last executing test programs: 2m16.20921659s ago: executing program 0 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20048880) setresuid$auto(0x8000000000000001, 0x1, 0x200) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7e, 0xa, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x11000, 0xfffffffffffffffd, 0x7ffffffd, 0x0, 0x1, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x2, 0x4008, 0x8008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81l&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xd1\x1bq\x03\xf7\t\x8f\xcb\r\x18#\xd9\xb0Z\x19\xbf\x90\x1a,\x94{\x0f\xfa\xc8\xb2F\xd5\xdd\r\x7f\x8f\xb4\xcb\xbe]\x8d\xdc\x9dyrQ\xd7\xf2\xe7x\"\x11>\xc8 Z\x9bb\v\xcb\xebO\x89\x1dJ\x95^W\xa4\xa1\xff\x03J\x1d\xa6\x15\x0fD\xe3V)\xaf\x99\x013\x03\xdf\x06\x04X\xdf\xf8\xab{\xa0IP6#(\xd0\xbfN\x0fY\a\x91<\xef\xe0\xfd\x00\x9a\xd0\x82\xa5\x8f\x91\a\xe9\x18\x9d\xa0]\xbb#S+\xa02\x020\xa5j\xe6\xac\xb8\xb1\xd8K`\xf0fD\x00\bdh%\xcaZR\xbb\x7f\xfd\x1a\xfc\xc5\xf9^q\xb2\xea\xcaK\xee4\xc0\xe3\xa5m>\xdbi\xd1>y\x11\x8f\r\xe1\x16\x82/\xab\x98\x15\x8a\xd8 }\xf7zGp}\xc5\xc5!T#\x81\x81S\xff', 0x81) close_range$auto(0x2, 0x8, 0xb) r4 = io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x80, 0x3800, 0x0, 0x7, 0x400a, r0, [0x0, 0x0, 0xfffffffb], {0xffff, 0x10006, 0x8c48, 0x29b, 0x3, 0x80000001, 0x0, 0x46, 0xfffffffffffffffd}, {0x100, 0x4, 0x52, 0x1000, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) r5 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x20000, 0x0) read$auto_dfs_global_fops_debug(r5, 0x0, 0x0) adjtimex$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01df250147d7f528fe1d37c7c9ead3f974da0a"], 0x14}, 0x1, 0x0, 0x0, 0x9cb61e7ff24243d8}, 0x20008810) prctl$auto_PR_LOCK_SHADOW_STACK_STATUS(0x4c, 0x7, 0xf60, 0x1, 0x7ff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x6, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0) bind$auto(r4, &(0x7f0000000280)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x42}, 0x6a) mmap$auto(0x0, 0x40009, 0xfffffffffffffffa, 0x11, r3, 0x28000) 2m16.018529782s ago: executing program 0 (id=633): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@llc={0x1a, 0x30e, 0xce, 0x1, 0x6, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0xffffffff, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x9}, 0x400005, 0x25, 0x4, @raw=0x6, @integer={0xe7, 0x0, 0x81}, "7a9fc199a16a2311eacf2fc7ae1d8778dc610400000001000f00000000b6debe0eda71bdb5adb17884a16f7ce8c57c0eb327ac702b8d7c2d00"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r5) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x1f, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x2, 0x80000000400000a, 0xfffffffffffffffd, 0x9, 0x9, 0xffffffff80000000, 0x11, 0x20000000001, 0x7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r6, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) read$auto(r5, &(0x7f0000000080)='\x00', 0xff09) write$auto_nsim_dev_max_vfs_fops_dev(r4, &(0x7f0000000100), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0) 2m15.109902668s ago: executing program 0 (id=634): socket(0x2, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x7, 0xffff) 2m14.952732291s ago: executing program 0 (id=635): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x8000000000000001, 0x0, 0x200) socket(0x2a, 0x2, 0x81) socketpair$auto(0xb2c, 0xfdd, 0x20000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setresuid$auto(0x8, 0x0, 0x4) socket(0xa, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x10000000000002d, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)="12ad5e2c9d02f5e40ba0a32c5a6812ae20a4007e364f31f26b50a6ca72061498c28937fd623fe9efed59259ca999d575c48d76b59b32aba4596d34fe2de5a00337844edec1762b4536127fce20d0f28c8c5f0cdbff82869676a16341a3d7d0e042b3bcd7d75cbd1c2529f00f346adfddd26b4e0143a3cdd6cdd5324d9ffb03908a31acb5d052ca03d7f9d3d24337756c1939503cd4d44045273e6eaa22330dfc176032f4530ecb26d1440a1ed1711fcedbf4ebbef18953f35b3ac1cf0ca4934384fde6") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) write$auto(r1, 0x0, 0x5c8) sendmsg$auto_NL80211_CMD_DISCONNECT(r0, &(0x7f0000001cc0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1a2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "3b30d135f88c1b17f47795c89fa4b24055f706bdf36b7bda0c7c85054adf861fdb96129b6172f4d9e69831ec0bf4b47de8ccaf0cd43273b071283eaeda99829dfba4235b6f9ee59ff2e7a802ade7f1c60f683ae2"}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xdb, 0x125, "97c576ea6bcd5403dd5dbb716200615fcfa97fbe56e456dd493d4f6587d9a8e388ab1de8adfe2e0234dde3516fac68faa3addcec9ede75874e5afe920f1d7dafd410dc836a910d41c1719c52db53b7ac4b0c73fbccf4bee90b0af72e86054e8843dccbb59f1dc6e7ab92cec1c3b85fa2ab2d1ce959eb5378ade355997118fb6a9e912260baefdab3658e4c52d71a401c9f0441c53434e4c5a451eb5b4baf6b92fba84843a16582c4cff09d6df405c3fbe002fec1aa2740045d299b53a4c585d5ff58b0ae268c314c0ab1d93cf31db86c162badf7e88857"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}, @NL80211_ATTR_MBSSID_ELEMS={0x1214, 0x133, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @u32=0x3}, @nested={0x118c, 0xa6, 0x0, 0x1, [@typed={0xcf, 0x6e, 0x0, 0x0, @binary="7acb63703ac91d81309bebaef944099f0f0960cad034608db54983f6db33349ec068949b99587603589eaa750d0a0a01b6647ac81010aa9e7a7dbc2f519a4c5eaa171ab7390d8ce33eefba56d6e00f85653f731fb185044c470f0385fea174b95ed5fa0580d921cb7b5237cfd86d02bc7fd214e8022609c5df3a1901b91e48cbbcae7c6bb5221a3c0fb1f13cafda99a5efe140ae12db0f294497854a311a33b5c6d4d13b19c3a35eb124d716b7a7981a145f00f0b12c76e5574e1f0e7f3717db55b7f712cb14518e8315ef"}, @generic="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", @generic="95a2a6963ce5ebf39d33f83baa6f0b733777f69c3c1816fa997b3e4031e750371c12e6e8add51cd35f6d3918a938d2f47fa4f293b08e5eac9c9e1a10bc9d7576d8cd2615842c7d444208d8dd9e262fdf2a8f2406d10e085e7b21caa00269e1152b13cec9695ca93b7e906e85e05fad234c378013d1409ec99d4370e99ed0d2706d59409baf82a29116b9e63fe335baa589a2644579d87243b1ba6a50310fcae5b895a81e5afe9a250bea0eefe132748a755b19f21b53435f"]}, @generic="cfcef44978879136225e49d856ef5251499532479676de8f785fce1936b621fddfe15d6626e25a73478694c3f1e6ac29d827e0d72c9dbceef1162999ae408dcda235941a7fc5cb7ff9edb336e0fb08ce1e84e3b5877d5d284d6be3827b0bc0f2498a417823c0b40e14f3bf91d30926bc6a67164b79829318d4916cdb"]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x15b, 0x2c, 0x0, 0x1, [@generic="7cf4ce6381a8592bc84affbd40d4c3cb10a41fc30577748134eaf8b9c0a7ebccf8fddb35ecfe0ad19e76ce49c2c9f35671f979949ca8e532a6fce8eadec1eeff0ab35c395cbc350ed4c61712a02faad7cc47c782695dd4b4f16cfd80e79cab7018deb06540429a20276c66e599c06b5331c568824e09631cc14222bcda26265f763245d9dfd21931b1faf63387aeb326c909a412c3e1730710a26e3f08d955a16b456f23cd13fe5ee1143803c07f1c589a95399f118f447ebc6cc9117ed7ced0f4560a544abf1538bba4f8408d0445490a569817c0", @generic="18e028ef4254ebaf8d4ce8951939914195592e3d9c07c0f9e168d1e9414f9cc0532b0fa6754425fa959ddcad6c20c1ff294f295d7e47e758978fb0b4faa3503c35c488f876d5766a614d8a0ab6a2ab6cbcde59032cf71fe2693416f130867a4812cf5e1e81dfdcd93e1fcf9568fb151f4a4f35badf5e66e192ba41bae6f85b4f1f90"]}, @NL80211_ATTR_IE={0x56c, 0x2a, "517344c6ac66ad9290922c60112bd076eaecb9c4bc6464c029d548fac5d3391d9b2112becc99d2a2a2a1d0df265da7724773e3a37d158a1a50cbc9a3f508f4c2788b46a3d99a5a46f4d828e4927bb9e6e41de1677ecd68af132302e97814c577f493d4c41c7a536e9d9e3e9cf432e8c210a94db43d091cdd2f20c80f814ebdd19c8dbb750a419b726b317184749b81256cdc61f5e752c8f8b7570e1efa6de7db3bdb1970d5138da60054e8cd551b5298528bcec496b96f40b71dcc931361661d620ea9a2aeda31373d93a77c598bfee8be75d7759a2526787cd1a38e6e7043a31d432ae5f0184d51388bc885972a555cd237a427d4d760a0242005268433e3d6611ec3633f24249a1f4ea4614c430e760c1479bc3a2d9a988a4a53d44cdd24ce521fd9b8ce8e02db8e739811ed1b4532962fbebaa4fe40cf8b8c8092ce25685ace81d0a0d88cea5131626bf94eccd43b89faf5a4788e8cc64374bfc590029497964a5e24019ef5d416f8bdc254cc458adf77e2dd28393c9590597864c353a81b08ea891fce6ebb17d362a877c2a817c775ae509ce911523ee0aa394bd91607c79490a974f34534dc30bb178d3b53087d15dbeca8b453cffa7012d3c09c2510a8a2a7d68dd9ce741438f7aad1d85c6cbcb679cf13e831f3115f2dd6fb6809194ad0548e1007dbba80a6ba6eaa4e6852ab7407847a82b06b7861de010cab92c0f33980a4c4e8d401afca819e4d0dddca7286161966b47b59e92317c47ad7b7a55b0116cb1c67a7ea79f28e774af32f4758e4444f603217a0d239adf477edc75a65012c98b9cfc3498f05466cdef8b0b8239c8867c8fb27ab7ab5beeae4f71fb926afcdc0a20a25201d5970d5d1f160797e83500f1a88665f1faa5ef382968de9e0acf135af77fbdbde3761399ec26ac5f08eeb8d063558890be29c059d7fb76a8f53bc52293643574616098ecbc792fcebe576f727415cf5470032a490a100cafd11e9a0092308c16d98afaec7f284e82152f05b1396f6aba33400072b1f962d084971efd95483a35e43d1b24b97ea2e8526314a7563d0d472d8b4d8681736438e868e77598d10576bcd4aac5628fd2a127f07443a7d5814b8cc9614b1ae74fa2c8030b9c841e5b3977cca941e06d69f63d1d88c65418e1f674b951ce5bb36d2649b0e293f787f69d85e01338ca243242c9da5536c912f636daf0b6cf011db861a425feca7ed20c2cbc85a1f37280596c53a298afbd0a5bdaa67ac4422af152ecc9e5d08dda88b41ee92436fe19edbbf80106aabdaadb7ca666bb7f308c42bc493715e8c65921fa9ba6d4e96536a54f3f3894960cab7c30a9bbbd6cf1ece5b2a9336439af9c637310b40bef4f85ce78ba974f3c7c942609d52c71013711b9ba0f00bdc102982510e7f05dc77c9d3365da3b69a0ed9eba7c283087c1c8c629eb1c316cfa63dbb97ad042def4214bb1fb3596973372cad5c0ac87da00a487c39a6cdb955941e08f26c4db07667ec0e1a31b1a65043a1f934f712c453c6fc271f206fb860e99341fc0fc521b93f6b4d0ee1466b1f88abf0e4f8cbb75f0dde1e62365dad41693c4092de2eee4d587acedb4e0c305cc6a0224709e5e38dd5f7eecd6197dc0645f1a2ba1eaf38def73751f66e1210eebd3af5495e7a9b87bb5da9f940c1ada8247a9df747d0acd795ecb87c4f611cd827888d3e9a5f7957328d73237aa3c14aeb6af0d7e0640b90a7c07f48daade3455e235f2556dc6934408a8546c8379aaaa23fc41e3ed5b400aed6dce18b2edc98e245820b5cf11c0b7af7813dc6b05f08c3451c42edd98d9747e41f5e8a96390df7e89ab0dfad37d17fe414861cc4420a7c5a346fcaa2772c68fdcd655af8bd15692b14b496a14eb7a287833c227b23962a98259c923ae4779f5de655a547a102d54d63156ee77afa2157a1919c67d4e27916bb474fc5"}]}, 0x1a2c}, 0x1, 0x0, 0x0, 0x4011}, 0x11) io_uring_setup$auto(0x258, &(0x7f00000001c0)={0x3, 0xfffe, 0x7f, 0x4, 0x8, 0x2, 0xffffffffffffffff, [0x7, 0x1], {0x2, 0xa006, 0x2, 0x8, 0x400, 0xb533, 0x9e, 0x1, 0x80000000}, {0x7, 0xd, 0x5, 0xe9c, 0xffffffff, 0x8700, 0x405, 0x80, 0x2}}) 2m14.628550815s ago: executing program 0 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_GET_FILTER(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2b, 0x1, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r2, 0x6, 0x8, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x24, r3, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x6}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x19, 0x10d, "9bfcc642fb8222e81879d39dc6fd94f765ecdeabfd"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto_SO_GET_FILTER(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x2b, 0x1, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) setsockopt$auto(r2, 0x6, 0x8, 0x0, 0x10000) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x24, r3, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x6}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004840) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x19, 0x10d, "9bfcc642fb8222e81879d39dc6fd94f765ecdeabfd"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) (async) 2m14.363661665s ago: executing program 0 (id=640): r0 = socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) read$auto_stats_fops_(r1, &(0x7f0000000840)=""/4096, 0x1000) (async, rerun: 32) write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6) (async, rerun: 32) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1", 0x2f) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) (async, rerun: 32) r2 = socket(0x11, 0x3, 0x9) (rerun: 32) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x5}, 0x1001, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) (async) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x20904, 0x0) (async) r4 = open(0x0, 0x261c2, 0x84) socket(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00'}) (async) bpf$auto(0x0, &(0x7f00000000c0)=@iter_create={r1, 0x2}, 0xf) bpf$auto(0x2, 0x0, 0xc) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r5, 0x0, 0x800000006) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)="000004") (async, rerun: 32) ioctl$auto_TUNSETSNDBUF2(r4, 0x400454d4, 0x0) (async, rerun: 32) socket(0x1d, 0x3, 0x1) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) (async, rerun: 64) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x2, 0x100000, 0x100000, 0x100000000000002, 0x0, 0x0, 0x8, 0x87, 0x2c, 0x4, 0x803}) (rerun: 64) 1m59.306154555s ago: executing program 32 (id=640): r0 = socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) read$auto_stats_fops_(r1, &(0x7f0000000840)=""/4096, 0x1000) (async, rerun: 32) write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6) (async, rerun: 32) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1", 0x2f) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) (async, rerun: 32) r2 = socket(0x11, 0x3, 0x9) (rerun: 32) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x5}, 0x1001, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) (async) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x20904, 0x0) (async) r4 = open(0x0, 0x261c2, 0x84) socket(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00'}) (async) bpf$auto(0x0, &(0x7f00000000c0)=@iter_create={r1, 0x2}, 0xf) bpf$auto(0x2, 0x0, 0xc) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r5, 0x0, 0x800000006) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)="000004") (async, rerun: 32) ioctl$auto_TUNSETSNDBUF2(r4, 0x400454d4, 0x0) (async, rerun: 32) socket(0x1d, 0x3, 0x1) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) (async, rerun: 64) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x2, 0x100000, 0x100000, 0x100000000000002, 0x0, 0x0, 0x8, 0x87, 0x2c, 0x4, 0x803}) (rerun: 64) 38.536416129s ago: executing program 4 (id=1055): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/spca506/new_id\x00', 0x80cc2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) (async) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto_proc_mem_operations_base(r3, &(0x7f0000000200)=""/81, 0x51) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0x2, 0x5, 0x0) (async) r4 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) (async) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r4, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) (async) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r5, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 37.332918244s ago: executing program 4 (id=1057): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r0 = gettid() read$auto(0x3, 0x0, 0x80) rt_sigqueueinfo$auto(r0, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xfffffffb, @_timer={r0, 0xd, @sival_ptr=0x0, 0x62}}}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) mmap$auto(0xffffffffffffffff, 0x12800a, 0x3, 0x410, 0x401, 0x8008) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL2\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\x90\x13\xd5\x84\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x95\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x13#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xbf\xa6\x11YTz\xf3\xdd\xe7i~:\x1a\xd0\xb0R\xb4J}\x00\x00\x00\x00\x00\x00\xa3\x05\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xd5\xc1\"\xact\xff\xc9\x00'/242, 0x7, 0x2) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x40, 0x1, 0x0, 0x1, 0x0) socket(0x2a, 0xc, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x44a700, 0x0) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) clock_getres$auto(0xfffffffd, 0x0) ppoll$auto(&(0x7f00000002c0)={r3, 0x101, 0x2}, 0x6, 0x0, 0x0, 0x8) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xfffffdfe, 0xf, 0xfffffffffffffffe, 0x948b, 0x3, 0x4, 0x3, 0x1000, 0x200000000000005e, 0x4000008000001f, 0x17, 0x6d3e, 0x0, 0x2, 0x8000000000820]}, 0x0) close_range$auto(0x2, 0x8, 0x0) getpid() gettid() 37.112157622s ago: executing program 4 (id=1058): r0 = prctl$auto_PR_SET_MM_START_STACK(0x80000001, 0x5, 0x0, 0x3d9, 0x0) (async) r1 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x3, 0x8e3, 0x10000, 0xffffffffffffffff, 0xd, 0x4ca}, 0x3) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f00000000c0)={r4, 0x1}) r6 = pipe2$auto(&(0x7f0000000100)=r3, 0x7881) epoll_ctl$auto_EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x7, 0x2}) (async) ioctl$auto_SOUND_OLD_MIXER_INFO(r7, 0x80304d65, &(0x7f0000000180)="5f2e5ce87826fd7deb36961afbc19e38f6034f02a3271036091786d3da5193a04db4a4ec52282bf78934470713410748b8") fcntl$auto_F_SETFD(r5, 0x2, 0x72) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/netdevsim1/forwarding\x00', 0x80000, 0x0) (async) ioctl$auto_BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000200)={@raw=0x8001, 0x7fffffff, 0xeb, @unused, @subvolid=0x6}) r8 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000001240), r6) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r6, &(0x7f00000018c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001280)={0x5ec, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x5d7, 0x3, 0x0, 0x1, [@generic="aa2374e154988e", @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0x50}, @nested={0x28e, 0x117, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x85, 0x135, 0x0, 0x0, @binary="ef8eccc69e487c2c182a2a434df1b25dec467188a15655c27159f440cffaa4203b85e44f2f85fcb3804aa8b16d8965be4eaed38f0cbd66c9142d6d34c8e2178585cb9c0f4d0cd38cb84170ced3d045cfbaaec330f042980c721928af428a75df08692c47e25fb861f086bb53f15ccd942c986377c2257f4b7ab81d3d921890bf44"}, @generic="5fc7466124f73cb15ca4b4c8d3b817a6", @generic="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", @generic="e9fb8e68383944", @generic="363203556153098387d2426fc86005ac58d87a00e54955bcaf47a3fe0826e5c040f27533d7a2a563539cf812706c93aecb54872758cc1226ef7a985bd537af611d2713c47dc5fa4ae5fb37f945f3ff17fa4330c783f8ee2e95e552e36c4546d318bc6f3b052fdf651b4748b96f13cb7e7b6050d92b30b8398f249ca5e378f3f8613b18273a41a5750fc5cff13373c824ce557af4cf5bb5de56ea800a108a5a494521e0dc9d4524917ec1c08648f5326094398c3a3bea345a00ad78841d5a71b5041fb43e7d067d92cac086e57ae0487d8280ac014e41750b8f5298046d092c2386f599bdbddd80f5"]}, @nested={0x188, 0x79, 0x0, 0x1, [@generic="07d32e6931fca9087facec49234959c961397e08fea9d71826749c62d46d3133c95db84ed0c932f43b373361d6d01010a0a4719235bf49370217f47e515bc3a0e5b589d2b5fa46755f9498872013734ae7b74ab87aeb7735d63eb9ffcdc165ee95b94a7481d3bb3abcd0d3b1e15c500fbd3c6d879a477bf858d383fc19dc8d492cf04ec3f8ea165ce64154e444c808c0666ef0592016c0a01eb622b46455613329d9745f34570a93beec38b326616676b62bb6c0e2574b85f41e184d0bb6528a368d8f77fa", @nested={0x4, 0x88}, @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x47c}, @generic="95321737379ec58dac419211f899ab440f4faa29fd150a51aa79ebff843fb44b8973ae4a413daf28e38280a33e11526f7d15cad09a3eb1aabcedfd7e2c8015f8882ec4b244b87823f0cf94162a5f8d078f47b5449468aefdede75f539f771d65a8af", @generic="abd3e399b4b7c960bbdfae2de68d1dff9f701ba1db8320fb45cc6221a9392ba00d09514838310581aa7a2e2b94b5bdb51d079d0c98b3bb45946c5a886e6e8baa26a27d2f29423e61bb56a7b56a"]}, @generic="b88359c24427088233e8b4e234e8afaf3b5c6a231f685f4b514ec3856f30a154f64bc99998fc07b56f08f43024472c70d29ad3effda24279e649ddd2ae9912207bdc95398763855f5ad290faca682968a742aebeea44824f30ebac0c079354a4e396c29c2282f4f58930", @generic="42399bd06b397147797215e0c3ffe8862b72092891fa04c0998208749dca084ea0bb44747c74e2f90cc8927a08dac501862e84b242679984338bb08e85e1720171e9a4d5794713c4e92c7c239dd4d49e978f94a9a188e63292b788b6ac937a6722e9cae503150129f9eea47b471ed58e747b3b841295e9535174ac2366cbe81f8bed18aeac3d254e7a54b5928b86630afc81661d15decb1016b59d1c15fe7c95ba346ab59f3aa37abe1380b80a266ee201a9159dd116b598a13b1b860e1e9737518df264b488", @nested={0x69, 0x135, 0x0, 0x1, [@nested={0x4, 0xd9}, @nested={0x4, 0xe0}, @nested={0x4, 0xae}, @nested={0x4, 0xe6}, @generic, @typed={0x4, 0x88}, @typed={0x32, 0x137, 0x0, 0x0, @str='/proc/sys/net/ipv4/conf/netdevsim1/forwarding\x00'}, @nested={0x4, 0x130}, @generic="80472cf08c413838234133459c236e5ec492401264c713dac5"]}]}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) (async, rerun: 32) r9 = openat$auto(r7, &(0x7f0000001900)='./file0\x00', 0x8, 0x4) (async, rerun: 32) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001940)='/dev/loop15\x00', 0x200001, 0x0) ioctl$auto_BLKRAGET(r10, 0x1263, 0x0) (async) r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r4) r12 = fcntl$getown(r6, 0x9) (async) msgctl$auto_MSG_STAT(0x80000001, 0xb, &(0x7f0000001a80)={{0x8, 0x0, 0xee00, 0x3, 0x0, 0x9456, 0x40}, &(0x7f0000001a00)=0x5, &(0x7f0000001a40)=0x1, 0x9, 0x5, 0x7f12, 0x8, 0x7fffffffffffffff, 0x5, 0x100, 0x5, @raw=0xb, @inferred=r2}) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000002f80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002f40)={&(0x7f0000001b00)={0x1438, r11, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x13e4, 0x4, 0x0, 0x1, [@typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x2cc, 0xc3, 0x0, 0x1, [@generic="cb8c8dccf11c53869ecfbb53e4fc3decdd0a9d42c2bbda2553ad5d1b9e3aa38fad9c2bad2eb45bbd9a5edef9e806f43c8b7d6aeddba67547156181eb06e433597564b949486fae738e0143cb27f9f7f66a2bbbcaa47fabf502558d920897f6bd491b87eceb1041f758b6aae07bd1ff1d8a1f739f4a719e47a6b86bf77088e177e2272502cb2ec07521c1a793fe5633c045c58d157af0bb6d418457e804112d055f798e75d26889cbcd745d41222bc57a4e4bd16b7fad06fbe9bd8b4aae72b2adf4d491e789d54aadd13a715f5447", @nested={0x4, 