last executing test programs: 2m31.854074974s ago: executing program 1 (id=59): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x5b28000000, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x9]}, 0x0, 0x0, 0x0) mmap$auto(0x7790, 0x400007, 0x1, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x60009, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0xb) bind$auto(r2, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x64) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event\x00', 0x163201, 0x0) write$auto(r3, 0x0, 0x3) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x10d043, 0x0) sendfile$auto(r3, r4, 0x0, 0x10000800000003) connect$auto(r3, 0x0, 0x5c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000240)={{0xed3, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x5}, 0x1, 0x7, 0x2, 0x280, @raw=0x2, @inferred=r1, 0x32dd, 0x0, 0x0, &(0x7f0000000100)="d796927cfdeac8c314d744118f163da7a5cd1d02700cd2ef2cf41186f17d11571ae8003fb83e36b47d0936bff60daa548fddef4a906090ab79003799b10c2e439bcf7127c62777dbe49b535820ed18a3e9e7c153e9e4a259637fe1fba88114ff3790bb7f36ba4fff893f09a01be0dc5555ada76b71"}) 2m30.595032758s ago: executing program 1 (id=64): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x8}}, 0x20) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000440)="b4cfbaa27e5dba", 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(r1, &(0x7f0000000040)={0x0, 0x4005}, 0x4, 0xf8, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(r1, &(0x7f0000000140)={0x0, 0x4}, 0x2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2eb82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fb\x00', 0x101000, 0x0) preadv$auto(r5, &(0x7f00000002c0)={0x0, 0x2}, 0x5, 0xfb, 0x8100000001) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 2m29.665409812s ago: executing program 1 (id=71): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat$auto(r0, 0x0) (async) mlock$auto(0x5, 0x1) getcwd$auto(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy12/user_power\x00', 0x8a00, 0x0) (async) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdc00, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @binary="f541"}]}]}]}, 0x28}}, 0x810) r4 = socket(0xa, 0x5, 0x0) openat2$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x2, 0x2}, 0x7ff) (async) ioctl$auto(r4, 0x8941, 0x8) (async) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) r7 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r7, 0x806c4120, &(0x7f0000000100)={0x0, 0x7, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) (async) write$auto(r6, &(0x7f0000000200)='&\x00', 0x8) (async) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000c0", @ANYRES16=r5, @ANYBLOB="020025bd7000fbdbdf2501000000080003000500000008000100", @ANYRES32=0x0, @ANYRES64=r0], 0x24}}, 0x40840) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) write$auto_proc_pid_set_comm_operations_base(r9, &(0x7f0000000000)="bc", 0x1) (async) r10 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000200), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r11, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, "74faf0047e03a95f4d"}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x4) (async) sendmsg$auto_OVS_METER_CMD_FEATURES(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x7}]}, 0x1c}}, 0x20008800) (async) r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/orangefs/op_timeout_secs\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r12, &(0x7f0000000040)=""/6, 0x6) r13 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000480), 0x94000, 0x0) close_range$auto(r13, r3, 0x4dd6) 2m28.982044476s ago: executing program 1 (id=74): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x791400, 0x0) mmap$auto(0x5, 0x933, 0x5, 0xeb1, 0xfffffffffffffffa, 0x9) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r0, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0xffffffffffffffff, 0x300000000000) rseq$auto(0x0, 0x4, 0xe7, 0xd) socket(0x25, 0x80003, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) unshare$auto(0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4d82c0, 0x0) r2 = prctl$auto(0x2000003e, 0xffffffffffffffff, 0x0, 0x8, 0x6) write$auto(r1, 0x0, 0x7643e168) r3 = socket(0x2a, 0x1, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700002dcdf2503000000040008f148bc16871641cc72548c65421800010000000000", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x6, 0x6, 0x7, 0x800000000000eba, 0xffffffffffffffff, 0x75d) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x280000, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRESHEX=r2, @ANYBLOB="0400"], 0x464}, 0x1, 0x0, 0x0, 0x200208c4}, 0x1) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b2eb0000", @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf25280000000c00288008009e00", @ANYRES32=0xee00, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x48000) socket(0x10, 0x2, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/o2cb/logmask/BASTS\x00', 0xb02, 0x0) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x7) 2m28.678856979s ago: executing program 1 (id=76): landlock_restrict_self$auto(0xffffffffffffffff, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) statx$auto(r1, 0x0, 0x20006d7, 0xfffffffc, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) statx$auto(0xffffffffffffffff, 0x0, 0x401006, 0x4015, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f00000001c0)="74f5bb9332a71d4d0d9626b1ab4c84101ae5") madvise$auto(0x0, 0xffffffffffff0005, 0x19) listxattrat$auto(r4, 0x0, 0x4, 0x0, 0x10000000000000) close_range$auto(0x2, r3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mlockall$auto(0x5) io_cancel$auto(0x1, &(0x7f0000000040)={0x100, 0x8, 0xfff, 0x8, 0xfffe, r1, 0xf9, 0x3, 0x9, 0x0, 0x8, r2}, &(0x7f0000000180)={0xd, 0x8, 0x8, 0x9}) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mlock$auto(0x4, 0x713f) mmap$auto(0x2, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) socket(0x10, 0x3, 0x6) 2m26.680192677s ago: executing program 1 (id=85): mmap$auto(0x0, 0x400009, 0xc, 0x9b72, 0x8000000000000003, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20000000000000e, 0x9c0f, 0x44eb6, 0x10006, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) mmap$auto(0x1, 0x10, 0x4, 0x19, r0, 0x2) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto(r1, 0x0, 0x39b8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) r4 = pidfd_open$auto(0x1, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, r4, 0x0, 0x273) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r5, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) mmap$auto(0x4, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 2m11.155622478s ago: executing program 32 (id=85): mmap$auto(0x0, 0x400009, 0xc, 0x9b72, 0x8000000000000003, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20000000000000e, 0x9c0f, 0x44eb6, 0x10006, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) mmap$auto(0x1, 0x10, 0x4, 0x19, r0, 0x2) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto(r1, 0x0, 0x39b8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fb, &(0x7f0000000100)}) r4 = pidfd_open$auto(0x1, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, r4, 0x0, 0x273) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r5, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) mmap$auto(0x4, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 8.158699709s ago: executing program 3 (id=467): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x20, 0x0, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x5d, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x10540, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 6.952386455s ago: executing program 3 (id=468): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0xc, 0x2, 0x6, 0x7, 0x2, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x8001, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af00, r3) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x4, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x8, 0x42, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="4b146644c513257ec651d290dd32d6a9b20be3d9708df3b1a0bba3752c59f58903e55c4496db2c1b7ee67db0f7d6c7ea0b734402c67ede224b1d92cec01549"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x8894) unshare$auto(0x40000080) fsconfig$auto_SHMEM_HUGE_ADVISE(r2, 0xffffffff, &(0x7f0000000000)='(\x00', &(0x7f0000000200)="8c132b12a98fdfa12099f2935c7c70729c47f63cd5f96356d909daa48642800ac5d21cd7cd63b6eba1df40ae1aa6779deabcb118bc58bdaa6891008e228f3a8f295af0d0529528135e8d074f54089f8a656c244ae471de314e7e60a647b9c25f699d7b7ef72b3f32f3646e37d87d7b45d6bfb40dfefb0f9a38a8869a62ba4015a3cb5b7a2b29b63134006ba99561266e65e40586aaa715d19f6d862894812db2c95c2f94c45640d28c1944c0f6acfe6ff3f9656b41f7affc", 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x7) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, 0x0, 0x81) bpf$auto(0x0, 0x0, 0x6f4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/config/nullb/features\x00', 0x109103, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.573202967s ago: executing program 2 (id=472): mmap$auto(0x0, 0x10020009, 0x3, 0x7ff, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x9, 0x4, 0x0) r0 = socket(0x10, 0x2, 0x9) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) msgctl$auto_MSG_STAT(0x4, 0xb, &(0x7f00000001c0)={{0xacd0, 0xee00, 0xffffffffffffffff, 0x401, 0x1, 0x4, 0x8}, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x44, 0x1, 0xffffffff00000000, 0xa60, 0x7, 0xfffffffffffffff7, 0x101, 0x3ff, 0xcd44, @raw=0x6, @raw}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4a8, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2fe2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1000}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_PHY_CAPS={0xd7, 0x18, 0x0, 0x1, [@generic="24cbc2826befe43dcf53e934a73ad42ca300c2a4cf3032a47aeb8deb1c3f1d2cac50ba2a10cf950836610a8a49774f5292759351703bcfd61526b69c19bfe96246ee0015b6e57b3f4fbcbe2f3ce026a3e2e8398d79e0f623595c433bf4a77813a4725d443212c96fe592751ce9a7fab1b2c1dcc7557570e0e51b0056b760f9584d2760f90c4e4462787937becf5b9054205cf5835cc74203d7ac736cc8dd58a4edb296af81f99348ca09fc6dbbeae9aa1e9b3a47bf7039fe63509b28144f748eb30ba38825f9970380587d", @typed={0x8, 0x72, 0x0, 0x0, @uid=r2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x6b, 0x19, 0x0, 0x1, [@generic="e938e647f3c095ea02eb1116d4f1a24822093fc1927492cb29e0fe185e263aeb06d8b09dd7b6b7512b2e76f7b8eb45faec7a04e7fa7a37c4168197610d4d026923387e8a18f26ae2d46f018cc1833619df9ca3941f03286d24210bbfd922dd6507bccebdd3ea5b"]}, @NL802154_ATTR_SEC_KEY={0x329, 0x30, 0x0, 0x1, [@nested={0x8a, 0xa3, 0x0, 0x1, [@nested={0x4, 0x59}, @typed={0xc, 0x158, 0x0, 0x0, @u64=0x100000000}, @generic='<', @generic="0d40ff9ca4ecd84f9738bdbf5f74e8e9e32d6d03e8fbf29303b2e3cf13fcb81f79f665bb40a7b0e3bdb36fc219198b8f646268057bd6f9cdf791a2109e007aba4674b3347eb35811e921b90408d4d227fdd428cf699607f3a96174533a2cd7bdfb6b7e7d704e49c209842d63be41a5e9fe0167a043"]}, @nested={0x17, 0xd7, 0x0, 0x1, [@generic="0fcff573c36ad2620a9a018beb8862d6758c7e"]}, @generic="8e6652e4131178d4a740db7a199edff67613d23fc79dee73a54b0c720b03f8e88d3b31b33c8069fc4abe52f9e7c632cc9753b69728a9811d8f18c8999612485b3cd83fa3cf544c6effc3ffe5a69360bd97219535c89f5fb5d9819b32db3d7456828c91c6c8b9e5998a15309a3b6cfbd095717f0aadbb868d97f6ead2807c3099734c397e55", @generic="89a69fa63b09c9aaff3877f71fd97e73298e4547fcebeafc25da39b4fc50f656a223ab4c4c78bff19a0dba8d0e666217acd3d534440fefeea1826448a0853d6a3141659ffc53088d089d6c4c00875b014fffe8b5dc338c1e138268a4", @typed={0x8, 0xef, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0xfffffffffffffffc}, @nested={0x16d, 0x40, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @u32=0x3946}, @nested={0x4, 0xb2}, @generic="cc98e3eb794d48872e23b21e53fd148c5c59fdf67751cff54ee36d2367c866704cc99a876b4f365cbb9a465b7ac7e7e021ca25d318b9f64315a1c9d912ff264acea8562bf18d1e874ceffe7826b8c4ba3f9468f5b77d3fe3d099eb9554c5a7a56bd823bc16", @typed={0xb7, 0x28, 0x0, 0x0, @binary="3e72c5fe4247fb445edfb366e627f411699fe178362abc3e351ed4a6af964e89c66667a74dba29b2533a66440b93f3a484d7d884afd14c89802ffd35f3496e0f4fc1ac8293d108412f0be40db25878f64d18ad77e4d0a9ccf9ef5ea96f7b5e9a23a7dd558cdd75e9a27de96b17a830d7905065685c13fe6a57ad1ffbd244190b823fec6e885654906cd7d91ced193607b6ade39f90ae6c8c6b246146d8be6b8abed249d9f14b7c9a3df3a7921668e6ef66f3ff"}, @nested={0x4, 0x3c}, @nested={0x4, 0x157}, @generic="a657809431884615e6840b2943b736925da5ca9ff1483abcca20a08bec0b2bbbab4ea5e864ed28045ded5bbaeec615fbfbba952cb63a298d"]}, @typed={0x4, 0x114}, @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0x4, 0x5}]}]}, 0x4a8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r3, 0x4001af84, 0x0) madvise$auto(0x0, 0xfffffffffffffffe, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ustat$auto(0x10000, &(0x7f0000000000)={0x401, 0x3, "550a39aab69e", "3c1efd03167d"}) 4.463124996s ago: executing program 4 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x8000}, 0x8000) 4.081797577s ago: executing program 0 (id=475): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x60423, 0x0) unshare$auto(0x40000080) ioctl$auto_SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x3, 0xdb, 0xeb1, 0x401, 0x8004) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xf) ioctl$auto_TCFLSH2(r1, 0x540b, &(0x7f0000000180)="f9dfae19c6d30c47e99390d1caaea9fe4795f1bcea2211a979ef8063b1a242750e0abedb843a2feb8cd3d83a4ce9ba0fef069adb77b9e04bfd8dc64664f19ed56d04a237f352abe8eb283109a27fcb21a7cf98b7e7e427cd0ee2d0d55fb4026a13d3de7e0aee96998dc0db12bd05d06ef6f1a87d7c8350d2f5c9974819730a9348cc06607eb7f5d546aee3306b9ac9db9764bbab7a7e2b48c20850c6e2527eecf3fafe4468e98c1233b6074c8d6ccb7479e8125b4c3f20319c9f3232f603a95bba1b31924d42d0") getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth0_to_hsr\x00'}) mmap$auto(0x0, 0x202000c, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/sound/ctl-led/speaker/brightness\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0) writev$auto(r4, &(0x7f00000017c0)={0x0, 0x3}, 0x3) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = getpid() pipe2$auto(0x0, 0x0) process_vm_readv$auto(r6, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto(r5, 0x40246f4c, 0x38) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r7, 0x0, 0x20) 3.968165569s ago: executing program 4 (id=476): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0102, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r3 = ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r2}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0xe) bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_7={@start_id=0x1, 0x4, 0xf}, 0x8) keyctl$auto_KEYCTL_JOIN_SESSION_KEYRING(0x1, 0x7fff, 0x100000000004, 0x6717db9f, 0x8000000000000000) sendfile$auto(r1, r1, 0x0, 0x8) ioctl$auto_dvb_frontend_fops_dvb_frontend(r3, 0x100, &(0x7f00000000c0)="ff1630b94ce52d7ebf2026ef8e974dbb0e3c057b6262870db63beb209f06f6366ef5801cb9c7c3377b50cd9609566318123f7acaad89d25a1f775b75ddec871f2b2476a2e12ac6d384c9ca3f0ad488db28a2725401a7cd3421456197d4aa06ea527cf02a116687e14e6123433c9069324b5ce9e9a0e4d417991906011b2dd759c4afafb18d2dd2fb76f682e504d37986d78e255cf6ce9d36962b1709d1aede1c5e0b6de907605a98bd850c85917e21be4f1130c47d3c73152c571c26db4f27e7fcbafbabe9e62e915f398fd7733e8334a0d3345cf0c745a156d5f2bb82c8d5bbc05abef8663765cde22f5115a068") 3.962218248s ago: executing program 3 (id=477): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x521003, 0x0) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf25190000000800010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRESOCT, @ANYRESDEC=r4, @ANYRES16=r3, @ANYRES16=r0, @ANYBLOB="2cc6e23441094f9eea0e4f11567ff6e92204a1d02f2dfb95bb5a439c5f929c20ac34bfa840b6d7fb64f64b6c9e7cff99a9efbed181b0e8958b6ca675356d62fc7b3394bb499f0ba3aee8cf319d4ed8ff2eebe0daffdfe8ab71b07df44ea8260852e91faa728b354bbb248df0d2aec73c71798edb2f7b67e76675762871682b6b26bda344cb45cdc8b40b2e1041d3431157c5cdb1ed0853075a3e0f0d55f280d3df61ff58e44f7cdc463d4942d212de86e9934976f1237e0026"], 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000800) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES64=r4], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0xae80, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x26}) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0) clone3$auto(&(0x7f0000000240)={0x3, 0x9b, 0x10000, 0xd, 0x8, 0x6, 0x686c, 0x80, 0x4, 0x800, 0x8000}, 0x10001) 3.891697467s ago: executing program 2 (id=478): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r3) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x17, 0xe, "1c11b753144f4bf365f6f66676508731aeed1d"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7e21}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x253, 0xfffffe05}]}) 3.445566801s ago: executing program 0 (id=479): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000380), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x4, 0x4, 0x5, 0xfffffffffffffffb) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.6/usb7/devnum\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x3, 0x2, 0xdf, 0x19, 0x7, 0x6) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) getsockopt$auto(r2, 0xa, 0xf, &(0x7f0000000000)='&&/-!,/\x00', &(0x7f0000000180)=0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x840, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250a000000080003000000000008000200c7fa7211d7045cbf9142fbb139a654b32dd9b838244c9344de75fb373ba6002d2c25437f41c773c205063111b03705d084265bc8c1dbf460e3ccfae6c50674f6c396a7b07802b05b9d7c94ded0acbfcc3bb8d642dfe9c7a9374cef289bacfb975c243a54858ee651ef9bd8844da16388dffb13e98068f9e745c723a6631018789dde275a4c3d6bb61998f17e6f2d677002a8b399a958ff033064769470e097cf32b2e256f39fadec08c66b64a5e6feb29f6de785f164359281d2c6fc1648fcc42e4326453400ebc77242abcbbb77e75834c2", @ANYRES32=r4, @ANYBLOB="08000100fbffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ptrace$auto(0x10, r0, 0x4, 0x100000000) waitid$auto_P_PID(0x1, r0, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7}) 3.366693226s ago: executing program 2 (id=480): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r0, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) ioctl$auto(0x3, 0x40103e05, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x40045613, r1) ioctl$auto(0x3, 0x40103e05, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x40045613, r2) move_pages$auto(0x0, 0x7, 0x0, 0x0, 0x0, 0x50) move_pages$auto(0x0, 0x7, 0x0, 0x0, 0x0, 0x50) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0xb, &(0x7f0000000080)={[0x7f, 0x7, 0x481, 0x24e8, 0x80000001, 0x2, 0x7, 0x2, 0x0, 0x5, 0x5, 0x2, 0x0, 0x2bcf12740000, 0xee2, 0xfffffffffffffff8]}, &(0x7f00000001c0)={[0x0, 0x7, 0x5, 0x9, 0x7fff, 0x6, 0x1, 0x6, 0xbb3, 0x100000001, 0x7, 0x8, 0x7, 0x4, 0x1, 0x45]}, &(0x7f0000000240)={[0xf5a, 0x18000000000, 0xffffffff, 0x80000000, 0x8, 0xd1, 0x6, 0x1, 0x5, 0x8, 0x0, 0xffffffffffffffff, 0x40, 0x9, 0x62, 0x6]}, &(0x7f0000000100)={0x4, 0x3}, &(0x7f0000000380)="a6509f4909143f571299a20df2b06156cc8b829a7f1398fff3840ebc7faad5bd6102753fee875f7a54eaebc4ec3da280adbebed39db25b7b147b32cc9f7725e50bb9d97586588c97993e5d82f641d7b420c8236801b278617c4c9b5d6a465406a8b99faee42d87eee5c5fd2a06543fff87f0d2f79fb84c3fb49fca3ed7b334df9d4e1f6777b809c1e66dac5c186e975d2fec9fc54a44") openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) 3.270735124s ago: executing program 4 (id=481): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed7d0362", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d346de2aa7", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f72eb", &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f00000002c0)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}}) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x8000000000000000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) arch_prctl$auto(0x5005, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x8) socket(0x10, 0x2, 0x0) r3 = socket(0x28, 0x4, 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x2) chdir$auto(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x80047437, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) mmap$auto(0x800, 0x20009, 0x4000000000df, 0xc0000000000eb1, 0x401, 0x8000) clock_settime$auto(0x10, &(0x7f0000002d80)={0x9, 0x2}) getsockopt$auto(r2, 0x21, 0x11, 0x0, 0x0) unshare$auto(0x40000080) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 3.16206855s ago: executing program 3 (id=482): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) semctl$auto(0x1, 0xfffffffd, 0x1, 0x1000) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40383d0c, 0x0) 2.926626815s ago: executing program 3 (id=483): shmctl$auto_IPC_SET(0x2, 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@info={r0, 0x7, 0x8000}, 0x1) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), r1) mmap$auto(0x4, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x8000) swapoff$auto(&(0x7f0000000740)='\x1c\x00') r4 = socket(0x23, 0x2, 0x0) ioctl$auto(0x3, 0x89ee, r4) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), r4) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000880)={&(0x7f00000005c0), 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYBLOB="7a17f009000000686b930bcb0997a5ad5653", @ANYRES16=r5, @ANYBLOB="000227bd7000fddbdf250e000000"], 0x14}}, 0x1) shmctl$auto_SHM_LOCK(0x65dc, 0xb, &(0x7f0000000340)={{0xb6c8, 0xee01, 0xee01, 0x37ee, 0xd, 0x75e, 0xeb}, 0x40000000, 0x6, 0x5968, 0x8, @raw=0x9, @raw=0x2, 0xfff, 0x0, &(0x7f0000000180)="7f08a894046ff7579f886c0ca376e357b285d8492c93367e42f6980e2afb3beffff1706ed87361d849277013a7ddb3e9553db7fd794957840c5234660a37eaf7950eba7dfc670c8aefb275b156faade4ea6eda6f768813ccd7a2c7d43419b955fac63406267119026b38c149aae42a1229f40679571e45024111466f29c0d509fb52ed34ccd79494153604674b22f23212fd0c736a00161b327869f71ffa52cf28396633f4f55d3c36aab719d563e08e3ecc8de2151336411f72dbe49d6e9dca27e8f3ea1a44a9c44c43a3d9babfee8bad56f18c3c27495f5344921e9eb1bdddae23b0", &(0x7f0000000280)="fc841e7ec4d7dac9f74ba5464d8da0aa710a3e8f9eace14793be2920466fc9e877bce2563634846dd94382a1ffd6cac0ebfcb5a1a8814af460cd7b310d276c5684807633c4da5c3e292e0d13b95a8870cc288d020f8e8671be851b776614a982f106d20a9d323c7f1b7c357c29ffd72a88d2d3385c0ec1fc7adf85068a178940ad94cf350581cd700798bdd8ddbf55d8e904a50501d62c15a36f169e52b50b58f304666bae9caf6542fbb4da4a31398629227c99d2e56e32f7dd"}) shmctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000500)={{0xffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xfffffff0, 0x9, 0x7}, 0x1, 0x3, 0x5, 0x4, @raw=0x3, @raw=0x4, 0x1, 0x0, &(0x7f0000000ac0)="4755266b9a7112f0418a3f32166f2b5408c66c2f6de0fd25c45589c009979446e292b463dddf0c73aba9605e53e816b3df5c860294d5aaceb3f003de97a5c7d509a0651ecd85f1bc818c1af788f2716fc455382de647e66eebeb79", &(0x7f0000000440)="3c7d7de55f7a3530e100383889f3912e9418449cfdd179fb8e35d94a7e61b55f4758a46a529c3486215da2cdd337d115528296df631cc0504092ce6e0705557612b35e39734d3cd317b5d65f1890059a36001de2411cdd1963f04d042307f27f73192abe1e59c50c82fc548d2d3247d469795a35ac8096ae245783903343a8c0d1692664a3790b30b0295f28e0"}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000a40)={{0x6, r6, r8, 0x7, 0x3, 0x6, 0xff}, 0x4, 0x7, 0x7, 0x8, @inferred, @raw=0x200, 0x2, 0x0, &(0x7f00000008c0)="d12493e7ead5173cd7cca6ea7105eedf3437f91323de1a2d16e0db78ac9ce053fec975d91e1d5f84b0798723a7958d7cb662c064df848e1062de90f5a9cf3d1bd896036e0b35a46251ddd6ba6e0579ea5b4f4676a4", &(0x7f0000000940)="f6c0c833db17d9732d05ed66a20f51952dd9f1c1f4549849337563ea81ddb1d5bbdd6f4325bacdec43d24c4467aeecc0b8cafac7026bc525df005ab93bde6b1628173eb727fcaadbff171b51960b545aa708237592f92a44d21545214a290fc3cbb948467e04bd1b8223186ef7ed31f97185058d4193583568971db0e56ffca5f7877403609b82d9e7dcb6d646a849feffcb1f9ee34966d251dbf6d131b3f743a3caa738457b07e5ca2953c18b90e9e4a9c488b583efd4c62f7e0deb5827cd473ecbe8ac720ae9877396987d23bc52dbab57aa0666ba39d9afd9b246c0ffd74a204124e9683c09cba0b2ba241665e881c4d3"}) sendmsg$auto_TIPC_NL_NODE_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=r3, @ANYRES8=r0, @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"/496, @ANYRES32, @ANYBLOB="2d16c227bdf01c245cd41abd2da4d7e37bc71e72f1c834485958bb4695d173f511618b6e44f463ade05923120cf936a47b0a9ad977c6d279705fa198fea921a51fdbf2f47aef3076731ba1f172b58c3b27a1ce11dd7fb5d97fe064a066a1307e790925812e4d5e23648e0cf35e96d2dfe7e5da440ae6048f036b8a9e3e20522fe7fece05a1fe6b8e6ac2cf7b1843a219e3b27634128e4b841038d5d5758fbff0e84042f19eafd25dbdb1defab362d6b681dc870c94994232007c2532e95fbe9bc0099acd8443140008008c00000000000f013300db79c6b31397e6c291d7f0085f89da70c027b4ddb6c1509a205e44e02361c2891b15d75a2d07ed40b8493d0590badb167c0d1f71d4d4e5d45d424abd33b558e108b9f6d5da0d6aea08c20dddd6ed2ae5a643dd47b2fe9e3a5c125cc8c175f6191692236c47ad938967b133c851a8462d054558002ac59aa919f0ee58a5bf48650c9fafea182ca250a529bbb41e8abea889eadc4ad2f46ad7b29f6eeac2b8486aedd01c9b80900153fd63caecdbd126ad84aa224a387b2776fcbedd98a3e701928b41f5eca12858665771b6dd9d1e280f7f13dd1c731891a35a5b5f18ac8258ca0b05b8c406ba6d95ad7e70e902552eaf9a397c9d31152146085d9ae3f6fd6afae407ebf197dc605a4bc79a000f001e002f6465762f6164737031000057016580040036800400c5800400d6800400328059d8c9f7b6f6eb1a009f8135030db98d7aa20b517b7ba420eb3b4bb119d6dd6c1492edd13c4cf4ca4b9bb5d07a9473bd067f7ce040cd575894c03ad60c20b96c13a374abae4940f9d8282699c4253bcf7d56678373c08651e8d27389c7f29b48c057080025004e0000000c009600ff0300000000000016aaf9039ced97bda4f60677d1e844e9f55c91c030c0498dfb222800fd1f09eac7cdc6a09db5209566d96d9a2c88f9043971f9de11401a745f9750a94ad5c3a32eb6f054b8c14b0346224e255581e2316614c85f13741e51bb2794ee92a17dd3d226d82589d92c4954cca69b27f4574d8d3c32ca5a77bdbe1ca51a3d143e6c0462bce70009aa27b568d5e5ce637637b6e095c62113e53e52f8a0d6094afae6712271aaf057a6502568e72ada0cec37fd641f43777fea057b88a2be95c3da4359ce7e7c478c6a27bf452f028bb0009400078035112172471654ac29b52464d52e03b370f9fba9118567091bb9294c123e943f89b918e10998ae061f78a63af42417c215adbec85130f5f5ba407a344abb433062892eb1055fec75a853532c903a8fab90b230e75a920efacce6f5b54a5b0083868a1ae09fc381d6067ec12b32a101e8f5d30689e22dec5f793e940c1ef7b1fa0800a180040078000800218004000e80990003800c006100020000000000000035db49a812255736ce3e45a7fb188f37384d50eccb7c1776c7fcfb1cec6fb02cced4c050273e11e0fdbd4e30d8551183211eab6030a20ce61c3cb2da7a4f9bf786c1de55fc5dbdf82f2b8995c9b752a76b4fa73a45965fe1fffc7dd9c0a8c8f27e1800ca80140032000000000000000000000000000000000108008700", @ANYRES32=r7, @ANYRESDEC=r4], 0x83c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000680), r2) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000e40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="00012a3e9d9176dbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x4041) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r11, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) write$auto(r9, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8800, 0x0) write$auto(0x3, 0x0, 0x100082) 2.734048603s ago: executing program 2 (id=484): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xa, 0xeb1, 0xffffffffffffffff, 0x20000000008000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') chdir$auto(&(0x7f0000000040)='./file0/../file0\x00') r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x14, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) syz_clone3(&(0x7f0000000500)={0x4101000, 0x0, 0x0, &(0x7f00000002c0), {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x109e81, 0x0) r2 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r2, 0x11b, 0x9, 0xffffffffffffffff, 0x18) timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x3, 0x0, 0x8080) timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x0) 1.823114601s ago: executing program 3 (id=485): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x3, 0xa) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) write$auto(r0, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r1 = getpid() rt_tgsigqueueinfo$auto(r1, 0x0, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x3, 0x5, @_sigchld={0x0, 0x0, 0xceb, 0x8, 0x4}}}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) r3 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_TDLS_OPER(r3, 0x0, 0x91) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) open(&(0x7f0000000100)='.\x00', 0x0, 0x110) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x15, 0x5, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) bpf$auto(0x5, &(0x7f00000003c0)=@bpf_attr_3={0x9, 0x27, 0xf, 0x63, 0x400, 0x0, 0x8000000000000001, 0x80f0cb, 0x81, "38c1d5cbcb9f09000000000000008f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x17, 0x5, 0x6, 0x8, 0x1, 0x10, @attach_btf_obj_fd, 0x5, 0xffe, 0x8, 0x4, 0xfffffffe}, 0x47) 1.808087493s ago: executing program 4 (id=493): r0 = socket(0x2, 0x2, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd22, 0x25dfdbff, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r0}]}, 0x1c}}, 0xd4) 1.584212141s ago: executing program 0 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x8470}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xe8142, 0x0) r4 = socket(0x2, 0x3, 0xa) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r3], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.583408397s ago: executing program 4 (id=487): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x6) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) io_uring_register$auto(0xffffffffffffffff, 0xc, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop12\x00', 0x14fa02, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x40) mincore$auto(0x80000000001, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) kexec_load$auto(0x7ceb, 0x5, &(0x7f00000000c0)={@buf=&(0x7f0000000200)="16bb7121efb6c76cfee141b86b1fed232c61234fa32a9df33d0e2a71fbad3c70ec8e79c22ac59fdd76fadc54675644557bd3bf618ac8cbbf09207d6dd8f815bc7ca737dbbd88bfe2f7f7233b05c34c8ea51310fc95b4699c2fdbf56a68085fbd8417", 0x0, 0x800, 0xfffffffffeffffff}, 0xfc) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x9, 0x100000000000030, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) 1.222924272s ago: executing program 2 (id=488): r0 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000180)={0x9, [0x80, 0x2, 0xa], [{0x5, 0xfffffffb, 0x0, 0x1}, {0x4, 0xffff8001, 0x0, 0x1}, {0x7, 0x800, 0x1, 0x1, 0x1}, {0xc45b, 0xec5, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x400, 0x1, 0x0, 0x0, 0x1}, {0x2, 0xb, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x8}, {0x750474ad, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x9, 0x1, 0x1, 0x1}, {0x8, 0x3, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x10001, 0x2797, 0x0, 0x0, 0x1}], 0x5, 0x1, 0x2ac651d6, 0x80, 0x1, 0x1, 0x0, "e55ad4fc2136e0be4c619514e77ce1d954804661bd603fbe864d57cf0a1bdcf5932ead018a5036cf8466ac8cbd957a7db79e08470396ca6a97b2dc49ea907c30"}) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, r0) 1.155850777s ago: executing program 0 (id=489): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prlimit64$auto(0x0, 0x9, &(0x7f0000000040)={0x0, 0xfffffffffffffffa}, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x2529, &(0x7f00000000c0)='8&#\\\'%[.{\x00', &(0x7f00000001c0)="36ff3c8312b72afb0f038cf43aac3e9144884834e70ab61bea4e26517bf66276c4fbc8258e5d7756ab56173c13ed51f9c84e1b7274f3076cd450737776ff9f5a0115e264c714675ce0b32ece784cbb2142036f74b87bb24c0467da86f67ea355bca283df38ab2b8bbd7dbefc5c70acaae378fa57b9c051a1671e4f0f7a6ee69b74de958c8540322b629cede62af8f4f0fd953b", 0x1) keyctl$auto_KEYCTL_PKEY_DECRYPT(0x1a, 0x9, 0x2, 0x0, 0x5) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) 996.061289ms ago: executing program 0 (id=490): socket(0x28, 0x5, 0x0) socket(0x1d, 0x2, 0x2) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x3, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/device_strs\x00', 0x1c9802, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x7fffffffffffffff) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 465.814096ms ago: executing program 2 (id=491): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2402, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000012440)='/dev/loop4\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x800) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x9, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x8}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$auto(0x3, 0x40045532, 0x38) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x883, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_OSS_ALSAEMULVER2(r0, 0x80044df9, &(0x7f0000000140)="83114e5b156b8751049bfcefd552d8a9fb6ebe5a4122280b1f0b048c8daa3b663eefab7924a777943147009c9e49db85ceeb87df78b4b23487dcad86cac3f1a54c635e222bfc3c6191e631c5c4890ad88eaf2d3af64b74beaefc607cd1e3") ioctl$auto(r1, 0x92106405, r1) r2 = open(&(0x7f0000000100)='.\x00', 0xc000, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/split\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/87, 0x57) (async) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) (async) fsetxattr$auto(r2, 0x0, 0x0, 0x7bd, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x4, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) socket(0xa, 0x4, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) read$auto(r0, 0x0, 0xffffffff) 168.641508ms ago: executing program 4 (id=492): mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_fuse_dir_operations_dir(r2, &(0x7f0000000240)=""/196, 0xc4) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x10) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xaea3, 0xffffffffffffffff) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, 0x0, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) 0s ago: executing program 0 (id=494): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x15, 0x5, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000001c0)=@bpf_attr_7={@start_id=0x7, 0x2, 0x1, r0}, 0x8) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r3, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) msgctl$auto_IPC_SET(0x8001, 0x1, &(0x7f0000000100)={{0x7, 0x0, 0xee01, 0x400, 0x10001, 0x3, 0x9c}, &(0x7f0000000080)=0xff, &(0x7f00000000c0)=0x8, 0x4, 0x9, 0x4, 0x1, 0x8, 0xfffe, 0xfffb, 0x660, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000001900)=ANY=[@ANYBLOB="78120000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf253a000000bf005b0088eb2d6487f77660297d5c6111aa2155e2c3086415975e0af7e8ab20fa3f27cbe44962d39e4d9b0fd0931a0ea05ba8892281fcc2778a077eb68b951613b54b22b85e34b68365d40583507e72164f7d27b9f46d0f0a56a946e7083a3033db14c6c3da4d35b04019a4fd389757d2cddd8de1c80f06ea1a8a1aa9352f90b1b1dfeb2b63c6983001fef4a18de538e2edb85e2c236a6c8e78ef1bba70583f39c4c1716171b436caceebba065d7157ca4d0d3cea56d4dc8ba16271e2342500b6007a80aefff35a5db53871b603f8005ffbce980a1aed71d1b7b87eacbec212bde6bd731ee7782db3bda4db1fab7f6cdf9e6ecdcc170800c680040018801991d7f8f6765872d55484ab59a489190288a50d78f5a0b2cbe5a8202cdbcc3473c4a7115bc880283712e27d00931c046d8fa4c0673e3573d7fc3b26f51bd40df1022683c652586e5cfdabe819719211d1686b9fc73ef6b6d1f93391ea7bb5d49b6e8e16ff06c46bad84a564cb83233f080050800400cd80000004104300fbcfbead9e35643488d7f76b5fb9557a678046e92f1b47460eb7cc76c5ac6c052dd5f07d4d0a4a1df753050978c71846e4d11031450550bcc5bca66806f4944827527985a4e7437f68f2e1e5637ca79fedfa65e01be15941dc5ebb7e7f9ab1cc61929d1282800c4de5e5082fe1ac9e3558301774cdf258212752e580f8068fccdc512f8e1ca86367e258c1ccbdecefb5f610f70ac82dee82e661c2686563af240b732af1725ef8f7004dd4319df91d880d4adadfe5ab1321e6267cedaa409811175dbef4ac8b11b12bda50e5bc2629447b833d32274a2fa82b538d15dbf11b3c0a76f5fc6653d779d2a51206bc54387fd9247ee7fe758ac86cbb13a21dcc74c9e4f652d917e1ac7bfbd2c96cef9bab3955111e3bd5582ad143932da1b146c28faa9b5c5ab0f3f5947cbff8e61bc2e5045cffa3cd0b2ed25a24e26d902422fd48d69683f01c70691654f6bea45ca7827a810a4031e4d00aaeecf66bd1001dec00de27bf26517c530d77a62ca73985f722242ce0ab4f6dd6e12a70876aa0c3e0c3596f6c655dab6f8acf26463fddae3f0083df492fee1777fb72fc45329d74a56d62b5d20ac8afea61a1ced9ef1c23088a44b6f397d011cdc6c3189d06471af12cc361279bd49164c68e0eee74eb7790a3dc887750cba48288099dafa56a687fcece9486c6d734c32448de1e73bdfc1df7093fe9b9a477afa0f9fbdd25e93a55cc9cde910e8bbeddc8fedf930fde44c18f9df1e855ff9aa8ffd4692ec718d8b51dcc66e386a7751f68c8fa6427d543303d457f36cae8c6f2fc59e86c7c8c808d68279c74f7d7d7d816e3be82837a57f0e1e4658bac3f62b5b77aece0d6ff18897d493fb7df6748049385e462ca8b569754802410ef4198c362c5441df254a58b25f815aa2db59a8ace34307a0032b80ac5956aa0b16aae673547758f4c3472f66652fc65ed163297dfee53e1a9af45149268c795eeeb21f1c7bf5d4d5889cdf0691de2c97517dc5fb2accc477fb2e6504a5cdbd6f48e2cb28c19738fe77b7a436df50b1693f82e0c64e0ca696c92591d76dec69f4ef3c6b7aa850a4784d66c20296a34305c189c6fb0eecd2d7b1e06c2621776bd76ba9fe0c3ef7bcd3d4f7655d9ed5ce694e1114cd3d9244febed421c30a109990ad1d71d4bbb560f3f19f0803bb33a7b9c1ec03fc5a16bee29d1c4ff678ca683736c61a044d1f661a04fee20d4d7363ea38decdeb0894459cf72ab51de8f677b8c37911a4826b38514114de642f0dd7fc1e2372c4021bd2a38b539a9e8249ce3b55c88f4aeb1a2c09f233001e05b195abc21d4c5bc2b0519ecf4b6ec7870932e49bd21e083d65924e2c79b45f2ba28eee66b3f2f686eec0486de81f01496fd8d19e2edbd8a233437e74293aaa9b9c84034a0fdb681b35fb26c95ba7bc74c3e3a05ab702a7e6126fd07e137c6802bb1d067fedd2759795ffa63a7dff764e05ecb006ee56332c88bd375950f3386c43e1292071f666ed2def0b8b4e01a316164acb139639a557189cab9536c11ebc527d0713e94fb652adac9cd3c37e8897a9df41f14ce6139c07e90d86326919c451db50f314a2a9e2465063fe4117ebec6bf8c3e3e35ebb21ab80b72a727c81e4572ed230157f9e2438adb5a57418a2cc126a76888d53485288d3ab7b843a1d1849893ba8c349fd86d33253af61311e546e7c59a1fd78b40a90bdc19047e3335b728729592c2b566683824b0395ff0c617ca17307f2fa1f4ad8bde592c69a6e929402b43b36dbcf2ba9e346aa04c5840135a7aabe20833fef642abe7df8c20cec4b22c5137424f18d243cfac4cf5c92f47c09fbc88efa5e7b6c6b7843097481447a9d4e2dcce9810ff0f0a865be55990629a32a0bebaab7fe261c66b33f84d0f3d78f8a5df46c77a20dbf65c1371e3efb26476c337f63e8170715fa0395d6053beaafa0cbc837e4f06eefaafde2689a912039470af110d1a1af1a256b63aea6c1bac546d508a09c5d769a3f9b5c4586928df7dbefa1fa3b53952caf44bd87d3e663dc3c629c89ad5f117b70b7cb8aa2e78070b001b2c7970cfcfd3742917e8e91c858b5386fd88158402db4fc4555cc39c32b5aa26ac0bdb1aed4d35fd20a1e0a3978bfa67ac6fc2b2d8c49392d651cb850cf587cca81c6d947b3d579aa22db45a6e169c7fa8c45e03102ea09dcb049161f2fbea7317c62572f725964891e8845736a70afbb75813d3bb4d950621acde12d4c2b7d09a58bc4436f74d1a068e1359a2ced29e753b5fde94ce5b25afc09a4e777da3150ac428a11ee2d793daf10ea183cb74a15e4fb8e06bd5067f31c240b189aa68f220b646dbda638fbf11ad4de725959c901580dff80aaa5736d16c4cd0c75d8ed0eae07a4ea223f766c6b01e90f850bc53f584ce90031f062c3361f7dc5a5dd8948a015b5482ef1b320d54f04c2e173d4a46cb9dd6d50eb886a8d6aea9a8c3c98972b0a2cd907582778c73a2358a55b702208f4e66f548a577884c62074a0014cf9b329850ec8f7dd634a8d56318c682bb6b808aa1b9b6346bac88739c1f0836730be86d6ae029321ed100bcb9d3878ead297e2e5e96a75ff53957004e6f6626399dac059eb2147affad0ad51f3d1776248d8c135a78a0989a7347a26dd34db1dbd