ T6666] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 157.888520][ T6666] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 157.898744][ T6666] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 158.123133][ T6666] page dumped because: unmovable page [ 158.220590][ T6666] page_owner tracks the page as allocated [ 158.378437][ T6666] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6040, tgid 6031 (syz.0.22), ts 119237518803, free_ts 114870214527 [ 158.568460][ T6666] post_alloc_hook+0x1e1/0x250 [ 158.573396][ T6666] get_page_from_freelist+0xe3d/0x2e10 [ 158.662500][ T6666] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 158.708834][ T6666] alloc_pages_mpol+0x1fb/0x550 [ 158.728549][ T6666] new_slab+0x2c4/0x440 [ 158.732806][ T6666] ___slab_alloc+0xda3/0x1ca0 [ 158.767923][ T6666] __slab_alloc.isra.0+0x63/0x110 [ 158.858504][ T6666] __kvmalloc_node_noprof+0x749/0xac0 [ 158.980594][ T6666] proc_sys_call_handler+0x2c7/0x5a0 [ 159.014586][ T6666] do_iter_readv_writev+0x6ee/0x920 [ 159.088393][ T6666] vfs_writev+0x360/0xe10 [ 159.113710][ T6666] do_writev+0x13e/0x340 [ 159.118029][ T6666] do_syscall_64+0xc9/0xf80 [ 159.158413][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.197595][ T6666] page last free pid 5195 tgid 5195 stack trace: [ 159.362011][ T6666] __free_frozen_pages+0x822/0x1130 [ 159.367329][ T6666] __put_partials+0x127/0x160 [ 159.415352][ T6666] qlist_free_all+0x47/0xe0 [ 159.468402][ T6666] kasan_quarantine_reduce+0x1a0/0x1f0 [ 159.488371][ T6666] __kasan_slab_alloc+0x69/0x90 [ 159.521135][ T6666] kmem_cache_alloc_noprof+0x2ad/0x780 [ 159.556119][ T6666] getname_flags.part.0+0x4c/0x540 [ 159.575283][ T6666] getname_flags+0x93/0xf0 [ 159.593715][ T6666] do_readlinkat+0xb9/0x390 [ 159.658375][ T6666] __x64_sys_readlink+0x78/0xc0 [ 159.675106][ T6666] do_syscall_64+0xc9/0xf80 [ 159.688321][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.332177][ T6905] FAULT_INJECTION: forcing a failure. [ 171.332177][ T6905] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 171.348538][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.0.145 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.348595][ T6905] Tainted: [L]=SOFTLOCKUP [ 171.348607][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 171.348626][ T6905] Call Trace: [ 171.348636][ T6905] [ 171.348649][ T6905] dump_stack_lvl+0x100/0x190 [ 171.348697][ T6905] should_fail_ex.cold+0x5/0xa [ 171.348746][ T6905] ? prepare_alloc_pages+0x16d/0x5f0 [ 171.348800][ T6905] should_fail_alloc_page+0xeb/0x140 [ 171.348847][ T6905] prepare_alloc_pages+0x1f0/0x5f0 [ 171.348904][ T6905] __alloc_frozen_pages_noprof+0x193/0x2410 [ 171.348945][ T6905] ? mark_held_locks+0x40/0x70 [ 171.348988][ T6905] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 171.349023][ T6905] ? lockdep_hardirqs_on+0x78/0x100 [ 171.349061][ T6905] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 171.349096][ T6905] ? stack_depot_save_flags+0x3f8/0x9c0 [ 171.349157][ T6905] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 171.349195][ T6905] ? kasan_save_track+0x14/0x30 [ 171.349235][ T6905] ? alloc_ldt_struct+0x5d/0x1b0 [ 171.349270][ T6905] ? __x64_sys_modify_ldt+0xb1/0x170 [ 171.349306][ T6905] ? do_syscall_64+0xc9/0xf80 [ 171.349342][ T6905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.349403][ T6905] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.349442][ T6905] ? policy_nodemask+0xed/0x4f0 [ 171.349494][ T6905] alloc_pages_mpol+0x1fb/0x550 [ 171.349542][ T6905] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 171.349601][ T6905] alloc_pages_noprof+0x131/0x390 [ 171.349649][ T6905] get_zeroed_page_noprof+0x18/0xb0 [ 171.349699][ T6905] alloc_ldt_struct+0x9f/0x1b0 [ 171.349735][ T6905] write_ldt+0x62b/0xd40 [ 171.349779][ T6905] ? __pfx_write_ldt+0x10/0x10 [ 171.349819][ T6905] ? xfd_validate_state+0x129/0x190 [ 171.349882][ T6905] __x64_sys_modify_ldt+0xb1/0x170 [ 171.349921][ T6905] do_syscall_64+0xc9/0xf80 [ 171.349962][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.349994][ T6905] RIP: 0033:0x7fab6799aeb9 [ 171.350021][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.350053][ T6905] RSP: 002b:00007fab65bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 171.350084][ T6905] RAX: ffffffffffffffda RBX: 00007fab67c16180 RCX: 00007fab6799aeb9 [ 171.350106][ T6905] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 171.350126][ T6905] RBP: 00007fab67a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 171.350146][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.350165][ T6905] R13: 00007fab67c16218 R14: 00007fab67c16180 R15: 00007ffd689dc598 [ 171.350210][ T6905] [ 178.801232][ T5835] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 179.761183][ T7045] bridge0: port 3(gretap0) entered blocking state [ 179.858370][ T7045] bridge0: port 3(gretap0) entered disabled state [ 179.873615][ T7045] gretap0: entered allmulticast mode [ 179.931397][ T7045] FAULT_INJECTION: forcing a failure. [ 179.931397][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 180.006021][ T7045] CPU: 0 UID: 0 PID: 7045 Comm: syz.0.164 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.006072][ T7045] Tainted: [L]=SOFTLOCKUP [ 180.006084][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 180.006116][ T7045] Call Trace: [ 180.006127][ T7045] [ 180.006139][ T7045] dump_stack_lvl+0x100/0x190 [ 180.006185][ T7045] should_fail_ex.cold+0x5/0xa [ 180.006240][ T7045] should_failslab+0xc2/0x120 [ 180.006288][ T7045] kmem_cache_alloc_noprof+0x83/0x780 [ 180.006333][ T7045] ? __asan_memcpy+0x3c/0x60 [ 180.006365][ T7045] ? __kernfs_new_node+0xd2/0x960 [ 180.006418][ T7045] ? __kernfs_new_node+0xd2/0x960 [ 180.006458][ T7045] __kernfs_new_node+0xd2/0x960 [ 180.006508][ T7045] ? __pfx___kernfs_new_node+0x10/0x10 [ 180.006561][ T7045] ? find_held_lock+0x2b/0x80 [ 180.006607][ T7045] ? kernfs_root+0xee/0x2a0 [ 180.006649][ T7045] ? kernfs_root+0xee/0x2a0 [ 180.006701][ T7045] kernfs_new_node+0x11b/0x1a0 [ 180.006754][ T7045] kernfs_create_link+0xcc/0x240 [ 180.006793][ T7045] sysfs_do_create_link_sd+0x90/0x140 [ 180.006839][ T7045] sysfs_create_link+0x61/0xc0 [ 180.006884][ T7045] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 180.006938][ T7045] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 180.006999][ T7045] __netdev_upper_dev_link+0x413/0x7e0 [ 180.007044][ T7045] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 180.007089][ T7045] ? irqentry_exit+0x180/0x670 [ 180.007128][ T7045] ? lockdep_hardirqs_on+0x78/0x100 [ 180.007166][ T7045] ? irqentry_exit+0x180/0x670 [ 180.007211][ T7045] netdev_master_upper_dev_link+0x9f/0xd0 [ 180.007250][ T7045] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 180.007302][ T7045] br_add_if+0x9fd/0x1b40 [ 180.007350][ T7045] ? security_capable+0x80/0x260 [ 180.007397][ T7045] add_del_if+0x114/0x160 [ 180.007447][ T7045] br_dev_siocdevprivate+0x8ac/0x1650 [ 180.007495][ T7045] ? __lock_acquire+0x4a5/0x2630 [ 180.007540][ T7045] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 180.007611][ T7045] ? do_raw_spin_lock+0x128/0x260 [ 180.007671][ T7045] ? mark_held_locks+0x40/0x70 [ 180.007718][ T7045] ? netdev_name_node_lookup+0x107/0x150 [ 180.007761][ T7045] ? __mutex_lock+0x26a/0x1b90 [ 180.007804][ T7045] dev_ifsioc+0xc15/0x1eb0 [ 180.007854][ T7045] ? __pfx_dev_ifsioc+0x10/0x10 [ 180.007897][ T7045] ? __pfx___mutex_lock+0x10/0x10 [ 180.007951][ T7045] ? dev_load+0x8e/0x240 [ 180.007992][ T7045] ? dev_load+0x8e/0x240 [ 180.008045][ T7045] dev_ioctl+0x70e/0x1070 [ 180.008096][ T7045] sock_ioctl+0x494/0x6b0 [ 180.008137][ T7045] ? __pfx_sock_ioctl+0x10/0x10 [ 180.008197][ T7045] ? __pfx_sock_ioctl+0x10/0x10 [ 180.008238][ T7045] __x64_sys_ioctl+0x18e/0x210 [ 180.008293][ T7045] do_syscall_64+0xc9/0xf80 [ 180.008334][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.008368][ T7045] RIP: 0033:0x7fab6799aeb9 [ 180.008395][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.008426][ T7045] RSP: 002b:00007fab657b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.008458][ T7045] RAX: ffffffffffffffda RBX: 00007fab67c16270 RCX: 00007fab6799aeb9 [ 180.008479][ T7045] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 180.008500][ T7045] RBP: 00007fab67a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 180.008519][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.008540][ T7045] R13: 00007fab67c16308 R14: 00007fab67c16270 R15: 00007ffd689dc598 [ 180.008594][ T7045] [ 180.684228][ T7045] gretap0: left allmulticast mode [ 187.533334][ T7188] netlink: 330 bytes leftover after parsing attributes in process `syz.1.180'. [ 187.583216][ T7188] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 187.800519][ T7190] pim6reg: entered allmulticast mode [ 190.251624][ T7231] netlink: 186 bytes leftover after parsing attributes in process `syz.1.187'. [ 204.855640][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.869345][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.241057][ T7450] bridge0: port 3(gretap0) entered blocking state [ 207.284877][ T7450] bridge0: port 3(gretap0) entered disabled state [ 207.388724][ T7450] gretap0: entered allmulticast mode [ 207.395549][ T7450] FAULT_INJECTION: forcing a failure. [ 207.395549][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 207.491169][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.2.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.491208][ T7450] Tainted: [L]=SOFTLOCKUP [ 207.491217][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 207.491231][ T7450] Call Trace: [ 207.491238][ T7450] [ 207.491247][ T7450] dump_stack_lvl+0x100/0x190 [ 207.491282][ T7450] should_fail_ex.cold+0x5/0xa [ 207.491322][ T7450] should_failslab+0xc2/0x120 [ 207.491356][ T7450] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 207.491387][ T7450] ? bpf_ksym_find+0x124/0x1c0 [ 207.491417][ T7450] ? kstrdup_const+0x63/0x80 [ 207.491452][ T7450] ? kstrdup+0x51/0xe0 [ 207.491480][ T7450] kstrdup+0x51/0xe0 [ 207.491510][ T7450] kstrdup_const+0x63/0x80 [ 207.491541][ T7450] __kernfs_new_node+0x9b/0x960 [ 207.491577][ T7450] ? __pfx___kernfs_new_node+0x10/0x10 [ 207.491617][ T7450] ? find_held_lock+0x2b/0x80 [ 207.491639][ T7450] ? kernfs_root+0xee/0x2a0 [ 207.491670][ T7450] ? kernfs_root+0xee/0x2a0 [ 207.491707][ T7450] kernfs_new_node+0x11b/0x1a0 [ 207.491748][ T7450] kernfs_create_link+0xcc/0x240 [ 207.491777][ T7450] sysfs_do_create_link_sd+0x90/0x140 [ 207.491811][ T7450] sysfs_create_link+0x61/0xc0 [ 207.491843][ T7450] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 207.491882][ T7450] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 207.491927][ T7450] __netdev_upper_dev_link+0x3d8/0x7e0 [ 207.491958][ T7450] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 207.491989][ T7450] ? kernfs_add_one+0x214/0x850 [ 207.492041][ T7450] netdev_master_upper_dev_link+0x9f/0xd0 [ 207.492069][ T7450] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 207.492099][ T7450] ? lockdep_rtnl_is_held+0x26/0x40 [ 207.492128][ T7450] ? netdev_is_rx_handler_busy+0x83/0x140 [ 207.492170][ T7450] br_add_if+0x9fd/0x1b40 [ 207.492205][ T7450] ? security_capable+0x80/0x260 [ 207.492238][ T7450] add_del_if+0x114/0x160 [ 207.492272][ T7450] br_dev_siocdevprivate+0x8ac/0x1650 [ 207.492307][ T7450] ? __lock_acquire+0x4a5/0x2630 [ 207.492339][ T7450] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 207.492384][ T7450] ? do_raw_spin_lock+0x128/0x260 [ 207.492427][ T7450] ? mark_held_locks+0x40/0x70 [ 207.492461][ T7450] ? netdev_name_node_lookup+0x107/0x150 [ 207.492492][ T7450] ? __mutex_lock+0x26a/0x1b90 [ 207.492524][ T7450] dev_ifsioc+0xc15/0x1eb0 [ 207.492561][ T7450] ? __pfx_dev_ifsioc+0x10/0x10 [ 207.492592][ T7450] ? __pfx___mutex_lock+0x10/0x10 [ 207.492631][ T7450] ? dev_load+0x8e/0x240 [ 207.492661][ T7450] ? dev_load+0x8e/0x240 [ 207.492698][ T7450] dev_ioctl+0x70e/0x1070 [ 207.492734][ T7450] sock_ioctl+0x494/0x6b0 [ 207.492763][ T7450] ? __pfx_sock_ioctl+0x10/0x10 [ 207.492802][ T7450] ? __pfx_sock_ioctl+0x10/0x10 [ 207.492831][ T7450] __x64_sys_ioctl+0x18e/0x210 [ 207.492872][ T7450] do_syscall_64+0xc9/0xf80 [ 207.492903][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.492927][ T7450] RIP: 0033:0x7f14a579aeb9 [ 207.492947][ T7450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.492970][ T7450] RSP: 002b:00007f14a6679028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.492994][ T7450] RAX: ffffffffffffffda RBX: 00007f14a5a16180 RCX: 00007f14a579aeb9 [ 207.493016][ T7450] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 207.493031][ T7450] RBP: 00007f14a5808c1f R08: 0000000000000000 R09: 0000000000000000 [ 207.493045][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.493059][ T7450] R13: 00007f14a5a16218 R14: 00007f14a5a16180 R15: 00007ffeb1bf8508 [ 207.493090][ T7450] [ 207.876417][ T7450] gretap0: left allmulticast mode [ 208.888380][ T7462] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 210.663506][ T5835] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 212.237688][ T7514] netlink: 330 bytes leftover after parsing attributes in process `syz.2.235'. [ 212.279772][ T7514] mac80211_hwsim hwsim7 : renamed from wlan0 (while UP) [ 212.590023][ T7519] FAULT_INJECTION: forcing a failure. [ 212.590023][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 212.608351][ T7519] CPU: 0 UID: 0 PID: 7519 Comm: syz.1.