last executing test programs: 8.411575147s ago: executing program 2 (id=3490): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/irq/10/smp_affinity\x00', 0x40100, 0x0) pread64$auto(r2, 0x0, 0x10005, 0x830) write$auto(r1, 0x0, 0x100) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0x2, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20040081) setsockopt$auto(r0, 0x1001, 0x20201f, 0x0, 0xa) r4 = socket(0xa, 0x80802, 0x0) socket(0x1, 0x2, 0x0) pipe$auto(0x0) r5 = open(0x0, 0x22240, 0x0) close_range$auto(0x2, r4, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r5, 0xc0105702, &(0x7f0000000000)={0xb3}) io_uring_setup$auto(0x20, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(r6, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) r8 = socket(0x2, 0x1, 0x106) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x810) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 7.201415519s ago: executing program 2 (id=3496): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@can, 0x68) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@hci={0x1f, 0x0, 0x3}, 0x68) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0x8048ae66, 0x38) mmap$auto(0x0, 0x8, 0x4000000000e1, 0x40eb1, 0x401, 0xf4a5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x10) write$auto(0x3, 0x0, 0xffd8) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x4f0100, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0xaf02, 0x0) ioctl$auto_VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x80000000, r0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) getpriority$auto_PRIO_USER(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x7c) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x8906, 0xd) 6.8201286s ago: executing program 2 (id=3498): settimeofday$auto(0x0, &(0x7f0000000300)={0x528d767b, 0x9}) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1fb, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x8, 0x1, 0x0, 0xe, 0x800003) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000380), 0x0) setuid$auto(0xe) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) fcntl$auto(0x3, 0x400, 0x1) ioctl$auto_FS_IOC_ENABLE_VERITY3(r0, 0x40806685, &(0x7f00000000c0)={0x3, 0x9, 0x1, 0x3, 0x5, 0x0, 0x0, 0x7fff}) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) 6.473344946s ago: executing program 2 (id=3499): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0x48088000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r3, 0x9, 0x9, r4, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000480)="67e9e65e5840ae82e6296baf308f27c34918131d9fd54c75ba740557e03b5c484aa4c8920f4036f9df84e265b340cd6ec24c05f5ca6eca17188bc1db1cb2da2e59329016f98abeadf337bb7a7d26bfb8d9cd03445f77c90193bd749269c3834b3519ae8bd9a3729e8303148e3113b23b61acb6b4df0b25a0bd472b5fa16c56b3b826070bc3a2fbd4c11808480c6ebd6af99c1c011242e1ef3f3eb16ffb", &(0x7f00000003c0)=0x1, 0x0, 0x2) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mlockall$auto(0x7) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={r6, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r8 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r8, 0x8) fcntl$auto(r7, 0x402, 0x0) 5.965644609s ago: executing program 0 (id=3502): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(r1, 0x0, 0x800) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(r0, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10001) 5.697404574s ago: executing program 0 (id=3503): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x4, 0x84) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) write$auto(0x3, 0x0, 0xfdef) (async) read$auto(r0, 0x0, 0x5) (async, rerun: 32) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x84) (async, rerun: 32) prctl$auto(0xffffc7fd, 0xfffffffffffffffe, 0x0, 0xe5f5, 0xff) (async, rerun: 32) mmap$auto(0xffffffffffffeffd, 0x5, 0x7ffd, 0x3fa, r1, 0x1000008000) (async, rerun: 64) socket(0x2a, 0x1, 0x100) (rerun: 64) mmap$auto(0x0, 0x8, 0x1000000004, 0x209b72, 0x2, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) (async, rerun: 64) socket(0x23, 0x80805, 0x0) (rerun: 64) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) (async) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffe, 0x1000000eb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x23, 0x1, 0x2009, 0xb, 0x0) (async, rerun: 32) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/numa_maps\x00', 0x22a200, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)=""/144, 0x90) (async) read$auto_proc_sessionid_operations_base(r4, 0x0, 0x0) 4.68160972s ago: executing program 0 (id=3507): socket(0x10, 0x2, 0xc) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) setfsuid$auto(0xee00) (async) futimesat$auto(0xda, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) (async) listen$auto(0x3, 0x0) (async) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x10001, 0x9, 0xfffffff9, 0x8, 0xf, r2, [0x9, 0x0, 0x1], {0x1, 0x0, 0x7, 0x3, 0x4, 0x8, 0x8, 0x80, 0x2}, {0x0, 0x9, 0x5, 0x9, 0x9, 0x7, 0x9, 0x3, 0x6}}) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x20000, 0x40005, 0xdf, 0x1b, 0x7, 0x28000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) socket(0xa, 0x3, 0x3a) (async, rerun: 32) futex_waitv$auto(&(0x7f0000000000)={0x100, 0x5d94, 0x4002, 0x4}, 0x77, 0x6, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200400, 0x0) (async) socket(0x2, 0x80002, 0x73) r3 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) mmap$auto(0x2, 0x3c71000, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, 0x0, 0x9, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000440)="13c3a73f760fda3fce19d9634e4c2bcb4c593f16320a8e2830b3e17768ee6cfe1132d24c189aa026fb5bd3057a621573129b6f706445eb47af22f97a960d44df77427d4ee569b72d95dad77a826be151d0e088d58265feb1b1e32e100c70862dbfb3d96f29ca6cb69712f75aaaa526f070b86c74d9685f534790fd86a93e6fe535a8a8b9ec9071d11baa305d720c22c4d6d9e8148c519def2dddc84186b23f24546e1e8c00b227107b9f2d903965d22688e0c7d6f7213dc4d13bc1762c87b02a260965ca95970e9a3e8005f94afa91d10342527dbb39b2c8ea923f3b8712dcdf9bf48dc7e1e2b0b7444e55") prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) 3.497667613s ago: executing program 1 (id=3512): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000854) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x9a28) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2, 0x5, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) flistxattr$auto(0x3, 0x0, 0x3) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0xa, 0x0, 0x95) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0) preadv2$auto(r1, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xfffffffffffffffd, 0x4, 0x2e) 3.021554415s ago: executing program 2 (id=3514): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/kernel/cpu_byteorder\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r0, 0x0, 0x790) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptywf\x00', 0x682400, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/011/001\x00', 0x2, 0x0) read$auto(r2, &(0x7f0000000100)='/dev/bus/usb/011/001\x00', 0x7f) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0xc, 