last executing test programs: 2m42.739792668s ago: executing program 2 (id=194): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x901064b2, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@query={@target_fd=r1, 0x89e3, 0x0, 0x3, 0xe, @prog_cnt=0x8, 0x0, 0x3, 0x401, 0x1, 0x5cd}, 0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0041, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m41.051534498s ago: executing program 0 (id=197): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000180)="fea45b228978d4fe41c5eb871910d290ae941796457f34e6bd7f17653f49b105e64a29398cb82acd5316c56c8a8fb20f69018ec196d83ee56e83ee591e84c7fa56ce7e69911fc6434e0ff66c2b1ca0520b15b3b4b1004b1cc28751284fdd3d7587765a62544e5b7511be6c87fd28014a3d42f142215d8eecedd7292c07e05c2c3146c157fa61a33c124bfc32ea1db7dc9b1bb954fcb40debf538555c913f368b4354b200"/179, 0x2, 0x0, 0x9, 0x0, 0x40000000001f, 0x9}, 0x80000e}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x8803, 0x0) recvfrom$auto(r1, 0x0, 0x8000000010, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x9, 0x5, 0x25, 0x410, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/hw_queues\x00', 0x8101, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip_tables_names\x00', 0x185081, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0xa, 0x73) 2m40.888810348s ago: executing program 2 (id=199): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_GET_LINK_SMCR(r1, &(0x7f0000001d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="0000000085a1935ce03f61e077119509188d930113de24720300000000000000bb54732c20bdb296fe447c8868a37acb243002c9887236926b783e935669379dc8b26309f66633aadfef1cbcc7d573b82373143cef8cfe6df326afd2ae144627974649853f662cbd5db4c458d3bcc58a33f1af613fb19a787b4a66480d10a85c4296abcf98df7bc19e04bcc47569cb23c6afaf43687c8429dc9895792317976bc6745a511dfa86236ba46b904d342a4f7fe2cfee4c6b1cc437f60270eec860e19c95e749eff05cea", @ANYRES16=r3, @ANYBLOB="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"], 0xe14}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="050328bd7000fbdbdf2561b8b3d42257707b", @ANYRES16=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044c}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1a1842, 0x0) write$auto(r4, 0x0, 0x8) socket(0x21, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x7, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) 2m40.638012283s ago: executing program 0 (id=201): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x560a, r1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x101, 0x103) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2b}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xaf}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x98}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044880) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x23, 0x6, 0x0) socket(0x23, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 2m39.867557439s ago: executing program 2 (id=203): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x4000004) write$auto(0x3, 0x0, 0xfffffdf1) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000080027000e0000000a0010", @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vbi22\x00', 0x80000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r2, r2, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x9, 0x2, 0x15f4da07, 0x6, 0x2, 0x64, 0x7f, 0x1000, 0xc, 0x9, 0x1, 0xfffffffffffff1ef]}, 0x0) 2m39.631663414s ago: executing program 0 (id=205): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 2m38.542797135s ago: executing program 2 (id=206): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x4000004) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000080027000e0000000a0010", @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x28, 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vbi22\x00', 0x80000, 0x0) ioctl$auto(0x3, 0x541b, 0x38) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r2, r2, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x9, 0x2, 0x15f4da07, 0x6, 0x2, 0x64, 0x7f, 0x1000, 0xc, 0x9, 0x1, 0xfffffffffffff1ef]}, 0x0) 2m38.289594959s ago: executing program 0 (id=208): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x11c) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x901064b2, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@query={@target_fd=r1, 0x89e3, 0x0, 0x3, 0xe, @prog_cnt=0x8, 0x0, 0x3, 0x401, 0x1, 0x5cd}, 0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0041, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m37.04655382s ago: executing program 0 (id=210): openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vbi9\x00', 0x16b000, 0x0) ioctl$auto(r0, 0x40085618, r0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = fanotify_init$auto(0x1f53, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x1, 0xf2b, r1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) read$auto(r0, &(0x7f0000000200)='/sys/de~y\x8a\x18\x0f\xf9\xedoaTform/vhci_hcd\x05\x00\x00\x00\x00\x00\x00\x00/descripTors\x00\xe6\x84\x1e\xab\\\xfb\xc3\f', 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x8, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) semctl$auto(0x7, 0x6, 0x13, 0x1) socketpair$auto(0x20020, 0xa, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000000c0)="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", 0x119) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, 0x0, 0x6a) unshare$auto(0x40000080) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="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", 0x2f8) 2m36.995552075s ago: executing program 2 (id=211): openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto(0x3, 0x0, 0x100085) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0x7d5, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f"}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/031/001\x00', 0x4a441, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL32(r1, 0x8008550e, &(0x7f0000000340)={0x0, 0xffff}) ioctl$auto_UI_SET_SNDBIT(r0, 0x4004556a, 0x0) r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='\\}\x00', &(0x7f0000000080)="8e2c44e14a4d1ae41b00e09fe4ad7902c171b387ccbb98e7f3fcae0630acc64845ec5ec1ba90d3deef91b12da8e24cb9eb6e02ea575942d78c82e4a1e5c6965bb97526f6cd37081a807b079c828b544ab0e3064699e160989b49a1cbc39365890fdbcbb59049ae0d71b50309930a8c4e13fba1343f5ae6856acba9a05508736c2d0e4349eadbe5d56c6b261bd5890b665d1a89c8463fd25b023cd105c6ca1a3c07f78ca5f90a9233ef3684c4f5c359e0aa5634ae5f65d2975b3d4e7b207637544041ffbc2a233f8ea93b471933", 0x7fffffff) r3 = pidfd_open$auto(0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(r3, 0x0, 0xffffffffffffffff, 0x0, 0x104) 2m36.669490823s ago: executing program 2 (id=213): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\f\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/3162], 0xc60}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) write$auto(0xffffffffffffffff, 0x0, 0xfdef) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) r1 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/projid_map\x00', 0x2, 0x0) mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2) ioctl$auto_RNDADDTOENTCNT2(0xffffffffffffffff, 0x40045201, &(0x7f0000000880)=0x80000001) mmap$auto(0x2, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000031, 0x0) r2 = fsopen$auto(0x0, 0x1) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r1, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r2) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000fedbdf2500000000080005000a010101056400b57c9bbd588bea05000d000900000008000500ac1e000114000c00fe8000000000000000000000000000aa14000c0000000000000000000000ffff6401010108000100040000000800010009000000"], 0x64}, 0x1, 0x0, 0x0, 0x40081}, 0x4010) socket(0x15, 0x5, 0x0) r4 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video46\x00', 0x20200, 0x0) ioctl$auto(r5, 0xc0285628, r5) write$auto(r4, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x10) getsockopt$auto(r4, 0x8, 0x270d, 0xfffffffffffffffc, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) 2m35.831577853s ago: executing program 0 (id=215): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) 2m21.553825627s ago: executing program 32 (id=213): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\f\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf25020000004c0c0a807c01d88014000a00000000000000000000000000000000018c5e7904b62ded848c5a778ccb9fcd960d5745f5cea399f1393201d03ff61c8faad2714a3f3cb433cf059ecaabcadab9b937fa6270f5834c8977b164f51f8a5010c2391b321a51ed2e59e62b82050afea490c39f241c0bccc4eca2a23856a7463f5922c1e87d7c003922ae40afeb062934923dd36f2ebb228b936966e22c6ef66079c2fc3021977473b17d917d82c4b34eb65f20bd151f080442ea1e9e9145df1e2826836b038d77a91cf3bc1c8e336491d9e593c9de15e694a026b12d4b60593ccff1177b10e75c4ddc060f10dd75faa446540cd4d2789346397d7ec6ef83a74728f306d8a679df003a270e6bbe6d9d34a5c5bff4578c2b78df5f7a0108d105b44a38f769e5a4266a314301bc9d1f94d274645b0c1e5912937fa615ad900e00f090e3c8983552b54cea92f082fdbbbb8516b63c42db43e832d8619d2907d24873200a68c154338a239ec64a0400f8800400e58008003300ffffffffa2e51c731e48c1c636ffffe1588d1951c13ab2c929acd0618de874f0910a4b800400748014000500fe88000000000000000000000000000104004680a00d8ff41cccbf55c36b5d5793b6ad42435e2cc5368e1f7460d84ab4104519e965f9ddc2952e5c7833887d56fbf664f0c427fe74c8e656a2c630037a9b04033ce61f32864a8ca1909fb177864116d7e5b835df404cde2e7b18d069155563fbbe8c295df3fb0e4b465f9ad68cac8994bd7cb152b40f837efa7f8155c887cc82b77054893cb8183bd7d5283ad5b395492caad2d0e6114d4d314b6968b6858a1e20094f7e7c5243ebbaea2f639e9f0bf971a18f68326f7844933654971c4f0156eb94fd978405a40ea23d0e0fbfcd88be971646869ca13f179a0b673ae041c9c02e32a32dd05530f6c35ae0c5b7dcb4bb265fcf856a030b981bb322d4928329ec5ff77e4ad21dd42b1392491d534b63fb1aae4e2e5f3ffcd818ed6693a63d260bf76118ebdb0907505a66d6c8cd91e916af9c590fad10485dca7b11b67b7aa70069d9b8b1192e04635a0b4ce37724474ee0863f57e9ece83eb6b69c2044386c8e8149e937230d3de3008c40677fb8ed85c878f90afc5ed28d2c58376f670287a6bd2a24aee95a20b0919851fdc7452fb1c7b1e250b8da8d0c7531733f26320c71530f76542165aaf05a98cb7dc328de86e9b77f674149b05eed59efa1cb0a824987cb56f39e62a1a2d65013005d04322e5ff87229c40c4646736970a9e738cbe590a0626430a7e5e138ac8c40ab68f912f327690b6a4d6c207470b7c4b3281619f61b3b8584107daba0cbd1dc9070a7b84481d21cb683a0ab9adf8dfd2d25c67eb0bc48b3ec953a666cd3439250e74857a01dad6300bf71ed5663dc21fb8d90bc956356e3d20fedb2869ad670b8d98d41a4434385f98de28c23e21731d643fc52792a72aab4417f9eebf9f9fa4c0a6efbaef5aac281d71d82fde9f23a44424e1ce141ab8187535ac9f11c1c5e6ddcca6efc5ff155b163f525b4cd7e712f4d8fbb53575094c83f1ca4e35aeaa81f677eeba0cf2846bd36bb0eeb1824f4dbb624edd230171a3dcdf639f2abd6a1f37f1a05c7824ad84966ea6d258ec0688a9abd4b6937ce9b6399c0db909f14427acd491832c1eccccde62c6fff59b6dbbe27ba3cfeae11986f08ed7719e612462de5988e5e8a528f1da1607f018c5fcf7314764cc7e6bee02b7651296a31f5d484c9c606964ac7b0eecdd703279a05e6c0203d794e63778e28b89b26a87cc3aba666909b55b11678b86492179e46b628d0af57d813c1176f998bd600e06f46134c85922bb2b8264ac3a1a71345282005f2ae235ad6b7fdfb1ce7aee64f8ed308e9e19b5dcaf289094c026410446cc31cc846947c872b6455afbcb0d99cd814cd51b606646b92af3a81b07dd25a7f7b2fe18bf5ff3489064b54fa1abb9a2c80a4adc93ced65cb3a1379105b22912a1a3da47a26d730ec30333269167b05768b87adb94c84fc4c888676f1a5350d03df3a75873f9d28a9150e3177d68607cbd779049daea4f37e1553e21f66dad10987dd51af2f1f59b47df0f2be4437cf158cbdd3a642d6453a0f83ed71bdc492dadbdc0c50af56a7f8aff757d3ae0fafb3dab14eb93330a0b76ee1db94d810965f4176d4bc8087b790369b89351033e27022479978679c59e5ddcef33a3770df6e6d7338130342e7fb6c13e0fd0813e689bb70ed3a05c377841afeba8ed5044a2cb0cf96799e30c120d55c193ab5ebab1add7bf6558838bfcab15ee29248d4bcb40aeb114e097f8edd3d647c014f68cb547ac73a5087a3f5de4b8822727d17a58d66c4e6fbe61d2e114cc266d3d94d3eae8987196fe922372241e197288fca4984e7bbd53d759fdc4de050c592958990f8acfea1f372df6c50f0d244ed85c19f2cc0b330298a80d50b995321d8585985a7ab7a5c6bb4f6a1a48dc757dc2c69c58f7e175790f1ac0e13d6731cae4d4d64a61d56aa5669e21893c47cdd8342ae69658f98d909f532deb250dde9c80bf2f6a9a66e5b6c4bde12091f543ce9b512bf423f965b0fc52f8218c609454463a2a2d542f23dff19998daeab5ae1b7012faeec6f7b912ab45427ef1242b756b47e810dd856352615f3e1d8998dc1ac5153316243ae2a4e2d9cf9d73a4aeab992294302c85670a37abb38b528000624149591ec596c755daa5d5bf2da6870d058cda6789550a68259b110b81a99c4cbe41eb901cb51ceaeeb704e9c77f19e47012ca35e523971dba1e0318b8862014264ef090b278d8a97f2a768729b44cd5ea820ed1fd06e7c6c16f04c0f1e12637cfbea83a0e54ff58242e5e