last executing test programs: 3m9.758033076s ago: executing program 0 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) 3m9.52658312s ago: executing program 0 (id=933): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) 3m9.138120758s ago: executing program 0 (id=935): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xd0, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xbc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r0}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c"]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) 3m8.984941754s ago: executing program 0 (id=936): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) write$auto(0x3, 0x0, 0xffd8) (async) write$auto(0x3, 0x0, 0xffd8) r1 = pipe2$auto(0x0, 0x80) fcntl$auto(r1, 0x8, 0xffffffff80000000) (async) fcntl$auto(r1, 0x8, 0xffffffff80000000) 3m8.358956347s ago: executing program 0 (id=939): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0xfffffffd) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x22240, 0x154) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x800, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x180, 0x0) mmap$auto(0x0, 0x0, 0x3, 0xeb1, r1, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd27, 0x25dfdc02, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x11, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xc2801, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r4, 0x0, 0x9) 3m7.042188068s ago: executing program 0 (id=946): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) mlock$auto(0x5, 0x10) mlock$auto(0x7c88, 0x7fff) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) socket(0x2, 0x1, 0x100) socket(0x2, 0x80802, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x2, 0x5, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0x1, 0x8}, 0x6f4) socketpair$auto(0x4001, 0x2, 0xfffffffa, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 2m51.95953587s ago: executing program 32 (id=946): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) mlock$auto(0x5, 0x10) mlock$auto(0x7c88, 0x7fff) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) socket(0x2, 0x1, 0x100) socket(0x2, 0x80802, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x2, 0x5, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0x1, 0x8}, 0x6f4) socketpair$auto(0x4001, 0x2, 0xfffffffa, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 40.917036547s ago: executing program 4 (id=1641): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x1, 0x0, 0x6, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/status.8\x00', 0x103000, 0x0) readv$auto(r1, &(0x7f0000006080)={&(0x7f0000000000)="883b7a462e628109bc5145b5d87dee20ce5a79578d83072b1037ab8d562d9145850c464f1da11c3725d982597ad56aa39e55abfd298e734f466766626bda8eee1d52018a998a25667656028dbeb578c2ae569d88568b12e7f5e5d68d61a10dc0b7c80d8cace06a6c88f0e786c06f1c5a11320c0ab429f7c9ddbadae3fac043c4ad2b08d013e5f2df4cba11aa6c6ef6", 0xba41}, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) adjtimex$auto(&(0x7f00000005c0)={0xfffd, 0x0, 0x6, 0x7, 0x3, 0x7f, 0xfff, 0x0, 0xd, 0x7, 0x592efafe, {0x3, 0xffffffffffffff57}, 0x0, 0x5, 0x853e, 0x5, 0x0, 0x3, 0x401, 0x240000000000, 0x400002, 0x10000, 0x7ff}) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r2, 0x0, 0x100000001, 0x100) bpf$auto(0x0, &(0x7f0000000100)=@raw_tracepoint={0x10000, r2, 0x0, 0x8000000000000000}, 0x198) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/slab/kmalloc-64/shrink\x00', 0x2062, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x4000, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 39.40056694s ago: executing program 4 (id=1647): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xf8, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe4, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r0}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c", @nested={0x28, 0x5, 0x0, 0x1, [@nested={0x24, 0x63, 0x0, 0x1, [@nested={0x20, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x18'}, @nested={0x10, 0x86, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x6}]}, @nested={0x4, 0xc9}]}]}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) 39.26210222s ago: executing program 4 (id=1648): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x4}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) socket(0x29, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 39.174961007s ago: executing program 4 (id=1649): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x8402, 0x0) (async) mmap$auto(0x0, 0x5810, 0xff9, 0x8000000008011, 0x3, 0x0) 39.022780111s ago: executing program 4 (id=1651): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_RTC_PARAM_SET(r2, 0x40187014, &(0x7f0000000040)={0x0, @ptr, 0x9}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000280)="e323d8c5ad97fea71c0fb942db5ead2c0000adc820c68f8b07e4089eaa0a9b000000000277ad3bbcb1f5fde79c4fd4f5200f77b0fcce3a678ac4848cd69c0988e13aded44e18d002eb23cd0e27f576f33d9857324059006819dd", 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/urbs\x00', 0x40200, 0x0) getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/urbs\x00', &(0x7f00000000c0)=0x8) write$auto(0x3, 0x0, 0x7fffffff) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x68, 0x10005) lseek$auto(0x3, 0x8, 0x2) socket(0x1e, 0x1, 0x0) write$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty18\x00', 0x101800, 0x0) ioctl$auto(r4, 0x560d, 0x1) r5 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) pread64$auto(r5, &(0x7f0000000040)=',/+\x00', 0x9, 0x61) 38.199705944s ago: executing program 4 (id=1659): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 23.066454086s ago: executing program 33 (id=1659): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc08c5332, 0x38) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 5.738116279s ago: executing program 5 (id=1793): prctl$auto(0x8, 0x1, 0x0, 0xfffffffffffffff5, 0x80000000) (async) setuid$auto(0xe) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x8, &(0x7f0000000440)=@query={@target_fd, 0x8, 0x7, 0x6, 0x0, @prog_cnt=0x2, 0x0, 0x8ba0, 0x277, 0xa}, 0xf) (async, rerun: 32) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000000), r0) (rerun: 32) open$dir(&(0x7f0000000040)='./file0\x00', 0x208002, 0x2) 5.220115396s ago: executing program 5 (id=1798): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket(0x1d, 0x2, 0x5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2024009, 0x7, 0xeb1, r2, 0x3) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket(0x25, 0x1, 0x3) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e", @ANYRES32, @ANYBLOB='\b'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) io_uring_setup$auto(0x5d, &(0x7f00000004c0)={0x52, 0xd, 0x6, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x1, 0x6, 0x8c48, 0x29f, 0x100, 0x2, 0xb831, 0x5, 0x2}, {0x100, 0x20001, 0x52, 0x5, 0xfffffffe, 0x0, 0x76c5, 0x8, 0x100000000}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/sctp/snmp\x00', 0x4000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket(0x2, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000100)="80970ba1a76dc537a527986e19eb07e65243fe182f8987b997162ec03f54104d2b5c99578c03f986d7746cacdc18378856001a88e7248c237d28f21e15002085c007e67c08200e643b93afbe7ac6d9cef590fadf") ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 3.531064347s ago: executing program 5 (id=1808): mmap$auto(0x9, 0xff, 0xe0, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) connect$auto(r0, &(0x7f0000000080)=@can={0x1d, r1}, 0x3) r2 = socket(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(r3, 0xffffffffffffbaeb, 0xcd06) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, 0x0, 0x4048010) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r6, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0xc) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000280)='\x90\x96\xd1\x00\xe4\xd2\xab1\xc7\xe8\xad\x83\xb7=\x89Z;\xa3\f\x13A\x1c\xdc\x9a\x89\x98\x12\xb4\xbb\'\x1eu@\xe1=A\xbe\xaaa\xabA\xea\x147\xa6\xb2\x1d,\xafD\xcd\xa1\x8c\xd2\xc1R\xeb\x01\x86\xf8\x92ys&\xcf\x83\b&s\x04\x9b\xd6\xe9\xb0\x82_\xd2\xb9\x8a\xcd\x87jY\x03\xe7\xedW\x17<\xca\xef\xc2\x97\xdb\x91Pk\xd3\x01!\xba\x04\x951B\xa1\xc7ue&vU\xbc\xcesG\xea\x01\xd1\x8c\xca\xb3{\x1c7^gk&\x85\x95k4\xc3\xf4\x1fC\xceN\xcc\x16@\x1f\x0e\r', 0x80000000) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) fsopen$auto(0x0, 0xb) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x941683, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SG_SET_DEBUG(r7, 0x227e, &(0x7f00000000c0)) 2.346455575s ago: executing program 3 (id=1814): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)={0x247c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x2468, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r0}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c", @nested={0x23ac, 0x5, 0x0, 0x1, [@nested={0x23a8, 0x63, 0x0, 0x1, [@nested={0x23a4, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x00'}, @nested={0x2398, 0x86, 0x0, 0x1, [@nested={0x2394, 0x15b, 0x0, 0x1, [@nested={0x237e, 0x75, 0x0, 0x1, [@nested={0x30, 0x122, 0x0, 0x1, [@generic="31fd2ec54f31780aeb6aa5b5792ea70ad73f044b1042192ca416f523ea02db740c3de06cdcbf7dca4f738047"]}, @nested={0x109e, 0xb3, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xeb}, @nested={0x4, 0x15b}, @generic="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", @nested={0x4, 0x6c}, @generic="d8dd2682397a79d079da82a1daa6903825df6ba3f5a88eb1b8e6f442df3bdbffbe1e41b4010f93a7610647313407b45748daafa547d3457935de72ca", @nested={0x4, 0x13b}, @generic="8a18ba4a7f2dc709160fea541d5b43ecb9b9971630956bb59306d9d023b39b3226a1f55def3ddacfb75f0a68a13c2dce4ff4a597e4f14d5c10de087333b7c7368c98"]}, @generic="a2cd73b7d00107f71266dc951dadf67b28849d4b34a9218a2b5f1dccc9804a61ba49ab974f69e81962b16ac1d1c3add9858931a81342b65e9b9c4d99824cc592e7838b7ea8935025bf86c13c68b084ee83c1a838747e985e70a55b2cb50151b9bf50", @typed={0x1e, 0x10b, 0x0, 0x0, @str='/proc/thread-self/pagemap\x00'}, @generic="9ab74db0b63b03dd0db3fade0d6f4a3cd73deec901052433739e0ea3a6dd0b0d977fab2da2170824de0353b72d0b7fa786c57b43c8b96f69e7c12e0b616691e95cac1ef0", @nested={0x1051, 0x85, 0x0, 0x1, [@generic="639df877d723da88dbe5db2de595e31853d0ae461425d445201912d1852af6c54ad72de9e836b69c94353c622d193cc9fee825aeef0c4bdecf1d4d2f7a6543a2a53246681dafd97bd7e5da05c6e26f094e41b15c4ee308947e197c729e409a9a02e26ba0dbbca5a5d61f6f4b55aa8ad741607e5d7fdb5243a436b4ba4a100773dec9a2aa78eaf508d8b42752b532af30a57bbb0ed6ce51733214fdb7cc444d9b1b1c729803c2ee113500b5b8c94b1510bcd2c9e38473ffa8c960cf9130d06f0ea5abecd2a4308e8e007cff2fb739e78dda19218a04b9b08b1b33d6943d79649ef80c403fc31c17ce40c4375c1c46e37eaadaadb1e3015696c3d22097c70da1d588e26703ebfa7c30525907b94ed29b2cb2dd777a18b1c96bc101c547d1da3e72c90bb6a389f360af45df3854858739896cacde741a1c3d6af4dd0feb0874ec824233c69778119f5c16d571ef6fe825705b48f089f2356a23fb04ade31bd6ccc426a9859e16077b1fc413853205a51a6abdb57e9dc77cb1029414fa3e03b5b5f2797d8e4cac7481ea28968411ca29197aa69591d836101dc9af9eb98af583a66601a782b2203daae790e00a79e051e299d0c43efdc462e0bbdbb64b167212f7ac5f26bae34535ddc1798d0da916b9021721e8624a6e417d27114d4291173bc465366d69474a8b7aecf4ccb8c417fe219c1276a49eaf687844834215f11b6d27eef5d858ad87ef3d94b94407c5d10ca859223898a307c8082f2b316677038baad91b7bdf7d9f4b25677964a7a253df71bd1df7aeceacadd16402fd0c44d32d0dfe05af7498e48404ff99ff3e757df1d198a1337ab4fd21272086a8a00a1122ca890e53bfc7adccbe4508d6329279ffee2094d5f099c3eb4d9c39d7e40b5cfc6a6542ea9f66d47d184638d17627583f7eb4da9e2c7d58f753500776c6fe760eccbeadedfeae880f8bf4af89a47f6c658cf4a8b304d19629d128010d52a9b97aebe47b3b6519b96a07b7da4a02a1c1fdea390dde833abf987882f82e4858ba1e2ce0e1c492da35634955db389ff8c4c76b6ae1f17c40159cfeac00f2838409659a3db8850fa8619e7aae4439fadf3c317de3c1bfbcdc21879707f589d53795401b4d050f0b3dd4955708ac2a611eb1ea1984f23c05e4364fd7409b4ff8e41bb77d6aca5e3671ebc37b12293a59298ab7abb8d9b36157993b1ac7d1b99706831fc7597b083665ae79527a798d62efddac4e7c6686ced87976387f46cd1e036db771b82c4b78798d249a927b712b6a929586d711205fba8312e70c2347bc7e9c44c1c0e7a136a48ff8536925796635e69c7e27069d76f0e4f23286f95c6dc0553929b39d2e511ad91148953c863f574ed4e5a999fad92d956a6c9ccbd489055677ef64b69c2a2fae4083a0197c3f1382d399d376729cc9eb522df9f495c3957c6a2e6c1164a49d7dc0838f8c0a6b63d5ebfe6a02f782d30a415956648f4f6df234dddd097ba20212ff4911950333ecf098583d366859797e51bd6855eebc795976504ff25c84506fb03ccb0d531410e33d5390e06efce6da6407ff543f2b7596b1a5a0903160e947d7cfd40cd97e68132b79e99113ac3d2db6a97dace005657a878569f846036d249edeb2e3ee7071e3df758fafdb1a24275f889d8f87b6ff979f948b8785b8433e8711800c62bd3a706ddd62f4615633c6b618d912c6847757b1258c7ac66523bda3373b5d2befe7c0445abe888ec8140527ad816c21929c54b93928943960aeaaaeb0a56e42fce144d42bca02e219832602918a17df7bb6214e9246c0742124d87747dc8299152ffa095ed72015353ac64ee8859ddfb425dec1cf7aa667103b3e12f934a16731116bdc6debbb8cb6629a8b81413fdd5bee0b1d783a01c8428eddc8a799a0f5e78040c5e032416e9c99ec6d5d3dbd90d81e767e7a0c16f0175d8555124c384f1e68a6149566604d0d8170dfdec55ee21014a92e797ef89d5180d384bf55a70dfeb650930c78a6fe2a3abdfbdf7a02dcd38b2861493fede64c05e8a371b2d8e9b040b643576d3ee8dd527e584fe33aa469405937c7586b2ac704ad1830926774b56123a52e8b12499ede9af5227e097b2f5c9f32fc870a01085538a0ba28f3988c2431da904a48f3f3e4c092bbd4ec2ac098260695136b3887a87c7a6bb6047d1461529f7598e4366506160bfd4138f05a6b6924bcfc0571300f4c0fe4250cdc3702f9c46a69747f94a6a6aaafc4082a6c87895a402487e6bb65a21e2c9abe7ff1ddc1a4f0efac9d912ee10ac19c2e648b63eb6f32f296e50b195a70fdea4728f4ae0974e87c0399c4219fdfab77dc88bd109c83f29ee2024f1f80b9f074c891ce01ad016bafe65217d0d291ec15446487582ca1e3fed42a4e99ebfac6eccd17edb7c97bf12aaeeacd276aefa2c5f1035e47f25ce3e89e9fd225294e2d5bbcb90c7c6cd221596c1868f4bb5695dd726dda30e9a90f26d116b6c37d79a8066c79ed123c14c2ac6224252fb5c13e4ab0aa9723c4c56517d00137316bd213c837aa65310604688975c16c4d5f94547e7d89f46c13772cf05f495a22a94e465b6d27d71aafc4e2458acd853536f99151469e788bbc32ecfea2d52e3f5556501d06040cb15cb5244307a16ae26733a843793936122c53ebb064cec26aa529e644354493866c49465207cc20d26843f59ac9fc4dd36fd9ee8ee414d4023498134cde0d9928ed096fae2b9965eaab02fb3052237fd91e263b6c7729e1f4987a2b8d0a2be5c81e0dd3246c70c43a064937847da63563354388081ac548537c7c3cda14106b045c88c34335ac21420408148b3dcdceb5aae5511af6be983c797aac3dea71232ac4f521b525fb5074be5df3aae3400515738654af93af2a0dd22674163361eb4e671b32a400ae53b68abab54d6ca0eabe69cd5cd3b43dc61a659026bcf233eb181241033e39fd28f518cccc4fd79c84774cac4bed469223bed6f02285e9d2c2aa654c7d35f295b9eed1102b3d48c79d32b7f1c8907c8e4ae65dd3eaadc08e9b88b2a1eccfe7c9d4d875a26a1f348faffdaa29464cc338db6ce14d68017600fe4697da43630e79bb7bade45c1c774b9522822e2ef694e7fe0708d79cb9b04301417e0f15e80a0957c3fe5a165af1968ed03750ff6909778a1eaa03337fac72543fd71dc08ba1dee7e73328f41863d12007884e27a64684cca2fcf57cdc1d0cce7bb71694386d0d8e6bcd668ff1a172ca50cba7f3f6df73953b6e854ac1c1d0f7ce9165b0029a61d694fd75ec651991a8ddab4b04d144d2d37d05b7167206791d57918b26c9eb1c328171fb6d9929cc63d4c12168d554f0c1a66ec1d339c9c4afc18b0e58ad116bc2d880143ad32f81f68670cb644d3629c724c0e4d962e7adf9a336207b3e52e8dca97bb1516736b4fbae00de924b1942ec7e27bcfed7470caa5ec28d6ed119496d1166739eaea0ef8cba7984d8e5383cb810d1fd01632183fdf1d7a7713597ffca663bb11a16f2e6552d9569c07ab7cc74fcede59e4c9e851cfb1a7ea307352949f361a09dfd7bfa45c318c6aba5a076e01b804774d326fdfa0d11f7fc523fac6f77a4f725ce009de6eda1f3830c614f0227e5f8f49a1c873ae85d9fcb6066a3ae9c84a509c867f6332c11196dcbc7e2b553113a500175849504666e8e3a7e6515d7851942543fd42ec83ce2a51c878458abfc1d38580a4cf727cae3d68dd1a5657f03616bb679ced92248dfbeec5d3c7995fef42b6d341ad05da2a36f64fc8ae051df76314503d26c627093f32f7b1803423aa16e449b21cc0df0031ccc494237054af30cd574cb84f60a0d7ab4633c08440288f88881629af107f6b9cb7bf12a8a21fd3a4a2abeb6b4e3a037edc3e1e62739255edaa58e6f07cf8238a8448ca5ea9f5704d3db4d83c62460ca673f11952b40c9a214fe7940dd9d5b29ba1e5bf18e00dd63ec1fbb207c3b3fed913a3db3774e41b1d61201de64fcb7dc8d16b9130081fc52e630ab5772385c09d4d8f1c158a0b824b63bbb350b4ad2a50faaafcae87b0552b3d3968c1d538d14d5bf4a0711cc02f55f610e4fe6ded11a132a15f026128c0fdacad49cc3cebedab60166e0d4054e232d86719c6b88f8e2584d34d0770aeb5a44ffddf87ba8a674b337cf08e508f6e838be2129fded965cdf4cad9a743da73b9710fff68e2e59d971bd0be8a6c61e2dd599238d0f0563bb8c20261489583d5c280a77e90abc6b44eff44216eb6efa6021f72361edd45edf89d6a08b61d98a8d958ea03c6fe562ce52eb310acca79d2f4be085ac45539232e4b0ad23fb9edf7842048a34b961764162f6d76cc38b0140856f1cacf824ad74859004a4ee286858a4bc682e74cebd31935a8ab600e62048f06c4ca672f0db633ffe22e423f83db69fb0807f4ed1f67745868bcb4a2ff0d979b0cda49e144fdf54812ec2ac09f2d1f5fc48fbf0d962de7c632c3cd61e06262b6104bcf9629a1e405aaf0265790f168a23b99eae84f6c4aa3b0287e1b15aeccfc995e25eea37e1f2194ca78eff4a4b280cede966e093b2e364a5599691750045e40826c07205e6aa16228aec0832d4a7a47346d5efc34f18c89abb137d83ab9142dad58bad2cd0407ad593f662a04063f36486d280c88e5ba2d9e2c50347ce28b65bad2d72022e1894233655c0b372a317647cb653ce479620b9f125849767f9a49e7c3cb01a41bd5421618dc0c54b6b4426d190985b9b3866762bdd148742fe322b6ffef60765751f00755558ebf4243ef013cbd3bb42a250934d24ed9b52b519f15e1daafbb096a17719cb2793dcf834d049e0dd02e0199235a511eebac9e4f7dbadf8a7b5eff435762cbed271ed57d7b976f5566c6ef6321c08a21e9ec5514659c4e8812a056e5905ea03e7040ebf6656b235ebff0da03d215e7490f4aaac365cd3c837fba7dcf954cb6b22a050cb1a81cbf57e4cbce711f7f6903a2b5f5a1840dececed21c9c4c9811c6fed8c8aa6e3b557d3221e0081082ba9bed4bd8fe851d617468dda8db093c4d1f6d3edfdf27adeadc864c73eb237dc9fd73ee890cc7a574811a0f5a67bc35434962e1bf72718ea838a7f40a36ff6b0dd08820e7438ea613a5ee78e571d8f2d80568a11cd19f6f9a5560c55950a62acd1cf38736d5aaea36675e059ff34f738fec0365dd57404eabbf94ec5da76e0d3ba4cc67194c14e1c86e8d5287711d3624cd79475e854c254f7bb5d9494a7fec7613df1a6259a47e2b67d1b9ab6c18163f01e0d53e75d2c5a896def86f8cfa244f1af3c07dbf8c0af4c785cb538fce00cd676762eaa6f4324dad2a15770a08362aea7249ccb1cfd77b2e909c8d1697135d709f51b58314b6ef62c4937c579fd47ac320eba8923f519a3fb51314f955b710bae63873e5eb6e8342071bc00c8062d2df956e84c3e84e6d5ce26df68a0eae69d12f47952d7f0d7a6445692722027748c0cd0d72024c461956657835840c93616f71c884dba81578936e7dd3884bbbb8db4c37cad32c4d9c0d588eddee73dd7f8ecf662b4e3a26a18935a59bbfad409914836b5f82f5bc8a5bdad5a9b1c9d09bfb6a18d35d72e57161ca288beee849133954bc4590b1bb2346821b4e684af541cffed43fa04ab749ff22145cfb00663b2c9c338a586631e252918f8f110313ef77aed0b9b190d6ead2ca66e5e5c47311bc213046e182a12af4631a0aad8035f4fd5b60a0a46b46cdd19afe93bf339fb67b0e64a3fcdcd99f708cca01d65d8ad761c82faa0ee8f287863ec2b352", @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="9e44b444eca99e550781043ea3fd8ea2ae6e5ddb4937610674bb143d479996b8e13da2c44c7745804607c72f4eba49c709f80989e0701659dc"]}, @nested={0x190, 0xca, 0x0, 0x1, [@nested={0x4, 0xf1}, @generic="bb98900d58f4f08afbf543ddd0109ef43250e50ca91dd6a0241c515c6203858b60daaf9a64e1c04f7bda718ee4ff4c11840cdc6cf5921811355635a9e98b801fa804c108ac6f90523f92798acaa612f1763eef36fd1e3eb7bcdec71cce935844782451d7031be9418b0380b59207d21ce0ceac658a99f749d417bdba442297ae9e8b456bacd672a097514dda76c184707d69fc56fcfbaca4cb2245ee3618ddba0c5192518153e91a", @generic, @nested={0x4, 0xc1}, @generic="4d970975bfe2d48936b5ec1bdf75def5b311b7645dc0a0dcb4b9a54935d75e324129f832d7e279608c3fd5fd188116872e2fb3787c4b91fc3123d93f9779", @generic="efff40ed730c8f505688aed40e0a3a1187f2006e13ed25c0b20fd03db1580968452a162af459aa866a183c7e4511eda02d04777b18faddad38e61f999c9bb3a544bb329c5a6912e9cadfd212a6e19b8283e30f2c09544da081b6ed08a4d6aaf1fb8086306dcb4ce7a1ffcdba3a22d5b2248eb404ba0ea0af40c04c2f2296484911674e2b199ffc1d15af7fdbc647a8565e04fc6c96d0b3e7416b12119f3c"]}]}, @generic, @nested={0x10, 