0x36}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r12}, @nested={0x4, 0x14d}, @nested={0x4}, @generic="5fa2569d46c83cbe481f411f57777f5d832035d868c3c84e0392a8ba58c13870df881713bbd8dd1e4ec01ce3b754233ebf44737bcafebc8cddc699f1fbfa3dad98a354e59f8e1b538cb9e7681024e7dbb2b1bbfdcab21baaecf78392972fb162e865716f74531d8a66c362876575c2f125164145b197f41e3c26ac558e21565e749b73869132013e7bbc67a0801a7695471a4ecd9bf71e1c022a202fefc058feda58b059a53af7c42df1930ebdff59160d06ad80835671619ebda996febfc06ac3fd97518f03d2e5de6c6f911f37b3d2b995cd8e20cd13733cfc7fd8d6824ecb642b1089b20169b398d3", @generic="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"]}, @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x7, 0x0, 0x0, @uid=r13}, @nested={0x10e3, 0x8c, 0x0, 0x1, [@generic="583ce88736328c437529e560fef2a1c37fda280832b14635980f8239b1010f14da25088618182f89", @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@loopback}, @generic="8bf460fd9ec0c5d7600c0e275f04423c43f3e1f01cc80efd98c046a1b0212d67ec165efb7a0296b5873bdaaff67174a4ef553675f4efe32ec4c3036f908259f901ba2190cae80115ba5093a434babf34", @typed={0x8, 0x13, 0x0, 0x0, @u32=0xa7b2}, @generic="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", @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @generic="b0656971516bd2a3ba31ae948e6ca4abd1d91635e8d1df0382e4354e6385784cc3ad24a7f8dd306679e14cf83e7b4a2b6310e7be76e9b08f2347ae", @nested={0x4, 0xd6}, @nested={0x4, 0x52}]}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r2}, @typed={0x4, 0x159}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @pid=r2}, @typed={0x32, 0x11a, 0x0, 0x0, @str='/proc/sys/net/ipv4/conf/netdevsim1/forwarding\x00'}]}]}, 0x1438}, 0x1, 0x0, 0x0, 0x240400e1}, 0x40040) (async) write$auto_split_huge_pages_fops_huge_memory(r7, &(0x7f0000002fc0)="031c68f21691402a621e0b86fe41ef9307ecc2b038ff95cc44615a3c39b8d0cfa0c2183754bfcbade12a72cc3fae5621e2a7154a3eb7fb0e0c", 0x39) fsconfig$auto_FSCONFIG_CMD_CREATE_EXCL(r10, 0x8, &(0x7f0000003000)='*\x00', &(0x7f0000003040)="5611538735edf266da8d42d0675026b1de7e08bbfd844d331e25c7c25ce7909a56645cb75f3de8a3cc6ac916504f6677d53a06d5d1a633e0bb9cc6ff15207356d43db5357cdeb1bfac0773056c3aa51252a402f7e7aaaeda497cecdb1e17b4af6820a99bd681bee8a03b32cd7dfdc0833e2466d6afe42b406f5f81d63a052a60c9", 0xb8) (async, rerun: 64) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000003100)={0x6, 0x9, 0x4, 0x3, 0x6, 0x2}) (async, rerun: 64) ioctl$auto_NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$auto_BLKCRYPTOGENERATEKEY(r5, 0xc030128a, &(0x7f0000003140)={0x7, 0x1, [0x200, 0x3, 0x3, 0x7fff]}) (async) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000003180), 0x1c800, 0x0) move_pages$auto(r2, 0x7, &(0x7f00000032c0)=&(0x7f00000031c0)="2aef00d941be5aed3f8c24e1040d940dd6a8b6ce26e745a7af70363ef174e1a671a7ec209940e10a5f1feb8771ac5201b4cfe926a6d9788cd7e2744a096baae7fa8a8bbd0e9439fec3e70d108ceb512fe8c9ba4b82325e618bfad387f7370782279b6edf0a592af9c96c3209c00d49281cc018897a379d9c05b34c2ea3f8d799930efa34dace8f4c751e04c4d055a5e23853e5157f40057448b8cf98e3367e3aae9fd7114f227ba5378d9379377a4e32c7df8b0cd515769b7144609b8150eb95219870af05e5901e1d9e734d9dfc0c626acd97d2d6211fe86125be663b2839e6a7ec2d3647c9d594943a8c451afdd4bd03", &(0x7f0000003300)=0x3, &(0x7f0000003340)=0x5, 0xf1) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000033c0), r1) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003400)={'bond0\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r14, &(0x7f00000034c0)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x2c, r15, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc2f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20080010) (async) write$auto(r9, &(0x7f0000003500)='/dev/loop15\x00', 0xd0000) 37.005291135s ago: executing program 4 (id=1059): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)={0x8, 0x0, [{0x7, 0x1, 0xf9b, 0x1, 0xfffeffff, 0x9, 0x40}, {0xe, 0x4, 0xa4f, 0x528, 0x8, 0x4d1, 0x8000}, {0xfffffffc, 0x401, 0x7, 0x4, 0x68f, 0x1, 0xfffffe00}, {0x2, 0x0, 0x4, 0x2, 0x8f, 0x17, 0xfffffff8}, {0xd, 0x0, 0x1, 0xff, 0x2, 0x8, 0x3}, {0x3, 0x5, 0x0, 0xff26, 0x40, 0x1, 0x7}, {0x8, 0x5, 0x5, 0x7, 0x9, 0x6, 0x7}, {0x3, 0x2cd, 0x2, 0x3, 0x4, 0x0, 0x5}]}) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x20000) 36.861979354s ago: executing program 4 (id=1060): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) (async) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) (async) mmap$auto(0x20000000000000, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x40884}, 0x1) (async) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) close_range$auto(0x2, 0x8, 0x0) (async) r4 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r4, 0x2, &(0x7f0000000180), 0x1000) (async) ioctl$auto_XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f0000000080)={0x6, 0x3, 0x2, 0x4, 0xffff, 0x0, 0x0, 0x21}) (async) socket(0x2, 0x80002, 0x73) (async, rerun: 64) io_uring_setup$auto(0x406, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xa, 0xffb, 0x8010000008011, 0x3, 0x0) (async) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) (async, rerun: 64) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (rerun: 64) fallocate$auto(r6, 0x3, 0x4000000007, 0xa) (async) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) 36.596950813s ago: executing program 4 (id=1061): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) getsockopt$auto(0x3, 0x200000000001, 0x2f, 0x0, 0x0) r2 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) prctl$auto(0x3a, 0x2, r2, 0x5, 0x800007) 21.503506074s ago: executing program 33 (id=1061): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) getsockopt$auto(0x3, 0x200000000001, 0x2f, 0x0, 0x0) r2 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) prctl$auto(0x3a, 0x2, r2, 0x5, 0x800007) 6.342455278s ago: executing program 5 (id=1180): lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x5, 0xe, 0x3, 0x80000000, 0xee00, 0x0, 0x0, 0xc05, 0x800000000000, 0x2, 0xce7, 0x0, 0x40, 0x7, 0x38000000000, 0x7fffffff}) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/modules\x00', 0x88000, 0x0) pread64$auto(r0, &(0x7f0000000040), 0x7fff, 0x3) r1 = openat$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6, 0x2) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r14) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000340)=ANY=[@ANYBLOB="28f30000", @ANYRES16=r15, @ANYBLOB="010025bd7000fbdbdf25120000000c00018008000100", @ANYRES32=r16, @ANYBLOB="0800060001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x214, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x4}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa891}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb4}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_RESPONSE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000000) 6.085185993s ago: executing program 5 (id=1182): mkdir$auto(&(0x7f00000021c0)='./file0\x00', 0x4) (async) utimes$auto(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x7fffffffffffffff, 0x7}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/queues/tx-0/traffic_class\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) io_uring_setup$auto(0xa, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) (async) open(0x0, 0xa240, 0x15e) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x7) (async) write$auto(r2, 0x0, 0xe) (async) socket(0x10, 0x2, 0x4) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket(0x2, 0x801, 0x106) setsockopt$auto(r3, 0x6, 0x9, 0x0, 0x3) 5.491766832s ago: executing program 2 (id=1184): r0 = socket(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000010c0), r0) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="00000000000000e6335304e1a6734600"/30, @ANYRES16=r1, @ANYBLOB="040028bd7000fbdbdf253800000008006100f8ffffff04008700"], 0x20}}, 0x890) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r0, 0x6, 0x25, 0x0, 0x0) r2 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0x80102, 0x0) write$auto(r2, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\b\x86\xc6\xd7L\xc6\xd1\xf4h\xf2\xc4\x9aZ\x14\x83\f\x17\xf6\xb1u!\xbc\xbc8H\x94,3\xba\x8a\'\xef\b\x942W\xb5:\xb4\xe3[\x9d\xc1s\x13\xf9\xd5X\xe0\xfd\x7f\x95\xf8\xc9\x85\xe7\xd9u3\xc3\xcd\x1dJX\xcd\xab\xf5\xdf\xf1\xad\xa4\xf1\x9b\xc4\xf9\xac\xa2\x8f\xff\xe2`\x9c7\xbc\xe7\xe1\x94\xcb\bt\xa0\x93]\xba\t\x92\xca\x1f\xc3\x00\x00\x00\x00\xf8\xeb\xc65\xd3\xd1\xc5\xbb\x96{\xa3\xe7\\y\xa9Em\xd5\x19\xef\xf8\xac!\xff@K\x1d\xeaE\xce=\x90\xe6O\x82X\xc1\xbfI:5\xac\xb0\x98\xbf\xf1\xba\xa4\x10s\xfb\xc1j{\xe6\x02\xb86$!v\xef\xce\x19eM\xae\xe3\xd9jc\x10\xa7\xf1\xce&\xd7\xb6\x06\xf3\xeb\xe8\x87[f\xe7\xdf\x8c\x0f\x80\xed\x04Z!\x89R\x8b-\xbcI\t:\xcf\x9b\xd5a\v\xf0^4\xe7\xb6\x06\xbb\xdf\xa5\x88\x96\xd2V{\xb7n\x1b5N\xb9\xdc\x97\x16\x9e\aag\x1b\xf0K\xebtw\xe3\xf0\x03\xf9\xf2\xe3\xb7x\x8c\xe2\xca\xfdB\xa5\x82nlV\xac\xe6bK\xec\xa3.\xe7qeOd\x19\xeaX\x94N\x84\xa51\xec7:\xef\xd1\x8f\xd4JP\x81\xc3\xa3/Mz\x91f\xcf\xdaO\xe1l\xcc\x8b\xb0\xe5\xc9n\x95\x9a\xa6\xf3Tk\xdf\xffm\x7fbC\x8a\x97\xdcM\x06\x8a\xd3g\xe5\f\x00\x00\x00\x00\x00\x00\x00\xf2\xacL\xe0\xab\x1d\x1e\x94?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xbe&N\xe0\xe1\xa8\xc7\x9e-\\\xed\x93\xbe\xec\xe0\xd9\xd2\x1c\x1f#\xf6\x00\xc0E(\x15\xa5\xbb\xfc3\x00_\xf0\xd5]\xf1\xff\xb4\x1b\x94\xa2\x9f,\xd4?\xa6Nj\x12\xd2\x87\x14\xd6\x119u\v\x16k\xde5\xa1\x91G\xeb\xa31\xe2\xe4>\x03\xc7\x14\ba_~?\x93Q\x82}Y^S\xad\xe5#\xa5\xadQ&\xdc\xbe\xb9\xf43\xfag\xce\a\x11\xc5y\xf3c\x90%R\xff6-\xd2\xc3\xcb\xe6\xae\x8e\xe9=\x82\xday\xc6\xcfC\xc7\xd9\xbdJ\x85\xa2\xa4Q\xcb\xa8\x15#\xb7\xe9l\x97\x19h\xd1\xcc\r[+\b\xdb\xc7\x7f\x1a\x93\x84\x81,\xd9\xab\xb0N!\x95h\x90=L+\x83\xa2\xd4*\xdf\xdf;W-=', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/system/cpu/cpu0/topology/cluster_id\x00', 0x100, 0x0) semctl$auto(0x3, 0x5, 0xf, 0x5) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/4096, 0x1000) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f20e2cbd7000ffdbdf251f000000070000004957f6fe3de6e2a27d2e7da4387c89349ffc0c64d974e0281f", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) 5.330524899s ago: executing program 2 (id=1185): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0x1a, 0xfffffffffffffffa, 0x1) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x80000008, 0x0) io_uring_register$auto(0x2, 0xb, 0x0, 0x7f) close_range$auto(0x2, 0x8, 0x0) 5.180948274s ago: executing program 2 (id=1187): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x323340, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pidfd_open$auto(0x1, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x1f, 0x0, 0x3d) setsockopt$auto(0x4, 0x0, 0x484, 0xfffffffffffffffe, 0x20) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) 4.860837421s ago: executing program 5 (id=1188): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create$auto(0x803, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) epoll_create$auto(0x3e) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x1, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) 4.682713582s ago: executing program 3 (id=1189): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) ioctl$auto_TIOCGSID(r0, 0x5429, &(0x7f00000000c0)="59a5fd72702887ef8923b76637ac58b471ebd312f8798d0371c28d36219c2602c09ee0d6b6f1fb40725a4c4798cc408ca93b050a3ce4c4829bad5581945dcd6ea0e6e1f909a2402e03c90689c83727edcaa1e4762d9b75fc36bf286448dfe3e7a65e504e6b5a0e230fe467eafda7b77395fe22543e54e061eecd76a0b07a161bfb1f2ad270b8f7fbbd3733951be1a3452c7ff8b073015a6155f763bbe4a9da1dc4619415bcfb36534b434ecaa6432db6627146f4b2eaf9bdee1045544b89539fabaaf72e98c169fa645b5f66e2d69f4f") openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x201, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 4.502046421s ago: executing program 3 (id=1190): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r1 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb3, r1, 0x8000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) madvise$auto(0x0, 0x240007, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r3, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002ff029c2a4caa5f326bb4ffb3d0fe75cc356882ede1835f21387861495d328076dc179246f8016cf8f15622b80455b2ddc25557a0393d60cebe056ba447faa4f5dbb513cb2c2b95ac33c63a7622eec40e74c775f93ea16a52f34b76658b494f1b6694d39b53eba161da81b17885b", @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYRES32, @ANYBLOB, @ANYBLOB="086324d20978c16868460af80fc654f1a00b0000000000002bf0b139d29fc4b4384894d9065b0a5c650fc32fdfb8cbde87d639c629d80915cc410527afcf1b073204840f5b7749a86a842ed84bdeb60d716a18709cb3e48a03996d4297d43fa2e311c0df0f1d4c2e582e3755a7072dcf35dca1e59c0bc22386b76d34cc1f4d5522"], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8001) (async) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000000280)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) madvise$auto(0x0, 0x200007, 0x19) (async) r6 = userfaultfd$auto(0x1) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) madvise$auto(0x4c3, 0x5, 0x2) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iostats\x00', 0x80302, 0x0) sendfile$auto(r7, r7, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) 3.449228155s ago: executing program 3 (id=1193): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80001, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x200000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x80000001, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) (async) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) (async, rerun: 64) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) (async, rerun: 32) r3 = fsopen$auto(0x0, 0x1) (rerun: 32) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1) (async, rerun: 64) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) pwrite64$auto(r1, &(0x7f0000000080)='+%-.+}\x00', 0xc4, 0x9) (async, rerun: 32) ioctl$auto_TIOCSWINSZ2(r4, 0x5414, &(0x7f0000000400)="36388d690040e3ad266fc1da89d4ba34678412137487940d200ad53908f1303e03c69b5d48dad8861869e24925eeddb95e6256d631666e8a4f92f37cbe5b71d9c633e0289609fc0e48daa66a15b239") (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) (async, rerun: 32) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0) (rerun: 32) read$auto(r5, 0x0, 0x20) (async) writev$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) mbind$auto(0x2000, 0x100000004, 0x2, 0x0, 0x1000, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 3.120742794s ago: executing program 3 (id=1194): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec7\x00', 0x80001, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x8, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x741af749fda47028, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) socket(0xa, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) socketpair$auto(0x10000005, 0x2, 0x8000000000000000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/2/smp_affinity_list\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)=""/41, 0x29) 3.01561866s ago: executing program 5 (id=1195): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0xa, 0x5, 0x0) setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x98) madvise$auto(0x500, 0x200007, 0x19) (async) madvise$auto(0x500, 0x200007, 0x19) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 2.9456767s ago: executing program 2 (id=1196): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@llc={0x1a, 0x30e, 0xce, 0x1, 0x6, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x8000) pwrite64$auto(r2, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x1000000002) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0xffffffff, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x9}, 0x400005, 0x25, 0x4, @raw=0x6, @integer={0xe7, 0x0, 0x81}, "7a9fc199a16a2311eacf2fc7ae1d8778dc610400000001000f00000000b6debe0eda71bdb5adb17884a16f7ce8c57c0eb327ac702b8d7c2d00"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r5) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x1f, 0x9, 0x62, 0x0, 0x0, 0x0, 0xffc, 0x2, 0x80000000400000a, 0xfffffffffffffffd, 0x9, 0x9, 0xffffffff80000000, 0x11, 0x20000000001, 0x7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r6, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) read$auto(r5, &(0x7f0000000080)='\x00', 0xff09) write$auto_nsim_dev_max_vfs_fops_dev(r4, &(0x7f0000000100), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0) 2.79442654s ago: executing program 1 (id=1197): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x1, 0x12, &(0x7f0000000200)='\x00', 0x269) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x4d0, 0x400, 0x2}]}) 2.438263378s ago: executing program 1 (id=1198): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) fanotify_init$auto(0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x48080, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000002c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x1c}}, 0x13a538a4bae1feda) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) lseek$auto(0x3, 0x8, 0x1) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x400064c8, r5) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r6) 2.397072864s ago: executing program 2 (id=1199): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f00000002c0)={0x0, 0x101, 0x80}) poll$auto(&(0x7f0000000240)={r0, 0x20, 0x2}, 0x5, 0x104) close_range$auto(0x2, r0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) timerfd_create$auto(0x8, 0x800) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) read$auto(r2, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x1007ff, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940800002000076cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff}, 0x10) r6 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000200)={0x8, 0x2, "0200000000000000"}, 0x100004) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x202, 0x0) sendfile$auto(r7, r6, 0x0, 0x6) ioctl$auto_BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000580)={"14f52651b1da70f448cdc9b86699e0491f72209b332d068b15ee7ab4c83fb343007504fd68b479086845a88def37cacaa97d1843ed7face87df3e43f09b04084672f9700a8d38fe9d4c9e692010b0223ae16e14ef816e3faa5fa5c2eb6386bdd179c1abd970bbffeb2af88eca3e692c1c078d80749396e91012fe32640b39810897589bb7eefc34e0184ba1d0bf8d3f29135e351853ccbede7e623d947ee7f26b8eddd36c798b77b7af9f47b1c690e71723d4b94900c68eb23d7bea58dc83033a3173d4d203a6853b84b8746554254a15247ea13be834553453d5ffa1878ed706bf7c60f81043ad337874d2f2325afdc6713a0735a7d7058618291ade4b74741", 0x2, 0x237e}) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r3}, 0x92) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRESHEX=r5, @ANYBLOB="00012bbd7000fedbdf2549000000040034013a00800076c7d42bb3e8a3b0f58df9651061b494963d6cee076bb24cfa37a7dec9743400a327d78658d8908846faa4ab4862025e3d6916e746840000"], 0x54}}, 0x4000040) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r8, 0x80000001, r4) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 1.847124146s ago: executing program 2 (id=1200): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) r2 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r2, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4dc8e2f56ac8a0bc5866") statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0xb5f0, 0x7352, 0x36, 0x7f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x7, 0x9, 0x10003, 0x7c, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68cf, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x200000000], "ae1922e8b252c280c500"/26}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, r1, 0x8000) socket(0x2, 0x801, 0x84) r3 = socket(0x2, 0x3, 0x1) connect$auto(r3, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x4}, 0x2) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) landlock_restrict_self$auto(r0, 0xfffffffe) mmap$auto(0x80000000cc, 0x7, 0x0, 0x2fe, r1, 0x83) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2, 0x4000000000df, 0x40eb2, 0x4, 0x2ffffffffffe) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() 1.768271612s ago: executing program 1 (id=1201): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, 0x6a) listen$auto(0x3, 0x81) read$auto(r0, 0x0, 0x7) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) close_range$auto(r2, r2, 0xff) socket(0x15, 0x800, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) listen$auto(0x3, 0x81) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r3, &(0x7f0000000300)='/ ys -ernel/tracing/set_event_notrace_p}d\xde\xc7\xbd8\xbe\xd7\xdeN\x86\xcf\x1d\rD!U\xb4\xe4+\v\xc3\x06$\xe1\x0eA\xf3ua\x8fT\xd9J\xfd\x02\x00\x00\x00\x00\x00\x00\x00\xbf\x9f\xb0e\xfex,c-\xdf\a\x9e\x9bX\x13n\xdf\xc8\x94%\x7fp\xe0\xa0x\x1f\x17\xea\xc3\xbf\xb2(}\x7f\xd3\xf6\xc5\x9bj\xcf~\x7f)\xd2\x7f\tN\xa9m\xe8\xdc\xb1\xe3\xf3L\xad\xdd%(0c\x9d\x13\xc7\x0elZ\x87K\x14_\xbau\x88\x9f\xe2\x04\x16\xec\xfa\xad\xe0\x87G[N\xf1\xb5\xc0\xab\x00\x00\x00\x00\x00\x00\x00\x04+\xc1\xd3m\xb8\xe5\a\x92\xc2\xd4\xcc\x91\x90\x05$G\x9a\x9b\xe1I\xa9/(\xd3\xa1\\8\x1afmY\xd6m\x931\xe6\xbd\xfb\xd6\x91\xbb\xef\xa1\x03\xd8j\x06ngka\xd1\xf1\xfd\xaeX)w\x1e4\x91\xc9\xce4\x97\x00', 0x40) 1.261521376s ago: executing program 3 (id=1202): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x6c602, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/hw_queues\x00', 0x80800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x1263, r0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000000c0)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2, 0xe1, 0xeb1, 0x401, 0x7ffc) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) r3 = open$dir(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x301482, 0x100) readlinkat$auto(r3, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x9) rmdir$auto(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') fcntl$auto_F_WRLCK(r2, 0x3ff, 0x1) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x64c6, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r5 = gettid() kill$auto(r5, 0x11) mmap$auto(0x0, 0x20008, 0xdf, 0x80eb1, 0x401, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x8e051, 0xffffffffffffffff, 0x9) init_module$auto(0x0, 0xffff9, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) 1.157045787s ago: executing program 5 (id=1203): mmap$auto(0x0, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) socket(0x11, 0xa, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto_SO_RCVBUF(r0, 0x1, 0x8, &(0x7f0000000000)='/sys/fs/o2cb/logmask/DLMFS\x00', &(0x7f00000001c0)=0x2) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r0, 0x7, &(0x7f0000000000)="549a082cd089e006ab0b7ebea1e8ff3f6c8c7256ac0e0061caee1dd6cd8a87477e6ef5a23440808d2cf1f9faf62193f648a58567bef3f844819b228823200b91226a7bd258a68464a21cfc6d17dfa5d42202b083d5a89370a7b16b18f95918d8441ef8d14ce73682fd4c1e4faf8edc7dd7a9a55746a54cdcb59052aebb1cc5e5ddffd50cf6b7651161c7c6440cbbf5e550005bf33a12709968807b7522b5c42f7315635eb128413a2ab629c4b0c64de54c096c08773bcbb1d9aa81a56f1d90d173cc04db874ddf227d4f") syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) 825.037421ms ago: executing program 5 (id=1204): r0 = socket(0x23, 0xa, 0x3) r1 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x0, 0xeb1, r1, 0x6ef) getcwd$auto(0x0, 0xffffffffffffffff) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r2, &(0x7f0000000180)=""/61, 0xfffffeeb) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40bc2, 0x1c0) write$auto(r3, &(0x7f0000000100)='\xea\x85\x92\x06(#\xc4\xb6(\x9e\xfcKG\xc2\xd4\xc0\v\x02\x9f%C\x00\x01\x00@!