0x0) mmap$auto(0xfffffffffffffffc, 0x400408, 0x0, 0x15, r1, 0x8000) mprotect$auto(0x8000, 0x8, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x60002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x3, 0x1, 0xffffffffffffffff, 0xff, 0x8000) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x1e5003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r3, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x1) acct$auto(&(0x7f0000000000)='/dev/bus/usb/036/001\x00') memfd_secret$auto(0x16a7c769) socket(0xa, 0x801, 0x84) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0xffffffffffffffff, 0x3) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2.787772758s ago: executing program 0 (id=3515): r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048094) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) bpf$auto(0x0, 0x0, 0x4f4) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/hid/drivers/smartjoyplus/new_id\x00', 0x0, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b71, 0x1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x1, 0x1, 0x948b, 0x2, 0x800295f4da0a, 0x0, 0x3, 0x6, 0x4000080000005, 0x50ab, 0x6, 0x9, 0x2, 0xffffffffffffffff]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.750175273s ago: executing program 1 (id=3516): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @HSR_A_IF2_AGE={0x8, 0x4, 0xf}, @HSR_A_IF1_AGE={0x8, 0x3, 0x5}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.47380295s ago: executing program 1 (id=3517): mlockall$auto(0x7) (async) setresuid$auto(0xf5, 0x8000, 0x67) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000100)="4ceac02070916ed1dc1f91f3c388b5622aa1990800e1d0ae2ef23f241bb2bfd9339eef334248dc800e9b3368", 0x2c) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) mlockall$auto(0x70a) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) (async) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) 2.294044076s ago: executing program 3 (id=3519): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4000002, 0x4, 0x7234}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x48}, 0x6, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.153594384s ago: executing program 1 (id=3520): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r0 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/ignore-private\x00', 0x101202, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000002940)="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", 0x102) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={r1, 0x80000001, 0x3763, 0x3ac3}) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0x1d, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20006001}, 0x40088c4) epoll_create1$auto(0xa413) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) close_range$auto(0x2, 0x8, 0x0) 1.693747018s ago: executing program 3 (id=3521): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/snd/pcmC1D0p\x00', 0x101080, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r0, 0x5452, &(0x7f0000001e40)={0x2, 0x1, 0x5, 0xc, "e95874bb90baf73338e2278b336f66d9f24da88bcc9fbfeb0b938f002fce8d3d405da0043f932a0a972f0c7afdbf870c91e3c9d8cf8f552b7224bd2f6eb0ae15", "3459595e78d266039a6b8db235ea9e73739e5019b4a4b442c93381b23f3a956f63cb871a8cc775f9ae62723c8882c7ac613aeecb0f8f87a759fb71392f8a369cc8ef7eed27fe7d3ab1fc0b23981b7194", "5f5af60aa7da18adb80fef26e964f184e8764aab7edfb83c36a97c17cb9ffa8d", 0x39, 0x2, 0x13, 0x7, '\x00', "c044ade8bf1a11e296938543ce1bcb5372d12e1815e4e5a4adc8ecafe3c08f5745fa2f5ac5b828c4453517a78700b1841810a3d79d3d2bd84a067270ca188fff"}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8b81, 0x0) ioctl$auto_RTC_PIE_ON(r1, 0x7005, 0x0) readv$auto(r1, &(0x7f00000004c0)={0x0, 0x4}, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x5, 0x128009, 0xdf, 0xffff, 0x401, 0x7) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x50741, 0x0) socket(0x2b, 0x5, 0xa) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dvmrp1\x00'}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), 0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0xffffffffffffffff, 0x0, 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) 1.692659449s ago: executing program 1 (id=3529): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x8, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000340), r0) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/snmp6\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000380)=""/80, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) access$auto(&(0x7f0000000300)='./file0\x00', 0x80000001) connect$auto(0x3, 0x0, 0x55) 1.360234894s ago: executing program 3 (id=3522): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0x4eb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) close_range$auto(0x2, 0x8000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, r1, 0x200, 0x211000, 0x0, 0xf, 0xffffffffffffffff, 0x2, 0x5}, 0x6f4) 1.102103397s ago: executing program 0 (id=3523): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0x48088000) syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r3, 0x9, 0x9, r4, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000480)="67e9e65e5840ae82e6296baf308f27c34918131d9fd54c75ba740557e03b5c484aa4c8920f4036f9df84e265b340cd6ec24c05f5ca6eca17188bc1db1cb2da2e59329016f98abeadf337bb7a7d26bfb8d9cd03445f77c90193bd749269c3834b3519ae8bd9a3729e8303148e3113b23b61acb6b4df0b25a0bd472b5fa16c56b3b826070bc3a2fbd4c11808480c6ebd6af99c1c011242e1ef3f3eb16ffb", &(0x7f00000003c0)=0x1, 0x0, 0x2) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mlockall$auto(0x7) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={r6, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r8 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r8, 0x8) fcntl$auto(r7, 0x402, 0x0) 1.088468995s ago: executing program 3 (id=3524): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x4000) r0 = socket(0xa, 0x1, 0x84) setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x10000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 848.905914ms ago: executing program 2 (id=3525): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = socketcall$auto(0x8000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = fanotify_init$auto(0x8, 0x6) setsockopt$auto_SO_DONTROUTE(r3, 0x69, 0x5, &(0x7f00000000c0)='\x00', 0xa1c) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) move_mount$auto(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x4) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r4 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) sendmmsg$auto(r4, 0x0, 0x7, 0x8) (async) write$auto(0xffffffffffffffff, 0x0, 0x7ef) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) (async) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 709.484357ms ago: executing program 3 (id=3526): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x7, 0xf1, 0xad, @inferred=0xffffffffffffffff}}) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000100)={0x7, 0x9, "2a6b79ee9d172d3053c57023ce04f8beec1bb8ecb92ccf71239dd7376c64934944fa1a6555816ee481edda3bc415b0885ba70e5693186f751fa27b8b5f3f7837493dc7fbc0ab283173d8a2bf68bc6859fed4175a4f3070e4afa842"}) 