0x32, 0x0, 0x1, [@typed={0xc, 0x150, 0x0, 0x0, @u64=0x7000000000000}]}]}]}]}]}]}]}]}, 0x247c}, 0x1, 0x0, 0x0, 0x4810}, 0x2404c810) 2.104528719s ago: executing program 3 (id=1816): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0100f90200d1d093080c4d90900008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) socket(0x2, 0x5, 0x0) mmap$auto(0x44da, 0x7, 0x1ffffffff, 0xeb2, r0, 0x80000000) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x1000000008000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r1, 0xc0585604, r1) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000280)={0x9, 0xffffff93, 0x0}) io_uring_setup$auto(0x9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000200)=""/36, 0xfd48) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x80, 0x5) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x8001fb, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x7, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0xfffffffd, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x3, 0x10000, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x237a, 0x3, 0x25, 0x1, 0x4, 0x1, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0x8140, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x81, 0x90, 0x6, 0x1e29, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x5, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x40, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0x5}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/8/node\x00', 0x103d01, 0x0) 2.011927686s ago: executing program 1 (id=1817): r0 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim4/psample/latency_max\x00', 0x42000, 0x0) write$auto_fops_u64_(r0, &(0x7f0000000680)="35ef1ff48ca64b594e24c24d4e46e1eb97ea4f01c259f0d2a2a19a9554280d3441a49064b50934b77f429f78e3a548fc1fcf96a8ffd6c692d1da02223f93713e513db269385826d66650d39302f637dd101df214b81f1846e046e5a388bc", 0x5e) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000280)="d6295c73c98cd50a5ac4365c9b3280f0762f0de4eee6e4ba34a9981d81cd12bf430505ea1afd0c9eb9cd00a461dde51df9ed51661a20e4629069a2a9120494e1a636cb4d20b3bdb1dae8b1c4705a5aaf5a68edd926dcbc8e062d1986a6d85b941c0631a96baf0cb16e776561839a1aaba1a608430e400eec2fc14a9c1f6ce02ef0da73aef88b675507aa1d8c816c7cb0f851652e81678ad082be25e50acf2f0b81737742dec0f7707aff686fd64c13e034cc11e5fc9befed0f9e2e", 0xce56, &(0x7f0000000000)={&(0x7f0000000340)="feade28a59cd8c3a55b4d7e15f9bdf995d00df831ac366dec0cfa9eceb9fa3c3cb9cb252b1997a54b3e66df35062ddd99a57ffdfe6383cb555faa1d395505e66f34155667b619648ca76f833e90a46fdb5544bd3e5a192a20b1390f873b4ee6534c2234f59ba48bc24f822eb8f62a718a7a2b86cdaec168350fca51c2c26aa3da8870bb825f6908a928d24900f09f58174184276bbd9b1010c35e665535f664d4f0a47050d724670d5fd8319ec6dfe213763bfc551331db91c57da8b750618591515707a63ed4953506b8930b070bf9f7d761b95014e4b253d5d32842ed6494d961301f611f99e4f22188b", 0x4}, 0xffffffff00000000, &(0x7f0000000080)="e516e72e8258b79f7791288061c9b1f1c52e709f4917bf171f692dcb7395cb3f9c6f544d17b2228ce2ec0fac276a6427d58ff7985f1a4585ca47bbcc1277b5487543cb567dc2", 0x6, 0x9}, 0x400}, 0xfffff000, 0x16) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x3f, 0x5}, 0x4f4) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb1, r3, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) socket(0xa, 0x3, 0x120003b) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x1ff, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002340), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7ffd) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x41a20, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x8281, 0x0) ioctl$auto_PPPIOCATTACH(r5, 0x4004743d, 0x0) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x5, &(0x7f00000001c0)='(\xeasX\x13zM\xca\x9d\x8fV\x00', 0x508) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000e40003800800c200e000000204002a000400110008002e00", @ANYRES32=r1, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) 1.771385497s ago: executing program 5 (id=1819): socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) setsockopt$auto(0x3, 0x10000000084, 0x6b, 0x0, 0x20) r0 = socket(0x2, 0x2, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r1, 0x921064ab, 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) setsockopt$auto(r0, 0x5, 0x4, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x81) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000004c0)={{@raw=0x1, 0x5, 0x3, 0xffffffff, "76f006e37ceb76bfbde3245bee4c6625cb0662ccc64e124db4fedbdd228b9ced12ac206f688d4858a0b558db"}, 0x1, @integer=@value=[0x2, 0x7, 0x9, 0x4, 0xffffffff, 0x2, 0x7, 0xf52d, 0x8, 0x77, 0x4, 0x1c2, 0x1, 0x1, 0x9, 0x3, 0x8, 0xfffbfffffffffffd, 0x6, 0x1, 0x1840, 0x1, 0x40, 0x5, 0x9, 0x3ff, 0x4, 0x2, 0x3ff, 0x9, 0x101, 0x6, 0x3, 0x0, 0x1, 0x5, 0x800000000002, 0x7, 0xe, 0xffffffffffffffff, 0x1000, 0x81, 0x80000000, 0x0, 0x81, 0xfe, 0x100, 0x4000, 0x10000, 0x1, 0x100, 0xec00000, 0x185d, 0xe, 0x10000, 0x2, 0x1, 0x6, 0x0, 0x6, 0xfffffffffffffffa, 0x6, 0x7, 0x7ff, 0x5, 0x7, 0x7, 0x5, 0x27d64140, 0x1ff, 0xffffffffffffffff, 0x4, 0x7, 0x3, 0x1ff, 0x81, 0x5, 0x2, 0xfffffffffffff800, 0x9, 0x2, 0x208, 0x547, 0x7, 0x100000000, 0x2, 0x6, 0x7fffffff, 0x5, 0x400, 0x1fd, 0x8000, 0x80, 0x0, 0xf46, 0x2, 0xfffffffffffffff9, 0x8000000000000000, 0x35, 0x5, 0x8, 0x8, 0x2, 0x9, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0xe4, 0x8000000000000, 0x5, 0x9, 0x7ffffffffffffffc, 0x4, 0x0, 0xfffffdffffffffff, 0x7, 0xfffffffffffffffd, 0x6, 0x0, 0x5, 0x4, 0x40000000000000c0, 0x1400, 0x2000800, 0x6, 0x571a, 0x3], "6b54dd2e739e95a6f217b84988b4581576aaed11b340e4707992930f9a930325903b0e132daa477100a1107a85f3303896b5ec1e61dfb9c0e2698c93ebcd3e1508428d544319376037341d65bb6fb47a002356928a53d1534d8b947cbfcbfba7c7c74e86dc40dc6bca83c523e1e38c31cabf433dd0e3bc1b1b3128e5cf49b23f"}) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x40a0ae49, r0) 1.759465167s ago: executing program 3 (id=1820): r0 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats\x00', 0x800, 0x0) mmap$auto(0x0, 0xe983, 0xe3, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/v4l-subdev6\x00', 0x64f6c0, 0x0) ioctl$auto(0x3, 0xc0305616, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x21) getdents$auto(r1, 0x0, 0x401) 1.642861486s ago: executing program 2 (id=1821): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x240, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1d00, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x8001af85, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1.433991702s ago: executing program 2 (id=1822): ioctl$auto_MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x22000, 0x0) lseek$auto(r0, 0x7, 0x0) mmap$auto(0x1, 0x2, 0xffffffffffff64bc, 0x11, 0xffffffffffffffff, 0xeb) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) close_range$auto(0x2, 0x8, 0x0) 1.398046452s ago: executing program 5 (id=1823): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0x1ca142, 0x0) close$auto(0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) getpeername$auto(0x3, 0x0, 0x0) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) recvfrom$auto(r1, &(0x7f00000000c0)="e79c678fbd3d6aea24a5bb5052d0d5f78fa495626a9f23a0762fe67eb503f1341088068d64c0b80c60741e6e5c2e4b9c7880b253029f94280007010b4ae110e59d0bd210d46243313351d9bd8fdd4f3ec927bc06c86342a2a9aed899769634fec6617b3687c45df589ba83d3b01b3fbc5d0e833c0c75a42fe249304a5be38fc2c08671f4ca090a7303ef59449f5ac24cfd483d87fd45d7f1cbc3f6ebe6bc26133bf146ecb8ad8c362d9b5598713d8f", 0x100000001, 0x1000, &(0x7f00000001c0)=@ethernet={0x6}, &(0x7f0000000240)=0x2) read$auto(r1, 0x0, 0x1f40) writev$auto(r0, &(0x7f0000000200)={0x0, 0xfff}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PEEK_OFF(r2, 0x81, 0x2a, &(0x7f0000000040)='\x00', &(0x7f0000000080)=0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 1.282373673s ago: executing program 1 (id=1824): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)={0x22ec, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x22d8, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r0}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c", @nested={0x221c, 0x5, 0x0, 0x1, [@nested={0x2218, 0x63, 0x0, 0x1, [@nested={0x2214, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x00'}, @nested={0x2208, 0x86, 0x0, 0x1, [@nested={0x2204, 0x15b, 0x0, 0x1, [@nested={0x21ee, 0x75, 0x0, 0x1, [@nested={0x30, 0x122, 0x0, 0x1, [@generic="31fd2ec54f31780aeb6aa5b5792ea70ad73f044b1042192ca416f523ea02db740c3de06cdcbf7dca4f738047"]}, @nested={0x109e, 0xb3, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xeb}, @nested={0x4, 0x15b}, @generic="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", @nested={0x4, 0x6c}, @generic="d8dd2682397a79d079da82a1daa6903825df6ba3f5a88eb1b8e6f442df3bdbffbe1e41b4010f93a7610647313407b45748daafa547d3457935de72ca", @nested={0x4, 0x13b}, @generic="8a18ba4a7f2dc709160fea541d5b43ecb9b9971630956bb59306d9d023b39b3226a1f55def3ddacfb75f0a68a13c2dce4ff4a597e4f14d5c10de087333b7c7368c98"]}, @generic="a2cd73b7d00107f71266dc951dadf67b28849d4b34a9218a2b5f1dccc9804a61ba49ab974f69e81962b16ac1d1c3add9858931a81342b65e9b9c4d99824cc592e7838b7ea8935025bf86c13c68b084ee83c1a838747e985e70a55b2cb50151b9bf50", @typed={0x1e, 0x10b, 0x0, 0x0, @str='/proc/thread-self/pagemap\x00'}, @generic="9ab74db0b63b03dd0db3fade0d6f4a3cd73deec901052433739e0ea3a6dd0b0d977fab2da2170824de0353b72d0b7fa786c57b43c8b96f69e7c12e0b616691e95cac1ef0", @nested={0x1051, 0x85, 0x0, 0x1, [@generic="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", @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="9e44b444eca99e550781043ea3fd8ea2ae6e5ddb4937610674bb143d479996b8e13da2c44c7745804607c72f4eba49c709f80989e0701659dc"]}]}, @generic, @nested={0x10, 0x32, 0x0, 0x1, [@typed={0xc, 0x150, 0x0, 0x0, @u64=0x7000000000000}]}]}]}]}]}]}]}]}, 0x22ec}, 0x1, 0x0, 0x0, 0x4810}, 0x2404c810) 1.236076143s ago: executing program 3 (id=1825): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/13/actions\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x6a500, 0x0) socket(0xf, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x80000, 0x84) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) 1.092681532s ago: executing program 2 (id=1826): r0 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x22640, 0x0) mmap$auto(0x44, 0x2020009, 0x7, 0x80000010, r0, 0x9) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r1, 0x454f, 0x5f, 0x0, 0x0, r1, 0x80000001}, 0x6d4) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) r2 = socket(0xa, 0x5, 0x0) listen$auto(r2, 0x81) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/manager\x00', 0x200040, 0x0) rmdir$auto(&(0x7f0000004840)='.\x00') mremap$auto(0x7ff, 0x7fffffff, 0x5, 0x7f, 0x2) fsconfig$auto_FSCONFIG_SET_PATH(r4, 0x3, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r3, 0x5422, &(0x7f0000000000)="2797a8ef14a5f4bd145199f07fa5dfe4fd935f85e193885da70264272ccd22bc51e26dd684c21bb60f1c5a7ec1126e2380f471690dbec22a1a87f5ad6cce66dc129058671470424cc5e01556e9aa291530963ace49742982dca29ff4517c367caa11f42d3f6f5670ac4c1676e8694cb818fa5cf58ea4c4c0bad8e803ef36fa9db45f4411b609a2b600273dc7ebb09bd17032b1c0a7c13c3bf3ae41dc76e1195854d8200e33aee82c1744be5587db6c411bdfeb6641059b5a4d602e0dc486991c208917d857c06f32a4ea44401c9a9d918ee0d36c368c415045a3308e88ee7ded3d7609f91e53139f1dec20c2e4829b8e7d5a") 1.063174571s ago: executing program 1 (id=1827): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1e1302, 0x100) copy_file_range$auto(r0, 0x0, r1, 0x0, 0x21c3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x7fffffff, 0x2, 0x3, 0x20000002, 0x7, 0x3, 0x4, 0x4, 0xb4, 0x9, 0xa, 0x10003, 0x80, 0x4, 0x3, 0x7, 0x1002000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x3, 0xd) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) inotify_add_watch$auto(r0, 0x0, 0x1) 787.351042ms ago: executing program 3 (id=1828): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x80802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r0) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x5}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 687.779888ms ago: executing program 2 (id=1829): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) futex$auto(0x0, 0x5, 0x9, 0x0, 0x0, 0x1bc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) fallocate$auto(r0, 0x1, 0x2, 0x6657) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = socket(0x2, 0xa, 0x1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000140), r2) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x3c, 0x7, "bb4effe3c4e8db60d12c9a79eee4fde378f50354db427289f085dfa2f1a2d0b2084c66ee763076ec079279a704379659c559a053041fe0db"}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x4000004) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, "65db3f6a28f11d181d156e77f65c248457249960778b21924198f01e0da8159c9fb6110e542145"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x7}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x84}, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 677.528575ms ago: executing program 1 (id=1830): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x240, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1d00, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x8001af85, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 426.449785ms ago: executing program 1 (id=1831): read$auto(0xffffffffffffffff, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r1 = epoll_create$auto(0x200004) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x48002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r4 = epoll_create$auto(0x7) connect$auto(r3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @remote, 0x4}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r5, 0x0) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) write$auto(r3, 0x0, 0x1) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) 338.207145ms ago: executing program 2 (id=1832): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop11\x00', 0x0, 0x0) mmap$auto(0xce80, 0x1, 0x4000000000de, 0x40eb1, r0, 0x1) r1 = socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x6, 0x21, 0x0, 0x10) close_range$auto(r0, r1, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) mmap$auto(0x0, 0x400004, 0x9, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000040)=0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r6, 0x0, 0x18) r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x400281, 0x0) ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5) ioctl$auto(r7, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r7, 0x4008af30, 0x0) close_range$auto(r5, 0xffffffffffffffff, 0x0) 202.657283ms ago: executing program 5 (id=1833): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x100403, 0x0) ioctl$auto(0x3, 0x540a, r0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyra\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x6, 0x7, 0x2) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) 160.214026ms ago: executing program 3 (id=1834): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = memfd_create$auto(0x0, 0x4) r1 = socket(0xa, 0x3, 0x3a) keyctl$auto(0x11, 0xfffffffffffffffa, 0x0, 0x4, 0x3) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/19, 0x13) close_range$auto(0x0, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x268243, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c06, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x11b0c0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 119.628358ms ago: executing program 1 (id=1835): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4008011) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r0, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000240)={0xffffffffffffffff, 0x7ff}) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f00000001c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 0s ago: executing program 2 (id=1836): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x80000001) socket(0x25, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = fcntl$auto(0x0, 0x407, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x1000, 0x6, 0x4) mmap$auto(0x0, 0xe983, 0x3, 0xcb1, r0, 0x8000) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) socket(0x18, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) kernel console output (not intermixed with test programs): (549755789312 ns) > initial count (26496 ns). Using initial count to start timer. [ 190.062327][ T7837] netlink: 342 bytes leftover after parsing attributes in process `syz.2.447'. [ 190.083245][ T7837] IPv6: NLM_F_REPLACE set, but no existing node found! [ 190.770484][ T30] audit: type=1804 audit(6442450967.768:8): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.450" name="/newroot/97/file0" dev="tmpfs" ino=527 res=1 errno=0 [ 190.839516][ T30] audit: type=1804 audit(6442450967.798:9): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.450" name="/newroot/97/file0" dev="tmpfs" ino=527 res=1 errno=0 [ 191.297167][ T7860] FAULT_INJECTION: forcing a failure. [ 191.297167][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 191.323350][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.1.453 Tainted: G U L syzkaller #0 PREEMPT(full) [ 191.323399][ T7860] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 191.323409][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.323426][ T7860] Call Trace: [ 191.323435][ T7860] [ 191.323446][ T7860] dump_stack_lvl+0x100/0x190 [ 191.323496][ T7860] should_fail_ex.cold+0x5/0xa [ 191.323529][ T7860] ? tomoyo_realpath_from_path+0xb6/0x690 [ 191.323560][ T7860] should_failslab+0xc2/0x120 [ 191.323588][ T7860] __kmalloc_noprof+0xe0/0x850 [ 191.323637][ T7860] tomoyo_realpath_from_path+0xb6/0x690 [ 191.323678][ T7860] tomoyo_path_number_perm+0x23c/0x580 [ 191.323719][ T7860] ? tomoyo_path_number_perm+0x22e/0x580 [ 191.323765][ T7860] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.323865][ T7860] ? find_held_lock+0x2b/0x80 [ 191.323890][ T7860] ? __fget_files+0x215/0x3d0 [ 191.323937][ T7860] ? hook_file_ioctl_common+0x146/0x410 [ 191.323991][ T7860] ? __fget_files+0x21f/0x3d0 [ 191.324041][ T7860] security_file_ioctl+0xd3/0x230 [ 191.324087][ T7860] __x64_sys_ioctl+0xb7/0x210 [ 191.324129][ T7860] do_syscall_64+0x106/0xf80 [ 191.324159][ T7860] ? clear_bhb_loop+0x40/0x90 [ 191.324194][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.324223][ T7860] RIP: 0033:0x7fa100b9c799 [ 191.324247][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.324273][ T7860] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.324301][ T7860] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 191.324319][ T7860] RDX: 0000200000000180 RSI: 000000004140aecd RDI: 0000000000000004 [ 191.324337][ T7860] RBP: 00007fa10197a090 R08: 0000000000000000 R09: 0000000000000000 [ 191.324353][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.324368][ T7860] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 191.324409][ T7860] [ 191.324421][ T7860] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.974187][ T7899] FAULT_INJECTION: forcing a failure. [ 192.974187][ T7899] name failslab, interval 1, probability 0, space 0, times 0 [ 192.988379][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.1.464 Tainted: G U L syzkaller #0 PREEMPT(full) [ 192.988424][ T7899] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 