3d2d7bf316d5832e051172cd1a314eef8969a4c64c2e45b5143e192dde9f3918b2da2f6f4b30a4a7a40df943688aee9b0f40532fc50a3ddfb7d86f71e8a8ca49390fa1113812084284c00133d9de60a69929bb47b0209f57c7eb24f42ec56c0923ca5022e8fc7b0e3889ebe35c55b550b96d1eed78f664bddc383ad13b5aecd83187322c3d1df34c453a9dc2692eb8682d7a52d84222a7197b175016974e561b7a4c808fe0e37fb1e4c5c47a77b2122e175f194f645d5a3fa56472bca44b31bd2e51533d379b68f39977dc2a756e6aa3bfffa5a83e71bbde0ad4a63887a5b2fbe6ef0046350ab304484d361dd113be886b4fabeb64a754eae54e4b76a638a450198d285e63dc939980c27febedea5790724b36ee7c038a2b7c80cec694743f13cd9e65fdef94b7453fe4282864fc85fe17b00e6e37a74aa773af30fbdc00883f44a47260a55a92984a6f8e362d3812e48205751ee40ebe614a66358a42e49f41d3f05b762c9506d9b9ad45ca5acce6e5457b98286713e3016722177c82af73a075b74bbb6e2825cf48432df1a5f93c0d7a36db00b78e49e7704ea04ebecc16d9e49e1ea71e7c4cc46d9a3b200820e730f62ffa9c0ff3ee5e88dc8ee715ccf4812f4b8a8eaabc357b0d2ad7c52e03895f36b73d6df24cde8f27c45a711d4f3e082754ae51316105fc0a903bb07023694e5e66ff62878e53d1c9ef148bf886f96db601c6a8f0f181bc644a58b3ac3149afe1c329751ca5b833b645ef5adaa4ef4157f1652b6e9ecdb0009027ec80a27747cc43be7a243e955807b8bcc1a79f730d17dc0ce448c9b62ca48a8707cd4b15493135caaa305402dc969f6ee66a5b8650020df88bf4672cb382cd234fcb91d428ab88b6a794624a1b17c2db145983d5a9cf64dae3591bbb871f60657ff7614a82e0d8d710c5ac07eda7b7b506aa6032751d1b580322cfd0cea771827a2d1f62a003afd5ded7adc414bf828e69f5642a0b0b4652d3987b0226e864cfdb3cdb1dbdfe3e28f3850f7a11a3480c13201adbbae678d36a8bf59923c9b586c3afc5b75b827ade57f643a14595b914c973a369390e6bfb2fe25a488f8967b8d2912c14299b8b4f9d6d8a46c6c6bd54c6c937a45a412bc7311a20162a1ee859a7ec087e3c4895833e0323c4837d09ce4f000672e1fa0ebeb59fb041bcf4d6d46fc508712950a58514d6151b7675cbf7ba9eaaf23cd9e9bf56ab078b56d0ed50b1839e3db54d3420c1b4042dddd7867fcb86f3abed33f49040326091e384f124cc9d0afeceefa55525b630647420f1fb7764ba6909c52d36d58e188e5aa204bc9aa96081303a5d8b8bf603147f0617a97437db03901171e66970c3da104002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc7200000014001c0000000000000000000000ffffe000000100"/3162], 0xc60}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) write$auto(0xffffffffffffffff, 0x0, 0xfdef) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) r1 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/projid_map\x00', 0x2, 0x0) mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2) ioctl$auto_RNDADDTOENTCNT2(0xffffffffffffffff, 0x40045201, &(0x7f0000000880)=0x80000001) mmap$auto(0x2, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000031, 0x0) r2 = fsopen$auto(0x0, 0x1) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r1, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r2) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000fedbdf2500000000080005000a010101056400b57c9bbd588bea05000d000900000008000500ac1e000114000c00fe8000000000000000000000000000aa14000c0000000000000000000000ffff6401010108000100040000000800010009000000"], 0x64}, 0x1, 0x0, 0x0, 0x40081}, 0x4010) socket(0x15, 0x5, 0x0) r4 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video46\x00', 0x20200, 0x0) ioctl$auto(r5, 0xc0285628, r5) write$auto(r4, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x10) getsockopt$auto(r4, 0x8, 0x270d, 0xfffffffffffffffc, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) 2m20.663309559s ago: executing program 33 (id=215): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) 1m49.096909154s ago: executing program 3 (id=348): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x560a, r1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x101, 0x103) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2b}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xaf}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x98}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044880) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x23, 0x6, 0x0) socket(0x23, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x141041, 0x0) write$auto(r2, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3? 1 [ 84.793901][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.802654][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.812721][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.820751][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.840260][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.849252][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.871944][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.882798][ T4947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.892202][ T4947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.975376][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.985249][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.994437][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.005862][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.016511][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.020582][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.032234][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.033075][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.048545][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.056812][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.533135][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.540474][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.547877][ T5629] bridge_slave_0: entered allmulticast mode [ 86.554984][ T5629] bridge_slave_0: entered promiscuous mode [ 86.600387][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.607842][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.614994][ T5629] bridge_slave_1: entered allmulticast mode [ 86.622359][ T5629] bridge_slave_1: entered promiscuous mode [ 86.630741][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.638249][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.645803][ T5633] bridge_slave_0: entered allmulticast mode [ 86.653213][ T5633] bridge_slave_0: entered promiscuous mode [ 86.688760][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.695922][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.703102][ T5633] bridge_slave_1: entered allmulticast mode [ 86.711017][ T5633] bridge_slave_1: entered promiscuous mode [ 86.785952][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.830703][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.842736][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.852838][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.860487][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.868185][ T5640] bridge_slave_0: entered allmulticast mode [ 86.875233][ T5640] bridge_slave_0: entered promiscuous mode [ 86.884624][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.891893][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.899379][ T5640] bridge_slave_1: entered allmulticast mode [ 86.907276][ T5640] bridge_slave_1: entered promiscuous mode [ 86.914299][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.922207][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.930258][ T5630] Bluetooth: hci1: command tx timeout [ 86.936118][ T5630] Bluetooth: hci0: command tx timeout [ 86.936597][ T5641] bridge_slave_0: entered allmulticast mode [ 86.949309][ T5641] bridge_slave_0: entered promiscuous mode [ 86.981148][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.009245][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.016890][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.024213][ T5641] bridge_slave_1: entered allmulticast mode [ 87.033616][ T5641] bridge_slave_1: entered promiscuous mode [ 87.044894][ T5629] team0: Port device team_slave_0 added [ 87.054400][ T5629] team0: Port device team_slave_1 added [ 87.085979][ T5636] Bluetooth: hci2: command tx timeout [ 87.086004][ T5630] Bluetooth: hci3: command tx timeout [ 87.150962][ T5633] team0: Port device team_slave_0 added [ 87.166148][ T5633] team0: Port device team_slave_1 added [ 87.178822][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.207827][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.214973][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.242592][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.293360][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.325110][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.336115][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.343105][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.369620][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.381300][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.388719][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.414885][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.440168][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.459832][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.466965][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.493346][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.506228][ T5640] team0: Port device team_slave_0 added [ 87.530874][ T5640] team0: Port device team_slave_1 added [ 87.573692][ T5641] team0: Port device team_slave_0 added [ 87.600098][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.607409][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.633952][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.648799][ T5641] team0: Port device team_slave_1 added [ 87.669616][ T5629] hsr_slave_0: entered promiscuous mode [ 87.676337][ T5629] hsr_slave_1: entered promiscuous mode [ 87.683540][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.690990][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.717990][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.755076][ T5633] hsr_slave_0: entered promiscuous mode [ 87.761749][ T5633] hsr_slave_1: entered promiscuous mode [ 87.768220][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 87.774569][ T5633] Cannot create hsr debugfs directory [ 87.829155][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.836644][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.862786][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.891034][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.899196][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.925956][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.017484][ T5640] hsr_slave_0: entered promiscuous mode [ 88.023886][ T5640] hsr_slave_1: entered promiscuous mode [ 88.030550][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 88.037309][ T5640] Cannot create hsr debugfs directory [ 88.104626][ T5641] hsr_slave_0: entered promiscuous mode [ 88.111096][ T5641] hsr_slave_1: entered promiscuous mode [ 88.117541][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 88.123453][ T5641] Cannot create hsr debugfs directory [ 88.494783][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.508042][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.516618][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.528552][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.540809][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.550643][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.560302][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.569770][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.648998][ T5640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.660211][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.670181][ T5640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.681225][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.690223][ T5640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.699837][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.709949][ T5640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.719486][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.804294][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.816613][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.824694][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.835286][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.853681][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.863700][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.879883][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.890333][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.000641][ T5641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.008688][ T5636] Bluetooth: hci0: command tx timeout [ 89.008734][ T5636] Bluetooth: hci1: command tx timeout [ 89.022567][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.031021][ T5641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.041837][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.054340][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.064388][ T5641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.077572][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.093032][ T5641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.105161][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.165784][ T5630] Bluetooth: hci3: command tx timeout [ 89.166033][ T5636] Bluetooth: hci2: command tx timeout [ 89.178576][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.217855][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.225931][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.238606][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.245943][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.318309][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.400138][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.420189][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.427351][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.454839][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.478820][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.486570][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.524670][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.552629][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.615701][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.622925][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.649278][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.669770][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.676978][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.710461][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.717613][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.728906][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.736259][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.354636][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.552849][ T5629] veth0_vlan: entered promiscuous mode [ 90.592220][ T5629] veth1_vlan: entered promiscuous mode [ 90.702121][ T5629] veth0_macvtap: entered promiscuous mode [ 90.718387][ T5629] veth1_macvtap: entered promiscuous mode [ 90.771562][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.806395][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.851053][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.878769][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.893070][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.910650][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.920537][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.943730][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.985217][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.086406][ T5636] Bluetooth: hci1: command tx timeout [ 91.086592][ T5630] Bluetooth: hci0: command tx timeout [ 91.102912][ T5633] veth0_vlan: entered promiscuous mode [ 91.146898][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.155133][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202559][ T5633] veth1_vlan: entered promiscuous mode [ 91.211107][ T5640] veth0_vlan: entered promiscuous mode [ 91.222468][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.234766][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.248466][ T5630] Bluetooth: hci2: command tx timeout [ 91.248722][ T5636] Bluetooth: hci3: command tx timeout [ 91.272238][ T5640] veth1_vlan: entered promiscuous mode [ 91.295337][ T5641] veth0_vlan: entered promiscuous mode [ 91.324710][ T5641] veth1_vlan: entered promiscuous mode [ 91.353417][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.363646][ T5633] veth0_macvtap: entered promiscuous mode [ 91.387952][ T5633] veth1_macvtap: entered promiscuous mode [ 91.444971][ T5640] veth0_macvtap: entered promiscuous mode [ 91.477618][ T5640] veth1_macvtap: entered promiscuous mode [ 91.498519][ T5641] veth0_macvtap: entered promiscuous mode [ 91.528508][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.537649][ T5641] veth1_macvtap: entered promiscuous mode [ 91.571515][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.608044][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.633284][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.644527][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.667855][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.680075][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.690993][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.704647][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.744122][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.773722][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.784882][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.808940][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824763][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.873169][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.900545][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.933947][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.972412][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.995133][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.019187][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.138382][ T9] cfg80211: failed to load regulatory.db [ 92.149911][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.177230][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.309919][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.340896][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.399261][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.430974][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.513265][ T818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.528103][ T818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.632685][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.670672][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.712650][ T5786] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.861287][ T5781] Process accounting resumed [ 93.167958][ T5636] Bluetooth: hci0: command tx timeout [ 93.167973][ T5630] Bluetooth: hci1: command tx timeout [ 93.325622][ T5636] Bluetooth: hci2: command tx timeout [ 93.331138][ T5636] Bluetooth: hci3: command tx timeout [ 94.151568][ T5797] Process accounting resumed [ 94.690904][ T5796] Process accounting resumed [ 95.195716][ T5817] mmap: syz.1.8 (5817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.987809][ T5878] netlink: 334 bytes leftover after parsing attributes in process `syz.2.19'. [ 100.000302][ T5866] Process accounting resumed [ 100.040829][ T5878] Zero length message leads to an empty skb [ 100.154000][ T5883] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.712122][ T5883] syz.3.20 (5883) used greatest stack depth: 19720 bytes left [ 101.051585][ T5900] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.084093][ T5916] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.428953][ T5945] ima: policy update failed [ 105.438291][ T29] audit: type=1802 audit(1780951282.709:2): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.34" res=0 errno=0 [ 106.576149][ T5954] Process accounting resumed [ 116.769031][ T6100] ima: policy update failed [ 116.810228][ T29] audit: type=1802 audit(1843104529.090:3): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.62" res=0 errno=0 [ 120.354011][ T6153] Process accounting resumed [ 122.914291][ T6188] Process accounting resumed [ 123.521893][ T6189] Process accounting resumed [ 125.607914][ T6227] Process accounting resumed [ 127.143430][ T6248] ima: policy update failed [ 127.158845][ T29] audit: type=1802 audit(1843104539.440:4): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.88" res=0 errno=0 [ 127.263444][ T6245] Process accounting resumed [ 129.424003][ T6272] Process accounting resumed [ 131.107965][ T6298] Process accounting resumed [ 132.126508][ T6316] ima: policy update failed [ 132.159949][ T29] audit: type=1802 audit(1843104523.770:5): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.101" res=0 errno=0 [ 133.090121][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.098091][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.381029][ T6425] zswap: compressor not available [ 138.493517][ T6413] ima: policy update failed [ 138.529358][ T29] audit: type=1802 audit(1843104530.130:6): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.117" res=0 errno=0 [ 138.864548][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 142.244238][ T6486] Process accounting resumed [ 142.510560][ T6500] FAULT_INJECTION: forcing a failure. [ 142.510560][ T6500] name failslab, interval 1, probability 0, space 0, times 1 [ 142.586134][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(full) [ 142.586169][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.586190][ T6500] Call Trace: [ 142.586198][ T6500] [ 142.586207][ T6500] dump_stack_lvl+0x100/0x190 [ 142.586265][ T6500] should_fail_ex.cold+0x5/0xa [ 142.586297][ T6500] ? tomoyo_realpath_from_path+0xb6/0x690 [ 142.586333][ T6500] should_failslab+0xc2/0x120 [ 142.586371][ T6500] __kmalloc_noprof+0xe0/0x850 [ 142.586409][ T6500] ? kfree+0x1dd/0x6c0 [ 142.586449][ T6500] tomoyo_realpath_from_path+0xb6/0x690 [ 142.586493][ T6500] tomoyo_path_number_perm+0x23c/0x580 [ 142.586523][ T6500] ? tomoyo_path_number_perm+0x22e/0x580 [ 142.586557][ T6500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.586620][ T6500] ? find_held_lock+0x2b/0x80 [ 142.586649][ T6500] ? __fget_files+0x215/0x3d0 [ 142.586674][ T6500] ? hook_file_ioctl_common+0x149/0x410 [ 142.586701][ T6500] ? __fget_files+0x215/0x3d0 [ 142.586737][ T6500] ? __fget_files+0x21f/0x3d0 [ 142.586772][ T6500] security_file_ioctl+0xd3/0x230 [ 142.586805][ T6500] __x64_sys_ioctl+0xb7/0x210 [ 142.586834][ T6500] do_syscall_64+0x115/0x840 [ 142.586869][ T6500] ? clear_bhb_loop+0x40/0x90 [ 142.586900][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.586926][ T6500] RIP: 0033:0x7f9f5cb9ce59 [ 142.586954][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.586981][ T6500] RSP: 002b:00007f9f5d97d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.587009][ T6500] RAX: ffffffffffffffda RBX: 00007f9f5ce16090 RCX: 00007f9f5cb9ce59 [ 142.587025][ T6500] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 142.587039][ T6500] RBP: 00007f9f5d97d090 R08: 0000000000000000 R09: 0000000000000000 [ 142.587053][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.587065][ T6500] R13: 00007f9f5ce16128 R14: 00007f9f5ce16090 R15: 00007ffee4d36b68 [ 142.587099][ T6500] [ 142.587185][ T6500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.190186][ T6523] FAULT_INJECTION: forcing a failure. [ 144.190186][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 144.321190][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) [ 144.321231][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.321248][ T6523] Call Trace: [ 144.321258][ T6523] [ 144.321269][ T6523] dump_stack_lvl+0x100/0x190 [ 144.321325][ T6523] should_fail_ex.cold+0x5/0xa [ 144.321362][ T6523] should_failslab+0xc2/0x120 [ 144.321397][ T6523] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 144.321451][ T6523] ? mas_preallocate+0x1105/0x14a0 [ 144.321488][ T6523] mas_preallocate+0x1105/0x14a0 [ 144.321522][ T6523] ? __pfx_mas_preallocate+0x10/0x10 [ 144.321559][ T6523] ? vm_area_alloc+0x1f/0x160 [ 144.321603][ T6523] ? lockdep_init_map_type+0x5c/0x250 [ 144.321652][ T6523] __mmap_region+0x124a/0x2dd0 [ 144.321702][ T6523] ? __pfx___mmap_region+0x10/0x10 [ 144.321747][ T6523] ? __lock_acquire+0x4a5/0x2630 [ 144.321820][ T6523] ? __lock_acquire+0x4a5/0x2630 [ 144.321864][ T6523] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.321895][ T6523] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.321952][ T6523] ? rcu_is_watching+0x12/0xc0 [ 144.321996][ T6523] ? rcu_is_watching+0x12/0xc0 [ 144.322028][ T6523] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 144.322126][ T6523] mmap_region+0x35d/0x620 [ 144.322154][ T6523] ? rcu_is_watching+0x12/0xc0 [ 144.322184][ T6523] ? __pfx_mmap_region+0x10/0x10 [ 144.322216][ T6523] ? cap_mmap_addr+0x4b/0x120 [ 