128.769807ms ago: executing program 3 (id=3527): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/hugepages/hugepages-2048kB/surplus_hugepages\x00', 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf2503000000180006800c002b8004800800280083b8ea7e23e9ff50ecac3f1a6d43940e80204bf2a1420564b9", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x400c0d0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=3528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x800, 0x9, 0x25dfdbfd, {}, [@TIPC_NLA_UNSPEC={0x59, 0x0, "d867053e4faff7d3730d491e9551ad5655bbbfa95781c96fd054a5b672e08ba47035dea555899e4c06f9ea96823ed4ba63e594a3260c5d5f2ba4fdfb3b3c5d02b79d84d205160981ace20956bafe7a01a2909f3c9b"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x103c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_NAME={0xb, 0x2, 'TIPCv2\x00'}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x6}, @NFC_ATTR_LLC_SDP={0x1014, 0x13, 0x0, 0x1, [@nested={0x10, 0x23, 0x0, 0x1, [@typed={0x5, 0x18, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x7c}]}, @generic="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"]}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4040818}, 0xc8c0) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000001300), r0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044880}, 0x48840) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001400), r0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), r0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xa4, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x2e, 0x21, "0ac2bdf1d68d581b5779365fc0fc2c2b632662aca0689e0c5be4605071fcb8dcb43b9c056c326b7107e2"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0xf}, @NL80211_ATTR_MNTR_FLAGS={0x58, 0x17, "f67410a5a40cabb3aae0f2e3d337e6c4295242e18806fe801fd69322c8643e6f463be8a2ea62bdfce6ca22022586ad64d2da82b6938cb7fb1a9ec8acf7e971783a30295c0420166e6931df1895691d6dbb2de9ff"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) mmap$auto(0x95, 0x104, 0xbb1, 0x31, r0, 0x2) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001640), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001680)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001740)={'team_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001880)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xa4, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xac0e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20048054}, 0x4008000) shmctl$auto_SHM_LOCK(0x5, 0xb, &(0x7f0000003900)={{0xffff, 0xee01, 0xee00, 0xfffffcbd, 0x4, 0x400, 0xe}, 0x0, 0x2, 0x9, 0x2fe, @raw=0xa, @raw=0x3, 0xfffe, 0x0, &(0x7f0000001900)="23fc4b5351d7c5cfb744c132d180fc5eea54c914fde08037f15ab923d2c1c7a4a57ae8b896a2bb874aed742eb7c70e3d8e344c48347bd67d2025a2ec848a5709182e1dfd109c9d81ad220160d4357ee1c8aaf6daef2378c79a8b115646e94b7802889acb659a1ba5897114b1b47aeb96d4b65e9b28aaa185f3765cc1d69e37fc81a370ea72e0800e6ce1d6fb651d37c7fa215c9441fbcaef0eac9e09bdc19e0d5b3f5596ecbe57a4ce10eecf77c084d14a94af267ce734d4ba2f82bb9253cc33dc2fc02b0fbf97aafd147dfd7c88dfc5d8927a78c0598491cabf07755999207d23c90f762232c61ef486d3e3709e1715b76d8f8b5de6942beece7468a670a9bcd65fe5ad2c8ece9eb1037ea3f47b5e63e7a48b7375e4b0ad6acc66e23fffebd67640f0e99c648ef348d53f60af71715a858b6ccebec3a45e845662214c23326cb292417b74f08c3412764f6c3c2089cda806ad1a4029c0548ce4d8e3938727e939646da631ca10b16a4ff4a13ed1f95c434e620f9deed1adbb3a6168ec35a96b4200983769566b3ad08454feb73af96162ade4647c78eced4e55eee98d3677f47ffb94a526b54de4d7faa1dca227ffd95bc86d0ce286d49dc2a47db423e690744862e6301b9c40999bf8185654c51b37887681a556270199dc8d0b8874736b8a5a808e293cf7f34472af6722a326d33f1452b3e1a38cd323d0e77de5fb1f3a00c643d08badd0af1d393037a3825fb46ed478706af856c4ea04b946d7fb041793c63808508cc4742d5edc4321c2d842b1101deb827e3370e072046ccfe82ef5f5244d36870706d22f077fe3f6a4fdb2652d660595e5894f88f563c85f02aebeaccaf459fef205f978994e17aa6490e6123d03796b86b202020c2372c66305769fd72b07f8b159751b9b30691830fa72379f8f48cdb23fd48b5f7371d9890e44118f80aaf40119fa990f50b6c31e0c18409f75d583c89f7ce86fe950e7c6ed9f0262f693d3a6fd2b5e0ed755322e0e7d642aa7fd0fdbbc22330ff7b9eef48cc29cdbf960f486d6356e7ab28970a5ac3a65acb715d02407e702f011b925e441342f7f6ae9a09ffb30a134beb7f4a680f1859476694d72e2a5694cbbecc9f64f92909d94a47f299000c2fe81b6c360dbcaef2541b1c8aa11563eed65529cbae356667b1f930eb54552646646e8dc6e0043ac62b4d8936e9c31c0fd7be889664dba88c513143223b327008c7407bdda6111a5515668cee3a2b26345ff3156a94f665d522dec15cf15a54bd74c842137d460fb2b44fac5bc56b8fa72fd52b63c626625c9e00abdbe3e74e702aee0adf912dcec173c9bea1ec26e867ee8334a4a46f551a50d1c074ed950e637638a8fb9bf4ae350c50631c178abe7986f3f4167d87abf64c3de666546f7f3b864f67028eded254abf5ddd6c72c384c3699c16a71da1b961405c3c8572ebbffc92ee5b4ce31b90f8ed77cb267498f345b272dbda36f539e77ba785e9b27b40626411408e12871b061e3afaa72b29dd500a0a2b36cc662470b46aeec09e56c9ee5588f5c38e236bb82f00379a8868224be32ce3fba9000af0333f86641db96af1351e6ae91abb8e00367e0d88e89e2cbad34b02c1f2f4d8de5aa7f49357cf10408920f32fec00767a3eb06b493ff5174f431c6d502cca844961cb02cb8f86bf7a56f3f6b4eec8948bcf76ef470dc76a4aca0ee25bb7bfa6e1713b8def173b08d5959297da305832541e78a3b951db5d0aaa29ed94305f220e58beb88b3794461802886f3cda0f194ead9190a63ad25766293d807f6cff7ca5f5b45ff6670cd3d47a2cba22bf5d412f37c424db025a5ba84d7ab449ece57d878cc01ec952d2a7ca9be4a1ea579a1fe1e48a83420ce68b381b5206cd51ae62146713c0d1dc99a48fd97aafd8703112dc86858ff5a7a046daa77a6c37f7bea3d5a1cfa032cb2a9de102d8d264ed2e95805980b26809870626defe15b97cab5923a5b6a79d88ab9cae7096acde8be21a1a8f225106e996bc769225dbd785527b950e4d65b09ba35c5e371f8a6d93d92c3821f53a9efd4f843b62e05a446e768ea89f0199a36f0e54de5288e9436c5c11fc49401e2fa27b800706ec3ce7408eab60413447b85e9cb2a98ecc61c2f52b8a66091e7a0f433106436ab9c4d1a3ffd9fa596b4fcf1a22d50646d636935c5917b840e0d32165ee8abb07c477011811024e4c3f13fd2ce892be32dc347393cf36428dbd819674396b1609dd4c796417ffe3bf4bf0c939ff9ff02e8c7bf4ba76f92172447f3395605d0e2cf021cc7a2a935338c20a02e1669dd9c802c7505288b6904d6df614cbbe704f54deb2085927151028df6a65e449e96a381f8d274197b1785d9f5dd2c766fba6b89ccc7844b053ce857ee3f05cb28411ff88e96afaf00baa9645e7ee19beef3f8a1b1b336e9ec95f77a85a57586741b95acdc97500fc76c526ac8a81419bc827295449db37453b6ba33ed376ffb3bb0928fa1c28e7b708ea11ad7d86ad76ecf6c6fb1c8e8c7974eb320bea099502ac5c37616db29a388ba97049b25d96846ca0142932ee52023a88f3cdcfea5c6dc3204e9f9ea85a4b6521c6eff864d989f33de8207164d2b5de8f004648b92bbb516d9f781a27897d66ad7450f22b9c9166c92daf0ce8f3361beed6d13be63f6835d73be713e12abb5acb175d9d0d5c3c0eeb537c4bb436d00f42506c3749e673880b34f6c80aa37908fa9bab21764b6f8104bd3eecdfd6a3ac188b1e703a6c6cf6d52168753da9568cd95414738a91a38d2b8c6bc0e1289ec6ad7a3678b218b7a0f2175d800861031e23df2a1063de5e8d20b86f8745205a201c7bce4a132dde4a39bdd632d5bd525fcb8ef544bd0cbc294e2f03d1a27b634d1637765e192a09d524155069b068b9b296e16ca9e7591a3d0f3c92a6dc2828e12aab0aed216bea62be28fe6c9f4a64ff83c812fd7266dd75c90d8a87df3605aca7550da757018c3381094ae3668f5c1ce8ad7b558bea31ffbc27634abd276378bf18c41f0d4d7297aca0644268410bee5ccea9f3a0d4c9243d9bb2e82bf22d09a60a2b5bcaf5effb41c788f0df846c139c00d203ac82518a92e880702c21a35cc7468b755b76eb60b0913933a655d0c51e5d0b51069bc97a22c54335ef673da9c59b5e1654f02e7c552d54bc1269df2e141b714a44718806f5d0ca65d92f771446034a8ff4adc7c9c63f4697c8ddd2d27dbbd9a11179288503d68a4e77861121e44971e5a06f90cd28d7196dcc92870ee35c1e6578d81a495f403184d74e32182a3e3bc3024f9bd497dc0607a6d99fee07d7358b2ebd34128c1372daa4e486d0a3c19c88fc2522e69dc429b36f973eefbd54d39455ceed82f97d26d970e004484ef39784ea8e978e361d9416e5f6b20ce809ca21b691b912acd5d252956b7c93e22a9e944f0e98ea72dc3a5b4277574fcf96038f3454e82ce46139ecc39563fb14e2488b2e67d4bf290a02a8f9aa8850d11738b611ecdcb48d5f9d2127dd71be9cf098f1916ed0a0b509d9245fabc208c122396b7391ff1ad0d27909f2e378217e8052ba31b7f9943aeb98d409523772aff124c0db642fcc87042c256e6c89eb5e9c2c130d7d6ffea76b4cc7f8cd13ea75f9bdfc7744fdbc5a9497fa966a59358919d4d17d2f780d61bdc039e6db6d56f8544f9fa160ddbb8d07634b2700f9bb69d62148b80d076ed062464897f644525f98065995b84f7016a195cb2fd2e4552734b2ecbf5fa312974ae6d74129929b29ba9d7ede05cca6cbc9c3713f0dd7ddb8f2f6ec8da1f4783aaa42719df96a005cf42710fb2c8461f7fd641a914823ffa4dd3e5a90c0886a362e45a07c1fb14ba98f37d476606690e78d55c0cf5c2248689537450383848854f2a2066332ccce8d45e338c65b920d3c68f104168db46913ec7d0461628c40e258c2588d5ff615215183fe3d83418c7dbb5bc5f6acafffb83b678037c6c4e05dc038d37b3f31a84869ee32afd6f791c4eaa03c2f3577d886d41011eda6c152e9af51aa6375986d50fb64194306356ddd2b2399695df0b45943e3444c6929a3fbd39f2c29fad37777437733c2e1930a445ab1bdcea918299bd17ea7c8268678482f0f615eb7e1c8b145992bc4daa80352c9cebe257342bcda657e9fce79d96483d1d06a4adefbdfb4ed7e25a9c1b3818cac84e65624c90dc2f87d24361d13212521b1d3b1d038e054777293297e4282e85d07b5808168003f401422620dee9dae7ca33ab781690a5133b7edd7bd95305e27443771e0c5aef82bda32475e4505ea76c3347b6edc84ff167cb1584a8f70a21b4585edf05a0af76adcb16511436a967f63556f7efc8117f1f1786d137a5240fbe25fb0ecfdcd99e05a7fa17f76ad9a9d0f00e7f23e38fac03f83a2ecc0922563b8438ddb9617eea2b596d03d9b705976002ceca1d09fa67d03bea87c35b0a827f90e98b2e53113a45785b031e03a759122a98ae1938d2359cdf5ebc6e2e10cdf29a5ccb8ec6be18617175a3de70ac01203b49992c93b102a041f00ab34666be71df86b439a65b6d6363732b12f83e4d2f51cdd9b7628a6c85113dd858e29c3bbece0a696255f14076432f2cc90dacccf3449de121c92badcbff2282eb4b96671ede2488e5f21fd4720448ecc36d0daa098e230dbe022a3203cd55fcbc03c034e91547c9e6e81623d710d71e0b5c69ee7bbc1a59f3b049a2f3e5211cca22af8ec4033b291c665164e37f5fcf19ccf44e20245927cba8b137c1921db348db3158ca1258d9c5b512577c4a1e62f2da2eae7bc46a283f0b86872a1f31911c9182cb43bf7d99ca089da0dfe3b846d5c9371e0fb744dca5b2d9a02d7065ba8c2a42416cd52de02b91961336bba9bac19cc915d8a8d1a65263c66469f5a1d90abc535e3ac6c128947237ef36e5189294e303a0b1347f23ebb11a92d09f819c5bb74dd9590c3c5f5c412f9246f1a3963fdd659d21d4b98875ed7a5ae32290c9bd0e3a39b8d5abc21cef7f7387c8d6b0192378b36dc37c1446e130f7c6cc906424ec27d5f87ef06fae9a21a204472f272ede65db5224324b57fc2f9d5d19a8bb4629d24a69d3b420e9f7a44ae52a060006950a69b26f7b51c9c1799ce3c0eb29221faf789197326582ab3b7edaf6080203a7829d8c11d946a215a68a2281cec769fcfbe306daa36fd8ee822442307055c7c5f98900aaa76d51db77acc856b4effbf9d8f5340ab614b97f40df5827886d2555d413417b4441d3bb4d9a1b60da75c3e3e2f49a11769b17c14df1bdc7097b900043c3610990de329eda082b217cdbfdaf658341aabf9d770cfb600b2ba2af9ff3105003e1ba55883e86bc71a5ae01b450ab68377e90484f2405ebcc58c67f3a591f6a65027ed865cde21fb587c38a068fe1ea92f477b5baa24ea46b49e7a36c53295727b658a7c238f6a6b3321f7809cb0a14a95c8d94a1494c95d07c4661c8e2f6d58ef7b4e5fa05a5703a07acf14bad0c2937e6f86143e995fb912cbdbe863fc9b8f6b4a4f067aced3f3c30f2c405d3dc6bb2d3ebc02eb8398d9af9afda13d3eb779f1134972012818619735d3a787744cd8c3bc3c3d3b3406b1c1825ceacf047f9199d2281cd6ab7126175dad13856beae35aa551a06f602b9e439d3dd4fe2926eb90439b5a6ae486810ef68260d12cb9772ee935ae6c04fa9fbd37842a534bd653a9677555040bd18d070e62ec9d2448d3521d1d5f72e41bd682b507f9e7d6674010924e2ac15887fe17e31c12b9db75a21363b134a9da", &(0x7f0000002900)="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"}) r12 = getuid() shmctl$auto_SHM_UNLOCK(0xe0, 0xc, &(0x7f0000003a40)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xfffffff9, 0x80, 0xef50}, 0x2, 0x5, 0x5, 0xb, @raw=0x6, @raw=0x9, 0x8000, 0x0, &(0x7f0000003980)="edc4cc6f327341979248231ea8626e1634608f25ca87ee3d7ec7a41f48517a506a8d3b82606e174f8523b58fa0c31d01f688d343e03bcc2149d2cdb4e892c8917d55a50459467e8c7de2f15ff034cd052f6118", &(0x7f0000003a00)="a7305a207a91a087"}) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000003d80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003ac0)={0x27c, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xc6}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_0\x00'}, @NL80211_ATTR_NAN_FUNC={0x1b0, 0xf0, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @uid=r10}, @nested={0x1a2, 0x28, 0x0, 0x1, [@nested={0x4, 0x74}, @generic="bc10a5c993b26ac51c3938b5d35fa4d4a3da8d55afc2c4e224b49fe89e6793c9515e315708292f6d32d372e1bf3c12bdf39b1bd12b62eb8f27ad5f64b701f353699b43d0b27c3638db12f17d33ee34040055907fc4fa2511f8ffaa2ddb29fb04be30ab66934ab39e7122f34266b82371a232c9d9827d3f0a46ac0d2c196216a0cc1bba8eb89a10189fad12a0fd9763e2aadca4f52d8bc12bbb413ea0d5d974d513af371dc2a6b3cea2a86830d3cc3f52cfa11882613a0fea1c8a2cbd6a626dd553bc5d3fa96c692634cf4d1b75ef38c478627011f367c10dc7c02c8556", @typed={0x8, 0x90, 0x0, 0x0, @uid=r12}, @generic="541872c5cfe03324362cf1007fd42f8ac8d5dea923dd8b81a0607b4d050803929679a7d351ce8512e17264ff2bfdf76e887c10fca966d9733bcb12745e3dc03d12f291a0d07483a4e1b4352554bd8a908ea1cf6c3c27cb3eca07e9f6286361a8035cb745ed3cf1c56d578e8343610c6ffbedf26d44bf4a57db2c1cf70551cfd70749adfd7925d152bd744268dd31677145068d986067894acbf5bf6335eb8a7f33e4b4e0e93a5e3bb8187c6543", @typed={0x8, 0x43, 0x0, 0x0, @uid=r13}]}]}, @NL80211_ATTR_MAC_MASK={0x79, 0xd7, "1752800b9a4fcb78338e141a06a19895f7fdb5a90369153c951f733959f734a4383cc7012e9b762769bd6d67e8b5357ab92236de2a7564eea55ab48844e39ad112bbad5cedfbf7d4baf78d4e0488f18994d0fe541fff462aadb85b5d028aa333c6ed21054dc4f546500786b896ac3c8f69a4bd52bd"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004001) r14 = fcntl$auto_F_GETOWN(r0, 0x9, 0x1) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000003dc0)={0x6, @raw=0x9, @raw=0x28811a4b, 0x6, 0x5, '\x00', {0x2, 0x1, 0x9, r12, r11, 0x100, 0x2, 0x8a, {0x10000, 0x3}, {0xb51, 0x3fc00000}, {0x7, 0x1}, 0x3, 0x26bf8a6e, 0xffff, 0x1, 0x6, 0x4, 0x9, 0xffff, 0x1c8, 0x5, '\x00', 0x9, 0x7, 0x8}}) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x401, &(0x7f0000003e80)={@siginfo_0_0={0xe9aa, 0x9, 0x7fffffff, @_rt={r14, r15, @sival_int=0x8}}}, 0x3) ptrace$auto(0x9, r16, 0x7fff, 0x10001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000003f00)='/proc/irq/8/smp_affinity_list\x00', 0x404c0, 0x0) shmctl$auto_IPC_INFO(0xfffffffd, 0x3, &(0x7f0000004fc0)={{0x4c8a, r10, r11, 0x4, 0x7, 0x6, 0x1000}, 0x7, 0xa734, 0x0, 0xda5, @raw=0x2, @raw=0x4, 0xff, 0x0, &(0x7f0000003f40)="0f5fd23711b627b8160dd8144b7fcd5082c7c658b4789951201c3430feeac1feba37a9f982191f6a8055c0db47dde413a4c091fb48aad339c7cd0e2c18e02a072a694594117bdfaa193d33ecd4f0cef9a0bd0100e7af1cef18a8010f5f9f9539d412b1ebcbea74d849e6b763759695ba47b2870debe1dcfb", &(0x7f0000003fc0)="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"}) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r17, &(0x7f0000005100)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000050c0)={&(0x7f0000005080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000005140)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) kernel