192.988434][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.988449][ T7899] Call Trace: [ 192.988457][ T7899] [ 192.988466][ T7899] dump_stack_lvl+0x100/0x190 [ 192.988509][ T7899] should_fail_ex.cold+0x5/0xa [ 192.988538][ T7899] ? tomoyo_encode2+0xfb/0x3c0 [ 192.988565][ T7899] should_failslab+0xc2/0x120 [ 192.988592][ T7899] __kmalloc_noprof+0xe0/0x850 [ 192.988630][ T7899] ? rcu_is_watching+0x12/0xc0 [ 192.988679][ T7899] tomoyo_encode2+0xfb/0x3c0 [ 192.988715][ T7899] tomoyo_encode+0x29/0x50 [ 192.988741][ T7899] tomoyo_realpath_from_path+0x18c/0x690 [ 192.988778][ T7899] tomoyo_path_number_perm+0x23c/0x580 [ 192.988814][ T7899] ? tomoyo_path_number_perm+0x22e/0x580 [ 192.988861][ T7899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.988932][ T7899] ? find_held_lock+0x2b/0x80 [ 192.988954][ T7899] ? __fget_files+0x215/0x3d0 [ 192.988988][ T7899] ? hook_file_ioctl_common+0x146/0x410 [ 192.989031][ T7899] ? __fget_files+0x21f/0x3d0 [ 192.989072][ T7899] security_file_ioctl+0xd3/0x230 [ 192.989119][ T7899] __x64_sys_ioctl+0xb7/0x210 [ 192.989154][ T7899] do_syscall_64+0x106/0xf80 [ 192.989180][ T7899] ? clear_bhb_loop+0x40/0x90 [ 192.989211][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.989236][ T7899] RIP: 0033:0x7fa100b9c799 [ 192.989260][ T7899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.989285][ T7899] RSP: 002b:00007fa0fedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.989310][ T7899] RAX: ffffffffffffffda RBX: 00007fa100e16090 RCX: 00007fa100b9c799 [ 192.989328][ T7899] RDX: 0000200000000180 RSI: 000000004140aecd RDI: 0000000000000004 [ 192.989345][ T7899] RBP: 00007fa0fedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.989361][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.989375][ T7899] R13: 00007fa100e16128 R14: 00007fa100e16090 R15: 00007ffd253e62d8 [ 192.989414][ T7899] [ 192.989439][ T7899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.481788][ T7907] bridge_slave_1: left allmulticast mode [ 193.487939][ T7907] bridge_slave_1: left promiscuous mode [ 193.494193][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.447308][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455185][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.825051][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 201.854487][ T8010] futex_wake_op: syz.3.489 tries to shift op by -2048; fix this program [ 201.972692][ T8010] futex_wake_op: syz.3.489 tries to shift op by -2048; fix this program [ 202.267643][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 202.336281][ T8016] bond0: invalid ARP target specified [ 202.495178][ T8022] FAULT_INJECTION: forcing a failure. [ 202.495178][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 202.627429][ T8022] CPU: 0 UID: 0 PID: 8022 Comm: syz.1.495 Tainted: G U L syzkaller #0 PREEMPT(full) [ 202.627476][ T8022] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 202.627486][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.627501][ T8022] Call Trace: [ 202.627510][ T8022] [ 202.627520][ T8022] dump_stack_lvl+0x100/0x190 [ 202.627568][ T8022] should_fail_ex.cold+0x5/0xa [ 202.627602][ T8022] should_failslab+0xc2/0x120 [ 202.627628][ T8022] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 202.627665][ T8022] ? alloc_empty_file+0x55/0x1c0 [ 202.627705][ T8022] alloc_empty_file+0x55/0x1c0 [ 202.627739][ T8022] alloc_file_pseudo+0x13a/0x230 [ 202.627783][ T8022] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 202.627828][ T8022] __shmem_file_setup+0x221/0x490 [ 202.627866][ T8022] ? __pfx___shmem_file_setup+0x10/0x10 [ 202.627909][ T8022] ? vm_area_alloc+0x1f/0x160 [ 202.627949][ T8022] shmem_zero_setup+0x96/0x1b0 [ 202.627991][ T8022] __mmap_region+0x2198/0x29e0 [ 202.628033][ T8022] ? mas_ascend+0x53d/0xb30 [ 202.628061][ T8022] ? __pfx___mmap_region+0x10/0x10 [ 202.628143][ T8022] ? __lock_acquire+0x4a5/0x2630 [ 202.628249][ T8022] ? rcu_is_watching+0x12/0xc0 [ 202.628293][ T8022] ? cap_capable+0x107/0x460 [ 202.628338][ T8022] mmap_region+0x180/0x3e0 [ 202.628385][ T8022] do_mmap+0xc63/0x12f0 [ 202.628422][ T8022] ? __pfx_do_mmap+0x10/0x10 [ 202.628452][ T8022] ? __pfx_down_write_killable+0x10/0x10 [ 202.628498][ T8022] vm_mmap_pgoff+0x29e/0x470 [ 202.628536][ T8022] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 202.628569][ T8022] ? do_futex+0x192/0x350 [ 202.628606][ T8022] ? __pfx_do_futex+0x10/0x10 [ 202.628647][ T8022] ksys_mmap_pgoff+0xe1/0x650 [ 202.628674][ T8022] ? __x64_sys_futex+0x34f/0x4d0 [ 202.628705][ T8022] ? __x64_sys_futex+0x358/0x4d0 [ 202.628741][ T8022] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 202.628775][ T8022] ? fput+0x79/0x100 [ 202.628803][ T8022] ? __pfx___x64_sys_futex+0x10/0x10 [ 202.628837][ T8022] ? ksys_write+0x1ac/0x250 [ 202.628876][ T8022] ? __pfx_ksys_write+0x10/0x10 [ 202.628922][ T8022] __x64_sys_mmap+0x125/0x190 [ 202.628969][ T8022] do_syscall_64+0x106/0xf80 [ 202.629000][ T8022] ? clear_bhb_loop+0x40/0x90 [ 202.629035][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.629063][ T8022] RIP: 0033:0x7fa100b9c799 [ 202.629088][ T8022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.629114][ T8022] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 202.629142][ T8022] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 202.629160][ T8022] RDX: 0000000000000003 RSI: 000000000000e983 RDI: 0000000000000000 [ 202.629176][ T8022] RBP: 00007fa100c32bd9 R08: ffffffffffffffff R09: 0000000000008000 [ 202.629194][ T8022] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 202.629210][ T8022] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 202.629251][ T8022] [ 202.693357][ T30] audit: type=1800 audit(6442450979.638:10): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.495" name="features" dev="configfs" ino=19946 res=0 errno=0 [ 203.334500][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 203.532462][ T8037] FAULT_INJECTION: forcing a failure. [ 203.532462][ T8037] name failslab, interval 1, probability 0, space 0, times 0 [ 203.593197][ T8037] CPU: 0 UID: 0 PID: 8037 Comm: syz.0.500 Tainted: G U L syzkaller #0 PREEMPT(full) [ 203.593250][ T8037] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 203.593262][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.593279][ T8037] Call Trace: [ 203.593289][ T8037] [ 203.593302][ T8037] dump_stack_lvl+0x100/0x190 [ 203.593354][ T8037] should_fail_ex.cold+0x5/0xa [ 203.593393][ T8037] should_failslab+0xc2/0x120 [ 203.593425][ T8037] __kmalloc_cache_noprof+0x7a/0x6f0 [ 203.593464][ T8037] ? __request_module+0x2b7/0x6c0 [ 203.593505][ T8037] ? lockdep_hardirqs_on+0x78/0x100 [ 203.593570][ T8037] __request_module+0x2b7/0x6c0 [ 203.593613][ T8037] ? __pfx___request_module+0x10/0x10 [ 203.593676][ T8037] ? find_held_lock+0x2b/0x80 [ 203.593706][ T8037] ? inet_create+0xa72/0x1060 [ 203.593770][ T8037] inet_create+0xab1/0x1060 [ 203.593817][ T8037] ? inet_create+0x94/0x1060 [ 203.593869][ T8037] __sock_create+0x339/0x860 [ 203.593925][ T8037] __sys_socket+0x14d/0x260 [ 203.593973][ T8037] ? __pfx___sys_socket+0x10/0x10 [ 203.594031][ T8037] __x64_sys_socket+0x72/0xb0 [ 203.594077][ T8037] ? lockdep_hardirqs_on+0x78/0x100 [ 203.594112][ T8037] do_syscall_64+0x106/0xf80 [ 203.594145][ T8037] ? clear_bhb_loop+0x40/0x90 [ 203.594184][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.594217][ T8037] RIP: 0033:0x7f2e1619c799 [ 203.594245][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.594273][ T8037] RSP: 002b:00007f2e17123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 203.594304][ T8037] RAX: ffffffffffffffda RBX: 00007f2e16415fa0 RCX: 00007f2e1619c799 [ 203.594324][ T8037] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 203.594341][ T8037] RBP: 00007f2e16232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 203.594359][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.594377][ T8037] R13: 00007f2e16416038 R14: 00007f2e16415fa0 R15: 00007ffec72a3bc8 [ 203.594419][ T8037] [ 203.865126][ T8045] [U] [ 203.868134][ T8045] [U] [ 203.870893][ T8045] [U] [ 203.873646][ T8045] [U] [ 204.113263][ T5836] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 204.121848][ T5836] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 204.233414][ T8045] [U] [ 204.236369][ T8045] [U] [ 204.239198][ T8045] [U] [ 204.241930][ T8045] [U] [ 204.375205][ T8045] [U] [ 204.378077][ T8045] [U] [ 204.380905][ T8045] [U] [ 204.383663][ T8045] [U] [ 204.615951][ T8045] [U] [ 204.618876][ T8045] [U] [ 204.621619][ T8045] [U] [ 204.624366][ T8045] [U] [ 204.659946][ T8045] [U] [ 204.662722][ T8045] [U] [ 204.665557][ T8045] [U] [ 204.668289][ T8045] [U] [ 204.722748][ T8045] [U] [ 204.725503][ T8045] [U] [ 204.728214][ T8045] [U] [ 204.730917][ T8045] [U] [ 204.734779][ T8045] [U] [ 204.737614][ T8045] [U] [ 204.740337][ T8045] [U] [ 204.743066][ T8045] [U] [ 204.747104][ T8045] [U] [ 204.749852][ T8045] [U] [ 204.752585][ T8045] [U] [ 204.755319][ T8045] [U] [ 204.759401][ T8045] [U] [ 204.762184][ T8045] [U] [ 204.764919][ T8045] [U] [ 204.767648][ T8045] [U] [ 204.772257][ T8045] [U] [ 204.774994][ T8045] [U] [ 204.777706][ T8045] [U] [ 204.780428][ T8045] [U] [ 204.823597][ T8045] [U] [ 204.826546][ T8045] [U] [ 204.829379][ T8045] [U] [ 204.832145][ T8045] [U] [ 204.872600][ T8045] [U] [ 204.875384][ T8045] [U] [ 204.878118][ T8045] [U] [ 204.880856][ T8045] [U] [ 204.904067][ T8045] [U] [ 204.906843][ T8045] [U] [ 204.909577][ T8045] [U] [ 204.912402][ T8045] [U] [ 204.933865][ T8045] [U] [ 204.936815][ T8045] [U] [ 204.939777][ T8045] [U] [ 204.942614][ T8045] [U] [ 205.030203][ T8045] [U] [ 205.394257][ T8070] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078801000 pfn:0x78800 [ 205.433190][ T8070] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 205.441909][ T8070] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 205.488367][ T8070] page_type: f5(slab) [ 205.506688][ T8070] raw: 00fff00000000240 ffff88813fe3d000 ffffea0001e27610 ffffea0001fa0610 [ 205.541238][ T8070] raw: ffff888078801000 0000000800080004 00000000f5000000 0000000000000000 [ 205.583344][ T8070] head: 00fff00000000240 ffff88813fe3d000 ffffea0001e27610 ffffea0001fa0610 [ 205.626484][ T8070] head: ffff888078801000 0000000800080004 00000000f5000000 0000000000000000 [ 205.643491][ T8070] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 205.652505][ T8070] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 205.713130][ T8070] page dumped because: unmovable page [ 205.718852][ T8070] page_owner tracks the page as allocated [ 205.774042][ T8070] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 84912180463, free_ts 84902878087 [ 205.863113][ T8070] post_alloc_hook+0x153/0x170 [ 205.873414][ T8070] get_page_from_freelist+0x111d/0x3140 [ 205.879286][ T8070] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 205.918286][ T8070] new_slab+0xa6/0x6d0 [ 205.964445][ T8070] refill_objects+0x26b/0x400 [ 205.996455][ T8070] __pcs_replace_empty_main+0x19f/0x600 [ 206.033229][ T8070] __kmalloc_cache_noprof+0x493/0x6f0 [ 206.038786][ T8070] rtnl_newlink+0x126/0x2380 [ 206.073498][ T8070] rtnetlink_rcv_msg+0x95e/0xe90 [ 206.079645][ T8070] netlink_rcv_skb+0x159/0x420 [ 206.103140][ T8070] netlink_unicast+0x5aa/0x870 [ 206.108571][ T8070] netlink_sendmsg+0x8b0/0xda0 [ 206.114413][ T8070] __sys_sendto+0x4aa/0x520 [ 206.119050][ T8070] __x64_sys_sendto+0xe0/0x1c0 [ 206.153195][ T8070] do_syscall_64+0x106/0xf80 [ 206.157877][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.192804][ T8070] page last free pid 5822 tgid 5822 stack trace: [ 206.279205][ T8070] __free_frozen_pages+0x7e1/0x10d0 [ 206.293151][ T8070] qlist_free_all+0x47/0xe0 [ 206.304428][ T8070] kasan_quarantine_reduce+0x1a0/0x1f0 [ 206.310033][ T8070] __kasan_slab_alloc+0x69/0x90 [ 206.368143][ T8070] __kmalloc_cache_noprof+0x243/0x6f0 [ 206.373781][ T8070] ipv6_add_dev+0x60b/0x1520 [ 206.378553][ T8070] addrconf_notify+0x563/0x19c0 [ 206.433121][ T8070] notifier_call_chain+0x99/0x420 [ 206.443760][ T8070] call_netdevice_notifiers_info+0xbe/0x110 [ 206.449921][ T8070] register_netdevice+0x16e6/0x2210 [ 206.471570][ T8070] batadv_meshif_newlink+0x8f/0xc0 [ 206.476976][ T8070] rtnl_newlink+0x1494/0x2380 [ 206.497600][ T8070] rtnetlink_rcv_msg+0x95e/0xe90 [ 206.504903][ T8070] netlink_rcv_skb+0x159/0x420 [ 206.509890][ T8070] netlink_unicast+0x5aa/0x870 [ 206.522852][ T8070] netlink_sendmsg+0x8b0/0xda0 [ 206.764280][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 206.772214][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 206.772644][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 206.778692][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 207.294067][ T8071] page: refcount:4 mapcount:0 mapping:ffff88806d479090 index:0x1140 pfn:0x78306 [ 207.308478][ T8071] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 207.317484][ T8071] memcg:ffff88801dec8d40 [ 207.324591][ T8071] aops:shmem_aops ino:20e dentry name(?):"dev/zero" [ 207.331444][ T8071] flags: 0xfff00000020159(locked|uptodate|dirty|active|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 207.344838][ T8071] raw: 00fff00000020159 ffffea0001e0c508 ffffea0001486108 ffff88806d479090 [ 207.353631][ T8071] raw: 0000000000001140 0000000000000000 00000004ffffffff ffff88801dec8d40 [ 207.363154][ T8071] head: 00fff00000020159 ffffea0001e0c508 ffffea0001486108 ffff88806d479090 [ 207.372037][ T8071] head: 0000000000001140 0000000000000000 00000004ffffffff ffff88801dec8d40 [ 207.380879][ T8071] head: 00fff00000000201 ffffea0001e0c181 00000000ffffffff 00000000ffffffff [ 207.393154][ T8071] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 207.402123][ T8071] page dumped because: unmovable page [ 207.408199][ T8071] page_owner tracks the page as allocated [ 207.414484][ T8071] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7904, tgid 7904 (syz.3.467), ts 207405184759, free_ts 207397227187 [ 207.443165][ T8071] post_alloc_hook+0x153/0x170 [ 207.448468][ T8071] get_page_from_freelist+0x111d/0x3140 [ 207.454333][ T8071] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 207.463286][ T8071] alloc_pages_mpol+0x1fb/0x550 [ 207.468202][ T8071] folio_alloc_mpol_noprof+0x36/0x340 [ 207.483315][ T8071] shmem_alloc_folio+0x135/0x160 [ 207.493556][ T8071] shmem_alloc_and_add_folio+0x371/0xd40 [ 207.499447][ T8071] shmem_get_folio_gfp+0x6ab/0x1900 [ 207.513125][ T8071] shmem_write_begin+0x1a4/0x420 [ 207.518153][ T8071] generic_perform_write+0x292/0xa40 [ 207.553152][ T8071] shmem_file_write_iter+0x10e/0x140 [ 207.609697][ T8071] __kernel_write_iter+0x2ac/0x920 [ 207.623186][ T8071] dump_user_range+0x3f9/0xb50 [ 207.643942][ T8071] elf_core_dump+0x2d5f/0x3d10 [ 207.648797][ T8071] vfs_coredump+0x27bc/0x5570 [ 207.673218][ T8071] get_signal+0x1f2a/0x21e0 [ 207.678271][ T8071] page last free pid 8077 tgid 8074 stack trace: [ 207.703175][ T8071] __free_frozen_pages+0x7e1/0x10d0 [ 207.718760][ T8071] __folio_put+0x3b4/0x540 [ 207.739048][ T8071] collapse_file+0x3537/0x3cc0 [ 207.749238][ T8071] hpage_collapse_scan_file+0x603/0x1fc0 [ 207.769539][ T8071] madvise_collapse+0x412/0xbe0 [ 207.779690][ T8071] madvise_vma_behavior+0x1987/0x3050 [ 207.789832][ T8071] madvise_walk_vmas+0x2fe/0xa90 [ 207.799989][ T8071] madvise_do_behavior+0x1ea/0x510 [ 207.815385][ T8071] do_madvise+0x195/0x240 [ 207.823134][ T8071] __x64_sys_madvise+0xa9/0x110 [ 207.828461][ T8071] do_syscall_64+0x106/0xf80 [ 207.843159][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.603255][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 208.902519][ T8107] openvswitch: netlink: Key type 198 is out of range max 32 [ 209.524945][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 209.838748][ T8097] kexec: Could not allocate control_code_buffer [ 210.575628][ T8133] netlink: 'syz.3.514': attribute type 23 has an invalid length. [ 212.530235][ T30] audit: type=1800 audit(6442450989.518:11): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.524" name="lu_gp_id" dev="configfs" ino=20486 res=0 errno=0 [ 212.764019][ T8157] FAULT_INJECTION: forcing a failure. [ 212.764019][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 212.803015][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.0.523 Tainted: G U L syzkaller #0 PREEMPT(full) [ 212.803071][ T8157] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 212.803081][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.803097][ T8157] Call Trace: [ 212.803107][ T8157] [ 212.803118][ T8157] dump_stack_lvl+0x100/0x190 [ 212.803170][ T8157] should_fail_ex.cold+0x5/0xa [ 212.803205][ T8157] should_failslab+0xc2/0x120 [ 212.803235][ T8157] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 212.803276][ T8157] ? security_inode_alloc+0x3b/0x2c0 [ 212.803319][ T8157] ? lockdep_init_map_type+0x5c/0x250 [ 212.803364][ T8157] security_inode_alloc+0x3b/0x2c0 [ 212.803409][ T8157] inode_init_always_gfp+0xced/0x1040 [ 212.803461][ T8157] alloc_inode+0x8e/0x250 [ 212.803499][ T8157] new_inode+0x22/0x1c0 [ 212.803539][ T8157] __debugfs_create_file+0x105/0x4f0 [ 212.803590][ T8157] debugfs_create_file_full+0x41/0x60 [ 212.803638][ T8157] kvm_dev_ioctl+0x1491/0x1a50 [ 212.803687][ T8157] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 212.803747][ T8157] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 212.803784][ T8157] __x64_sys_ioctl+0x18e/0x210 [ 212.803829][ T8157] do_syscall_64+0x106/0xf80 [ 212.803864][ T8157] ? clear_bhb_loop+0x40/0x90 [ 212.803902][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.803934][ T8157] RIP: 0033:0x7f2e1619c799 [ 212.803958][ T8157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.803986][ T8157] RSP: 002b:00007f2e17123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.804023][ T8157] RAX: ffffffffffffffda RBX: 00007f2e16415fa0 RCX: 00007f2e1619c799 [ 212.804041][ T8157] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 212.804058][ T8157] RBP: 00007f2e16232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 212.804076][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.804091][ T8157] R13: 00007f2e16416038 R14: 00007f2e16415fa0 R15: 00007ffec72a3bc8 [ 212.804131][ T8157] [ 213.013332][ T8157] debugfs: out of free dentries, can not create file 'mmu_shadow_zapped' [ 213.227224][ T8166] futex_wake_op: syz.3.527 tries to shift op by -2048; fix this program [ 213.236154][ T8166] futex_wake_op: syz.3.527 tries to shift op by -2048; fix this program [ 213.586841][ T8168] netlink: 62 bytes leftover after parsing attributes in process `syz.2.528'. [ 215.142454][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 220.417131][ T8354] FAULT_INJECTION: forcing a failure. [ 220.417131][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 220.430151][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.1.564 Tainted: G U L syzkaller #0 PREEMPT(full) [ 220.430182][ T8354] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 220.430189][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.430199][ T8354] Call Trace: [ 220.430205][ T8354] [ 220.430212][ T8354] dump_stack_lvl+0x100/0x190 [ 220.430248][ T8354] should_fail_ex.cold+0x5/0xa [ 220.430269][ T8354] should_failslab+0xc2/0x120 [ 220.430287][ T8354] __kmalloc_cache_noprof+0x7a/0x6f0 [ 220.430308][ T8354] ? __request_module+0x2b7/0x6c0 [ 220.430331][ T8354] ? lockdep_hardirqs_on+0x78/0x100 [ 220.430355][ T8354] __request_module+0x2b7/0x6c0 [ 220.430378][ T8354] ? __pfx___request_module+0x10/0x10 [ 220.430410][ T8354] ? __get_fs_type+0x12c/0x170 [ 220.430428][ T8354] ? __get_fs_type+0x12c/0x170 [ 220.430454][ T8354] get_fs_type+0xd7/0x190 [ 220.430473][ T8354] __x64_sys_fsopen+0xca/0x220 [ 220.430495][ T8354] do_syscall_64+0x106/0xf80 [ 220.430514][ T8354] ? clear_bhb_loop+0x40/0x90 [ 220.430536][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.430553][ T8354] RIP: 0033:0x7fa100b9c799 [ 220.430576][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.430593][ T8354] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 220.430611][ T8354] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 220.430623][ T8354] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 220.430634][ T8354] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 220.430645][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.430655][ T8354] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 220.430678][ T8354] [ 223.265975][ T8477] sctp: [Deprecated]: syz.3.573 (pid 8477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.265975][ T8477] Use struct sctp_sack_info instead [ 223.506054][ T8482] Invalid ELF header magic: != ELF [ 226.532490][ T8629] futex_wake_op: syz.1.586 tries to shift op by -2048; fix this program [ 226.545206][ T8629] futex_wake_op: syz.1.586 tries to shift op by -2048; fix this program [ 226.641897][ T8629] 0x000000000001-0x000000020000 : "" [ 226.924426][ T8629] ftl_cs: FTL header corrupt! [ 227.643440][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 227.909992][ T8673] netlink: 342 bytes leftover after parsing attributes in process `syz.1.592'. [ 227.945494][ T8673] netlink: 9568 bytes leftover after parsing attributes in process `syz.1.592'. [ 229.347879][ T8775] futex_wake_op: syz.0.598 tries to shift op by -2048; fix this program [ 229.367321][ T8775] futex_wake_op: syz.0.598 tries to shift op by -2048; fix this program [ 229.560794][ T8775] 0x000000000001-0x000000020000 : "" [ 229.600600][ T8775] ftl_cs: FTL header corrupt! [ 230.384709][ T8811] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 230.572141][ T8819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.604'. [ 230.582974][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 233.905055][ T8937] FAULT_INJECTION: forcing a failure. [ 233.905055][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 233.943425][ T8937] CPU: 0 UID: 0 PID: 8937 Comm: syz.1.625 Tainted: G U L syzkaller #0 PREEMPT(full) [ 233.943495][ T8937] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 233.943507][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.943523][ T8937] Call Trace: [ 233.943534][ T8937] [ 233.943545][ T8937] dump_stack_lvl+0x100/0x190 [ 233.943596][ T8937] should_fail_ex.cold+0x5/0xa [ 233.943631][ T8937] ? usb_hcd_submit_urb+0x601/0x2150 [ 233.943672][ T8937] should_failslab+0xc2/0x120 [ 233.943702][ T8937] __kmalloc_noprof+0xe0/0x850 [ 233.943742][ T8937] ? mark_held_locks+0x40/0x70 [ 233.943788][ T8937] usb_hcd_submit_urb+0x601/0x2150 [ 233.943845][ T8937] usb_submit_urb+0x8aa/0x1910 [ 233.943901][ T8937] ? __init_swait_queue_head+0xca/0x150 [ 233.943952][ T8937] usb_start_wait_urb+0x106/0x4c0 [ 233.944005][ T8937] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 233.944070][ T8937] ? __asan_memset+0x23/0x50 [ 233.944117][ T8937] usb_control_msg+0x326/0x4a0 [ 233.944164][ T8937] ? __pfx_usb_control_msg+0x10/0x10 [ 233.944222][ T8937] hub_ext_port_status+0x152/0x600 [ 233.944279][ T8937] hub_activate+0x6d8/0x1d50 [ 233.944323][ T8937] ? __pfx_hub_activate+0x10/0x10 [ 233.944350][ T8937] ? find_held_lock+0x2b/0x80 [ 233.944378][ T8937] ? usb_generic_driver_resume+0x70/0xa0 [ 233.944426][ T8937] ? usb_generic_driver_resume+0x70/0xa0 [ 233.944498][ T8937] hub_resume+0xb0/0x400 [ 233.944531][ T8937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.944570][ T8937] ? __pfx_hub_resume+0x10/0x10 [ 233.944602][ T8937] ? __pfx_hcd_bus_resume+0x10/0x10 [ 233.944655][ T8937] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 233.944708][ T8937] usb_resume_both+0x237/0x9a0 [ 233.944748][ T8937] ? __pfx_usb_resume_both+0x10/0x10 [ 233.944783][ T8937] ? __rpm_callback+0x272/0x620 [ 233.944823][ T8937] ? __pfx_usb_runtime_resume+0x10/0x10 [ 233.944859][ T8937] ? rcu_is_watching+0x12/0xc0 [ 233.944906][ T8937] ? __pfx_usb_runtime_resume+0x10/0x10 [ 233.944950][ T8937] __rpm_callback+0xc8/0x620 [ 233.944986][ T8937] ? read_tsc+0x9/0x20 [ 233.945016][ T8937] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 233.945050][ T8937] ? __pfx_usb_runtime_resume+0x10/0x10 [ 233.945095][ T8937] rpm_callback+0x16a/0x1b0 [ 233.945134][ T8937] ? __pfx_usb_runtime_resume+0x10/0x10 [ 233.945179][ T8937] rpm_resume+0xd3e/0x1350 [ 233.945229][ T8937] ? __pfx_rpm_resume+0x10/0x10 [ 233.945267][ T8937] ? do_raw_spin_lock+0x128/0x260 [ 233.945313][ T8937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.945361][ T8937] ? _raw_spin_lock_irqsave+0x52/0x60 [ 233.945402][ T8937] __pm_runtime_resume+0xb6/0x170 [ 233.945447][ T8937] usb_autoresume_device+0x23/0xe0 [ 233.945502][ T8937] usbdev_open+0x228/0x870 [ 233.945547][ T8937] ? kobject_get_unless_zero+0x156/0x200 [ 233.945590][ T8937] ? __pfx_usbdev_open+0x10/0x10 [ 233.945628][ T8937] ? chrdev_open+0x10b/0x6a0 [ 233.945655][ T8937] ? chrdev_open+0x10b/0x6a0 [ 233.945690][ T8937] ? __pfx_usbdev_open+0x10/0x10 [ 233.945731][ T8937] chrdev_open+0x234/0x6a0 [ 233.945760][ T8937] ? __pfx_apparmor_file_open+0x10/0x10 [ 233.945803][ T8937] ? __pfx_chrdev_open+0x10/0x10 [ 233.945834][ T8937] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 233.945895][ T8937] do_dentry_open+0x6d8/0x1660 [ 233.945944][ T8937] ? __pfx_chrdev_open+0x10/0x10 [ 233.945984][ T8937] vfs_open+0x82/0x3f0 [ 233.946026][ T8937] path_openat+0x208c/0x31a0 [ 233.946071][ T8937] ? __pfx_path_openat+0x10/0x10 [ 233.946119][ T8937] do_file_open+0x20e/0x430 [ 233.946154][ T8937] ? __pfx_do_file_open+0x10/0x10 [ 233.946216][ T8937] ? alloc_fd+0x476/0x790 [ 233.946269][ T8937] ? do_getname+0x191/0x390 [ 233.946310][ T8937] do_sys_openat2+0x10d/0x1e0 [ 233.946349][ T8937] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.946405][ T8937] __x64_sys_openat+0x12d/0x210 [ 233.946446][ T8937] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.946518][ T8937] do_syscall_64+0x106/0xf80 [ 233.946551][ T8937] ? clear_bhb_loop+0x40/0x90 [ 233.946592][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.946625][ T8937] RIP: 0033:0x7fa100b9c799 [ 233.946655][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.946685][ T8937] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.946714][ T8937] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 233.946735][ T8937] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 233.946754][ T8937] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 233.946772][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.946791][ T8937] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 233.946835][ T8937] [ 233.978399][ T8937] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 234.895382][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 234.908318][ T8956] Invalid ELF header magic: != ELF [ 234.924548][ T8958] netlink: 25 bytes leftover after parsing attributes in process `syz.1.630'. [ 236.109395][ T8993] zswap: compressor û not available [ 238.594967][ T9183] binder: 9181:9183 ioctl c00c620f 200000000100 returned -22 [ 244.111644][ T9387] FAULT_INJECTION: forcing a failure. [ 244.111644][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 244.153191][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.1.674 Tainted: G U L syzkaller #0 PREEMPT(full) [ 244.153246][ T9387] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 244.153258][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.153282][ T9387] Call Trace: [ 244.153292][ T9387] [ 244.153304][ T9387] dump_stack_lvl+0x100/0x190 [ 244.153353][ T9387] should_fail_ex.cold+0x5/0xa [ 244.153391][ T9387] should_failslab+0xc2/0x120 [ 244.153422][ T9387] __kmalloc_cache_noprof+0x7a/0x6f0 [ 244.153458][ T9387] ? kernfs_fop_open+0x9f4/0xd50 [ 244.153497][ T9387] kernfs_fop_open+0x9f4/0xd50 [ 244.153538][ T9387] do_dentry_open+0x6d8/0x1660 [ 244.153584][ T9387] ? __pfx_kernfs_fop_open+0x10/0x10 [ 244.153627][ T9387] vfs_open+0x82/0x3f0 [ 244.153669][ T9387] path_openat+0x208c/0x31a0 [ 244.153711][ T9387] ? __pfx_path_openat+0x10/0x10 [ 244.153756][ T9387] do_file_open+0x20e/0x430 [ 244.153788][ T9387] ? __pfx_do_file_open+0x10/0x10 [ 244.153847][ T9387] ? alloc_fd+0x476/0x790 [ 244.153896][ T9387] ? do_getname+0x191/0x390 [ 244.153936][ T9387] do_sys_openat2+0x10d/0x1e0 [ 244.153974][ T9387] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.154029][ T9387] __x64_sys_openat+0x12d/0x210 [ 244.154068][ T9387] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.154132][ T9387] do_syscall_64+0x106/0xf80 [ 244.154168][ T9387] ? clear_bhb_loop+0x40/0x90 [ 244.154207][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.154239][ T9387] RIP: 0033:0x7fa100b9c799 [ 244.154266][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.154371][ T9387] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.154402][ T9387] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 244.154422][ T9387] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 244.154441][ T9387] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 244.154459][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.154477][ T9387] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 244.154522][ T9387] [ 245.058000][ T9448] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 246.016752][ T9473] FAULT_INJECTION: forcing a failure. [ 246.016752][ T9473] name failslab, interval 1, probability 0, space 0, times 0 [ 246.082911][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.1.683 Tainted: G U L syzkaller #0 PREEMPT(full) [ 246.082964][ T9473] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 246.082976][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.082993][ T9473] Call Trace: [ 246.083003][ T9473] [ 246.083015][ T9473] dump_stack_lvl+0x100/0x190 [ 246.083068][ T9473] should_fail_ex.cold+0x5/0xa [ 246.083103][ T9473] should_failslab+0xc2/0x120 [ 246.083132][ T9473] __kmalloc_cache_noprof+0x7a/0x6f0 [ 246.083169][ T9473] ? alloc_bprm+0x86/0x710 [ 246.083217][ T9473] alloc_bprm+0x86/0x710 [ 246.083261][ T9473] do_execveat_common.isra.0+0x19c/0x580 [ 246.083303][ T9473] ? do_getname+0x191/0x390 [ 246.083341][ T9473] __x64_sys_execve+0x93/0xd0 [ 246.083387][ T9473] do_syscall_64+0x106/0xf80 [ 246.083420][ T9473] ? clear_bhb_loop+0x40/0x90 [ 246.083458][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.083489][ T9473] RIP: 0033:0x7fa100b9c799 [ 246.083523][ T9473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.083552][ T9473] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 246.083581][ T9473] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 246.083602][ T9473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 246.083630][ T9473] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 246.083648][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.083668][ T9473] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 246.083711][ T9473] [ 247.032722][ T9507] Invalid ELF header magic: != ELF [ 247.494186][ T9573] ptp ptp0: only physical clock in use now [ 249.621624][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'. [ 249.673533][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.786857][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.887032][ T9661] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.713'. [ 254.362848][ T9949] FAULT_INJECTION: forcing a failure. [ 254.362848][ T9949] name failslab, interval 1, probability 0, space 0, times 0 [ 254.381535][ T9949] CPU: 1 UID: 0 PID: 9949 Comm: syz.1.739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 254.381584][ T9949] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 254.381594][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.381610][ T9949] Call Trace: [ 254.381620][ T9949] [ 254.381632][ T9949] dump_stack_lvl+0x100/0x190 [ 254.381678][ T9949] should_fail_ex.cold+0x5/0xa [ 254.381713][ T9949] should_failslab+0xc2/0x120 [ 254.381741][ T9949] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 254.381778][ T9949] ? copy_net_ns+0xe8/0x7c0 [ 254.381822][ T9949] copy_net_ns+0xe8/0x7c0 [ 254.381855][ T9949] ? copy_cgroup_ns+0x71/0x970 [ 254.381889][ T9949] create_new_namespaces+0x3ea/0xac0 [ 254.381928][ T9949] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 254.381961][ T9949] ksys_unshare+0x473/0xad0 [ 254.381998][ T9949] ? __pfx_ksys_unshare+0x10/0x10 [ 254.382046][ T9949] __x64_sys_unshare+0x31/0x40 [ 254.382078][ T9949] do_syscall_64+0x106/0xf80 [ 254.382107][ T9949] ? clear_bhb_loop+0x40/0x90 [ 254.382144][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.382173][ T9949] RIP: 0033:0x7fa100b9c799 [ 254.382198][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.382236][ T9949] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 254.382275][ T9949] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 254.382295][ T9949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 254.382312][ T9949] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 254.382328][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.382344][ T9949] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 254.382383][ T9949] [ 254.893402][ T9949] vhci_hcd vhci_hcd.0: default hub control req: 0b01 v0008 i0004 l2047 [ 255.892264][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898772][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.225117][T10040] netlink: 342 bytes leftover after parsing attributes in process `syz.3.750'. [ 258.616223][T10183] openvswitch: netlink: IP tunnel TTL not specified. [ 261.829431][T10322] can: request_module (can-proto-4) failed. [ 261.852714][T10321] can: request_module (can-proto-4) failed. [ 263.564308][T10441] openvswitch: netlink: Message has 51 unknown bytes. [ 264.635565][T10491] openvswitch: netlink: IP tunnel dst address not specified [ 265.910766][T10561] netlink: 342 bytes leftover after parsing attributes in process `syz.3.795'. [ 265.934222][T10561] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.942336][T10561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.949822][T10561] IPv6: NLM_F_CREATE should be set when creating new route [ 265.957146][T10561] IPv6: NLM_F_CREATE should be set when creating new route [ 266.025446][T10567] netlink: 342 bytes leftover after parsing attributes in process `syz.3.795'. [ 266.038835][T10567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.895948][T10827] FAULT_INJECTION: forcing a failure. [ 270.895948][T10827] name failslab, interval 1, probability 0, space 0, times 0 [ 270.933894][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz.1.813 Tainted: G U L syzkaller #0 PREEMPT(full) [ 270.933949][T10827] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 270.933960][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.933979][T10827] Call Trace: [ 270.933989][T10827] [ 270.934001][T10827] dump_stack_lvl+0x100/0x190 [ 270.934051][T10827] should_fail_ex.cold+0x5/0xa [ 270.934098][T10827] should_failslab+0xc2/0x120 [ 270.934130][T10827] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 270.934172][T10827] ? sock_alloc_inode+0x25/0x1c0 [ 270.934219][T10827] ? __pfx_sock_alloc_inode+0x10/0x10 [ 270.934260][T10827] sock_alloc_inode+0x25/0x1c0 [ 270.934300][T10827] alloc_inode+0x68/0x250 [ 270.934338][T10827] sock_alloc+0x44/0x280 [ 270.934368][T10827] ? security_socket_create+0x7f/0x250 [ 270.934414][T10827] __sock_create+0xc2/0x860 [ 270.934465][T10827] __sys_socket+0x14d/0x260 [ 270.934513][T10827] ? __pfx___sys_socket+0x10/0x10 [ 270.934568][T10827] __x64_sys_socket+0x72/0xb0 [ 270.934614][T10827] ? lockdep_hardirqs_on+0x78/0x100 [ 270.934650][T10827] do_syscall_64+0x106/0xf80 [ 270.934680][T10827] ? clear_bhb_loop+0x40/0x90 [ 270.934724][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.934754][T10827] RIP: 0033:0x7fa100b9c799 [ 270.934780][T10827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.934809][T10827] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 270.934840][T10827] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 270.934857][T10827] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 270.934875][T10827] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 270.934892][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.934910][T10827] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 270.934948][T10827] [ 270.934963][T10827] socket: no more sockets [ 276.027997][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 278.770900][T11193] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 278.779299][T11193] nbd: error processing sock list [ 278.965127][T11200] FAULT_INJECTION: forcing a failure. [ 278.965127][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 279.056857][T11200] CPU: 0 UID: 0 PID: 11200 Comm: syz.0.855 Tainted: G U L syzkaller #0 PREEMPT(full) [ 279.056907][T11200] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 279.056918][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.056935][T11200] Call Trace: [ 279.056945][T11200] [ 279.056956][T11200] dump_stack_lvl+0x100/0x190 [ 279.057003][T11200] should_fail_ex.cold+0x5/0xa [ 279.057038][T11200] should_failslab+0xc2/0x120 [ 279.057067][T11200] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 279.057107][T11200] ? do_getname+0x35/0x390 [ 279.057140][T11200] ? find_held_lock+0x2b/0x80 [ 279.057173][T11200] do_getname+0x35/0x390 [ 279.057211][T11200] do_sys_openat2+0xc5/0x1e0 [ 279.057256][T11200] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.057290][T11200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.057331][T11200] ? __fget_files+0x21f/0x3d0 [ 279.057383][T11200] __x64_sys_openat+0x12d/0x210 [ 279.057429][T11200] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.057463][T11200] ? ksys_write+0x1ac/0x250 [ 279.057520][T11200] do_syscall_64+0x106/0xf80 [ 279.057551][T11200] ? clear_bhb_loop+0x40/0x90 [ 279.057587][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.057616][T11200] RIP: 0033:0x7f2e1619c799 [ 279.057639][T11200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.057667][T11200] RSP: 002b:00007f2e17123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.057695][T11200] RAX: ffffffffffffffda RBX: 00007f2e16415fa0 RCX: 00007f2e1619c799 [ 279.057714][T11200] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 279.057732][T11200] RBP: 00007f2e17123090 R08: 0000000000000000 R09: 0000000000000000 [ 279.057749][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.057765][T11200] R13: 00007f2e16416038 R14: 00007f2e16415fa0 R15: 00007ffec72a3bc8 [ 279.057812][T11200] [ 280.875737][ T30] audit: type=1807 audit(2147483671.430:12): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 280.915034][ T30] audit: type=1802 audit(2147483671.430:13): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.870" res=0 errno=0 [ 280.955518][T11260] ima: policy update failed [ 280.983920][ T30] audit: type=1807 audit(2147483671.440:14): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 281.004145][ T30] audit: type=1802 audit(2147483671.440:15): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.870" res=0 errno=0 [ 281.036793][T11264] netlink: 