17332a18a7bade8467d844d7bc9b4e56423976b70cb2fcd5d0939cf403f54644645067e98ef059ec84609ea856c87378b30b556e561bf7418a10fe81ac654563c946241be75de4f84e0a9c5c96d3dd49765005545fe366849b6628307bc88b29277f540efa459648c861fa1d6671a5b13da07494e31ce41bbb667f3e09ec64f5760e68f782cc5f27114f15afe1614539237880c71892a47cff69b81b24950d6a5d6c9a131ea947df4c7b2a0cb112adc6a7123b008f70b36816220dd6f19e2af34dc4f59752ee04b5396a4f927738f34fb206c70452fed887b949def6e7dae3bb805991cabcba47f971afa98da69cdd3a95f5ede6346a75051788fe214c4e31e41fb208f97d03b3ac827a111836fcd599f307743d02a1979ecd8de7648653dccab8a958e910714c0b6e1606f774b3b0cbd5a19c2cc2ef5274ba758ddad3c3d21904774ec4e337bc5032cfab2b7ed64c9929b73f7101a9b8d0f1f2f21436c824899bf061f381d9210595857e54f7b5ee7024a586015f6238a26cd38a94c3f593a125ab5e2acdef0e0ee099e8c897c2fdbcf3758f03acf63965ebde5b9b88ce6fe340d862a3068f0f1f7ee8794d26e9c455b7466ccc13816c7deeba30dfda3a6b4ddc5c6a6a02329198b71ae4ff4ad63287bd2b225682db4882201404dbcf0fd01e49eeefde6c8a67afc1dca2845257fcfcb076b8e6450422dcbf9214599ee39690542b04a6de01ddbf826dca8a997804e9fcc9cda45cb3be8c23cc4c11ab9e3d8410d9b576c0249ea7aa892b2fed712664bdae92c36f0fd4d18b630cfd59e84d8b8c3f9ccd6462ea33120c696f52361caada3a1ed8de7ceee0da599ce0068c8363cc53cfe73bd02e20a946caaebf751e76b302b77eb67eaf01a93289825a3e0a52d08c8f1501b95ecd130b8be15d476e56bc8b19b436b520981fef2b853ddd36b7032791766181fe7770883ae26f6617d643563cb2967d039a759718e505a212ebd50b455701a9ca34efe8d797517feb98fe50f15d76f64e5cff2658eedbafcbb8961612a512e20259d145c3e63d04490386dab6087100f7671989f7c7195fc25a694a89c78f8cd37f47e9aec57c3cba3db29f3b84178179e3e19044bc18b46b52aee26120925178f7f6735eb35a9eddff9ae7de1865a8bc47f17980130ad12cb6be4f694f7db6f9468134f0b39a3712e3816a15c127e967f1bc103db5bd942a3c5ce3238bec9219616aeb61d3dcdc26766b3080c298c36efbae90bb51028c4fd7100bfbc7eff28a0d27b029fe361af9dff46ca95204642e094290d65fb53f5072cdfb4ffcfbf3155357cb0a9a5b7a76506e429893202a62f07a729c61ba93efa3d6a549be8bc782a92ff3fc00aae41237816b1c94b94a5c27186a8dab9cf52111444c7bcf3c84f53ef6e7fee0b1d96ccf2e1529bfab4c47fe383cd15cb4acf789dbf97dcc877020664f92c71eb0ddb57990c6069d48fc0ac22978c9790fd78a869a1cf94db6b91a210ec68f8f925b4c188dd138e3fbdad3991bfb5f2dc32aad27de7ab63a92dd587e1493fdd27af7dddd2d7725be53a083b8e8a59e8fa720d7770e9600e3d2f598fa6f76aac72dc28e17062a87804f9b2e4d3db6fd0d720a50474020b750f7277b0984d9b0a8c228f0fd85a2cf6ac7b4d4157024ad83e683a6861f812a1db4ee974005bc003895d1da3aacdcd42e69dad3efbce4bb1126deee32b43e29d4635e4b1c3735114be6d90a92b69e23f03d3ac92bdbb986563eb536e2b410701e4e08076f22944beae30b4bdd9c5df0b2845d1d152e126d2ccde8806ff6bf9b8b4199c3c876631f40c2cc734ad018bc14399b1a960d5877ccc0c3c98a84d61d08471320eabb01101af8eb7078d79b6a70340516195757b56b3f5e03d23e90764bc60e34b4deefd19c321c2e33f29473274b9a3471f81c6b07223d523717a74eb53b372fcba2877b0abc515e8a064a2a28754ce98a9aa432b37b99253cf9674b19d1b89314c09c7a47ac4ff9eb2f2e391d09a37f6c8304eccb89feefbf4ceef24d11c0fb554a60e847baf97737e0254251f72cd043504361bdccb00e271dd068b0b0834c4ecb2eb887ed4d55497334f0b297d249f9ace28613d826a02aaeb25603f2b737e0dc05a7bc6138952b5f6d6274726c015a0008f3f11a437e09d8ec5afca599b074e038bcb8a73448eea28f42bba5a48a3e3b02d4d9e4a26059f029c737dbbc443a9a095922b0d30b5af5917ad642934a395538acad101a0cc4c5535a96f539440cf146487734ac2d31f7585021981dfc6ce1b03c863939a60a2d70510aa76c007404bf2b1be4d7b6f30d2e4487b1460949447bf07ae236d7f8a70f87d0e18f7de8411a33c51ec7b1a30e324b46f4b551af002fba3d725977d865e568dbea5211940080d757c357cc0d26729d55fda589e3fae8f08f68827085cdf109255790173fc9fb0a9f805ad70451a550b85bded089f5c83c3a924d94956a2a95f7ea12ebdec36d8b584cc92425dd7e1d2dc8c6ccb81589898e4017bea4bc897b276309ac1706004189d2e47e2ae6ad0ac4c789797d599b49d3978576fd1cdc53b609f0b0b1735c4ebba2ef4526e81429f47294e82fe4106f97d7f7c5cf7b65bfb8ee5a027cdda1239fb85be79922c615def4124e622f6e73065fb50c13f182e391bb6be662d00100ff52bc748612e9849aa5b2021dcc8c8bfbefae523bd91a368baad230b45a6486e96662bfbf84017fbbe5f7a8c540068563232299e033848e1145296a208ee1bbec59a08d7a7ce91cb4661ed409a06b97f985159ee3b46527d89d1d713c6b65f3ace0c71c86cfe8197e62311aa1d3fcbe8628a587d07b9ccf3260eef3a116601fd87a9c28c3c3a3479fab598f7ee3b02905472c786114dfcb3efec41c1728fdc13487b74faec9fedb7244335d0c6a67ce1e49d11b9bfb5f5dcb5803d8449c12232720ecdeea321d9efb9853fa6da4097026e24309e3d94e281cbbba85b4259bdcd0c06d23252cedea2224ffa41275c1a23dd32655b0857db2bb68b4872e9aec271a4aa8a3bea3444e9936459a2165b4dae5a1b31664bfea115056e9fcac2715af3cdefb0947dd43f0892ee51b85fd0701970363377512dea874e53a04aa0b88705001d000000000005008a0009000000cb00458008004f0000000000666b5a86bd0e5e3c8cfb38647c90b0dd0296bcc17c1cd4dda489602b6e3b3e7b28e03c0c0ad8221f2749ea92c7f31f1bced8fffcb07ec6d1339aed3a225b8e478a816f0198d39c6f83d0d9fd32423026b73170765074e6920e57d315c07a9aa388dde1cc85cb564b5824914c815790e8432bdcb2f51bce01678e761f66be0d378629b4daf2a1ce88f11dfbe98054d3bd116ba22c75b752251414c6d90327a44e22", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0005001c004000000004002d01"], 0x1278}, 0x1, 0x0, 0x0, 0x40041}, 0x40) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr0\x00', 0x41, 0x0) ioctl$auto(r5, 0x540a, 0x1) madvise$auto(0x0, 0x2003f0, 0x18) socket(0xa, 0x3, 0xff) ioctl$auto(0x3, 0x89e0, 0x91) gettid() mmap$auto(0x0, 0x400, 0x200df, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r6 = socket(0x1d, 0x2, 0x7) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r9}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r10 = socket(0x1e, 0x1, 0x0) bind$auto(r10, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x108e04d83b06a5a3, {0x43, 0x0, 0x3}}, 0x66) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 81.543547][ T5811] cgroup: Unknown subsys name 'net' [ 81.636215][ T5811] cgroup: Unknown subsys name 'cpuset' [ 81.645819][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.416530][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.444398][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.452059][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.453457][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.464678][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.467492][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.474349][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.488169][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.495642][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.496572][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.503076][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.510828][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.517731][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.531811][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.539355][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.549031][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.549038][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.564232][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.571695][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.588895][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.602753][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.073077][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 86.209488][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 86.288715][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.373752][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.381366][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.390069][ T5823] bridge_slave_0: entered allmulticast mode [ 86.397500][ T5823] bridge_slave_0: entered promiscuous mode [ 86.422683][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.429891][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.437230][ T5823] bridge_slave_1: entered allmulticast mode [ 86.444474][ T5823] bridge_slave_1: entered promiscuous mode [ 86.457526][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.575014][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.582359][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.589612][ T5822] bridge_slave_0: entered allmulticast mode [ 86.596856][ T5822] bridge_slave_0: entered promiscuous mode [ 86.604346][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.611500][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.618783][ T5824] bridge_slave_0: entered allmulticast mode [ 86.626979][ T5824] bridge_slave_0: entered promiscuous mode [ 86.638407][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.659152][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.667015][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.674619][ T5822] bridge_slave_1: entered allmulticast mode [ 86.681756][ T5822] bridge_slave_1: entered promiscuous mode [ 86.690259][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.697515][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.704768][ T5824] bridge_slave_1: entered allmulticast mode [ 86.711997][ T5824] bridge_slave_1: entered promiscuous mode [ 86.721385][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.807426][ T5823] team0: Port device team_slave_0 added [ 86.821959][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.834900][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.846885][ T5823] team0: Port device team_slave_1 added [ 86.855160][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.893902][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.022705][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.029951][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.038552][ T5825] bridge_slave_0: entered allmulticast mode [ 87.046787][ T5825] bridge_slave_0: entered promiscuous mode [ 87.058013][ T5822] team0: Port device team_slave_0 added [ 87.073352][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.080333][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.106820][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.121967][ T5824] team0: Port device team_slave_0 added [ 87.129407][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.138596][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.146271][ T5825] bridge_slave_1: entered allmulticast mode [ 87.154846][ T5825] bridge_slave_1: entered promiscuous mode [ 87.183510][ T5822] team0: Port device team_slave_1 added [ 87.190000][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.197940][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.224232][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.239861][ T5824] team0: Port device team_slave_1 added [ 87.300963][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.314216][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.337893][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.345017][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.371452][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.407958][ T5825] team0: Port device team_slave_0 added [ 87.414713][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.421680][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.447903][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.459678][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.466770][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.492778][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.505199][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.512254][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.538257][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.561669][ T5825] team0: Port device team_slave_1 added [ 87.573568][ T5828] Bluetooth: hci2: command tx timeout [ 87.619569][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.626747][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.652962][ T5828] Bluetooth: hci0: command tx timeout [ 87.653106][ T5144] Bluetooth: hci1: command tx timeout [ 87.658849][ T5838] Bluetooth: hci3: command tx timeout [ 87.664712][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.682982][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.690035][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.716606][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.743428][ T5823] hsr_slave_0: entered promiscuous mode [ 87.749833][ T5823] hsr_slave_1: entered promiscuous mode [ 87.791607][ T5822] hsr_slave_0: entered promiscuous mode [ 87.798397][ T5822] hsr_slave_1: entered promiscuous mode [ 87.804752][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 87.810553][ T5822] Cannot create hsr debugfs directory [ 87.913132][ T5825] hsr_slave_0: entered promiscuous mode [ 87.919397][ T5825] hsr_slave_1: entered promiscuous mode [ 87.925825][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 87.931964][ T5825] Cannot create hsr debugfs directory [ 87.942172][ T5824] hsr_slave_0: entered promiscuous mode [ 87.948774][ T5824] hsr_slave_1: entered promiscuous mode [ 87.955151][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 87.960930][ T5824] Cannot create hsr debugfs directory [ 88.408105][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.422387][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.443672][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.455039][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.540362][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.555117][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.579081][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.603036][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.690554][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.701487][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.711618][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.722217][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.801440][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.817114][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.827516][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.847914][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.857328][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.927491][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.969066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.976423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.996674][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.003877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.022802][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.071846][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.094268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.101449][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.117200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.124344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.196742][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.240478][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.284076][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.291174][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.314580][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.339952][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.347214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.391938][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.457275][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.464512][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.527423][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.534674][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.658615][ T5838] Bluetooth: hci2: command tx timeout [ 89.736552][ T5838] Bluetooth: hci1: command tx timeout [ 89.742715][ T5838] Bluetooth: hci3: command tx timeout [ 89.748146][ T5838] Bluetooth: hci0: command tx timeout [ 89.776411][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.876051][ T5823] veth0_vlan: entered promiscuous mode [ 89.902448][ T5823] veth1_vlan: entered promiscuous mode [ 89.995470][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.040644][ T5823] veth0_macvtap: entered promiscuous mode [ 90.090491][ T5823] veth1_macvtap: entered promiscuous mode [ 90.109968][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.166939][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.189711][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.222776][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.262032][ T5822] veth0_vlan: entered promiscuous mode [ 90.270217][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.279606][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295793][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.310562][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.364170][ T5822] veth1_vlan: entered promiscuous mode [ 90.401422][ T5824] veth0_vlan: entered promiscuous mode [ 90.439240][ T5824] veth1_vlan: entered promiscuous mode [ 90.451279][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.461297][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.538339][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.547536][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.571315][ T5825] veth0_vlan: entered promiscuous mode [ 90.604628][ T5824] veth0_macvtap: entered promiscuous mode [ 90.619618][ T5825] veth1_vlan: entered promiscuous mode [ 90.627677][ T5822] veth0_macvtap: entered promiscuous mode [ 90.640616][ T5822] veth1_macvtap: entered promiscuous mode [ 90.656590][ T5824] veth1_macvtap: entered promiscuous mode [ 90.685312][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.712326][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.778143][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.819189][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.844009][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.856101][ T5825] veth0_macvtap: entered promiscuous mode [ 90.870453][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.897990][ T5825] veth1_macvtap: entered promiscuous mode [ 90.922288][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.965898][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.998825][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.029957][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.037842][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.055150][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077411][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.087189][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121847][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.177504][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.190886][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.238813][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.286044][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.294258][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.314906][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.375309][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.386741][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.450922][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.461501][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.507086][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.521004][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.616906][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.663388][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.732910][ T5144] Bluetooth: hci2: command tx timeout [ 91.790576][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.799282][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.812979][ T5144] Bluetooth: hci0: command tx timeout [ 91.814836][ T5838] Bluetooth: hci3: command tx timeout [ 91.818424][ T5144] Bluetooth: hci1: command tx timeout [ 91.955830][ T5925] Zero length message leads to an empty skb [ 91.980195][ T24] cfg80211: failed to load regulatory.db [ 92.295533][ T5930] netlink: 354 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.311796][ T5925] syz.2.3 (5925) used greatest stack depth: 19672 bytes left [ 93.712648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 93.813123][ T5144] Bluetooth: hci2: command tx timeout [ 93.893457][ T5144] Bluetooth: hci3: command tx timeout [ 93.898252][ T5838] Bluetooth: hci1: command tx timeout [ 93.898991][ T5144] Bluetooth: hci0: command tx timeout [ 94.053617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.091842][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.197218][ T5945] netlink: 206 bytes leftover after parsing attributes in process `syz.3.9'. [ 95.062985][ T5967] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 95.697915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.973372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.041603][ T5971] Invalid ELF header magic: != ELF [ 97.210847][ T5985] &#$@\]\-: entered promiscuous mode [ 97.469521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.482900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.681526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.943155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.951763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.962593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 98.834305][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.977840][ T6006] netlink: 206 bytes leftover after parsing attributes in process `syz.2.23'. [ 99.315046][ T5996] bridge0: port 3(team0) entered blocking state [ 99.340892][ T5996] bridge0: port 3(team0) entered disabled state [ 99.390085][ T5996] team0: entered allmulticast mode [ 99.427593][ T5996] team_slave_0: entered allmulticast mode [ 99.482652][ T5996] team_slave_1: entered allmulticast mode [ 99.510080][ T5996] team0: entered promiscuous mode [ 99.575124][ T5996] team_slave_0: entered promiscuous mode [ 99.580953][ T5996] team_slave_1: entered promiscuous mode [ 99.614762][ T5996] bridge0: port 3(team0) entered blocking state [ 99.621503][ T5996] bridge0: port 3(team0) entered forwarding state [ 99.886793][ T6008] sd 0:0:1:0: PR command failed: 1026 [ 99.892242][ T6008] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 99.936600][ T6008] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 99.996943][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 101.218929][ T6024] zswap: compressor û not available [ 104.372917][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.504803][ T6104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 108.053290][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 109.309714][ T6123] mmap: syz.2.47 (6123) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.824143][ T6126] process 'syz.0.48' launched './file0' with NULL argv: empty string added [ 110.808398][ T6147] syz.3.51 uses obsolete (PF_INET,SOCK_PACKET) [ 110.854830][ T6149] bond0: invalid ARP target specified [ 110.888595][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 111.202418][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.220351][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.287521][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.300958][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.909835][ T6178] FAULT_INJECTION: forcing a failure. [ 112.909835][ T6178] name failslab, interval 1, probability 0, space 0, times 0 [ 112.928675][ T6178] CPU: 1 UID: 0 PID: 6178 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 112.928701][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.928711][ T6178] Call Trace: [ 112.928717][ T6178] [ 112.928724][ T6178] dump_stack_lvl+0x100/0x190 [ 112.928754][ T6178] should_fail_ex.cold+0x5/0xa [ 112.928775][ T6178] ? lsm_blob_alloc+0x68/0x90 [ 112.928795][ T6178] should_failslab+0xc2/0x120 [ 112.928812][ T6178] __kmalloc_noprof+0xe0/0x850 [ 112.928837][ T6178] ? trace_kmalloc+0x101/0x130 [ 112.928857][ T6178] lsm_blob_alloc+0x68/0x90 [ 112.928878][ T6178] security_sk_alloc+0x2d/0x290 [ 112.928903][ T6178] sk_prot_alloc+0x12a/0x2a0 [ 112.928930][ T6178] sk_alloc+0x36/0xe80 [ 112.928948][ T6178] packet_create+0x127/0x8e0 [ 112.928976][ T6178] __sock_create+0x339/0x860 [ 112.929004][ T6178] __sys_socket+0x14d/0x260 [ 112.929039][ T6178] ? __pfx___sys_socket+0x10/0x10 [ 112.929072][ T6178] __x64_sys_socket+0x72/0xb0 [ 112.929097][ T6178] ? lockdep_hardirqs_on+0x78/0x100 [ 112.929123][ T6178] do_syscall_64+0x106/0xf80 [ 112.929142][ T6178] ? clear_bhb_loop+0x40/0x90 [ 112.929163][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.929181][ T6178] RIP: 0033:0x7f7f9999c799 [ 112.929197][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.929214][ T6178] RSP: 002b:00007f7f9a857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.929232][ T6178] RAX: ffffffffffffffda RBX: 00007f7f99c16090 RCX: 00007f7f9999c799 [ 112.929243][ T6178] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 112.929253][ T6178] RBP: 00007f7f99a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 112.929263][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.929273][ T6178] R13: 00007f7f99c16128 R14: 00007f7f99c16090 R15: 00007ffccd930a58 [ 112.929295][ T6178] [ 113.897046][ T6188] netlink: 334 bytes leftover after parsing attributes in process `syz.2.60'. [ 114.096465][ T6189] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.461714][ T6197] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.981517][ T6212] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.092185][ T6240] openvswitch: netlink: IP tunnel dst address not specified [ 116.435127][ T5144] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 116.445869][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 116.483898][ T6254] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 116.803513][ T29] audit: type=1800 audit(1772344372.093:2): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="dbroot" dev="configfs" ino=9513 res=0 errno=0 [ 117.071498][ T29] audit: type=1804 audit(1772344372.363:3): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.79" name="/newroot/sys/kernel/tracing/buffer_subbuf_size_kb" dev="tracefs" ino=4109 res=1 errno=0 [ 117.492662][ T6282] FAULT_INJECTION: forcing a failure. [ 117.492662][ T6282] name fail_futex, interval 1, probability 0, space 0, times 1 [ 117.506201][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) [ 117.506231][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.506242][ T6282] Call Trace: [ 117.506248][ T6282] [ 117.506256][ T6282] dump_stack_lvl+0x100/0x190 [ 117.506286][ T6282] should_fail_ex.cold+0x5/0xa [ 117.506311][ T6282] get_futex_key+0x1d2/0x1620 [ 117.506335][ T6282] ? __pfx_get_futex_key+0x10/0x10 [ 117.506356][ T6282] ? do_raw_spin_lock+0x128/0x260 [ 117.506382][ T6282] ? find_held_lock+0x2b/0x80 [ 117.506397][ T6282] ? kfence_guarded_free+0x41b/0x5c0 [ 117.506428][ T6282] futex_wake+0xea/0x530 [ 117.506452][ T6282] ? lockdep_hardirqs_on+0x78/0x100 [ 117.506474][ T6282] ? __pfx_futex_wake+0x10/0x10 [ 117.506500][ T6282] ? putname+0xb1/0x110 [ 117.506518][ T6282] ? kmem_cache_free+0x5d2/0x6a0 [ 117.506545][ T6282] do_futex+0x32b/0x350 [ 117.506567][ T6282] ? __pfx_do_futex+0x10/0x10 [ 117.506588][ T6282] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.506616][ T6282] __x64_sys_futex+0x34f/0x4d0 [ 117.506639][ T6282] ? __x64_sys_openat+0x12d/0x210 [ 117.506661][ T6282] ? __pfx___x64_sys_futex+0x10/0x10 [ 117.506693][ T6282] do_syscall_64+0x106/0xf80 [ 117.506712][ T6282] ? clear_bhb_loop+0x40/0x90 [ 117.506733][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.506751][ T6282] RIP: 0033:0x7f7f9999c799 [ 117.506766][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.506783][ T6282] RSP: 002b:00007f7f9a8780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.506800][ T6282] RAX: ffffffffffffffda RBX: 00007f7f99c15fa8 RCX: 00007f7f9999c799 [ 117.506811][ T6282] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f99c15fac [ 117.506821][ T6282] RBP: 00007f7f99c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 117.506831][ T6282] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 117.506841][ T6282] R13: 00007f7f99c16038 R14: 00007ffccd930970 R15: 00007ffccd930a58 [ 117.506863][ T6282] [ 117.816575][ T6284] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.488303][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 118.545551][ T6296] team0: Port device team_slave_0 removed [ 121.157610][ T6344] nvme_fabrics: missing parameter 'transport=%s' [ 121.179875][ T6344] nvme_fabrics: missing parameter 'nqn=%s' [ 124.152451][ T6381] netlink: 'syz.0.104': attribute type 28 has an invalid length. [ 124.160416][ T6381] netlink: 334 bytes leftover after parsing attributes in process `syz.0.104'. [ 124.865189][ T6387] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.202576][ T6395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.209747][ T6395] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.280279][ T6395] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.351077][ T6395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.362229][ T6395] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.389997][ T6395] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.424879][ T6395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.438021][ T6395] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.556638][ T6395] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.632780][ T6395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.665763][ T6395] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.687484][ T6395] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.836762][ T6421] FAULT_INJECTION: forcing a failure. [ 127.836762][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 127.942736][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) [ 127.942770][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.942782][ T6421] Call Trace: [ 127.942788][ T6421] [ 127.942795][ T6421] dump_stack_lvl+0x100/0x190 [ 127.942827][ T6421] should_fail_ex.cold+0x5/0xa [ 127.942849][ T6421] should_failslab+0xc2/0x120 [ 127.942867][ T6421] __kmalloc_cache_node_noprof+0x7d/0x770 [ 127.942896][ T6421] ? blk_mq_init_tags+0x8c/0x300 [ 127.942933][ T6421] blk_mq_init_tags+0x8c/0x300 [ 127.942964][ T6421] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 127.942996][ T6421] blk_mq_alloc_sched_tags+0x1de/0x350 [ 127.943020][ T6421] blk_mq_alloc_sched_res+0x8e/0x250 [ 127.943042][ T6421] elevator_change+0x136/0x530 [ 127.943075][ T6421] elv_iosched_store+0x3dc/0x480 [ 127.943095][ T6421] ? __pfx_elv_iosched_store+0x10/0x10 [ 127.943112][ T6421] ? kasan_save_track+0x14/0x30 [ 127.943148][ T6421] ? __pfx_elv_iosched_store+0x10/0x10 [ 127.943188][ T6421] queue_attr_store+0x25f/0x2f0 [ 127.943223][ T6421] ? __pfx_queue_attr_store+0x10/0x10 [ 127.943250][ T6421] ? __lock_acquire+0x4a5/0x2630 [ 127.943282][ T6421] ? find_held_lock+0x2b/0x80 [ 127.943298][ T6421] ? sysfs_file_kobj+0xe4/0x290 [ 127.943323][ T6421] ? sysfs_file_kobj+0xe4/0x290 [ 127.943347][ T6421] ? __pfx_queue_attr_store+0x10/0x10 [ 127.943372][ T6421] sysfs_kf_write+0xf2/0x150 [ 127.943394][ T6421] kernfs_fop_write_iter+0x3e0/0x5f0 [ 127.943411][ T6421] ? __pfx_sysfs_kf_write+0x10/0x10 [ 127.943434][ T6421] iter_file_splice_write+0x830/0x10a0 [ 127.943476][ T6421] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.943509][ T6421] ? __pfx_copy_splice_read+0x10/0x10 [ 127.943553][ T6421] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.943583][ T6421] direct_splice_actor+0x192/0x6c0 [ 127.943613][ T6421] splice_direct_to_actor+0x345/0xa30 [ 127.943643][ T6421] ? __pfx_direct_splice_actor+0x10/0x10 [ 127.943675][ T6421] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 127.943710][ T6421] do_splice_direct+0x174/0x240 [ 127.943738][ T6421] ? __pfx_do_splice_direct+0x10/0x10 [ 127.943767][ T6421] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 127.943798][ T6421] ? rw_verify_area+0xce/0x6d0 [ 127.943824][ T6421] do_sendfile+0xadc/0xe20 [ 127.943855][ T6421] ? __pfx_do_sendfile+0x10/0x10 [ 127.943884][ T6421] ? __x64_sys_futex+0x34f/0x4d0 [ 127.943905][ T6421] ? __x64_sys_futex+0x358/0x4d0 [ 127.944032][ T6421] __x64_sys_sendfile64+0x1d8/0x220 [ 127.944058][ T6421] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 127.944086][ T6421] do_syscall_64+0x106/0xf80 [ 127.944106][ T6421] ? clear_bhb_loop+0x40/0x90 [ 127.944128][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.944147][ T6421] RIP: 0033:0x7f7f9999c799 [ 127.944170][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.944187][ T6421] RSP: 002b:00007f7f9a878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 127.944204][ T6421] RAX: ffffffffffffffda RBX: 00007f7f99c15fa0 RCX: 00007f7f9999c799 [ 127.944215][ T6421] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 127.944225][ T6421] RBP: 00007f7f99a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 127.944235][ T6421] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 127.944245][ T6421] R13: 00007f7f99c16038 R14: 00007f7f99c15fa0 R15: 00007ffccd930a58 [ 127.944269][ T6421] [ 128.663432][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.669528][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.675829][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.702651][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.387513][ T6440] FAULT_INJECTION: forcing a failure. [ 129.387513][ T6440] name fail_futex, interval 1, probability 0, space 0, times 0 [ 129.431471][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 129.431514][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.431530][ T6440] Call Trace: [ 129.431541][ T6440] [ 129.431552][ T6440] dump_stack_lvl+0x100/0x190 [ 129.431601][ T6440] should_fail_ex.cold+0x5/0xa [ 129.431631][ T6440] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.431667][ T6440] get_futex_key+0x1d2/0x1620 [ 129.431710][ T6440] ? __pfx_get_futex_key+0x10/0x10 [ 129.431743][ T6440] ? keyctl_update_key+0xae/0x160 [ 129.431779][ T6440] ? kasan_save_stack+0x3f/0x50 [ 129.431821][ T6440] ? kasan_save_stack+0x30/0x50 [ 129.431861][ T6440] ? kasan_save_track+0x14/0x30 [ 129.431916][ T6440] ? kasan_save_free_info+0x3b/0x70 [ 129.431950][ T6440] ? __kasan_slab_free+0x5f/0x80 [ 129.431995][ T6440] ? kfree+0x1f6/0x6b0 [ 129.432026][ T6440] ? keyctl_update_key+0xae/0x160 [ 129.432059][ T6440] ? __do_sys_keyctl+0x302/0x5a0 [ 129.432095][ T6440] ? do_syscall_64+0x106/0xf80 [ 129.432125][ T6440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.432162][ T6440] futex_wake+0xea/0x530 [ 129.432207][ T6440] ? __pfx_futex_wake+0x10/0x10 [ 129.432267][ T6440] do_futex+0x32b/0x350 [ 129.432306][ T6440] ? __pfx_do_futex+0x10/0x10 [ 129.432356][ T6440] __x64_sys_futex+0x34f/0x4d0 [ 129.432397][ T6440] ? kfree+0x1f6/0x6b0 [ 129.432432][ T6440] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.432491][ T6440] do_syscall_64+0x106/0xf80 [ 129.432522][ T6440] ? clear_bhb_loop+0x40/0x90 [ 129.432559][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.432591][ T6440] RIP: 0033:0x7fa0cf79c799 [ 129.432617][ T6440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.432645][ T6440] RSP: 002b:00007fa0d056f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.432674][ T6440] RAX: ffffffffffffffda RBX: 00007fa0cfa15fa8 RCX: 00007fa0cf79c799 [ 129.432694][ T6440] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0cfa15fac [ 129.432711][ T6440] RBP: 00007fa0cfa15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 129.432728][ T6440] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 129.432746][ T6440] R13: 00007fa0cfa16038 R14: 00007ffc4c5640a0 R15: 00007ffc4c564188 [ 129.432787][ T6440] [ 129.443595][ T6442] input: f¬ as /devices/virtual/input/input5 [ 129.696502][ T6440] FAULT_INJECTION: forcing a failure. [ 129.696502][ T6440] name failslab, interval 1, probability 0, space 0, times 0 [ 129.741711][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 129.741753][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.741770][ T6440] Call Trace: [ 129.741781][ T6440] [ 129.741792][ T6440] dump_stack_lvl+0x100/0x190 [ 129.741844][ T6440] should_fail_ex.cold+0x5/0xa [ 129.741879][ T6440] should_failslab+0xc2/0x120 [ 129.741909][ T6440] __kmalloc_cache_noprof+0x7a/0x6f0 [ 129.741956][ T6440] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 129.742014][ T6440] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 129.742074][ T6440] ? __mutex_lock+0x26a/0x1b90 [ 129.742128][ T6440] ? snd_pcm_oss_sync+0x243/0x840 [ 129.742176][ T6440] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 129.742230][ T6440] ? __pfx___mutex_lock+0x10/0x10 [ 129.742274][ T6440] ? __fsnotify_parent+0x2b4/0xca0 [ 129.742337][ T6440] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 129.742390][ T6440] snd_pcm_oss_sync+0x265/0x840 [ 129.742443][ T6440] snd_pcm_oss_release+0x238/0x300 [ 129.742486][ T6440] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 129.742531][ T6440] __fput+0x3ff/0xb40 [ 129.742575][ T6440] task_work_run+0x150/0x240 [ 129.742620][ T6440] ? __pfx_task_work_run+0x10/0x10 [ 129.742673][ T6440] exit_to_user_mode_loop+0x100/0x4a0 [ 129.742713][ T6440] do_syscall_64+0x668/0xf80 [ 129.742746][ T6440] ? clear_bhb_loop+0x40/0x90 [ 129.742784][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.742816][ T6440] RIP: 0033:0x7fa0cf79c799 [ 129.742842][ T6440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.742868][ T6440] RSP: 002b:00007fa0d056f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 129.742897][ T6440] RAX: 0000000000000000 RBX: 00007fa0cfa15fa0 RCX: 00007fa0cf79c799 [ 129.742917][ T6440] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 129.742934][ T6440] RBP: 00007fa0cf832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 129.742960][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.742977][ T6440] R13: 00007fa0cfa16038 R14: 00007fa0cfa15fa0 R15: 00007ffc4c564188 [ 129.743018][ T6440] [ 130.701324][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.701349][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.707478][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.772677][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.165244][ T6478] FAULT_INJECTION: forcing a failure. [ 132.165244][ T6478] name failslab, interval 1, probability 0, space 0, times 0 [ 132.304386][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 132.304429][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.304447][ T6478] Call Trace: [ 132.304457][ T6478] [ 132.304469][ T6478] dump_stack_lvl+0x100/0x190 [ 132.304522][ T6478] should_fail_ex.cold+0x5/0xa [ 132.304558][ T6478] ? sk_prot_alloc+0x10b/0x2a0 [ 132.304597][ T6478] should_failslab+0xc2/0x120 [ 132.304628][ T6478] __kmalloc_noprof+0xe0/0x850 [ 132.304682][ T6478] sk_prot_alloc+0x10b/0x2a0 [ 132.304729][ T6478] sk_alloc+0x36/0xe80 [ 132.304763][ T6478] pfkey_create+0x105/0x600 [ 132.304803][ T6478] __sock_create+0x339/0x860 [ 132.304857][ T6478] __sys_socket+0x14d/0x260 [ 132.304903][ T6478] ? __pfx___sys_socket+0x10/0x10 [ 132.304961][ T6478] __x64_sys_socket+0x72/0xb0 [ 132.305006][ T6478] ? lockdep_hardirqs_on+0x78/0x100 [ 132.305041][ T6478] do_syscall_64+0x106/0xf80 [ 132.305075][ T6478] ? clear_bhb_loop+0x40/0x90 [ 132.305114][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.305145][ T6478] RIP: 0033:0x7f5a8fd9c799 [ 132.305179][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.305208][ T6478] RSP: 002b:00007f5a8dbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 132.305238][ T6478] RAX: ffffffffffffffda RBX: 00007f5a90016270 RCX: 00007f5a8fd9c799 [ 132.305257][ T6478] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 132.305274][ T6478] RBP: 00007f5a8fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 132.305292][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.305309][ T6478] R13: 00007f5a90016308 R14: 00007f5a90016270 R15: 00007ffe7c25e178 [ 132.305351][ T6478] [ 132.514858][ T6480] netlink: 146 bytes leftover after parsing attributes in process `syz.2.127'. [ 132.774787][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.789871][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.796115][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.852746][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.948355][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957543][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.104856][ T6493] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 133.738535][ T6502] FAULT_INJECTION: forcing a failure. [ 133.738535][ T6502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.772708][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(full) [ 133.772749][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.772766][ T6502] Call Trace: [ 133.772776][ T6502] [ 133.772787][ T6502] dump_stack_lvl+0x100/0x190 [ 133.772846][ T6502] should_fail_ex.cold+0x5/0xa [ 133.772873][ T6502] ? prepare_alloc_pages+0x16d/0x5f0 [ 133.772909][ T6502] should_fail_alloc_page+0xeb/0x140 [ 133.772941][ T6502] prepare_alloc_pages+0x1f0/0x5f0 [ 133.772981][ T6502] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 133.773030][ T6502] ? rcu_is_watching+0x12/0xc0 [ 133.773075][ T6502] ? trace_mm_page_alloc+0x17a/0x1d0 [ 133.773108][ T6502] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 133.773157][ T6502] ? kernel_text_address+0xf1/0x100 [ 133.773198][ T6502] ? unwind_get_return_address+0x59/0xa0 [ 133.773230][ T6502] ? arch_stack_walk+0xa6/0xf0 [ 133.773259][ T6502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.773322][ T6502] ? stack_depot_save_flags+0x27/0x9d0 [ 133.773384][ T6502] ? pcpu_create_chunk+0x254/0x730 [ 133.773420][ T6502] ? pcpu_alloc_noprof+0x18c4/0x1c50 [ 133.773462][ T6502] alloc_pages_bulk_noprof+0x782/0x1490 [ 133.773521][ T6502] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 133.773581][ T6502] ? alloc_pages_noprof+0x233/0x390 [ 133.773616][ T6502] __kasan_populate_vmalloc+0xf0/0x210 [ 133.773668][ T6502] pcpu_get_vm_areas+0x2df1/0x55d0 [ 133.773730][ T6502] ? __pfx_pcpu_get_vm_areas+0x10/0x10 [ 133.773773][ T6502] pcpu_create_chunk+0x254/0x730 [ 133.773817][ T6502] pcpu_alloc_noprof+0x18c4/0x1c50 [ 133.773877][ T6502] bpf_map_alloc_percpu+0x9a/0xf0 [ 133.773926][ T6502] ? __pfx_bpf_map_alloc_percpu+0x10/0x10 [ 133.773978][ T6502] ? __pfx___might_resched+0x10/0x10 [ 133.774021][ T6502] ? __bpf_map_area_alloc+0x13a/0x200 [ 133.774061][ T6502] htab_map_alloc+0x1054/0x14e0 [ 133.774125][ T6502] ? ns_capable+0xd2/0xf0 [ 133.774156][ T6502] ? __pfx_htab_map_mem_usage+0x10/0x10 [ 133.774201][ T6502] map_create+0x84e/0x2ba0 [ 133.774244][ T6502] ? futex_unqueue+0x13d/0x2c0 [ 133.774281][ T6502] ? __futex_wait+0x256/0x300 [ 133.774335][ T6502] ? __pfx_map_create+0x10/0x10 [ 133.774380][ T6502] ? __might_fault+0xc5/0x140 [ 133.774419][ T6502] ? __might_fault+0xc5/0x140 [ 133.774474][ T6502] __sys_bpf+0x2091/0x4b90 [ 133.774512][ T6502] ? __pfx___sys_bpf+0x10/0x10 [ 133.774541][ T6502] ? __pfx_futex_wait+0x10/0x10 [ 133.774594][ T6502] ? putname+0xb1/0x110 [ 133.774622][ T6502] ? kmem_cache_free+0x124/0x6a0 [ 133.774668][ T6502] ? do_futex+0x192/0x350 [ 133.774737][ T6502] ? __x64_sys_openat+0x12d/0x210 [ 133.774773][ T6502] ? xfd_validate_state+0x129/0x190 [ 133.774825][ T6502] __x64_sys_bpf+0x7b/0xc0 [ 133.774858][ T6502] ? lockdep_hardirqs_on+0x78/0x100 [ 133.774891][ T6502] do_syscall_64+0x106/0xf80 [ 133.774922][ T6502] ? clear_bhb_loop+0x40/0x90 [ 133.774959][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.774989][ T6502] RIP: 0033:0x7f7f9999c799 [ 133.775015][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.775042][ T6502] RSP: 002b:00007f7f9a857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.775072][ T6502] RAX: ffffffffffffffda RBX: 00007f7f99c16090 RCX: 00007f7f9999c799 [ 133.775090][ T6502] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 133.775107][ T6502] RBP: 00007f7f99a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 133.775132][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.775148][ T6502] R13: 00007f7f99c16128 R14: 00007f7f99c16090 R15: 00007ffccd930a58 [ 133.775189][ T6502] [ 134.352605][ T6501] Invalid ELF header magic: != ELF [ 135.484990][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.493340][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.527954][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.540795][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.555341][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.738203][ T6519] FAULT_INJECTION: forcing a failure. [ 135.738203][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 135.782678][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 135.782720][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.782736][ T6519] Call Trace: [ 135.782746][ T6519] [ 135.782757][ T6519] dump_stack_lvl+0x100/0x190 [ 135.782809][ T6519] should_fail_ex.cold+0x5/0xa [ 135.782844][ T6519] should_failslab+0xc2/0x120 [ 135.782875][ T6519] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 135.782928][ T6519] ? __kernfs_new_node+0xd2/0x960 [ 135.782979][ T6519] __kernfs_new_node+0xd2/0x960 [ 135.783025][ T6519] ? __pfx___kernfs_new_node+0x10/0x10 [ 135.783078][ T6519] ? find_held_lock+0x2b/0x80 [ 135.783105][ T6519] ? kernfs_root+0xee/0x2a0 [ 135.783141][ T6519] ? kernfs_root+0xee/0x2a0 [ 135.783187][ T6519] kernfs_new_node+0x11b/0x1a0 [ 135.783230][ T6519] __kernfs_create_file+0x53/0x350 [ 135.783260][ T6519] sysfs_add_file_mode_ns+0x207/0x3c0 [ 135.783305][ T6519] sysfs_merge_group+0x194/0x340 [ 135.783339][ T6519] ? __pfx_sysfs_merge_group+0x10/0x10 [ 135.783385][ T6519] ? __pfx_dev_add_physical_location+0x10/0x10 [ 135.783426][ T6519] ? bus_to_subsys+0x114/0x150 [ 135.783460][ T6519] dpm_sysfs_add+0x237/0x280 [ 135.783501][ T6519] device_add+0x9ef/0x1950 [ 135.783544][ T6519] ? __pfx_device_add+0x10/0x10 [ 135.783603][ T6519] __add_disk+0x518/0xe40 [ 135.783641][ T6519] ? find_held_lock+0x2b/0x80 [ 135.783669][ T6519] add_disk_fwnode+0x3d4/0x5c0 [ 135.783715][ T6519] zram_add+0x4d2/0x610 [ 135.783745][ T6519] ? __pfx_zram_add+0x10/0x10 [ 135.783804][ T6519] ? find_held_lock+0x2b/0x80 [ 135.783831][ T6519] ? sysfs_file_kobj+0xe4/0x290 [ 135.783871][ T6519] ? __pfx_hot_add_show+0x10/0x10 [ 135.783902][ T6519] hot_add_show+0x21/0x80 [ 135.783938][ T6519] class_attr_show+0x72/0xa0 [ 135.783976][ T6519] ? __pfx_class_attr_show+0x10/0x10 [ 135.784013][ T6519] sysfs_kf_seq_show+0x217/0x3a0 [ 135.784052][ T6519] seq_read_iter+0x32f/0x1270 [ 135.784112][ T6519] kernfs_fop_read_iter+0x46c/0x610 [ 135.784142][ T6519] ? rw_verify_area+0xce/0x6d0 [ 135.784176][ T6519] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 135.784205][ T6519] vfs_read+0x825/0xb30 [ 135.784254][ T6519] ? __pfx_vfs_read+0x10/0x10 [ 135.784324][ T6519] ksys_read+0x12a/0x250 [ 135.784366][ T6519] ? __pfx_ksys_read+0x10/0x10 [ 135.784420][ T6519] do_syscall_64+0x106/0xf80 [ 135.784454][ T6519] ? clear_bhb_loop+0x40/0x90 [ 135.784492][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.784522][ T6519] RIP: 0033:0x7f5a8fd9c799 [ 135.784547][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.784573][ T6519] RSP: 002b:00007f5a90b7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.784602][ T6519] RAX: ffffffffffffffda RBX: 00007f5a90015fa0 RCX: 00007f5a8fd9c799 [ 135.784621][ T6519] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 135.784638][ T6519] RBP: 00007f5a8fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 135.784655][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.784671][ T6519] R13: 00007f5a90016038 R14: 00007f5a90015fa0 R15: 00007ffe7c25e178 [ 135.784715][ T6519] [ 136.749582][ T6511] chnl_net:caif_netlink_parms(): no params data found [ 137.653716][ T5144] Bluetooth: hci4: command tx timeout [ 138.005885][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.049270][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.065294][ T6511] bridge_slave_0: entered allmulticast mode [ 138.105590][ T6511] bridge_slave_0: entered promiscuous mode [ 138.125097][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.134228][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.163199][ T6511] bridge_slave_1: entered allmulticast mode [ 138.181545][ T6511] bridge_slave_1: entered promiscuous mode [ 138.326879][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.364794][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.521769][ T6511] team0: Port device team_slave_0 added [ 138.547598][ T6511] team0: Port device team_slave_1 added [ 138.649874][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.669807][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.728790][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.761258][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.791012][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.872192][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.050165][ T6511] hsr_slave_0: entered promiscuous mode [ 139.063580][ T6511] hsr_slave_1: entered promiscuous mode [ 139.079282][ T6511] debugfs: 'hsr0' already exists in 'hsr' [ 139.094501][ T6511] Cannot create hsr debugfs directory [ 139.532414][ T6511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.733134][ T5144] Bluetooth: hci4: command tx timeout [ 139.814122][ T6511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.873951][ T6511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.906155][ T6511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.914290][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 140.126077][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.149963][ T6511] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.178326][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.185613][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.239509][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.246745][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.567431][ T6584] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 140.604198][ T6584] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 140.672652][ T6584] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 140.681282][ T6584] page_type: f5(slab) [ 140.752811][ T6584] raw: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 140.782567][ T6584] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 140.812987][ T6584] head: 00fff00000000040 ffff888140413a00 dead000000000100 dead000000000122 [ 140.821738][ T6584] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 140.875238][ T6584] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 140.922835][ T6584] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 140.931585][ T6584] page dumped because: unmovable page [ 140.942657][ T6584] page_owner tracks the page as allocated [ 140.950765][ T6584] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5205, tgid 5205 (udevd), ts 52038489608, free_ts 52037367514 [ 141.060304][ T6584] post_alloc_hook+0x153/0x170 [ 141.112637][ T6584] get_page_from_freelist+0x111d/0x3140 [ 141.118283][ T6584] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 141.182661][ T6584] new_slab+0xa6/0x6d0 [ 141.187627][ T6584] refill_objects+0x26b/0x400 [ 141.192374][ T6584] __pcs_replace_empty_main+0x19f/0x600 [ 141.228651][ T6584] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 141.239414][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.248907][ T6584] shmem_alloc_inode+0x25/0x50 [ 141.273622][ T6584] alloc_inode+0x68/0x250 [ 141.302581][ T6584] new_inode+0x22/0x1c0 [ 141.322806][ T6584] shmem_get_inode+0x212/0x1040 [ 141.342589][ T6584] shmem_mknod+0x20c/0x470 [ 141.347200][ T6584] lookup_open.isra.0+0xc47/0x11b0 [ 141.382629][ T6584] path_openat+0x2291/0x31a0 [ 141.392670][ T6584] do_file_open+0x20e/0x430 [ 141.397240][ T6584] do_sys_openat2+0x10d/0x1e0 [ 141.442866][ T6584] page last free pid 5198 tgid 5198 stack trace: [ 141.449258][ T6584] __free_frozen_pages+0x7e1/0x10d0 [ 141.482541][ T6584] qlist_free_all+0x47/0xe0 [ 141.487247][ T6584] kasan_quarantine_reduce+0x1a0/0x1f0 [ 141.515435][ T6584] __kasan_slab_alloc+0x69/0x90 [ 141.520410][ T6584] kmem_cache_alloc_noprof+0x241/0x6e0 [ 141.552778][ T6584] do_getname+0x35/0x390 [ 141.557112][ T6584] do_sys_openat2+0xc5/0x1e0 [ 141.592739][ T6584] __x64_sys_openat+0x12d/0x210 [ 141.598444][ T6584] do_syscall_64+0x106/0xf80 [ 141.619386][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.812668][ T5144] Bluetooth: hci4: command tx timeout [ 142.240338][ T6511] veth0_vlan: entered promiscuous mode [ 142.270182][ T6511] veth1_vlan: entered promiscuous mode [ 142.386327][ T6511] veth0_macvtap: entered promiscuous mode [ 142.426916][ T6511] veth1_macvtap: entered promiscuous mode [ 142.496794][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.581692][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.649728][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.689014][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.716254][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.752856][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.019633][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.050702][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.159999][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.192184][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.316589][ T6638] netlink: 226 bytes leftover after parsing attributes in process `syz.0.161'. [ 143.896533][ T5144] Bluetooth: hci4: command tx timeout [ 144.245856][ T6661] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 144.693301][ T29] audit: type=1400 audit(1772344399.973:4): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6672 comm="syz.3.167" [ 144.696637][ T6673] Debayer A: ================= START STATUS ================= [ 144.710499][ T6676] FAULT_INJECTION: forcing a failure. [ 144.710499][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 144.730185][ T6673] Debayer A: Debayer Mean Window Size: 3 [ 144.730265][ T6673] Debayer A: ================== END STATUS ================== [ 144.803376][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.3.167 Not tainted syzkaller #0 PREEMPT(full) [ 144.803414][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.803428][ T6676] Call Trace: [ 144.803436][ T6676] [ 144.803446][ T6676] dump_stack_lvl+0x100/0x190 [ 144.803497][ T6676] should_fail_ex.cold+0x5/0xa [ 144.803533][ T6676] should_failslab+0xc2/0x120 [ 144.803563][ T6676] __kmalloc_cache_noprof+0x7a/0x6f0 [ 144.803598][ T6676] ? percpu_ref_init+0xec/0x3f0 [ 144.803641][ T6676] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 144.803680][ T6676] percpu_ref_init+0xec/0x3f0 [ 144.803718][ T6676] io_uring_setup.cold+0x23b/0x1d09 [ 144.803764][ T6676] ? __pfx_io_uring_setup+0x10/0x10 [ 144.803810][ T6676] ? do_futex+0x192/0x350 [ 144.803848][ T6676] ? __pfx_do_futex+0x10/0x10 [ 144.803881][ T6676] ? xfd_validate_state+0x129/0x190 [ 144.803913][ T6676] __x64_sys_io_uring_setup+0xc2/0x170 [ 144.803934][ T6676] do_syscall_64+0x106/0xf80 [ 144.803954][ T6676] ? clear_bhb_loop+0x40/0x90 [ 144.803975][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.803993][ T6676] RIP: 0033:0x7f5a8fd9c799 [ 144.804009][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.804026][ T6676] RSP: 002b:00007f5a90b7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 144.804044][ T6676] RAX: ffffffffffffffda RBX: 00007f5a90015fa0 RCX: 00007f5a8fd9c799 [ 144.804056][ T6676] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 144.804068][ T6676] RBP: 00007f5a8fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 144.804080][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.804090][ T6676] R13: 00007f5a90016038 R14: 00007f5a90015fa0 R15: 00007ffe7c25e178 [ 144.804112][ T6676] [ 145.312900][ T6687] usb usb3: usbfs: interface 0 claimed by hub while 'syz.3.170' sets config #-1 [ 146.319840][ T6717] futex_wake_op: syz.3.177 tries to shift op by -2048; fix this program [ 146.376883][ T6717] futex_wake_op: syz.3.177 tries to shift op by -2048; fix this program [ 146.416340][ T6717] futex_wake_op: syz.3.177 tries to shift op by -2048; fix this program [ 146.925682][ T6730] FAULT_INJECTION: forcing a failure. [ 146.925682][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 146.942285][ T6730] CPU: 0 UID: 0 PID: 6730 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(full) [ 146.942327][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.942345][ T6730] Call Trace: [ 146.942355][ T6730] [ 146.942367][ T6730] dump_stack_lvl+0x100/0x190 [ 146.942416][ T6730] should_fail_ex.cold+0x5/0xa [ 146.942437][ T6730] should_failslab+0xc2/0x120 [ 146.942463][ T6730] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 146.942503][ T6730] ? alloc_empty_file+0x55/0x1c0 [ 146.942546][ T6730] alloc_empty_file+0x55/0x1c0 [ 146.942583][ T6730] alloc_file_pseudo+0x13a/0x230 [ 146.942621][ T6730] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 146.942670][ T6730] __shmem_file_setup+0x221/0x490 [ 146.942711][ T6730] ? __pfx___shmem_file_setup+0x10/0x10 [ 146.942757][ T6730] ? vm_area_alloc+0x1f/0x160 [ 146.942800][ T6730] shmem_zero_setup+0x96/0x1b0 [ 146.942858][ T6730] __mmap_region+0x2198/0x29e0 [ 146.942903][ T6730] ? __pfx___mmap_region+0x10/0x10 [ 146.942942][ T6730] ? process_measurement+0x1f4/0x2350 [ 146.943007][ T6730] ? __lock_acquire+0x4a5/0x2630 [ 146.943045][ T6730] ? update_cfs_rq_load_avg+0x51/0x550 [ 146.943095][ T6730] ? find_held_lock+0x2b/0x80 [ 146.943119][ T6730] ? finish_task_switch.isra.0+0x200/0xb80 [ 146.943149][ T6730] ? finish_task_switch.isra.0+0x200/0xb80 [ 146.943195][ T6730] ? trace_sched_exit_tp+0x13a/0x180 [ 146.943224][ T6730] ? __schedule+0x1000/0x60e0 [ 146.943271][ T6730] ? rcu_is_watching+0x12/0xc0 [ 146.943298][ T6730] ? cap_capable+0x107/0x460 [ 146.943324][ T6730] mmap_region+0x180/0x3e0 [ 146.943353][ T6730] do_mmap+0xc63/0x12f0 [ 146.943375][ T6730] ? __pfx_do_mmap+0x10/0x10 [ 146.943393][ T6730] ? __pfx_down_write_killable+0x10/0x10 [ 146.943421][ T6730] vm_mmap_pgoff+0x29e/0x470 [ 146.943443][ T6730] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 146.943463][ T6730] ? do_futex+0x192/0x350 [ 146.943485][ T6730] ? __pfx_do_futex+0x10/0x10 [ 146.943512][ T6730] ksys_mmap_pgoff+0xe1/0x650 [ 146.943530][ T6730] ? __x64_sys_futex+0x34f/0x4d0 [ 146.943551][ T6730] ? __x64_sys_futex+0x358/0x4d0 [ 146.943574][ T6730] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 