\xa9\xce\x10Y\xd0\xeb\xed\x7f\xc8\xdc(\xd3\xe9\xf3\xddT\x18\x16#\xfdQ5\xaeA\xc3\xeay\x7f\xa2TR|js\xfd\n\xa3\x98\xc8\x91\xdd\x9e\x99}s\xe0x\a\x00\x00\x00\x00\x00\x00\x00.\xa8\xc5\xdbKx\x14l\xe6\x868\xb3\xd2\x00\xea\xf9\xd1z\x8f\xd9\x877J\"\xab\xf9\xdf\xbf\xa1\xa1ms\xaf\xd9&R\x03\x00\xc0u \xc3\xc2\xd61\x97V\xcah\r\x97M\xdb\xf9\x06\x95Z\xdfK\xbeY#/\xf5g\n\x10#\x10@Ft\x9c\xd9\xd3s\x94\x8aV\xeb\xee`e9(\xe0\x88\x06\xa6-;ZM\x9b\xe1-', 0x9) sendfile$auto(r3, r3, &(0x7f0000000000)=0x1, 0xb5d) setsockopt$auto(0x3, 0x10000000084, 0x3, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x363d00, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xc}, 0xfff}, 0x5, 0x311) 749.339469ms ago: executing program 1 (id=1205): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) ioctl$auto(r0, 0x2, r0) ioctl$auto(0x3, 0x400c4d07, r0) 545.934639ms ago: executing program 1 (id=1206): close_range$auto(0x0, 0xffffeffe, 0x2) r0 = open(&(0x7f0000000300)='./bus\x00', 0x12d441, 0x41) fcntl$auto(r0, 0x0, 0xa8) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x6, 0xa506}, 0x800}, 0x0, 0x4008) 94.698719ms ago: executing program 1 (id=1207): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22a742, 0x0) madvise$auto(0x0, 0x1, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x8000001, 0x0, 0x2000000000000003, 0x0, 0x24, 0x1}, 0x403}, 0x0, 0x9fffffff) (async, rerun: 64) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) (async) r3 = creat$auto(&(0x7f0000000100)='./file0\x00', 0x9) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x30080001, 0xffffffffffffff01}) (async) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xffffffff, 0x3fb, 0xc7, 0x80000001, 0x7]}) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0x1a9003, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r4, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0xa000, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/4085, 0xff5) (async) madvise$auto(0x4, 0x6, 0x12a0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video7\x00', 0x8200, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f0000000000)=""/133, 0x85) msgrcv$auto(0x0, 0x0, 0x1, 0x1000000000000009, 0x3) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) 0s ago: executing program 3 (id=1208): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x48, 0x8, 0xbff, 0x2c, 0x2c, 0x4, 0x2}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="12000000893c0d00009f17790485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000200)=""/36, 0x24) kernel console output (not intermixed with test programs): 7400] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 157.648451][ T7400] dvb_demux_do_ioctl+0xe64/0x1200 [ 157.648505][ T7400] dvb_usercopy+0x167/0x340 [ 157.648543][ T7400] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 157.648595][ T7400] ? __pfx_dvb_usercopy+0x10/0x10 [ 157.648666][ T7400] ? __fget_files+0x21f/0x3d0 [ 157.648702][ T7400] dvb_demux_ioctl+0x29/0x40 [ 157.648740][ T7400] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 157.648782][ T7400] __x64_sys_ioctl+0x18e/0x210 [ 157.648827][ T7400] do_syscall_64+0x106/0xf80 [ 157.648860][ T7400] ? clear_bhb_loop+0x40/0x90 [ 157.648896][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.648926][ T7400] RIP: 0033:0x7febaad9c799 [ 157.648950][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.648977][ T7400] RSP: 002b:00007febabb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.649004][ T7400] RAX: ffffffffffffffda RBX: 00007febab015fa0 RCX: 00007febaad9c799 [ 157.649024][ T7400] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 157.649041][ T7400] RBP: 00007febaae32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 157.649059][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.649077][ T7400] R13: 00007febab016038 R14: 00007febab015fa0 R15: 00007fff5771ca18 [ 157.649116][ T7400] [ 157.710355][ T7400] syz.3.318: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 158.382364][ T7400] CPU: 0 UID: 0 PID: 7400 Comm: syz.3.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.382414][ T7400] Tainted: [L]=SOFTLOCKUP [ 158.382425][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.382442][ T7400] Call Trace: [ 158.382452][ T7400] [ 158.382463][ T7400] dump_stack_lvl+0x100/0x190 [ 158.382522][ T7400] warn_alloc.cold+0x95/0x1c1 [ 158.382571][ T7400] ? __pfx_warn_alloc+0x10/0x10 [ 158.382608][ T7400] ? lockdep_hardirqs_on+0x78/0x100 [ 158.382649][ T7400] ? __get_vm_area_node+0x2c5/0x330 [ 158.382692][ T7400] ? __get_vm_area_node+0x208/0x330 [ 158.382733][ T7400] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 158.382770][ T7400] ? dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 158.382815][ T7400] ? dvb_demux_do_ioctl+0xe64/0x1200 [ 158.382857][ T7400] ? dvb_usercopy+0x167/0x340 [ 158.382894][ T7400] ? __x64_sys_ioctl+0x18e/0x210 [ 158.382933][ T7400] ? do_syscall_64+0x106/0xf80 [ 158.382967][ T7400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.383003][ T7400] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 158.383054][ T7400] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.383110][ T7400] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 158.383146][ T7400] __vmalloc_node_noprof+0xad/0xf0 [ 158.383183][ T7400] ? vidtv_s302m_encoder_init+0x1dd/0x890 [ 158.383224][ T7400] vidtv_s302m_encoder_init+0x1dd/0x890 [ 158.383268][ T7400] ? __pfx_vidtv_s302m_encoder_init+0x10/0x10 [ 158.383306][ T7400] ? trace_kmalloc+0x101/0x130 [ 158.383345][ T7400] ? __kmalloc_noprof+0x320/0x850 [ 158.383398][ T7400] vidtv_channel_s302m_init+0x467/0x9b0 [ 158.383442][ T7400] ? trace_kmalloc+0x101/0x130 [ 158.383473][ T7400] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 158.383527][ T7400] ? __asan_memcpy+0x3c/0x60 [ 158.383571][ T7400] vidtv_channels_init+0x4c/0xb0 [ 158.383607][ T7400] vidtv_mux_init+0x9df/0xbf0 [ 158.383650][ T7400] vidtv_start_feed+0x33e/0x4c0 [ 158.383696][ T7400] ? __pfx_vidtv_start_feed+0x10/0x10 [ 158.383743][ T7400] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 158.383798][ T7400] ? mark_held_locks+0x40/0x70 [ 158.383840][ T7400] ? __pfx_vidtv_start_feed+0x10/0x10 [ 158.383884][ T7400] dmx_ts_feed_start_filtering+0xf6/0x220 [ 158.383920][ T7400] dvb_dmxdev_start_feed+0x273/0x3f0 [ 158.383968][ T7400] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 158.384017][ T7400] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 158.384065][ T7400] dvb_demux_do_ioctl+0xe64/0x1200 [ 158.384123][ T7400] dvb_usercopy+0x167/0x340 [ 158.384157][ T7400] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 158.384198][ T7400] ? __pfx_dvb_usercopy+0x10/0x10 [ 158.384254][ T7400] ? __fget_files+0x21f/0x3d0 [ 158.384290][ T7400] dvb_demux_ioctl+0x29/0x40 [ 158.384329][ T7400] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 158.384371][ T7400] __x64_sys_ioctl+0x18e/0x210 [ 158.384416][ T7400] do_syscall_64+0x106/0xf80 [ 158.384449][ T7400] ? clear_bhb_loop+0x40/0x90 [ 158.384487][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.384524][ T7400] RIP: 0033:0x7febaad9c799 [ 158.384549][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.384578][ T7400] RSP: 002b:00007febabb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.384607][ T7400] RAX: ffffffffffffffda RBX: 00007febab015fa0 RCX: 00007febaad9c799 [ 158.384627][ T7400] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 158.384645][ T7400] RBP: 00007febaae32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 158.384663][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.384680][ T7400] R13: 00007febab016038 R14: 00007febab015fa0 R15: 00007fff5771ca18 [ 158.384722][ T7400] [ 158.384746][ T7400] Mem-Info: [ 158.798828][ T7400] active_anon:18395 inactive_anon:12 isolated_anon:0 [ 158.798828][ T7400] active_file:6927 inactive_file:49319 isolated_file:0 [ 158.798828][ T7400] unevictable:768 dirty:245 writeback:0 [ 158.798828][ T7400] slab_reclaimable:10947 slab_unreclaimable:91956 [ 158.798828][ T7400] mapped:35792 shmem:7943 pagetables:1237 [ 158.798828][ T7400] sec_pagetables:0 bounce:0 [ 158.798828][ T7400] kernel_misc_reclaimable:0 [ 158.798828][ T7400] free:1320150 free_pcp:8729 free_cma:0 [ 158.905553][ T7400] Node 0 active_anon:77840kB inactive_anon:48kB active_file:27708kB inactive_file:199132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151736kB dirty:980kB writeback:0kB shmem:34708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:24576kB kernel_stack:11960kB pagetables:4700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.080143][ T7400] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.113018][ T7417] zswap: compressor not available [ 159.203472][ T7400] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.264432][ T7400] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 159.282322][ T7400] Node 0 DMA32 free:1319992kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81248kB inactive_anon:48kB active_file:27708kB inactive_file:191852kB unevictable:1536kB writepending:1072kB zspages:0kB present:3129332kB managed:2537428kB mlocked:0kB bounce:0kB free_pcp:40212kB local_pcp:26808kB free_cma:0kB [ 159.403773][ T7400] lowmem_reserve[]: 0 0 1 1 1 [ 159.408506][ T7400] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 159.471626][ T7400] lowmem_reserve[]: 0 0 0 0 0 [ 159.486710][ T7400] Node 1 Normal free:3936040kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4352kB local_pcp:4352kB free_cma:0kB [ 159.594046][ T7400] lowmem_reserve[]: 0 0 0 0 0 [ 159.615511][ T7400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.635062][ T7400] Node 0 DMA32: 1981*4kB (UE) 1479*8kB (UE) 691*16kB (UME) 585*32kB (UME) 524*64kB (UME) 425*128kB (UME) 293*256kB (UM) 172*512kB (UME) 74*1024kB (UM) 5*2048kB (U) 224*4096kB (UM) = 1304060kB [ 159.659075][ T7400] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 159.675073][ T7400] Node 1 Normal: 2*4kB (UM) 12*8kB (UM) 17*16kB (UM) 3*32kB (UM) 10*64kB (UM) 8*128kB (UM) 7*256kB (UM) 6*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 958*4096kB (M) = 3936088kB [ 159.724306][ T7400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.735255][ T7400] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.766574][ T7400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.849115][ T7400] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.865575][ T7400] 67812 total pagecache pages [ 159.885956][ T7400] 6 pages in swap cache [ 159.896343][ T7400] Free swap = 124984kB [ 159.906464][ T7400] Total swap = 124996kB [ 160.002230][ T7400] 2097051 pages RAM [ 160.006060][ T7400] 0 pages HighMem/MovableOnly [ 160.042322][ T7400] 430814 pages reserved [ 160.046537][ T7400] 0 pages cma reserved [ 160.896188][ T7443] netlink: 326 bytes leftover after parsing attributes in process `syz.1.323'. [ 160.972776][ T7445] binder: 7440:7445 ioctl c0306201 200000000240 returned -14 [ 162.855377][ T7487] FAULT_INJECTION: forcing a failure. [ 162.855377][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 162.868891][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.1.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.868933][ T7487] Tainted: [L]=SOFTLOCKUP [ 162.868941][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.868955][ T7487] Call Trace: [ 162.868963][ T7487] [ 162.868973][ T7487] dump_stack_lvl+0x100/0x190 [ 162.869022][ T7487] should_fail_ex.cold+0x5/0xa [ 162.869055][ T7487] should_failslab+0xc2/0x120 [ 162.869085][ T7487] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 162.869124][ T7487] ? do_getname_kernel+0x5d/0x250 [ 162.869170][ T7487] do_getname_kernel+0x5d/0x250 [ 162.869205][ T7487] vfs_path_lookup+0x7a/0xe0 [ 162.869246][ T7487] ? __pfx_vfs_path_lookup+0x10/0x10 [ 162.869285][ T7487] ? bpf_lsm_capable+0x9/0x10 [ 162.869312][ T7487] ? security_capable+0x80/0x260 [ 162.869353][ T7487] mntns_install+0x384/0x600 [ 162.869386][ T7487] ? do_raw_spin_lock+0x128/0x260 [ 162.869424][ T7487] ? __pfx_mntns_install+0x10/0x10 [ 162.869456][ T7487] ? find_held_lock+0x2b/0x80 [ 162.869482][ T7487] ? __do_sys_setns+0x151c/0x1f30 [ 162.869516][ T7487] __do_sys_setns+0x15d7/0x1f30 [ 162.869549][ T7487] ? __pfx___do_sys_setns+0x10/0x10 [ 162.869583][ T7487] ? syscall_user_dispatch+0x76/0x130 [ 162.869625][ T7487] do_syscall_64+0x106/0xf80 [ 162.869656][ T7487] ? clear_bhb_loop+0x40/0x90 [ 162.869689][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.869717][ T7487] RIP: 0033:0x7fb682d9c799 [ 162.869740][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.869765][ T7487] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 162.869791][ T7487] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 162.869809][ T7487] RDX: 0000000000000000 RSI: 0000000060020000 RDI: 0000000000000003 [ 162.869826][ T7487] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 162.869842][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.869858][ T7487] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 162.869896][ T7487] [ 164.566719][ T7521] zswap: compressor not available [ 167.143383][ T7579] zswap: compressor not available [ 167.264785][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 169.293922][ T7615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.309703][ T7615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.326313][ T7615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.336144][ T7615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.494769][ T7633] zswap: compressor not available [ 170.729425][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.005882][ T7666] zswap: compressor not available [ 171.129010][ T7666] misc userio: Invalid payload size [ 171.194391][ T7666] Setting dangerous option i915.mitigations - tainting kernel [ 171.369507][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.375688][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.381855][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.538445][ T7685] can: request_module (can-proto-0) failed. [ 172.271483][ T7699] zswap: compressor not available [ 173.388274][ T7729] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(149044966.797066348.4102581103), cmd(4) [ 174.205794][ T7738] usb usb37: usbfs: process 7738 (syz.1.385) did not claim interface 0 before use [ 175.342050][ T7763] can: request_module (can-proto-5) failed. [ 175.460799][ T7763] netlink: 186 bytes leftover after parsing attributes in process `syz.0.389'. [ 175.710956][ T7768] random: crng reseeded on system resumption [ 176.096307][ T7768] FAULT_INJECTION: forcing a failure. [ 176.096307][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 176.118374][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.0.390 Tainted: G U L syzkaller #0 PREEMPT(full) [ 176.118421][ T7768] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 176.118431][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.118447][ T7768] Call Trace: [ 176.118456][ T7768] [ 176.118466][ T7768] dump_stack_lvl+0x100/0x190 [ 176.118515][ T7768] should_fail_ex.cold+0x5/0xa [ 176.118548][ T7768] should_failslab+0xc2/0x120 [ 176.118577][ T7768] __kmalloc_cache_noprof+0x7a/0x6f0 [ 176.118614][ T7768] ? alloc_netdev_mqs+0xe01/0x14f0 [ 176.118657][ T7768] alloc_netdev_mqs+0xe01/0x14f0 [ 176.118699][ T7768] ? __pfx_loopback_net_init+0x10/0x10 [ 176.118741][ T7768] loopback_net_init+0x38/0x170 [ 176.118784][ T7768] ? __pfx_loopback_net_init+0x10/0x10 [ 176.118824][ T7768] ops_init+0x1e2/0x5f0 [ 176.118873][ T7768] setup_net+0x118/0x3a0 [ 176.118910][ T7768] ? __pfx_setup_net+0x10/0x10 [ 176.118944][ T7768] ? lockdep_init_map_type+0x5c/0x250 [ 176.118982][ T7768] ? mutex_init_lockep+0x110/0x150 [ 176.119026][ T7768] copy_net_ns+0x46f/0x7c0 [ 176.119068][ T7768] create_new_namespaces+0x3ea/0xac0 [ 176.119106][ T7768] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 176.119139][ T7768] ksys_unshare+0x473/0xad0 [ 176.119176][ T7768] ? __pfx_ksys_unshare+0x10/0x10 [ 176.119225][ T7768] __x64_sys_unshare+0x31/0x40 [ 176.119258][ T7768] do_syscall_64+0x106/0xf80 [ 176.119288][ T7768] ? clear_bhb_loop+0x40/0x90 [ 176.119322][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.119351][ T7768] RIP: 0033:0x7f9e8199c799 [ 176.119371][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.119398][ T7768] RSP: 002b:00007f9e82876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 176.119425][ T7768] RAX: ffffffffffffffda RBX: 00007f9e81c16090 RCX: 00007f9e8199c799 [ 176.119444][ T7768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 176.119461][ T7768] RBP: 00007f9e81a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 176.119479][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.119495][ T7768] R13: 00007f9e81c16128 R14: 00007f9e81c16090 R15: 00007fff8bcaf338 [ 176.119534][ T7768] [ 177.809212][ T7806] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 178.637262][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 180.773220][ T7886] FAULT_INJECTION: forcing a failure. [ 180.773220][ T7886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 180.798940][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.1.412 Tainted: G U L syzkaller #0 PREEMPT(full) [ 180.798969][ T7886] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 180.798975][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.798987][ T7886] Call Trace: [ 180.798993][ T7886] [ 180.798999][ T7886] dump_stack_lvl+0x100/0x190 [ 180.799027][ T7886] should_fail_ex.cold+0x5/0xa [ 180.799046][ T7886] get_futex_key+0x1d2/0x1620 [ 180.799066][ T7886] ? __pfx_get_futex_key+0x10/0x10 [ 180.799093][ T7886] ? blk_finish_plug+0x83/0xa0 [ 180.799112][ T7886] ? madvise_do_behavior+0x1fc/0x510 [ 180.799132][ T7886] futex_wake+0xea/0x530 [ 180.799154][ T7886] ? __pfx___up_read+0x10/0x10 [ 180.799174][ T7886] ? madvise_unlock+0x172/0x220 [ 180.799189][ T7886] ? __pfx_futex_wake+0x10/0x10 [ 180.799213][ T7886] ? madvise_unlock+0xa9/0x220 [ 180.799231][ T7886] do_futex+0x32b/0x350 [ 180.799250][ T7886] ? __pfx_do_futex+0x10/0x10 [ 180.799272][ T7886] __x64_sys_futex+0x34f/0x4d0 [ 180.799293][ T7886] ? __pfx___x64_sys_futex+0x10/0x10 [ 180.799320][ T7886] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 180.799341][ T7886] ? syscall_user_dispatch+0x76/0x130 [ 180.799365][ T7886] do_syscall_64+0x106/0xf80 [ 180.799382][ T7886] ? clear_bhb_loop+0x40/0x90 [ 180.799400][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.799415][ T7886] RIP: 0033:0x7fb682d9c799 [ 180.799429][ T7886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.799443][ T7886] RSP: 002b:00007fb683cfa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 180.799457][ T7886] RAX: ffffffffffffffda RBX: 00007fb683015fa8 RCX: 00007fb682d9c799 [ 180.799466][ T7886] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb683015fac [ 180.799475][ T7886] RBP: 00007fb683015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.799483][ T7886] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 180.799492][ T7886] R13: 00007fb683016038 R14: 00007ffce7e2bc30 R15: 00007ffce7e2bd18 [ 180.799510][ T7886] [ 181.024636][ T7886] FAULT_INJECTION: forcing a failure. [ 181.024636][ T7886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 181.037606][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.1.412 Tainted: G U L syzkaller #0 PREEMPT(full) [ 181.037633][ T7886] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 