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.608390][ T7519] Tainted: [L]=SOFTLOCKUP [ 212.608398][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 212.608412][ T7519] Call Trace: [ 212.608420][ T7519] [ 212.608429][ T7519] dump_stack_lvl+0x100/0x190 [ 212.608462][ T7519] should_fail_ex.cold+0x5/0xa [ 212.608502][ T7519] should_failslab+0xc2/0x120 [ 212.608535][ T7519] __kmalloc_cache_noprof+0x80/0x810 [ 212.608561][ T7519] ? rfkill_fop_open+0x1b6/0x750 [ 212.608590][ T7519] ? rfkill_fop_open+0x1b6/0x750 [ 212.608616][ T7519] rfkill_fop_open+0x1b6/0x750 [ 212.608645][ T7519] ? __pfx_rfkill_fop_open+0x10/0x10 [ 212.608671][ T7519] misc_open+0x26d/0x450 [ 212.608699][ T7519] ? __pfx_misc_open+0x10/0x10 [ 212.608726][ T7519] chrdev_open+0x234/0x6a0 [ 212.608754][ T7519] ? __pfx_apparmor_file_open+0x10/0x10 [ 212.608786][ T7519] ? __pfx_chrdev_open+0x10/0x10 [ 212.608817][ T7519] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 212.608858][ T7519] do_dentry_open+0x73e/0x1570 [ 212.608886][ T7519] ? __pfx_chrdev_open+0x10/0x10 [ 212.608916][ T7519] ? security_inode_permission+0xbf/0x250 [ 212.608957][ T7519] vfs_open+0x82/0x3f0 [ 212.608996][ T7519] path_openat+0x21dc/0x3120 [ 212.609034][ T7519] ? __pfx_path_openat+0x10/0x10 [ 212.609073][ T7519] do_filp_open+0x1f7/0x420 [ 212.609103][ T7519] ? __pfx_do_filp_open+0x10/0x10 [ 212.609152][ T7519] ? _raw_spin_unlock+0x28/0x50 [ 212.609175][ T7519] ? alloc_fd+0x476/0x790 [ 212.609210][ T7519] do_sys_openat2+0x12e/0x220 [ 212.609247][ T7519] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.609314][ T7519] ? __fget_files+0x21f/0x3d0 [ 212.609358][ T7519] __x64_sys_openat+0x12d/0x210 [ 212.609412][ T7519] ? __pfx___x64_sys_openat+0x10/0x10 [ 212.609449][ T7519] ? xfd_validate_state+0x129/0x190 [ 212.609498][ T7519] do_syscall_64+0xc9/0xf80 [ 212.609529][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.609553][ T7519] RIP: 0033:0x7fb182f9aeb9 [ 212.609573][ T7519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.609595][ T7519] RSP: 002b:00007fb183ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.609618][ T7519] RAX: ffffffffffffffda RBX: 00007fb183216090 RCX: 00007fb182f9aeb9 [ 212.609633][ T7519] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 212.609648][ T7519] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 212.609662][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.609676][ T7519] R13: 00007fb183216128 R14: 00007fb183216090 R15: 00007ffe361893c8 [ 212.609706][ T7519] [ 214.612656][ T7551] bridge0: port 3(gretap0) entered blocking state [ 214.620649][ T7551] bridge0: port 3(gretap0) entered disabled state [ 214.708448][ T7551] gretap0: entered allmulticast mode [ 214.715397][ T7551] FAULT_INJECTION: forcing a failure. [ 214.715397][ T7551] name failslab, interval 1, probability 0, space 0, times 0 [ 215.041788][ T7551] CPU: 1 UID: 0 PID: 7551 Comm: syz.3.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.041841][ T7551] Tainted: [L]=SOFTLOCKUP [ 215.041853][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 215.041872][ T7551] Call Trace: [ 215.041882][ T7551] [ 215.041895][ T7551] dump_stack_lvl+0x100/0x190 [ 215.041942][ T7551] should_fail_ex.cold+0x5/0xa [ 215.041997][ T7551] should_failslab+0xc2/0x120 [ 215.042045][ T7551] __kmalloc_cache_noprof+0x80/0x810 [ 215.042080][ T7551] ? __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 215.042127][ T7551] ? kernfs_put+0x3f/0x60 [ 215.042173][ T7551] ? sysfs_do_create_link_sd+0xbb/0x140 [ 215.042223][ T7551] ? __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 215.042271][ T7551] __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 215.042324][ T7551] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 215.042388][ T7551] __netdev_upper_dev_link+0x413/0x7e0 [ 215.042431][ T7551] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 215.042477][ T7551] ? kernfs_add_one+0x214/0x850 [ 215.042540][ T7551] netdev_master_upper_dev_link+0x9f/0xd0 [ 215.042591][ T7551] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 215.042634][ T7551] ? lockdep_rtnl_is_held+0x26/0x40 [ 215.042673][ T7551] ? netdev_is_rx_handler_busy+0x83/0x140 [ 215.042737][ T7551] br_add_if+0x9fd/0x1b40 [ 215.042787][ T7551] ? security_capable+0x80/0x260 [ 215.042835][ T7551] add_del_if+0x114/0x160 [ 215.042885][ T7551] br_dev_siocdevprivate+0x8ac/0x1650 [ 215.042938][ T7551] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 215.043004][ T7551] ? lock_acquire+0x17c/0x330 [ 215.043053][ T7551] ? __pfx___might_resched+0x10/0x10 [ 215.043112][ T7551] ? netdev_name_node_lookup+0x107/0x150 [ 215.043153][ T7551] ? __mutex_lock+0x26a/0x1b90 [ 215.043197][ T7551] dev_ifsioc+0xc15/0x1eb0 [ 215.043248][ T7551] ? __pfx_dev_ifsioc+0x10/0x10 [ 215.043291][ T7551] ? __pfx___mutex_lock+0x10/0x10 [ 215.043346][ T7551] ? dev_load+0x8e/0x240 [ 215.043401][ T7551] ? dev_load+0x8e/0x240 [ 215.043457][ T7551] dev_ioctl+0x70e/0x1070 [ 215.043505][ T7551] sock_ioctl+0x494/0x6b0 [ 215.043552][ T7551] ? __pfx_sock_ioctl+0x10/0x10 [ 215.043618][ T7551] ? __pfx_sock_ioctl+0x10/0x10 [ 215.043659][ T7551] __x64_sys_ioctl+0x18e/0x210 [ 215.043714][ T7551] do_syscall_64+0xc9/0xf80 [ 215.043755][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.043787][ T7551] RIP: 0033:0x7f523739aeb9 [ 215.043814][ T7551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.043845][ T7551] RSP: 002b:00007f52382a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.043876][ T7551] RAX: ffffffffffffffda RBX: 00007f5237616180 RCX: 00007f523739aeb9 [ 215.043897][ T7551] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 215.043917][ T7551] RBP: 00007f5237408c1f R08: 0000000000000000 R09: 0000000000000000 [ 215.043937][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.043956][ T7551] R13: 00007f5237616218 R14: 00007f5237616180 R15: 00007ffd0b85ca88 [ 215.043999][ T7551] [ 215.692195][ T7551] gretap0: left allmulticast mode [ 216.427481][ T7566] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 217.212610][ T7569] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 218.953649][ T7603] serio: Serial port pty6 [ 221.330846][ T7630] bridge0: port 3(gretap0) entered blocking state [ 221.350862][ T7630] bridge0: port 3(gretap0) entered disabled state [ 221.357560][ T7630] gretap0: entered allmulticast mode [ 221.419884][ T7630] FAULT_INJECTION: forcing a failure. [ 221.419884][ T7630] name failslab, interval 1, probability 0, space 0, times 0 [ 221.434046][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.3.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.434099][ T7630] Tainted: [L]=SOFTLOCKUP [ 221.434110][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 221.434129][ T7630] Call Trace: [ 221.434139][ T7630] [ 221.434151][ T7630] dump_stack_lvl+0x100/0x190 [ 221.434197][ T7630] should_fail_ex.cold+0x5/0xa [ 221.434251][ T7630] should_failslab+0xc2/0x120 [ 221.434298][ T7630] kmem_cache_alloc_noprof+0x83/0x780 [ 221.434342][ T7630] ? __asan_memcpy+0x3c/0x60 [ 221.434375][ T7630] ? __kernfs_new_node+0xd2/0x960 [ 221.434428][ T7630] ? __kernfs_new_node+0xd2/0x960 [ 221.434469][ T7630] __kernfs_new_node+0xd2/0x960 [ 221.434519][ T7630] ? __pfx___kernfs_new_node+0x10/0x10 [ 221.434574][ T7630] ? find_held_lock+0x2b/0x80 [ 221.434616][ T7630] ? kernfs_root+0xee/0x2a0 [ 221.434659][ T7630] ? kernfs_root+0xee/0x2a0 [ 221.434724][ T7630] kernfs_new_node+0x11b/0x1a0 [ 221.434782][ T7630] kernfs_create_link+0xcc/0x240 [ 221.434824][ T7630] sysfs_do_create_link_sd+0x90/0x140 [ 221.434873][ T7630] sysfs_create_link+0x61/0xc0 [ 221.434919][ T7630] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 221.434976][ T7630] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 221.435041][ T7630] __netdev_upper_dev_link+0x3d8/0x7e0 [ 221.435084][ T7630] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 221.435128][ T7630] ? kernfs_add_one+0x214/0x850 [ 221.435191][ T7630] netdev_master_upper_dev_link+0x9f/0xd0 [ 221.435231][ T7630] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 221.435274][ T7630] ? lockdep_rtnl_is_held+0x26/0x40 [ 221.435313][ T7630] ? netdev_is_rx_handler_busy+0x83/0x140 [ 221.435370][ T7630] br_add_if+0x9fd/0x1b40 [ 221.435419][ T7630] ? security_capable+0x80/0x260 [ 221.435466][ T7630] add_del_if+0x114/0x160 [ 221.435515][ T7630] br_dev_siocdevprivate+0x8ac/0x1650 [ 221.435569][ T7630] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 221.435636][ T7630] ? lock_acquire+0x17c/0x330 [ 221.435685][ T7630] ? __pfx___might_resched+0x10/0x10 [ 221.435755][ T7630] ? netdev_name_node_lookup+0x107/0x150 [ 221.435800][ T7630] ? __mutex_lock+0x26a/0x1b90 [ 221.435846][ T7630] dev_ifsioc+0xc15/0x1eb0 [ 221.435898][ T7630] ? __pfx_dev_ifsioc+0x10/0x10 [ 221.435941][ T7630] ? __pfx___mutex_lock+0x10/0x10 [ 221.435996][ T7630] ? dev_load+0x8e/0x240 [ 221.436037][ T7630] ? dev_load+0x8e/0x240 [ 221.436090][ T7630] dev_ioctl+0x70e/0x1070 [ 221.436139][ T7630] sock_ioctl+0x494/0x6b0 [ 221.436180][ T7630] ? __pfx_sock_ioctl+0x10/0x10 [ 221.436238][ T7630] ? __pfx_sock_ioctl+0x10/0x10 [ 221.436280][ T7630] __x64_sys_ioctl+0x18e/0x210 [ 221.436338][ T7630] do_syscall_64+0xc9/0xf80 [ 221.436380][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.436414][ T7630] RIP: 0033:0x7f523739aeb9 [ 221.436441][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.436474][ T7630] RSP: 002b:00007f52382a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.436506][ T7630] RAX: ffffffffffffffda RBX: 00007f5237616180 RCX: 00007f523739aeb9 [ 221.436527][ T7630] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 221.436548][ T7630] RBP: 00007f5237408c1f R08: 0000000000000000 R09: 0000000000000000 [ 221.436569][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.436589][ T7630] R13: 00007f5237616218 R14: 00007f5237616180 R15: 00007ffd0b85ca88 [ 221.436634][ T7630] [ 221.846409][ T7630] gretap0: left allmulticast mode [ 223.809296][ T7664] Invalid ELF header magic: != ELF [ 225.865852][ T1150] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 226.734248][ T7691] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.752747][ T7691] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 226.850699][ T7691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.888821][ T7691] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.973365][ T7691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.994084][ T7691] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 227.088027][ T7691] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.135671][ T7691] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 227.217730][ T7691] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 228.518440][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 228.920304][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 228.998380][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 229.158477][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 230.599059][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 230.796516][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 231.000271][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 231.078924][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 231.243764][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 231.911155][ T7777] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.917467][ T7777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.928858][ T7777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.935368][ T7777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.558687][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 233.968432][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 233.975349][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 233.981834][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 239.878694][ T7903] Invalid ELF header magic: != ELF [ 240.021249][ T7900] serio: Serial port pty6 [ 240.460310][ T7908] hub 1-0:1.0: USB hub found [ 240.506949][ T7908] hub 1-0:1.0: 1 port detected [ 243.801125][ T7944] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.813020][ T7944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.823468][ T7944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.841251][ T7944] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.144541][ T7961] netlink: 186 bytes leftover after parsing attributes in process `syz.3.296'. [ 245.540447][ T7972] FAULT_INJECTION: forcing a failure. [ 245.540447][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 245.597388][ T7972] CPU: 1 UID: 0 PID: 7972 Comm: syz.1.