146.943591][ T6730] ? xfd_validate_state+0x129/0x190 [ 146.943620][ T6730] __x64_sys_mmap+0x125/0x190 [ 146.943647][ T6730] do_syscall_64+0x106/0xf80 [ 146.943666][ T6730] ? clear_bhb_loop+0x40/0x90 [ 146.943688][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.943706][ T6730] RIP: 0033:0x7f7f9999c799 [ 146.943722][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.943738][ T6730] RSP: 002b:00007f7f9a857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 146.943756][ T6730] RAX: ffffffffffffffda RBX: 00007f7f99c16090 RCX: 00007f7f9999c799 [ 146.943767][ T6730] RDX: 00000000000000db RSI: 0000000004020009 RDI: 0000000000000000 [ 146.943778][ T6730] RBP: 00007f7f99a32bd9 R08: 0000000000000401 R09: 0000000000008000 [ 146.943788][ T6730] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 146.943798][ T6730] R13: 00007f7f99c16128 R14: 00007f7f99c16090 R15: 00007ffccd930a58 [ 146.943829][ T6730] [ 147.644553][ T6737] netlink: 25 bytes leftover after parsing attributes in process `syz.3.180'. [ 147.973541][ T6729] futex_wake_op: syz.0.178 tries to shift op by -2048; fix this program [ 148.245476][ T6746] FAULT_INJECTION: forcing a failure. [ 148.245476][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 148.273148][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) [ 148.273190][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.273207][ T6746] Call Trace: [ 148.273218][ T6746] [ 148.273229][ T6746] dump_stack_lvl+0x100/0x190 [ 148.273279][ T6746] should_fail_ex.cold+0x5/0xa [ 148.273314][ T6746] should_failslab+0xc2/0x120 [ 148.273344][ T6746] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 148.273383][ T6746] ? security_file_alloc+0x34/0x2c0 [ 148.273432][ T6746] ? trace_kmem_cache_alloc+0xf3/0x120 [ 148.273468][ T6746] security_file_alloc+0x34/0x2c0 [ 148.273518][ T6746] init_file+0x95/0x480 [ 148.273551][ T6746] alloc_empty_file+0x73/0x1c0 [ 148.273588][ T6746] alloc_file_pseudo+0x13a/0x230 [ 148.273626][ T6746] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 148.273660][ T6746] ? alloc_fd+0x476/0x790 [ 148.273711][ T6746] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.273760][ T6746] __anon_inode_getfile+0xe8/0x280 [ 148.273798][ T6746] anon_inode_getfile_fmode+0x37/0xa0 [ 148.273834][ T6746] __do_sys_fanotify_init+0xa79/0xe50 [ 148.273884][ T6746] do_syscall_64+0x106/0xf80 [ 148.273917][ T6746] ? clear_bhb_loop+0x40/0x90 [ 148.273955][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.273985][ T6746] RIP: 0033:0x7f7f9999c799 [ 148.274009][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.274037][ T6746] RSP: 002b:00007f7f9a857028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 148.274075][ T6746] RAX: ffffffffffffffda RBX: 00007f7f99c16090 RCX: 00007f7f9999c799 [ 148.274095][ T6746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 148.274113][ T6746] RBP: 00007f7f99a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 148.274130][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.274148][ T6746] R13: 00007f7f99c16128 R14: 00007f7f99c16090 R15: 00007ffccd930a58 [ 148.274189][ T6746] [ 149.856466][ T6768] netlink: 'syz.4.186': attribute type 8 has an invalid length. [ 151.122248][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 154.101319][ T29] audit: type=1800 audit(1772344409.383:5): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.192" name="members" dev="configfs" ino=13445 res=0 errno=0 [ 155.233807][ T6841] netlink: 306 bytes leftover after parsing attributes in process `syz.3.198'. [ 155.303264][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 155.363501][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.587855][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.066991][ T6863] bridge0: port 4(gretap0) entered blocking state [ 157.081893][ T6863] bridge0: port 4(gretap0) entered disabled state [ 157.132793][ T6863] gretap0: entered allmulticast mode [ 157.161576][ T6863] gretap0: entered promiscuous mode [ 157.199227][ T6863] bridge0: port 4(gretap0) entered blocking state [ 157.205874][ T6863] bridge0: port 4(gretap0) entered forwarding state [ 158.065482][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 169.920056][ T7069] zswap: compressor û not available [ 172.209416][ T5144] Bluetooth: hci4: Malformed LE Event: 0x0b [ 172.901743][ T7093] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.920739][ T7093] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.933015][ T7093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.952338][ T7093] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.996302][ T7093] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.009450][ T7093] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 173.086213][ T7093] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 173.429819][ T29] audit: type=1800 audit(1772344428.723:6): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="dbroot" dev="configfs" ino=14973 res=0 errno=0 [ 174.294222][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.761406][ T7158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.249'. [ 174.833240][ T7156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.863897][ T7156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.892931][ T7156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.942798][ T7156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.950049][ T7156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.788863][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.932629][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.938710][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.012898][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.019027][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.111982][ T7183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 178.024164][ T7206] futex_wake_op: syz.2.258 tries to shift op by -2048; fix this program [ 178.097247][ T7206] futex_wake_op: syz.2.258 tries to shift op by -2048; fix this program [ 178.251005][ T7206] 0x000000000001-0x000000020000 : "" [ 178.307870][ T7206] ftl_cs: FTL header corrupt! [ 178.398373][ T7197] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 178.650004][ T7209] netlink: 322 bytes leftover after parsing attributes in process `syz.0.259'. [ 179.106732][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.172912][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.875437][ T7263] sd 0:0:1:0: PR command failed: 1026 [ 181.875497][ T7263] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 181.875553][ T7263] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 182.805620][ T7277] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 183.441158][ T7289] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 184.854661][ T7305] netlink: 'syz.3.279': attribute type 11 has an invalid length. [ 186.217756][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 187.627531][ T7326] cgroup: fork rejected by pids controller in /syz0 [ 188.413985][ T7330] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 189.554599][ T7341] Process accounting resumed [ 190.084711][ T7410] FAULT_INJECTION: forcing a failure. [ 190.084711][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 190.135140][ T7410] CPU: 0 UID: 0 PID: 7410 Comm: syz.2.291 Not tainted syzkaller #0 PREEMPT(full) [ 190.135180][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.135196][ T7410] Call Trace: [ 190.135206][ T7410] [ 190.135217][ T7410] dump_stack_lvl+0x100/0x190 [ 190.135267][ T7410] should_fail_ex.cold+0x5/0xa [ 190.135302][ T7410] ? lsm_blob_alloc+0x68/0x90 [ 190.135334][ T7410] should_failslab+0xc2/0x120 [ 190.135362][ T7410] __kmalloc_noprof+0xe0/0x850 [ 190.135401][ T7410] ? trace_kmalloc+0x101/0x130 [ 190.135435][ T7410] lsm_blob_alloc+0x68/0x90 [ 190.135469][ T7410] security_sk_alloc+0x2d/0x290 [ 190.135511][ T7410] sk_prot_alloc+0x12a/0x2a0 [ 190.135555][ T7410] sk_alloc+0x36/0xe80 [ 190.135586][ T7410] __netlink_create+0x5e/0x2c0 [ 190.135614][ T7410] ? __wake_up+0x3f/0x60 [ 190.135648][ T7410] netlink_create+0x293/0x610 [ 190.135678][ T7410] ? __pfx_genl_bind+0x10/0x10 [ 190.135713][ T7410] ? __pfx_genl_unbind+0x10/0x10 [ 190.135748][ T7410] ? __pfx_genl_release+0x10/0x10 [ 190.135798][ T7410] __sock_create+0x339/0x860 [ 190.135858][ T7410] __sys_socket+0x14d/0x260 [ 190.135899][ T7410] ? exc_page_fault+0x6f/0xd0 [ 190.135930][ T7410] ? __pfx___sys_socket+0x10/0x10 [ 190.135977][ T7410] ? do_user_addr_fault+0x8d6/0x12f0 [ 190.136029][ T7410] __x64_sys_socket+0x72/0xb0 [ 190.136071][ T7410] ? lockdep_hardirqs_on+0x78/0x100 [ 190.136104][ T7410] do_syscall_64+0x106/0xf80 [ 190.136134][ T7410] ? clear_bhb_loop+0x40/0x90 [ 190.136170][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.136199][ T7410] RIP: 0033:0x7f7f9999e007 [ 190.136224][ T7410] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.136251][ T7410] RSP: 002b:00007f7f9a855f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 190.136279][ T7410] RAX: ffffffffffffffda RBX: 00007f7f99c16090 RCX: 00007f7f9999e007 [ 190.136298][ T7410] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 190.136315][ T7410] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 190.136331][ T7410] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 190.136348][ T7410] R13: 00007f7f99c16128 R14: 00007f7f99c16090 R15: 00007ffccd930a58 [ 190.136387][ T7410] [ 192.953873][ T7458] FAULT_INJECTION: forcing a failure. [ 192.953873][ T7458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.997246][ T7458] CPU: 1 UID: 0 PID: 7458 Comm: syz.4.296 Not tainted syzkaller #0 PREEMPT(full) [ 192.997285][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.997302][ T7458] Call Trace: [ 192.997311][ T7458] [ 192.997322][ T7458] dump_stack_lvl+0x100/0x190 [ 192.997370][ T7458] should_fail_ex.cold+0x5/0xa [ 192.997398][ T7458] ? prepare_alloc_pages+0x16d/0x5f0 [ 192.997433][ T7458] should_fail_alloc_page+0xeb/0x140 [ 192.997465][ T7458] prepare_alloc_pages+0x1f0/0x5f0 [ 192.997503][ T7458] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 192.997546][ T7458] ? __pfx_stack_trace_save+0x10/0x10 [ 192.997577][ T7458] ? stack_depot_save_flags+0x27/0x9d0 [ 192.997622][ T7458] ? kasan_save_stack+0x3f/0x50 [ 192.997662][ T7458] ? kasan_save_stack+0x30/0x50 [ 192.997702][ T7458] ? kasan_save_track+0x14/0x30 [ 192.997743][ T7458] ? __kasan_slab_alloc+0x89/0x90 [ 192.997810][ T7458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 192.997861][ T7458] ? __pfx_css_rstat_updated+0x10/0x10 [ 192.997905][ T7458] ? lock_acquire+0x1cf/0x380 [ 192.997944][ T7458] ? find_held_lock+0x2b/0x80 [ 192.997969][ T7458] ? page_table_check_set+0x49a/0xa10 [ 192.998013][ T7458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.998063][ T7458] ? policy_nodemask+0xed/0x4f0 [ 192.998095][ T7458] alloc_pages_mpol+0x1fb/0x550 [ 192.998126][ T7458] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 192.998165][ T7458] folio_alloc_mpol_noprof+0x36/0x340 [ 192.998198][ T7458] vma_alloc_folio_noprof+0xed/0x1d0 [ 192.998228][ T7458] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 192.998268][ T7458] do_anonymous_page+0xb3a/0x1fb0 [ 192.998307][ T7458] __handle_mm_fault+0x1d42/0x2b60 [ 192.998344][ T7458] ? __pfx___handle_mm_fault+0x10/0x10 [ 192.998374][ T7458] ? pte_offset_map_lock+0x174/0x320 [ 192.998409][ T7458] ? find_held_lock+0x2b/0x80 [ 192.998439][ T7458] ? follow_page_pte+0x5b3/0x1400 [ 192.998468][ T7458] handle_mm_fault+0x36d/0xa20 [ 192.998502][ T7458] __get_user_pages+0xf9c/0x34d0 [ 192.998537][ T7458] ? __pfx___get_user_pages+0x10/0x10 [ 192.998569][ T7458] populate_vma_page_range+0x267/0x3f0 [ 192.998595][ T7458] ? __pfx_populate_vma_page_range+0x10/0x10 [ 192.998619][ T7458] ? __pfx_find_vma_intersection+0x10/0x10 [ 192.998656][ T7458] ? do_mmap+0x93f/0x12f0 [ 192.998681][ T7458] __mm_populate+0x107/0x3a0 [ 192.998707][ T7458] ? __pfx___mm_populate+0x10/0x10 [ 192.998733][ T7458] ? up_write+0x290/0x4f0 [ 192.998774][ T7458] vm_mmap_pgoff+0x37f/0x470 [ 192.998802][ T7458] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 192.998826][ T7458] ? do_futex+0x192/0x350 [ 192.998855][ T7458] ? __pfx_do_futex+0x10/0x10 [ 192.998880][ T7458] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.998915][ T7458] ksys_mmap_pgoff+0xe1/0x650 [ 192.998936][ T7458] ? __x64_sys_futex+0x34f/0x4d0 [ 192.998963][ T7458] ? __x64_sys_futex+0x358/0x4d0 [ 192.999000][ T7458] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 192.999027][ T7458] ? xfd_validate_state+0x129/0x190 [ 192.999074][ T7458] __x64_sys_mmap+0x125/0x190 [ 192.999119][ T7458] do_syscall_64+0x106/0xf80 [ 192.999151][ T7458] ? clear_bhb_loop+0x40/0x90 [ 192.999186][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.999216][ T7458] RIP: 0033:0x7f32ec19c799 [ 192.999241][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.999267][ T7458] RSP: 002b:00007f32ed01f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.999294][ T7458] RAX: ffffffffffffffda RBX: 00007f32ec415fa0 RCX: 00007f32ec19c799 [ 192.999312][ T7458] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 192.999328][ T7458] RBP: 00007f32ec232bd9 R08: 0000000000000002 R09: 0000000000008000 [ 192.999344][ T7458] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 192.999360][ T7458] R13: 00007f32ec416038 R14: 00007f32ec415fa0 R15: 00007fff941daae8 [ 192.999400][ T7458] [ 194.217336][ T7481] netlink: 'syz.0.300': attribute type 4 has an invalid length. [ 194.290295][ T7481] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 194.342428][ T7487] blktrace: Concurrent blktraces are not allowed on sda1 [ 194.383419][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.389989][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.773909][ T7549] futex_wake_op: syz.0.309 tries to shift op by -2048; fix this program [ 196.822337][ T7549] futex_wake_op: syz.0.309 tries to shift op by -2048; fix this program [ 197.107966][ T7552] usbip-vudc usbip-vudc.0: gadget not bound [ 197.843294][ T7556] device-mapper: ioctl: Unable to rename non-existent device, to jàïò×Â}Ù`AO•<šH u®Ôê¸Ñ [ 197.843294][ T7556] ƒr…¿*§ S:R‰Z3”‹P) [ 197.921945][ T7564] device-mapper: ioctl: Unable to rename non-existent device, to jàïò×Â}Ù`AO•<šH u®Ôê¸Ñ [ 197.921945][ T7564] ƒr…¿*§ S:R‰Z3”‹P) [ 198.688937][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 198.688937][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 199.152092][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'. [ 199.189012][ T7591] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 203.617607][ T7624] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 203.734606][ T7624] input: ¶š9ã%v”ûJ,6¾¦ï/rk [ 203.734606][ T7624] lt°²ýxè õb6>94ÞY#zíñÿÿ as /devices/virtual/input/input9 [ 204.562961][ T7631] FAULT_INJECTION: forcing a failure. [ 204.562961][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 204.652368][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 204.652411][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.652433][ T7631] Call Trace: [ 204.652442][ T7631] [ 204.652453][ T7631] dump_stack_lvl+0x100/0x190 [ 204.652500][ T7631] should_fail_ex.cold+0x5/0xa [ 204.652534][ T7631] should_failslab+0xc2/0x120 [ 204.652561][ T7631] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 204.652611][ T7631] ? shmem_alloc_inode+0x25/0x50 [ 204.652644][ T7631] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 204.652678][ T7631] shmem_alloc_inode+0x25/0x50 [ 204.652706][ T7631] alloc_inode+0x68/0x250 [ 204.652764][ T7631] new_inode+0x22/0x1c0 [ 204.652810][ T7631] shmem_get_inode+0x212/0x1040 [ 204.652862][ T7631] ? __pfx_shmem_get_inode+0x10/0x10 [ 204.652923][ T7631] __shmem_file_setup+0x184/0x490 [ 204.652961][ T7631] ? __pfx___shmem_file_setup+0x10/0x10 [ 204.653014][ T7631] ? do_raw_spin_lock+0x128/0x260 [ 204.653093][ T7631] ? find_held_lock+0x2b/0x80 [ 204.653131][ T7631] ? alloc_fd+0x476/0x790 [ 204.653192][ T7631] ? alloc_fd+0x476/0x790 [ 204.653250][ T7631] memfd_alloc_file+0x247/0x620 [ 204.653302][ T7631] ? _raw_spin_unlock+0x28/0x50 [ 204.653339][ T7631] ? __pfx_memfd_alloc_file+0x10/0x10 [ 204.653398][ T7631] __do_sys_memfd_create+0x236/0x3d0 [ 204.653465][ T7631] do_syscall_64+0x106/0xf80 [ 204.653498][ T7631] ? clear_bhb_loop+0x40/0x90 [ 204.653538][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.653570][ T7631] RIP: 0033:0x7f5a8fd9c799 [ 204.653597][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.653625][ T7631] RSP: 002b:00007f5a8dfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 204.653663][ T7631] RAX: ffffffffffffffda RBX: 00007f5a90016180 RCX: 00007f5a8fd9c799 [ 204.653689][ T7631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.653706][ T7631] RBP: 00007f5a8fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 204.653732][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.653762][ T7631] R13: 00007f5a90016218 R14: 00007f5a90016180 R15: 00007ffe7c25e178 [ 204.653810][ T7631] [ 205.233504][ T7629] binder: 7628:7629 ioctl c018620c 2000000000c0 returned -22 [ 206.050335][ T7664] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 208.326924][ T7691] input: f¬ as /devices/virtual/input/input10 [ 208.565854][ T7691] zram: Removed device: zram0 [ 208.773201][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 212.915590][ T7750] ======================================================= [ 212.915590][ T7750] WARNING: The mand mount option has been deprecated and [ 212.915590][ T7750] and is ignored by this kernel. Remove the mand [ 212.915590][ T7750] option from the mount to silence this warning. [ 212.915590][ T7750] ======================================================= [ 214.676557][ T7771] FAULT_INJECTION: forcing a failure. [ 214.676557][ T7771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.763268][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.0.352 Not tainted syzkaller #0 PREEMPT(full) [ 214.763296][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.763306][ T7771] Call Trace: [ 214.763313][ T7771] [ 214.763321][ T7771] dump_stack_lvl+0x100/0x190 [ 214.763352][ T7771] should_fail_ex.cold+0x5/0xa [ 214.763370][ T7771] ? prepare_alloc_pages+0x16d/0x5f0 [ 214.763475][ T7771] should_fail_alloc_page+0xeb/0x140 [ 214.763494][ T7771] prepare_alloc_pages+0x1f0/0x5f0 [ 214.763517][ T7771] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 214.763547][ T7771] ? __lock_acquire+0x4a5/0x2630 [ 214.763579][ T7771] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 214.763604][ T7771] ? lock_acquire+0x1cf/0x380 [ 214.763630][ T7771] ? finish_task_switch.isra.0+0x200/0xb80 [ 214.763650][ T7771] ? rcu_is_watching+0x12/0xc0 [ 214.763678][ T7771] ? finish_task_switch.isra.0+0x205/0xb80 [ 214.763697][ T7771] ? rcu_is_watching+0x12/0xc0 [ 214.763722][ T7771] ? trace_sched_exit_tp+0x13a/0x180 [ 214.763743][ T7771] ? __schedule+0x1000/0x60e0 [ 214.763759][ T7771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.763789][ T7771] ? policy_nodemask+0xed/0x4f0 [ 214.763808][ T7771] alloc_pages_mpol+0x1fb/0x550 [ 214.763826][ T7771] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 214.763849][ T7771] alloc_pages_noprof+0x131/0x390 [ 214.763868][ T7771] __pmd_alloc+0x3b/0x9c0 [ 214.763889][ T7771] __handle_mm_fault+0xa99/0x2b60 [ 214.763916][ T7771] ? mt_find+0x45e/0x8e0 [ 214.763939][ T7771] ? __pfx___handle_mm_fault+0x10/0x10 [ 214.763960][ T7771] ? __pfx_mt_find+0x10/0x10 [ 214.763994][ T7771] ? find_vma+0xbf/0x140 [ 214.764028][ T7771] ? __pfx_find_vma+0x10/0x10 [ 214.764057][ T7771] handle_mm_fault+0x36d/0xa20 [ 214.764084][ T7771] do_user_addr_fault+0x74c/0x12f0 [ 214.764126][ T7771] exc_page_fault+0x6f/0xd0 [ 214.764146][ T7771] asm_exc_page_fault+0x26/0x30 [ 214.764164][ T7771] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 214.764190][ T7771] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 93 04 00 66 66 2e 0f [ 214.764207][ T7771] RSP: 0018:ffffc900059cfcf8 EFLAGS: 00050202 [ 214.764222][ T7771] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000004 [ 214.764232][ T7771] RDX: 0000000000000001 RSI: ffffc900059cfdb8 RDI: 0000000000000000 [ 214.764242][ T7771] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000b39fb7 [ 214.764252][ T7771] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc900059cfdb8 [ 214.764262][ T7771] R13: 0000000000000004 R14: 00007ffffffff000 R15: 0000000000000000 [ 214.764284][ T7771] _copy_to_user+0xa4/0xd0 [ 214.764319][ T7771] do_timer_create+0x6d9/0x14b0 [ 214.764348][ T7771] ? __pfx_do_timer_create+0x10/0x10 [ 214.764378][ T7771] ? __pfx_do_futex+0x10/0x10 [ 214.764402][ T7771] ? __pfx___might_resched+0x10/0x10 [ 214.764426][ T7771] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 214.764459][ T7771] __x64_sys_timer_create+0x199/0x1d0 [ 214.764486][ T7771] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 214.764511][ T7771] ? xfd_validate_state+0x129/0x190 [ 214.764545][ T7771] do_syscall_64+0x106/0xf80 [ 214.764563][ T7771] ? clear_bhb_loop+0x40/0x90 [ 214.764585][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.764604][ T7771] RIP: 0033:0x7fa0cf79c799 [ 214.764619][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.764637][ T7771] RSP: 002b:00007fa0d056f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 214.764652][ T7771] RAX: ffffffffffffffda RBX: 00007fa0cfa15fa0 RCX: 00007fa0cf79c799 [ 214.764663][ T7771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 214.764673][ T7771] RBP: 00007fa0cf832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 214.764682][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.764692][ T7771] R13: 00007fa0cfa16038 R14: 00007fa0cfa15fa0 R15: 00007ffc4c564188 [ 214.764715][ T7771] [ 217.441272][ T7793] HfR: entered promiscuous mode [ 218.367860][ T7801] usb usb4: usbfs: process 7801 (syz.2.360) did not claim interface 0 before use [ 218.602304][ T7821] FAULT_INJECTION: forcing a failure. [ 218.602304][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 218.652407][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.4.364 Not tainted syzkaller #0 PREEMPT(full) [ 218.652446][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.652462][ T7821] Call Trace: [ 218.652471][ T7821] [ 218.652483][ T7821] dump_stack_lvl+0x100/0x190 [ 218.652533][ T7821] should_fail_ex.cold+0x5/0xa [ 218.652568][ T7821] should_failslab+0xc2/0x120 [ 218.652597][ T7821] __kvmalloc_node_noprof+0xfa/0xa00 [ 218.652638][ T7821] ? alloc_fdtable+0x17f/0x2d0 [ 218.652691][ T7821] alloc_fdtable+0x17f/0x2d0 [ 218.652737][ T7821] dup_fd+0x995/0xd10 [ 218.652795][ T7821] __x64_sys_close_range+0x405/0x5d0 [ 218.652830][ T7821] ? __pfx___x64_sys_close_range+0x10/0x10 [ 218.652872][ T7821] do_syscall_64+0x106/0xf80 [ 218.652905][ T7821] ? clear_bhb_loop+0x40/0x90 [ 218.652942][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.652972][ T7821] RIP: 0033:0x7f32ec19c799 [ 218.652996][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.653023][ T7821] RSP: 002b:00007f32ecffe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 218.653051][ T7821] RAX: ffffffffffffffda RBX: 00007f32ec416090 RCX: 00007f32ec19c799 [ 218.653070][ T7821] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000005 [ 218.653086][ T7821] RBP: 00007f32ec232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 218.653102][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.653119][ T7821] R13: 00007f32ec416128 R14: 00007f32ec416090 R15: 00007fff941daae8 [ 218.653158][ T7821] [ 219.769067][ T5855] Process accounting resumed [ 220.559187][ T7849] Process accounting paused [ 220.944174][ T7863] veth1_to_batadv: entered promiscuous mode [ 220.951327][ T7862] veth1_to_batadv: left promiscuous mode [ 222.216055][ T29] audit: type=1326 audit(1772344477.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32ec19c799 code=0x0 [ 222.838032][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 222.847101][ T7892] macvlan1: entered promiscuous mode [ 222.853199][ T7892] macvlan1: entered allmulticast mode [ 222.858606][ T7892] veth1_vlan: entered allmulticast mode [ 222.896892][ T7892] FAULT_INJECTION: forcing a failure. [ 222.896892][ T7892] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.927682][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.0.377 Not tainted syzkaller #0 PREEMPT(full) [ 222.927716][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.927730][ T7892] Call Trace: [ 222.927740][ T7892] [ 222.927750][ T7892] dump_stack_lvl+0x100/0x190 [ 222.927795][ T7892] should_fail_ex.cold+0x5/0xa [ 222.927827][ T7892] get_futex_key+0x295/0x1620 [ 222.927865][ T7892] ? __pfx_get_futex_key+0x10/0x10 [ 222.927893][ T7892] ? lock_acquire+0x1cf/0x380 [ 222.927925][ T7892] futex_wake+0xea/0x530 [ 222.927953][ T7892] ? __pfx_futex_wake+0x10/0x10 [ 222.927978][ T7892] ? exit_mm_release+0x19/0x30 [ 222.928005][ T7892] do_futex+0x32b/0x350 [ 222.928027][ T7892] ? __pfx_do_futex+0x10/0x10 [ 222.928047][ T7892] ? __might_fault+0xc5/0x140 [ 222.928077][ T7892] mm_release+0x24a/0x2f0 [ 222.928094][ T7892] do_exit+0x675/0x2aa0 [ 222.928119][ T7892] ? __pfx_do_exit+0x10/0x10 [ 222.928141][ T7892] ? do_raw_spin_lock+0x128/0x260 [ 222.928165][ T7892] ? find_held_lock+0x2b/0x80 [ 222.928179][ T7892] ? get_signal+0x7e0/0x21e0 [ 222.928199][ T7892] do_group_exit+0xd5/0x2a0 [ 222.928223][ T7892] get_signal+0x1ec7/0x21e0 [ 222.928244][ T7892] ? rcu_read_lock_any_held+0x6a/0xa0 [ 222.928275][ T7892] ? __pfx_get_signal+0x10/0x10 [ 222.928293][ T7892] ? do_futex+0x192/0x350 [ 222.928317][ T7892] arch_do_signal_or_restart+0x91/0x770 [ 222.928341][ T7892] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.928368][ T7892] ? __pfx___x64_sys_futex+0x10/0x10 [ 222.928403][ T7892] exit_to_user_mode_loop+0x86/0x4a0 [ 222.928427][ T7892] do_syscall_64+0x668/0xf80 [ 222.928446][ T7892] ? clear_bhb_loop+0x40/0x90 [ 222.928467][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.928485][ T7892] RIP: 0033:0x7fa0cf79c799 [ 222.928500][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.928515][ T7892] RSP: 002b:00007fa0d056f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.928532][ T7892] RAX: fffffffffffffe00 RBX: 00007fa0cfa15fa8 RCX: 00007fa0cf79c799 [ 222.928543][ T7892] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0cfa15fa8 [ 222.928553][ T7892] RBP: 00007fa0cfa15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 222.928563][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.928572][ T7892] R13: 00007fa0cfa16038 R14: 00007ffc4c5640a0 R15: 00007ffc4c564188 [ 222.928594][ T7892] [ 224.361033][ T7906] syz.4.380(7906): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 224.960448][ T7911] zswap: compressor not available [ 226.188842][ T7926] netlink: 334 bytes leftover after parsing attributes in process `syz.4.383'. [ 226.698598][ T7937] Console: switching to colour VGA+ 80x25 [ 227.097513][ T7941] ubi0: attaching mtd0 [ 227.163949][ T7941] ubi0: scanning is finished [ 227.168650][ T7941] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 227.819165][ T7941] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 228.154589][ T7957] bond0: invalid ARP target specified [ 228.184256][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'. [ 228.203553][ T7957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.210995][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.276908][ T7957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.306782][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.307240][ T7958] FAULT_INJECTION: forcing a failure. [ 228.307240][ T7958] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.330033][ T7958] CPU: 1 UID: 0 PID: 7958 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 228.330073][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.330090][ T7958] Call Trace: [ 228.330100][ T7958] [ 228.330111][ T7958] dump_stack_lvl+0x100/0x190 [ 228.330163][ T7958] should_fail_ex.cold+0x5/0xa [ 228.330199][ T7958] get_futex_key+0x1d2/0x1620 [ 228.330241][ T7958] ? __pfx_get_futex_key+0x10/0x10 [ 228.330283][ T7958] ? find_held_lock+0x2b/0x80 [ 228.330317][ T7958] futex_wake+0xea/0x530 [ 228.330356][ T7958] ? __up_read+0x2c5/0x700 [ 228.330402][ T7958] ? __pfx_futex_wake+0x10/0x10 [ 228.330443][ T7958] ? do_user_addr_fault+0x7de/0x12f0 [ 228.330501][ T7958] ? do_user_addr_fault+0x8d6/0x12f0 [ 228.330556][ T7958] do_futex+0x32b/0x350 [ 228.330603][ T7958] ? __pfx_do_futex+0x10/0x10 [ 228.330653][ T7958] __x64_sys_futex+0x34f/0x4d0 [ 228.330697][ T7958] ? rep_movs_alternative+0x33/0x90 [ 228.330744][ T7958] ? __pfx___x64_sys_futex+0x10/0x10 [ 228.330803][ T7958] do_syscall_64+0x106/0xf80 [ 228.330837][ T7958] ? clear_bhb_loop+0x40/0x90 [ 228.330878][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.330910][ T7958] RIP: 0033:0x7f5a8fd9c799 [ 228.330935][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.330963][ T7958] RSP: 002b:00007f5a8dff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.330993][ T7958] RAX: ffffffffffffffda RBX: 00007f5a90016098 RCX: 00007f5a8fd9c799 [ 228.331013][ T7958] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a9001609c [ 228.331031][ T7958] RBP: 00007f5a90016090 R08: 0000000000000000 R09: 0000000000000000 [ 228.331049][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.331066][ T7958] R13: 00007f5a90016128 R14: 00007ffe7c25e090 R15: 00007ffe7c25e178 [ 228.331107][ T7958] [ 229.491053][ T7971] random: crng reseeded on system resumption [ 229.492612][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 231.314460][ T7993] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 234.251436][ T8036] FAULT_INJECTION: forcing a failure. [ 234.251436][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 234.342664][ T8036] CPU: 1 UID: 0 PID: 8036 Comm: syz.2.407 Not tainted syzkaller #0 PREEMPT(full) [ 234.342703][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.342720][ T8036] Call Trace: [ 234.342730][ T8036] [ 234.342740][ T8036] dump_stack_lvl+0x100/0x190 [ 234.342789][ T8036] should_fail_ex.cold+0x5/0xa [ 234.342824][ T8036] should_failslab+0xc2/0x120 [ 234.342852][ T8036] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 234.342892][ T8036] ? alloc_empty_file+0x55/0x1c0 [ 234.342935][ T8036] alloc_empty_file+0x55/0x1c0 [ 234.342970][ T8036] alloc_file_pseudo+0x13a/0x230 [ 234.343006][ T8036] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 234.343052][ T8036] __shmem_file_setup+0x221/0x490 [ 234.343091][ T8036] ? __pfx___shmem_file_setup+0x10/0x10 [ 234.343136][ T8036] ? vm_area_alloc+0x1f/0x160 [ 234.343177][ T8036] shmem_zero_setup+0x96/0x1b0 [ 234.343222][ T8036] __mmap_region+0x2198/0x29e0 [ 234.343268][ T8036] ? __pfx___mmap_region+0x10/0x10 [ 234.343316][ T8036] ? process_measurement+0x1f4/0x2350 [ 234.343379][ T8036] ? __lock_acquire+0x4a5/0x2630 [ 234.343437][ T8036] ? find_held_lock+0x2b/0x80 [ 234.343462][ T8036] ? finish_task_switch.isra.0+0x200/0xb80 [ 234.343492][ T8036] ? finish_task_switch.isra.0+0x200/0xb80 [ 234.343539][ T8036] ? trace_sched_exit_tp+0x13a/0x180 [ 234.343572][ T8036] ? __schedule+0x1000/0x60e0 [ 234.343657][ T8036] ? rcu_is_watching+0x12/0xc0 [ 234.343700][ T8036] ? cap_capable+0x107/0x460 [ 234.343746][ T8036] mmap_region+0x180/0x3e0 [ 234.343795][ T8036] do_mmap+0xc63/0x12f0 [ 234.343833][ T8036] ? __pfx_do_mmap+0x10/0x10 [ 234.343863][ T8036] ? __pfx_down_write_killable+0x10/0x10 [ 234.343910][ T8036] vm_mmap_pgoff+0x29e/0x470 [ 234.343948][ T8036] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 234.343981][ T8036] ? do_futex+0x192/0x350 [ 234.344019][ T8036] ? __pfx_do_futex+0x10/0x10 [ 234.344063][ T8036] ksys_mmap_pgoff+0xe1/0x650 [ 234.344091][ T8036] ? __x64_sys_futex+0x34f/0x4d0 [ 234.344126][ T8036] ? __x64_sys_futex+0x358/0x4d0 [ 234.344164][ T8036] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 234.344194][ T8036] ? xfd_validate_state+0x129/0x190 [ 234.344244][ T8036] __x64_sys_mmap+0x125/0x190 [ 234.344291][ T8036] do_syscall_64+0x106/0xf80 [ 234.344485][ T8036] ? clear_bhb_loop+0x40/0x90 [ 234.344550][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.344579][ T8036] RIP: 0033:0x7f7f9999c799 [ 234.344603][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.344628][ T8036] RSP: 002b:00007f7f9a878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 234.344656][ T8036] RAX: ffffffffffffffda RBX: 00007f7f99c15fa0 RCX: 00007f7f9999c799 [ 234.344674][ T8036] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000 [ 234.344690][ T8036] RBP: 00007f7f99a32bd9 R08: 0000000000000401 R09: 0000000000008000 [ 234.344707][ T8036] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 234.344723][ T8036] R13: 00007f7f99c16038 R14: 00007f7f99c15fa0 R15: 00007ffccd930a58 [ 234.344764][ T8036] [ 235.648009][ T8042] Invalid ELF header magic: != ELF [ 236.888720][ T8052] FAULT_INJECTION: forcing a failure. [ 236.888720][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 236.926676][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT(full) [ 236.926722][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.926739][ T8052] Call Trace: [ 236.926748][ T8052] [ 236.926758][ T8052] dump_stack_lvl+0x100/0x190 [ 236.926800][ T8052] should_fail_ex.cold+0x5/0xa [ 236.926832][ T8052] should_failslab+0xc2/0x120 [ 236.926857][ T8052] __kmalloc_cache_noprof+0x7a/0x6f0 [ 236.926887][ T8052] ? apply_subsystem_event_filter+0x565/0x17d0 [ 236.926925][ T8052] ? append_filter_err+0x43a/0x620 [ 236.926966][ T8052] apply_subsystem_event_filter+0x565/0x17d0 [ 236.927020][ T8052] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 236.927077][ T8052] ? _copy_from_user+0x59/0xd0 [ 236.927128][ T8052] ? __pfx_subsystem_filter_write+0x10/0x10 [ 236.927171][ T8052] subsystem_filter_write+0x95/0x120 [ 236.927218][ T8052] vfs_writev+0x5ea/0xe10 [ 236.927259][ T8052] ? rcu_is_watching+0x12/0xc0 [ 236.927312][ T8052] ? __pfx_vfs_writev+0x10/0x10 [ 236.927352][ T8052] ? fdget_pos+0x2aa/0x380 [ 236.927411][ T8052] ? __fget_files+0x21f/0x3d0 [ 236.927466][ T8052] ? do_writev+0x13e/0x340 [ 236.927516][ T8052] do_writev+0x13e/0x340 [ 236.927560][ T8052] ? __pfx_do_writev+0x10/0x10 [ 236.927617][ T8052] do_syscall_64+0x106/0xf80 [ 236.927650][ T8052] ? clear_bhb_loop+0x40/0x90 [ 236.927689][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.927720][ T8052] RIP: 0033:0x7fa0cf79c799 [ 236.927746][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.927775][ T8052] RSP: 002b:00007fa0d056f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 236.927807][ T8052] RAX: ffffffffffffffda RBX: 00007fa0cfa15fa0 RCX: 00007fa0cf79c799 [ 236.927828][ T8052] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000007 [ 236.927846][ T8052] RBP: 00007fa0cf832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 236.927864][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.927880][ T8052] R13: 00007fa0cfa16038 R14: 00007fa0cfa15fa0 R15: 00007ffc4c564188 [ 236.927922][ T8052] [ 240.487381][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 240.711835][ T8115] binder: 8103:8115 ioctl 4020ae46 46 returned -22 [ 244.169191][ T8166] binder: 8162:8166 ioctl 541b 38 returned -22 [ 245.303596][ T8175] FAULT_INJECTION: forcing a failure. [ 245.303596][ T8175] name fail_futex, interval 1, probability 0, space 0, times 0 [ 245.359628][ T8175] CPU: 1 UID: 0 PID: 8175 Comm: syz.3.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.359672][ T8175] Tainted: [L]=SOFTLOCKUP [ 245.359682][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.359698][ T8175] Call Trace: [ 245.359707][ T8175] [ 245.359717][ T8175] dump_stack_lvl+0x100/0x190 [ 245.359765][ T8175] should_fail_ex.cold+0x5/0xa [ 245.359792][ T8175] ? rcu_is_watching+0x12/0xc0 [ 245.359838][ T8175] get_futex_key+0x106f/0x1620 [ 245.359877][ T8175] ? __pfx_get_futex_key+0x10/0x10 [ 245.359907][ T8175] ? lock_acquire+0x1cf/0x380 [ 245.359955][ T8175] futex_wake+0xea/0x530 [ 245.360001][ T8175] ? __pfx_futex_wake+0x10/0x10 [ 245.360043][ T8175] ? exit_mm_release+0x19/0x30 [ 245.360088][ T8175] do_futex+0x32b/0x350 [ 245.360124][ T8175] ? __pfx_do_futex+0x10/0x10 [ 245.360157][ T8175] ? __might_fault+0xc5/0x140 [ 245.360219][ T8175] mm_release+0x24a/0x2f0 [ 245.360248][ T8175] do_exit+0x675/0x2aa0 [ 245.360290][ T8175] ? __pfx_do_exit+0x10/0x10 [ 245.360326][ T8175] ? do_raw_spin_lock+0x128/0x260 [ 245.360365][ T8175] ? find_held_lock+0x2b/0x80 [ 245.360390][ T8175] ? get_signal+0x7e0/0x21e0 [ 245.360423][ T8175] do_group_exit+0xd5/0x2a0 [ 245.360462][ T8175] get_signal+0x1ec7/0x21e0 [ 245.360500][ T8175] ? ksys_write+0x190/0x250 [ 245.360546][ T8175] ? __pfx_get_signal+0x10/0x10 [ 245.360576][ T8175] ? do_futex+0x192/0x350 [ 245.360616][ T8175] arch_do_signal_or_restart+0x91/0x770 [ 245.360653][ T8175] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 245.360699][ T8175] ? __pfx___x64_sys_futex+0x10/0x10 [ 245.360744][ T8175] exit_to_user_mode_loop+0x86/0x4a0 [ 245.360785][ T8175] do_syscall_64+0x668/0xf80 [ 245.360817][ T8175] ? clear_bhb_loop+0x40/0x90 [ 245.360851][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.360880][ T8175] RIP: 0033:0x7f5a8fd9c799 [ 245.360903][ T8175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.360929][ T8175] RSP: 002b:00007f5a8dff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 245.360955][ T8175] RAX: fffffffffffffe00 RBX: 00007f5a90016098 RCX: 00007f5a8fd9c799 [ 245.360973][ T8175] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a90016098 [ 245.360989][ T8175] RBP: 00007f5a90016090 R08: 0000000000000000 R09: 0000000000000000 [ 245.361005][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.361021][ T8175] R13: 00007f5a90016128 R14: 00007ffe7c25e090 R15: 00007ffe7c25e178 [ 245.361059][ T8175] [ 246.224116][ T8185] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 248.022127][ T8196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.062887][ T8196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.068907][ T8196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.113131][ T8196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.119218][ T8196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.493251][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.132592][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.139850][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.212623][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.218778][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.075409][ T5144] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 251.083064][ T5144] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 251.918538][ T8232] Process accounting resumed [ 252.840521][ T8274] vivid-007: ================= START STATUS ================= [ 252.914430][ T8274] vivid-007: Generate PTS: true [ 252.919533][ T8274] vivid-007: Generate SCR: true [ 252.999240][ T8274] tpg source WxH: 320x240 (Y'CbCr) [ 253.004552][ T8274] tpg field: 1 [ 253.009533][ T8274] tpg crop: (0,0)/320x240 [ 253.016127][ T8274] tpg compose: (0,0)/320x240 [ 253.022613][ T8274] tpg colorspace: 8 [ 253.030896][ T8274] tpg transfer function: 0/0 [ 253.048167][ T8274] tpg Y'CbCr encoding: 0/0 [ 253.114684][ T8274] tpg quantization: 0/0 [ 253.118867][ T8274] tpg RGB range: 0/2 [ 253.214090][ T8274] vivid-007: ================== END STATUS ================== [ 255.022012][ T8336] random: crng reseeded on system resumption [ 255.779502][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.460'. [ 255.820236][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.857269][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.016367][ T8341] bridge_slave_1: left allmulticast mode [ 256.022191][ T8341] bridge_slave_1: left promiscuous mode [ 256.028617][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.130553][ T8341] bridge_slave_0: left allmulticast mode [ 256.145618][ T8341] bridge_slave_0: left promiscuous mode [ 256.166930][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.689078][ T8377] FAULT_INJECTION: forcing a failure. [ 257.689078][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 257.825879][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: syz.2.