181.037639][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.037649][ T7886] Call Trace: [ 181.037655][ T7886] [ 181.037661][ T7886] dump_stack_lvl+0x100/0x190 [ 181.037688][ T7886] should_fail_ex.cold+0x5/0xa [ 181.037707][ T7886] get_futex_key+0x1d2/0x1620 [ 181.037727][ T7886] ? __pfx_get_futex_key+0x10/0x10 [ 181.037746][ T7886] ? __sys_bpf+0x173/0x4b90 [ 181.037765][ T7886] futex_wake+0xea/0x530 [ 181.037785][ T7886] ? __pfx___sys_bpf+0x10/0x10 [ 181.037801][ T7886] ? __pfx_futex_wait+0x10/0x10 [ 181.037822][ T7886] ? __pfx_futex_wake+0x10/0x10 [ 181.037847][ T7886] ? do_raw_spin_lock+0x128/0x260 [ 181.037869][ T7886] do_futex+0x32b/0x350 [ 181.037887][ T7886] ? __pfx_do_futex+0x10/0x10 [ 181.037910][ T7886] __x64_sys_futex+0x34f/0x4d0 [ 181.037929][ T7886] ? __pfx___x64_sys_sethostname+0x10/0x10 [ 181.037948][ T7886] ? __pfx___x64_sys_futex+0x10/0x10 [ 181.037967][ T7886] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 181.037986][ T7886] ? syscall_user_dispatch+0x76/0x130 [ 181.038009][ T7886] do_syscall_64+0x106/0xf80 [ 181.038025][ T7886] ? clear_bhb_loop+0x40/0x90 [ 181.038043][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.038059][ T7886] RIP: 0033:0x7fb682d9c799 [ 181.038072][ T7886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.038087][ T7886] RSP: 002b:00007fb683cfa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.038101][ T7886] RAX: ffffffffffffffda RBX: 00007fb683015fa8 RCX: 00007fb682d9c799 [ 181.038119][ T7886] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb683015fac [ 181.038128][ T7886] RBP: 00007fb683015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 181.038138][ T7886] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 181.038147][ T7886] R13: 00007fb683016038 R14: 00007ffce7e2bc30 R15: 00007ffce7e2bd18 [ 181.038166][ T7886] [ 181.614384][ T7893] sp0: Synchronizing with TNC [ 182.140847][ T7905] Invalid ELF header magic: != ELF [ 183.870389][ T7950] netlink: 266 bytes leftover after parsing attributes in process `syz.0.425'. [ 183.972242][ T7950] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.736402][ T29] audit: type=1800 audit(4294968338.057:6): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.427" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 185.562714][ T7976] vivid-007: ================= START STATUS ================= [ 185.570624][ T7976] vivid-007: Generate PTS: true [ 185.580709][ T7976] vivid-007: Generate SCR: true [ 185.598000][ T7976] tpg source WxH: 320x240 (Y'CbCr) [ 185.668376][ T7976] tpg field: 1 [ 185.671789][ T7976] tpg crop: (0,0)/320x240 [ 185.745668][ T7976] tpg compose: (0,0)/320x240 [ 185.751315][ T7976] tpg colorspace: 8 [ 185.756420][ T7976] tpg transfer function: 0/0 [ 185.761110][ T7976] tpg Y'CbCr encoding: 0/0 [ 185.930082][ T7976] tpg quantization: 0/0 [ 185.953196][ T7976] tpg RGB range: 0/2 [ 185.957216][ T7976] vivid-007: ================== END STATUS ================== [ 186.366580][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'. [ 186.467858][ T7986] team0: Port device team_slave_0 removed [ 186.894964][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 187.611905][ T8024] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 187.632832][ T8024] netlink: 306 bytes leftover after parsing attributes in process `syz.3.442'. [ 189.920852][ T8090] futex_wake_op: syz.1.457 tries to shift op by -2048; fix this program [ 189.994321][ T8090] misc userio: No port type given on /dev/userio [ 190.021610][ T8090] misc userio: No port type given on /dev/userio [ 190.077913][ T8090] misc userio: No port type given on /dev/userio [ 190.158501][ T8090] misc userio: No port type given on /dev/userio [ 190.213789][ T8090] misc userio: No port type given on /dev/userio [ 190.300902][ T8090] misc userio: No port type given on /dev/userio [ 190.355328][ T8090] misc userio: No port type given on /dev/userio [ 190.385421][ T8090] misc userio: No port type given on /dev/userio [ 190.414305][ T8090] misc userio: No port type given on /dev/userio [ 190.421647][ T8090] misc userio: No port type given on /dev/userio [ 190.472846][ T8090] misc userio: No port type given on /dev/userio [ 190.570895][ T8090] misc userio: No port type given on /dev/userio [ 190.706832][ T8090] misc userio: No port type given on /dev/userio [ 190.718353][ T8102] FAULT_INJECTION: forcing a failure. [ 190.718353][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 190.822572][ T8102] CPU: 1 UID: 0 PID: 8102 Comm: syz.0.459 Tainted: G U L syzkaller #0 PREEMPT(full) [ 190.822599][ T8102] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 190.822605][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.822614][ T8102] Call Trace: [ 190.822619][ T8102] [ 190.822625][ T8102] dump_stack_lvl+0x100/0x190 [ 190.822652][ T8102] should_fail_ex.cold+0x5/0xa [ 190.822669][ T8102] should_failslab+0xc2/0x120 [ 190.822685][ T8102] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 190.822706][ T8102] ? vm_area_dup+0x27/0x8e0 [ 190.822729][ T8102] vm_area_dup+0x27/0x8e0 [ 190.822749][ T8102] __split_vma+0x18c/0xd90 [ 190.822771][ T8102] ? __pfx___split_vma+0x10/0x10 [ 190.822794][ T8102] ? __pfx_mas_prev+0x10/0x10 [ 190.822819][ T8102] vms_gather_munmap_vmas+0x39f/0x1500 [ 190.822839][ T8102] ? validate_mm+0x261/0x4e0 [ 190.822857][ T8102] ? validate_mm+0x261/0x4e0 [ 190.822877][ T8102] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 190.822898][ T8102] ? validate_mm+0x392/0x4e0 [ 190.822919][ T8102] ? __pfx_validate_mm+0x10/0x10 [ 190.822942][ T8102] do_vmi_align_munmap+0x287/0x5f0 [ 190.822965][ T8102] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 190.823012][ T8102] do_vmi_munmap+0x1f8/0x3e0 [ 190.823035][ T8102] __vm_munmap+0x196/0x390 [ 190.823062][ T8102] ? __pfx___vm_munmap+0x10/0x10 [ 190.823096][ T8102] __x64_sys_munmap+0x59/0x80 [ 190.823112][ T8102] do_syscall_64+0x106/0xf80 [ 190.823129][ T8102] ? clear_bhb_loop+0x40/0x90 [ 190.823147][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.823162][ T8102] RIP: 0033:0x7f9e8199c5c7 [ 190.823175][ T8102] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.823189][ T8102] RSP: 002b:00007f9e82895d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 190.823203][ T8102] RAX: ffffffffffffffda RBX: 00007f9e78000000 RCX: 00007f9e8199c5c7 [ 190.823212][ T8102] RDX: 0000000000000000 RSI: 0000000000600000 RDI: 00007f9e77a00000 [ 190.823221][ T8102] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 190.823229][ T8102] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 190.823237][ T8102] R13: 0000000000001000 R14: 00007f9e7c000000 R15: 0000000000600000 [ 190.823256][ T8102] [ 191.532496][ T8119] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.0.461: [ 192.787864][ T8152] QAT: Device 0 not found [ 193.460219][ T8176] netlink: 330 bytes leftover after parsing attributes in process `syz.2.477'. [ 193.470349][ T8176] mac80211_hwsim hwsim5 : renamed from wlan0 (while UP) [ 193.850632][ T8185] FAULT_INJECTION: forcing a failure. [ 193.850632][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 193.887107][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.1.482 Tainted: G U L syzkaller #0 PREEMPT(full) [ 193.887156][ T8185] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 193.887167][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.887184][ T8185] Call Trace: [ 193.887192][ T8185] [ 193.887203][ T8185] dump_stack_lvl+0x100/0x190 [ 193.887251][ T8185] should_fail_ex.cold+0x5/0xa [ 193.887285][ T8185] should_failslab+0xc2/0x120 [ 193.887317][ T8185] __kmalloc_cache_noprof+0x7a/0x6f0 [ 193.887356][ T8185] ? subdev_open+0x7f/0x510 [ 193.887408][ T8185] subdev_open+0x7f/0x510 [ 193.887457][ T8185] v4l2_open+0x1d2/0x490 [ 193.887506][ T8185] ? __pfx_v4l2_open+0x10/0x10 [ 193.887545][ T8185] chrdev_open+0x234/0x6a0 [ 193.887575][ T8185] ? __pfx_apparmor_file_open+0x10/0x10 [ 193.887619][ T8185] ? __pfx_chrdev_open+0x10/0x10 [ 193.887651][ T8185] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 193.887691][ T8185] do_dentry_open+0x6d8/0x1660 [ 193.887720][ T8185] ? __pfx_chrdev_open+0x10/0x10 [ 193.887760][ T8185] vfs_open+0x82/0x3f0 [ 193.887802][ T8185] path_openat+0x208c/0x31a0 [ 193.887840][ T8185] ? futex_unqueue+0x13d/0x2c0 [ 193.887875][ T8185] ? stack_depot_save_flags+0x27/0x9d0 [ 193.887909][ T8185] ? __pfx_path_openat+0x10/0x10 [ 193.887942][ T8185] ? kasan_save_stack+0x3f/0x50 [ 193.887984][ T8185] ? kasan_save_stack+0x30/0x50 [ 193.888024][ T8185] ? kasan_save_track+0x14/0x30 [ 193.888065][ T8185] ? __kasan_slab_alloc+0x89/0x90 [ 193.888091][ T8185] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 193.888133][ T8185] ? do_getname+0x35/0x390 [ 193.888173][ T8185] do_file_open+0x20e/0x430 [ 193.888207][ T8185] ? __pfx_do_file_open+0x10/0x10 [ 193.888269][ T8185] ? find_held_lock+0x2b/0x80 [ 193.888297][ T8185] ? __might_fault+0xc5/0x140 [ 193.888336][ T8185] ? __might_fault+0xc5/0x140 [ 193.888381][ T8185] file_open_name+0x198/0x3b0 [ 193.888419][ T8185] ? __pfx_file_open_name+0x10/0x10 [ 193.888463][ T8185] ? do_getname+0x191/0x390 [ 193.888507][ T8185] acct_on+0xa4/0x9e0 [ 193.888552][ T8185] ? __pfx_acct_on+0x10/0x10 [ 193.888595][ T8185] ? bpf_lsm_capable+0x9/0x10 [ 193.888626][ T8185] ? security_capable+0x80/0x260 [ 193.888669][ T8185] __x64_sys_acct+0x81/0x1e0 [ 193.888707][ T8185] ? lockdep_hardirqs_on+0x78/0x100 [ 193.888742][ T8185] do_syscall_64+0x106/0xf80 [ 193.888773][ T8185] ? clear_bhb_loop+0x40/0x90 [ 193.888808][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.888837][ T8185] RIP: 0033:0x7fb682d9c799 [ 193.888862][ T8185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.888891][ T8185] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 193.888920][ T8185] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 193.888940][ T8185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 193.888957][ T8185] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 193.888975][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.888993][ T8185] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 193.889032][ T8185] [ 194.425372][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.432852][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.138170][ T8218] zswap: compressor not available [ 199.031881][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 199.838336][ T8312] netlink: 354 bytes leftover after parsing attributes in process `syz.3.511'. [ 199.884410][ T8315] netlink: 354 bytes leftover after parsing attributes in process `syz.3.511'. [ 200.549669][ T8325] zswap: compressor not available [ 203.213362][ T8380] zswap: compressor not available [ 205.393224][ T8409] zswap: compressor not available [ 205.831691][ T8418] FAULT_INJECTION: forcing a failure. [ 205.831691][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 205.886090][ T8418] CPU: 1 UID: 0 PID: 8418 Comm: syz.2.530 Tainted: G U L syzkaller #0 PREEMPT(full) [ 205.886150][ T8418] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 205.886161][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.886178][ T8418] Call Trace: [ 205.886188][ T8418] [ 205.886198][ T8418] dump_stack_lvl+0x100/0x190 [ 205.886246][ T8418] should_fail_ex.cold+0x5/0xa [ 205.886280][ T8418] should_failslab+0xc2/0x120 [ 205.886308][ T8418] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 205.886347][ T8418] ? ptlock_alloc+0x1f/0x70 [ 205.886388][ T8418] ptlock_alloc+0x1f/0x70 [ 205.886428][ T8418] pte_alloc_one+0x84/0x3e0 [ 205.886461][ T8418] __pte_alloc+0x6d/0x3f0 [ 205.886488][ T8418] ? __pfx___pte_alloc+0x10/0x10 [ 205.886518][ T8418] ? walk_to_pmd+0x302/0x4c0 [ 205.886552][ T8418] get_locked_pte+0xa1/0xc0 [ 205.886584][ T8418] insert_page+0xcc/0x220 [ 205.886614][ T8418] ? __pfx_insert_page+0x10/0x10 [ 205.886644][ T8418] ? __pfx_down_read_trylock+0x10/0x10 [ 205.886693][ T8418] vm_insert_page+0x2c0/0x400 [ 205.886728][ T8418] kcov_mmap+0xca/0x130 [ 205.886769][ T8418] __mmap_region+0x1443/0x29e0 [ 205.886810][ T8418] ? __pfx___mmap_region+0x10/0x10 [ 205.886852][ T8418] ? find_held_lock+0x2b/0x80 [ 205.886878][ T8418] ? ima_match_policy+0x8c4/0x2350 [ 205.886905][ T8418] ? ima_match_policy+0x8c4/0x2350 [ 205.886964][ T8418] ? find_held_lock+0x2b/0x80 [ 205.886989][ T8418] ? process_measurement+0x4c8/0x2350 [ 205.887027][ T8418] ? process_measurement+0x4c8/0x2350 [ 205.887081][ T8418] ? process_measurement+0x1f4/0x2350 [ 205.887203][ T8418] mmap_region+0x30a/0x3e0 [ 205.887250][ T8418] do_mmap+0xc63/0x12f0 [ 205.887288][ T8418] ? __pfx_do_mmap+0x10/0x10 [ 205.887318][ T8418] ? __pfx_down_write_killable+0x10/0x10 [ 205.887368][ T8418] vm_mmap_pgoff+0x29e/0x470 [ 205.887408][ T8418] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 205.887438][ T8418] ? __fget_files+0x215/0x3d0 [ 205.887472][ T8418] ? __fget_files+0x21f/0x3d0 [ 205.887505][ T8418] ksys_mmap_pgoff+0x3c8/0x650 [ 205.887535][ T8418] ? __x64_sys_futex+0x34f/0x4d0 [ 205.887570][ T8418] ? __x64_sys_futex+0x358/0x4d0 [ 205.887611][ T8418] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 205.887646][ T8418] ? xfd_validate_state+0x129/0x190 [ 205.887697][ T8418] __x64_sys_mmap+0x125/0x190 [ 205.887747][ T8418] do_syscall_64+0x106/0xf80 [ 205.887784][ T8418] ? clear_bhb_loop+0x40/0x90 [ 205.887828][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.887858][ T8418] RIP: 0033:0x7f76cc99c799 [ 205.887883][ T8418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.887910][ T8418] RSP: 002b:00007f76cd7db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 205.887938][ T8418] RAX: ffffffffffffffda RBX: 00007f76ccc15fa0 RCX: 00007f76cc99c799 [ 205.887956][ T8418] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000012000 [ 205.887974][ T8418] RBP: 00007f76cca32bd9 R08: 00000000000000dd R09: 0000000000000000 [ 205.887991][ T8418] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 205.888008][ T8418] R13: 00007f76ccc16038 R14: 00007f76ccc15fa0 R15: 00007ffd40606908 [ 205.888048][ T8418] [ 205.888101][ T8418] kcov: kcov: vm_insert_page() failed [ 206.307854][ T8418] FAULT_INJECTION: forcing a failure. [ 206.307854][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 206.364819][ T8418] CPU: 0 UID: 0 PID: 8418 Comm: syz.2.530 Tainted: G U L syzkaller #0 PREEMPT(full) [ 206.364869][ T8418] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 206.364878][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.364893][ T8418] Call Trace: [ 206.364902][ T8418] [ 206.364913][ T8418] dump_stack_lvl+0x100/0x190 [ 206.364969][ T8418] should_fail_ex.cold+0x5/0xa [ 206.365001][ T8418] should_failslab+0xc2/0x120 [ 206.365031][ T8418] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 206.365067][ T8418] ? vm_area_dup+0x27/0x8e0 [ 206.365099][ T8418] ? __vma_start_write+0x17f/0x280 [ 206.365139][ T8418] vm_area_dup+0x27/0x8e0 [ 206.365177][ T8418] dup_mmap+0x6f6/0x2180 [ 206.365212][ T8430] i2c i2c-0: delete_device: Can't parse I2C address [ 206.365220][ T8418] ? __pfx_dup_mmap+0x10/0x10 [ 206.365251][ T8418] ? __pfx___schedule+0x10/0x10 [ 206.365314][ T8418] copy_process+0x73d7/0x7a10 [ 206.365345][ T8418] ? __pfx___schedule+0x10/0x10 [ 206.365390][ T8418] ? __pfx_copy_process+0x10/0x10 [ 206.365423][ T8418] ? _copy_from_user+0x59/0xd0 [ 206.365455][ T8418] kernel_clone+0xfc/0x9a0 [ 206.365492][ T8418] ? __pfx_kernel_clone+0x10/0x10 [ 206.365521][ T8418] ? futex_private_hash_put+0x107/0x1c0 [ 206.365565][ T8418] ? __pfx_futex_wake+0x10/0x10 [ 206.365610][ T8418] __do_sys_clone3+0x214/0x290 [ 206.365642][ T8418] ? __pfx___do_sys_clone3+0x10/0x10 [ 206.365722][ T8418] do_syscall_64+0x106/0xf80 [ 206.365754][ T8418] ? clear_bhb_loop+0x40/0x90 [ 206.365788][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.365816][ T8418] RIP: 0033:0x7f76cc99c799 [ 206.365839][ T8418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.365866][ T8418] RSP: 002b:00007f76cd7daef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 206.365891][ T8418] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f76cc99c799 [ 206.365909][ T8418] RDX: 00007f76cd7daf10 RSI: 0000000000000058 RDI: 00007f76cd7daf10 [ 206.365926][ T8418] RBP: 00007f76cca32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 206.365953][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.365969][ T8418] R13: 00007f76ccc16038 R14: 00007f76ccc15fa0 R15: 00007ffd40606908 [ 206.366008][ T8418] [ 206.914071][ T8438] zswap: compressor not available [ 209.163670][ T8490] zswap: compressor not available [ 210.109902][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 211.806262][ T8549] zswap: compressor not available [ 212.222102][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 213.209318][ T8563] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 214.995587][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 215.014713][ T8603] ipvlan0: entered promiscuous mode [ 215.029334][ T8603] ipvlan0: entered allmulticast mode [ 215.074017][ T8603] veth0_vlan: entered allmulticast mode [ 215.528975][ T8615] MTRR 1 not used [ 215.998633][ T8620] zswap: compressor not available [ 217.187562][ T8648] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 218.932171][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 218.966067][ T8708] bridge0: port 2(gretap0) entered blocking state [ 218.973169][ T8708] bridge0: port 2(gretap0) entered disabled state [ 218.979890][ T8708] gretap0: entered allmulticast mode [ 218.987334][ T8708] gretap0: entered promiscuous mode [ 218.993369][ T8708] FAULT_INJECTION: forcing a failure. [ 218.993369][ T8708] name failslab, interval 1, probability 0, space 0, times 0 [ 219.006365][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.0.592 Tainted: G U L syzkaller #0 PREEMPT(full) [ 219.006412][ T8708] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 219.006423][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.006438][ T8708] Call Trace: [ 219.006447][ T8708] [ 219.006457][ T8708] dump_stack_lvl+0x100/0x190 [ 219.006504][ T8708] should_fail_ex.cold+0x5/0xa [ 219.006538][ T8708] should_failslab+0xc2/0x120 [ 219.006568][ T8708] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 219.006609][ T8708] ? fdb_create+0x22f/0x1960 [ 219.006657][ T8708] fdb_create+0x22f/0x1960 [ 219.006709][ T8708] ? __pfx_fdb_create+0x10/0x10 [ 219.006759][ T8708] fdb_add_local+0x155/0x1c0 [ 219.006803][ T8708] br_fdb_add_local+0x39/0x60 [ 219.006848][ T8708] __vlan_add+0x1820/0x2dd0 [ 219.006891][ T8708] ? __pfx___vlan_add+0x10/0x10 [ 219.006931][ T8708] nbp_vlan_add+0x258/0x3e0 [ 219.006963][ T8708] nbp_vlan_init+0x373/0x500 [ 219.006993][ T8708] ? __pfx_nbp_vlan_init+0x10/0x10 [ 219.007031][ T8708] ? br_fdb_add_local+0x43/0x60 [ 219.007070][ T8708] ? __local_bh_enable_ip+0xff/0x120 [ 219.007106][ T8708] br_add_if+0xf79/0x1b40 [ 219.007146][ T8708] ? veth_get_iflink+0x213/0x2c0 [ 219.007189][ T8708] add_del_if+0x114/0x160 [ 219.007223][ T8708] br_dev_siocdevprivate+0x8ac/0x1650 [ 219.007261][ T8708] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 219.007309][ T8708] ? lock_acquire+0x1cf/0x380 [ 219.007357][ T8708] ? netdev_name_node_lookup+0x107/0x150 [ 219.007386][ T8708] ? __mutex_lock+0x26a/0x1b90 [ 219.007427][ T8708] dev_ifsioc+0xc1e/0x1e90 [ 219.007462][ T8708] ? __pfx_dev_ifsioc+0x10/0x10 [ 219.007490][ T8708] ? __pfx___mutex_lock+0x10/0x10 [ 219.007538][ T8708] ? dev_load+0x8e/0x240 [ 219.007564][ T8708] ? dev_load+0x8e/0x240 [ 219.007602][ T8708] dev_ioctl+0x70e/0x1070 [ 219.007635][ T8708] sock_ioctl+0x494/0x6b0 [ 219.007679][ T8708] ? __pfx_sock_ioctl+0x10/0x10 [ 219.007719][ T8708] ? hook_file_ioctl_common+0x146/0x410 [ 219.007772][ T8708] ? __fget_files+0x21f/0x3d0 [ 219.007804][ T8708] ? __pfx_sock_ioctl+0x10/0x10 [ 219.007849][ T8708] __x64_sys_ioctl+0x18e/0x210 [ 219.007892][ T8708] do_syscall_64+0x106/0xf80 [ 219.007925][ T8708] ? clear_bhb_loop+0x40/0x90 [ 219.007961][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.007991][ T8708] RIP: 0033:0x7f9e8199c799 [ 219.008015][ T8708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.008041][ T8708] RSP: 002b:00007f9e82855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.008067][ T8708] RAX: ffffffffffffffda RBX: 00007f9e81c16180 RCX: 00007f9e8199c799 [ 219.008086][ T8708] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 219.008103][ T8708] RBP: 00007f9e81a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 219.008130][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.008147][ T8708] R13: 00007f9e81c16218 R14: 00007f9e81c16180 R15: 00007fff8bcaf338 [ 219.008185][ T8708] [ 219.008334][ T8708] bridge0: failed insert local address into bridge forwarding table [ 219.353767][ T8708] gretap0: failed to initialize vlan filtering on this port [ 219.406504][ T8708] gretap0: left allmulticast mode [ 219.962864][ T8722] netlink: 'syz.0.598': attribute type 6 has an invalid length. [ 220.070186][ T29] audit: type=1800 audit(4294967325.903:7): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.600" name="trace_pipe" dev="tracefs" ino=3218 res=0 errno=0 [ 221.192423][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 222.317599][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 222.374303][ T8781] ipvlan0: entered promiscuous mode [ 222.385767][ T8781] ipvlan0: entered allmulticast mode [ 222.394920][ T8781] veth0_vlan: entered allmulticast mode [ 