326 bytes leftover after parsing attributes in process `syz.2.871'. [ 281.046290][ T30] audit: type=1807 audit(2147483671.440:16): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 281.084971][ T30] audit: type=1802 audit(2147483671.440:17): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.870" res=0 errno=0 [ 281.143231][ T30] audit: type=1807 audit(2147483671.440:18): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 281.167103][ T30] audit: type=1802 audit(2147483671.440:19): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.870" res=0 errno=0 [ 281.232235][ T30] audit: type=1807 audit(2147483671.440:20): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 281.249662][ T30] audit: type=1802 audit(2147483671.440:21): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.870" res=0 errno=0 [ 282.298597][T11298] openvswitch: netlink: Flow key attr not present in new flow. [ 285.623988][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 285.688231][T11442] zswap: compressor not available [ 285.977915][T11480] zswap: compressor  not available [ 286.398599][T11495] Invalid ELF header magic: != ELF [ 286.459210][T11494] netlink: 110 bytes leftover after parsing attributes in process `syz.2.907'. [ 286.518543][T11491] [U] ^\ [ 288.439981][T11645] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 289.339651][T11704] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 290.314869][T11733] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 292.289975][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 292.290000][ T30] audit: type=1800 audit(2147483682.850:69): pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.942" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 295.771051][T11970] netlink: 226 bytes leftover after parsing attributes in process `syz.3.959'. [ 295.798938][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 295.823699][T11970] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 296.250941][T11966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.260224][T11966] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 296.286584][T11966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.296835][T11966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 296.331564][T11966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.345567][T11966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 296.367109][T11966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 296.381604][T11966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.388434][T11966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 296.401455][T11966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 296.838714][T12027] netlink: 350 bytes leftover after parsing attributes in process `syz.1.966'. [ 297.017427][T12027] netlink: zone id is out of range [ 297.053207][T12027] netlink: zone id is out of range [ 297.074023][T12027] netlink: zone id is out of range [ 297.097826][T12027] netlink: zone id is out of range [ 297.144157][T12027] netlink: zone id is out of range [ 297.184688][T12027] netlink: zone id is out of range [ 297.229588][T12027] netlink: zone id is out of range [ 297.249476][T12027] netlink: zone id is out of range [ 297.255306][T12027] netlink: zone id is out of range [ 297.563284][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 298.368069][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 298.374524][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 298.453355][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 299.643202][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 300.443544][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 300.449713][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 300.523377][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 302.077581][T12143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 302.103969][T12143] veth1_vlan: entered allmulticast mode [ 302.515069][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 302.524810][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 302.614981][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 302.884344][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.988'. [ 303.015819][T12147] bond0: (slave bond_slave_1): Releasing backup interface [ 304.279826][T12223] netlink: 80 bytes leftover after parsing attributes in process `syz.1.994'. [ 304.323625][T12223] tc_dump_action: action bad kind [ 304.350501][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 307.386880][T12332] FAULT_INJECTION: forcing a failure. [ 307.386880][T12332] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.400300][T12332] CPU: 1 UID: 0 PID: 12332 Comm: syz.1.1009 Tainted: G U L syzkaller #0 PREEMPT(full) [ 307.400352][T12332] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 307.400363][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.400382][T12332] Call Trace: [ 307.400391][T12332] [ 307.400402][T12332] dump_stack_lvl+0x100/0x190 [ 307.400452][T12332] should_fail_ex.cold+0x5/0xa [ 307.400486][T12332] get_futex_key+0x1d2/0x1620 [ 307.400526][T12332] ? __pfx_get_futex_key+0x10/0x10 [ 307.400579][T12332] futex_wake+0xea/0x530 [ 307.400629][T12332] ? __pfx_futex_wake+0x10/0x10 [ 307.400683][T12332] ? errseq_sample+0x51/0x70 [ 307.400730][T12332] ? file_init_path+0x48e/0x670 [ 307.400772][T12332] do_futex+0x32b/0x350 [ 307.400812][T12332] ? __pfx_do_futex+0x10/0x10 [ 307.400853][T12332] ? fd_install+0x223/0x580 [ 307.400918][T12332] __x64_sys_futex+0x34f/0x4d0 [ 307.400960][T12332] ? __sys_socket+0xac/0x260 [ 307.401007][T12332] ? __pfx___x64_sys_futex+0x10/0x10 [ 307.401065][T12332] do_syscall_64+0x106/0xf80 [ 307.401099][T12332] ? clear_bhb_loop+0x40/0x90 [ 307.401138][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.401170][T12332] RIP: 0033:0x7fa100b9c799 [ 307.401196][T12332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.401226][T12332] RSP: 002b:00007fa10197a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.401258][T12332] RAX: ffffffffffffffda RBX: 00007fa100e15fa8 RCX: 00007fa100b9c799 [ 307.401279][T12332] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa100e15fac [ 307.401298][T12332] RBP: 00007fa100e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 307.401317][T12332] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 307.401336][T12332] R13: 00007fa100e16038 R14: 00007ffd253e61f0 R15: 00007ffd253e62d8 [ 307.401379][T12332] [ 307.607147][T12332] net_ratelimit: 1684 callbacks suppressed [ 307.607171][T12332] openvswitch: netlink: IP tunnel dst address not specified [ 308.678591][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.689413][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.700372][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.709200][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.720083][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.213812][T12357] chnl_net:caif_netlink_parms(): no params data found [ 309.370689][T12443] FAULT_INJECTION: forcing a failure. [ 309.370689][T12443] name failslab, interval 1, probability 0, space 0, times 0 [ 309.392079][T12443] CPU: 1 UID: 0 PID: 12443 Comm: syz.1.1020 Tainted: G U L syzkaller #0 PREEMPT(full) [ 309.392132][T12443] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 309.392144][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.392162][T12443] Call Trace: [ 309.392173][T12443] [ 309.392185][T12443] dump_stack_lvl+0x100/0x190 [ 309.392235][T12443] should_fail_ex.cold+0x5/0xa [ 309.392269][T12443] ? lsm_blob_alloc+0x68/0x90 [ 309.392301][T12443] should_failslab+0xc2/0x120 [ 309.392331][T12443] __kmalloc_noprof+0xe0/0x850 [ 309.392370][T12443] ? trace_kmem_cache_alloc+0xf3/0x120 [ 309.392407][T12443] lsm_blob_alloc+0x68/0x90 [ 309.392442][T12443] security_sk_alloc+0x2d/0x290 [ 309.392503][T12443] sk_prot_alloc+0x1d1/0x2a0 [ 309.392548][T12443] sk_alloc+0x36/0xe80 [ 309.392580][T12443] tipc_sk_create+0xf9/0x2420 [ 309.392635][T12443] ? find_held_lock+0x2b/0x80 [ 309.392671][T12443] ? __sock_create+0x2f3/0x860 [ 309.392711][T12443] ? __sock_create+0x2f3/0x860 [ 309.392759][T12443] __sock_create+0x339/0x860 [ 309.392810][T12443] __sys_socketpair+0x261/0x5b0 [ 309.392857][T12443] ? __pfx___sys_socketpair+0x10/0x10 [ 309.392905][T12443] ? xfd_validate_state+0x129/0x190 [ 309.392960][T12443] __x64_sys_socketpair+0x96/0x100 [ 309.393012][T12443] ? lockdep_hardirqs_on+0x78/0x100 [ 309.393044][T12443] do_syscall_64+0x106/0xf80 [ 309.393074][T12443] ? clear_bhb_loop+0x40/0x90 [ 309.393109][T12443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.393140][T12443] RIP: 0033:0x7fa100b9c799 [ 309.393167][T12443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.393197][T12443] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 309.393227][T12443] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 309.393247][T12443] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 309.393265][T12443] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 309.393283][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.393300][T12443] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 309.393342][T12443] [ 309.813852][T12357] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.821131][T12357] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.830138][T12357] bridge_slave_0: entered allmulticast mode [ 309.840656][T12357] bridge_slave_0: entered promiscuous mode [ 309.849704][T12357] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.857334][T12357] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.866347][T12357] bridge_slave_1: entered allmulticast mode [ 309.874694][T12357] bridge_slave_1: entered promiscuous mode [ 309.922939][T12357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.940638][T12357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.029930][T12357] team0: Port device team_slave_0 added [ 310.050430][T12357] team0: Port device team_slave_1 added [ 310.299201][T12357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.313176][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.413271][T12357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.463391][T12357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.480736][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.553764][T12357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.765168][ T5826] Bluetooth: hci4: command tx timeout [ 311.123995][T12357] hsr_slave_0: entered promiscuous mode [ 311.130492][T12357] hsr_slave_1: entered promiscuous mode [ 311.174116][T12357] debugfs: 'hsr0' already exists in 'hsr' [ 311.179977][T12357] Cannot create hsr debugfs directory [ 311.410780][ T9166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.742372][ T9166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.868427][ T9166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.701646][ T9166] bridge_slave_1: left allmulticast mode [ 312.722684][ T9166] bridge_slave_1: left promiscuous mode [ 312.742101][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.796482][T12780] netlink: 'syz.2.1028': attribute type 4 has an invalid length. [ 312.806104][ T9166] bridge_slave_0: left allmulticast mode [ 312.811801][ T9166] bridge_slave_0: left promiscuous mode [ 312.827792][T12773] netlink: 'syz.2.1028': attribute type 4 has an invalid length. [ 312.827792][T12780] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1028'. [ 312.835941][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.855654][ T5826] Bluetooth: hci4: command tx timeout [ 312.901564][T12773] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1028'. [ 313.383576][ T9166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.418532][ T9166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.448808][ T9166] bond0 (unregistering): Released all slaves [ 313.559951][T12357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.615607][T12357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.668094][ T9166] Â: left promiscuous mode [ 313.704964][T12357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.767462][T12357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.707546][T12357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.886618][T12357] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.923562][ T5826] Bluetooth: hci4: command tx timeout [ 315.054117][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.061365][ T9170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.131259][ T9166] hsr_slave_0: left promiscuous mode [ 315.153841][ T9166] hsr_slave_1: left promiscuous mode [ 315.169113][ T9166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.185911][ T9166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.207348][ T9166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.230202][ T9166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.444130][ T9166] veth1_macvtap: left promiscuous mode [ 315.450067][ T9166] veth0_macvtap: left promiscuous mode [ 315.483937][ T9166] veth1_vlan: left promiscuous mode [ 315.489529][ T9166] veth0_vlan: left promiscuous mode [ 316.126504][ T9166] team0 (unregistering): Port device team_slave_1 removed [ 316.154165][ T9166] team0 (unregistering): Port device team_slave_0 removed [ 316.429280][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.436729][ T9171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.003258][ T5826] Bluetooth: hci4: command tx timeout [ 317.343726][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.350111][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.976739][T12357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.315037][T13026] warning: `syz.1.1044' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 319.328007][T12357] veth0_vlan: entered promiscuous mode [ 319.361067][T12357] veth1_vlan: entered promiscuous mode [ 319.615782][T12357] veth0_macvtap: entered promiscuous mode [ 319.678019][T12357] veth1_macvtap: entered promiscuous mode [ 319.789914][T12357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.828541][T12357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.875789][T13128] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[13128] [ 319.901528][ T9166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.931396][T13128] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1054'. [ 319.957387][ T9166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.976910][ T9166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.014591][ T9166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.042276][ T9169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.068440][ T9169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.169290][ T9171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.200203][ T9171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.576808][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 321.587089][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 322.720587][T13327] bridge0: port 3(gretap0) entered blocking state [ 322.727999][T13327] bridge0: port 3(gretap0) entered disabled state [ 322.734840][T13327] gretap0: entered allmulticast mode [ 322.742230][T13327] gretap0: entered promiscuous mode [ 322.793962][T13327] FAULT_INJECTION: forcing a failure. [ 322.793962][T13327] name failslab, interval 1, probability 0, space 0, times 0 [ 322.806684][T13327] CPU: 0 UID: 0 PID: 13327 Comm: syz.1.1071 Tainted: G U L syzkaller #0 PREEMPT(full) [ 322.806734][T13327] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 322.806742][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.806753][T13327] Call Trace: [ 322.806760][T13327] [ 322.806768][T13327] dump_stack_lvl+0x100/0x190 [ 322.806806][T13327] should_fail_ex.cold+0x5/0xa [ 322.806827][T13327] ? switchdev_deferred_enqueue+0x3e/0x2d0 [ 322.806846][T13327] should_failslab+0xc2/0x120 [ 322.806864][T13327] __kmalloc_noprof+0xe0/0x850 [ 322.806893][T13327] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 322.806914][T13327] switchdev_deferred_enqueue+0x3e/0x2d0 [ 322.806935][T13327] switchdev_port_attr_set+0xb5/0x100 [ 322.806956][T13327] br_set_state+0x235/0x610 [ 322.806977][T13327] ? __pfx_br_set_state+0x10/0x10 [ 322.807000][T13327] ? do_raw_spin_lock+0x128/0x260 [ 322.807026][T13327] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.807054][T13327] br_init_port+0xc9/0x210 [ 322.807076][T13327] br_stp_enable_port+0x15/0x50 [ 322.807097][T13327] br_add_if+0x1781/0x1b40 [ 322.807115][T13327] ? veth_get_iflink+0x233/0x2c0 [ 322.807139][T13327] add_del_if+0x114/0x160 [ 322.807158][T13327] br_dev_siocdevprivate+0x8ac/0x1650 [ 322.807180][T13327] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 322.807208][T13327] ? lock_acquire+0x1cf/0x380 [ 322.807237][T13327] ? netdev_name_node_lookup+0x107/0x150 [ 322.807265][T13327] ? __mutex_lock+0x26a/0x1b90 [ 322.807289][T13327] dev_ifsioc+0xc1e/0x1e90 [ 322.807320][T13327] ? __pfx_dev_ifsioc+0x10/0x10 [ 322.807347][T13327] ? __pfx___mutex_lock+0x10/0x10 [ 322.807378][T13327] ? dev_load+0x8e/0x240 [ 322.807394][T13327] ? dev_load+0x8e/0x240 [ 322.807415][T13327] dev_ioctl+0x70e/0x1070 [ 322.807434][T13327] sock_ioctl+0x494/0x6b0 [ 322.807471][T13327] ? __pfx_sock_ioctl+0x10/0x10 [ 322.807511][T13327] ? hook_file_ioctl_common+0x146/0x410 [ 322.807563][T13327] ? __fget_files+0x21f/0x3d0 [ 322.807594][T13327] ? __pfx_sock_ioctl+0x10/0x10 [ 322.807622][T13327] __x64_sys_ioctl+0x18e/0x210 [ 322.807648][T13327] do_syscall_64+0x106/0xf80 [ 322.807666][T13327] ? clear_bhb_loop+0x40/0x90 [ 322.807688][T13327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.807723][T13327] RIP: 0033:0x7fa100b9c799 [ 322.807739][T13327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.807757][T13327] RSP: 002b:00007fa0fedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.807775][T13327] RAX: ffffffffffffffda RBX: 00007fa100e16090 RCX: 00007fa100b9c799 [ 322.807794][T13327] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 322.807805][T13327] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 322.807816][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.807827][T13327] R13: 00007fa100e16128 R14: 00007fa100e16090 R15: 00007ffd253e62d8 [ 322.807849][T13327] [ 322.807857][T13327] bridge0: error setting offload STP state on port 3(gretap0) [ 323.108908][T13327] bridge0: port 3(gretap0) entered forwarding state [ 323.448743][T13343] kAFS: unparsable volume name [ 323.527128][T13346] netlink: 9564 bytes leftover after parsing attributes in process `syz.2.1077'. [ 323.634383][ T5826] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 323.642946][ T5826] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 323.703324][T13349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.783351][T13349] i2c i2c-0: new_device: Can't parse I2C address [ 323.792428][T13349] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[13349] [ 324.805274][T13418] zram: Added device: zram1 [ 325.100985][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1084'. [ 326.287246][T13551] FAULT_INJECTION: forcing a failure. [ 326.287246][T13551] name fail_futex, interval 1, probability 0, space 0, times 0 [ 326.389895][T13551] CPU: 1 UID: 0 PID: 13551 Comm: syz.1.1088 Tainted: G U L syzkaller #0 PREEMPT(full) [ 326.389941][T13551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 326.389951][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.389965][T13551] Call Trace: [ 326.389973][T13551] [ 