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.825912][ T8377] Tainted: [L]=SOFTLOCKUP [ 257.825919][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.825929][ T8377] Call Trace: [ 257.825935][ T8377] [ 257.825942][ T8377] dump_stack_lvl+0x100/0x190 [ 257.825973][ T8377] should_fail_ex.cold+0x5/0xa [ 257.825993][ T8377] ? ops_init+0x77/0x5f0 [ 257.826013][ T8377] should_failslab+0xc2/0x120 [ 257.826030][ T8377] __kmalloc_noprof+0xe0/0x850 [ 257.826060][ T8377] ops_init+0x77/0x5f0 [ 257.826083][ T8377] setup_net+0x118/0x3a0 [ 257.826105][ T8377] ? __pfx_setup_net+0x10/0x10 [ 257.826155][ T8377] ? lockdep_init_map_type+0x5c/0x250 [ 257.826180][ T8377] ? mutex_init_lockep+0x110/0x150 [ 257.826207][ T8377] copy_net_ns+0x46f/0x7c0 [ 257.826233][ T8377] create_new_namespaces+0x3ea/0xac0 [ 257.826258][ T8377] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 257.826279][ T8377] ksys_unshare+0x473/0xad0 [ 257.826302][ T8377] ? __pfx_ksys_unshare+0x10/0x10 [ 257.826338][ T8377] __x64_sys_unshare+0x31/0x40 [ 257.826360][ T8377] do_syscall_64+0x106/0xf80 [ 257.826379][ T8377] ? clear_bhb_loop+0x40/0x90 [ 257.826400][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.826419][ T8377] RIP: 0033:0x7f7f9999c799 [ 257.826434][ T8377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.826451][ T8377] RSP: 002b:00007f7f9a878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 257.826468][ T8377] RAX: ffffffffffffffda RBX: 00007f7f99c15fa0 RCX: 00007f7f9999c799 [ 257.826479][ T8377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 257.826490][ T8377] RBP: 00007f7f99a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 257.826500][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.826509][ T8377] R13: 00007f7f99c16038 R14: 00007f7f99c15fa0 R15: 00007ffccd930a58 [ 257.826532][ T8377] [ 258.954972][ T8390] FAULT_INJECTION: forcing a failure. [ 258.954972][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 258.997943][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.3.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.997992][ T8390] Tainted: [L]=SOFTLOCKUP [ 258.998003][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.998020][ T8390] Call Trace: [ 258.998031][ T8390] [ 258.998042][ T8390] dump_stack_lvl+0x100/0x190 [ 258.998092][ T8390] should_fail_ex.cold+0x5/0xa [ 258.998128][ T8390] should_failslab+0xc2/0x120 [ 258.998158][ T8390] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 258.998211][ T8390] ? security_inode_alloc+0x3b/0x2c0 [ 258.998252][ T8390] ? lockdep_init_map_type+0x5c/0x250 [ 258.998299][ T8390] security_inode_alloc+0x3b/0x2c0 [ 258.998344][ T8390] inode_init_always_gfp+0xced/0x1040 [ 258.998396][ T8390] alloc_inode+0x8e/0x250 [ 258.998432][ T8390] new_inode+0x22/0x1c0 [ 258.998474][ T8390] configfs_new_inode+0x24/0x4a0 [ 258.998522][ T8390] configfs_create+0xd9/0x370 [ 258.998570][ T8390] configfs_lookup+0x38f/0x780 [ 258.998622][ T8390] lookup_open.isra.0+0x631/0x11b0 [ 258.998674][ T8390] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 258.998742][ T8390] ? mnt_get_write_access+0x1e9/0x2f0 [ 258.998788][ T8390] path_openat+0xa98/0x31a0 [ 258.998832][ T8390] ? __pfx_path_openat+0x10/0x10 [ 258.998878][ T8390] do_file_open+0x20e/0x430 [ 258.998910][ T8390] ? __pfx_do_file_open+0x10/0x10 [ 258.998969][ T8390] ? alloc_fd+0x476/0x790 [ 258.999020][ T8390] ? do_getname+0x191/0x390 [ 258.999058][ T8390] do_sys_openat2+0x10d/0x1e0 [ 258.999097][ T8390] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.999135][ T8390] ? __x64_sys_close_range+0x2d9/0x5d0 [ 258.999186][ T8390] __x64_sys_openat+0x12d/0x210 [ 258.999224][ T8390] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.999279][ T8390] do_syscall_64+0x106/0xf80 [ 258.999313][ T8390] ? clear_bhb_loop+0x40/0x90 [ 258.999351][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.999383][ T8390] RIP: 0033:0x7f5a8fd9c799 [ 258.999410][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.999436][ T8390] RSP: 002b:00007f5a8dfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.999464][ T8390] RAX: ffffffffffffffda RBX: 00007f5a90016180 RCX: 00007f5a8fd9c799 [ 258.999484][ T8390] RDX: 0000000000109103 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 258.999503][ T8390] RBP: 00007f5a8fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 258.999521][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.999538][ T8390] R13: 00007f5a90016218 R14: 00007f5a90016180 R15: 00007ffe7c25e178 [ 258.999581][ T8390] [ 259.786686][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.469'. [ 260.331011][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.471'. [ 260.586522][ T8399] ipvlan0: entered promiscuous mode [ 260.632628][ T8399] ipvlan0: entered allmulticast mode [ 260.653459][ T8399] veth0_vlan: entered allmulticast mode [ 261.536832][ T8419] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 261.947665][ T8421] zswap: compressor not available [ 261.953119][ T8425] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 262.266462][ T8444] futex_wake_op: syz.3.482 tries to shift op by -2048; fix this program [ 262.683636][ T8447] FAULT_INJECTION: forcing a failure. [ 262.683636][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 262.754399][ T8447] CPU: 1 UID: 0 PID: 8447 Comm: syz.3.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.754449][ T8447] Tainted: [L]=SOFTLOCKUP [ 262.754460][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.754476][ T8447] Call Trace: [ 262.754486][ T8447] [ 262.754497][ T8447] dump_stack_lvl+0x100/0x190 [ 262.754550][ T8447] should_fail_ex.cold+0x5/0xa [ 262.754587][ T8447] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 262.754618][ T8447] should_failslab+0xc2/0x120 [ 262.754648][ T8447] __kmalloc_noprof+0xe0/0x850 [ 262.754703][ T8447] apply_wqattrs_prepare+0xfe/0xbb0 [ 262.754751][ T8447] workqueue_apply_unbound_cpumask+0x18c/0x970 [ 262.754796][ T8447] ? __pfx_workqueue_apply_unbound_cpumask+0x10/0x10 [ 262.754828][ T8447] ? bitmap_parse+0x306/0x3f0 [ 262.754867][ T8447] cpumask_store+0x1ad/0x220 [ 262.754896][ T8447] ? __pfx_cpumask_store+0x10/0x10 [ 262.754926][ T8447] ? find_held_lock+0x2b/0x80 [ 262.754951][ T8447] ? sysfs_file_kobj+0xe4/0x290 [ 262.754986][ T8447] ? sysfs_file_kobj+0xe4/0x290 [ 262.755025][ T8447] ? __pfx_cpumask_store+0x10/0x10 [ 262.755054][ T8447] dev_attr_store+0x58/0x80 [ 262.755102][ T8447] ? __pfx_dev_attr_store+0x10/0x10 [ 262.755149][ T8447] sysfs_kf_write+0xf2/0x150 [ 262.755199][ T8447] kernfs_fop_write_iter+0x3e0/0x5f0 [ 262.755229][ T8447] ? __pfx_sysfs_kf_write+0x10/0x10 [ 262.755270][ T8447] vfs_write+0x6ac/0x1070 [ 262.755319][ T8447] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 262.755356][ T8447] ? __pfx_vfs_write+0x10/0x10 [ 262.755443][ T8447] ksys_write+0x12a/0x250 [ 262.755490][ T8447] ? __pfx_ksys_write+0x10/0x10 [ 262.755551][ T8447] do_syscall_64+0x106/0xf80 [ 262.755584][ T8447] ? clear_bhb_loop+0x40/0x90 [ 262.755624][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.755656][ T8447] RIP: 0033:0x7f5a8fd9c799 [ 262.755682][ T8447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.755711][ T8447] RSP: 002b:00007f5a90b7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.755741][ T8447] RAX: ffffffffffffffda RBX: 00007f5a90015fa0 RCX: 00007f5a8fd9c799 [ 262.755760][ T8447] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000009 [ 262.755779][ T8447] RBP: 00007f5a8fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 262.755797][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.755814][ T8447] R13: 00007f5a90016038 R14: 00007f5a90015fa0 R15: 00007ffe7c25e178 [ 262.755859][ T8447] [ 263.173197][ T8434] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 263.850837][ T8471] nbd: couldn't find device at index 33904 [ 264.036725][ T8471] netlink: 17 bytes leftover after parsing attributes in process `syz.0.486'. [ 264.938039][ T5828] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 265.413815][ T30] INFO: task syz.1.85:6307 blocked for more than 143 seconds. [ 265.478882][ T8496] phram: not enough arguments [ 265.597467][ T30] Tainted: G L syzkaller #0 [ 265.634302][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.649417][ T30] task:syz.1.85 state:D stack:26024 pid:6307 tgid:6304 ppid:5823 task_flags:0x400740 flags:0x00080002 [ 265.711995][ T30] Call Trace: [ 265.733033][ T30] [ 265.736051][ T30] __schedule+0xfee/0x60e0 [ 265.740528][ T30] ? __lock_acquire+0x4a5/0x2630 [ 265.801876][ T30] ? __pfx___schedule+0x10/0x10 [ 265.847375][ T30] ? find_held_lock+0x2b/0x80 [ 265.889550][ T30] ? schedule+0x2bf/0x390 [ 265.896317][ T30] schedule+0xdd/0x390 [ 265.911558][ T30] schedule_timeout+0x1b2/0x280 [ 265.981061][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 266.017244][ T30] ? __wait_for_common+0x2da/0x4c0 [ 266.047089][ T30] ? rcu_is_watching+0x12/0xc0 [ 266.349587][ T30] __wait_for_common+0x2e7/0x4c0 [ 266.375112][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 266.782624][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 266.821377][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 266.850451][ T30] wait_for_completion_state+0x1c/0x40 [ 267.082493][ T30] vfs_coredump+0x80d/0x5570 [ 267.087179][ T30] ? kfree+0x1f6/0x6b0 [ 267.098755][ T30] ? sctp_auth_shkey_release+0xf2/0x150 [ 267.112494][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 267.137563][ T30] ? __lock_acquire+0x4a5/0x2630 [ 267.158899][ T30] ? lock_acquire+0x1cf/0x380 [ 267.170411][ T30] ? lock_acquire+0x1cf/0x380 [ 267.188535][ T30] ? find_held_lock+0x2b/0x80 [ 267.197949][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 267.209021][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 267.219956][ T30] ? bpf_ksym_find+0x124/0x1c0 [ 267.235520][ T30] ? __kernel_text_address+0xd/0x30 [ 267.251575][ T30] ? unwind_get_return_address+0x59/0xa0 [ 267.263125][ T30] ? arch_stack_walk+0xa6/0xf0 [ 267.273443][ T30] ? __sigqueue_free+0xbe/0x2a0 [ 267.298736][ T30] ? stack_trace_save+0x8e/0xc0 [ 267.331521][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 267.337051][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 267.347765][ T30] ? __lock_acquire+0x4a5/0x2630 [ 267.360412][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.373883][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 267.385471][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 267.397788][ T30] ? rcu_is_watching+0x12/0xc0 [ 267.422747][ T30] get_signal+0x1f2a/0x21e0 [ 267.427592][ T30] ? __pfx_get_signal+0x10/0x10 [ 267.452522][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.458430][ T30] ? force_sig_info_to_task+0x4d2/0x660 [ 267.472571][ T30] arch_do_signal_or_restart+0x91/0x770 [ 267.493145][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.499383][ T30] ? __do_sys_prctl+0x187/0x2330 [ 267.512466][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 267.517823][ T30] do_syscall_64+0x668/0xf80 [ 267.532488][ T30] ? clear_bhb_loop+0x40/0x90 [ 267.537220][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.543232][ T30] RIP: 0033:0x7f94a819c799 [ 267.549109][ T30] RSP: 002b:00007f94a90d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.557697][ T30] RAX: ffffffffffffffda RBX: 00007f94a8416098 RCX: 00007f94a819c799 [ 267.565771][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f94a841609c [ 267.574669][ T30] RBP: 00007f94a8416090 R08: 0000000000000000 R09: 0000000000000000 [ 267.582760][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.590766][ T30] R13: 00007f94a8416128 R14: 00007fff0b430730 R15: 00007fff0b430818 [ 267.598953][ T30] [ 267.602102][ T30] [ 267.602102][ T30] Showing all locks held in the system: [ 267.610045][ T30] 1 lock held by khungtaskd/30: [ 267.615275][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 267.644570][ T30] 3 locks held by kworker/u8:8/1308: [ 267.651429][ T30] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 267.667194][ T30] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 267.692515][ T30] #2: ffff88802b946388 (&wb->work_lock){..-.}-{3:3}, at: wb_wakeup_delayed+0x66/0x130 [ 267.702295][ T30] 2 locks held by getty/5583: [ 267.711093][ T30] #0: ffff8880382220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 267.721045][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 267.731523][ T30] 1 lock held by syz.1.85/6306: [ 267.736552][ T30] 2 locks held by kworker/u8:17/6822: [ 267.741948][ T30] #0: ffff88801eb6e948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 267.759350][ T30] #1: ffffc900049e7d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 267.771285][ T30] 5 locks held by kworker/u8:19/6824: [ 267.776994][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 267.787743][ T30] #1: ffffc90004897d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 267.798126][ T30] #2: ffffffff905fa5f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 267.807782][ T30] #3: ffffffff90612f28 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 267.817280][ T30] #4: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 267.827725][ T30] 2 locks held by kworker/u8:29/8125: [ 267.833639][ T30] #0: ffff88801eb6e948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 267.844679][ T30] #1: ffffc9000569fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 267.857907][ T30] 1 lock held by syz.4.492/8490: [ 267.863193][ T30] #0: ffffffff8e7f4d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 267.873789][ T30] [ 267.876263][ T30] ============================================= [ 267.876263][ T30] [ 267.887037][ T30] NMI backtrace for cpu 1 [ 267.887060][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 267.887097][ T30] Tainted: [L]=SOFTLOCKUP [ 267.887106][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.887121][ T30] Call Trace: [ 267.887131][ T30] [ 267.887141][ T30] dump_stack_lvl+0x100/0x190 [ 267.887187][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 267.887233][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 267.887275][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 267.887321][ T30] sys_info+0x141/0x190 [ 267.887367][ T30] watchdog+0xd25/0x1050 [ 267.887405][ T30] ? __pfx_watchdog+0x10/0x10 [ 267.887433][ T30] ? __kthread_parkme+0x18c/0x230 [ 267.887469][ T30] ? kthread+0x13a/0x450 [ 267.887503][ T30] ? __pfx_watchdog+0x10/0x10 [ 267.887527][ T30] kthread+0x370/0x450 [ 267.887561][ T30] ? __pfx_kthread+0x10/0x10 [ 267.887600][ T30] ret_from_fork+0x754/0xd80 [ 267.887642][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 267.887685][ T30] ? __switch_to+0x7b4/0x1120 [ 267.887716][ T30] ? __pfx_kthread+0x10/0x10 [ 267.887754][ T30] ret_from_fork_asm+0x1a/0x30 [ 267.887804][ T30] [ 267.887814][ T30] Sending NMI from CPU 1 to CPUs 0: [ 268.020106][ C0] NMI backtrace for cpu 0 [ 268.020129][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.020193][ C0] Tainted: [L]=SOFTLOCKUP [ 268.020201][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.020214][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 268.020254][ C0] Code: 98 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 7a 1e 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 268.020274][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 268.020293][ C0] RAX: 000000000014be3b RBX: ffffffff8e4975c0 RCX: ffffffff8b8d0c75 [ 268.020308][ C0] RDX: 0000000000000000 RSI: ffffffff8de7af85 RDI: ffffffff8c1af0a0 [ 268.020322][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 268.020335][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 268.020349][ C0] R13: 0000000000000000 R14: ffffffff90d9a610 R15: 0000000000000000 [ 268.020363][ C0] FS: 0000000000000000(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 268.020391][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.020406][ C0] CR2: 0000000000021000 CR3: 0000000038b06000 CR4: 00000000003526f0 [ 268.020420][ C0] Call Trace: [ 268.020427][ C0] [ 268.020434][ C0] default_idle+0x9/0x10 [ 268.020461][ C0] default_idle_call+0x6c/0xb0 [ 268.020489][ C0] do_idle+0x35b/0x4b0 [ 268.020512][ C0] ? __pfx_do_idle+0x10/0x10 [ 268.020535][ C0] cpu_startup_entry+0x4f/0x60 [ 268.020556][ C0] rest_init+0x251/0x260 [ 268.020585][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 268.020618][ C0] start_kernel+0x47f/0x480 [ 268.020647][ C0] x86_64_start_reservations+0x24/0x30 [ 268.020677][ C0] x86_64_start_kernel+0x12b/0x130 [ 268.020706][ C0] common_startup_64+0x13e/0x148 [ 268.020737][ C0] [ 268.435318][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 268.442223][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 268.452917][ T30] Tainted: [L]=SOFTLOCKUP [ 268.457257][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.467311][ T30] Call Trace: [ 268.470588][ T30] [ 268.473526][ T30] dump_stack_lvl+0x100/0x190 [ 268.478255][ T30] vpanic+0x552/0x970 [ 268.482268][ T30] ? __pfx_vpanic+0x10/0x10 [ 268.486805][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 268.493028][ T30] panic+0xd1/0xe0 [ 268.496808][ T30] ? __pfx_panic+0x10/0x10 [ 268.501283][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 268.507484][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 268.513695][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 268.519898][ T30] ? watchdog.cold+0x198/0x1ca [ 268.524699][ T30] ? watchdog+0xd35/0x1050 [ 268.529153][ T30] watchdog.cold+0x1a9/0x1ca [ 268.533889][ T30] ? __pfx_watchdog+0x10/0x10 [ 268.538598][ T30] ? __kthread_parkme+0x18c/0x230 [ 268.544182][ T30] ? kthread+0x13a/0x450 [ 268.548477][ T30] ? __pfx_watchdog+0x10/0x10 [ 268.553180][ T30] kthread+0x370/0x450 [ 268.557290][ T30] ? __pfx_kthread+0x10/0x10 [ 268.561927][ T30] ret_from_fork+0x754/0xd80 [ 268.566596][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 268.571853][ T30] ? __switch_to+0x7b4/0x1120 [ 268.576570][ T30] ? __pfx_kthread+0x10/0x10 [ 268.581205][ T30] ret_from_fork_asm+0x1a/0x30 [ 268.586020][ T30] [ 268.589231][ T30] Kernel Offset: disabled [ 268.593551][ T30] Rebooting in 86400 seconds..