console output (not intermixed with test programs): 10391] bond0: option fail_over_mac: invalid value () [ 327.203954][ T9219] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.516891][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.522999][ T9219] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.684681][ T9219] Bluetooth: hci3: command 0x0c1a tx timeout [ 348.913474][T11984] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 348.964304][T11984] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 349.008377][T11984] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 349.445303][ T5935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.457671][ T5935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.487012][ T5935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.501844][ T5935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.512550][ T5935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.799539][ T6415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.941599][ T6415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.072160][ T6415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.196076][ T6415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.435854][T12019] chnl_net:caif_netlink_parms(): no params data found [ 350.515246][ T6415] bridge_slave_0: left allmulticast mode [ 350.523403][ T6415] bridge_slave_0: left promiscuous mode [ 350.542345][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.232632][ T6415] HR: left promiscuous mode [ 351.409419][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.450042][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.474994][T12019] bridge_slave_0: entered allmulticast mode [ 351.485776][T12019] bridge_slave_0: entered promiscuous mode [ 351.576746][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.597844][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.606532][T12019] bridge_slave_1: entered allmulticast mode [ 351.620897][ T5935] Bluetooth: hci4: command tx timeout [ 351.641427][T12019] bridge_slave_1: entered promiscuous mode [ 351.788529][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.848896][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.969342][T12019] team0: Port device team_slave_0 added [ 352.009223][T12019] team0: Port device team_slave_1 added [ 352.269944][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.297318][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.353914][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.399226][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.406203][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.486894][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.899381][T12019] hsr_slave_0: entered promiscuous mode [ 352.916867][T12019] hsr_slave_1: entered promiscuous mode [ 352.930964][T12019] debugfs: 'hsr0' already exists in 'hsr' [ 352.936745][T12019] Cannot create hsr debugfs directory [ 353.019495][ T6415] hsr_slave_0: left promiscuous mode [ 353.027539][ T6415] hsr_slave_1: left promiscuous mode [ 353.036873][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.064516][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.083325][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.105828][ T6415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.159876][ T6415] veth1_macvtap: left promiscuous mode [ 353.176238][ T6415] veth0_macvtap: left promiscuous mode [ 353.182107][ T6415] veth1_vlan: left promiscuous mode [ 353.188756][ T6415] veth0_vlan: left promiscuous mode [ 353.688140][ T5935] Bluetooth: hci4: command tx timeout [ 354.359361][ T6415] team0 (unregistering): Port device team_slave_1 removed [ 354.485654][ T6415] team0 (unregistering): Port device team_slave_0 removed [ 355.769223][ T5935] Bluetooth: hci4: command tx timeout [ 356.813849][T12019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.868104][T12019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.914596][T12019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.959447][T12019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.233340][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.269532][T12019] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.291961][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.299131][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.377016][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.384234][ T7677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.858460][ T5935] Bluetooth: hci4: command tx timeout [ 357.947927][T12019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.108180][T12019] veth0_vlan: entered promiscuous mode [ 358.157781][T12019] veth1_vlan: entered promiscuous mode [ 358.235595][T12019] veth0_macvtap: entered promiscuous mode [ 358.276328][T12019] veth1_macvtap: entered promiscuous mode [ 358.299105][T12019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.315625][T12019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.345426][ T5945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.359357][ T5945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.380619][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.411122][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.604700][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.638818][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.768777][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.798348][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.603656][ T9219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.614422][ T9219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.622787][ T9219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.635433][ T9219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.644354][ T9219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.205430][T12754] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2657'. [ 360.238350][T12727] chnl_net:caif_netlink_parms(): no params data found [ 360.755030][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.796884][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.825047][T12727] bridge_slave_0: entered allmulticast mode [ 360.843030][T12727] bridge_slave_0: entered promiscuous mode [ 360.863517][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.881812][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.889073][T12727] bridge_slave_1: entered allmulticast mode [ 360.933591][T12727] bridge_slave_1: entered promiscuous mode [ 361.227563][T12727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.260247][T12727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.441080][T12727] team0: Port device team_slave_0 added [ 361.457036][T12727] team0: Port device team_slave_1 added [ 