326.389983][T13551] dump_stack_lvl+0x100/0x190 [ 326.390023][T13551] should_fail_ex.cold+0x5/0xa [ 326.390050][T13551] get_futex_key+0x1d2/0x1620 [ 326.390082][T13551] ? __pfx_get_futex_key+0x10/0x10 [ 326.390121][T13551] futex_wake+0xea/0x530 [ 326.390157][T13551] ? __pfx_futex_wake+0x10/0x10 [ 326.390195][T13551] ? putname+0xb1/0x110 [ 326.390216][T13551] ? kmem_cache_free+0x124/0x6a0 [ 326.390254][T13551] do_futex+0x32b/0x350 [ 326.390284][T13551] ? __pfx_do_futex+0x10/0x10 [ 326.390311][T13551] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.390348][T13551] __x64_sys_futex+0x34f/0x4d0 [ 326.390380][T13551] ? __x64_sys_openat+0x12d/0x210 [ 326.390409][T13551] ? __pfx___x64_sys_futex+0x10/0x10 [ 326.390451][T13551] do_syscall_64+0x106/0xf80 [ 326.390477][T13551] ? clear_bhb_loop+0x40/0x90 [ 326.390515][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.390539][T13551] RIP: 0033:0x7fa100b9c799 [ 326.390560][T13551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.390584][T13551] RSP: 002b:00007fa10197a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 326.390608][T13551] RAX: ffffffffffffffda RBX: 00007fa100e15fa8 RCX: 00007fa100b9c799 [ 326.390624][T13551] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa100e15fac [ 326.390640][T13551] RBP: 00007fa100e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 326.390663][T13551] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 326.390678][T13551] R13: 00007fa100e16038 R14: 00007ffd253e61f0 R15: 00007ffd253e62d8 [ 326.390712][T13551] [ 331.445710][T13692] can: request_module (can-proto-4) failed. [ 331.915341][T13711] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 331.964166][T13711] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 331.972614][T13711] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1109'. [ 332.908035][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 338.283612][ T5826] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 338.819857][T14004] netlink: 'syz.2.1132': attribute type 1 has an invalid length. [ 340.362476][T14051] zswap: compressor û not available [ 340.702929][ T30] audit: type=1804 audit(2147483731.250:70): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1141" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 340.754174][T14085] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 342.605599][T14133] FAULT_INJECTION: forcing a failure. [ 342.605599][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 342.623462][T14133] CPU: 1 UID: 0 PID: 14133 Comm: syz.1.1152 Tainted: G U L syzkaller #0 PREEMPT(full) [ 342.623517][T14133] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 342.623529][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.623557][T14133] Call Trace: [ 342.623567][T14133] [ 342.623578][T14133] dump_stack_lvl+0x100/0x190 [ 342.623628][T14133] should_fail_ex.cold+0x5/0xa [ 342.623665][T14133] should_failslab+0xc2/0x120 [ 342.623695][T14133] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 342.623734][T14133] ? alloc_empty_file+0x55/0x1c0 [ 342.623776][T14133] alloc_empty_file+0x55/0x1c0 [ 342.623811][T14133] alloc_file_pseudo+0x13a/0x230 [ 342.623848][T14133] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 342.623880][T14133] ? alloc_fd+0x476/0x790 [ 342.623926][T14133] ? do_raw_spin_unlock+0x145/0x1e0 [ 342.623972][T14133] __anon_inode_getfile+0xe8/0x280 [ 342.624010][T14133] anon_inode_getfile_fmode+0x37/0xa0 [ 342.624045][T14133] do_signalfd4+0x1ed/0x480 [ 342.624080][T14133] __x64_sys_signalfd4+0x14b/0x1d0 [ 342.624115][T14133] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 342.624160][T14133] do_syscall_64+0x106/0xf80 [ 342.624194][T14133] ? clear_bhb_loop+0x40/0x90 [ 342.624229][T14133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.624259][T14133] RIP: 0033:0x7fa100b9c799 [ 342.624286][T14133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.624311][T14133] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 342.624341][T14133] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 342.624360][T14133] RDX: 0000000000000008 RSI: 0000000000000000 RDI: ffffffffffffffff [ 342.624378][T14133] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 342.624396][T14133] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 342.624414][T14133] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 342.624453][T14133] [ 343.503670][T14137] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1153'. [ 344.994224][T14169] FAULT_INJECTION: forcing a failure. [ 344.994224][T14169] name failslab, interval 1, probability 0, space 0, times 0 [ 344.996098][T14170] netlink: Conntrack attr has 16 unknown bytes [ 345.054955][T14169] CPU: 0 UID: 0 PID: 14169 Comm: syz.1.1161 Tainted: G U L syzkaller #0 PREEMPT(full) [ 345.054989][T14169] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 345.054996][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.055007][T14169] Call Trace: [ 345.055014][T14169] [ 345.055021][T14169] dump_stack_lvl+0x100/0x190 [ 345.055052][T14169] should_fail_ex.cold+0x5/0xa [ 345.055074][T14169] should_failslab+0xc2/0x120 [ 345.055093][T14169] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 345.055118][T14169] ? alloc_empty_file+0x55/0x1c0 [ 345.055138][T14169] ? __pfx_stack_trace_save+0x10/0x10 [ 345.055160][T14169] alloc_empty_file+0x55/0x1c0 [ 345.055181][T14169] path_openat+0xe8/0x31a0 [ 345.055196][T14169] ? kasan_save_stack+0x3f/0x50 [ 345.055220][T14169] ? kasan_save_stack+0x30/0x50 [ 345.055243][T14169] ? kasan_save_track+0x14/0x30 [ 345.055267][T14169] ? __kasan_slab_alloc+0x89/0x90 [ 345.055295][T14169] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 345.055319][T14169] ? do_getname+0x35/0x390 [ 345.055337][T14169] ? do_sys_openat2+0xc5/0x1e0 [ 345.055358][T14169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.055379][T14169] ? __pfx_path_openat+0x10/0x10 [ 345.055404][T14169] do_file_open+0x20e/0x430 [ 345.055424][T14169] ? __pfx_do_file_open+0x10/0x10 [ 345.055476][T14169] ? alloc_fd+0x476/0x790 [ 345.055534][T14169] ? do_getname+0x191/0x390 [ 345.055568][T14169] do_sys_openat2+0x10d/0x1e0 [ 345.055590][T14169] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.055620][T14169] __x64_sys_openat+0x12d/0x210 [ 345.055643][T14169] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.055674][T14169] do_syscall_64+0x106/0xf80 [ 345.055694][T14169] ? clear_bhb_loop+0x40/0x90 [ 345.055716][T14169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.055734][T14169] RIP: 0033:0x7fa100b5cfce [ 345.055750][T14169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 345.055767][T14169] RSP: 002b:00007fa0fedf5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.055785][T14169] RAX: ffffffffffffffda RBX: 00007fa0fedf66c0 RCX: 00007fa100b5cfce [ 345.055796][T14169] RDX: 0000000000000002 RSI: 00007fa0fedf5f90 RDI: ffffffffffffff9c [ 345.055807][T14169] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 345.055817][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.055827][T14169] R13: 00007fa100e16128 R14: 00007fa100e16090 R15: 00007ffd253e62d8 [ 345.055849][T14169] [ 347.441867][T14254] program syz.1.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.560162][T14267] Process accounting resumed [ 352.740742][T14505] FAULT_INJECTION: forcing a failure. [ 352.740742][T14505] name failslab, interval 1, probability 0, space 0, times 0 [ 352.780103][T14505] CPU: 1 UID: 0 PID: 14505 Comm: syz.1.1191 Tainted: G U L syzkaller #0 PREEMPT(full) [ 352.780147][T14505] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 352.780154][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.780164][T14505] Call Trace: [ 352.780171][T14505] [ 352.780178][T14505] dump_stack_lvl+0x100/0x190 [ 352.780210][T14505] should_fail_ex.cold+0x5/0xa [ 352.780231][T14505] should_failslab+0xc2/0x120 [ 352.780249][T14505] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 352.780275][T14505] ? do_getname+0x35/0x390 [ 352.780295][T14505] ? find_held_lock+0x2b/0x80 [ 352.780315][T14505] do_getname+0x35/0x390 [ 352.780337][T14505] do_sys_openat2+0xc5/0x1e0 [ 352.780359][T14505] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.780389][T14505] __x64_sys_openat+0x12d/0x210 [ 352.780411][T14505] ? __pfx___x64_sys_openat+0x10/0x10 [ 352.780442][T14505] do_syscall_64+0x106/0xf80 [ 352.780462][T14505] ? clear_bhb_loop+0x40/0x90 [ 352.780484][T14505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.780502][T14505] RIP: 0033:0x7fa100b9c799 [ 352.780516][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.780534][T14505] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.780552][T14505] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 352.780563][T14505] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 352.780574][T14505] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 352.780584][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.780595][T14505] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 352.780617][T14505] [ 353.398622][T14516] Console: switching to colour VGA+ 80x25 [ 357.655280][T14690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1215'. [ 357.945685][T14708] futex_wake_op: syz.2.1218 tries to shift op by -2048; fix this program [ 357.956296][T14708] futex_wake_op: syz.2.1218 tries to shift op by -2048; fix this program [ 358.532914][T14722] netlink: 9548 bytes leftover after parsing attributes in process `syz.2.1224'. [ 358.784416][T14726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.799262][T14726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.817599][T14726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.838795][T14726] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 358.860175][T14726] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 358.885577][T14726] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 358.919756][T14726] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 359.702777][T14769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1228'. [ 360.382818][T14857] netlink: 9536 bytes leftover after parsing attributes in process `syz.3.1234'. [ 360.732339][T14872] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1238'. [ 360.790156][T14875] netlink: 9460 bytes leftover after parsing attributes in process `syz.1.1239'. [ 360.843346][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 360.849544][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 360.853045][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 360.934176][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.260772][T14896] FAULT_INJECTION: forcing a failure. [ 361.260772][T14896] name failslab, interval 1, probability 0, space 0, times 0 [ 361.280603][T14896] CPU: 1 UID: 0 PID: 14896 Comm: syz.1.1244 Tainted: G U L syzkaller #0 PREEMPT(full) [ 361.280663][T14896] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 361.280675][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 361.280694][T14896] Call Trace: [ 361.280704][T14896] [ 361.280716][T14896] dump_stack_lvl+0x100/0x190 [ 361.280770][T14896] should_fail_ex.cold+0x5/0xa [ 361.280806][T14896] should_failslab+0xc2/0x120 [ 361.280836][T14896] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 361.280880][T14896] ? alloc_empty_file+0x55/0x1c0 [ 361.280925][T14896] alloc_empty_file+0x55/0x1c0 [ 361.280963][T14896] alloc_file_pseudo+0x13a/0x230 [ 361.281001][T14896] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 361.281061][T14896] __shmem_file_setup+0x221/0x490 [ 361.281102][T14896] ? __pfx___shmem_file_setup+0x10/0x10 [ 361.281143][T14896] ? vm_area_alloc+0x1f/0x160 [ 361.281185][T14896] shmem_zero_setup+0x96/0x1b0 [ 361.281232][T14896] __mmap_region+0x2198/0x29e0 [ 361.281276][T14896] ? __pfx___mmap_region+0x10/0x10 [ 361.281325][T14896] ? set_next_entity+0x11b/0x9c0 [ 361.281378][T14896] ? __lock_acquire+0x4a5/0x2630 [ 361.281416][T14896] ? find_held_lock+0x2b/0x80 [ 361.281462][T14896] ? find_held_lock+0x2b/0x80 [ 361.281488][T14896] ? finish_task_switch.isra.0+0x200/0xb80 [ 361.281521][T14896] ? finish_task_switch.isra.0+0x200/0xb80 [ 361.281570][T14896] ? trace_sched_exit_tp+0x13a/0x180 [ 361.281605][T14896] ? __schedule+0x1000/0x60e0 [ 361.281691][T14896] ? rcu_is_watching+0x12/0xc0 [ 361.281738][T14896] ? cap_capable+0x107/0x460 [ 361.281786][T14896] mmap_region+0x180/0x3e0 [ 361.281838][T14896] do_mmap+0xc63/0x12f0 [ 361.281879][T14896] ? __pfx_do_mmap+0x10/0x10 [ 361.281910][T14896] ? __pfx_down_write_killable+0x10/0x10 [ 361.281959][T14896] vm_mmap_pgoff+0x29e/0x470 [ 361.281999][T14896] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 361.282036][T14896] ? do_futex+0x192/0x350 [ 361.282084][T14896] ? __pfx_do_futex+0x10/0x10 [ 361.282130][T14896] ksys_mmap_pgoff+0xe1/0x650 [ 361.282162][T14896] ? __x64_sys_futex+0x34f/0x4d0 [ 361.282199][T14896] ? __x64_sys_futex+0x358/0x4d0 [ 361.282240][T14896] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 361.282271][T14896] ? xfd_validate_state+0x129/0x190 [ 361.282321][T14896] __x64_sys_mmap+0x125/0x190 [ 361.282369][T14896] do_syscall_64+0x106/0xf80 [ 361.282401][T14896] ? clear_bhb_loop+0x40/0x90 [ 361.282440][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.282471][T14896] RIP: 0033:0x7fa100b9c799 [ 361.282498][T14896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.282528][T14896] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 361.282559][T14896] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 361.282579][T14896] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 361.282597][T14896] RBP: 00007fa100c32bd9 R08: fffffffffffffffa R09: 0000000000008000 [ 361.282616][T14896] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 361.282634][T14896] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 361.282677][T14896] [ 361.747102][T14896] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 362.125342][T14905] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1246'. [ 362.160768][T14905] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.505356][T14930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1250'. [ 362.923385][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 363.003709][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 363.599004][T14987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1253'. [ 364.020619][T15006] usb usb37: usbfs: process 15006 (syz.4.1258) did not claim interface 0 before use [ 364.027391][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1254'. [ 364.071678][T15006] netlink: 'syz.4.1258': attribute type 4 has an invalid length. [ 364.356031][T15030] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 364.424859][T15037] FAULT_INJECTION: forcing a failure. [ 364.424859][T15037] name fail_futex, interval 1, probability 0, space 0, times 0 [ 364.496823][T15037] CPU: 0 UID: 0 PID: 15037 Comm: syz.4.1261 Tainted: G U L syzkaller #0 PREEMPT(full) [ 364.496883][T15037] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 364.496896][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.496914][T15037] Call Trace: [ 364.496926][T15037] [ 364.496938][T15037] dump_stack_lvl+0x100/0x190 [ 364.496992][T15037] should_fail_ex.cold+0x5/0xa [ 364.497030][T15037] get_futex_key+0x1d2/0x1620 [ 364.497084][T15037] ? __pfx_get_futex_key+0x10/0x10 [ 364.497119][T15037] ? lockdep_hardirqs_on+0x78/0x100 [ 364.497160][T15037] ? fcntl_setlk+0x4f4/0xe40 [ 364.497191][T15037] ? kmem_cache_free+0x124/0x6a0 [ 364.497232][T15037] futex_wake+0xea/0x530 [ 364.497275][T15037] ? fcntl_setlk+0x4f9/0xe40 [ 364.497309][T15037] ? __pfx_futex_wake+0x10/0x10 [ 364.497350][T15037] ? __pfx_fcntl_setlk+0x10/0x10 [ 364.497387][T15037] ? __might_fault+0xc5/0x140 [ 364.497427][T15037] ? __might_fault+0xc5/0x140 [ 364.497476][T15037] do_futex+0x32b/0x350 [ 364.497518][T15037] ? __pfx_do_futex+0x10/0x10 [ 364.497558][T15037] ? do_fcntl+0x811/0x1670 [ 364.497604][T15037] __x64_sys_futex+0x34f/0x4d0 [ 364.497651][T15037] ? __pfx___x64_sys_futex+0x10/0x10 [ 364.497692][T15037] ? tomoyo_file_fcntl+0x6c/0xc0 [ 364.497745][T15037] do_syscall_64+0x106/0xf80 [ 364.497782][T15037] ? clear_bhb_loop+0x40/0x90 [ 364.497822][T15037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.497854][T15037] RIP: 0033:0x7f977a19c799 [ 364.497882][T15037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.497914][T15037] RSP: 002b:00007f977b0790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 364.497946][T15037] RAX: ffffffffffffffda RBX: 00007f977a416188 RCX: 00007f977a19c799 [ 364.497967][T15037] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f977a41618c [ 364.497985][T15037] RBP: 00007f977a416180 R08: 0000000000000000 R09: 0000000000000000 [ 364.498003][T15037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.498019][T15037] R13: 00007f977a416218 R14: 00007ffed1c1d060 R15: 00007ffed1c1d148 [ 364.498069][T15037] [ 365.057198][T15066] netlink: 9544 bytes leftover after parsing attributes in process `syz.3.1265'. [ 365.083566][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 365.436412][T15107] ovs_datapath: entered promiscuous mode [ 366.655777][T15195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1273'. [ 368.405547][ T30] audit: type=1326 audit(4294967345.990:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.4.1281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f977a19c799 code=0x0 [ 368.989860][T15327] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1286'. [ 369.665043][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 370.105536][T15358] netlink: 9336 bytes leftover after parsing attributes in process `syz.1.1296'. [ 371.070629][T15419] netlink: 'syz.2.1300': attribute type 3 has an invalid length. [ 373.007670][T15518] netlink: 9336 bytes leftover after parsing attributes in process `syz.1.1311'. [ 374.222717][T15604] netlink: 9336 bytes leftover after parsing attributes in process `syz.1.1323'. [ 374.382945][T15607] netlink: set zone limit has 8 unknown bytes [ 375.230049][T15654] binder: 15650:15654 ioctl c0306201 0 returned -14 [ 375.881941][T15678] bridge0: port 3(gretap0) entered blocking state [ 375.907819][T15678] bridge0: port 3(gretap0) entered disabled state [ 375.924101][T15678] gretap0: entered allmulticast mode [ 375.930835][T15678] gretap0: entered promiscuous mode [ 375.966534][T15678] bridge0: port 3(gretap0) entered blocking state [ 375.973165][T15678] bridge0: port 3(gretap0) entered forwarding state [ 376.241298][T15701] netlink: 9336 bytes leftover after parsing attributes in process `syz.4.1333'. [ 377.585591][T15826] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1337'. [ 377.699996][T15811] NFSD: Failed to start, no listeners configured. [ 378.375809][T15874] netlink: 'syz.2.1343': attribute type 20 has an invalid length. [ 378.379907][T15871] netlink: 9336 bytes leftover after parsing attributes in process `syz.4.1342'. [ 378.384062][T15874] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1343'. [ 378.773271][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781006][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.501681][T16106] binder: 16100:16106 unknown command 1 [ 382.511114][T16106] binder: 16100:16106 ioctl c0306201 0 returned -22 [ 384.510606][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 385.483601][T16206] can: request_module (can-proto-3) failed. [ 385.535481][T16213] futex_wake_op: syz.2.1383 tries to shift op by -2048; fix this program [ 