144.322242][ T6523] ? bpf_lsm_mmap_addr+0x9/0x30 [ 144.322267][ T6523] ? security_mmap_addr+0x71/0x1e0 [ 144.322306][ T6523] ? __get_unmapped_area+0x255/0x3e0 [ 144.322346][ T6523] do_mmap+0xc63/0x12f0 [ 144.322388][ T6523] ? __pfx_do_mmap+0x10/0x10 [ 144.322429][ T6523] ? __pfx_down_write_killable+0x10/0x10 [ 144.322482][ T6523] vm_mmap_pgoff+0x29e/0x470 [ 144.322526][ T6523] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 144.322560][ T6523] ? do_futex+0x192/0x350 [ 144.322589][ T6523] ? __pfx_do_futex+0x10/0x10 [ 144.322620][ T6523] ksys_mmap_pgoff+0xe4/0x610 [ 144.322648][ T6523] ? __x64_sys_futex+0x358/0x4d0 [ 144.322674][ T6523] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 144.322704][ T6523] ? __pfx___x64_sys_futex+0x10/0x10 [ 144.322735][ T6523] __x64_sys_mmap+0x125/0x190 [ 144.322766][ T6523] do_syscall_64+0x115/0x840 [ 144.322803][ T6523] ? clear_bhb_loop+0x40/0x90 [ 144.322837][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.322865][ T6523] RIP: 0033:0x7f232b39ce59 [ 144.322890][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.322917][ T6523] RSP: 002b:00007f232c217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 144.322946][ T6523] RAX: ffffffffffffffda RBX: 00007f232b616090 RCX: 00007f232b39ce59 [ 144.322965][ T6523] RDX: 00000000000000df RSI: 000000000002000c RDI: 0000000000000000 [ 144.322982][ T6523] RBP: 00007f232b432d6f R08: 00040000000000a5 R09: 0000000000008000 [ 144.323000][ T6523] R10: 0000000000020eb1 R11: 0000000000000246 R12: 0000000000000000 [ 144.323018][ T6523] R13: 00007f232b616128 R14: 00007f232b616090 R15: 00007ffc2c726b98 [ 144.323057][ T6523] [ 145.242990][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 146.355523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 147.221674][ T29] audit: type=1800 audit(1843104522.460:7): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.143" name="version" dev="configfs" ino=14022 res=0 errno=0 [ 147.651516][ T6549] Process accounting resumed [ 148.092100][ T6555] ima: policy update failed [ 148.105623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.135097][ T29] audit: type=1802 audit(1843104523.370:8): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.142" res=0 errno=0 [ 149.145070][ T6591] FAULT_INJECTION: forcing a failure. [ 149.145070][ T6591] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.198849][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) [ 149.198880][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.198892][ T6591] Call Trace: [ 149.198900][ T6591] [ 149.198908][ T6591] dump_stack_lvl+0x100/0x190 [ 149.198951][ T6591] should_fail_ex.cold+0x5/0xa [ 149.198977][ T6591] strncpy_from_user+0x3b/0x2d0 [ 149.199050][ T6591] do_getname+0x78/0x390 [ 149.199084][ T6591] __x64_sys_execve+0x76/0xd0 [ 149.199105][ T6591] do_syscall_64+0x115/0x840 [ 149.199131][ T6591] ? clear_bhb_loop+0x40/0x90 [ 149.199155][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.199176][ T6591] RIP: 0033:0x7f79cfb9ce59 [ 149.199194][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.199215][ T6591] RSP: 002b:00007f79d0b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 149.199237][ T6591] RAX: ffffffffffffffda RBX: 00007f79cfe16090 RCX: 00007f79cfb9ce59 [ 149.199252][ T6591] RDX: 0000200000001300 RSI: 0000000000000000 RDI: 0000200000000040 [ 149.199266][ T6591] RBP: 00007f79d0b14090 R08: 0000000000000000 R09: 0000000000000000 [ 149.199280][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.199292][ T6591] R13: 00007f79cfe16128 R14: 00007f79cfe16090 R15: 00007ffded4d2328 [ 149.199321][ T6591] [ 149.544443][ T6595] FAULT_INJECTION: forcing a failure. [ 149.544443][ T6595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.589586][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 149.589622][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.589636][ T6595] Call Trace: [ 149.589645][ T6595] [ 149.589654][ T6595] dump_stack_lvl+0x100/0x190 [ 149.589703][ T6595] should_fail_ex.cold+0x5/0xa [ 149.589736][ T6595] _copy_from_user+0x2e/0xd0 [ 149.589771][ T6595] snd_seq_write+0x413/0x6d0 [ 149.589815][ T6595] ? __pfx_snd_seq_write+0x10/0x10 [ 149.589852][ T6595] ? bpf_lsm_file_permission+0x9/0x10 [ 149.589876][ T6595] ? security_file_permission+0x76/0x210 [ 149.589911][ T6595] ? rw_verify_area+0xce/0x6d0 [ 149.589940][ T6595] vfs_write+0x2aa/0x1070 [ 149.589974][ T6595] ? __pfx_snd_seq_write+0x10/0x10 [ 149.590017][ T6595] ? __pfx_vfs_write+0x10/0x10 [ 149.590043][ T6595] ? find_held_lock+0x2b/0x80 [ 149.590074][ T6595] ? __fget_files+0x215/0x3d0 [ 149.590103][ T6595] ? __fget_files+0x215/0x3d0 [ 149.590137][ T6595] ? __fget_files+0x21f/0x3d0 [ 149.590177][ T6595] ksys_write+0x1f8/0x250 [ 149.590207][ T6595] ? __pfx_ksys_write+0x10/0x10 [ 149.590239][ T6595] ? rcu_is_watching+0x12/0xc0 [ 149.590272][ T6595] do_syscall_64+0x115/0x840 [ 149.590307][ T6595] ? clear_bhb_loop+0x40/0x90 [ 149.590339][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.590365][ T6595] RIP: 0033:0x7f34ad19ce59 [ 149.590387][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.590410][ T6595] RSP: 002b:00007f34ab3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.590433][ T6595] RAX: ffffffffffffffda RBX: 00007f34ad415fa0 RCX: 00007f34ad19ce59 [ 149.590450][ T6595] RDX: 000000000000007b RSI: 00002000000001c0 RDI: 0000000000000003 [ 149.590466][ T6595] RBP: 00007f34ab3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.590481][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.590495][ T6595] R13: 00007f34ad416038 R14: 00007f34ad415fa0 R15: 00007fff13db4fc8 [ 149.590531][ T6595] [ 150.176946][ T29] audit: type=1800 audit(1843105548.418:9): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.151" name="version" dev="configfs" ino=13238 res=0 errno=0 [ 153.210223][ T6639] ima: policy update failed [ 153.292616][ T29] audit: type=1802 audit(1843105551.526:10): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.157" res=0 errno=0 [ 154.478043][ T6680] ima: policy update failed [ 154.509732][ T29] audit: type=1802 audit(1843105552.736:11): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.163" res=0 errno=0 [ 154.630362][ T6681] Process accounting paused [ 155.064143][ T6710] nbd: socks must be embedded in a SOCK_ITEM attr [ 155.135568][ T6710] block nbd0: shutting down sockets [ 156.211274][ T6708] Process accounting resumed [ 156.217327][ T6718] ima: policy update failed [ 156.246040][ T29] audit: type=1802 audit(1843105554.475:12): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.168" res=0 errno=0 [ 157.771944][ T6745] ima: policy update failed [ 157.787907][ T29] audit: type=1802 audit(1843105556.014:13): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.174" res=0 errno=0 [ 158.256890][ T6760] hub 1-0:1.0: USB hub found [ 158.287913][ T6760] hub 1-0:1.0: 1 port detected [ 158.663807][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 159.451408][ T6766] Process accounting resumed [ 159.464855][ T6769] Process accounting resumed [ 160.136280][ T6785] ima: policy update failed [ 160.179372][ T29] audit: type=1802 audit(1843105558.403:14): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.181" res=0 errno=0 [ 160.463396][ T6806] binder: 6805:6806 ioctl 40046205 0 returned -22 [ 160.495665][ T6806] binder: 6805:6806 ioctl c0306201 200000000000 returned -14 [ 161.122790][ T6783] Process accounting paused [ 161.406908][ T6819] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 162.764730][ T6817] ima: policy update failed [ 162.806770][ T29] audit: type=1802 audit(1843105561.021:15): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.186" res=0 errno=0 [ 163.630919][ T6830] kexec: Could not allocate control_code_buffer [ 163.708704][ T6872] program syz.3.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.664324][ T6894] hub 1-0:1.0: USB hub found [ 165.698566][ T6894] hub 1-0:1.0: 1 port detected [ 166.023584][ T6898] syz.0.197 uses obsolete (PF_INET,SOCK_PACKET) [ 166.075790][ T6909] netlink: 334 bytes leftover after parsing attributes in process `syz.1.200'. [ 166.777847][ T6899] ima: policy update failed [ 166.801040][ T29] audit: type=1802 audit(1843105565.019:16): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.198" res=0 errno=0 [ 166.861736][ T6902] Process accounting resumed [ 167.258190][ T6919] process 'syz.1.202' launched './file0' with NULL argv: empty string added [ 168.066681][ T6920] ima: policy update failed [ 168.080602][ T29] audit: type=1802 audit(1843105566.299:17): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.203" res=0 errno=0 [ 168.294634][ T6929] Process accounting resumed [ 168.514860][ T6335] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 168.952455][ T6941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.977609][ T6941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.078204][ T6941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.124558][ T6941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.165839][ T6941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 169.219339][ T6941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 169.278562][ T6941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.296442][ T6941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.365265][ T6941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.412284][ T6941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.448731][ T6941] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.502374][ T6941] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.601298][ T6936] ima: policy update failed [ 169.621941][ T29] audit: type=1802 audit(1843105567.848:18): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.206" res=0 errno=0 [ 169.829619][ T6955] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 170.815259][ T6967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.821438][ T6960] ima: policy update failed [ 170.843729][ T29] audit: type=1802 audit(1843105569.067:19): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.212" res=0 errno=0 [ 171.016896][ T6335] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.116590][ T6979] nvme_fabrics: missing parameter 'transport=%s' [ 171.142362][ T6979] nvme_fabrics: missing parameter 'nqn=%s' [ 171.176850][ T6335] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.337031][ T6335] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.420011][ T6335] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.463350][ T6967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.690172][ T6967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.924034][ T6967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.097691][ T6335] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.258426][ T6335] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.418844][ T6335] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.498735][ T6335] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.609179][ T7021] ima: policy update failed [ 174.617662][ T29] audit: type=1802 audit(1843104521.058:20): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.225" res=0 errno=0 [ 175.178707][ T6335] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.338777][ T6335] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.499622][ T6335] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.581860][ T6335] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.754888][ T7059] Process accounting resumed [ 178.604306][ T7078] netlink: 504 bytes leftover after parsing attributes in process `syz.1.238'. [ 178.877287][ T7070] ima: policy update failed [ 178.894953][ T29] audit: type=1802 audit(1843104525.346:21): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.237" res=0 errno=0 [ 180.321756][ T7093] FAULT_INJECTION: forcing a failure. [ 180.321756][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 180.391335][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.1.241 Not tainted syzkaller #0 PREEMPT(full) [ 180.391374][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.391390][ T7093] Call Trace: [ 180.391399][ T7093] [ 180.391409][ T7093] dump_stack_lvl+0x100/0x190 [ 180.391460][ T7093] should_fail_ex.cold+0x5/0xa [ 180.391479][ T7093] should_failslab+0xc2/0x120 [ 180.391497][ T7093] __kmalloc_cache_noprof+0x7a/0x6f0 [ 180.391518][ T7093] ? snd_card_file_add+0x52/0x330 [ 180.391540][ T7093] ? __pfx_snd_ctl_open+0x10/0x10 [ 