361.519758][T12727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.526854][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.562381][T12727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.581053][T12727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.591947][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.626861][T12727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.692086][ T9219] Bluetooth: hci1: command tx timeout [ 361.729861][T12727] hsr_slave_0: entered promiscuous mode [ 361.763187][T12727] hsr_slave_1: entered promiscuous mode [ 361.783604][T12727] debugfs: 'hsr0' already exists in 'hsr' [ 361.789467][T12727] Cannot create hsr debugfs directory [ 362.139573][T12727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.284826][T12727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.422210][T12727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.524883][T12727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.715406][T12727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.733745][T12727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.750208][T12727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.777795][T12727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.942710][T12727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.996213][T12727] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.014508][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.021682][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.049211][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.056472][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.179674][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 363.227632][T12930] ovs_: entered promiscuous mode [ 363.420472][T12727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.546579][T12727] veth0_vlan: entered promiscuous mode [ 363.561784][T12727] veth1_vlan: entered promiscuous mode [ 363.627552][T12727] veth0_macvtap: entered promiscuous mode [ 363.651165][T12727] veth1_macvtap: entered promiscuous mode [ 363.704583][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.731968][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.755341][ T6142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.773151][ T9219] Bluetooth: hci1: command tx timeout [ 363.791038][ T6142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.814802][ T6142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.814911][T12977] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 363.823784][ T6142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.965042][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.972900][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.058361][ T6142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.074097][ T6142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.136133][T12992] ubi0: attaching mtd0 [ 364.155518][T12992] ubi0: scanning is finished [ 364.160176][T12992] ubi0: empty MTD device detected [ 364.565800][T12992] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 364.605211][T12992] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 364.615901][T12992] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 364.694159][T12992] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 364.738534][T12992] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 364.759461][T12992] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 364.783766][T12992] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 661653831 [ 364.810015][T12992] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 364.865533][T13013] ubi0: background thread "ubi_bgt0d" started, PID 13013 [ 364.872738][T13000] ubi0: detaching mtd0 [ 364.939830][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.952846][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.961280][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.969535][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.978403][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.002290][T13000] ubi0: mtd0 is detached [ 365.195079][ T6151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.332592][ T6151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.441842][ T6151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.582363][ T6151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.854792][ T5935] Bluetooth: hci1: command tx timeout [ 365.996247][ T6151] bridge_slave_1: left allmulticast mode [ 366.013010][ T6151] bridge_slave_1: left promiscuous mode [ 366.046432][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.092637][ T6151] bridge_slave_0: left allmulticast mode [ 366.114360][ T6151] bridge_slave_0: left promiscuous mode [ 366.120367][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.722926][ T6151] erspan0 (unregistering): left allmulticast mode [ 367.054942][ T5935] Bluetooth: hci2: command tx timeout [ 367.296408][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.450146][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.515898][ T6151] bond0 (unregistering): Released all slaves [ 367.682334][T13094] ubi0: attaching mtd0 [ 367.687708][T13094] ubi0: scanning is finished [ 367.794874][T13017] chnl_net:caif_netlink_parms(): no params data found [ 367.935276][ T5935] Bluetooth: hci1: command tx timeout [ 367.989381][T13094] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 368.006843][T13094] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 368.014566][T13094] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 368.031137][T13094] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 368.040140][T13094] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 368.047389][T13094] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 368.087542][T13094] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 661653831 [ 368.101698][T13094] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 368.137704][T13103] ubi0: detaching mtd0 [ 368.145222][T13112] ubi0: background thread "ubi_bgt0d" started, PID 13112 [ 368.319572][T13103] ubi0: mtd0 is detached [ 368.703241][T13017] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.724922][T13017] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.742752][T13017] bridge_slave_0: entered allmulticast mode [ 368.759377][T13017] bridge_slave_0: entered promiscuous mode [ 368.770189][T13017] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.781369][T13017] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.792023][T13017] bridge_slave_1: entered allmulticast mode [ 368.800086][T13017] bridge_slave_1: entered promiscuous mode [ 368.866369][ T6151] hsr_slave_0: left promiscuous mode [ 368.872501][ T6151] hsr_slave_1: left promiscuous mode [ 368.882824][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.890289][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.906974][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.915665][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.960992][ T6151] veth1_macvtap: left promiscuous mode [ 368.966781][ T6151] veth0_macvtap: left promiscuous mode [ 368.972448][ T6151] veth1_vlan: left promiscuous mode [ 368.978055][ T6151] veth0_vlan: left promiscuous mode [ 369.137932][ T9219] Bluetooth: hci2: command tx