387.475122][T16326] netlink: 'syz.2.1390': attribute type 4 has an invalid length. [ 387.528226][T16326] netlink: 'syz.2.1390': attribute type 4 has an invalid length. [ 388.499088][T16366] [U] [ 388.501914][T16366] [U] [ 388.504614][T16366] [U] [ 388.507340][T16366] [U] [ 388.573769][T16366] [U] [ 388.576531][T16366] [U] [ 388.579233][T16366] [U] [ 388.581936][T16366] [U] [ 388.656014][T16366] [U] [ 388.658809][T16366] [U] [ 388.661568][T16366] [U] [ 388.664398][T16366] [U] [ 388.724180][T16366] [U] [ 388.726970][T16366] [U] [ 388.730057][T16366] [U] [ 388.732790][T16366] [U] [ 388.773931][T16372] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.1395'. [ 388.833563][T16366] [U] [ 388.836325][T16366] [U] [ 388.839136][T16366] [U] [ 388.841850][T16366] [U] [ 388.845673][T16366] [U] [ 388.848426][T16366] [U] [ 388.851169][T16366] [U] [ 388.853907][T16366] [U] [ 388.860768][T16366] [U] [ 388.863533][T16366] [U] [ 388.866274][T16366] [U] [ 388.869008][T16366] [U] [ 388.872680][T16366] [U] [ 388.875438][T16366] [U] [ 388.878185][T16366] [U] [ 388.880927][T16366] [U] [ 388.903047][T16366] [U] [ 388.905796][T16366] [U] [ 388.908490][T16366] [U] [ 388.911324][T16366] [U] [ 388.998833][T16366] [U] [ 389.734507][ T30] audit: type=1326 audit(4294967367.320:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16380 comm="syz.1.1398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa100b9c799 code=0x0 [ 390.905528][T16442] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.1406'. [ 392.150398][T16447] syz.1.1407(16447): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 393.430395][T16495] vivid-007: ================= START STATUS ================= [ 393.460419][T16495] vivid-007: Generate PTS: true [ 393.528812][T16495] vivid-007: Generate SCR: true [ 393.584014][T16495] tpg source WxH: 320x240 (Y'CbCr) [ 393.602762][T16495] tpg field: 1 [ 393.612636][T16495] tpg crop: (0,0)/320x240 [ 393.621685][T16495] tpg compose: (0,0)/320x240 [ 393.641175][T16495] tpg colorspace: 8 [ 393.653084][T16495] tpg transfer function: 0/0 [ 393.660578][T16495] tpg Y'CbCr encoding: 0/0 [ 393.673800][T16495] tpg quantization: 0/0 [ 393.678039][T16495] tpg RGB range: 0/2 [ 393.682093][T16495] vivid-007: ================== END STATUS ================== [ 393.870965][T16509] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.1415'. [ 395.213989][T16566] binder: 16565:16566 unknown command 1 [ 395.219617][T16566] binder: 16565:16566 ioctl c0306201 0 returned -22 [ 397.014559][T16607] netlink: 9340 bytes leftover after parsing attributes in process `syz.4.1426'. [ 397.647793][T16617] binder: 16616:16617 unknown command 1 [ 397.693352][T16617] binder: 16616:16617 ioctl c0306201 0 returned -22 [ 397.901364][T16618] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 398.238703][T16624] Invalid input. Must be >= 4608 [ 398.334402][T16612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 398.389107][T16610] ima: policy update failed [ 398.394142][ T30] audit: type=1802 audit(4294967375.980:73): pid=16610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1428" res=0 errno=0 [ 398.996965][T16634] NFSD: Failed to start, no listeners configured. [ 399.228143][T16647] netlink: 9340 bytes leftover after parsing attributes in process `syz.2.1437'. [ 400.057378][T16667] kAFS: unparsable volume name [ 400.373640][T16667] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[16667] [ 400.786920][T16683] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 401.043494][T16679] can: request_module (can-proto-0) failed. [ 401.422482][T16722] futex_wake_op: syz.3.1451 tries to shift op by -2048; fix this program [ 401.455470][T16722] futex_wake_op: syz.3.1451 tries to shift op by -2048; fix this program [ 404.507659][T16823] FAULT_INJECTION: forcing a failure. [ 404.507659][T16823] name fail_futex, interval 1, probability 0, space 0, times 0 [ 404.531870][T16823] CPU: 1 UID: 0 PID: 16823 Comm: syz.4.1464 Tainted: G U L syzkaller #0 PREEMPT(full) [ 404.531920][T16823] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 404.531942][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.531960][T16823] Call Trace: [ 404.531969][T16823] [ 404.531980][T16823] dump_stack_lvl+0x100/0x190 [ 404.532028][T16823] should_fail_ex.cold+0x5/0xa [ 404.532063][T16823] get_futex_key+0x1d2/0x1620 [ 404.532105][T16823] ? __pfx_get_futex_key+0x10/0x10 [ 404.532136][T16823] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 404.532197][T16823] futex_wait_setup+0x81/0x500 [ 404.532253][T16823] __futex_wait+0x19f/0x300 [ 404.532300][T16823] ? __pfx___futex_wait+0x10/0x10 [ 404.532342][T16823] ? cap_capable+0x107/0x460 [ 404.532384][T16823] ? __pfx_futex_wake_mark+0x10/0x10 [ 404.532433][T16823] ? futex_hash+0x2c5/0x380 [ 404.532481][T16823] futex_wait+0xed/0x380 [ 404.532526][T16823] ? __pfx_futex_wait+0x10/0x10 [ 404.532591][T16823] do_futex+0x1ef/0x350 [ 404.532631][T16823] ? __pfx_do_futex+0x10/0x10 [ 404.532664][T16823] ? __pfx_do_sys_openat2+0x10/0x10 [ 404.532705][T16823] __x64_sys_futex+0x34f/0x4d0 [ 404.532735][T16823] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 404.532761][T16823] ? __pfx___x64_sys_futex+0x10/0x10 [ 404.532814][T16823] do_syscall_64+0x106/0xf80 [ 404.532847][T16823] ? clear_bhb_loop+0x40/0x90 [ 404.532884][T16823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.532914][T16823] RIP: 0033:0x7f977a19c799 [ 404.532986][T16823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.533012][T16823] RSP: 002b:00007f977b0bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 404.533040][T16823] RAX: ffffffffffffffda RBX: 00007f977a415fa8 RCX: 00007f977a19c799 [ 404.533057][T16823] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f977a415fa8 [ 404.533074][T16823] RBP: 00007f977a415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 404.533090][T16823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.533106][T16823] R13: 00007f977a416038 R14: 00007ffed1c1d060 R15: 00007ffed1c1d148 [ 404.533146][T16823] [ 404.819427][T16839] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 404.832152][T16839] nbd: error processing sock list [ 408.153073][ T5826] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 408.153116][ T5826] Bluetooth: hci4: unexpected subevent 0x06 length: 725 > 10 [ 409.096078][T17078] futex_wake_op: syz.4.1490 tries to shift op by -2048; fix this program [ 409.105911][T17078] futex_wake_op: syz.4.1490 tries to shift op by -2048; fix this program [ 409.195905][T17078] 0x000000000001-0x000000020000 : "" [ 409.303547][T17027] FAULT_INJECTION: forcing a failure. [ 409.303547][T17027] name failslab, interval 1, probability 0, space 0, times 0 [ 409.322725][T17078] ftl_cs: FTL header corrupt! [ 409.428021][T17027] CPU: 0 UID: 0 PID: 17027 Comm: syz.1.1482 Tainted: G U L syzkaller #0 PREEMPT(full) [ 409.428080][T17027] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 409.428092][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.428110][T17027] Call Trace: [ 409.428121][T17027] [ 409.428133][T17027] dump_stack_lvl+0x100/0x190 [ 409.428185][T17027] should_fail_ex.cold+0x5/0xa [ 409.428221][T17027] should_failslab+0xc2/0x120 [ 409.428251][T17027] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 409.428293][T17027] ? seq_open+0x55/0x170 [ 409.428338][T17027] ? __pfx_stats_fop_open+0x10/0x10 [ 409.428367][T17027] seq_open+0x55/0x170 [ 409.428405][T17027] __seq_open_private+0x3e/0xd0 [ 409.428447][T17027] sc_common_open+0x6b/0x200 [ 409.428478][T17027] full_proxy_open_regular+0x1b6/0x370 [ 409.428523][T17027] do_dentry_open+0x6d8/0x1660 [ 409.428571][T17027] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 409.428629][T17027] vfs_open+0x82/0x3f0 [ 409.428669][T17027] path_openat+0x208c/0x31a0 [ 409.428712][T17027] ? __pfx_path_openat+0x10/0x10 [ 409.428758][T17027] do_file_open+0x20e/0x430 [ 409.428790][T17027] ? __pfx_do_file_open+0x10/0x10 [ 409.428854][T17027] ? alloc_fd+0x476/0x790 [ 409.428905][T17027] ? do_getname+0x191/0x390 [ 409.428945][T17027] do_sys_openat2+0x10d/0x1e0 [ 409.428983][T17027] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.429025][T17027] ? __fget_files+0x21f/0x3d0 [ 409.429085][T17027] __x64_sys_openat+0x12d/0x210 [ 409.429123][T17027] ? __pfx___x64_sys_openat+0x10/0x10 [ 409.429177][T17027] do_syscall_64+0x106/0xf80 [ 409.429209][T17027] ? clear_bhb_loop+0x40/0x90 [ 409.429246][T17027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.429277][T17027] RIP: 0033:0x7fa100b9c799 [ 409.429303][T17027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.429333][T17027] RSP: 002b:00007fa0fedd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.429365][T17027] RAX: ffffffffffffffda RBX: 00007fa100e16180 RCX: 00007fa100b9c799 [ 409.429385][T17027] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 409.429404][T17027] RBP: 00007fa100c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 409.429422][T17027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.429440][T17027] R13: 00007fa100e16218 R14: 00007fa100e16180 R15: 00007ffd253e62d8 [ 409.429481][T17027] [ 410.203114][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 410.523220][T17123] netlink: 'syz.4.1492': attribute type 2 has an invalid length. [ 410.619704][T17125] netlink: 122 bytes leftover after parsing attributes in process `syz.3.1493'. [ 411.590966][T17015] kexec: Could not allocate control_code_buffer [ 412.865761][T17210] netlink: 9336 bytes leftover after parsing attributes in process `syz.3.1504'. [ 414.250951][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 417.927985][T17428] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1527'. [ 418.355270][T17476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1533'. [ 419.891173][T17525] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1538'. [ 419.901026][T17525] : renamed from ip6tnl0 (while UP) [ 420.023915][T17543] Invalid ELF header magic: != ELF [ 421.714466][ T30] audit: type=1800 audit(4294967399.290:74): pid=17596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1549" name="dbroot" dev="configfs" ino=41886 res=0 errno=0 [ 424.177590][ T5826] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 424.187840][ T5826] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 424.196514][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 424.209279][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/u9:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 424.209333][ T5826] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 424.209345][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.209367][ T5826] Workqueue: hci3 hci_rx_work [ 424.209423][ T5826] Call Trace: [ 424.209432][ T5826] [ 424.209444][ T5826] dump_stack_lvl+0x100/0x190 [ 424.209505][ T5826] sysfs_warn_dup.cold+0x1c/0x28 [ 424.209550][ T5826] sysfs_create_dir_ns+0x24b/0x2b0 [ 424.209592][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 424.209631][ T5826] ? find_held_lock+0x2b/0x80 [ 424.209660][ T5826] ? kobject_add_internal+0x25f/0x930 [ 424.209701][ T5826] ? kobject_add_internal+0x25f/0x930 [ 424.209746][ T5826] ? do_raw_spin_unlock+0x145/0x1e0 [ 424.209795][ T5826] kobject_add_internal+0x2c8/0x930 [ 424.209845][ T5826] kobject_add+0x16a/0x1e0 [ 424.209888][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 424.209927][ T5826] ? class_to_subsys+0x10f/0x150 [ 424.209984][ T5826] ? kobject_put+0xb9/0x640 [ 424.210020][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 424.210062][ T5826] device_add+0x294/0x1950 [ 424.210112][ T5826] ? __pfx_dev_set_name+0x10/0x10 [ 424.210147][ T5826] ? __pfx_device_add+0x10/0x10 [ 424.210195][ T5826] ? mgmt_send_event_skb+0x2fb/0x460 [ 424.210259][ T5826] hci_conn_add_sysfs+0x1a3/0x260 [ 424.210296][ T5826] le_conn_complete_evt+0x11cb/0x1f40 [ 424.210358][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 424.210404][ T5826] ? __pfx_bt_warn+0x10/0x10 [ 424.210449][ T5826] hci_le_conn_complete_evt+0x23c/0x3a0 [ 424.210523][ T5826] ? skb_pull_data+0x15f/0x1e0 [ 424.210575][ T5826] hci_le_meta_evt+0x34a/0x5f0 [ 424.210609][ T5826] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 424.210667][ T5826] hci_event_packet+0x682/0x11c0 [ 424.210718][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 424.210752][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 424.210807][ T5826] ? kcov_remote_start+0x374/0x660 [ 424.210857][ T5826] ? lockdep_hardirqs_on+0x78/0x100 [ 424.210904][ T5826] hci_rx_work+0x451/0xfc0 [ 424.210971][ T5826] process_one_work+0x9d7/0x1920 [ 424.211034][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 424.211094][ T5826] ? __pfx_hci_rx_work+0x10/0x10 [ 424.211157][ T5826] worker_thread+0x5da/0xe40 [ 424.211219][ T5826] ? kthread+0x13a/0x450 [ 424.211257][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 424.211320][ T5826] kthread+0x370/0x450 [ 424.211357][ T5826] ? __pfx_kthread+0x10/0x10 [ 424.211400][ T5826] ret_from_fork+0x754/0xd80 [ 424.211446][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 424.211505][ T5826] ? __switch_to+0x7b4/0x1120 [ 424.211538][ T5826] ? __pfx_kthread+0x10/0x10 [ 424.211583][ T5826] ret_from_fork_asm+0x1a/0x30 [ 424.211640][ T5826] [ 424.211679][ T5826] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 424.505872][ T5826] Bluetooth: hci3: failed to register connection device [ 424.975429][T17694] binder: 17693:17694 unknown command 1 [ 425.003093][T17694] binder: 17693:17694 ioctl c0306201 0 returned -22 [ 425.583942][T17717] netlink: 29 bytes leftover after parsing attributes in process `syz.2.1574'. [ 425.588809][T17723] netlink: 9300 bytes leftover after parsing attributes in process `syz.1.1575'. [ 426.533069][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 426.902802][T17820] can: request_module (can-proto-0) failed. [ 428.609888][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 429.380974][T17915] NFSD: Failed to start, no listeners configured. [ 429.728088][T17924] netlink: Invalid conntrack timeout [ 430.429974][T17979] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1594'. [ 430.571458][T17983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'. [ 430.632449][T17983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.724479][T17983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.823529][T18025] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1604'. [ 434.331846][ T9167] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.900843][T18116] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1614'. [ 435.001446][T18114] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1614'. [ 435.824250][T18165] bond0: option miimon: invalid value () [ 435.830336][T18165] bond0: option miimon: allowed values 0 - 2147483647 [ 440.209881][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.223613][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.235302][T18443] binder: 18441:18443 unknown command 1 [ 441.241690][T18443] binder: 18441:18443 ioctl c0306201 0 returned -22 [ 442.158579][T18484] wlan1: mtu less than device minimum [ 442.174966][T18484] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1661'. [ 444.106065][T18560] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 444.127366][T18560] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 444.158543][T18560] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 444.191718][T18560] page_type: f5(slab) [ 444.201867][T18560] raw: 00fff00000000040 ffff88813fe3d000 dead000000000100 dead000000000122 [ 444.263694][T18560] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 444.272364][T18560] head: 00fff00000000040 ffff88813fe3d000 dead000000000100 dead000000000122 [ 444.301015][T18560] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 444.315945][T18560] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 444.395782][T18560] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 444.523488][T18560] page dumped because: unmovable page [ 444.543554][T18560] page_owner tracks the page as allocated [ 444.549435][T18560] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 84912180463, free_ts 84902878087 [ 444.607803][T18560] post_alloc_hook+0x153/0x170 [ 444.612748][T18560] get_page_from_freelist+0x111d/0x3140 [ 444.653031][T18560] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 444.663099][T18560] new_slab+0xa6/0x6d0 [ 444.679429][T18560] refill_objects+0x26b/0x400 [ 444.686490][T18560] __pcs_replace_empty_main+0x19f/0x600 [ 444.702361][T18560] __kmalloc_cache_noprof+0x493/0x6f0 [ 444.718561][T18560] rtnl_newlink+0x126/0x2380 [ 444.728726][T18560] rtnetlink_rcv_msg+0x95e/0xe90 [ 444.738856][T18560] netlink_rcv_skb+0x159/0x420 [ 444.748970][T18560] netlink_unicast+0x5aa/0x870 [ 444.763498][T18560] netlink_sendmsg+0x8b0/0xda0 [ 444.769214][T18560] __sys_sendto+0x4aa/0x520 [ 444.783064][T18560] __x64_sys_sendto+0xe0/0x1c0 [ 444.799693][T18560] do_syscall_64+0x106/0xf80 [ 444.804976][T18560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.821198][T18560] page last free pid 5822 tgid 5822 stack trace: [ 444.845392][T18560] __free_frozen_pages+0x7e1/0x10d0 [ 444.855293][T18560] qlist_free_all+0x47/0xe0 [ 444.891913][T18560] kasan_quarantine_reduce+0x1a0/0x1f0 [ 444.916343][T18560] __kasan_slab_alloc+0x69/0x90 [ 444.921397][T18560] __kmalloc_cache_noprof+0x243/0x6f0 [ 444.947144][T18560] ipv6_add_dev+0x60b/0x1520 [ 444.958897][T18560] addrconf_notify+0x563/0x19c0 [ 444.971124][T18560] notifier_call_chain+0x99/0x420 [ 444.984369][T18560] call_netdevice_notifiers_info+0xbe/0x110 [ 444.999576][T18560] register_netdevice+0x16e6/0x2210 [ 445.013552][T18560] batadv_meshif_newlink+0x8f/0xc0 [ 445.024709][T18560] rtnl_newlink+0x1494/0x2380 [ 445.035814][T18560] rtnetlink_rcv_msg+0x95e/0xe90 [ 445.047813][T18560] netlink_rcv_skb+0x159/0x420 [ 445.069876][T18560] netlink_unicast+0x5aa/0x870 [ 445.080283][T18560] netlink_sendmsg+0x8b0/0xda0 [ 445.140181][T18575] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 445.182774][T18575] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 445.223466][T18575] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 445.261212][T18575] page_type: f5(slab) [ 445.275873][T18575] raw: 00fff00000000040 ffff88813fe3d000 dead000000000100 dead000000000122 [ 445.286376][T18575] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 445.296466][T18575] head: 00fff00000000040 ffff88813fe3d000 dead000000000100 dead000000000122 [ 445.306778][T18575] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 445.343168][T18575] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 445.352015][T18575] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 445.361786][T18575] page dumped because: unmovable page [ 445.369702][T18575] page_owner tracks the page as allocated [ 445.382825][T18575] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 84912180463, free_ts 84902878087 [ 445.409886][T18575] post_alloc_hook+0x153/0x170 [ 445.415980][T18575] get_page_from_freelist+0x111d/0x3140 [ 445.422183][T18575] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 445.454332][T18575] new_slab+0xa6/0x6d0 [ 445.458750][T18575] refill_objects+0x26b/0x400 [ 445.464192][T18575] __pcs_replace_empty_main+0x19f/0x600 [ 445.469991][T18575] __kmalloc_cache_noprof+0x493/0x6f0 [ 445.475951][T18575] rtnl_newlink+0x126/0x2380 [ 445.480777][T18575] rtnetlink_rcv_msg+0x95e/0xe90 [ 445.491915][T18575] netlink_rcv_skb+0x159/0x420 [ 445.514310][T18575] netlink_unicast+0x5aa/0x870 [ 