180.391556][ T7093] snd_card_file_add+0x52/0x330 [ 180.391576][ T7093] ? __pfx_snd_ctl_open+0x10/0x10 [ 180.391593][ T7093] ? __pfx_snd_ctl_open+0x10/0x10 [ 180.391608][ T7093] snd_ctl_open+0x9d/0x5e0 [ 180.391625][ T7093] ? __pfx_snd_ctl_open+0x10/0x10 [ 180.391641][ T7093] snd_open+0x201/0x450 [ 180.391678][ T7093] ? __pfx_snd_open+0x10/0x10 [ 180.391697][ T7093] chrdev_open+0x234/0x6a0 [ 180.391717][ T7093] ? __pfx_chrdev_open+0x10/0x10 [ 180.391737][ T7093] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 180.391760][ T7093] do_dentry_open+0x6ab/0x14d0 [ 180.391778][ T7093] ? __pfx_chrdev_open+0x10/0x10 [ 180.391799][ T7093] vfs_open+0x82/0x3f0 [ 180.391821][ T7093] path_openat+0x208c/0x31a0 [ 180.391845][ T7093] ? __pfx_path_openat+0x10/0x10 [ 180.391870][ T7093] do_file_open+0x20e/0x430 [ 180.391889][ T7093] ? __pfx_do_file_open+0x10/0x10 [ 180.391919][ T7093] ? alloc_fd+0x476/0x790 [ 180.391938][ T7093] ? do_getname+0x191/0x390 [ 180.391960][ T7093] do_sys_openat2+0x10d/0x1e0 [ 180.392048][ T7093] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.392071][ T7093] ? do_raw_spin_lock+0x128/0x260 [ 180.392092][ T7093] __x64_sys_openat+0x12d/0x210 [ 180.392114][ T7093] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.392139][ T7093] ? rcu_is_watching+0x12/0xc0 [ 180.392157][ T7093] do_syscall_64+0x115/0x840 [ 180.392177][ T7093] ? clear_bhb_loop+0x40/0x90 [ 180.392195][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.392211][ T7093] RIP: 0033:0x7f34ad19ce59 [ 180.392228][ T7093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.392248][ T7093] RSP: 002b:00007f34ab3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.392263][ T7093] RAX: ffffffffffffffda RBX: 00007f34ad416180 RCX: 00007f34ad19ce59 [ 180.392274][ T7093] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 180.392283][ T7093] RBP: 00007f34ad232d6f R08: 0000000000000000 R09: 0000000000000000 [ 180.392292][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.392301][ T7093] R13: 00007f34ad416218 R14: 00007f34ad416180 R15: 00007fff13db4fc8 [ 180.392320][ T7093] [ 181.511369][ T7104] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 183.014597][ T7113] ima: policy update failed [ 183.019579][ T29] audit: type=1802 audit(1843104529.464:22): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.246" res=0 errno=0 [ 184.811317][ T7141] FAULT_INJECTION: forcing a failure. [ 184.811317][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 184.838011][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 184.838051][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.838068][ T7141] Call Trace: [ 184.838076][ T7141] [ 184.838086][ T7141] dump_stack_lvl+0x100/0x190 [ 184.838142][ T7141] should_fail_ex.cold+0x5/0xa [ 184.838176][ T7141] should_failslab+0xc2/0x120 [ 184.838210][ T7141] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 184.838254][ T7141] ? security_file_alloc+0x34/0x2c0 [ 184.838290][ T7141] ? trace_kmem_cache_alloc+0xd5/0x100 [ 184.838331][ T7141] security_file_alloc+0x34/0x2c0 [ 184.838368][ T7141] init_file+0x95/0x480 [ 184.838406][ T7141] alloc_empty_file+0x79/0x1c0 [ 184.838449][ T7141] alloc_file_pseudo+0x13a/0x230 [ 184.838492][ T7141] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 184.838533][ T7141] ? alloc_fd+0x476/0x790 [ 184.838573][ T7141] sock_alloc_file+0x50/0x210 [ 184.838606][ T7141] __sys_socket+0x1c0/0x260 [ 184.838643][ T7141] ? __pfx___sys_socket+0x10/0x10 [ 184.838692][ T7141] __x64_sys_socket+0x72/0xb0 [ 184.838728][ T7141] ? lockdep_hardirqs_on+0x78/0x100 [ 184.838768][ T7141] do_syscall_64+0x115/0x840 [ 184.838805][ T7141] ? clear_bhb_loop+0x40/0x90 [ 184.838839][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.838872][ T7141] RIP: 0033:0x7f232b39ce59 [ 184.838898][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.838924][ T7141] RSP: 002b:00007f232c238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 184.838952][ T7141] RAX: ffffffffffffffda RBX: 00007f232b615fa0 RCX: 00007f232b39ce59 [ 184.838970][ T7141] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 184.838987][ T7141] RBP: 00007f232b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 184.839004][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.839020][ T7141] R13: 00007f232b616038 R14: 00007f232b615fa0 R15: 00007ffc2c726b98 [ 184.839058][ T7141] [ 185.406339][ T7157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.420524][ T7157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.432652][ T7157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.445316][ T7157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.453031][ T7157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.320512][ T7170] Process accounting resumed [ 186.456489][ T6335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.468474][ T6335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.477937][ T6335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.488669][ T6335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.497352][ T6335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.693580][ T7186] FAULT_INJECTION: forcing a failure. [ 186.693580][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 186.750474][ T7186] CPU: 1 UID: 0 PID: 7186 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT(full) [ 186.750510][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.750522][ T7186] Call Trace: [ 186.750530][ T7186] [ 186.750538][ T7186] dump_stack_lvl+0x100/0x190 [ 186.750577][ T7186] should_fail_ex.cold+0x5/0xa [ 186.750603][ T7186] should_failslab+0xc2/0x120 [ 186.750635][ T7186] __kvmalloc_node_noprof+0xfa/0xa00 [ 186.750656][ T7186] ? udmabuf_create+0x34c/0x1480 [ 186.750684][ T7186] udmabuf_create+0x34c/0x1480 [ 186.750706][ T7186] ? __lock_acquire+0x4a5/0x2630 [ 186.750744][ T7186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.750782][ T7186] ? __pfx_udmabuf_create+0x10/0x10 [ 186.750813][ T7186] ? find_held_lock+0x2b/0x80 [ 186.750835][ T7186] ? __might_fault+0xc5/0x140 [ 186.750862][ T7186] ? __might_fault+0xc5/0x140 [ 186.750904][ T7186] udmabuf_ioctl+0x18f/0x300 [ 186.750921][ T7186] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 186.750938][ T7186] ? find_held_lock+0x2b/0x80 [ 186.750972][ T7186] ? __fget_files+0x21f/0x3d0 [ 186.751005][ T7186] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 186.751027][ T7186] __x64_sys_ioctl+0x18e/0x210 [ 186.751051][ T7186] do_syscall_64+0x115/0x840 [ 186.751081][ T7186] ? clear_bhb_loop+0x40/0x90 [ 186.751111][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.751134][ T7186] RIP: 0033:0x7f34ad19ce59 [ 186.751155][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.751178][ T7186] RSP: 002b:00007f34ab3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.751202][ T7186] RAX: ffffffffffffffda RBX: 00007f34ad416090 RCX: 00007f34ad19ce59 [ 186.751218][ T7186] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000005 [ 186.751233][ T7186] RBP: 00007f34ab3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 186.751248][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.751262][ T7186] R13: 00007f34ad416128 R14: 00007f34ad416090 R15: 00007fff13db4fc8 [ 186.751298][ T7186] [ 187.052345][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.068185][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.075516][ T7156] bridge_slave_0: entered allmulticast mode [ 187.083437][ T7156] bridge_slave_0: entered promiscuous mode [ 187.092650][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.100165][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.107546][ T7156] bridge_slave_1: entered allmulticast mode [ 187.116202][ T7156] bridge_slave_1: entered promiscuous mode [ 187.247472][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.289314][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.509646][ T7157] Bluetooth: hci4: command tx timeout [ 187.578499][ T7156] team0: Port device team_slave_0 added [ 187.608723][ T7156] team0: Port device team_slave_1 added [ 187.733472][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.759243][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.814549][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.860704][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.869762][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.902141][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.930410][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.260'. [ 188.072230][ T7156] hsr_slave_0: entered promiscuous mode [ 188.087931][ T7156] hsr_slave_1: entered promiscuous mode [ 188.101892][ T7156] debugfs: 'hsr0' already exists in 'hsr' [ 188.111874][ T7156] Cannot create hsr debugfs directory [ 188.546558][ T7157] Bluetooth: hci5: command tx timeout [ 188.632398][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.640434][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.651559][ T7177] bridge_slave_0: entered allmulticast mode [ 188.659242][ T7177] bridge_slave_0: entered promiscuous mode [ 188.674605][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.682524][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.690540][ T7177] bridge_slave_1: entered allmulticast mode [ 188.748891][ T7177] bridge_slave_1: entered promiscuous mode [ 188.798906][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.937765][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.970513][ T7177] team0: Port device team_slave_0 added [ 188.982084][ T7177] team0: Port device team_slave_1 added [ 189.011633][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.020380][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.064298][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.109495][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.121557][ T7208] ima: policy update failed [ 189.133004][ T29] audit: type=1802 audit(1843104535.571:23): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.261" res=0 errno=0 [ 189.153888][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.223132][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.459876][ T7177] hsr_slave_0: entered promiscuous mode [ 189.467496][ T7177] hsr_slave_1: entered promiscuous mode [ 189.474024][ T7177] debugfs: 'hsr0' already exists in 'hsr' [ 189.480350][ T7177] Cannot create hsr debugfs directory [ 189.585983][ T7157] Bluetooth: hci4: command tx timeout [ 190.626601][ T7157] Bluetooth: hci5: command tx timeout [ 191.667271][ T7157] Bluetooth: hci4: command tx timeout [ 192.708408][ T7157] Bluetooth: hci5: command tx timeout [ 193.748173][ T7157] Bluetooth: hci4: command tx timeout [ 194.170983][ T7282] Process accounting resumed [ 194.551294][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.559844][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.790809][ T7157] Bluetooth: hci5: command tx timeout [ 195.140065][ T7294] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.171272][ T7294] ======================================================= [ 195.171272][ T7294] WARNING: The mand mount option has been deprecated and [ 195.171272][ T7294] and is ignored by this kernel. Remove the mand [ 195.171272][ T7294] option from the mount to silence this warning. [ 195.171272][ T7294] ======================================================= [ 200.853214][ T7358] ima: policy update failed [ 200.860211][ T29] audit: type=1802 audit(1843104523.057:24): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.297" res=0 errno=0 [ 201.797639][ T7157] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 203.051188][ T7390] ima: policy update failed [ 203.068576][ T29] audit: type=1802 audit(1843104525.266:25): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.306" res=0 errno=0 [ 203.157677][ T7403] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 204.582879][ T7414] Process accounting resumed [ 205.100217][ T7415] ima: policy update failed [ 205.105815][ T29] audit: type=1802 audit(1843104527.315:26): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.312" res=0 errno=0 [ 206.040101][ T7429] ima: policy update failed [ 206.072826][ T29] audit: type=1802 audit(1843104528.265:27): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.315" res=0 errno=0 [ 207.208613][ T7435] ima: policy update failed [ 207.227150][ T29] audit: type=1802 audit(1843104529.424:28): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.316" res=0 errno=0 [ 209.843643][ T7467] Process