224.771110][ T8813] zswap: compressor not available [ 225.739765][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 226.563111][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.622793][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.713607][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.775579][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.852903][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.926124][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.937465][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.945899][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 226.953604][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 227.051544][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 227.144957][ T8854] binder: 8847:8854 ioctl c00c620f 200000000040 returned -22 [ 230.714466][ T8941] zswap: compressor not available [ 231.022093][ T8958] futex_wake_op: syz.2.648 tries to shift op by -2048; fix this program [ 231.043323][ T8958] futex_wake_op: syz.2.648 tries to shift op by -2048; fix this program [ 231.084599][ T8958] 0x000000000001-0x000000020000 : "" [ 231.169005][ T8958] ftl_cs: FTL header corrupt! [ 232.181283][ T8987] blk-mq: reduced tag depth (128 -> 64) [ 234.220224][ T9046] Invalid ELF header magic: != ELF [ 235.727993][ T9083] zswap: compressor not available [ 236.496616][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 236.508368][ T9107] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 236.516198][ T9107] netlink: 13 bytes leftover after parsing attributes in process `syz.2.673'. [ 238.189121][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 240.628884][ T9205] netlink: 318 bytes leftover after parsing attributes in process `syz.2.690'. [ 242.186281][ T9246] FAULT_INJECTION: forcing a failure. [ 242.186281][ T9246] name failslab, interval 1, probability 0, space 0, times 0 [ 242.199205][ T9246] CPU: 1 UID: 0 PID: 9246 Comm: syz.2.702 Tainted: G U L syzkaller #0 PREEMPT(full) [ 242.199232][ T9246] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 242.199238][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.199250][ T9246] Call Trace: [ 242.199258][ T9246] [ 242.199264][ T9246] dump_stack_lvl+0x100/0x190 [ 242.199293][ T9246] should_fail_ex.cold+0x5/0xa [ 242.199312][ T9246] should_failslab+0xc2/0x120 [ 242.199328][ T9246] __kmalloc_cache_noprof+0x7a/0x6f0 [ 242.199352][ T9246] ? rose_add_loopback_node+0x16b/0x460 [ 242.199379][ T9246] rose_add_loopback_node+0x16b/0x460 [ 242.199403][ T9246] ? __pfx_rose_open+0x10/0x10 [ 242.199420][ T9246] rose_open+0x3e/0x110 [ 242.199439][ T9246] ? __pfx_rose_open+0x10/0x10 [ 242.199455][ T9246] __dev_open+0x3ad/0x960 [ 242.199473][ T9246] ? __pfx___dev_open+0x10/0x10 [ 242.199490][ T9246] ? __local_bh_enable_ip+0x9e/0x120 [ 242.199510][ T9246] __dev_change_flags+0x558/0x6f0 [ 242.199529][ T9246] ? __pfx___dev_change_flags+0x10/0x10 [ 242.199552][ T9246] netif_change_flags+0x8d/0x160 [ 242.199571][ T9246] dev_change_flags+0xba/0x250 [ 242.199592][ T9246] flags_store+0x187/0x1e0 [ 242.199607][ T9246] ? __pfx_flags_store+0x10/0x10 [ 242.199622][ T9246] ? find_held_lock+0x2b/0x80 [ 242.199635][ T9246] ? sysfs_file_kobj+0xe4/0x290 [ 242.199652][ T9246] ? sysfs_file_kobj+0xe4/0x290 [ 242.199670][ T9246] ? __pfx_flags_store+0x10/0x10 [ 242.199684][ T9246] dev_attr_store+0x58/0x80 [ 242.199708][ T9246] ? __pfx_dev_attr_store+0x10/0x10 [ 242.199730][ T9246] sysfs_kf_write+0xf2/0x150 [ 242.199750][ T9246] kernfs_fop_write_iter+0x3e0/0x5f0 [ 242.199765][ T9246] ? __pfx_sysfs_kf_write+0x10/0x10 [ 242.199789][ T9246] vfs_write+0x6ac/0x1070 [ 242.199813][ T9246] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 242.199830][ T9246] ? __pfx_vfs_write+0x10/0x10 [ 242.199865][ T9246] ksys_write+0x12a/0x250 [ 242.199887][ T9246] ? __pfx_ksys_write+0x10/0x10 [ 242.199907][ T9246] do_syscall_64+0x106/0xf80 [ 242.199925][ T9246] ? clear_bhb_loop+0x40/0x90 [ 242.199943][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.199959][ T9246] RIP: 0033:0x7f76cc99c799 [ 242.199973][ T9246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.199986][ T9246] RSP: 002b:00007f76cd7db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.200005][ T9246] RAX: ffffffffffffffda RBX: 00007f76ccc15fa0 RCX: 00007f76cc99c799 [ 242.200015][ T9246] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.200024][ T9246] RBP: 00007f76cca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 242.200033][ T9246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.200042][ T9246] R13: 00007f76ccc16038 R14: 00007f76ccc15fa0 R15: 00007ffd40606908 [ 242.200063][ T9246] [ 244.316855][ T9276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.375436][ T9276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.436400][ T9276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.458013][ T9276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.148547][ T9303] FAULT_INJECTION: forcing a failure. [ 245.148547][ T9303] name failslab, interval 1, probability 0, space 0, times 0 [ 245.232777][ T9301] Line length is too long: Should be less than 4094 [ 245.241976][ T9303] CPU: 0 UID: 0 PID: 9303 Comm: syz.3.716 Tainted: G U L syzkaller #0 PREEMPT(full) [ 245.242023][ T9303] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 245.242034][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.242050][ T9303] Call Trace: [ 245.242059][ T9303] [ 245.242070][ T9303] dump_stack_lvl+0x100/0x190 [ 245.242119][ T9303] should_fail_ex.cold+0x5/0xa [ 245.242152][ T9303] should_failslab+0xc2/0x120 [ 245.242182][ T9303] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 245.242225][ T9303] ? __d_alloc+0x34/0xa80 [ 245.242256][ T9303] ? lockdep_init_map_type+0x5c/0x250 [ 245.242299][ T9303] __d_alloc+0x34/0xa80 [ 245.242334][ T9303] d_alloc_pseudo+0x1c/0xc0 [ 245.242373][ T9303] alloc_file_pseudo+0xcf/0x230 [ 245.242410][ T9303] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 245.242446][ T9303] ? alloc_fd+0x476/0x790 [ 245.242479][ T9303] sock_alloc_file+0x50/0x210 [ 245.242548][ T9303] __sys_socket+0x1c0/0x260 [ 245.242577][ T9303] ? __pfx___sys_socket+0x10/0x10 [ 245.242614][ T9303] __x64_sys_socket+0x72/0xb0 [ 245.242640][ T9303] ? lockdep_hardirqs_on+0x78/0x100 [ 245.242675][ T9303] do_syscall_64+0x106/0xf80 [ 245.242708][ T9303] ? clear_bhb_loop+0x40/0x90 [ 245.242742][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.242768][ T9303] RIP: 0033:0x7febaad9c799 [ 245.242787][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.242812][ T9303] RSP: 002b:00007febabb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 245.242840][ T9303] RAX: ffffffffffffffda RBX: 00007febab015fa0 RCX: 00007febaad9c799 [ 245.242865][ T9303] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 245.242882][ T9303] RBP: 00007febaae32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 245.242898][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.242914][ T9303] R13: 00007febab016038 R14: 00007febab015fa0 R15: 00007fff5771ca18 [ 245.242948][ T9303] [ 245.667448][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.687649][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.696230][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.706521][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.715831][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.442546][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.442555][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.522568][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.877316][ T9330] FAULT_INJECTION: forcing a failure. [ 246.877316][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 246.904801][ T9313] chnl_net:caif_netlink_parms(): no params data found [ 246.922911][ T9330] CPU: 0 UID: 0 PID: 9330 Comm: syz.1.719 Tainted: G U L syzkaller #0 PREEMPT(full) [ 246.922954][ T9330] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 246.922963][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.922978][ T9330] Call Trace: [ 246.922986][ T9330] [ 246.922996][ T9330] dump_stack_lvl+0x100/0x190 [ 246.923038][ T9330] should_fail_ex.cold+0x5/0xa [ 246.923072][ T9330] should_failslab+0xc2/0x120 [ 246.923101][ T9330] __kmalloc_cache_noprof+0x7a/0x6f0 [ 246.923136][ T9330] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 246.923188][ T9330] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 246.923232][ T9330] ? lockdep_hardirqs_on+0x78/0x100 [ 246.923266][ T9330] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 246.923310][ T9330] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 246.923352][ T9330] ? kfree+0x1f6/0x6b0 [ 246.923391][ T9330] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 246.923436][ T9330] ? rcu_is_cpu_rrupt_from_idle+0x1b7/0x270 [ 246.923490][ T9330] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 246.923530][ T9330] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 246.923560][ T9330] ? lockdep_hardirqs_on+0x78/0x100 [ 246.923607][ T9330] ? __pfx___might_resched+0x10/0x10 [ 246.923653][ T9330] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 246.923699][ T9330] snd_pcm_oss_write+0x4bb/0xa30 [ 246.923728][ T9330] ? bpf_lsm_file_permission+0x9/0x10 [ 246.923769][ T9330] ? security_file_permission+0x76/0x210 [ 246.923806][ T9330] vfs_write+0x2aa/0x1070 [ 246.923848][ T9330] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 246.923879][ T9330] ? __pfx_vfs_write+0x10/0x10 [ 246.923924][ T9330] ? find_held_lock+0x2b/0x80 [ 246.923949][ T9330] ? __fget_files+0x215/0x3d0 [ 246.923974][ T9330] ? __fget_files+0x215/0x3d0 [ 246.924005][ T9330] ? __fget_files+0x21f/0x3d0 [ 246.924040][ T9330] ksys_write+0x12a/0x250 [ 246.924066][ T9330] ? __pfx_ksys_write+0x10/0x10 [ 246.924102][ T9330] do_syscall_64+0x106/0xf80 [ 246.924133][ T9330] ? clear_bhb_loop+0x40/0x90 [ 246.924166][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.924195][ T9330] RIP: 0033:0x7fb682d9c799 [ 246.924218][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.924243][ T9330] RSP: 002b:00007fb683c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.924269][ T9330] RAX: ffffffffffffffda RBX: 00007fb683016360 RCX: 00007fb682d9c799 [ 246.924287][ T9330] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 246.924303][ T9330] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 246.924319][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.924334][ T9330] R13: 00007fb6830163f8 R14: 00007fb683016360 R15: 00007ffce7e2bd18 [ 246.924371][ T9330] [ 247.817394][ T5829] Bluetooth: hci0: command tx timeout [ 248.036601][ T9334] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 248.584332][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.591588][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.606312][ T9313] bridge_slave_0: entered allmulticast mode [ 248.624818][ T9313] bridge_slave_0: entered promiscuous mode [ 248.636456][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.644236][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.651553][ T9313] bridge_slave_1: entered allmulticast mode [ 248.659842][ T9313] bridge_slave_1: entered promiscuous mode [ 248.923085][ T9313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.988948][ T9313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.109271][ T9313] team0: Port device team_slave_0 added [ 249.130755][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.134100][ T9313] team0: Port device team_slave_1 added [ 249.142079][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.302150][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.312541][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.339563][ T9313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.467493][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.487790][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.529206][ T9313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.787623][ T9313] hsr_slave_0: entered promiscuous mode [ 249.794942][ T9313] hsr_slave_1: entered promiscuous mode [ 249.814259][ T9313] debugfs: 'hsr0' already exists in 'hsr' [ 249.830274][ T9313] Cannot create hsr debugfs directory [ 249.887597][ T5829] Bluetooth: hci0: command tx timeout [ 250.886277][ T9381] netlink: 64 bytes leftover after parsing attributes in process `syz.1.729'. [ 250.956355][ T9381] Invalid ELF header magic: != ELF [ 251.202146][ T9313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.290045][ T9313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.377179][ T9313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.539590][ T9313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.817723][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.965430][ T5829] Bluetooth: hci0: command tx timeout [ 252.040213][ T9313] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.107661][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.114809][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.174703][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.181878][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.756692][ T9426] FAULT_INJECTION: forcing a failure. [ 252.756692][ T9426] name failslab, interval 1, probability 0, space 0, times 0 [ 252.769990][ T9426] CPU: 0 UID: 0 PID: 9426 Comm: syz.1.736 Tainted: G U L syzkaller #0 PREEMPT(full) [ 252.770039][ T9426] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 252.770050][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.770067][ T9426] Call Trace: [ 252.770077][ T9426] [ 252.770088][ T9426] dump_stack_lvl+0x100/0x190 [ 252.770137][ T9426] should_fail_ex.cold+0x5/0xa [ 252.770172][ T9426] should_failslab+0xc2/0x120 [ 252.770203][ T9426] __kmalloc_node_noprof+0xe6/0x850 [ 252.770245][ T9426] ? alloc_slab_obj_exts+0x4e/0x190 [ 252.770290][ T9426] alloc_slab_obj_exts+0x4e/0x190 [ 252.770331][ T9426] __memcg_slab_post_alloc_hook+0x246/0x990 [ 252.770373][ T9426] ? kasan_save_track+0x14/0x30 [ 252.770419][ T9426] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 252.770460][ T9426] ? ep_ptable_queue_proc+0x5b/0x280 [ 252.770512][ T9426] ep_ptable_queue_proc+0x5b/0x280 [ 252.770557][ T9426] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 252.770600][ T9426] snd_seq_oss_readq_poll+0x56/0xb0 [ 252.770652][ T9426] snd_seq_oss_poll+0x122/0x1d0 [ 252.770682][ T9426] ? __pfx_odev_poll+0x10/0x10 [ 252.770721][ T9426] odev_poll+0x4a/0x90 [ 252.770761][ T9426] ep_item_poll+0x141/0x1f0 [ 252.770792][ T9426] do_epoll_ctl+0x1f33/0x36a0 [ 252.770837][ T9426] ? __pfx_do_epoll_ctl+0x10/0x10 [ 252.770865][ T9426] ? find_held_lock+0x2b/0x80 [ 252.770891][ T9426] ? __might_fault+0xc5/0x140 [ 252.770929][ T9426] ? __might_fault+0xc5/0x140 [ 252.770965][ T9426] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 252.771024][ T9426] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 252.771052][ T9426] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 252.771084][ T9426] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 252.771166][ T9426] do_syscall_64+0x106/0xf80 [ 252.771197][ T9426] ? clear_bhb_loop+0x40/0x90 [ 252.771231][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.771261][ T9426] RIP: 0033:0x7fb682d9c799 [ 252.771292][ T9426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.771320][ T9426] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 252.771347][ T9426] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 252.771366][ T9426] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 252.771383][ T9426] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 252.771401][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.771418][ T9426] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 252.771458][ T9426] [ 253.264787][ T9313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.056792][ T5829] Bluetooth: hci0: command tx timeout [ 254.412839][ T9455] NFSD: Failed to start, no listeners configured. [ 254.866423][ T9313] veth0_vlan: entered promiscuous mode [ 254.926014][ T9313] veth1_vlan: entered promiscuous mode [ 255.004754][ T9313] veth0_macvtap: entered promiscuous mode [ 255.042584][ T9313] veth1_macvtap: entered promiscuous mode [ 255.072103][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.103159][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.165513][ T1339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.205040][ T1339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.348383][ T1339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.420048][ T1339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.825576][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.887104][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.893778][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.902602][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.351717][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.359822][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.380236][ T9491] Invalid ELF header magic: != ELF [ 259.990350][ T9550] netlink: 'syz.3.757': attribute type 28 has an invalid length. [ 260.009041][ T9550] netlink: 334 bytes leftover after parsing attributes in process `syz.3.757'. [ 260.724452][ T9554] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 260.993158][ T5829] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 263.556552][ T9084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.730423][ T9084] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.116435][ T9084] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.193609][ T9635] can: request_module (can-proto-3) failed. [ 264.309143][ T9084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.594284][ T9661] bridge_slave_1: left allmulticast mode [ 265.622282][ T9661] bridge_slave_1: left promiscuous mode [ 265.632279][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 265.648260][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.767490][ T9084] bridge_slave_0: left allmulticast mode [ 265.773990][ T9084] bridge_slave_0: left promiscuous mode [ 265.785452][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.264414][ T9670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 266.408913][ T9084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.508544][ T9084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.562351][ T9084] bond0 (unregistering): Released all slaves [ 267.927123][ T9678] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 268.901292][ T9084] hsr_slave_0: left promiscuous mode [ 268.926632][ T9084] hsr_slave_1: left promiscuous mode [ 268.954763][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.962251][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.980068][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.992537][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.010789][ T9084] veth1_macvtap: left promiscuous mode [ 269.029165][ T9728] hub 27-0:1.0: USB hub found [ 269.036374][ T9084] veth0_macvtap: left promiscuous mode [ 269.045790][ T9728] hub 27-0:1.0: 1 port detected [ 269.054182][ T9084] veth1_vlan: left promiscuous mode [ 269.059560][ T9084] veth0_vlan: left promiscuous mode [ 269.639023][ T9084] team0 (unregistering): Port device team_slave_1 removed [ 269.661056][ T9084] team0 (unregistering): Port device team_slave_0 removed [ 271.506233][ T9778] netlink: 338 bytes leftover after parsing attributes in process `syz.1.792'. [ 271.610935][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 273.141373][ T9821] zswap: compressor not available [ 273.832638][ T9842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 274.042036][ T9850] FAULT_INJECTION: forcing a failure. [ 274.042036][ T9850] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 274.103338][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.1.805 Tainted: G U L syzkaller #0 PREEMPT(full) [ 274.103365][ T9850] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 274.103370][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.103378][ T9850] Call Trace: [ 274.103383][ T9850] [ 274.103389][ T9850] dump_stack_lvl+0x100/0x190 [ 274.103415][ T9850] should_fail_ex.cold+0x5/0xa [ 274.103433][ T9850] strncpy_from_user+0x3b/0x2d0 [ 274.103465][ T9850] do_getname+0x78/0x390 [ 274.103485][ T9850] do_mq_open+0x173/0x9c0 [ 274.103506][ T9850] ? __fget_files+0x215/0x3d0 [ 274.103520][ T9850] ? __pfx_do_mq_open+0x10/0x10 [ 274.103545][ T9850] ? __fget_files+0x21f/0x3d0 [ 274.103560][ T9850] __x64_sys_mq_open+0x152/0x1e0 [ 274.103580][ T9850] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 274.103599][ T9850] ? fput+0x79/0x100 [ 274.103623][ T9850] do_syscall_64+0x106/0xf80 [ 274.103641][ T9850] ? clear_bhb_loop+0x40/0x90 [ 274.103658][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.103673][ T9850] RIP: 0033:0x7fb682d9c799 [ 274.103685][ T9850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.103699][ T9850] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 274.103712][ T9850] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 274.103722][ T9850] RDX: 0000000000000004 RSI: 00000000fffffffe RDI: 0000200000000400 [ 274.103730][ T9850] RBP: 00007fb683cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 274.103739][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.103747][ T9850] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 274.103766][ T9850] [ 274.361885][ T9846] can: request_module (can-proto-0) failed. [ 