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.597428][ T7972] Tainted: [L]=SOFTLOCKUP [ 245.597437][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 245.597462][ T7972] Call Trace: [ 245.597470][ T7972] [ 245.597479][ T7972] dump_stack_lvl+0x100/0x190 [ 245.597513][ T7972] should_fail_ex.cold+0x5/0xa [ 245.597553][ T7972] should_failslab+0xc2/0x120 [ 245.597587][ T7972] __kmalloc_cache_noprof+0x80/0x810 [ 245.597613][ T7972] ? kernfs_iop_get_link+0x65/0x16a0 [ 245.597645][ T7972] ? kernfs_iop_get_link+0x65/0x16a0 [ 245.597671][ T7972] kernfs_iop_get_link+0x65/0x16a0 [ 245.597706][ T7972] ? atime_needs_update+0x8b/0x6b0 [ 245.597748][ T7972] pick_link+0xd17/0x13c0 [ 245.597769][ T7972] ? __pfx_kernfs_iop_get_link+0x10/0x10 [ 245.597799][ T7972] step_into_slowpath+0x6c2/0xf50 [ 245.597828][ T7972] ? __pfx_step_into_slowpath+0x10/0x10 [ 245.597852][ T7972] ? __pfx___up_read+0x10/0x10 [ 245.597889][ T7972] ? path_openat+0x1654/0x3120 [ 245.597916][ T7972] ? lookup_fast+0x2da/0x600 [ 245.597941][ T7972] path_openat+0xf95/0x3120 [ 245.597978][ T7972] ? __pfx_path_openat+0x10/0x10 [ 245.598016][ T7972] do_filp_open+0x1f7/0x420 [ 245.598046][ T7972] ? __pfx_do_filp_open+0x10/0x10 [ 245.598094][ T7972] ? _raw_spin_unlock+0x28/0x50 [ 245.598117][ T7972] ? alloc_fd+0x476/0x790 [ 245.598193][ T7972] do_sys_openat2+0x12e/0x220 [ 245.598245][ T7972] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.598292][ T7972] __x64_sys_openat+0x12d/0x210 [ 245.598331][ T7972] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.598367][ T7972] ? xfd_validate_state+0x129/0x190 [ 245.598415][ T7972] do_syscall_64+0xc9/0xf80 [ 245.598446][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.598470][ T7972] RIP: 0033:0x7fb182f9aeb9 [ 245.598489][ T7972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.598511][ T7972] RSP: 002b:00007fb183f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.598534][ T7972] RAX: ffffffffffffffda RBX: 00007fb183215fa0 RCX: 00007fb182f9aeb9 [ 245.598549][ T7972] RDX: 0000000000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 245.598564][ T7972] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 245.598579][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.598593][ T7972] R13: 00007fb183216038 R14: 00007fb183215fa0 R15: 00007ffe361893c8 [ 245.598623][ T7972] [ 245.779049][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 245.920499][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 245.941131][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 245.947220][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 247.348858][ T8007] Invalid ELF header magic: != ELF [ 248.076766][ T7992] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.083229][ T7992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.100389][ T7992] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.117825][ T7992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.328283][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 250.121130][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 250.127473][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 250.199445][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 251.360568][ T8055] bridge0: port 3(netdevsim0) entered blocking state [ 251.367558][ T8055] bridge0: port 3(netdevsim0) entered disabled state [ 251.428690][ T8055] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 251.489897][ T8055] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 251.604522][ T8055] FAULT_INJECTION: forcing a failure. [ 251.604522][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 251.617642][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.0.314 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.617692][ T8055] Tainted: [L]=SOFTLOCKUP [ 251.617703][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 251.617721][ T8055] Call Trace: [ 251.617730][ T8055] [ 251.617742][ T8055] dump_stack_lvl+0x100/0x190 [ 251.617784][ T8055] should_fail_ex.cold+0x5/0xa [ 251.617833][ T8055] should_failslab+0xc2/0x120 [ 251.617890][ T8055] kmem_cache_alloc_noprof+0x83/0x780 [ 251.617935][ T8055] ? fdb_create+0x22f/0x1960 [ 251.617975][ T8055] ? fdb_create+0x22f/0x1960 [ 251.618005][ T8055] fdb_create+0x22f/0x1960 [ 251.618042][ T8055] ? lock_acquire+0x17c/0x330 [ 251.618094][ T8055] ? __pfx_fdb_create+0x10/0x10 [ 251.618145][ T8055] fdb_add_local+0x155/0x1c0 [ 251.618183][ T8055] br_fdb_add_local+0x39/0x60 [ 251.618224][ T8055] br_add_if+0xe89/0x1b40 [ 251.618283][ T8055] add_del_if+0x114/0x160 [ 251.618333][ T8055] br_dev_siocdevprivate+0x8ac/0x1650 [ 251.618381][ T8055] ? __lock_acquire+0x4a5/0x2630 [ 251.618427][ T8055] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 251.618491][ T8055] ? do_raw_spin_lock+0x128/0x260 [ 251.618551][ T8055] ? mark_held_locks+0x40/0x70 [ 251.618601][ T8055] ? netdev_name_node_lookup+0x107/0x150 [ 251.618642][ T8055] ? __mutex_lock+0x26a/0x1b90 [ 251.618687][ T8055] dev_ifsioc+0xc15/0x1eb0 [ 251.618737][ T8055] ? __pfx_dev_ifsioc+0x10/0x10 [ 251.618782][ T8055] ? __pfx___mutex_lock+0x10/0x10 [ 251.618838][ T8055] ? dev_load+0x8e/0x240 [ 251.618885][ T8055] ? dev_load+0x8e/0x240 [ 251.618934][ T8055] dev_ioctl+0x70e/0x1070 [ 251.618979][ T8055] sock_ioctl+0x494/0x6b0 [ 251.619016][ T8055] ? __pfx_sock_ioctl+0x10/0x10 [ 251.619067][ T8055] ? __pfx_sock_ioctl+0x10/0x10 [ 251.619103][ T8055] __x64_sys_ioctl+0x18e/0x210 [ 251.619161][ T8055] do_syscall_64+0xc9/0xf80 [ 251.619202][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.619236][ T8055] RIP: 0033:0x7fab6799aeb9 [ 251.619264][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.619298][ T8055] RSP: 002b:00007fab68784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.619330][ T8055] RAX: ffffffffffffffda RBX: 00007fab67c15fa0 RCX: 00007fab6799aeb9 [ 251.619352][ T8055] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007 [ 251.619372][ T8055] RBP: 00007fab67a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 251.619393][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.619413][ T8055] R13: 00007fab67c16038 R14: 00007fab67c15fa0 R15: 00007ffd689dc598 [ 251.619457][ T8055] [ 251.976490][ T8055] netdevsim netdevsim0 netdevsim0: failed insert local address bridge forwarding table [ 251.991847][ T8055] bridge0: port 3(netdevsim0) entered blocking state [ 251.999017][ T8055] bridge0: port 3(netdevsim0) entered forwarding state [ 252.216301][ T8076] FAULT_INJECTION: forcing a failure. [ 252.216301][ T8076] name fail_futex, interval 1, probability 0, space 0, times 1 [ 252.281098][ T8076] CPU: 0 UID: 0 PID: 8076 Comm: syz.2.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.281154][ T8076] Tainted: [L]=SOFTLOCKUP [ 252.281166][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 252.281185][ T8076] Call Trace: [ 252.281202][ T8076] [ 252.281215][ T8076] dump_stack_lvl+0x100/0x190 [ 252.281262][ T8076] should_fail_ex.cold+0x5/0xa [ 252.281319][ T8076] get_futex_key+0x1d2/0x1620 [ 252.281365][ T8076] ? __pfx_get_futex_key+0x10/0x10 [ 252.281404][ T8076] ? iput+0x35/0x40 [ 252.281446][ T8076] ? __sock_create+0x27b/0x860 [ 252.281480][ T8076] ? __sys_socket+0x14d/0x260 [ 252.281515][ T8076] ? __x64_sys_socket+0x72/0xb0 [ 252.281551][ T8076] ? do_syscall_64+0xc9/0xf80 [ 252.281586][ T8076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.281630][ T8076] futex_wait_setup+0x81/0x500 [ 252.281673][ T8076] __futex_wait+0x19f/0x300 [ 252.281706][ T8076] ? __pfx___futex_wait+0x10/0x10 [ 252.281744][ T8076] ? __pfx_futex_wake_mark+0x10/0x10 [ 252.281802][ T8076] ? do_raw_spin_lock+0x128/0x260 [ 252.281851][ T8076] ? find_held_lock+0x2b/0x80 [ 252.281882][ T8076] ? futex_wake+0x456/0x530 [ 252.281930][ T8076] ? futex_wake+0x456/0x530 [ 252.281990][ T8076] futex_wait+0xed/0x380 [ 252.282021][ T8076] ? __pfx_futex_wait+0x10/0x10 [ 252.282082][ T8076] do_futex+0x1ef/0x350 [ 252.282129][ T8076] ? __pfx_do_futex+0x10/0x10 [ 252.282171][ T8076] ? iput+0x3a/0x40 [ 252.282212][ T8076] ? __sock_release+0x184/0x260 [ 252.282273][ T8076] __x64_sys_futex+0x34f/0x4d0 [ 252.282319][ T8076] ? __sys_socket+0xac/0x260 [ 252.282357][ T8076] ? __pfx___x64_sys_futex+0x10/0x10 [ 252.282405][ T8076] ? xfd_validate_state+0x129/0x190 [ 252.282473][ T8076] do_syscall_64+0xc9/0xf80 [ 252.282516][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.282549][ T8076] RIP: 0033:0x7f14a579aeb9 [ 252.282575][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.282608][ T8076] RSP: 002b:00007f14a66bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 252.282640][ T8076] RAX: ffffffffffffffda RBX: 00007f14a5a15fa8 RCX: 00007f14a579aeb9 [ 252.282662][ T8076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f14a5a15fa8 [ 252.282682][ T8076] RBP: 00007f14a5a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 252.282702][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.282722][ T8076] R13: 00007f14a5a16038 R14: 00007ffeb1bf8420 R15: 00007ffeb1bf8508 [ 252.282765][ T8076] [ 252.356239][ T8076] FAULT_INJECTION: forcing a failure. [ 252.356239][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 252.561543][ T8076] CPU: 0 UID: 0 PID: 8076 Comm: syz.2.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.561581][ T8076] Tainted: [L]=SOFTLOCKUP [ 252.561589][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 252.561603][ T8076] Call Trace: [ 252.561611][ T8076] [ 252.561621][ T8076] dump_stack_lvl+0x100/0x190 [ 252.561654][ T8076] should_fail_ex.cold+0x5/0xa [ 252.561694][ T8076] should_failslab+0xc2/0x120 [ 252.561728][ T8076] ? udp_init_sock+0x24e/0x450 [ 252.561759][ T8076] __kmalloc_noprof+0xf6/0x9c0 [ 252.561782][ T8076] ? lockdep_init_map_type+0x5c/0x250 [ 252.561823][ T8076] ? udp_init_sock+0x24e/0x450 [ 252.561851][ T8076] udp_init_sock+0x24e/0x450 [ 252.561880][ T8076] ? __pfx_udp_init_sock+0x10/0x10 [ 252.561913][ T8076] inet_create+0x94c/0x1060 [ 252.561941][ T8076] ? inet_create+0x94/0x1060 [ 252.561972][ T8076] __sock_create+0x339/0x860 [ 252.562006][ T8076] udp_sock_create4+0xa6/0x450 [ 252.562043][ T8076] ? __pfx_udp_sock_create4+0x10/0x10 [ 252.562091][ T8076] ? lockdep_hardirqs_on+0x78/0x100 [ 252.562120][ T8076] ? crng_make_state+0x2b0/0x6c0 [ 252.562150][ T8076] rxrpc_open_socket+0x4ef/0x6b0 [ 252.562175][ T8076] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 252.562214][ T8076] ? rcu_is_watching+0x12/0xc0 [ 252.562242][ T8076] rxrpc_lookup_local+0xac7/0x1220 [ 252.562271][ T8076] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 252.562299][ T8076] ? __local_bh_enable_ip+0x9e/0x120 [ 252.562333][ T8076] rxrpc_sendmsg+0x34a/0x680 [ 252.562364][ T8076] sock_write_iter+0x566/0x610 [ 252.562391][ T8076] ? __pfx_sock_write_iter+0x10/0x10 [ 252.562428][ T8076] ? bpf_lsm_file_permission+0x9/0x10 [ 252.562462][ T8076] ? security_file_permission+0x76/0x210 [ 252.562501][ T8076] ? rw_verify_area+0xce/0x6d0 [ 252.562527][ T8076] vfs_write+0x6ac/0x1070 [ 252.562554][ T8076] ? __pfx_sock_write_iter+0x10/0x10 [ 252.562583][ T8076] ? __pfx_vfs_write+0x10/0x10 [ 252.562607][ T8076] ? find_held_lock+0x2b/0x80 [ 252.562649][ T8076] ksys_write+0x1f8/0x250 [ 252.562676][ T8076] ? __pfx_ksys_write+0x10/0x10 [ 252.562711][ T8076] do_syscall_64+0xc9/0xf80 [ 252.562742][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.562766][ T8076] RIP: 0033:0x7f14a579aeb9 [ 252.562786][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.562809][ T8076] RSP: 002b:00007f14a66bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.562832][ T8076] RAX: ffffffffffffffda RBX: 00007f14a5a15fa0 RCX: 00007f14a579aeb9 [ 252.562848][ T8076] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.562862][ T8076] RBP: 00007f14a5808c1f R08: 0000000000000000 R09: 0000000000000000 [ 252.562876][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.562890][ T8076] R13: 00007f14a5a16038 R14: 00007f14a5a15fa0 R15: 00007ffeb1bf8508 [ 252.562921][ T8076] [ 257.090810][ T8090] kexec: Could not allocate control_code_buffer [ 260.522877][ T8193] Invalid ELF header magic: != ELF [ 262.040665][ T8215] bridge0: port 3(netdevsim0) entered blocking state [ 262.047499][ T8215] bridge0: port 3(netdevsim0) entered disabled state [ 262.112241][ T8215] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 262.137664][ T8215] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 262.193293][ T8215] FAULT_INJECTION: forcing a failure. [ 262.193293][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 262.288264][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.3.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.288320][ T8215] Tainted: [L]=SOFTLOCKUP [ 262.288328][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 262.288342][ T8215] Call Trace: [ 262.288350][ T8215] [ 262.288359][ T8215] dump_stack_lvl+0x100/0x190 [ 262.288393][ T8215] should_fail_ex.cold+0x5/0xa [ 262.288433][ T8215] should_failslab+0xc2/0x120 [ 262.288467][ T8215] __kvmalloc_node_noprof+0x101/0xac0 [ 262.288499][ T8215] ? bucket_table_alloc.isra.0+0x88/0x460 [ 262.288530][ T8215] ? __pfx_switchdev_port_attr_notify.constprop.0+0x10/0x10 [ 262.288568][ T8215] ? bucket_table_alloc.isra.0+0x88/0x460 [ 262.288599][ T8215] bucket_table_alloc.isra.0+0x88/0x460 [ 262.288633][ T8215] rhashtable_init_noprof+0x43b/0x7d0 [ 262.288669][ T8215] nbp_vlan_init+0x238/0x500 [ 262.288701][ T8215] ? __pfx_nbp_vlan_init+0x10/0x10 [ 262.288736][ T8215] ? __local_bh_enable_ip+0x9e/0x120 [ 262.288765][ T8215] ? lockdep_hardirqs_on+0x78/0x100 [ 262.288792][ T8215] ? br_fdb_add_local+0x43/0x60 [ 262.288817][ T8215] ? __local_bh_enable_ip+0x9e/0x120 [ 262.288868][ T8215] br_add_if+0xf79/0x1b40 [ 262.288914][ T8215] add_del_if+0x114/0x160 [ 262.288949][ T8215] br_dev_siocdevprivate+0x8ac/0x1650 [ 262.288987][ T8215] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 262.289034][ T8215] ? lock_acquire+0x17c/0x330 [ 262.289069][ T8215] ? __pfx___might_resched+0x10/0x10 [ 262.289111][ T8215] ? netdev_name_node_lookup+0x107/0x150 [ 262.289143][ T8215] ? __mutex_lock+0x26a/0x1b90 [ 262.289177][ T8215] dev_ifsioc+0xc15/0x1eb0 [ 262.289213][ T8215] ? __pfx_dev_ifsioc+0x10/0x10 [ 262.289245][ T8215] ? __pfx___mutex_lock+0x10/0x10 [ 262.289284][ T8215] ? dev_load+0x8e/0x240 [ 262.289313][ T8215] ? dev_load+0x8e/0x240 [ 262.289351][ T8215] dev_ioctl+0x70e/0x1070 [ 262.289387][ T8215] sock_ioctl+0x494/0x6b0 [ 262.289416][ T8215] ? __pfx_sock_ioctl+0x10/0x10 [ 262.289455][ T8215] ? __pfx_sock_ioctl+0x10/0x10 [ 262.289484][ T8215] __x64_sys_ioctl+0x18e/0x210 [ 262.289525][ T8215] do_syscall_64+0xc9/0xf80 [ 262.289556][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.289580][ T8215] RIP: 0033:0x7f523739aeb9 [ 262.289600][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.289622][ T8215] RSP: 002b:00007f52382e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.289645][ T8215] RAX: ffffffffffffffda RBX: 00007f5237615fa0 RCX: 00007f523739aeb9 [ 262.289661][ T8215] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007 [ 262.289675][ T8215] RBP: 00007f5237408c1f R08: 0000000000000000 R09: 0000000000000000 [ 262.289689][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.289703][ T8215] R13: 00007f5237616038 R14: 00007f5237615fa0 R15: 00007ffd0b85ca88 [ 262.289734][ T8215] [ 262.290094][ T8215] bridge0: port 3(netdevsim0) entered blocking state [ 262.581144][ T8215] bridge0: port 3(netdevsim0) entered forwarding state [ 266.283064][ T5833] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 266.283309][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.296840][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.360944][ T8314] Invalid ELF header magic: != ELF [ 274.370559][ T8383] FAULT_INJECTION: forcing a failure. [ 274.370559][ T8383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.388639][ T8383] CPU: 1 UID: 0 PID: 8383 Comm: syz.3.364 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.388693][ T8383] Tainted: [L]=SOFTLOCKUP [ 274.388704][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 274.388724][ T8383] Call Trace: [ 274.388735][ T8383] [ 274.388747][ T8383] dump_stack_lvl+0x100/0x190 [ 274.388793][ T8383] should_fail_ex.cold+0x5/0xa [ 274.388843][ T8383] ? prepare_alloc_pages+0x16d/0x5f0 [ 274.388899][ T8383] should_fail_alloc_page+0xeb/0x140 [ 274.388949][ T8383] prepare_alloc_pages+0x1f0/0x5f0 [ 274.388998][ T8383] ? rcu_is_watching+0x12/0xc0 [ 274.389047][ T8383] __alloc_frozen_pages_noprof+0x193/0x2410 [ 274.389092][ T8383] ? __lock_acquire+0x4a5/0x2630 [ 274.389154][ T8383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 274.389195][ T8383] ? do_raw_spin_lock+0x128/0x260 [ 274.389245][ T8383] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.389294][ T8383] ? find_held_lock+0x2b/0x80 [ 274.389340][ T8383] ? __lock_acquire+0x4a5/0x2630 [ 274.389383][ T8383] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 274.389423][ T8383] ? policy_nodemask+0xed/0x4f0 [ 274.389474][ T8383] alloc_pages_mpol+0x1fb/0x550 [ 274.389523][ T8383] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 274.389570][ T8383] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 274.389617][ T8383] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 274.389670][ T8383] folio_alloc_mpol_noprof+0x36/0x340 [ 274.389727][ T8383] shmem_alloc_folio+0x135/0x160 [ 274.389762][ T8383] shmem_alloc_and_add_folio+0x371/0xd40 [ 274.389815][ T8383] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 274.389860][ T8383] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 274.389911][ T8383] shmem_get_folio_gfp+0x6ab/0x1900 [ 274.389960][ T8383] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 274.390002][ T8383] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 274.390060][ T8383] ? lockdep_hardirqs_on+0x78/0x100 [ 274.390106][ T8383] shmem_fault+0x1f9/0xa20 [ 274.390146][ T8383] ? __lock_acquire+0x4a5/0x2630 [ 274.390189][ T8383] ? __pfx_shmem_fault+0x10/0x10 [ 274.390228][ T8383] ? __pfx_current_time+0x10/0x10 [ 274.390273][ T8383] ? __up_read+0x2c5/0x700 [ 274.390337][ T8383] ? __pfx_filemap_map_pages+0x10/0x10 [ 274.390378][ T8383] __do_fault+0x10d/0x550 [ 274.390426][ T8383] ? __pfx_filemap_map_pages+0x10/0x10 [ 274.390468][ T8383] do_fault+0x2db/0x1990 [ 274.390525][ T8383] __handle_mm_fault+0x1807/0x2b50 [ 274.390568][ T8383] ? mt_find+0x45e/0x8e0 [ 274.390611][ T8383] ? __pfx___handle_mm_fault+0x10/0x10 [ 274.390644][ T8383] ? __pfx_mt_find+0x10/0x10 [ 274.390709][ T8383] ? find_vma+0xbf/0x140 [ 274.390751][ T8383] ? __pfx_find_vma+0x10/0x10 [ 274.390803][ T8383] handle_mm_fault+0x36d/0xa20 [ 274.390847][ T8383] do_user_addr_fault+0x74c/0x12f0 [ 274.390898][ T8383] exc_page_fault+0x6f/0xd0 [ 274.390937][ T8383] asm_exc_page_fault+0x26/0x30 [ 274.390969][ T8383] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 274.391017][ T8383] Code: 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 274.391058][ T8383] RSP: 0018:ffffc90003b67d28 EFLAGS: 00050202 [ 274.391087][ T8383] RAX: 0000000000000000 RBX: 000000000080000d RCX: 00000000007bd044 [ 274.391107][ T8383] RDX: 0000000000080000 RSI: ffffffff82526881 RDI: 0000000000042fc9 [ 274.391127][ T8383] RBP: 1ffff9200076cfac R08: 0000000000000001 R09: 00000000000001c6 [ 274.391148][ T8383] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 274.391168][ T8383] R13: 0000000000800004 R14: 0000000000000009 R15: 0000000000000000 [ 274.391201][ T8383] ? __might_fault+0x111/0x140 [ 274.391246][ T8383] evdev_do_ioctl+0xd09/0x1b60 [ 274.391296][ T8383] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 274.391353][ T8383] ? find_held_lock+0x2b/0x80 [ 274.391404][ T8383] evdev_ioctl+0x16f/0x1a0 [ 274.391447][ T8383] ? __pfx_evdev_ioctl+0x10/0x10 [ 274.391494][ T8383] __x64_sys_ioctl+0x18e/0x210 [ 274.391551][ T8383] do_syscall_64+0xc9/0xf80 [ 274.391594][ T8383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.391627][ T8383] RIP: 0033:0x7f523739aeb9 [ 274.391653][ T8383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.391685][ T8383] RSP: 002b:00007f52382e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.391715][ T8383] RAX: ffffffffffffffda RBX: 00007f5237615fa0 RCX: 00007f523739aeb9 [ 274.391737][ T8383] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000004 [ 274.391757][ T8383] RBP: 00007f5237408c1f R08: 0000000000000000 R09: 0000000000000000 [ 274.391777][ T8383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.391797][ T8383] R13: 00007f5237616038 R14: 00007f5237615fa0 R15: 00007ffd0b85ca88 [ 274.391842][ T8383] [ 275.295588][ T8401] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 290.128050][ T8661] bridge0: port 3(netdevsim0) entered blocking state [ 290.135898][ T8661] bridge0: port 3(netdevsim0) entered disabled state [ 290.144321][ T8661] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 290.157250][ T8661] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 290.165550][ T8661] FAULT_INJECTION: forcing a failure. [ 290.165550][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 290.186430][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.2.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.186486][ T8661] Tainted: [L]=SOFTLOCKUP [ 290.186499][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 290.186518][ T8661] Call Trace: [ 290.186529][ T8661] [ 290.186541][ T8661] dump_stack_lvl+0x100/0x190 [ 290.186588][ T8661] should_fail_ex.cold+0x5/0xa [ 290.186645][ T8661] should_failslab+0xc2/0x120 [ 290.186693][ T8661] __kmalloc_cache_noprof+0x80/0x810 [ 290.186729][ T8661] ? __pfx_br_vlan_lookup+0x10/0x10 [ 290.186766][ T8661] ? nbp_vlan_add+0x1eb/0x3e0 [ 290.186817][ T8661] ? nbp_vlan_add+0x1eb/0x3e0 [ 290.186859][ T8661] nbp_vlan_add+0x1eb/0x3e0 [ 290.186908][ T8661] nbp_vlan_init+0x373/0x500 [ 290.186952][ T8661] ? __pfx_nbp_vlan_init+0x10/0x10 [ 290.187002][ T8661] ? __local_bh_enable_ip+0x9e/0x120 [ 290.187044][ T8661] ? lockdep_hardirqs_on+0x78/0x100 [ 290.187082][ T8661] ? br_fdb_add_local+0x43/0x60 [ 290.187118][ T8661] ? __local_bh_enable_ip+0x9e/0x120 [ 290.187165][ T8661] br_add_if+0xf79/0x1b40 [ 290.187222][ T8661] add_del_if+0x114/0x160 [ 290.187269][ T8661] br_dev_siocdevprivate+0x8ac/0x1650 [ 290.187333][ T8661] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 290.187397][ T8661] ? lock_acquire+0x17c/0x330 [ 290.187443][ T8661] ? __pfx___might_resched+0x10/0x10 [ 290.187498][ T8661] ? netdev_name_node_lookup+0x107/0x150 [ 290.187540][ T8661] ? __mutex_lock+0x26a/0x1b90 [ 290.187584][ T8661] dev_ifsioc+0xc15/0x1eb0 [ 290.187635][ T8661] ? __pfx_dev_ifsioc+0x10/0x10 [ 290.187678][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 290.187730][ T8661] ? dev_load+0x8e/0x240 [ 290.187770][ T8661] ? dev_load+0x8e/0x240 [ 290.187821][ T8661] dev_ioctl+0x70e/0x1070 [ 290.187871][ T8661] sock_ioctl+0x494/0x6b0 [ 290.187911][ T8661] ? __pfx_sock_ioctl+0x10/0x10 [ 290.187968][ T8661] ? __pfx_sock_ioctl+0x10/0x10 [ 290.188010][ T8661] __x64_sys_ioctl+0x18e/0x210 [ 290.188066][ T8661] do_syscall_64+0xc9/0xf80 [ 290.188114][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.188146][ T8661] RIP: 0033:0x7f14a579aeb9 [ 290.188171][ T8661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.188201][ T8661] RSP: 002b:00007f14a66bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.188233][ T8661] RAX: ffffffffffffffda RBX: 00007f14a5a15fa0 RCX: 00007f14a579aeb9 [ 290.188254][ T8661] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007 [ 290.188274][ T8661] RBP: 00007f14a5808c1f R08: 0000000000000000 R09: 0000000000000000 [ 290.188304][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.188323][ T8661] R13: 00007f14a5a16038 R14: 00007f14a5a15fa0 R15: 00007ffeb1bf8508 [ 290.188369][ T8661] [ 290.523982][ T8661] netdevsim netdevsim2 netdevsim0: failed to initialize vlan filtering on this port [ 290.549357][ T8661] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 294.961555][ T8728] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 295.625502][ T8752] NFSD: Failed to start, no listeners configured. [ 295.644020][ T8744] mmap: syz.2.418 (8744) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 296.765897][ T8781] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 300.254913][ T8831] tipc: can't start tipc send workqueue [ 305.518317][ T8919] [U] [ 305.521309][ T8919] [U] [ 305.524035][ T8919] [U] [ 305.526748][ T8919] [U] [ 305.543797][ T8919] [U] [ 305.546554][ T8919] [U] [ 305.549269][ T8919] [U] [ 305.552001][ T8919] [U] [ 305.565781][ T8919] [U] [ 305.568677][ T8919] [U] [ 305.571426][ T8919] [U] [ 305.574173][ T8919] [U] [ 305.613922][ T8919] [U] [ 305.616679][ T8919] [U] ɫeL,dj˙^ S?͸.Z籛#3R$h 8"Թ. -$Rb[#03jxJh{ElG<ȑwڕj%S?~rlPZ$%*֠xS‘? [ 305.632430][ T8919] [U] TVJH֜(@ X9SPSwV]}xQrTpKr=RP- 0okI042]K$ [ 305.683947][ T8919] [U] 97N|s˜t0D%榶㬫4*1=T.-wT8 [ 305.693079][ T8919] [U] 1&Z!!(AEzE=!3uf RnQJ)h^%ĕi}H}E [ 305.701413][ T8919] [U] ε⇿dStF-]Phɲӈ [ 305.707255][ T8919] [U] FYՋvb(cCB#8L2?C _X4;VnfM@tE _b=ՈWo_Zuk@li[YwKRưCZ]cp<4AdiAxyRa_ygzteo9RFgkU$H׵G֮d~\ Ҝ85^}?CKPZaEGf34 iӓ_"q{8?2|A6[s:Wێ`.&WI5Z.:d \?76:-R%7ҶQZ040 [ 305.737323][ T8919] [U] 7 OV,y?Z)--2FPf#? Y15v [ 305.764975][ T8919] [U] RbTx< [ 305.768624][ T8919] [U] edjɿ_ [ 305.772534][ T8919] [U] ^4z[tIڊ2qZy5#f3AqgQDvȴ#`*tյ*- [ 305.859669][ T8919] [U] ŏ$aL3JpKEF̯)B uh?eؼ@"4I`њu}P忮\)ʩK]"nSz\Fo/T!%G+G8yU{[&9WdPmBk'Wr CpL]<΁OFt u)cɭ9G˭VϡrڃĂH}AFؼ!eVf\tL/Ȁ [ 305.884846][ T8919] [U] 3Bz`|(,(x-g36_dBռ" [ 305.891985][ T8919] [U] +L=޳DI2͢{n|*feBN~^BL_cvI„a@DڸIܝւU&+ǟص[{e#S~{WrhShm~kFԋW QjN [ 305.908947][ T8919] [U] T؄KO7B'!qfO>tۧzӻXUM [ 305.914977][ T8919] [U] >-cG8'JPa6' V0PniE00OVW3_'ClO.ɖ4C[YU" +o 1B^Y橺}Lsd;X?ϼ:1"H l5)#[Ve)BuKS-@C nڣ,7,l~<>:bgmJwc Հ [ 305.935352][ T8919] [U] ESڰl(͞܏;ۓ7ŦNZ*^"4~A$Ŝ1 $m/1GQeoAvgXz g-h21Ǣjcz"Fa\z'5`}"zP(;ӎ,3W\gYNmoB",ΆivUJՏFW91kdSSaN [ 305.958301][ T8919] [U] :i v0rK`$'iQ* M)B\*Up-fͤM܆c [ 305.966264][ T8919] [U] %H`c)@8ߺfJBv֛%$7"Us#,D9tqV+'}N8!GVY޺!}%^ČN3ΜZƨn">{F [ 305.981761][ T8919] [U] R8Lt 张a_hYsK&f,dt>$bj4HIT`eeOC [ 305.990304][ T8919] [U] ? ԥimo [ 305.994154][ T8919] [U] tٛ?-y7'. O!#Lef1k/Z* [ 306.000275][ T8919] [U] |Iz&VGP%MM\ĆaaknƹNkr2,|2 +dÌ)}>EBK٩YtvsN>tw~pV@PWw,Fe5-h"i0GD79Q.}  [ 306.015407][ T8919] [U] bgv@xF*8dc [ 306.020306][ T8919] [U] X?XV8Z't%!Y5>H2k-N`3؂t0\GloV~: 1dO[] Dz=D T⶛ CGk;sn3/C\@b [ 306.033179][ T8919] [U] "A_8$>͎6|CP}L~ qaG0'X8_>7qL*Xւ [ 306.041183][ T8919] [U] [?3+ӝ惾|2|(EF8c@K4aWJn [ 306.049196][ T8919] [U] PGȕ< ӹ.LL"߽oj [ 306.114142][ T8919] [U] Z[pMhl2omoW#ۨ08F}G4Eҝ>Ӄow{H>A.Vw&H|?ͥ2.Z6ZIG!0̹Fq6_$QLÏl.ގ] ȑd/YG,ۨ;/[}Oipa2xPv>n: eբeE^$` Aekqy!;|H;滳-.vr $sd1.W[A Q [ 306.169096][ T8919] [U] ?jC [ 306.172785][ T8919] [U] AHU_K"#&+| [ 306.178137][ T8919] [U] 4Lڒ&ED [ 306.181772][ T8919] [U] h\06yzMe]tId>PAb::3[;Oˡ4w;qzUbb~cȋ~,]]f8guWz(ngE3!Mۡh!좂LfC[&m? 7qs|gx[V~sy,k [ 306.198671][ T8919] [U] ]ݏ [ 306.202008][ T8919] [U] vY&t `Xv/O~RA*}vÏv{榼|+j> ]2W۩fhp9 cZa#p->vTFt*GSa*0mtEUhjf,55܃T _`m [ 306.219503][ T8919] [U] j+IRrz6Sccuba߿eF`o0zy~hj)J`S͒l/l\Q+ b [ 306.228923][ T8919] [U] %4 C!e{'nab]*x E[VQڟGrkcS,rU?PUE|MkOt4t [ 306.239051][ T8919] [U] %S Ocs Q,ߜtCkسxezjr5_bEj!x,<)m:xw5EKJ`>)Έ(Y6TOiۮt:|ݑHץc +t=C3?(Agg^iwc߮~+0DFYcLU:$_W凤kZfeM [ 306.261543][ T8919] [U] t&76>նu{[5o [ 306.266103][ T8919] [U] AСZnr2PhZ۰aL)W7 [ 306.338497][ T8919] [U] =Q{uoY8":`GcHJ қ [ 306.364625][ T8929] nfs: Unknown parameter 'nl802154' [ 308.353204][ T8949] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 312.621637][ T9014] NFSD: Failed to start, no listeners configured. [ 320.611136][ T9126] netlink: 330 bytes leftover after parsing attributes in process `syz.3.476'. [ 320.900463][ T9119] zswap: compressor not available [ 321.144094][ T9119] : renamed from gre0 (while UP) [ 321.708008][ T9138] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 327.726155][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.797854][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.398444][ T9272] bridge0: port 3(netdevsim0) entered blocking state [ 330.410455][ T9272] bridge0: port 3(netdevsim0) entered disabled state [ 330.427259][ T9272] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 330.448962][ T9272] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 330.498004][ T9272] FAULT_INJECTION: forcing a failure. [ 330.498004][ T9272] name failslab, interval 1, probability 0, space 0, times 0 [ 330.568274][ T9272] CPU: 1 UID: 0 PID: 9272 Comm: syz.1.