accounting resumed [ 211.439350][ T7494] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 215.586172][ T7537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.986874][ T7560] Process accounting resumed [ 218.947003][ T7157] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 219.978983][ T7599] Process accounting resumed [ 222.861956][ T7625] ima: policy update failed [ 222.866733][ T29] audit: type=1802 audit(1843104525.156:29): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.360" res=0 errno=0 [ 225.048476][ T7644] Process accounting resumed [ 225.393218][ T7655] FAULT_INJECTION: forcing a failure. [ 225.393218][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 225.406048][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.1.365 Not tainted syzkaller #0 PREEMPT(full) [ 225.406085][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.406100][ T7655] Call Trace: [ 225.406109][ T7655] [ 225.406119][ T7655] dump_stack_lvl+0x100/0x190 [ 225.406159][ T7655] should_fail_ex.cold+0x5/0xa [ 225.406180][ T7655] should_failslab+0xc2/0x120 [ 225.406198][ T7655] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 225.406221][ T7655] ? __d_alloc+0x34/0xa40 [ 225.406242][ T7655] ? lockdep_init_map_type+0x5c/0x250 [ 225.406268][ T7655] __d_alloc+0x34/0xa40 [ 225.406289][ T7655] d_alloc_pseudo+0x1c/0xc0 [ 225.406302][ T7655] alloc_file_pseudo+0xcf/0x230 [ 225.406324][ T7655] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 225.406346][ T7655] ? alloc_fd+0x476/0x790 [ 225.406366][ T7655] sock_alloc_file+0x50/0x210 [ 225.406383][ T7655] __sys_socket+0x1c0/0x260 [ 225.406403][ T7655] ? __pfx___sys_socket+0x10/0x10 [ 225.406421][ T7655] ? ksys_write+0x1ac/0x250 [ 225.406438][ T7655] ? __pfx_ksys_write+0x10/0x10 [ 225.406453][ T7655] ? kcov_ioctl+0x16a/0x720 [ 225.406476][ T7655] __x64_sys_socket+0x72/0xb0 [ 225.406494][ T7655] ? lockdep_hardirqs_on+0x78/0x100 [ 225.406515][ T7655] do_syscall_64+0x115/0x840 [ 225.406533][ T7655] ? clear_bhb_loop+0x40/0x90 [ 225.406552][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.406568][ T7655] RIP: 0033:0x7f34ad19ce59 [ 225.406581][ T7655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.406596][ T7655] RSP: 002b:00007f34ab3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 225.406611][ T7655] RAX: ffffffffffffffda RBX: 00007f34ad416180 RCX: 00007f34ad19ce59 [ 225.406621][ T7655] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 225.406629][ T7655] RBP: 00007f34ad232d6f R08: 0000000000000000 R09: 0000000000000000 [ 225.406639][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.406647][ T7655] R13: 00007f34ad416218 R14: 00007f34ad416180 R15: 00007fff13db4fc8 [ 225.406667][ T7655] [ 229.482000][ T7693] netlink: 342 bytes leftover after parsing attributes in process `syz.1.376'. [ 233.583276][ T7725] ima: policy update failed [ 233.588264][ T29] audit: type=1802 audit(1843104535.881:30): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.383" res=0 errno=0 [ 233.702853][ T7732] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 234.625323][ T7738] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 235.519708][ T6335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.536755][ T6335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.548477][ T6335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.558143][ T6335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.567543][ T6335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.951650][ T7760] netlink: 314 bytes leftover after parsing attributes in process `syz.1.389'. [ 236.234489][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.248771][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.262633][ T7748] bridge_slave_0: entered allmulticast mode [ 236.279952][ T7748] bridge_slave_0: entered promiscuous mode [ 236.290598][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.301857][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.319373][ T7748] bridge_slave_1: entered allmulticast mode [ 236.328073][ T7748] bridge_slave_1: entered promiscuous mode [ 236.383457][ T7748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.410709][ T7748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.466927][ T7748] team0: Port device team_slave_0 added [ 236.481837][ T7748] team0: Port device team_slave_1 added [ 236.529438][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.539831][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.575179][ T7748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.592063][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.607257][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.651258][ T7748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.705177][ T7748] hsr_slave_0: entered promiscuous mode [ 236.717518][ T7748] hsr_slave_1: entered promiscuous mode [ 236.724037][ T7748] debugfs: 'hsr0' already exists in 'hsr' [ 236.730144][ T7748] Cannot create hsr debugfs directory [ 237.609872][ T6335] Bluetooth: hci3: command tx timeout [ 238.338378][ T7783] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 239.694070][ T6335] Bluetooth: hci3: command tx timeout [ 241.610545][ T7796] Process accounting resumed [ 241.772008][ T6335] Bluetooth: hci3: command tx timeout [ 242.255758][ T7809] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 243.472885][ T7817] Process accounting resumed [ 243.853103][ T7157] Bluetooth: hci3: command tx timeout [ 244.375850][ T7821] Process accounting resumed [ 245.784341][ T6335] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.796241][ T6335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.806855][ T6335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.819379][ T6335] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.827771][ T6335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.305124][ T7157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.316704][ T7157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.325458][ T7157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.339681][ T7157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.349215][ T7157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.431358][ T7854] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 247.156069][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.163682][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.174150][ T7836] bridge_slave_0: entered allmulticast mode [ 247.183529][ T7836] bridge_slave_0: entered promiscuous mode [ 247.212293][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.220050][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.230044][ T7836] bridge_slave_1: entered allmulticast mode [ 247.244337][ T7836] bridge_slave_1: entered promiscuous mode [ 247.346900][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.378522][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.404034][ T7836] team0: Port device team_slave_0 added [ 247.407762][ T7836] team0: Port device team_slave_1 added [ 247.443830][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.451587][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.481391][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.513389][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.520855][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.553563][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.691077][ T7836] hsr_slave_0: entered promiscuous mode [ 247.698814][ T7836] hsr_slave_1: entered promiscuous mode [ 247.706270][ T7836] debugfs: 'hsr0' already exists in 'hsr' [ 247.712209][ T7836] Cannot create hsr debugfs directory [ 247.855166][ T7157] Bluetooth: hci6: command tx timeout [ 248.025336][ T7885] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 248.061840][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.084122][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.094120][ T7850] bridge_slave_0: entered allmulticast mode [ 248.104153][ T7850] bridge_slave_0: entered promiscuous mode [ 248.120074][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.128029][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.135571][ T7850] bridge_slave_1: entered allmulticast mode [ 248.148541][ T7850] bridge_slave_1: entered promiscuous mode [ 248.239059][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.252244][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.297976][ T7850] team0: Port device team_slave_0 added [ 248.317330][ T7850] team0: Port device team_slave_1 added [ 248.361746][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.380075][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.419269][ T7157] Bluetooth: hci7: command tx timeout [ 248.432364][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.444773][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.455287][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.484587][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.546766][ T7850] hsr_slave_0: entered promiscuous mode [ 248.553728][ T7850] hsr_slave_1: entered promiscuous mode [ 248.561504][ T7850] debugfs: 'hsr0' already exists in 'hsr' [ 248.567802][ T7850] Cannot create hsr debugfs directory [ 248.936576][ T29] audit: type=1800 audit(1843104534.272:31): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="features" dev="configfs" ino=23742 res=0 errno=0 [ 249.039178][ T7900] bonding: unable to delete non-existent ) [ 249.936079][ T7157] Bluetooth: hci6: command tx timeout [ 250.496726][ T7157] Bluetooth: hci7: command tx timeout [ 251.419496][ T7922] ima: policy update failed [ 251.424241][ T29] audit: type=1802 audit(1843104519.899:32): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.416" res=0 errno=0 [ 252.020136][ T7157] Bluetooth: hci6: command tx timeout [ 252.027445][ T7937] FAULT_INJECTION: forcing a failure. [ 252.027445][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 252.042159][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.1.421 Not tainted syzkaller #0 PREEMPT(full) [ 252.042198][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.042219][ T7937] Call Trace: [ 252.042229][ T7937] [ 252.042240][ T7937] dump_stack_lvl+0x100/0x190 [ 252.042290][ T7937] should_fail_ex.cold+0x5/0xa [ 252.042328][ T7937] should_failslab+0xc2/0x120 [ 252.042363][ T7937] __kmalloc_cache_noprof+0x7a/0x6f0 [ 252.042399][ T7937] ? trace_pid_list_alloc+0x2fe/0x480 [ 252.042439][ T7937] trace_pid_list_alloc+0x2fe/0x480 [ 252.042476][ T7937] trace_pid_write+0x110/0x460 [ 252.042510][ T7937] ? __pfx_trace_pid_write+0x10/0x10 [ 252.042563][ T7937] event_pid_write.isra.0+0x1e4/0x7d0 [ 252.042604][ T7937] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 252.042667][ T7937] vfs_write+0x2aa/0x1070 [ 252.042701][ T7937] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 252.042744][ T7937] ? __pfx_vfs_write+0x10/0x10 [ 252.042775][ T7937] ? __fget_files+0x215/0x3d0 [ 252.042815][ T7937] ? __fget_files+0x21f/0x3d0 [ 252.042857][ T7937] ksys_write+0x12a/0x250 [ 252.042888][ T7937] ? __pfx_ksys_write+0x10/0x10 [ 252.042922][ T7937] ? rcu_is_watching+0x12/0xc0 [ 252.042958][ T7937] do_syscall_64+0x115/0x840 [ 252.042995][ T7937] ? clear_bhb_loop+0x40/0x90 [ 252.043030][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.043059][ T7937] RIP: 0033:0x7f34ad19ce59 [ 252.043082][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.043108][ T7937] RSP: 002b:00007f34ab3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.043133][ T7937] RAX: ffffffffffffffda RBX: 00007f34ad415fa0 RCX: 00007f34ad19ce59 [ 252.043151][ T7937] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 252.043168][ T7937] RBP: 00007f34ad232d6f R08: 0000000000000000 R09: 0000000000000000 [ 252.043183][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.043198][ T7937] R13: 00007f34ad416038 R14: 00007f34ad415fa0 R15: 00007fff13db4fc8 [ 252.043236][ T7937] [ 252.454845][ T7940] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 252.578890][ T7157] Bluetooth: hci7: command tx timeout [ 252.926421][ T7946] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 254.098193][ T7157] Bluetooth: hci6: command tx timeout [ 254.658930][ T7157] Bluetooth: hci7: command tx timeout [ 256.022934][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.031173][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.911204][ T7973] ima: policy update failed [ 256.917075][ T29] audit: type=1802 