276.329947][ T9907] FAULT_INJECTION: forcing a failure. [ 276.329947][ T9907] name failslab, interval 1, probability 0, space 0, times 0 [ 276.399192][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz.2.817 Tainted: G U L syzkaller #0 PREEMPT(full) [ 276.399221][ T9907] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 276.399227][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.399236][ T9907] Call Trace: [ 276.399241][ T9907] [ 276.399248][ T9907] dump_stack_lvl+0x100/0x190 [ 276.399275][ T9907] should_fail_ex.cold+0x5/0xa [ 276.399293][ T9907] should_failslab+0xc2/0x120 [ 276.399308][ T9907] __kmalloc_cache_noprof+0x7a/0x6f0 [ 276.399327][ T9907] ? alloc_mnt_ns+0xce/0x520 [ 276.399354][ T9907] alloc_mnt_ns+0xce/0x520 [ 276.399375][ T9907] copy_mnt_ns+0x220/0xc30 [ 276.399391][ T9907] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 276.399411][ T9907] ? create_new_namespaces+0x30/0xac0 [ 276.399427][ T9907] ? rcu_is_watching+0x12/0xc0 [ 276.399450][ T9907] create_new_namespaces+0xd3/0xac0 [ 276.399465][ T9907] ? bpf_lsm_capable+0x9/0x10 [ 276.399479][ T9907] ? security_capable+0x80/0x260 [ 276.399501][ T9907] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 276.399519][ T9907] ksys_unshare+0x473/0xad0 [ 276.399538][ T9907] ? __pfx_ksys_unshare+0x10/0x10 [ 276.399562][ T9907] __x64_sys_unshare+0x31/0x40 [ 276.399579][ T9907] do_syscall_64+0x106/0xf80 [ 276.399597][ T9907] ? clear_bhb_loop+0x40/0x90 [ 276.399614][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.399630][ T9907] RIP: 0033:0x7f76cc99c799 [ 276.399643][ T9907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.399657][ T9907] RSP: 002b:00007f76cd7db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 276.399671][ T9907] RAX: ffffffffffffffda RBX: 00007f76ccc15fa0 RCX: 00007f76cc99c799 [ 276.399681][ T9907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 276.399689][ T9907] RBP: 00007f76cca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 276.399697][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.399712][ T9907] R13: 00007f76ccc16038 R14: 00007f76ccc15fa0 R15: 00007ffd40606908 [ 276.399732][ T9907] [ 276.674107][ T29] audit: type=1804 audit(4294976171.979:8): pid=9908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.817" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 276.976651][ T9913] FAULT_INJECTION: forcing a failure. [ 276.976651][ T9913] name fail_futex, interval 1, probability 0, space 0, times 0 [ 277.013667][ T9913] CPU: 1 UID: 0 PID: 9913 Comm: syz.2.819 Tainted: G U L syzkaller #0 PREEMPT(full) [ 277.013727][ T9913] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 277.013739][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.013756][ T9913] Call Trace: [ 277.013766][ T9913] [ 277.013777][ T9913] dump_stack_lvl+0x100/0x190 [ 277.013824][ T9913] should_fail_ex.cold+0x5/0xa [ 277.013857][ T9913] get_futex_key+0x1d2/0x1620 [ 277.013897][ T9913] ? __pfx_get_futex_key+0x10/0x10 [ 277.013929][ T9913] ? __pfx_msr_io+0x10/0x10 [ 277.013963][ T9913] futex_wake+0xea/0x530 [ 277.014002][ T9913] ? __pfx_futex_wake+0x10/0x10 [ 277.014045][ T9913] ? do_vfs_ioctl+0x226/0x13e0 [ 277.014084][ T9913] do_futex+0x32b/0x350 [ 277.014116][ T9913] ? __pfx_do_futex+0x10/0x10 [ 277.014149][ T9913] ? find_held_lock+0x2b/0x80 [ 277.014177][ T9913] __x64_sys_futex+0x34f/0x4d0 [ 277.014211][ T9913] ? __fget_files+0x21f/0x3d0 [ 277.014235][ T9913] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.014279][ T9913] do_syscall_64+0x106/0xf80 [ 277.014309][ T9913] ? clear_bhb_loop+0x40/0x90 [ 277.014339][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.014365][ T9913] RIP: 0033:0x7f76cc99c799 [ 277.014386][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.014411][ T9913] RSP: 002b:00007f76cd7db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.014435][ T9913] RAX: ffffffffffffffda RBX: 00007f76ccc15fa8 RCX: 00007f76cc99c799 [ 277.014452][ T9913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76ccc15fac [ 277.014468][ T9913] RBP: 00007f76ccc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 277.014483][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.014498][ T9913] R13: 00007f76ccc16038 R14: 00007ffd40606820 R15: 00007ffd40606908 [ 277.014530][ T9913] [ 279.090911][ T9968] hugetlbfs: syz.4.831 (9968): Using mlock ulimits for SHM_HUGETLB is obsolete [ 279.908395][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 279.945967][ T9985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.966425][ T9985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.985197][ T9985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.999488][ T9985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.300089][T10025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.322431][T10025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.359435][T10025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.397001][T10025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.428700][T10025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 281.525238][T10025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 281.860786][T10035] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 282.440715][ T29] audit: type=1800 audit(4294976177.636:9): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.846" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 282.666127][T10053] zswap: compressor not available [ 282.815280][T10040] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 283.331462][T10081] FAULT_INJECTION: forcing a failure. [ 283.331462][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 283.345511][T10032] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.345563][T10032] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.382597][T10081] CPU: 0 UID: 0 PID: 10081 Comm: syz.1.852 Tainted: G U L syzkaller #0 PREEMPT(full) [ 283.382625][T10081] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 283.382630][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.382639][T10081] Call Trace: [ 283.382644][T10081] [ 283.382649][T10081] dump_stack_lvl+0x100/0x190 [ 283.382677][T10081] should_fail_ex.cold+0x5/0xa [ 283.382694][T10081] should_failslab+0xc2/0x120 [ 283.382710][T10081] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 283.382733][T10081] ? __d_alloc+0x34/0xa80 [ 283.382748][T10081] ? __pfx_stack_trace_save+0x10/0x10 [ 283.382773][T10081] __d_alloc+0x34/0xa80 [ 283.382791][T10081] d_alloc_parallel+0x111/0x14e0 [ 283.382818][T10081] ? find_held_lock+0x2b/0x80 [ 283.382831][T10081] ? __d_lookup+0x25c/0x4a0 [ 283.382857][T10081] ? __pfx_d_alloc_parallel+0x10/0x10 [ 283.382898][T10081] ? __d_lookup+0x266/0x4a0 [ 283.382941][T10081] lookup_open.isra.0+0x57c/0x11b0 [ 283.382986][T10081] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 283.383045][T10081] ? mnt_get_write_access+0x1e9/0x2f0 [ 283.383086][T10081] path_openat+0xa98/0x31a0 [ 283.383127][T10081] ? __pfx_path_openat+0x10/0x10 [ 283.383168][T10081] do_file_open+0x20e/0x430 [ 283.383199][T10081] ? __pfx_do_file_open+0x10/0x10 [ 283.383253][T10081] ? alloc_fd+0x476/0x790 [ 283.383283][T10081] ? do_getname+0x191/0x390 [ 283.383319][T10081] do_sys_openat2+0x10d/0x1e0 [ 283.383354][T10081] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.383402][T10081] __x64_sys_openat+0x12d/0x210 [ 283.383438][T10081] ? __pfx___x64_sys_openat+0x10/0x10 [ 283.383479][T10081] do_syscall_64+0x106/0xf80 [ 283.383497][T10081] ? clear_bhb_loop+0x40/0x90 [ 283.383516][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.383531][T10081] RIP: 0033:0x7fb682d9c799 [ 283.383544][T10081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.383557][T10081] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 283.383572][T10081] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 283.383582][T10081] RDX: 0000000000020001 RSI: 0000200000001180 RDI: ffffffffffffff9c [ 283.383591][T10081] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 283.383600][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.383608][T10081] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 283.383628][T10081] [ 283.644307][T10024] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.650361][T10024] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.662447][T10032] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.913807][ T29] audit: type=1800 audit(4294976181.185:10): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.863" name="lu_gp_id" dev="configfs" ino=32980 res=0 errno=0 [ 286.310275][T10160] FAULT_INJECTION: forcing a failure. [ 286.310275][T10160] name fail_futex, interval 1, probability 0, space 0, times 0 [ 286.399742][T10160] CPU: 0 UID: 0 PID: 10160 Comm: syz.4.866 Tainted: G U L syzkaller #0 PREEMPT(full) [ 286.399793][T10160] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 286.399804][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.399821][T10160] Call Trace: [ 286.399830][T10160] [ 286.399840][T10160] dump_stack_lvl+0x100/0x190 [ 286.399887][T10160] should_fail_ex.cold+0x5/0xa [ 286.399919][T10160] get_futex_key+0x1d2/0x1620 [ 286.399956][T10160] ? __pfx_get_futex_key+0x10/0x10 [ 286.399998][T10160] futex_wait_setup+0x83/0x510 [ 286.400063][T10160] __futex_wait+0x19f/0x300 [ 286.400108][T10160] ? __pfx___futex_wait+0x10/0x10 [ 286.400154][T10160] ? __pfx_futex_wake_mark+0x10/0x10 [ 286.400200][T10160] ? futex_hash+0x2c5/0x380 [ 286.400241][T10160] futex_wait+0xed/0x380 [ 286.400283][T10160] ? __pfx_futex_wait+0x10/0x10 [ 286.400332][T10160] ? __might_fault+0x111/0x140 [ 286.400373][T10160] ? do_vfs_ioctl+0x226/0x13e0 [ 286.400416][T10160] do_futex+0x1ef/0x350 [ 286.400453][T10160] ? __pfx_do_futex+0x10/0x10 [ 286.400491][T10160] ? find_held_lock+0x2b/0x80 [ 286.400522][T10160] __x64_sys_futex+0x34f/0x4d0 [ 286.400561][T10160] ? __fget_files+0x21f/0x3d0 [ 286.400587][T10160] ? __pfx___x64_sys_futex+0x10/0x10 [ 286.400639][T10160] do_syscall_64+0x106/0xf80 [ 286.400673][T10160] ? clear_bhb_loop+0x40/0x90 [ 286.400709][T10160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.400740][T10160] RIP: 0033:0x7f2738b9c799 [ 286.400764][T10160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.400792][T10160] RSP: 002b:00007f2739b090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 286.400819][T10160] RAX: ffffffffffffffda RBX: 00007f2738e16098 RCX: 00007f2738b9c799 [ 286.400839][T10160] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2738e16098 [ 286.400857][T10160] RBP: 00007f2738e16090 R08: 0000000000000000 R09: 0000000000000000 [ 286.400874][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.400891][T10160] R13: 00007f2738e16128 R14: 00007ffc92bd4e70 R15: 00007ffc92bd4f58 [ 286.400929][T10160] [ 287.085260][T10177] IPVS: length: 131 != 8 [ 287.094725][T10173] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 287.115625][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.870'. [ 287.140166][T10177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.166031][T10177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.181344][T10177] bond0 (unregistering): Released all slaves [ 287.748121][T10032] Bluetooth: hci0: command 0x0c1a tx timeout [ 288.749775][T10247] FAULT_INJECTION: forcing a failure. [ 288.749775][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 288.772343][T10247] CPU: 1 UID: 0 PID: 10247 Comm: syz.4.878 Tainted: G U L syzkaller #0 PREEMPT(full) [ 288.772395][T10247] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 288.772407][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.772426][T10247] Call Trace: [ 288.772435][T10247] [ 288.772447][T10247] dump_stack_lvl+0x100/0x190 [ 288.772497][T10247] should_fail_ex.cold+0x5/0xa [ 288.772532][T10247] should_failslab+0xc2/0x120 [ 288.772563][T10247] __kmalloc_cache_noprof+0x7a/0x6f0 [ 288.772603][T10247] ? rand_initialize_disk+0x4a/0xb2 [ 288.772648][T10247] rand_initialize_disk+0x4a/0xb2 [ 288.772683][T10247] __alloc_disk_node+0x322/0x6b0 [ 288.772728][T10247] __blk_mq_alloc_disk+0x89/0x120 [ 288.772765][T10247] loop_add+0x498/0xb60 [ 288.772803][T10247] ? __pfx_loop_add+0x10/0x10 [ 288.772863][T10247] loop_control_ioctl+0xae/0x620 [ 288.772900][T10247] ? __pfx_loop_control_ioctl+0x10/0x10 [ 288.772935][T10247] ? xfd_validate_state+0x129/0x190 [ 288.772978][T10247] ? __pfx_loop_control_ioctl+0x10/0x10 [ 288.773015][T10247] __x64_sys_ioctl+0x18e/0x210 [ 288.773060][T10247] do_syscall_64+0x106/0xf80 [ 288.773094][T10247] ? clear_bhb_loop+0x40/0x90 [ 288.773130][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.773161][T10247] RIP: 0033:0x7f2738b9c799 [ 288.773185][T10247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.773213][T10247] RSP: 002b:00007f2739b09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.773244][T10247] RAX: ffffffffffffffda RBX: 00007f2738e16090 RCX: 00007f2738b9c799 [ 288.773264][T10247] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000001 [ 288.773282][T10247] RBP: 00007f2738c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 288.773299][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.773317][T10247] R13: 00007f2738e16128 R14: 00007f2738e16090 R15: 00007ffc92bd4f58 [ 288.773355][T10247] [ 289.219018][T10252] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 289.368768][T10239] netlink: 'syz.2.880': attribute type 33 has an invalid length. [ 290.529039][T10278] zswap: compressor not available [ 292.188465][T10338] usb usb27: usbfs: interface 0 claimed by hub while 'syz.3.897' sets config #131073 [ 293.484242][T10369] futex_wake_op: syz.4.901 tries to shift op by -2048; fix this program [ 293.537278][T10369] futex_wake_op: syz.4.901 tries to shift op by -2048; fix this program [ 293.797519][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 294.031228][T10392] usb usb27: usbfs: interface 0 claimed by hub while 'syz.3.906' sets config #131073 [ 295.137174][T10416] FAULT_INJECTION: forcing a failure. [ 295.137174][T10416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.233180][T10416] CPU: 0 UID: 0 PID: 10416 Comm: syz.1.911 Tainted: G U L syzkaller #0 PREEMPT(full) [ 295.233214][T10416] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 295.233220][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.233229][T10416] Call Trace: [ 295.233234][T10416] [ 295.233240][T10416] dump_stack_lvl+0x100/0x190 [ 295.233267][T10416] should_fail_ex.cold+0x5/0xa [ 295.233284][T10416] _copy_from_user+0x2e/0xd0 [ 295.233300][T10416] kstrtouint_from_user+0xd6/0x1d0 [ 295.233320][T10416] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 295.233338][T10416] ? __lock_acquire+0x4a5/0x2630 [ 295.233365][T10416] ? lock_acquire+0x1cf/0x380 [ 295.233387][T10416] proc_fail_nth_write+0x83/0x220 [ 295.233406][T10416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.233429][T10416] vfs_write+0x2aa/0x1070 [ 295.233453][T10416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.233472][T10416] ? __pfx_vfs_write+0x10/0x10 [ 295.233494][T10416] ? __fget_files+0x215/0x3d0 [ 295.233512][T10416] ? __fget_files+0x21f/0x3d0 [ 295.233531][T10416] ksys_write+0x12a/0x250 [ 295.233543][T10416] ? __pfx_ksys_write+0x10/0x10 [ 295.233562][T10416] do_syscall_64+0x106/0xf80 [ 295.233580][T10416] ? clear_bhb_loop+0x40/0x90 [ 295.233598][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.233613][T10416] RIP: 0033:0x7fb682d5cfce [ 295.233626][T10416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.233640][T10416] RSP: 002b:00007fb683cd8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.233655][T10416] RAX: ffffffffffffffda RBX: 00007fb683cd96c0 RCX: 00007fb682d5cfce [ 295.233664][T10416] RDX: 0000000000000001 RSI: 00007fb683cd90a0 RDI: 0000000000000004 [ 295.233673][T10416] RBP: 00007fb683cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 295.233681][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.233690][T10416] R13: 00007fb683016128 R14: 00007fb683016090 R15: 00007ffce7e2bd18 [ 295.233709][T10416] [ 295.607411][T10423] netlink: 'syz.2.913': attribute type 21 has an invalid length. [ 295.615182][T10423] netlink: 334 bytes leftover after parsing attributes in process `syz.2.913'. [ 295.903123][T10436] usb usb27: usbfs: interface 0 claimed by hub while 'syz.4.916' sets config #131073 [ 296.920237][T10458] netlink: 'syz.2.921': attribute type 11 has an invalid length. [ 297.004791][T10458] netlink: 'syz.2.921': attribute type 11 has an invalid length. [ 297.027418][T10463] netlink: 62 bytes leftover after parsing attributes in process `syz.3.922'. [ 297.755556][T10479] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 297.798780][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 298.475807][T10504] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 298.635333][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.932'. [ 298.823211][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 298.835448][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 299.449409][T10528] bridge0: port 2(gretap0) entered blocking state [ 299.455908][T10528] bridge0: port 2(gretap0) entered disabled state [ 299.495591][T10528] gretap0: entered allmulticast mode [ 299.520087][T10528] FAULT_INJECTION: forcing a failure. [ 299.520087][T10528] name failslab, interval 1, probability 0, space 0, times 0 [ 299.542012][T10528] CPU: 0 UID: 0 PID: 10528 Comm: syz.2.937 Tainted: G U L syzkaller #0 PREEMPT(full) [ 299.542053][T10528] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 299.542059][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.542068][T10528] Call Trace: [ 299.542074][T10528] [ 299.542080][T10528] dump_stack_lvl+0x100/0x190 [ 299.542113][T10528] should_fail_ex.cold+0x5/0xa [ 299.542133][T10528] should_failslab+0xc2/0x120 [ 299.542149][T10528] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 299.542171][T10528] ? __kernfs_new_node+0xd2/0x960 [ 299.542191][T10528] ? kstrdup+0xb3/0xe0 [ 299.542215][T10528] __kernfs_new_node+0xd2/0x960 [ 299.542238][T10528] ? __pfx___kernfs_new_node+0x10/0x10 [ 299.542262][T10528] ? find_held_lock+0x2b/0x80 [ 299.542276][T10528] ? kernfs_root+0xee/0x2a0 [ 299.542295][T10528] ? kernfs_root+0xee/0x2a0 [ 299.542318][T10528] kernfs_new_node+0x11b/0x1a0 [ 299.542343][T10528] kernfs_create_link+0xcc/0x240 [ 299.542362][T10528] sysfs_do_create_link_sd+0x90/0x140 [ 299.542383][T10528] sysfs_create_link+0x61/0xc0 [ 299.542402][T10528] __netdev_adjacent_dev_insert+0x819/0xbf0 [ 299.542423][T10528] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 299.542447][T10528] __netdev_upper_dev_link+0x3d8/0x7e0 [ 299.542471][T10528] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 299.542491][T10528] ? kernfs_root+0xf8/0x2a0 [ 299.542513][T10528] ? kernfs_add_one+0x214/0x850 [ 299.542541][T10528] netdev_master_upper_dev_link+0x9f/0xd0 [ 299.542563][T10528] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 299.542587][T10528] ? lockdep_rtnl_is_held+0x26/0x40 [ 299.542608][T10528] ? netdev_is_rx_handler_busy+0x83/0x140 [ 299.542630][T10528] br_add_if+0x9fd/0x1b40 [ 299.542647][T10528] ? security_capable+0x80/0x260 [ 299.542671][T10528] add_del_if+0x114/0x160 [ 299.542689][T10528] br_dev_siocdevprivate+0x8ac/0x1650 [ 299.542709][T10528] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 299.542735][T10528] ? lock_acquire+0x1cf/0x380 [ 299.542761][T10528] ? netdev_name_node_lookup+0x107/0x150 [ 299.542775][T10528] ? __mutex_lock+0x26a/0x1b90 [ 299.542796][T10528] dev_ifsioc+0xc1e/0x1e90 [ 299.542814][T10528] ? __pfx_dev_ifsioc+0x10/0x10 [ 299.542829][T10528] ? __pfx___mutex_lock+0x10/0x10 [ 299.542853][T10528] ? dev_load+0x8e/0x240 [ 299.542867][T10528] ? dev_load+0x8e/0x240 [ 299.542887][T10528] dev_ioctl+0x70e/0x1070 [ 299.542905][T10528] sock_ioctl+0x494/0x6b0 [ 299.542928][T10528] ? __pfx_sock_ioctl+0x10/0x10 [ 299.542949][T10528] ? hook_file_ioctl_common+0x146/0x410 [ 299.542976][T10528] ? __fget_files+0x21f/0x3d0 [ 299.542992][T10528] ? __pfx_sock_ioctl+0x10/0x10 [ 299.543014][T10528] __x64_sys_ioctl+0x18e/0x210 [ 299.543037][T10528] do_syscall_64+0x106/0xf80 [ 299.543054][T10528] ? clear_bhb_loop+0x40/0x90 [ 299.543071][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.543087][T10528] RIP: 0033:0x7f76cc99c799 [ 299.543100][T10528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.543123][T10528] RSP: 002b:00007f76cd7db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.543138][T10528] RAX: ffffffffffffffda RBX: 00007f76ccc15fa0 RCX: 00007f76cc99c799 [ 299.543148][T10528] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 299.543157][T10528] RBP: 00007f76cca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 299.543166][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.543175][T10528] R13: 00007f76ccc16038 R14: 00007f76ccc15fa0 R15: 00007ffd40606908 [ 299.543196][T10528] [ 299.548063][T10528] gretap0: left allmulticast mode [ 300.334688][T10542] futex_wake_op: syz.1.943 tries to shift op by -2048; fix this program [ 300.355827][T10542] futex_wake_op: syz.1.943 tries to shift op by -2048; fix this program [ 300.506799][T10542] ptp ptp0: new virtual clock ptp1 [ 300.557623][T10542] ptp ptp0: new virtual clock ptp2 [ 300.586604][T10542] ptp ptp0: new virtual clock ptp3 [ 300.598324][T10542] ptp ptp0: guarantee physical clock free running [ 302.208870][T10588] dyndbg: bad flag-op p, at start of print-parent [ 302.230607][T10588] dyndbg: flags parse failed [ 302.235376][T10588] dyndbg: bad flag-op n, at start of nosym-o [ 302.249339][T10588] dyndbg: flags parse failed [ 302.402624][T10592] IPVS: length: 7562853 != 24 [ 303.567352][T10615] Console: switching to colour VGA+ 80x25 [ 303.716666][T10623] cgroup: fork rejected by pids controller in /syz1 [ 306.496587][T10729] Invalid ELF header magic: != ELF [ 307.543981][T10771] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 307.593177][T10771] netlink: 'syz.1.971': attribute type 6 has an invalid length. [ 308.039057][T10781] zswap: compressor 000 not available [ 309.784115][ T29] audit: type=1800 audit(4294976205.073:11): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.974" name="dbroot" dev="configfs" ino=36030 res=0 errno=0 [ 310.219861][T10853] netlink: 334 bytes leftover after parsing attributes in process `syz.3.983'. [ 310.713625][T10858] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 311.956215][T10032] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 311.963702][T10032] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 313.665800][T10922] program syz.3.