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.568324][ T9272] Tainted: [L]=SOFTLOCKUP [ 330.568335][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 330.568358][ T9272] Call Trace: [ 330.568368][ T9272] [ 330.568381][ T9272] dump_stack_lvl+0x100/0x190 [ 330.568436][ T9272] should_fail_ex.cold+0x5/0xa [ 330.568493][ T9272] should_failslab+0xc2/0x120 [ 330.568541][ T9272] __kmalloc_cache_noprof+0x80/0x810 [ 330.568578][ T9272] ? vlan_vid_add+0x514/0x730 [ 330.568633][ T9272] ? vlan_vid_add+0x514/0x730 [ 330.568679][ T9272] vlan_vid_add+0x514/0x730 [ 330.568734][ T9272] __vlan_add+0x266f/0x2dd0 [ 330.568795][ T9272] ? __pfx___vlan_add+0x10/0x10 [ 330.568850][ T9272] nbp_vlan_add+0x258/0x3e0 [ 330.568897][ T9272] nbp_vlan_init+0x373/0x500 [ 330.568941][ T9272] ? __pfx_nbp_vlan_init+0x10/0x10 [ 330.568990][ T9272] ? __local_bh_enable_ip+0x9e/0x120 [ 330.569032][ T9272] ? lockdep_hardirqs_on+0x78/0x100 [ 330.569069][ T9272] ? br_fdb_add_local+0x43/0x60 [ 330.569102][ T9272] ? __local_bh_enable_ip+0x9e/0x120 [ 330.569149][ T9272] br_add_if+0xf79/0x1b40 [ 330.569208][ T9272] add_del_if+0x114/0x160 [ 330.569257][ T9272] br_dev_siocdevprivate+0x8ac/0x1650 [ 330.569309][ T9272] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 330.569374][ T9272] ? lock_acquire+0x17c/0x330 [ 330.569430][ T9272] ? __pfx___might_resched+0x10/0x10 [ 330.569492][ T9272] ? netdev_name_node_lookup+0x107/0x150 [ 330.569537][ T9272] ? __mutex_lock+0x26a/0x1b90 [ 330.569582][ T9272] dev_ifsioc+0xc15/0x1eb0 [ 330.569634][ T9272] ? __pfx_dev_ifsioc+0x10/0x10 [ 330.569678][ T9272] ? __pfx___mutex_lock+0x10/0x10 [ 330.569732][ T9272] ? dev_load+0x8e/0x240 [ 330.569773][ T9272] ? dev_load+0x8e/0x240 [ 330.569826][ T9272] dev_ioctl+0x70e/0x1070 [ 330.569876][ T9272] sock_ioctl+0x494/0x6b0 [ 330.569917][ T9272] ? __pfx_sock_ioctl+0x10/0x10 [ 330.569974][ T9272] ? __pfx_sock_ioctl+0x10/0x10 [ 330.570015][ T9272] __x64_sys_ioctl+0x18e/0x210 [ 330.570071][ T9272] do_syscall_64+0xc9/0xf80 [ 330.570114][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.570149][ T9272] RIP: 0033:0x7fb182f9aeb9 [ 330.570176][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.570207][ T9272] RSP: 002b:00007fb183f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.570251][ T9272] RAX: ffffffffffffffda RBX: 00007fb183215fa0 RCX: 00007fb182f9aeb9 [ 330.570273][ T9272] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007 [ 330.570294][ T9272] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 330.570315][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.570335][ T9272] R13: 00007fb183216038 R14: 00007fb183215fa0 R15: 00007ffe361893c8 [ 330.570378][ T9272] [ 330.988583][ T9272] netdevsim netdevsim1 netdevsim0: failed to initialize vlan filtering on this port [ 331.220670][ T9272] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 333.610469][ T9315] FAULT_INJECTION: forcing a failure. [ 333.610469][ T9315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.628335][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.1.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.628389][ T9315] Tainted: [L]=SOFTLOCKUP [ 333.628400][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 333.628417][ T9315] Call Trace: [ 333.628426][ T9315] [ 333.628437][ T9315] dump_stack_lvl+0x100/0x190 [ 333.628477][ T9315] should_fail_ex.cold+0x5/0xa [ 333.628520][ T9315] ? prepare_alloc_pages+0x16d/0x5f0 [ 333.628568][ T9315] should_fail_alloc_page+0xeb/0x140 [ 333.628611][ T9315] prepare_alloc_pages+0x1f0/0x5f0 [ 333.628654][ T9315] ? rcu_is_watching+0x12/0xc0 [ 333.628685][ T9315] __alloc_frozen_pages_noprof+0x193/0x2410 [ 333.628725][ T9315] ? rcu_is_watching+0x12/0xc0 [ 333.628752][ T9315] ? trace_mm_page_alloc+0x10e/0x160 [ 333.628796][ T9315] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 333.628830][ T9315] ? __pfx_stack_trace_save+0x10/0x10 [ 333.628863][ T9315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 333.628897][ T9315] ? stack_depot_save_flags+0x27/0x9c0 [ 333.628953][ T9315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 333.628985][ T9315] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 333.629013][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 333.629041][ T9315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.629084][ T9315] alloc_pages_bulk_noprof+0x777/0x1500 [ 333.629119][ T9315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.629159][ T9315] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 333.629205][ T9315] ? alloc_pages_noprof+0x233/0x390 [ 333.629258][ T9315] __kasan_populate_vmalloc+0xf0/0x210 [ 333.629300][ T9315] alloc_vmap_area+0x935/0x2a00 [ 333.629353][ T9315] ? __pfx_alloc_vmap_area+0x10/0x10 [ 333.629403][ T9315] __get_vm_area_node+0x1ca/0x330 [ 333.629453][ T9315] __vmalloc_node_range_noprof+0x213/0x1530 [ 333.629482][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 333.629509][ T9315] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 333.629540][ T9315] ? lockdep_hardirqs_on+0x78/0x100 [ 333.629577][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 333.629614][ T9315] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.629658][ T9315] __kvmalloc_node_noprof+0x3cd/0xac0 [ 333.629694][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 333.629724][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 333.629750][ T9315] ? _copy_from_user+0x59/0xd0 [ 333.629797][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 333.629823][ T9315] __do_sys_listmount+0x287/0xee0 [ 333.629850][ T9315] ? __pfx_do_futex+0x10/0x10 [ 333.629891][ T9315] ? rcu_is_watching+0x12/0xc0 [ 333.629920][ T9315] ? __pfx___do_sys_listmount+0x10/0x10 [ 333.629970][ T9315] do_syscall_64+0xc9/0xf80 [ 333.630006][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.630034][ T9315] RIP: 0033:0x7fb182f9aeb9 [ 333.630056][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.630083][ T9315] RSP: 002b:00007fb183f08028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 333.630111][ T9315] RAX: ffffffffffffffda RBX: 00007fb183215fa0 RCX: 00007fb182f9aeb9 [ 333.630130][ T9315] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 333.630147][ T9315] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 333.630164][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.630181][ T9315] R13: 00007fb183216038 R14: 00007fb183215fa0 R15: 00007ffe361893c8 [ 333.630216][ T9315] [ 334.229237][ T9315] syz.1.503: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 334.419589][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.1.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.419643][ T9315] Tainted: [L]=SOFTLOCKUP [ 334.419651][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 334.419665][ T9315] Call Trace: [ 334.419672][ T9315] [ 334.419681][ T9315] dump_stack_lvl+0x100/0x190 [ 334.419715][ T9315] warn_alloc.cold+0x95/0x1c1 [ 334.419755][ T9315] ? __pfx_warn_alloc+0x10/0x10 [ 334.419793][ T9315] ? __get_vm_area_node+0x2c5/0x330 [ 334.419829][ T9315] ? __get_vm_area_node+0x208/0x330 [ 334.419872][ T9315] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 334.419894][ T9315] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 334.419921][ T9315] ? lockdep_hardirqs_on+0x78/0x100 [ 334.419954][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 334.419987][ T9315] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 334.420024][ T9315] __kvmalloc_node_noprof+0x3cd/0xac0 [ 334.420055][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 334.420081][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 334.420103][ T9315] ? _copy_from_user+0x59/0xd0 [ 334.420143][ T9315] ? __do_sys_listmount+0x287/0xee0 [ 334.420165][ T9315] __do_sys_listmount+0x287/0xee0 [ 334.420197][ T9315] ? __pfx_do_futex+0x10/0x10 [ 334.420232][ T9315] ? rcu_is_watching+0x12/0xc0 [ 334.420258][ T9315] ? __pfx___do_sys_listmount+0x10/0x10 [ 334.420301][ T9315] do_syscall_64+0xc9/0xf80 [ 334.420331][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.420355][ T9315] RIP: 0033:0x7fb182f9aeb9 [ 334.420374][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.420397][ T9315] RSP: 002b:00007fb183f08028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 334.420420][ T9315] RAX: ffffffffffffffda RBX: 00007fb183215fa0 RCX: 00007fb182f9aeb9 [ 334.420437][ T9315] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 334.420452][ T9315] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 334.420466][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.420480][ T9315] R13: 00007fb183216038 R14: 00007fb183215fa0 R15: 00007ffe361893c8 [ 334.420509][ T9315] [ 334.420530][ T9315] Mem-Info: [ 334.707632][ T9315] active_anon:4571 inactive_anon:32836 isolated_anon:0 [ 334.707632][ T9315] active_file:17698 inactive_file:40351 isolated_file:0 [ 334.707632][ T9315] unevictable:768 dirty:729 writeback:16 [ 334.707632][ T9315] slab_reclaimable:10972 slab_unreclaimable:93049 [ 334.707632][ T9315] mapped:47481 shmem:30019 pagetables:1247 [ 334.707632][ T9315] sec_pagetables:0 bounce:0 [ 334.707632][ T9315] kernel_misc_reclaimable:0 [ 334.707632][ T9315] free:1286224 free_pcp:12208 free_cma:0 [ 334.950426][ T9315] Node 0 active_anon:18284kB inactive_anon:135780kB active_file:70788kB inactive_file:161204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:187420kB dirty:2916kB writeback:64kB shmem:123140kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11676kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 335.169166][ T9315] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 335.318338][ T9315] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.502772][ T9315] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 335.584264][ T9315] Node 0 DMA32 free:1199888kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17228kB inactive_anon:149940kB active_file:72156kB inactive_file:159904kB unevictable:1536kB writepending:2996kB zspages:252kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:47872kB local_pcp:28104kB free_cma:0kB [ 335.898232][ T9315] lowmem_reserve[]: 0 0 1 1 1 [ 336.040991][ T9315] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.218356][ T9315] lowmem_reserve[]: 0 0 0 0 0 [ 336.268303][ T9315] Node 1 Normal free:3911056kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.411953][ T9315] lowmem_reserve[]: 0 0 0 0 0 [ 336.416813][ T9315] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 336.509028][ T9342] bridge0: port 3(netdevsim0) entered blocking state [ 336.515829][ T9342] bridge0: port 3(netdevsim0) entered disabled state [ 336.522958][ T9342] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 336.532067][ T9342] FAULT_INJECTION: forcing a failure. [ 336.532067][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 336.544835][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.2.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.544873][ T9342] Tainted: [L]=SOFTLOCKUP [ 336.544881][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 336.544896][ T9342] Call Trace: [ 336.544905][ T9342] [ 336.544915][ T9342] dump_stack_lvl+0x100/0x190 [ 336.544949][ T9342] should_fail_ex.cold+0x5/0xa [ 336.544996][ T9342] should_failslab+0xc2/0x120 [ 336.545031][ T9342] __kmalloc_cache_noprof+0x80/0x810 [ 336.545057][ T9342] ? vlan_vid_add+0x514/0x730 [ 336.545096][ T9342] ? vlan_vid_add+0x514/0x730 [ 336.545128][ T9342] vlan_vid_add+0x514/0x730 [ 336.545167][ T9342] __vlan_add+0x266f/0x2dd0 [ 336.545209][ T9342] ? __pfx___vlan_add+0x10/0x10 [ 336.545250][ T9342] nbp_vlan_add+0x258/0x3e0 [ 336.545283][ T9342] nbp_vlan_init+0x373/0x500 [ 336.545314][ T9342] ? __pfx_nbp_vlan_init+0x10/0x10 [ 336.545349][ T9342] ? __local_bh_enable_ip+0x9e/0x120 [ 336.545380][ T9342] ? lockdep_hardirqs_on+0x78/0x100 [ 336.545407][ T9342] ? br_fdb_add_local+0x43/0x60 [ 336.545432][ T9342] ? __local_bh_enable_ip+0x9e/0x120 [ 336.545465][ T9342] br_add_if+0xf79/0x1b40 [ 336.545505][ T9342] add_del_if+0x114/0x160 [ 336.545541][ T9342] br_dev_siocdevprivate+0x8ac/0x1650 [ 336.545579][ T9342] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 336.545625][ T9342] ? lock_acquire+0x17c/0x330 [ 336.545659][ T9342] ? __pfx___might_resched+0x10/0x10 [ 336.545702][ T9342] ? netdev_name_node_lookup+0x107/0x150 [ 336.545733][ T9342] ? __mutex_lock+0x26a/0x1b90 [ 336.545765][ T9342] dev_ifsioc+0xc15/0x1eb0 [ 336.545802][ T9342] ? __pfx_dev_ifsioc+0x10/0x10 [ 336.545833][ T9342] ? __pfx___mutex_lock+0x10/0x10 [ 336.545872][ T9342] ? dev_load+0x8e/0x240 [ 336.545901][ T9342] ? dev_load+0x8e/0x240 [ 336.545939][ T9342] dev_ioctl+0x70e/0x1070 [ 336.545984][ T9342] sock_ioctl+0x494/0x6b0 [ 336.546022][ T9342] ? __pfx_sock_ioctl+0x10/0x10 [ 336.546065][ T9342] ? __pfx_sock_ioctl+0x10/0x10 [ 336.546095][ T9342] __x64_sys_ioctl+0x18e/0x210 [ 336.546136][ T9342] do_syscall_64+0xc9/0xf80 [ 336.546167][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.546192][ T9342] RIP: 0033:0x7f14a579aeb9 [ 336.546212][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.546235][ T9342] RSP: 002b:00007f14a66bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.546258][ T9342] RAX: ffffffffffffffda RBX: 00007f14a5a15fa0 RCX: 00007f14a579aeb9 [ 336.546274][ T9342] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007 [ 336.546289][ T9342] RBP: 00007f14a5808c1f R08: 0000000000000000 R09: 0000000000000000 [ 336.546303][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.546316][ T9342] R13: 00007f14a5a16038 R14: 00007f14a5a15fa0 R15: 00007ffeb1bf8508 [ 336.546347][ T9342] [ 336.586505][ T9315] Node 0 [ 336.688659][ T9342] netdevsim netdevsim2 netdevsim0: failed to initialize vlan filtering on this port [ 336.855948][ T9315] DMA32: 759*4kB (UME) 2532*8kB (UM) 2068*16kB (U) 1403*32kB (U) 786*64kB (UM) 494*128kB (UM) 270*256kB (UE) 172*512kB (UE) 11*1024kB (UM) 4*2048kB (UM) 191*4096kB (M) = 1173788kB [ 336.879773][ T9315] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 336.919502][ T9342] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 336.968194][ T9315] Node 1 Normal: 184*4kB (UE) 34*8kB (UME) 28*16kB (UM) 215*32kB (UME) 100*64kB (UME) 40*128kB (UME) 14*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 945*4096kB (M) = 3911056kB [ 337.131285][ T9315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.248215][ T9315] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.259343][ T9315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.308183][ T9315] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.367579][ T9315] 101981 total pagecache pages [ 337.412280][ T9315] 26 pages in swap cache [ 337.416591][ T9315] Free swap = 124896kB [ 337.442836][ T9315] Total swap = 124996kB [ 337.447059][ T9315] 2097051 pages RAM [ 337.498277][ T9315] 0 pages HighMem/MovableOnly [ 337.518195][ T9315] 430195 pages reserved [ 337.522409][ T9315] 0 pages cma reserved [ 339.790532][ T9380] netlink: 330 bytes leftover after parsing attributes in process `syz.3.512'. [ 339.801690][ T9380] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 340.562383][ T9386] netlink: 350 bytes leftover after parsing attributes in process `syz.2.513'. [ 340.861425][ T9391] NFSD: Failed to start, no listeners configured. [ 341.349704][ T9392] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.357011][ T9392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.363924][ T9392] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.408386][ T9392] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.147394][ T9400] FAULT_INJECTION: forcing a failure. [ 342.147394][ T9400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.161185][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.161239][ T9400] Tainted: [L]=SOFTLOCKUP [ 342.161251][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 342.161271][ T9400] Call Trace: [ 342.161282][ T9400] [ 342.161294][ T9400] dump_stack_lvl+0x100/0x190 [ 342.161360][ T9400] should_fail_ex.cold+0x5/0xa [ 342.161410][ T9400] ? prepare_alloc_pages+0x16d/0x5f0 [ 342.161464][ T9400] should_fail_alloc_page+0xeb/0x140 [ 342.161515][ T9400] prepare_alloc_pages+0x1f0/0x5f0 [ 342.161565][ T9400] ? rcu_is_watching+0x12/0xc0 [ 342.161611][ T9400] __alloc_frozen_pages_noprof+0x193/0x2410 [ 342.161654][ T9400] ? __lock_acquire+0x4a5/0x2630 [ 342.161716][ T9400] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.161757][ T9400] ? do_raw_spin_lock+0x128/0x260 [ 342.161809][ T9400] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 342.161859][ T9400] ? find_held_lock+0x2b/0x80 [ 342.161904][ T9400] ? __lock_acquire+0x4a5/0x2630 [ 342.161947][ T9400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.161983][ T9400] ? policy_nodemask+0xed/0x4f0 [ 342.162033][ T9400] alloc_pages_mpol+0x1fb/0x550 [ 342.162083][ T9400] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 342.162131][ T9400] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 342.162178][ T9400] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 342.162230][ T9400] folio_alloc_mpol_noprof+0x36/0x340 [ 342.162288][ T9400] shmem_alloc_folio+0x135/0x160 [ 342.162322][ T9400] shmem_alloc_and_add_folio+0x371/0xd40 [ 342.162375][ T9400] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 342.162420][ T9400] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 342.162470][ T9400] shmem_get_folio_gfp+0x6ab/0x1900 [ 342.162520][ T9400] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 342.162563][ T9400] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 342.162620][ T9400] ? lockdep_hardirqs_on+0x78/0x100 [ 342.162665][ T9400] shmem_fault+0x1f9/0xa20 [ 342.162705][ T9400] ? __lock_acquire+0x4a5/0x2630 [ 342.162747][ T9400] ? __pfx_shmem_fault+0x10/0x10 [ 342.162785][ T9400] ? __pfx_current_time+0x10/0x10 [ 342.162831][ T9400] ? __up_read+0x2c5/0x700 [ 342.162896][ T9400] ? __pfx_filemap_map_pages+0x10/0x10 [ 342.162938][ T9400] __do_fault+0x10d/0x550 [ 342.162988][ T9400] ? __pfx_filemap_map_pages+0x10/0x10 [ 342.163029][ T9400] do_fault+0x2db/0x1990 [ 342.163085][ T9400] __handle_mm_fault+0x1807/0x2b50 [ 342.163127][ T9400] ? mt_find+0x45e/0x8e0 [ 342.163170][ T9400] ? __pfx___handle_mm_fault+0x10/0x10 [ 342.163204][ T9400] ? __pfx_mt_find+0x10/0x10 [ 342.163269][ T9400] ? find_vma+0xbf/0x140 [ 342.163313][ T9400] ? __pfx_find_vma+0x10/0x10 [ 342.163361][ T9400] handle_mm_fault+0x36d/0xa20 [ 342.163407][ T9400] do_user_addr_fault+0x74c/0x12f0 [ 342.163456][ T9400] exc_page_fault+0x6f/0xd0 [ 342.163495][ T9400] asm_exc_page_fault+0x26/0x30 [ 342.163527][ T9400] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 342.163583][ T9400] Code: 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 342.163616][ T9400] RSP: 0018:ffffc900037cfd28 EFLAGS: 00050202 [ 342.163645][ T9400] RAX: 0000000000000000 RBX: 000000000080000d RCX: 00000000007c2044 [ 342.163667][ T9400] RDX: 0000000000080000 RSI: ffffffff82526881 RDI: 000000000003dfc9 [ 342.163688][ T9400] RBP: 1ffff920006f9fac R08: 0000000000000001 R09: 00000000000001c6 [ 342.163709][ T9400] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 342.163730][ T9400] R13: 0000000000800004 R14: 0000000000000009 R15: 0000000000000000 [ 342.163764][ T9400] ? __might_fault+0x111/0x140 [ 342.163808][ T9400] evdev_do_ioctl+0xd09/0x1b60 [ 342.163861][ T9400] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 342.163916][ T9400] ? find_held_lock+0x2b/0x80 [ 342.163969][ T9400] evdev_ioctl+0x16f/0x1a0 [ 342.164012][ T9400] ? __pfx_evdev_ioctl+0x10/0x10 [ 342.164059][ T9400] __x64_sys_ioctl+0x18e/0x210 [ 342.164115][ T9400] do_syscall_64+0xc9/0xf80 [ 342.164157][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.164189][ T9400] RIP: 0033:0x7fab6799aeb9 [ 342.164216][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.164247][ T9400] RSP: 002b:00007fab68784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.164277][ T9400] RAX: ffffffffffffffda RBX: 00007fab67c15fa0 RCX: 00007fab6799aeb9 [ 342.164298][ T9400] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000004 [ 342.164319][ T9400] RBP: 00007fab67a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 342.164338][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.164358][ T9400] R13: 00007fab67c16038 R14: 00007fab67c15fa0 R15: 00007ffd689dc598 [ 342.164402][ T9400] [ 343.408167][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 343.414678][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 343.421682][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 343.483078][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 348.108576][ T9491] netlink: 330 bytes leftover after parsing attributes in process `syz.0.530'. [ 348.270975][ T9491] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 349.064327][ T9510] netlink: 350 bytes leftover after parsing attributes in process `syz.0.532'. [ 349.772925][ T9530] input: f as /devices/virtual/input/input8 [ 350.309034][ T9537] NFSD: Failed to start, no listeners configured. [ 352.330150][ T9568] bridge0: port 3(netdevsim0) entered blocking state [ 352.337263][ T9568] bridge0: port 3(netdevsim0) entered disabled state [ 352.347746][ T9568] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 352.463495][ T9568] FAULT_INJECTION: forcing a failure. [ 352.463495][ T9568] name failslab, interval 1, probability 0, space 0, times 0 [ 352.598407][ T9568] CPU: 0 UID: 0 PID: 9568 Comm: syz.1.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.598457][ T9568] Tainted: [L]=SOFTLOCKUP [ 352.598468][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 352.598488][ T9568] Call Trace: [ 352.598499][ T9568] [ 352.598512][ T9568] dump_stack_lvl+0x100/0x190 [ 352.598559][ T9568] should_fail_ex.cold+0x5/0xa [ 352.598616][ T9568] should_failslab+0xc2/0x120 [ 352.598664][ T9568] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 352.598710][ T9568] ? __alloc_skb+0x156/0x410 [ 352.598761][ T9568] ? __alloc_skb+0x156/0x410 [ 352.598803][ T9568] __alloc_skb+0x156/0x410 [ 352.598846][ T9568] ? __alloc_skb+0x35d/0x410 [ 352.598889][ T9568] ? __pfx___alloc_skb+0x10/0x10 [ 352.598950][ T9568] br_vlan_notify+0x15d/0x8a0 [ 352.598993][ T9568] ? nbp_vlan_add+0x2a4/0x3e0 [ 352.599039][ T9568] nbp_vlan_init+0x3f6/0x500 [ 352.599084][ T9568] ? __pfx_nbp_vlan_init+0x10/0x10 [ 352.599133][ T9568] ? __local_bh_enable_ip+0x9e/0x120 [ 352.599174][ T9568] ? lockdep_hardirqs_on+0x78/0x100 [ 352.599213][ T9568] ? br_fdb_add_local+0x43/0x60 [ 352.599248][ T9568] ? __local_bh_enable_ip+0x9e/0x120 [ 352.599295][ T9568] br_add_if+0xf79/0x1b40 [ 352.599363][ T9568] add_del_if+0x114/0x160 [ 352.599413][ T9568] br_dev_siocdevprivate+0x8ac/0x1650 [ 352.599463][ T9568] ? __lock_acquire+0x4a5/0x2630 [ 352.599507][ T9568] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 352.599569][ T9568] ? do_raw_spin_lock+0x128/0x260 [ 352.599627][ T9568] ? mark_held_locks+0x40/0x70 [ 352.599677][ T9568] ? netdev_name_node_lookup+0x107/0x150 [ 352.599720][ T9568] ? __mutex_lock+0x26a/0x1b90 [ 352.599766][ T9568] dev_ifsioc+0xc15/0x1eb0 [ 352.599816][ T9568] ? __pfx_dev_ifsioc+0x10/0x10 [ 352.599858][ T9568] ? __pfx___mutex_lock+0x10/0x10 [ 352.599911][ T9568] ? dev_load+0x8e/0x240 [ 352.599953][ T9568] ? dev_load+0x8e/0x240 [ 352.599998][ T9568] dev_ioctl+0x70e/0x1070 [ 352.600040][ T9568] sock_ioctl+0x494/0x6b0 [ 352.600074][ T9568] ? __pfx_sock_ioctl+0x10/0x10 [ 352.600120][ T9568] ? __pfx_sock_ioctl+0x10/0x10 [ 352.600154][ T9568] __x64_sys_ioctl+0x18e/0x210 [ 352.600202][ T9568] do_syscall_64+0xc9/0xf80 [ 352.600239][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.600268][ T9568] RIP: 0033:0x7fb182f9aeb9 [ 352.600292][ T9568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.600319][ T9568] RSP: 002b:00007fb183f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.600371][ T9568] RAX: ffffffffffffffda RBX: 00007fb183215fa0 RCX: 00007fb182f9aeb9 [ 352.600390][ T9568] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007 [ 352.600407][ T9568] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 352.600424][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.600441][ T9568] R13: 00007fb183216038 R14: 00007fb183215fa0 R15: 00007ffe361893c8 [ 352.600477][ T9568] [ 352.600790][ T9568] bridge0: port 3(netdevsim0) entered blocking state [ 352.900478][ T9568] bridge0: port 3(netdevsim0) entered forwarding state [ 358.276010][ T9666] bridge0: port 3(netdevsim0) entered blocking state [ 358.328717][ T9666] bridge0: port 3(netdevsim0) entered disabled state [ 358.346059][ T9666] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 358.478888][ T9666] FAULT_INJECTION: forcing a failure. [ 358.478888][ T9666] name failslab, interval 1, probability 0, space 0, times 0 [ 358.491614][ T9666] CPU: 0 UID: 0 PID: 9666 Comm: syz.2.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.491651][ T9666] Tainted: [L]=SOFTLOCKUP [ 358.491659][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 358.491673][ T9666] Call Trace: [ 358.491681][ T9666] [ 358.491690][ T9666] dump_stack_lvl+0x100/0x190 [ 358.491723][ T9666] should_fail_ex.cold+0x5/0xa [ 358.491763][ T9666] should_failslab+0xc2/0x120 [ 358.491797][ T9666] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 358.491832][ T9666] ? __alloc_skb+0x156/0x410 [ 358.491914][ T9666] ? mark_held_locks+0x40/0x70 [ 358.491962][ T9666] ? __alloc_skb+0x156/0x410 [ 358.492003][ T9666] __alloc_skb+0x156/0x410 [ 358.492049][ T9666] ? __alloc_skb+0x35d/0x410 [ 358.492080][ T9666] ? __pfx___alloc_skb+0x10/0x10 [ 358.492120][ T9666] ? __pfx_fdb_create+0x10/0x10 [ 358.492148][ T9666] fdb_notify+0xa2/0x190 [ 358.492173][ T9666] fdb_add_local+0x184/0x1c0 [ 358.492201][ T9666] br_fdb_add_local+0x39/0x60 [ 358.492230][ T9666] __vlan_add+0x1820/0x2dd0 [ 358.492271][ T9666] ? __pfx___vlan_add+0x10/0x10 [ 358.492309][ T9666] nbp_vlan_add+0x258/0x3e0 [ 358.492342][ T9666] nbp_vlan_init+0x373/0x500 [ 358.492373][ T9666] ? __pfx_nbp_vlan_init+0x10/0x10 [ 358.492409][ T9666] ? __local_bh_enable_ip+0x9e/0x120 [ 358.492439][ T9666] ? lockdep_hardirqs_on+0x78/0x100 [ 358.492466][ T9666] ? br_fdb_add_local+0x43/0x60 [ 358.492491][ T9666] ? __local_bh_enable_ip+0x9e/0x120 [ 358.492524][ T9666] br_add_if+0xf79/0x1b40 [ 358.492564][ T9666] add_del_if+0x114/0x160 [ 358.492598][ T9666] br_dev_siocdevprivate+0x8ac/0x1650 [ 358.492633][ T9666] ? __lock_acquire+0x4a5/0x2630 [ 358.492665][ T9666] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 358.492709][ T9666] ? do_raw_spin_lock+0x128/0x260 [ 358.492751][ T9666] ? mark_held_locks+0x40/0x70 [ 358.492786][ T9666] ? netdev_name_node_lookup+0x107/0x150 [ 358.492817][ T9666] ? __mutex_lock+0x26a/0x1b90 [ 358.492849][ T9666] dev_ifsioc+0xc15/0x1eb0 [ 358.492891][ T9666] ? __pfx_dev_ifsioc+0x10/0x10 [ 358.492922][ T9666] ? __pfx___mutex_lock+0x10/0x10 [ 358.492961][ T9666] ? dev_load+0x8e/0x240 [ 358.492991][ T9666] ? dev_load+0x8e/0x240 [ 358.493029][ T9666] dev_ioctl+0x70e/0x1070 [ 358.493065][ T9666] sock_ioctl+0x494/0x6b0 [ 358.493093][ T9666] ? __pfx_sock_ioctl+0x10/0x10 [ 358.493135][ T9666] ? __pfx_sock_ioctl+0x10/0x10 [ 358.493164][ T9666] __x64_sys_ioctl+0x18e/0x210 [ 358.493218][ T9666] do_syscall_64+0xc9/0xf80 [ 358.493250][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.493275][ T9666] RIP: 0033:0x7f14a579aeb9 [ 358.493295][ T9666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.493318][ T9666] RSP: 