audit(1843104525.396:33): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.428" res=0 errno=0 [ 259.157812][ T7988] Process accounting resumed [ 260.468305][ T8010] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 262.812062][ T8020] ima: policy update failed [ 262.816937][ T29] audit: type=1802 audit(1843104531.293:34): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.439" res=0 errno=0 [ 266.597473][ T8046] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 269.177775][ T8073] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 270.502826][ T8079] ima: policy update failed [ 270.509200][ T29] audit: type=1802 audit(1843104538.980:35): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.449" res=0 errno=0 [ 273.080264][ T8096] ima: policy update failed [ 273.087825][ T29] audit: type=1802 audit(1843104541.548:36): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.454" res=0 errno=0 [ 278.365060][ T8142] Process accounting resumed [ 280.733015][ T8155] Process accounting resumed [ 281.583081][ T8165] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 283.370322][ T8178] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 285.512438][ T8188] Process accounting resumed [ 286.281324][ T8201] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 287.562019][ T8208] Process accounting resumed [ 291.159393][ T8233] Process accounting resumed [ 292.638124][ T8243] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 295.352767][ T6335] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 295.367189][ T6335] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 295.375780][ T6335] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 295.385435][ T6335] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 295.395593][ T6335] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 296.181055][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.196921][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.213283][ T8260] bridge_slave_0: entered allmulticast mode [ 296.234682][ T8260] bridge_slave_0: entered promiscuous mode [ 296.257620][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.275247][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.294647][ T8260] bridge_slave_1: entered allmulticast mode [ 296.316146][ T8260] bridge_slave_1: entered promiscuous mode [ 296.389606][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.427328][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.514703][ T8260] team0: Port device team_slave_0 added [ 296.536083][ T8260] team0: Port device team_slave_1 added [ 296.593382][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.601936][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.629498][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.643324][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.653760][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.683544][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.738694][ T8260] hsr_slave_0: entered promiscuous mode [ 296.745103][ T8260] hsr_slave_1: entered promiscuous mode [ 296.753667][ T8260] debugfs: 'hsr0' already exists in 'hsr' [ 296.759718][ T8260] Cannot create hsr debugfs directory [ 297.173500][ T8289] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 297.479760][ T6335] Bluetooth: hci8: command tx timeout [ 298.703802][ T8312] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 299.560960][ T6335] Bluetooth: hci8: command tx timeout [ 301.314809][ T8330] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 301.641928][ T6335] Bluetooth: hci8: command tx timeout [ 302.819166][ T8349] zswap: compressor 000 not available [ 302.905594][ T8353] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 303.723055][ T6335] Bluetooth: hci8: command tx timeout [ 304.472699][ T8357] Process accounting resumed [ 305.798670][ T7157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 305.816288][ T7157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 305.825351][ T7157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 305.837033][ T7157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 305.845796][ T7157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 306.149108][ T8363] Process accounting resumed [ 306.415664][ T7157] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 306.430056][ T7157] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 306.443813][ T7157] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 306.457041][ T7157] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 306.465731][ T7157] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 306.842759][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.882019][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.900625][ T8368] bridge_slave_0: entered allmulticast mode [ 306.916019][ T8368] bridge_slave_0: entered promiscuous mode [ 306.933078][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.965971][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.989623][ T8368] bridge_slave_1: entered allmulticast mode [ 307.016397][ T8368] bridge_slave_1: entered promiscuous mode [ 307.101397][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.120907][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.174962][ T8368] team0: Port device team_slave_0 added [ 307.192712][ T8368] team0: Port device team_slave_1 added [ 307.287479][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.299729][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.352194][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.397552][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.414996][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.462123][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.627043][ T8368] hsr_slave_0: entered promiscuous mode [ 307.638558][ T8368] hsr_slave_1: entered promiscuous mode [ 307.653795][ T8368] debugfs: 'hsr0' already exists in 'hsr' [ 307.664559][ T8368] Cannot create hsr debugfs directory [ 307.885530][ T8403] Bluetooth: hci9: command tx timeout [ 307.921068][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.935440][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.953021][ T8385] bridge_slave_0: entered allmulticast mode [ 307.962525][ T8385] bridge_slave_0: entered promiscuous mode [ 307.993100][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.001801][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.010398][ T8385] bridge_slave_1: entered allmulticast mode [ 308.018840][ T8385] bridge_slave_1: entered promiscuous mode [ 308.117896][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.151620][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.207200][ T8385] team0: Port device team_slave_0 added [ 308.217075][ T8385] team0: Port device team_slave_1 added [ 308.263055][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.271744][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.302175][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.317543][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.325649][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.354071][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.440346][ T8385] hsr_slave_0: entered promiscuous mode [ 308.454131][ T8385] hsr_slave_1: entered promiscuous mode [ 308.462809][ T8385] debugfs: 'hsr0' already exists in 'hsr' [ 308.475435][ T8385] Cannot create hsr debugfs directory [ 308.525680][ T8403] Bluetooth: hci10: command tx timeout [ 308.932052][ T8422] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 309.325913][ T8403] Bluetooth: hci4: command 0x0406 tx timeout [ 309.332851][ T8402] Bluetooth: hci5: command 0x0406 tx timeout [ 309.642199][ T8433] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 309.965969][ T6335] Bluetooth: hci9: command tx timeout [ 310.606725][ T6335] Bluetooth: hci10: command tx timeout [ 311.417362][ T8443] Process accounting resumed [ 312.047385][ T6335] Bluetooth: hci9: command tx timeout [ 312.687695][ T6335] Bluetooth: hci10: command tx timeout [ 313.404277][ T8450] ima: policy update failed [ 313.409430][ T29] audit: type=1802 audit(1843104581.858:37): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.515" res=0 errno=0 [ 314.128087][ T6335] Bluetooth: hci9: command tx timeout [ 314.809765][ T6335] Bluetooth: hci10: command tx timeout [ 315.384365][ T8474] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 316.933317][ T8489] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 317.494772][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.501354][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.850747][ T8494] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 319.624860][ T8498] ima: policy update failed [ 319.629639][ T29] audit: type=1802 audit(1843104525.136:38): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.526" res=0 errno=0 [ 321.601475][ T8562] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 322.064719][ T8570] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 324.554455][ T8584] Process accounting resumed [ 326.527025][ T8591] ima: policy update failed [ 326.531746][ T29] audit: type=1802 audit(1843104521.888:39): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.537" res=0 errno=0 [ 327.104857][ T30] INFO: task syz.2.213:6967 blocked for more than 143 seconds. [ 327.112634][ T30] Tainted: G L syzkaller #0 [ 327.119222][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.127984][ T30] task:syz.2.213 state:D stack:25376 pid:6967 tgid:6966 ppid:5640 task_flags:0x480140 flags:0x00080002 [ 327.141881][ T30] Call Trace: [ 327.145303][ T30] [ 327.148292][ T30] __schedule+0x1295/0x67a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 327.152855][ T30] ? __pfx___schedule+0x10/0x10 [ 327.158402][ T30] ? find_held_lock+0x2b/0x80 [ 327.163852][ T30] ? schedule+0x2bf/0x390 [ 327.168677][ T30] schedule+0xdd/0x390 [ 327.172876][ T30] schedule_timeout+0x1b2/0x280 [ 327.177939][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 327.185238][ T30] ? mark_held_locks+0x40/0x70 [ 327.190109][ T30] __wait_for_common+0x2e7/0x4c0 [ 327.225133][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 327.259669][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 327.275911][ T30] remove_one+0x312/0x420 [ 327.291775][ T30] ? find_next_child+0x18f/0x280 [ 327.304576][ T30] __simple_recursive_removal+0x148/0x5c0 [ 327.314560][ T30] ? __pfx_remove_one+0x10/0x10 [ 327.321387][ T30] debugfs_remove+0x5d/0x80 [ 327.326272][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 327.331340][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 327.336967][ T30] nsim_drv_remove+0x52/0x1e0 [ 327.341873][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 327.347316][ T30] device_remove+0xcb/0x180 [ 327.351884][ T30] device_release_driver_internal+0x44e/0x620 [ 327.358025][ T30] bus_remove_device+0x2bc/0x560 [ 327.362998][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 327.368535][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 327.374202][ T30] device_del+0x376/0x9b0 [ 327.378692][ T30] ? __pfx_device_del+0x10/0x10 [ 327.383633][ T30] ? __lock_acquire+0x4a5/0x2630 [ 327.390325][ T30] device_unregister+0x1d/0xe0 [ 327.395218][ T30] del_device_store+0x346/0x480 [ 327.400152][ T30] ? __pfx_del_device_store+0x10/0x10 [ 327.405602][ T30] ? find_held_lock+0x2b/0x80 [ 327.410300][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 327.415230][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 327.420114][ T30] ? __pfx_del_device_store+0x10/0x10 [ 327.425546][ T30] bus_attr_store+0x74/0xb0 [ 327.430079][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 327.435334][ T30] sysfs_kf_write+0xf2/0x150 [ 327.440232][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 327.445964][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 327.451209][ T30] vfs_write+0x6ac/0x1070 [ 327.455639][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 327.461583][ T30] ? __pfx_vfs_write+0x10/0x10 [ 327.466481][ T30] ksys_write+0x12a/0x250 [ 327.470841][ T30] ? __pfx_ksys_write+0x10/0x10 [ 327.475773][ T30] ? rcu_is_watching+0x12/0xc0 [ 327.480576][ T30] do_syscall_64+0x115/0x840 [ 327.485276][ T30] ? clear_bhb_loop+0x40/0x90 [ 327.491427][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.497551][ T30] RIP: 0033:0x7f9f5cb9ce59 [ 327.501997][ T30] RSP: 002b:00007f9f5d99e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.510532][ T30] RAX: ffffffffffffffda