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.616643][T10940] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1004'. [ 314.678853][T10939] FAULT_INJECTION: forcing a failure. [ 314.678853][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 314.735720][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.2.1003 Tainted: G U L syzkaller #0 PREEMPT(full) [ 314.735774][T10939] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 314.735786][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.735804][T10939] Call Trace: [ 314.735814][T10939] [ 314.735825][T10939] dump_stack_lvl+0x100/0x190 [ 314.735876][T10939] should_fail_ex.cold+0x5/0xa [ 314.735912][T10939] should_failslab+0xc2/0x120 [ 314.735942][T10939] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 314.735989][T10939] ? snd_timer_instance_new+0x65/0x2e0 [ 314.736051][T10939] kstrdup+0x51/0xe0 [ 314.736097][T10939] snd_timer_instance_new+0x65/0x2e0 [ 314.736162][T10939] __snd_timer_user_ioctl.isra.0+0xbe6/0x27c0 [ 314.736199][T10939] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 314.736240][T10939] ? rcu_is_watching+0x12/0xc0 [ 314.736293][T10939] ? snd_timer_user_ioctl+0x4a/0xd0 [ 314.736325][T10939] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 314.736368][T10939] ? __pfx___mutex_lock+0x10/0x10 [ 314.736412][T10939] ? find_held_lock+0x2b/0x80 [ 314.736464][T10939] snd_timer_user_ioctl+0x76/0xd0 [ 314.736494][T10939] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 314.736526][T10939] __x64_sys_ioctl+0x18e/0x210 [ 314.736564][T10939] do_syscall_64+0x106/0xf80 [ 314.736596][T10939] ? clear_bhb_loop+0x40/0x90 [ 314.736631][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.736661][T10939] RIP: 0033:0x7f76cc99c799 [ 314.736684][T10939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.736711][T10939] RSP: 002b:00007f76cd7db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.736737][T10939] RAX: ffffffffffffffda RBX: 00007f76ccc15fa0 RCX: 00007f76cc99c799 [ 314.736757][T10939] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000002 [ 314.736775][T10939] RBP: 00007f76cca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 314.736792][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.736809][T10939] R13: 00007f76ccc16038 R14: 00007f76ccc15fa0 R15: 00007ffd40606908 [ 314.736848][T10939] [ 315.418879][T10969] usb usb27: usbfs: interface 0 claimed by hub while 'syz.2.1011' sets config #131073 [ 315.963602][ T29] audit: type=1800 audit(4294976211.250:12): pid=10995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1015" name="dbroot" dev="configfs" ino=35326 res=0 errno=0 [ 316.011375][T10995] db_root: cannot open: /dev/audio1 [ 316.016630][T10995] db_root: not a directory: /dev/audio1 [ 317.363170][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.369593][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.956732][T11044] FAULT_INJECTION: forcing a failure. [ 317.956732][T11044] name fail_futex, interval 1, probability 0, space 0, times 0 [ 317.969681][T11044] CPU: 1 UID: 0 PID: 11044 Comm: syz.1.1021 Tainted: G U L syzkaller #0 PREEMPT(full) [ 317.969730][T11044] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 317.969741][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.969758][T11044] Call Trace: [ 317.969767][T11044] [ 317.969777][T11044] dump_stack_lvl+0x100/0x190 [ 317.969826][T11044] should_fail_ex.cold+0x5/0xa [ 317.969856][T11044] should_fail_futex+0x4c/0x60 [ 317.969890][T11044] futex_lock_pi_atomic+0x12d/0xaf0 [ 317.969940][T11044] futex_lock_pi+0x246/0x7b0 [ 317.969987][T11044] ? __pfx_futex_lock_pi+0x10/0x10 [ 317.970023][T11044] ? preempt_schedule_common+0x42/0xc0 [ 317.970057][T11044] ? preempt_schedule_thunk+0x16/0x30 [ 317.970101][T11044] ? __pfx_try_to_wake_up+0x10/0x10 [ 317.970138][T11044] ? futex_private_hash_put+0x107/0x1c0 [ 317.970182][T11044] ? __pfx_futex_wake_mark+0x10/0x10 [ 317.970232][T11044] ? ksys_write+0x190/0x250 [ 317.970254][T11044] ? ksys_write+0x190/0x250 [ 317.970285][T11044] do_futex+0x18a/0x350 [ 317.970322][T11044] ? __pfx_do_futex+0x10/0x10 [ 317.970367][T11044] __x64_sys_futex+0x34f/0x4d0 [ 317.970407][T11044] ? __pfx___x64_sys_futex+0x10/0x10 [ 317.970457][T11044] do_syscall_64+0x106/0xf80 [ 317.970490][T11044] ? clear_bhb_loop+0x40/0x90 [ 317.970524][T11044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.970553][T11044] RIP: 0033:0x7fb682d9c799 [ 317.970578][T11044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.970605][T11044] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.970630][T11044] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 317.970648][T11044] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 317.970665][T11044] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 000000008000fff5 [ 317.970681][T11044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.970698][T11044] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 317.970733][T11044] [ 319.457366][ T29] audit: type=1800 audit(4294976214.738:13): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1029" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 319.729943][T11103] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 321.830336][T11159] zswap: compressor not available [ 322.013965][T11163] FAULT_INJECTION: forcing a failure. [ 322.013965][T11163] name failslab, interval 1, probability 0, space 0, times 0 [ 322.042756][T11163] CPU: 0 UID: 0 PID: 11163 Comm: syz.3.1040 Tainted: G U L syzkaller #0 PREEMPT(full) [ 322.042786][T11163] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 322.042792][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.042802][T11163] Call Trace: [ 322.042807][T11163] [ 322.042814][T11163] dump_stack_lvl+0x100/0x190 [ 322.042841][T11163] should_fail_ex.cold+0x5/0xa [ 322.042859][T11163] ? tomoyo_realpath_from_path+0xb6/0x690 [ 322.042877][T11163] should_failslab+0xc2/0x120 [ 322.042893][T11163] __kmalloc_noprof+0xe0/0x850 [ 322.042920][T11163] tomoyo_realpath_from_path+0xb6/0x690 [ 322.042942][T11163] tomoyo_path_number_perm+0x23c/0x580 [ 322.042967][T11163] ? tomoyo_path_number_perm+0x22e/0x580 [ 322.042991][T11163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 322.043033][T11163] ? find_held_lock+0x2b/0x80 [ 322.043047][T11163] ? current_check_access_path+0x281/0x460 [ 322.043064][T11163] ? __pfx_current_check_access_path+0x10/0x10 [ 322.043081][T11163] ? d_alloc_parallel+0x864/0x14e0 [ 322.043105][T11163] tomoyo_path_mknod+0x164/0x190 [ 322.043125][T11163] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 322.043142][T11163] ? find_held_lock+0x2b/0x80 [ 322.043157][T11163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.043183][T11163] security_path_mknod+0x161/0x300 [ 322.043202][T11163] may_o_create+0x30/0x3a0 [ 322.043223][T11163] lookup_open.isra.0+0xa0d/0x11b0 [ 322.043248][T11163] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 322.043273][T11163] ? __pfx___might_resched+0x10/0x10 [ 322.043293][T11163] ? mnt_get_write_access+0x52/0x2f0 [ 322.043315][T11163] ? __pfx_down_write+0x10/0x10 [ 322.043335][T11163] ? mnt_get_write_access+0x1e9/0x2f0 [ 322.043357][T11163] path_openat+0x2291/0x31a0 [ 322.043378][T11163] ? __pfx_path_openat+0x10/0x10 [ 322.043401][T11163] do_file_open+0x20e/0x430 [ 322.043417][T11163] ? __pfx_do_file_open+0x10/0x10 [ 322.043454][T11163] ? alloc_fd+0x476/0x790 [ 322.043471][T11163] ? do_getname+0x191/0x390 [ 322.043491][T11163] do_sys_openat2+0x10d/0x1e0 [ 322.043511][T11163] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.043532][T11163] ? kfree+0x2ec/0x6b0 [ 322.043556][T11163] __x64_sys_openat+0x12d/0x210 [ 322.043575][T11163] ? __pfx___x64_sys_openat+0x10/0x10 [ 322.043602][T11163] do_syscall_64+0x106/0xf80 [ 322.043619][T11163] ? clear_bhb_loop+0x40/0x90 [ 322.043637][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.043652][T11163] RIP: 0033:0x7febaad9c799 [ 322.043666][T11163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.043681][T11163] RSP: 002b:00007feba8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 322.043696][T11163] RAX: ffffffffffffffda RBX: 00007febab016090 RCX: 00007febaad9c799 [ 322.043706][T11163] RDX: 0000000000000040 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 322.043716][T11163] RBP: 00007febaae32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 322.043725][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.043734][T11163] R13: 00007febab016128 R14: 00007febab016090 R15: 00007fff5771ca18 [ 322.043754][T11163] [ 322.043761][T11163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 323.120664][T11186] random: crng reseeded on system resumption [ 323.182706][T11186] ubi10: attaching mtd0 [ 323.186936][T11186] ubi10 error: ubi_attach_mtd_dev: bad VID header (36838) or data offsets (36902) [ 323.264642][T11188] FAULT_INJECTION: forcing a failure. [ 323.264642][T11188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.313828][T11188] CPU: 1 UID: 0 PID: 11188 Comm: syz.2.1043 Tainted: G U L syzkaller #0 PREEMPT(full) [ 323.313878][T11188] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 323.313888][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.313904][T11188] Call Trace: [ 323.313912][T11188] [ 323.313922][T11188] dump_stack_lvl+0x100/0x190 [ 323.313969][T11188] should_fail_ex.cold+0x5/0xa [ 323.313997][T11188] ? prepare_alloc_pages+0x16d/0x5f0 [ 323.314033][T11188] should_fail_alloc_page+0xeb/0x140 [ 323.314066][T11188] prepare_alloc_pages+0x1f0/0x5f0 [ 323.314104][T11188] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 323.314142][T11188] ? do_syscall_64+0x81/0xf80 [ 323.314193][T11188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.314250][T11188] ? rcu_is_watching+0x12/0xc0 [ 323.314301][T11188] ? trace_kmalloc+0x101/0x130 [ 323.314331][T11188] ? __kasan_kmalloc+0xaa/0xb0 [ 323.314373][T11188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.314421][T11188] ? policy_nodemask+0xed/0x4f0 [ 323.314453][T11188] alloc_pages_mpol+0x1fb/0x550 [ 323.314483][T11188] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 323.314510][T11188] ? __alloc_skb+0x5b7/0x710 [ 323.314539][T11188] ? __pfx___alloc_skb+0x10/0x10 [ 323.314569][T11188] ? finish_task_switch.isra.0+0x200/0xb80 [ 323.314605][T11188] alloc_pages_noprof+0x131/0x390 [ 323.314637][T11188] alloc_skb_with_frags+0x500/0x810 [ 323.314685][T11188] sock_alloc_send_pskb+0x801/0x980 [ 323.314726][T11188] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 323.314775][T11188] tun_get_user+0x8f7/0x3e10 [ 323.314829][T11188] ? __pfx_tun_get_user+0x10/0x10 [ 323.314873][T11188] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 323.314916][T11188] ? find_held_lock+0x2b/0x80 [ 323.314942][T11188] ? tun_get+0x191/0x370 [ 323.314977][T11188] ? tun_get+0x191/0x370 [ 323.315025][T11188] tun_chr_write_iter+0xdc/0x200 [ 323.315068][T11188] vfs_write+0x6ac/0x1070 [ 323.315113][T11188] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 323.315158][T11188] ? __pfx_vfs_write+0x10/0x10 [ 323.315198][T11188] ? find_held_lock+0x2b/0x80 [ 323.315247][T11188] __x64_sys_pwrite64+0x1eb/0x250 [ 323.315278][T11188] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 323.315328][T11188] do_syscall_64+0x106/0xf80 [ 323.315362][T11188] ? clear_bhb_loop+0x40/0x90 [ 323.315399][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.315429][T11188] RIP: 0033:0x7f76cc99c799 [ 323.315454][T11188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.315481][T11188] RSP: 002b:00007f76cd7db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 323.315533][T11188] RAX: ffffffffffffffda RBX: 00007f76ccc15fa0 RCX: 00007f76cc99c799 [ 323.315554][T11188] RDX: 000000000000fdf0 RSI: 0000200000000140 RDI: 00000000000000c8 [ 323.315572][T11188] RBP: 00007f76cca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 323.315590][T11188] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000000 [ 323.315607][T11188] R13: 00007f76ccc16038 R14: 00007f76ccc15fa0 R15: 00007ffd40606908 [ 323.315646][T11188] [ 323.741871][T11192] usb usb27: usbfs: interface 0 claimed by hub while 'syz.1.1044' sets config #131073 [ 324.220776][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 324.500668][T11209] FAULT_INJECTION: forcing a failure. [ 324.500668][T11209] name failslab, interval 1, probability 0, space 0, times 0 [ 324.531793][T11209] CPU: 1 UID: 0 PID: 11209 Comm: syz.4.1045 Tainted: G U L syzkaller #0 PREEMPT(full) [ 324.531846][T11209] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 324.531857][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.531875][T11209] Call Trace: [ 324.531885][T11209] [ 324.531896][T11209] dump_stack_lvl+0x100/0x190 [ 324.531943][T11209] should_fail_ex.cold+0x5/0xa [ 324.531979][T11209] should_failslab+0xc2/0x120 [ 324.532008][T11209] __kmalloc_cache_noprof+0x7a/0x6f0 [ 324.532046][T11209] ? vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 324.532094][T11209] vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 324.532132][T11209] drm_atomic_get_crtc_state+0x1de/0x620 [ 324.532196][T11209] drm_atomic_get_plane_state+0x4a3/0x760 [ 324.532252][T11209] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 324.532290][T11209] ? trace_contention_end+0x140/0x180 [ 324.532333][T11209] ? __mutex_lock+0x26a/0x1b90 [ 324.532369][T11209] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 324.532406][T11209] ? drm_master_internal_acquire+0x21/0x80 [ 324.532478][T11209] drm_client_modeset_commit_locked+0x14d/0x580 [ 324.532521][T11209] drm_client_modeset_commit+0x4f/0x80 [ 324.532556][T11209] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 324.532601][T11209] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 324.532640][T11209] drm_fbdev_client_restore+0x1b/0x30 [ 324.532684][T11209] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 324.532727][T11209] drm_client_dev_restore+0x205/0x2a0 [ 324.532769][T11209] drm_release+0x2c6/0x360 [ 324.532800][T11209] ? __pfx_drm_release+0x10/0x10 [ 324.532831][T11209] __fput+0x3ff/0xb40 [ 324.532872][T11209] task_work_run+0x150/0x240 [ 324.532914][T11209] ? __pfx_task_work_run+0x10/0x10 [ 324.532965][T11209] exit_to_user_mode_loop+0x100/0x4a0 [ 324.533006][T11209] do_syscall_64+0x668/0xf80 [ 324.533039][T11209] ? clear_bhb_loop+0x40/0x90 [ 324.533074][T11209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.533104][T11209] RIP: 0033:0x7f2738b9c799 [ 324.533128][T11209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.533155][T11209] RSP: 002b:00007f2739b2a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 324.533183][T11209] RAX: 0000000000000000 RBX: 00007f2738e15fa0 RCX: 00007f2738b9c799 [ 324.533209][T11209] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 324.533226][T11209] RBP: 00007f2738c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 324.533243][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.533260][T11209] R13: 00007f2738e16038 R14: 00007f2738e15fa0 R15: 00007ffc92bd4f58 [ 324.533300][T11209] [ 338.086664][ T29] audit: type=1800 audit(2147483662.142:14): pid=11439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=38371 res=0 errno=0 [ 339.324484][T11469] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 340.204991][T11493] ubi31: attaching mtd0 [ 340.213063][T11496] FAULT_INJECTION: forcing a failure. [ 340.213063][T11496] name failslab, interval 1, probability 0, space 0, times 0 [ 340.232074][T11493] ubi31: scanning is finished [ 340.236869][T11493] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 340.253048][T11496] CPU: 0 UID: 0 PID: 11496 Comm: syz.1.1111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 340.253095][T11496] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 340.253115][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.253131][T11496] Call Trace: [ 340.253140][T11496] [ 340.253150][T11496] dump_stack_lvl+0x100/0x190 [ 340.253194][T11496] should_fail_ex.cold+0x5/0xa [ 340.253226][T11496] should_failslab+0xc2/0x120 [ 340.253256][T11496] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 340.253296][T11496] ? ptlock_alloc+0x1f/0x70 [ 340.253338][T11496] ptlock_alloc+0x1f/0x70 [ 340.253372][T11496] pte_alloc_one+0x84/0x3e0 [ 340.253404][T11496] __pte_alloc+0x6d/0x3f0 [ 340.253431][T11496] ? __pfx___pte_alloc+0x10/0x10 [ 340.253461][T11496] ? walk_to_pmd+0x302/0x4c0 [ 340.253495][T11496] get_locked_pte+0xa1/0xc0 [ 340.253529][T11496] insert_page+0xcc/0x220 [ 340.253562][T11496] ? __pfx_insert_page+0x10/0x10 [ 340.253591][T11496] ? __pfx_down_read_trylock+0x10/0x10 [ 340.253631][T11496] vm_insert_page+0x2c0/0x400 [ 340.253659][T11496] kcov_mmap+0xca/0x130 [ 340.253701][T11496] __mmap_region+0x1443/0x29e0 [ 340.253745][T11496] ? __pfx___mmap_region+0x10/0x10 [ 340.253786][T11496] ? find_held_lock+0x2b/0x80 [ 340.253812][T11496] ? ima_match_policy+0x8c4/0x2350 [ 340.253838][T11496] ? ima_match_policy+0x8c4/0x2350 [ 340.253897][T11496] ? find_held_lock+0x2b/0x80 [ 340.253922][T11496] ? process_measurement+0x4c8/0x2350 [ 340.253958][T11496] ? process_measurement+0x4c8/0x2350 [ 340.254008][T11496] ? process_measurement+0x1f4/0x2350 [ 340.254115][T11496] mmap_region+0x30a/0x3e0 [ 340.254161][T11496] do_mmap+0xc63/0x12f0 [ 340.254199][T11496] ? __pfx_do_mmap+0x10/0x10 [ 340.254228][T11496] ? __pfx_down_write_killable+0x10/0x10 [ 340.254292][T11496] vm_mmap_pgoff+0x29e/0x470 [ 340.254331][T11496] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 340.254359][T11496] ? __fget_files+0x215/0x3d0 [ 340.254391][T11496] ? __fget_files+0x21f/0x3d0 [ 340.254424][T11496] ksys_mmap_pgoff+0x3c8/0x650 [ 340.254453][T11496] ? __x64_sys_futex+0x34f/0x4d0 [ 340.254486][T11496] ? __x64_sys_futex+0x358/0x4d0 [ 340.254521][T11496] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 340.254550][T11496] ? xfd_validate_state+0x129/0x190 [ 340.254595][T11496] __x64_sys_mmap+0x125/0x190 [ 340.254637][T11496] do_syscall_64+0x106/0xf80 [ 340.254669][T11496] ? clear_bhb_loop+0x40/0x90 [ 340.254703][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.254731][T11496] RIP: 0033:0x7fb682d9c799 [ 340.254754][T11496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.254781][T11496] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 340.254807][T11496] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 340.254826][T11496] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000012000 [ 340.254842][T11496] RBP: 00007fb682e32bd9 R08: 00000000000000dd R09: 0000000000000000 [ 340.254859][T11496] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 340.254875][T11496] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 340.254913][T11496] [ 340.254967][T11496] kcov: kcov: vm_insert_page() failed [ 340.763804][T11493] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 340.936184][T11512] Zero length message leads to an empty skb [ 341.290487][T11516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.823688][T11561] syz.2.1124 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 342.939901][T10024] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.955663][T10024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.967330][T10024] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.001288][T10024] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.009128][T10024] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.154112][T11567] smpboot: CPU 1 is now offline [ 343.195621][T11571] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1125'. [ 344.203754][T11578] sg_write: data in/out 220/90 bytes for SCSI command 0x0-- guessing data in; [ 344.203754][T11578] program syz.1.1127 not setting count and/or reply_len properly [ 344.385477][T11566] chnl_net:caif_netlink_parms(): no params data found [ 344.920272][T11566] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.952615][T11566] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.992731][T11566] bridge_slave_0: entered allmulticast mode [ 345.031628][T11566] bridge_slave_0: entered promiscuous mode [ 345.070909][T11566] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.126113][T11566] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.133466][T10024] Bluetooth: hci4: command tx timeout [ 345.167190][T11566] bridge_slave_1: entered allmulticast mode [ 345.207294][T11566] bridge_slave_1: entered promiscuous mode [ 345.264814][T11607] program syz.2.