002b:00007f14a66bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.493340][ T9666] RAX: ffffffffffffffda RBX: 00007f14a5a15fa0 RCX: 00007f14a579aeb9 [ 358.493392][ T9666] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000007 [ 358.493411][ T9666] RBP: 00007f14a5808c1f R08: 0000000000000000 R09: 0000000000000000 [ 358.493429][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.493447][ T9666] R13: 00007f14a5a16038 R14: 00007f14a5a15fa0 R15: 00007ffeb1bf8508 [ 358.493489][ T9666] [ 358.849406][ T9666] bridge0: port 3(netdevsim0) entered blocking state [ 358.856424][ T9666] bridge0: port 3(netdevsim0) entered forwarding state [ 360.864051][ T9705] input: f as /devices/virtual/input/input9 [ 362.673019][ T30] audit: type=1800 audit(1769600841.380:2): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=21504 res=0 errno=0 [ 362.829864][ T9741] netlink: 330 bytes leftover after parsing attributes in process `syz.2.563'. [ 363.363374][ T9739] could not allocate digest TFM handle [ 367.490455][ T9812] netlink: 330 bytes leftover after parsing attributes in process `syz.0.575'. [ 367.592188][ T9810] FAULT_INJECTION: forcing a failure. [ 367.592188][ T9810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.618382][ T9810] CPU: 1 UID: 0 PID: 9810 Comm: syz.3.576 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.618432][ T9810] Tainted: [L]=SOFTLOCKUP [ 367.618444][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 367.618464][ T9810] Call Trace: [ 367.618473][ T9810] [ 367.618485][ T9810] dump_stack_lvl+0x100/0x190 [ 367.618531][ T9810] should_fail_ex.cold+0x5/0xa [ 367.618579][ T9810] ? prepare_alloc_pages+0x16d/0x5f0 [ 367.618633][ T9810] should_fail_alloc_page+0xeb/0x140 [ 367.618681][ T9810] prepare_alloc_pages+0x1f0/0x5f0 [ 367.618734][ T9810] ? rcu_is_watching+0x12/0xc0 [ 367.618773][ T9810] __alloc_frozen_pages_noprof+0x193/0x2410 [ 367.618816][ T9810] ? __lock_acquire+0x4a5/0x2630 [ 367.618877][ T9810] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.618918][ T9810] ? do_raw_spin_lock+0x128/0x260 [ 367.618992][ T9810] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.619043][ T9810] ? find_held_lock+0x2b/0x80 [ 367.619088][ T9810] ? __lock_acquire+0x4a5/0x2630 [ 367.619133][ T9810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.619171][ T9810] ? policy_nodemask+0xed/0x4f0 [ 367.619220][ T9810] alloc_pages_mpol+0x1fb/0x550 [ 367.619267][ T9810] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 367.619321][ T9810] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 367.619368][ T9810] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 367.619419][ T9810] folio_alloc_mpol_noprof+0x36/0x340 [ 367.619473][ T9810] shmem_alloc_folio+0x135/0x160 [ 367.619508][ T9810] shmem_alloc_and_add_folio+0x371/0xd40 [ 367.619559][ T9810] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 367.619603][ T9810] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 367.619654][ T9810] shmem_get_folio_gfp+0x6ab/0x1900 [ 367.619702][ T9810] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 367.619744][ T9810] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 367.619791][ T9810] ? lockdep_hardirqs_on+0x78/0x100 [ 367.619841][ T9810] shmem_fault+0x1f9/0xa20 [ 367.619883][ T9810] ? __lock_acquire+0x4a5/0x2630 [ 367.619927][ T9810] ? __pfx_shmem_fault+0x10/0x10 [ 367.619964][ T9810] ? __pfx_current_time+0x10/0x10 [ 367.620010][ T9810] ? __up_read+0x2c5/0x700 [ 367.620073][ T9810] ? __pfx_filemap_map_pages+0x10/0x10 [ 367.620115][ T9810] __do_fault+0x10d/0x550 [ 367.620163][ T9810] ? __pfx_filemap_map_pages+0x10/0x10 [ 367.620201][ T9810] do_fault+0x2db/0x1990 [ 367.620257][ T9810] __handle_mm_fault+0x1807/0x2b50 [ 367.620299][ T9810] ? mt_find+0x45e/0x8e0 [ 367.620353][ T9810] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.620387][ T9810] ? __pfx_mt_find+0x10/0x10 [ 367.620451][ T9810] ? find_vma+0xbf/0x140 [ 367.620495][ T9810] ? __pfx_find_vma+0x10/0x10 [ 367.620545][ T9810] handle_mm_fault+0x36d/0xa20 [ 367.620589][ T9810] do_user_addr_fault+0x74c/0x12f0 [ 367.620639][ T9810] exc_page_fault+0x6f/0xd0 [ 367.620678][ T9810] asm_exc_page_fault+0x26/0x30 [ 367.620710][ T9810] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 367.620758][ T9810] Code: 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 367.620791][ T9810] RSP: 0018:ffffc90004fe7d28 EFLAGS: 00050202 [ 367.620818][ T9810] RAX: 0000000000000000 RBX: 000000000080000d RCX: 00000000007c1044 [ 367.620839][ T9810] RDX: 0000000000080000 RSI: ffffffff82526881 RDI: 000000000003efc9 [ 367.620860][ T9810] RBP: 1ffff920009fcfac R08: 0000000000000001 R09: 00000000000001c6 [ 367.620881][ T9810] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 367.620901][ T9810] R13: 0000000000800004 R14: 0000000000000009 R15: 0000000000000000 [ 367.620948][ T9810] ? __might_fault+0x111/0x140 [ 367.620993][ T9810] evdev_do_ioctl+0xd09/0x1b60 [ 367.621045][ T9810] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 367.621100][ T9810] ? find_held_lock+0x2b/0x80 [ 367.621153][ T9810] evdev_ioctl+0x16f/0x1a0 [ 367.621197][ T9810] ? __pfx_evdev_ioctl+0x10/0x10 [ 367.621245][ T9810] __x64_sys_ioctl+0x18e/0x210 [ 367.621310][ T9810] do_syscall_64+0xc9/0xf80 [ 367.621353][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.621388][ T9810] RIP: 0033:0x7f523739aeb9 [ 367.621414][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.621447][ T9810] RSP: 002b:00007f52382e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.621477][ T9810] RAX: ffffffffffffffda RBX: 00007f5237615fa0 RCX: 00007f523739aeb9 [ 367.621499][ T9810] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000004 [ 367.621520][ T9810] RBP: 00007f5237408c1f R08: 0000000000000000 R09: 0000000000000000 [ 367.621540][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.621560][ T9810] R13: 00007f5237616038 R14: 00007f5237615fa0 R15: 00007ffd0b85ca88 [ 367.621605][ T9810] [ 368.176824][ T9821] FAULT_INJECTION: forcing a failure. [ 368.176824][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 368.189552][ T9821] CPU: 1 UID: 0 PID: 9821 Comm: syz.0.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.189591][ T9821] Tainted: [L]=SOFTLOCKUP [ 368.189599][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 368.189613][ T9821] Call Trace: [ 368.189622][ T9821] [ 368.189631][ T9821] dump_stack_lvl+0x100/0x190 [ 368.189665][ T9821] should_fail_ex.cold+0x5/0xa [ 368.189706][ T9821] should_failslab+0xc2/0x120 [ 368.189740][ T9821] ? cache_create_net+0x9b/0x220 [ 368.189771][ T9821] __kmalloc_noprof+0xf6/0x9c0 [ 368.189794][ T9821] ? cache_create_net+0x2b/0x220 [ 368.189833][ T9821] ? cache_create_net+0x9b/0x220 [ 368.189864][ T9821] cache_create_net+0x9b/0x220 [ 368.189900][ T9821] gss_svc_init_net+0x11f/0x640 [ 368.189929][ T9821] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 368.189968][ T9821] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 368.190007][ T9821] ops_init+0x1e2/0x5f0 [ 368.190049][ T9821] setup_net+0x118/0x3a0 [ 368.190087][ T9821] ? __pfx_setup_net+0x10/0x10 [ 368.190122][ T9821] ? lockdep_init_map_type+0x5c/0x250 [ 368.190157][ T9821] ? mutex_init_lockep+0x110/0x150 [ 368.190230][ T9821] copy_net_ns+0x46f/0x7c0 [ 368.190267][ T9821] create_new_namespaces+0x3ea/0xab0 [ 368.190311][ T9821] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 368.190341][ T9821] ksys_unshare+0x455/0xab0 [ 368.190377][ T9821] ? __pfx_ksys_unshare+0x10/0x10 [ 368.190411][ T9821] ? xfd_validate_state+0x129/0x190 [ 368.190458][ T9821] __x64_sys_unshare+0x31/0x40 [ 368.190492][ T9821] do_syscall_64+0xc9/0xf80 [ 368.190524][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.190548][ T9821] RIP: 0033:0x7fab6799aeb9 [ 368.190567][ T9821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.190590][ T9821] RSP: 002b:00007fab68784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 368.190613][ T9821] RAX: ffffffffffffffda RBX: 00007fab67c15fa0 RCX: 00007fab6799aeb9 [ 368.190628][ T9821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 368.190643][ T9821] RBP: 00007fab67a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 368.190657][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.190671][ T9821] R13: 00007fab67c16038 R14: 00007fab67c15fa0 R15: 00007ffd689dc598 [ 368.190701][ T9821] [ 372.521918][ T9896] FAULT_INJECTION: forcing a failure. [ 372.521918][ T9896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.568433][ T9896] CPU: 0 UID: 0 PID: 9896 Comm: syz.1.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.568486][ T9896] Tainted: [L]=SOFTLOCKUP [ 372.568498][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 372.568517][ T9896] Call Trace: [ 372.568528][ T9896] [ 372.568540][ T9896] dump_stack_lvl+0x100/0x190 [ 372.568587][ T9896] should_fail_ex.cold+0x5/0xa [ 372.568637][ T9896] ? prepare_alloc_pages+0x16d/0x5f0 [ 372.568694][ T9896] should_fail_alloc_page+0xeb/0x140 [ 372.568746][ T9896] prepare_alloc_pages+0x1f0/0x5f0 [ 372.568816][ T9896] __alloc_frozen_pages_noprof+0x193/0x2410 [ 372.568859][ T9896] ? __lock_acquire+0x4a5/0x2630 [ 372.568922][ T9896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 372.568965][ T9896] ? do_raw_spin_lock+0x128/0x260 [ 372.569017][ T9896] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.569069][ T9896] ? find_held_lock+0x2b/0x80 [ 372.569114][ T9896] ? __lock_acquire+0x4a5/0x2630 [ 372.569159][ T9896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 372.569199][ T9896] ? policy_nodemask+0xed/0x4f0 [ 372.569250][ T9896] alloc_pages_mpol+0x1fb/0x550 [ 372.569307][ T9896] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 372.569357][ T9896] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 372.569405][ T9896] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 372.569458][ T9896] folio_alloc_mpol_noprof+0x36/0x340 [ 372.569513][ T9896] shmem_alloc_folio+0x135/0x160 [ 372.569549][ T9896] shmem_alloc_and_add_folio+0x371/0xd40 [ 372.569602][ T9896] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 372.569649][ T9896] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 372.569702][ T9896] shmem_get_folio_gfp+0x6ab/0x1900 [ 372.569753][ T9896] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 372.569808][ T9896] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 372.569857][ T9896] ? lockdep_hardirqs_on+0x78/0x100 [ 372.569905][ T9896] shmem_fault+0x1f9/0xa20 [ 372.569936][ T9896] ? __lock_acquire+0x4a5/0x2630 [ 372.569967][ T9896] ? __pfx_shmem_fault+0x10/0x10 [ 372.569996][ T9896] ? __pfx_current_time+0x10/0x10 [ 372.570029][ T9896] ? __up_read+0x2c5/0x700 [ 372.570075][ T9896] ? __pfx_filemap_map_pages+0x10/0x10 [ 372.570105][ T9896] __do_fault+0x10d/0x550 [ 372.570140][ T9896] ? __pfx_filemap_map_pages+0x10/0x10 [ 372.570169][ T9896] do_fault+0x2db/0x1990 [ 372.570211][ T9896] __handle_mm_fault+0x1807/0x2b50 [ 372.570241][ T9896] ? mt_find+0x45e/0x8e0 [ 372.570273][ T9896] ? __pfx___handle_mm_fault+0x10/0x10 [ 372.570297][ T9896] ? __pfx_mt_find+0x10/0x10 [ 372.570343][ T9896] ? find_vma+0xbf/0x140 [ 372.570374][ T9896] ? __pfx_find_vma+0x10/0x10 [ 372.570410][ T9896] handle_mm_fault+0x36d/0xa20 [ 372.570442][ T9896] do_user_addr_fault+0x74c/0x12f0 [ 372.570477][ T9896] exc_page_fault+0x6f/0xd0 [ 372.570504][ T9896] asm_exc_page_fault+0x26/0x30 [ 372.570528][ T9896] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 372.570563][ T9896] Code: 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 372.570587][ T9896] RSP: 0018:ffffc900046e7d28 EFLAGS: 00050202 [ 372.570607][ T9896] RAX: 0000000000000000 RBX: 000000000080000d RCX: 00000000007bf044 [ 372.570622][ T9896] RDX: 0000000000080000 RSI: ffffffff82526881 RDI: 0000000000040fc9 [ 372.570637][ T9896] RBP: 1ffff920008dcfac R08: 0000000000000001 R09: 00000000000001c6 [ 372.570652][ T9896] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 372.570667][ T9896] R13: 0000000000800004 R14: 0000000000000009 R15: 0000000000000000 [ 372.570690][ T9896] ? __might_fault+0x111/0x140 [ 372.570722][ T9896] evdev_do_ioctl+0xd09/0x1b60 [ 372.570759][ T9896] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 372.570804][ T9896] ? find_held_lock+0x2b/0x80 [ 372.570841][ T9896] evdev_ioctl+0x16f/0x1a0 [ 372.570873][ T9896] ? __pfx_evdev_ioctl+0x10/0x10 [ 372.570907][ T9896] __x64_sys_ioctl+0x18e/0x210 [ 372.570948][ T9896] do_syscall_64+0xc9/0xf80 [ 372.570979][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.571003][ T9896] RIP: 0033:0x7fb182f9aeb9 [ 372.571022][ T9896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.571045][ T9896] RSP: 002b:00007fb183f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.571066][ T9896] RAX: ffffffffffffffda RBX: 00007fb183215fa0 RCX: 00007fb182f9aeb9 [ 372.571081][ T9896] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000004 [ 372.571096][ T9896] RBP: 00007fb183008c1f R08: 0000000000000000 R09: 0000000000000000 [ 372.571111][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.571124][ T9896] R13: 00007fb183216038 R14: 00007fb183215fa0 R15: 00007ffe361893c8 [ 372.571155][ T9896] [ 375.601006][ T30] audit: type=1800 audit(1769600854.320:3): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=22808 res=0 errno=0 [ 375.785818][ T9924] could not allocate digest TFM handle [ 376.566722][ T9952] FAULT_INJECTION: forcing a failure. [ 376.566722][ T9952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.598334][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.0.600 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.598374][ T9952] Tainted: [L]=SOFTLOCKUP [ 376.598382][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 