RBX: 00007f9f5ce15fa0 RCX: 00007f9f5cb9ce59 [ 327.518583][ T30] RDX: 0000000000000045 RSI: 0000200000000040 RDI: 000000000000000a [ 327.526616][ T30] RBP: 00007f9f5cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 327.534586][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.542618][ T30] R13: 00007f9f5ce16038 R14: 00007f9f5ce15fa0 R15: 00007ffee4d36b68 [ 327.550682][ T30] [ 327.553734][ T30] INFO: task syz.0.215:6979 blocked for more than 143 seconds. [ 327.561450][ T30] Tainted: G L syzkaller #0 [ 327.568205][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.577328][ T30] task:syz.0.215 state:D stack:25016 pid:6979 tgid:6978 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 327.591585][ T30] Call Trace: [ 327.595032][ T30] [ 327.598120][ T30] __schedule+0x1295/0x67a0 [ 327.602883][ T30] ? __pfx___schedule+0x10/0x10 [ 327.607854][ T30] ? find_held_lock+0x2b/0x80 [ 327.612564][ T30] ? schedule+0x2bf/0x390 [ 327.617150][ T30] schedule+0xdd/0x390 [ 327.621342][ T30] schedule_preempt_disabled+0x13/0x30 [ 327.627009][ T30] __mutex_lock+0xced/0x1b10 [ 327.631654][ T30] ? devlink_health_report+0x66c/0xb20 [ 327.637220][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 327.642322][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 327.650436][ T30] ? devlink_health_report+0x66c/0xb20 [ 327.661845][ T30] devlink_health_report+0x66c/0xb20 [ 327.667582][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 327.673487][ T30] ? _copy_from_user+0x59/0xd0 [ 327.678774][ T30] nsim_dev_health_break_write+0x166/0x210 [ 327.684661][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 327.693261][ T30] full_proxy_write+0x135/0x1a0 [ 327.699753][ T30] vfs_write+0x2aa/0x1070 [ 327.704820][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 327.710283][ T30] ? __pfx_vfs_write+0x10/0x10 [ 327.715579][ T30] ? __fget_files+0x215/0x3d0 [ 327.720328][ T30] ? __fget_files+0x21f/0x3d0 [ 327.725518][ T30] ksys_write+0x12a/0x250 [ 327.729997][ T30] ? __pfx_ksys_write+0x10/0x10 [ 327.741165][ T30] ? rcu_is_watching+0x12/0xc0 [ 327.746357][ T30] do_syscall_64+0x115/0x840 [ 327.751620][ T30] ? clear_bhb_loop+0x40/0x90 [ 327.756812][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.762817][ T30] RIP: 0033:0x7f79cfb9ce59 [ 327.767746][ T30] RSP: 002b:00007f79d0b35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.776576][ T30] RAX: ffffffffffffffda RBX: 00007f79cfe15fa0 RCX: 00007f79cfb9ce59 [ 327.784618][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 327.793381][ T30] RBP: 00007f79cfc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 327.803588][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.811989][ T30] R13: 00007f79cfe16038 R14: 00007f79cfe15fa0 R15: 00007ffded4d2328 [ 327.820938][ T30] [ 327.824444][ T30] [ 327.824444][ T30] Showing all locks held in the system: [ 327.832976][ T30] 3 locks held by kworker/0:0/9: [ 327.838832][ T30] 1 lock held by khungtaskd/30: [ 327.844114][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 327.862420][ T30] 2 locks held by getty/5393: [ 327.867381][ T30] #0: ffff8880376810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 327.877218][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 327.887431][ T30] 8 locks held by syz.2.213/6967: [ 327.892471][ T30] #0: ffff88803666deb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 327.941224][ T30] #1: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 327.950326][ T30] #2: ffff88806a63cc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 327.960395][ T30] #3: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 327.970592][ T30] #4: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 327.981161][ T30] #5: ffff88802d26f128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 327.992047][ T30] #6: ffff88802d26e258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 328.003261][ T30] #7: ffff888077750140 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 328.015511][ T30] 3 locks held by syz.0.215/6979: [ 328.020701][ T30] #0: ffff88807f47e470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 328.031817][ T30] #1: ffff88801fef2410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.041238][ T30] #2: ffff88802d26e258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 328.052133][ T30] 4 locks held by syz-executor/7156: [ 328.058051][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.067399][ T30] #1: ffff88807c442880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.077553][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.088316][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.098830][ T30] 4 locks held by syz-executor/7177: [ 328.105218][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.115410][ T30] #1: ffff88806a7c9880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.125368][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.140455][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.150903][ T30] 4 locks held by syz.3.357/7610: [ 328.156323][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 328.165486][ T30] #1: ffff8880599db880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.175952][ T30] #2: ffff88802a45dc38 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.186214][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x700 [ 328.196859][ T30] 4 locks held by syz-executor/7748: [ 328.202291][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.212442][ T30] #1: ffff8880332ff880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.224616][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.235148][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.248099][ T30] 4 locks held by syz-executor/7836: [ 328.253453][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.262641][ T30] #1: ffff888029208480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.272693][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.283044][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.293464][ T30] 4 locks held by syz-executor/7850: [ 328.300797][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.310848][ T30] #1: ffff88806a7db480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.320821][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.331301][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.341822][ T30] 4 locks held by syz-executor/8260: [ 328.347292][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.358547][ T30] #1: ffff888057b78880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.368394][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.381282][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.391874][ T30] 4 locks held by syz-executor/8368: [ 328.397271][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.406543][ T30] #1: ffff88807bbbc880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.417376][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.427594][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.438132][ T30] 4 locks held by syz-executor/8385: [ 328.443434][ T30] #0: ffff888034f3c410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 328.452582][ T30] #1: ffff888058d4ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 328.462924][ T30] #2: ffff88802a45db48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 328.475471][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 328.486091][ T30] 2 locks held by syz.1.540/8602: [ 328.491173][ T30] #0: ffff88807f2a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 328.501178][ T30] #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 328.512901][ T30] [ 328.517954][ T30] ============================================= [ 328.517954][ T30] [ 328.529939][ T30] NMI backtrace for cpu 0 [ 328.529965][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.530007][ T30] Tainted: [L]=SOFTLOCKUP [ 328.530016][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.530030][ T30] Call Trace: [ 328.530038][ T30] [ 328.530048][ T30] dump_stack_lvl+0x100/0x190 [ 328.530095][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 328.530124][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.530151][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 328.530185][ T30] sys_info+0x141/0x190 [ 328.530222][ T30] watchdog+0xcb1/0x1030 [ 328.530264][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 328.530302][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.530337][ T30] ? __kthread_parkme+0x18c/0x230 [ 328.530373][ T30] ? kthread+0x13a/0x450 [ 328.530407][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.530438][ T30] kthread+0x370/0x450 [ 328.530473][ T30] ? __pfx_kthread+0x10/0x10 [ 328.530512][ T30] ret_from_fork+0x72b/0xd50 [ 328.530540][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 328.530568][ T30] ? __switch_to+0x800/0x1100 [ 328.530600][ T30] ? __switch_to_asm+0x39/0x70 [ 328.530631][ T30] ? __pfx_kthread+0x10/0x10 [ 328.530670][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.530719][ T30] [ 328.530745][ T30] Sending NMI from CPU 0 to CPUs 1: [ 328.670462][ C1] NMI backtrace for cpu 1 [ 328.670483][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.670514][ C1] Tainted: [L]=SOFTLOCKUP [ 328.670522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.670534][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 328.670569][ C1] Code: c6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a0 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 328.670589][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 328.670607][ C1] RAX: 00000000003416cd RBX: ffff88801e680000 RCX: ffffffff8b86f225 [ 328.670621][ C1] RDX: 0000000000000000 RSI: ffffffff8df1ae4d RDI: ffffffff8c1c4680 [ 328.670635][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 328.670649][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 328.670662][ C1] R13: ffffed1003cd0000 R14: 0000000000000001 R15: ffffffff90d74750 [ 328.670676][ C1] FS: 0000000000000000(0000) GS:ffff88812448e000(0000) knlGS:0000000000000000 [ 328.670697][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.670711][ C1] CR2: 00005582bff46ee8 CR3: 000000007ed60000 CR4: 00000000003526f0 [ 328.670786][ C1] Call Trace: [ 328.670795][ C1] [ 328.670803][ C1] default_idle+0x9/0x10 [ 328.670835][ C1] default_idle_call+0x6c/0xb0 [ 328.670854][ C1] do_idle+0x464/0x590 [ 328.670882][ C1] ? __pfx_do_idle+0x10/0x10 [ 328.670905][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 328.670937][ C1] cpu_startup_entry+0x4f/0x60 [ 328.670963][ C1] start_secondary+0x21d/0x2d0 [ 328.670994][ C1] ? __pfx_start_secondary+0x10/0x10 [ 328.671030][ C1] common_startup_64+0x13e/0x148 [ 328.671065][ C1] [ 328.867739][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 328.874694][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 328.885492][ T30] Tainted: [L]=SOFTLOCKUP [ 328.889837][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.899959][ T30] Call Trace: [ 328.903517][ T30] [ 328.906448][ T30] dump_stack_lvl+0x100/0x190 [ 328.911502][ T30] vpanic+0x552/0x970 [ 328.915659][ T30] ? __pfx_vpanic+0x10/0x10 [ 328.920171][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 328.926417][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 328.932931][ T30] panic+0xd1/0xe0 [ 328.936660][ T30] ? __pfx_panic+0x10/0x10 [ 328.941094][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 328.947340][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 328.953767][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 328.959923][ T30] ? watchdog.cold+0x1ec/0x234 [ 328.964828][ T30] ? watchdog+0xcc1/0x1030 [ 328.969270][ T30] watchdog.cold+0x1fd/0x234 [ 328.973931][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 328.979757][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.984543][ T30] ? __kthread_parkme+0x18c/0x230 [ 328.989581][ T30] ? kthread+0x13a/0x450 [ 328.993924][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.998621][ T30] kthread+0x370/0x450 [ 329.002721][ T30] ? __pfx_kthread+0x10/0x10 [ 329.007327][ T30] ret_from_fork+0x72b/0xd50 [ 329.012004][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 329.017125][ T30] ? __switch_to+0x800/0x1100 [ 329.021811][ T30] ? __switch_to_asm+0x39/0x70 [ 329.026596][ T30] ? __pfx_kthread+0x10/0x10 [ 329.031208][ T30] ret_from_fork_asm+0x1a/0x30 [ 329.035995][ T30] [ 329.039399][ T30] Kernel Offset: disabled [ 329.043809][ T30] Rebooting in 86400 seconds..