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.331419][T11566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.377536][T11610] FAULT_INJECTION: forcing a failure. [ 345.377536][T11610] name failslab, interval 1, probability 0, space 0, times 0 [ 345.398164][T11566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.439679][T11610] CPU: 0 UID: 0 PID: 11610 Comm: syz.1.1135 Tainted: G U L syzkaller #0 PREEMPT(full) [ 345.439708][T11610] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 345.439715][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.439725][T11610] Call Trace: [ 345.439732][T11610] [ 345.439738][T11610] dump_stack_lvl+0x100/0x190 [ 345.439766][T11610] should_fail_ex.cold+0x5/0xa [ 345.439785][T11610] should_failslab+0xc2/0x120 [ 345.439801][T11610] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 345.439824][T11610] ? sk_prot_alloc+0x60/0x2a0 [ 345.439848][T11610] sk_prot_alloc+0x60/0x2a0 [ 345.439870][T11610] sk_alloc+0x36/0xe80 [ 345.439886][T11610] inet6_create+0x385/0x12b0 [ 345.439906][T11610] ? inet6_create+0x7f/0x12b0 [ 345.439926][T11610] __sock_create+0x339/0x860 [ 345.439952][T11610] __sys_socket+0x14d/0x260 [ 345.439966][T11610] ? __pfx___sys_socket+0x10/0x10 [ 345.439985][T11610] __x64_sys_socket+0x72/0xb0 [ 345.439998][T11610] ? lockdep_hardirqs_on+0x78/0x100 [ 345.440016][T11610] do_syscall_64+0x106/0xf80 [ 345.440033][T11610] ? clear_bhb_loop+0x40/0x90 [ 345.440050][T11610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.440066][T11610] RIP: 0033:0x7fb682d9c799 [ 345.440079][T11610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.440099][T11610] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 345.440114][T11610] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 345.440125][T11610] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 345.440206][T11610] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 345.440215][T11610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.440225][T11610] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 345.440245][T11610] [ 346.115434][T11615] vivid-012: ================= START STATUS ================= [ 346.136207][T11615] vivid-012: Radio HW Seek Mode: Bounded [ 346.142093][T11615] vivid-012: Radio Programmable HW Seek: false [ 346.200465][T11615] vivid-012: RDS Rx I/O Mode: Block I/O [ 346.262574][T11615] vivid-012: Generate RBDS Instead of RDS: false [ 346.305734][T11626] mmap: syz.1.1139 (11626) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 346.365671][T11615] vivid-012: RDS Reception: true [ 346.370767][T11615] vivid-012: RDS Program Type: 0 inactive [ 346.451038][T11615] vivid-012: RDS PS Name: inactive [ 346.477610][T11615] vivid-012: RDS Radio Text: inactive [ 346.502724][T11615] vivid-012: RDS Traffic Announcement: false inactive [ 346.535436][T11615] vivid-012: RDS Traffic Program: false inactive [ 346.583986][T11615] vivid-012: RDS Music: false inactive [ 346.615506][T11615] vivid-012: ================== END STATUS ================== [ 346.628766][T11249] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:16: bg 4: bad block bitmap checksum [ 346.705680][T11249] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 346.772506][T11566] team0: Port device team_slave_0 added [ 346.792887][T11249] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.792887][T11249] [ 346.842452][T11566] team0: Port device team_slave_1 added [ 347.006773][T11636] process 'syz.2.1142' launched ':,' with NULL argv: empty string added [ 347.043816][T11566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.072119][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.193505][T11566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.212953][T10024] Bluetooth: hci4: command tx timeout [ 347.276665][T11566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.305030][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.373980][T11566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.602840][T11566] hsr_slave_0: entered promiscuous mode [ 347.620181][T11566] hsr_slave_1: entered promiscuous mode [ 348.356968][T11566] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.426940][T11566] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.452486][T11653] Invalid ELF header magic: != ELF [ 348.503689][T11566] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 348.537954][T11566] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 349.012431][T11566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.106969][T11566] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.176037][T11248] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.183180][T11248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.276667][T11248] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.283841][T11248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.299172][T10024] Bluetooth: hci4: command tx timeout [ 349.671785][T11566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.154497][T11680] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.470933][T11566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.377856][T10024] Bluetooth: hci4: command tx timeout [ 351.468424][T11701] FAULT_INJECTION: forcing a failure. [ 351.468424][T11701] name failslab, interval 1, probability 0, space 0, times 0 [ 351.564666][T11701] CPU: 0 UID: 0 PID: 11701 Comm: syz.1.1156 Tainted: G U L syzkaller #0 PREEMPT(full) [ 351.564695][T11701] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 351.564702][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.564726][T11701] Call Trace: [ 351.564732][T11701] [ 351.564739][T11701] dump_stack_lvl+0x100/0x190 [ 351.564767][T11701] should_fail_ex.cold+0x5/0xa [ 351.564786][T11701] should_failslab+0xc2/0x120 [ 351.564801][T11701] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 351.564824][T11701] ? security_inode_alloc+0x3b/0x2c0 [ 351.564959][T11701] ? lockdep_init_map_type+0x5c/0x250 [ 351.564982][T11701] security_inode_alloc+0x3b/0x2c0 [ 351.565006][T11701] inode_init_always_gfp+0xced/0x1040 [ 351.565024][T11701] alloc_inode+0x8e/0x250 [ 351.565042][T11701] new_inode+0x22/0x1c0 [ 351.565062][T11701] bdev_alloc+0x2b/0x420 [ 351.565105][T11701] ? bdi_init+0x3f4/0x5b0 [ 351.565119][T11701] ? bdi_init+0x49f/0x5b0 [ 351.565135][T11701] __alloc_disk_node+0x116/0x6b0 [ 351.565187][T11701] __blk_mq_alloc_disk+0x89/0x120 [ 351.565232][T11701] loop_add+0x498/0xb60 [ 351.565284][T11701] ? __pfx_loop_add+0x10/0x10 [ 351.565319][T11701] loop_control_ioctl+0xae/0x620 [ 351.565337][T11701] ? __pfx_loop_control_ioctl+0x10/0x10 [ 351.565355][T11701] ? xfd_validate_state+0x129/0x190 [ 351.565378][T11701] ? __pfx_loop_control_ioctl+0x10/0x10 [ 351.565397][T11701] __x64_sys_ioctl+0x18e/0x210 [ 351.565419][T11701] do_syscall_64+0x106/0xf80 [ 351.565451][T11701] ? clear_bhb_loop+0x40/0x90 [ 351.565470][T11701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.565492][T11701] RIP: 0033:0x7fb682d9c799 [ 351.565506][T11701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.565520][T11701] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.565540][T11701] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 351.565551][T11701] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000001 [ 351.565560][T11701] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 351.565569][T11701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.565577][T11701] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 351.565597][T11701] [ 351.813083][T11566] veth0_vlan: entered promiscuous mode [ 351.822877][T11566] veth1_vlan: entered promiscuous mode [ 351.841534][T11566] veth0_macvtap: entered promiscuous mode [ 351.850124][T11566] veth1_macvtap: entered promiscuous mode [ 351.865133][T11566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.875012][T11566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.270238][T11252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.280405][T11252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.373513][T11250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.398388][T11250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.522387][T11566] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 352.733524][T11246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.841301][T11246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.917405][T11248] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 352.974434][T11246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.006478][T11248] EXT4-fs (sda1): This should not happen!! Data will be lost [ 353.006478][T11248] [ 353.023273][T11246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.082706][T11248] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 967 with max blocks 1 with error 117 [ 353.142145][T11248] EXT4-fs (sda1): This should not happen!! Data will be lost [ 353.142145][T11248] [ 353.533245][T11738] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 353.829640][T11743] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1164'. [ 355.376661][T11769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 358.048554][T11816] FAULT_INJECTION: forcing a failure. [ 358.048554][T11816] name failslab, interval 1, probability 0, space 0, times 0 [ 358.148391][T11816] CPU: 0 UID: 0 PID: 11816 Comm: syz.1.1181 Tainted: G U L syzkaller #0 PREEMPT(full) [ 358.148418][T11816] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 358.148424][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.148433][T11816] Call Trace: [ 358.148439][T11816] [ 358.148445][T11816] dump_stack_lvl+0x100/0x190 [ 358.148472][T11816] should_fail_ex.cold+0x5/0xa [ 358.148490][T11816] should_failslab+0xc2/0x120 [ 358.148506][T11816] __kmalloc_cache_noprof+0x7a/0x6f0 [ 358.148525][T11816] ? kernfs_fop_open+0x9f4/0xd50 [ 358.148545][T11816] kernfs_fop_open+0x9f4/0xd50 [ 358.148565][T11816] do_dentry_open+0x6d8/0x1660 [ 358.148579][T11816] ? __pfx_kernfs_fop_open+0x10/0x10 [ 358.148600][T11816] vfs_open+0x82/0x3f0 [ 358.148620][T11816] path_openat+0x208c/0x31a0 [ 358.148638][T11816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.148656][T11816] ? __pfx_path_openat+0x10/0x10 [ 358.148677][T11816] do_file_open+0x20e/0x430 [ 358.148694][T11816] ? __pfx_do_file_open+0x10/0x10 [ 358.148730][T11816] ? _raw_spin_unlock+0x28/0x50 [ 358.148809][T11816] ? alloc_fd+0x476/0x790 [ 358.148829][T11816] do_sys_openat2+0x10d/0x1e0 [ 358.148847][T11816] ? __pfx_do_sys_openat2+0x10/0x10 [ 358.148865][T11816] ? __sock_release+0x184/0x260 [ 358.148923][T11816] __x64_sys_open+0xfe/0x1d0 [ 358.148941][T11816] ? __pfx___x64_sys_open+0x10/0x10 [ 358.148967][T11816] do_syscall_64+0x106/0xf80 [ 358.148985][T11816] ? clear_bhb_loop+0x40/0x90 [ 358.149003][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.149018][T11816] RIP: 0033:0x7fb682d9c799 [ 358.149031][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.149045][T11816] RSP: 002b:00007fb683cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 358.149059][T11816] RAX: ffffffffffffffda RBX: 00007fb683015fa0 RCX: 00007fb682d9c799 [ 358.149069][T11816] RDX: 33903f3ada88772b RSI: 0000000000101840 RDI: 0000200000000040 [ 358.149078][T11816] RBP: 00007fb682e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 358.149087][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.149095][T11816] R13: 00007fb683016038 R14: 00007fb683015fa0 R15: 00007ffce7e2bd18 [ 358.149115][T11816] [ 360.040911][T11850] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 362.218580][T10024] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 362.513564][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1200'. [ 363.557434][T11914] Invalid ELF header magic: != ELF [ 364.267040][T10898] Bluetooth: hci4: command 0x2016 tx timeout [ 364.409602][T11294] ------------[ cut here ]------------ [ 364.409626][T11294] ODEBUG: free active (active state 0) object: ffff888051479460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 364.409738][T11294] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.4.1061/11294 [ 364.409816][T11294] Modules linked in: [ 364.409835][T11294] CPU: 0 UID: 0 PID: 11294 Comm: syz.4.1061 Tainted: G U L syzkaller #0 PREEMPT(full) [ 364.409858][T11294] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 364.409864][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.409873][T11294] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 364.409895][T11294] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d a2 6c e8 0b 41 56 48 8b 14 dd e0 0a 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec 0d de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 364.409910][T11294] RSP: 0000:ffffc90004467708 EFLAGS: 00010246 [ 364.409923][T11294] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 364.409933][T11294] RDX: ffffffff8c1b0a20 RSI: ffffffff8c1b0640 RDI: ffffffff90e43f90 [ 364.409944][T11294] RBP: 0000000000000001 R08: ffff888051479460 R09: ffffffff8bb2b860 [ 364.409954][T11294] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b0640 [ 364.409964][T11294] R13: ffffffff8bb2b8a0 R14: ffffffff8a95d880 R15: ffffc90004467808 [ 364.409974][T11294] FS: 0000000000000000(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 364.409990][T11294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.410000][T11294] CR2: 0000001b2f60bff8 CR3: 0000000052cbe000 CR4: 00000000003526f0 [ 364.410011][T11294] Call Trace: [ 364.410017][T11294] [ 364.410022][T11294] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 364.410038][T11294] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 364.410059][T11294] debug_check_no_obj_freed+0x4da/0x630 [ 364.410087][T11294] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 364.410109][T11294] ? __page_table_check_zero+0x333/0x410 [ 364.410129][T11294] ? __page_table_check_zero+0x338/0x410 [ 364.410147][T11294] __free_frozen_pages+0x392/0x10d0 [ 364.410171][T11294] hci_release_dev+0x4ef/0x630 [ 364.410237][T11294] ? __pfx_hci_release_dev+0x10/0x10 [ 364.410260][T11294] ? device_release+0x69/0x240 [ 364.410304][T11294] ? rcu_is_watching+0x12/0xc0 [ 364.410326][T11294] ? device_release+0x69/0x240 [ 364.410342][T11294] ? kfree+0x2ec/0x6b0 [ 364.410363][T11294] bt_host_release+0x6a/0xb0 [ 364.410404][T11294] ? __pfx_bt_host_release+0x10/0x10 [ 364.410421][T11294] device_release+0xa4/0x240 [ 364.410438][T11294] kobject_put+0x1f7/0x640 [ 364.410507][T11294] put_device+0x1f/0x30 [ 364.410548][T11294] vhci_release+0x185/0x230 [ 364.410590][T11294] ? __pfx_vhci_release+0x10/0x10 [ 364.410605][T11294] __fput+0x3ff/0xb40 [ 364.410627][T11294] task_work_run+0x150/0x240 [ 364.410650][T11294] ? __pfx_task_work_run+0x10/0x10 [ 364.410676][T11294] do_exit+0x8b8/0x2b60 [ 364.410695][T11294] ? __pfx___might_resched+0x10/0x10 [ 364.410717][T11294] ? rcu_is_watching+0x12/0xc0 [ 364.410747][T11294] ? __pfx_do_exit+0x10/0x10 [ 364.410766][T11294] ? do_raw_spin_lock+0x128/0x260 [ 364.410788][T11294] ? find_held_lock+0x2b/0x80 [ 364.410802][T11294] ? get_signal+0x7e0/0x21e0 [ 364.410819][T11294] do_group_exit+0xd5/0x2a0 [ 364.410840][T11294] get_signal+0x1ec7/0x21e0 [ 364.410863][T11294] ? __pfx_get_signal+0x10/0x10 [ 364.410880][T11294] ? do_futex+0x192/0x350 [ 364.411016][T11294] arch_do_signal_or_restart+0x91/0x770 [ 364.411036][T11294] ? __pfx_kernel_move_pages+0x10/0x10 [ 364.411056][T11294] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.411079][T11294] ? xfd_validate_state+0x129/0x190 [ 364.411104][T11294] exit_to_user_mode_loop+0x86/0x4a0 [ 364.411131][T11294] do_syscall_64+0x668/0xf80 [ 364.411150][T11294] ? clear_bhb_loop+0x40/0x90 [ 364.411168][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.411184][T11294] RIP: 0033:0x7f2738b9c799 [ 364.411197][T11294] Code: Unable to access opcode bytes at 0x7f2738b9c76f. [ 364.411205][T11294] RSP: 002b:00007f2739ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 364.411220][T11294] RAX: fffffffffffffff2 RBX: 00007f2738e16180 RCX: 00007f2738b9c799 [ 364.411231][T11294] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 364.411241][T11294] RBP: 00007f2738c32bd9 R08: 0000000000000000 R09: 8000400000000000 [ 364.411251][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.411260][T11294] R13: 00007f2738e16218 R14: 00007f2738e16180 R15: 00007ffc92bd4f58 [ 364.411282][T11294] [ 364.411298][T11294] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 364.411310][T11294] CPU: 0 UID: 0 PID: 11294 Comm: syz.4.1061 Tainted: G U L syzkaller #0 PREEMPT(full) [ 364.411334][T11294] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 364.411340][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.411349][T11294] Call Trace: [ 364.411354][T11294] [ 364.411359][T11294] dump_stack_lvl+0x100/0x190 [ 364.411382][T11294] vpanic+0x552/0x970 [ 364.411397][T11294] ? __pfx_vpanic+0x10/0x10 [ 364.411416][T11294] panic+0xd1/0xe0 [ 364.411430][T11294] ? __pfx_panic+0x10/0x10 [ 364.411449][T11294] ? check_panic_on_warn+0x1f/0x90 [ 364.411471][T11294] check_panic_on_warn.cold+0x19/0x34 [ 364.411487][T11294] ? debug_print_object+0x18e/0x2a0 [ 364.411506][T11294] __warn.cold+0x191/0x348 [ 364.411526][T11294] __report_bug+0x296/0x3d0 [ 364.411567][T11294] ? debug_print_object+0x18e/0x2a0 [ 364.411588][T11294] ? __pfx___report_bug+0x10/0x10 [ 364.411609][T11294] ? unwind_next_frame+0x3c8/0x1ea0 [ 364.411627][T11294] report_bug_entry+0xe1/0x290 [ 364.411643][T11294] ? debug_print_object+0x19b/0x2a0 [ 364.411663][T11294] handle_bug+0x1cd/0x2a0 [ 364.411710][T11294] exc_invalid_op+0x17/0x50 [ 364.411737][T11294] asm_exc_invalid_op+0x1a/0x20 [ 364.411751][T11294] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 364.411771][T11294] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d a2 6c e8 0b 41 56 48 8b 14 dd e0 0a 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec 0d de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 364.411786][T11294] RSP: 0000:ffffc90004467708 EFLAGS: 00010246 [ 364.411798][T11294] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 364.411807][T11294] RDX: ffffffff8c1b0a20 RSI: ffffffff8c1b0640 RDI: ffffffff90e43f90 [ 364.411817][T11294] RBP: 0000000000000001 R08: ffff888051479460 R09: ffffffff8bb2b860 [ 364.411827][T11294] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b0640 [ 364.411836][T11294] R13: ffffffff8bb2b8a0 R14: ffffffff8a95d880 R15: ffffc90004467808 [ 364.411847][T11294] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 364.411869][T11294] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 364.411883][T11294] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 364.411902][T11294] debug_check_no_obj_freed+0x4da/0x630 [ 364.411929][T11294] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 364.411953][T11294] ? __page_table_check_zero+0x333/0x410 [ 364.411972][T11294] ? __page_table_check_zero+0x338/0x410 [ 364.411989][T11294] __free_frozen_pages+0x392/0x10d0 [ 364.412012][T11294] hci_release_dev+0x4ef/0x630 [ 364.412035][T11294] ? __pfx_hci_release_dev+0x10/0x10 [ 364.412057][T11294] ? device_release+0x69/0x240 [ 364.412073][T11294] ? rcu_is_watching+0x12/0xc0 [ 364.412094][T11294] ? device_release+0x69/0x240 [ 364.412109][T11294] ? kfree+0x2ec/0x6b0 [ 364.412129][T11294] bt_host_release+0x6a/0xb0 [ 364.412145][T11294] ? __pfx_bt_host_release+0x10/0x10 [ 364.412161][T11294] device_release+0xa4/0x240 [ 364.412178][T11294] kobject_put+0x1f7/0x640 [ 364.412200][T11294] put_device+0x1f/0x30 [ 364.412216][T11294] vhci_release+0x185/0x230 [ 364.412230][T11294] ? __pfx_vhci_release+0x10/0x10 [ 364.412244][T11294] __fput+0x3ff/0xb40 [ 364.412265][T11294] task_work_run+0x150/0x240 [ 364.412286][T11294] ? __pfx_task_work_run+0x10/0x10 [ 364.412312][T11294] do_exit+0x8b8/0x2b60 [ 364.412329][T11294] ? __pfx___might_resched+0x10/0x10 [ 364.412350][T11294] ? rcu_is_watching+0x12/0xc0 [ 364.412373][T11294] ? __pfx_do_exit+0x10/0x10 [ 364.412392][T11294] ? do_raw_spin_lock+0x128/0x260 [ 364.412412][T11294] ? find_held_lock+0x2b/0x80 [ 364.412425][T11294] ? get_signal+0x7e0/0x21e0 [ 364.412442][T11294] do_group_exit+0xd5/0x2a0 [ 364.412477][T11294] get_signal+0x1ec7/0x21e0 [ 364.412499][T11294] ? __pfx_get_signal+0x10/0x10 [ 364.412515][T11294] ? do_futex+0x192/0x350 [ 364.412535][T11294] arch_do_signal_or_restart+0x91/0x770 [ 364.412552][T11294] ? __pfx_kernel_move_pages+0x10/0x10 [ 364.412571][T11294] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.412594][T11294] ? xfd_validate_state+0x129/0x190 [ 364.412617][T11294] exit_to_user_mode_loop+0x86/0x4a0 [ 364.412638][T11294] do_syscall_64+0x668/0xf80 [ 364.412654][T11294] ? clear_bhb_loop+0x40/0x90 [ 364.412672][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.412687][T11294] RIP: 0033:0x7f2738b9c799 [ 364.412699][T11294] Code: Unable to access opcode bytes at 0x7f2738b9c76f. [ 364.412706][T11294] RSP: 002b:00007f2739ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 364.412720][T11294] RAX: fffffffffffffff2 RBX: 00007f2738e16180 RCX: 00007f2738b9c799 [ 364.412734][T11294] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 364.412744][T11294] RBP: 00007f2738c32bd9 R08: 0000000000000000 R09: 8000400000000000 [ 364.412753][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.412762][T11294] R13: 00007f2738e16218 R14: 00007f2738e16180 R15: 00007ffc92bd4f58 [ 364.412782][T11294] [ 364.412843][T11294] Kernel Offset: disabled