445.519414][T18575] netlink_sendmsg+0x8b0/0xda0 [ 445.525057][T18575] __sys_sendto+0x4aa/0x520 [ 445.529626][T18575] __x64_sys_sendto+0xe0/0x1c0 [ 445.536103][T18575] do_syscall_64+0x106/0xf80 [ 445.541583][T18575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.548165][T18575] page last free pid 5822 tgid 5822 stack trace: [ 445.563717][T18575] __free_frozen_pages+0x7e1/0x10d0 [ 445.583112][T18575] qlist_free_all+0x47/0xe0 [ 445.587755][T18575] kasan_quarantine_reduce+0x1a0/0x1f0 [ 445.603016][T18575] __kasan_slab_alloc+0x69/0x90 [ 445.620703][T18575] __kmalloc_cache_noprof+0x243/0x6f0 [ 445.632503][T18575] ipv6_add_dev+0x60b/0x1520 [ 445.645436][T18575] addrconf_notify+0x563/0x19c0 [ 445.650679][T18575] notifier_call_chain+0x99/0x420 [ 445.656365][T18575] call_netdevice_notifiers_info+0xbe/0x110 [ 445.662454][T18575] register_netdevice+0x16e6/0x2210 [ 445.668250][T18575] batadv_meshif_newlink+0x8f/0xc0 [ 445.673802][T18575] rtnl_newlink+0x1494/0x2380 [ 445.678608][T18575] rtnetlink_rcv_msg+0x95e/0xe90 [ 445.684119][T18575] netlink_rcv_skb+0x159/0x420 [ 445.689229][T18575] netlink_unicast+0x5aa/0x870 [ 445.694605][T18575] netlink_sendmsg+0x8b0/0xda0 [ 446.224485][T18651] netlink: 'syz.1.1680': attribute type 2 has an invalid length. [ 449.088617][T18762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1697'. [ 449.113394][T18762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.120848][T18762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.892418][T18892] netlink: 9100 bytes leftover after parsing attributes in process `syz.2.1715'. [ 452.611538][T18915] FAULT_INJECTION: forcing a failure. [ 452.611538][T18915] name failslab, interval 1, probability 0, space 0, times 0 [ 452.630219][T18915] CPU: 0 UID: 0 PID: 18915 Comm: syz.1.1723 Tainted: G U L syzkaller #0 PREEMPT(full) [ 452.630264][T18915] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 452.630274][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.630290][T18915] Call Trace: [ 452.630300][T18915] [ 452.630310][T18915] dump_stack_lvl+0x100/0x190 [ 452.630356][T18915] should_fail_ex.cold+0x5/0xa [ 452.630392][T18915] should_failslab+0xc2/0x120 [ 452.630419][T18915] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 452.630458][T18915] ? skb_clone+0x190/0x400 [ 452.630497][T18915] skb_clone+0x190/0x400 [ 452.630531][T18915] netlink_deliver_tap+0xaed/0xcc0 [ 452.630574][T18915] netlink_unicast+0x650/0x870 [ 452.630614][T18915] ? __pfx_netlink_unicast+0x10/0x10 [ 452.630664][T18915] netlink_sendmsg+0x8b0/0xda0 [ 452.630705][T18915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.630737][T18915] ? __import_iovec+0x1d2/0x640 [ 452.630783][T18915] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 452.630826][T18915] ____sys_sendmsg+0xa54/0xc30 [ 452.630867][T18915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.630922][T18915] ___sys_sendmsg+0x190/0x1e0 [ 452.630966][T18915] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.631078][T18915] __sys_sendmsg+0x170/0x220 [ 452.631115][T18915] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.631185][T18915] do_syscall_64+0x106/0xf80 [ 452.631217][T18915] ? clear_bhb_loop+0x40/0x90 [ 452.631252][T18915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.631282][T18915] RIP: 0033:0x7fa100b9c799 [ 452.631307][T18915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.631335][T18915] RSP: 002b:00007fa10197a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.631366][T18915] RAX: ffffffffffffffda RBX: 00007fa100e15fa0 RCX: 00007fa100b9c799 [ 452.631385][T18915] RDX: 000000002404c810 RSI: 0000200000000240 RDI: 0000000000000003 [ 452.631402][T18915] RBP: 00007fa10197a090 R08: 0000000000000000 R09: 0000000000000000 [ 452.631419][T18915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.631435][T18915] R13: 00007fa100e16038 R14: 00007fa100e15fa0 R15: 00007ffd253e62d8 [ 452.631475][T18915] [ 452.906810][T18918] netlink: 'syz.2.1724': attribute type 10 has an invalid length. [ 452.915300][T18918] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1724'. [ 453.362257][T18943] binder: 18941:18943 unknown command 1 [ 453.368788][T18943] binder: 18941:18943 ioctl c0306201 0 returned -22 [ 453.906969][T18982] program syz.1.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.426436][T19000] nfs4: Unknown parameter '' [ 456.979974][T19069] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 457.091561][T19069] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 457.184136][T19069] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 457.316124][T19072] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 457.377396][ T51] Bluetooth: hci2: unexpected event 0x03 length: 123 > 11 [ 457.523972][T19074] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 457.607415][T19067] futex_wake_op: syz.2.1741 tries to shift op by -2048; fix this program [ 458.053785][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.069899][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.080011][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.090173][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.101181][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.563757][T19196] nbd: illegal input index 37139 [ 459.888775][T19099] chnl_net:caif_netlink_parms(): no params data found [ 460.196677][T19286] binder: 19283:19286 unknown command 1 [ 460.203059][ T51] Bluetooth: hci0: command tx timeout [ 460.217315][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.243073][T19286] binder: 19283:19286 ioctl c0306201 0 returned -22 [ 460.250816][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.267232][T19099] bridge_slave_0: entered allmulticast mode [ 460.316017][T19099] bridge_slave_0: entered promiscuous mode [ 460.334242][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.353136][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.370029][T19099] bridge_slave_1: entered allmulticast mode [ 460.381265][T19099] bridge_slave_1: entered promiscuous mode [ 460.500110][T19099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.628408][T19099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.145792][T19099] team0: Port device team_slave_0 added [ 461.172601][T19099] team0: Port device team_slave_1 added [ 461.294026][T19099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.317328][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.369977][T19099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.446332][T19099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.461855][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.540856][T19099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.175192][T19099] hsr_slave_0: entered promiscuous mode [ 462.206286][T19099] hsr_slave_1: entered promiscuous mode [ 462.283180][ T51] Bluetooth: hci0: command tx timeout [ 462.331241][T19445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1755'. [ 462.950112][T19099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 463.086609][T19099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 463.119507][T19099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 463.179517][T19099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 463.592212][T19099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.652231][T19529] binder: 19528:19529 unknown command 1 [ 463.664000][T19529] binder: 19528:19529 ioctl c0306201 0 returned -22 [ 463.671549][T19099] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.688582][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.695860][ T9168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.762493][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.769860][ T9168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.373030][ T51] Bluetooth: hci0: command tx timeout [ 464.441528][T19099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.145506][T19564] Invalid ELF header magic: != ELF [ 465.293523][T19564] syz.1.1764 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 466.059260][T19099] veth0_vlan: entered promiscuous mode [ 466.175718][T19099] veth1_vlan: entered promiscuous mode [ 466.334768][T19099] veth0_macvtap: entered promiscuous mode [ 466.362496][T19099] veth1_macvtap: entered promiscuous mode [ 466.401313][T19099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.444865][ T51] Bluetooth: hci0: command tx timeout [ 466.452103][T19099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.489691][ T9168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.527861][ T9168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.573782][ T9168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.628581][ T9168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.736582][ T9169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.736612][ T9169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.803875][ T9167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.803907][ T9167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.457755][T19856] FAULT_INJECTION: forcing a failure. [ 473.457755][T19856] name fail_futex, interval 1, probability 0, space 0, times 0 [ 473.489913][T19853] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1786'. [ 473.511665][T19856] CPU: 0 UID: 0 PID: 19856 Comm: syz.5.1786 Tainted: G U L syzkaller #0 PREEMPT(full) [ 473.511723][T19856] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 473.511734][T19856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.511751][T19856] Call Trace: [ 473.511760][T19856] [ 473.511772][T19856] dump_stack_lvl+0x100/0x190 [ 473.511822][T19856] should_fail_ex.cold+0x5/0xa [ 473.511858][T19856] get_futex_key+0x1d2/0x1620 [ 473.511899][T19856] ? __pfx_get_futex_key+0x10/0x10 [ 473.511937][T19856] ? trace_pid_list_is_set+0x11a/0x390 [ 473.511978][T19856] ? trace_pid_list_is_set+0x22c/0x390 [ 473.512038][T19856] futex_wait_setup+0x81/0x500 [ 473.512091][T19856] __futex_wait+0x19f/0x300 [ 473.512140][T19856] ? __pfx___futex_wait+0x10/0x10 [ 473.512196][T19856] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 473.512228][T19856] ? lockdep_hardirqs_on+0x78/0x100 [ 473.512266][T19856] ? __pfx_futex_wake_mark+0x10/0x10 [ 473.512318][T19856] ? find_held_lock+0x2b/0x80 [ 473.512345][T19856] ? futex_wake+0x456/0x530 [ 473.512397][T19856] futex_wait+0xed/0x380 [ 473.512442][T19856] ? __pfx_futex_wait+0x10/0x10 [ 473.512509][T19856] do_futex+0x1ef/0x350 [ 473.512549][T19856] ? __pfx_do_futex+0x10/0x10 [ 473.512587][T19856] ? fput+0x79/0x100 [ 473.512619][T19856] ? __sys_sendmsg+0x18f/0x220 [ 473.512665][T19856] __x64_sys_futex+0x34f/0x4d0 [ 473.512714][T19856] ? __pfx___x64_sys_futex+0x10/0x10 [ 473.512769][T19856] do_syscall_64+0x106/0xf80 [ 473.512801][T19856] ? clear_bhb_loop+0x40/0x90 [ 473.512838][T19856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.512876][T19856] RIP: 0033:0x7fe14e19c799 [ 473.512920][T19856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.512945][T19856] RSP: 002b:00007fe14f0200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 473.512991][T19856] RAX: ffffffffffffffda RBX: 00007fe14e416458 RCX: 00007fe14e19c799 [ 473.513021][T19856] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe14e416458 [ 473.513048][T19856] RBP: 00007fe14e416450 R08: 0000000000000000 R09: 0000000000000000 [ 473.513064][T19856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.513078][T19856] R13: 00007fe14e4164e8 R14: 00007ffc01a566f0 R15: 00007ffc01a567d8 [ 473.513114][T19856] [ 475.149110][T19954] can: request_module (can-proto-5) failed. [ 475.480663][T19967] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1798'. [ 475.565699][T19983] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1798'. [ 476.135061][T20025] netlink: 9092 bytes leftover after parsing attributes in process `syz.1.1805'. [ 476.806620][T20064] netlink: NAT attribute has 4 unknown bytes [ 477.622972][ T30] audit: type=1800 audit(4294967455.200:75): pid=20088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1813" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 477.660074][T20089] netlink: 9092 bytes leftover after parsing attributes in process `syz.3.1814'. [ 477.906315][T20094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'. [ 477.995367][T20094] team0: Port device team_slave_1 removed [ 478.741508][T20156] netlink: 8692 bytes leftover after parsing attributes in process `syz.1.1824'. [ 479.865236][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1834'. [ 479.901406][T20198] FAULT_INJECTION: forcing a failure. [ 479.901406][T20198] name failslab, interval 1, probability 0, space 0, times 0 [ 479.933217][T20198] CPU: 0 UID: 0 PID: 20198 Comm: syz.5.1833 Tainted: G U L syzkaller #0 PREEMPT(full) [ 479.933271][T20198] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 479.933283][T20198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.933302][T20198] Call Trace: [ 479.933312][T20198] [ 479.933323][T20198] dump_stack_lvl+0x100/0x190 [ 479.933375][T20198] should_fail_ex.cold+0x5/0xa [ 479.933413][T20198] should_failslab+0xc2/0x120 [ 479.933444][T20198] __kmalloc_cache_noprof+0x7a/0x6f0 [ 479.933481][T20198] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 479.933533][T20198] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 479.933578][T20198] vidtv_mux_init+0x8a6/0xbf0 [ 479.933621][T20198] vidtv_start_feed+0x33e/0x4c0 [ 479.933668][T20198] ? __pfx_vidtv_start_feed+0x10/0x10 [ 479.933715][T20198] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 479.933771][T20198] ? mark_held_locks+0x40/0x70 [ 479.933817][T20198] ? __pfx_vidtv_start_feed+0x10/0x10 [ 479.933872][T20198] dmx_ts_feed_start_filtering+0xf6/0x220 [ 479.933928][T20198] dvb_dmxdev_start_feed+0x273/0x3f0 [ 479.933976][T20198] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 479.934026][T20198] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 479.934074][T20198] dvb_demux_do_ioctl+0xe64/0x1200 [ 479.934130][T20198] dvb_usercopy+0x167/0x340 [ 479.934169][T20198] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 479.934214][T20198] ? __pfx_dvb_usercopy+0x10/0x10 [ 479.934272][T20198] ? __fget_files+0x21f/0x3d0 [ 479.934327][T20198] dvb_demux_ioctl+0x29/0x40 [ 479.934366][T20198] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 479.934407][T20198] __x64_sys_ioctl+0x18e/0x210 [ 479.934454][T20198] do_syscall_64+0x106/0xf80 [ 479.934488][T20198] ? clear_bhb_loop+0x40/0x90 [ 479.934528][T20198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.934559][T20198] RIP: 0033:0x7fe14e19c799 [ 479.934584][T20198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.934614][T20198] RSP: 002b:00007fe14f0a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.934645][T20198] RAX: ffffffffffffffda RBX: 00007fe14e416090 RCX: 00007fe14e19c799 [ 479.934665][T20198] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 479.934684][T20198] RBP: 00007fe14e232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 479.934702][T20198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.934720][T20198] R13: 00007fe14e416128 R14: 00007fe14e416090 R15: 00007ffc01a567d8 [ 479.934764][T20198] [ 479.934900][ T797] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 480.196298][ T797] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 480.204988][ T797] CPU: 0 UID: 0 PID: 797 Comm: kworker/0:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 480.216037][ T797] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 480.221243][ T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.231669][ T797] Workqueue: events vidtv_mux_tick [ 480.236811][ T797] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 480.243442][ T797] Code: 3c a2 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 480.263154][ T797] RSP: 0018:ffffc900040973f8 EFLAGS: 00010202 [ 480.269244][ T797] RAX: 0000000000000002 RBX: ffffc90004097678 RCX: 0000000000000002 [ 480.277332][ T797] RDX: 0000000000000000 RSI: ffffffff882b5864 RDI: ffff888026b03c80 [ 480.285404][ T797] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 480.293381][ T797] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004097698 [ 480.301359][ T797] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 480.309339][ T797] FS: 0000000000000000(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 480.318376][ T797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.325016][ T797] CR2: 00007fa0fedf5ff8 CR3: 000000007be68000 CR4: 00000000003526f0 [ 480.333182][ T797] Call Trace: [ 480.336473][ T797] [ 480.339418][ T797] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 480.345885][ T797] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 480.351455][ T797] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 480.357647][ T797] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 480.363469][ T797] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 480.369551][ T797] ? __lock_acquire+0x4a5/0x2630 [ 480.374511][ T797] ? find_held_lock+0x2b/0x80 [ 480.379200][ T797] vidtv_mux_push_si+0x932/0xe80 [ 480.384158][ T797] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 480.389635][ T797] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 480.395646][ T797] vidtv_mux_tick+0xe9b/0x1480 [ 480.400521][ T797] ? __lock_acquire+0x4a5/0x2630 [ 480.405492][ T797] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 480.410919][ T797] ? __lock_acquire+0x4a5/0x2630 [ 480.415882][ T797] ? debug_object_deactivate+0x2e4/0x3b0 [ 480.421532][ T797] ? finish_task_switch.isra.0+0x200/0xb80 [ 480.427443][ T797] ? rcu_is_watching+0x12/0xc0 [ 480.432233][ T797] process_one_work+0x9d7/0x1920 [ 480.437200][ T797] ? __pfx_process_one_work+0x10/0x10 [ 480.442601][ T797] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 480.447959][ T797] worker_thread+0x5da/0xe40 [ 480.452592][ T797] ? kthread+0x13a/0x450 [ 480.456860][ T797] ? __pfx_worker_thread+0x10/0x10 [ 480.461996][ T797] kthread+0x370/0x450 [ 480.466081][ T797] ? __pfx_kthread+0x10/0x10 [ 480.470799][ T797] ret_from_fork+0x754/0xd80 [ 480.475419][ T797] ? __pfx_ret_from_fork+0x10/0x10 [ 480.480548][ T797] ? __switch_to+0x7b4/0x1120 [ 480.485237][ T797] ? __pfx_kthread+0x10/0x10 [ 480.489842][ T797] ret_from_fork_asm+0x1a/0x30 [ 480.494623][ T797] [ 480.497647][ T797] Modules linked in: [ 480.502376][ T797] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 480.868959][ T797] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 480.875715][ T797] Code: 3c a2 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 480.895496][ T797] RSP: 0018:ffffc900040973f8 EFLAGS: 00010202 [ 480.901773][ T797] RAX: 0000000000000002 RBX: ffffc90004097678 RCX: 0000000000000002 [ 480.910050][ T797] RDX: 0000000000000000 RSI: ffffffff882b5864 RDI: ffff888026b03c80 [ 480.961214][T20231] caif:caif_disconnect_client(): nothing to disconnect [ 480.968781][ T797] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 480.977086][ T797] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004097698 [ 480.989687][ T797] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 481.113396][ T797] FS: 0000000000000000(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 481.122540][ T797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.156946][ T797] CR2: 0000555d94007ee8 CR3: 00000000446b0000 CR4: 00000000003526f0 [ 481.193329][ T797] Kernel panic - not syncing: Fatal exception [ 481.199605][ T797] Kernel Offset: disabled [ 481.203949][ T797] Rebooting in 86400 seconds..