376.598397][ T9952] Call Trace: [ 376.598406][ T9952] [ 376.598415][ T9952] dump_stack_lvl+0x100/0x190 [ 376.598473][ T9952] should_fail_ex.cold+0x5/0xa [ 376.598520][ T9952] ? prepare_alloc_pages+0x16d/0x5f0 [ 376.598577][ T9952] should_fail_alloc_page+0xeb/0x140 [ 376.598626][ T9952] prepare_alloc_pages+0x1f0/0x5f0 [ 376.598675][ T9952] ? rcu_is_watching+0x12/0xc0 [ 376.598712][ T9952] __alloc_frozen_pages_noprof+0x193/0x2410 [ 376.598750][ T9952] ? __lock_acquire+0x4a5/0x2630 [ 376.598795][ T9952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.598825][ T9952] ? do_raw_spin_lock+0x128/0x260 [ 376.598892][ T9952] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.598944][ T9952] ? find_held_lock+0x2b/0x80 [ 376.598987][ T9952] ? __lock_acquire+0x4a5/0x2630 [ 376.599026][ T9952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 376.599054][ T9952] ? policy_nodemask+0xed/0x4f0 [ 376.599090][ T9952] alloc_pages_mpol+0x1fb/0x550 [ 376.599126][ T9952] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 376.599174][ T9952] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 376.599208][ T9952] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 376.599247][ T9952] folio_alloc_mpol_noprof+0x36/0x340 [ 376.599288][ T9952] shmem_alloc_folio+0x135/0x160 [ 376.599314][ T9952] shmem_alloc_and_add_folio+0x371/0xd40 [ 376.599350][ T9952] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 376.599383][ T9952] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 376.599422][ T9952] shmem_get_folio_gfp+0x6ab/0x1900 [ 376.599459][ T9952] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 376.599490][ T9952] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 376.599525][ T9952] ? lockdep_hardirqs_on+0x78/0x100 [ 376.599558][ T9952] shmem_fault+0x1f9/0xa20 [ 376.599587][ T9952] ? __lock_acquire+0x4a5/0x2630 [ 376.599618][ T9952] ? __pfx_shmem_fault+0x10/0x10 [ 376.599646][ T9952] ? __pfx_current_time+0x10/0x10 [ 376.599680][ T9952] ? __up_read+0x2c5/0x700 [ 376.599727][ T9952] ? __pfx_filemap_map_pages+0x10/0x10 [ 376.599757][ T9952] __do_fault+0x10d/0x550 [ 376.599792][ T9952] ? __pfx_filemap_map_pages+0x10/0x10 [ 376.599821][ T9952] do_fault+0x2db/0x1990 [ 376.599863][ T9952] __handle_mm_fault+0x1807/0x2b50 [ 376.599894][ T9952] ? mt_find+0x45e/0x8e0 [ 376.599925][ T9952] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.599950][ T9952] ? __pfx_mt_find+0x10/0x10 [ 376.599996][ T9952] ? find_vma+0xbf/0x140 [ 376.600028][ T9952] ? __pfx_find_vma+0x10/0x10 [ 376.600064][ T9952] handle_mm_fault+0x36d/0xa20 [ 376.600096][ T9952] do_user_addr_fault+0x74c/0x12f0 [ 376.600131][ T9952] exc_page_fault+0x6f/0xd0 [ 376.600165][ T9952] asm_exc_page_fault+0x26/0x30 [ 376.600189][ T9952] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 376.600225][ T9952] Code: 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 376.600249][ T9952] RSP: 0018:ffffc90004727d28 EFLAGS: 00050202 [ 376.600269][ T9952] RAX: 0000000000000000 RBX: 000000000080000d RCX: 00000000007c1044 [ 376.600284][ T9952] RDX: 0000000000080000 RSI: ffffffff82526881 RDI: 000000000003efc9 [ 376.600300][ T9952] RBP: 1ffff920008e4fac R08: 0000000000000001 R09: 00000000000001c6 [ 376.600315][ T9952] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 376.600329][ T9952] R13: 0000000000800004 R14: 0000000000000009 R15: 0000000000000000 [ 376.600352][ T9952] ? __might_fault+0x111/0x140 [ 376.600384][ T9952] evdev_do_ioctl+0xd09/0x1b60 [ 376.600424][ T9952] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 376.600463][ T9952] ? find_held_lock+0x2b/0x80 [ 376.600500][ T9952] evdev_ioctl+0x16f/0x1a0 [ 376.600531][ T9952] ? __pfx_evdev_ioctl+0x10/0x10 [ 376.600565][ T9952] __x64_sys_ioctl+0x18e/0x210 [ 376.600610][ T9952] do_syscall_64+0xc9/0xf80 [ 376.600640][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.600664][ T9952] RIP: 0033:0x7fab6799aeb9 [ 376.600684][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.600707][ T9952] RSP: 002b:00007fab68784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.600728][ T9952] RAX: ffffffffffffffda RBX: 00007fab67c15fa0 RCX: 00007fab6799aeb9 [ 376.600744][ T9952] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000004 [ 376.600759][ T9952] RBP: 00007fab67a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 376.600774][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.600788][ T9952] R13: 00007fab67c16038 R14: 00007fab67c15fa0 R15: 00007ffd689dc598 [ 376.600820][ T9952] [ 377.863787][ T9972] nbd: must specify at least one socket [ 378.264678][ T9979] futex_wake_op: syz.2.602 tries to shift op by -2048; fix this program [ 378.432813][ T9979] futex_wake_op: syz.2.602 tries to shift op by -2048; fix this program [ 378.806294][ T9979] 0x000000000001-0x000000020000 : "" [ 378.985131][ T9979] ftl_cs: FTL header corrupt! [ 379.240200][T10002] netlink: 330 bytes leftover after parsing attributes in process `syz.3.605'. [ 379.399148][ T9979] "mq-deadline" elevator initialization, failed -12, falling back to "none" [ 379.506637][ T9979] ------------[ cut here ]------------ [ 379.512269][ T9979] wbt_init(disk) [ 379.512293][ T9979] WARNING: block/blk-wbt.c:741 at wbt_init_enable_default+0x53/0x60, CPU#0: syz.2.602/9979 [ 379.525949][ T9979] Modules linked in: [ 379.530101][ T9979] CPU: 0 UID: 0 PID: 9979 Comm: syz.2.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.540976][ T9979] Tainted: [L]=SOFTLOCKUP [ 379.545319][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 379.555516][ T9979] RIP: 0010:wbt_init_enable_default+0x53/0x60 [ 379.561859][ T9979] Code: fd 5b 5d c3 cc cc cc cc e8 fa dd 2e fd 48 89 ef e8 a2 fa ff ff 31 ff 89 c3 89 c6 e8 97 d8 2e fd 85 db 74 d8 e8 de dd 2e fd 90 <0f> 0b 90 eb cd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 379.582620][ T9979] RSP: 0000:ffffc90003d275a0 EFLAGS: 00010287 [ 379.589107][ T9979] RAX: 000000000001d1f0 RBX: 00000000fffffff4 RCX: ffffc9000d556000 [ 379.597138][ T9979] RDX: 0000000000080000 RSI: ffffffff84d76ca2 RDI: ffff888031d89e80 [ 379.605275][ T9979] RBP: ffff88801f77c000 R08: 0000000000000005 R09: 0000000000000000 [ 379.613464][ T9979] R10: 00000000fffffff4 R11: ffffffff8b737149 R12: ffff88802a623930 [ 379.621782][ T9979] R13: ffff88801f77c390 R14: ffff88802a623940 R15: ffff88801f77c090 [ 379.630176][ T9979] FS: 00007f14a669a6c0(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 379.639750][ T9979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.646375][ T9979] CR2: 0000000000001000 CR3: 000000003edfc000 CR4: 00000000003526f0 [ 379.654453][ T9979] Call Trace: [ 379.657778][ T9979] [ 379.660781][ T9979] blk_register_queue+0x39e/0x4e0 [ 379.665893][ T9979] __add_disk+0x73f/0xe40 [ 379.670370][ T9979] add_disk_fwnode+0x118/0x5c0 [ 379.675181][ T9979] add_mtd_blktrans_dev+0xd0b/0x1520 [ 379.680539][ T9979] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 379.686315][ T9979] mtdblock_add_mtd+0x1cc/0x270 [ 379.691529][ T9979] blktrans_notify_add+0xa2/0xf0 [ 379.696501][ T9979] add_mtd_device+0xbe3/0x1750 [ 379.701369][ T9979] ? __pfx_add_mtd_device+0x10/0x10 [ 379.706613][ T9979] mtd_add_partition+0x30a/0x660 [ 379.711631][ T9979] ? __pfx_mtd_add_partition+0x10/0x10 [ 379.717127][ T9979] ? __might_fault+0xc5/0x140 [ 379.721892][ T9979] ? __might_fault+0xc5/0x140 [ 379.726614][ T9979] mtdchar_blkpg_ioctl+0x207/0x250 [ 379.731820][ T9979] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 379.737516][ T9979] mtdchar_ioctl+0x1670/0x1fd0 [ 379.742342][ T9979] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 379.747479][ T9979] ? lock_acquire+0x17c/0x330 [ 379.752227][ T9979] ? __pfx___might_resched+0x10/0x10 [ 379.757557][ T9979] ? trace_contention_end+0xd6/0x110 [ 379.762954][ T9979] ? do_vfs_ioctl+0x226/0x13e0 [ 379.767767][ T9979] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 379.773725][ T9979] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 379.778824][ T9979] ? __pfx___mutex_lock+0x10/0x10 [ 379.783916][ T9979] ? hook_file_ioctl_common+0x146/0x410 [ 379.789529][ T9979] ? __fget_files+0x21f/0x3d0 [ 379.794559][ T9979] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 379.799810][ T9979] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 379.805743][ T9979] __x64_sys_ioctl+0x18e/0x210 [ 379.810668][ T9979] do_syscall_64+0xc9/0xf80 [ 379.815208][ T9979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.821218][ T9979] RIP: 0033:0x7f14a579aeb9 [ 379.825656][ T9979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.845336][ T9979] RSP: 002b:00007f14a669a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.853808][ T9979] RAX: ffffffffffffffda RBX: 00007f14a5a16090 RCX: 00007f14a579aeb9 [ 379.861869][ T9979] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000006 [ 379.869926][ T9979] RBP: 00007f14a5808c1f R08: 0000000000000000 R09: 0000000000000000 [ 379.877918][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.885949][ T9979] R13: 00007f14a5a16128 R14: 00007f14a5a16090 R15: 00007ffeb1bf8508 [ 379.894378][ T9979] [ 379.897419][ T9979] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 379.904721][ T9979] CPU: 0 UID: 0 PID: 9979 Comm: syz.2.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.915512][ T9979] Tainted: [L]=SOFTLOCKUP [ 379.919851][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 379.929927][ T9979] Call Trace: [ 379.933218][ T9979] [ 379.936161][ T9979] dump_stack_lvl+0x100/0x190 [ 379.940865][ T9979] vpanic+0x20d/0x630 [ 379.944918][ T9979] panic+0xd1/0xd1 [ 379.948672][ T9979] ? __pfx_panic+0x10/0x10 [ 379.953125][ T9979] check_panic_on_warn.cold+0x19/0x34 [ 379.958522][ T9979] ? wbt_init_enable_default+0x53/0x60 [ 379.964025][ T9979] __warn.cold+0x191/0x2f8 [ 379.968515][ T9979] __report_bug+0x296/0x3d0 [ 379.973049][ T9979] ? wbt_init_enable_default+0x53/0x60 [ 379.978538][ T9979] ? __pfx___report_bug+0x10/0x10 [ 379.983599][ T9979] ? wbt_init_enable_default+0x53/0x60 [ 379.989079][ T9979] report_bug+0xb2/0x220 [ 379.993346][ T9979] ? wbt_init_enable_default+0x53/0x60 [ 379.998864][ T9979] handle_bug+0x166/0x2a0 [ 380.003255][ T9979] exc_invalid_op+0x17/0x50 [ 380.007806][ T9979] asm_exc_invalid_op+0x1a/0x20 [ 380.012685][ T9979] RIP: 0010:wbt_init_enable_default+0x53/0x60 [ 380.018797][ T9979] Code: fd 5b 5d c3 cc cc cc cc e8 fa dd 2e fd 48 89 ef e8 a2 fa ff ff 31 ff 89 c3 89 c6 e8 97 d8 2e fd 85 db 74 d8 e8 de dd 2e fd 90 <0f> 0b 90 eb cd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 380.038432][ T9979] RSP: 0000:ffffc90003d275a0 EFLAGS: 00010287 [ 380.044533][ T9979] RAX: 000000000001d1f0 RBX: 00000000fffffff4 RCX: ffffc9000d556000 [ 380.052535][ T9979] RDX: 0000000000080000 RSI: ffffffff84d76ca2 RDI: ffff888031d89e80 [ 380.060529][ T9979] RBP: ffff88801f77c000 R08: 0000000000000005 R09: 0000000000000000 [ 380.068526][ T9979] R10: 00000000fffffff4 R11: ffffffff8b737149 R12: ffff88802a623930 [ 380.076554][ T9979] R13: ffff88801f77c390 R14: ffff88802a623940 R15: ffff88801f77c090 [ 380.084558][ T9979] ? do_syscall_64+0xc9/0xf80 [ 380.089288][ T9979] ? wbt_init_enable_default+0x52/0x60 [ 380.094774][ T9979] blk_register_queue+0x39e/0x4e0 [ 380.099847][ T9979] __add_disk+0x73f/0xe40 [ 380.104263][ T9979] add_disk_fwnode+0x118/0x5c0 [ 380.109061][ T9979] add_mtd_blktrans_dev+0xd0b/0x1520 [ 380.114380][ T9979] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 380.120181][ T9979] mtdblock_add_mtd+0x1cc/0x270 [ 380.125054][ T9979] blktrans_notify_add+0xa2/0xf0 [ 380.130012][ T9979] add_mtd_device+0xbe3/0x1750 [ 380.134821][ T9979] ? __pfx_add_mtd_device+0x10/0x10 [ 380.140056][ T9979] mtd_add_partition+0x30a/0x660 [ 380.145050][ T9979] ? __pfx_mtd_add_partition+0x10/0x10 [ 380.150569][ T9979] ? __might_fault+0xc5/0x140 [ 380.155277][ T9979] ? __might_fault+0xc5/0x140 [ 380.160101][ T9979] mtdchar_blkpg_ioctl+0x207/0x250 [ 380.165235][ T9979] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 380.170913][ T9979] mtdchar_ioctl+0x1670/0x1fd0 [ 380.175703][ T9979] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 380.180844][ T9979] ? lock_acquire+0x17c/0x330 [ 380.185562][ T9979] ? __pfx___might_resched+0x10/0x10 [ 380.190912][ T9979] ? trace_contention_end+0xd6/0x110 [ 380.196231][ T9979] ? do_vfs_ioctl+0x226/0x13e0 [ 380.201036][ T9979] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 380.206468][ T9979] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 380.211534][ T9979] ? __pfx___mutex_lock+0x10/0x10 [ 380.216602][ T9979] ? hook_file_ioctl_common+0x146/0x410 [ 380.222195][ T9979] ? __fget_files+0x21f/0x3d0 [ 380.226905][ T9979] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 380.232127][ T9979] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 380.238063][ T9979] __x64_sys_ioctl+0x18e/0x210 [ 380.242889][ T9979] do_syscall_64+0xc9/0xf80 [ 380.247420][ T9979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.253378][ T9979] RIP: 0033:0x7f14a579aeb9 [ 380.257810][ T9979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.277469][ T9979] RSP: 002b:00007f14a669a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.285909][ T9979] RAX: ffffffffffffffda RBX: 00007f14a5a16090 RCX: 00007f14a579aeb9 [ 380.293902][ T9979] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000006 [ 380.301891][ T9979] RBP: 00007f14a5808c1f R08: 0000000000000000 R09: 0000000000000000 [ 380.309882][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.317891][ T9979] R13: 00007f14a5a16128 R14: 00007f14a5a16090 R15: 00007ffeb1bf8508 [ 380.325911][ T9979] [ 380.329134][ T9979] Kernel Offset: disabled [ 380.333485][ T9979] Rebooting in 86400 seconds..