timeout [ 369.876447][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 369.964715][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 370.318156][T13017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.338099][T13017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.414880][T13017] team0: Port device team_slave_0 added [ 370.444929][T13017] team0: Port device team_slave_1 added [ 370.548723][T13017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.555772][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.593051][T13017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.630521][T13017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.649295][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.739792][T13017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.961767][T13017] hsr_slave_0: entered promiscuous mode [ 371.001183][T13017] hsr_slave_1: entered promiscuous mode [ 371.017662][T13017] debugfs: 'hsr0' already exists in 'hsr' [ 371.031424][T13017] Cannot create hsr debugfs directory [ 371.217927][ T9219] Bluetooth: hci2: command tx timeout [ 372.320666][T13017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.350009][T13017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.372211][T13017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.386615][T13017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.494065][T13017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.516011][T13017] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.536008][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.543195][ T7677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.566007][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.573215][ T7677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.859990][T13017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.935935][T13017] veth0_vlan: entered promiscuous mode [ 372.949635][T13017] veth1_vlan: entered promiscuous mode [ 372.985614][T13017] veth0_macvtap: entered promiscuous mode [ 372.996155][T13017] veth1_macvtap: entered promiscuous mode [ 373.020299][T13017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.035684][T13017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.062733][ T7677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.079091][ T7677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.093766][ T7677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.116098][ T7677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.211736][ T6101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.234217][ T6101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.263418][ T7678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.272913][ T7678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.297924][ T9219] Bluetooth: hci2: command tx timeout [ 373.378613][T13238] ubi0: attaching mtd0 [ 373.386452][T13238] ubi0: scanning is finished [ 373.530218][T13238] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 373.537823][T13238] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 373.568311][T13238] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 373.575301][T13238] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 373.638196][T13238] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 373.645019][T13238] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 373.698278][T13238] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 661653831 [ 373.758086][T13238] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 373.788059][T13246] ubi0: background thread "ubi_bgt0d" started, PID 13246 [ 373.797523][T13243] ubi0: detaching mtd0 [ 373.826102][T13243] ubi0: mtd0 is detached [ 374.367433][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.399299][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.407888][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.420029][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.427931][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.690114][ T7677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.977576][ T7677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.134426][ T7677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.316322][T13295] ubi0: attaching mtd0 [ 375.320742][ T7677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.342333][T13295] ubi0: scanning is finished [ 375.452682][T13269] chnl_net:caif_netlink_parms(): no params data found [ 375.593544][T13295] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 375.643185][T13295] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 375.655606][T13295] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 375.689116][T13295] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 375.752904][T13295] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 375.781827][T13295] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 375.822047][T13295] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 661653831 [ 375.859799][T13295] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 375.870978][T13303] ubi0: background thread "ubi_bgt0d" started, PID 13303 [ 375.879000][T13298] ubi0: detaching mtd0 [ 375.968749][T13298] ubi0: mtd0 is detached [ 376.025683][ T7677] bridge_slave_1: left allmulticast mode [ 376.053899][ T7677] bridge_slave_1: left promiscuous mode [ 376.083920][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.117137][T13313] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 376.130674][ T7677] bridge_slave_0: left allmulticast mode [ 376.136354][ T7677] bridge_slave_0: left promiscuous mode [ 376.154812][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.376715][T13322] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2899'. [ 376.499934][ T5935] Bluetooth: hci3: command tx timeout [ 376.959192][ T7677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.982483][ T7677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.004132][ T7677] bond0 (unregistering): Released all slaves [ 377.031385][T13269] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.038545][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.054876][T13269] bridge_slave_0: entered allmulticast mode [ 377.071459][T13269] bridge_slave_0: entered promiscuous mode [ 377.116667][T13269] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.142122][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.149372][T13269] bridge_slave_1: entered allmulticast mode [ 377.181699][T13269] bridge_slave_1: entered promiscuous mode [ 377.362536][T13269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.385286][T13269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.511859][T13269] team0: Port device team_slave_0 added [ 377.583789][T13269] team0: Port device team_slave_1 added [ 377.693447][ T7677] hsr_slave_0: left promiscuous mode [ 377.710270][ T7677] hsr_slave_1: left promiscuous mode [ 377.730660][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.738081][ T7677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.761274][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.768781][ T7677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.808883][ T7677] veth1_vlan: left promiscuous mode [ 377.830780][ T7677] veth0_vlan: left promiscuous mode [ 378.424029][ T7677] team0 (unregistering): Port device team_slave_1 removed [ 378.464115][ T7677] team0 (unregistering): Port device team_slave_0 removed [ 378.582716][ T5935] Bluetooth: hci3: command tx timeout [ 378.817751][T13269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.826423][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.862447][T13269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.887115][T13269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.894184][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.920798][T13269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.015073][T13269] hsr_slave_0: entered promiscuous mode [ 379.021759][T13269] hsr_slave_1: entered promiscuous mode [ 380.292217][T13377] netlink: 'syz.1.2905': attribute type 2 has an invalid length. [ 380.308059][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 380.663956][ T5935] Bluetooth: hci3: command tx timeout [ 380.958696][T13269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.043666][T13269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.116583][T13269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.320521][T13269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 381.808134][T13269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.928854][T13269] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.961306][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.968479][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.037426][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.044589][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.144444][T13269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.162299][T13269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.742650][ T5935] Bluetooth: hci3: command tx timeout [ 382.789843][T13269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.854718][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 382.879086][T13269] veth0_vlan: entered promiscuous mode [ 382.885085][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 382.914286][T13269] veth1_vlan: entered promiscuous mode [ 382.938412][T13435] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2911'. [ 382.983384][T13435] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2911'. [ 383.060267][T13269] veth0_macvtap: entered promiscuous mode [ 383.136810][T13269] veth1_macvtap: entered promiscuous mode [ 383.198616][T13269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.238534][T13269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.288654][ T6151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.328880][ T6151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.377871][ T6151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.432023][ T6151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.562482][ T7678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.590487][ T7678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.705278][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.715084][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.867357][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.873836][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.922499][T13455] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 384.660989][T13479] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 384.733870][T13478] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 386.580352][T13527] FAULT_INJECTION: forcing a failure. [ 386.580352][T13527] name failslab, interval 1, probability 0, space 0, times 0 [ 386.627887][T13527] CPU: 1 UID: 0 PID: 13527 Comm: syz.0.2929 Tainted: G U L syzkaller #0 PREEMPT(full) [ 386.627930][T13527] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 386.627940][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.627954][T13527] Call Trace: [ 386.627963][T13527] [ 386.627972][T13527] dump_stack_lvl+0x16c/0x1f0 [ 386.628014][T13527] should_fail_ex+0x512/0x640 [ 386.628040][T13527] ? fs_reclaim_acquire+0xae/0x150 [ 386.628079][T13527] should_failslab+0xc2/0x120 [ 386.628113][T13527] __kmalloc_noprof+0xeb/0x910 [ 386.628139][T13527] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 386.628178][T13527] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 386.628210][T13527] tomoyo_realpath_from_path+0xc2/0x6e0 [ 386.628252][T13527] tomoyo_check_open_permission+0x2ab/0x3c0 [ 386.628273][T13527] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 386.628308][T13527] ? do_raw_spin_lock+0x12c/0x2b0 [ 386.628331][T13527] tomoyo_file_open+0x6b/0x90 [ 386.628353][T13527] security_file_open+0x84/0x1e0 [ 386.628380][T13527] do_dentry_open+0x597/0x1590 [ 386.628407][T13527] ? security_inode_permission+0xbf/0x260 [ 386.628439][T13527] vfs_open+0x82/0x3f0 [ 386.628470][T13527] path_openat+0x2078/0x3140 [ 386.628502][T13527] ? __pfx_path_openat+0x10/0x10 [ 386.628530][T13527] do_filp_open+0x20b/0x470 [ 386.628552][T13527] ? __pfx_do_filp_open+0x10/0x10 [ 386.628587][T13527] ? alloc_fd+0x471/0x7d0 [ 386.628613][T13527] do_sys_openat2+0x121/0x290 [ 386.628629][T13527] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.628652][T13527] __x64_sys_openat+0x174/0x210 [ 386.628668][T13527] ? __pfx___x64_sys_openat+0x10/0x10 [ 386.628692][T13527] do_syscall_64+0xcd/0xf80 [ 386.628716][T13527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.628731][T13527] RIP: 0033:0x7f3fbdf8f7c9 [ 386.628744][T13527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.628757][T13527] RSP: 002b:00007f3fbedc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 386.628772][T13527] RAX: ffffffffffffffda RBX: 00007f3fbe1e5fa0 RCX: 00007f3fbdf8f7c9 [ 386.628781][T13527] RDX: 000000000002c201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 386.628790][T13527] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.628799][T13527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.628807][T13527] R13: 00007f3fbe1e6038 R14: 00007f3fbe1e5fa0 R15: 00007ffeab864708 [ 386.628826][T13527] [ 386.724609][T13527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.614964][T13552] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 388.887921][T13559] FAULT_INJECTION: forcing a failure. [ 388.887921][T13559] name failslab, interval 1, probability 0, space 0, times 0 [ 388.937635][T13559] CPU: 1 UID: 0 PID: 13559 Comm: syz.1.2936 Tainted: G U L syzkaller #0 PREEMPT(full) [ 388.937682][T13559] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 388.937692][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.937708][T13559] Call Trace: [ 388.937716][T13559] [ 388.937727][T13559] dump_stack_lvl+0x16c/0x1f0 [ 388.937769][T13559] should_fail_ex+0x512/0x640 [ 388.937795][T13559] ? kmem_cache_alloc_noprof+0x62/0x770 [ 388.937831][T13559] should_failslab+0xc2/0x120 [ 388.937869][T13559] kmem_cache_alloc_noprof+0x83/0x770 [ 388.937901][T13559] ? getname_flags.part.0+0x4c/0x550 [ 388.937936][T13559] ? getname_flags.part.0+0x4c/0x550 [ 388.937963][T13559] getname_flags.part.0+0x4c/0x550 [ 388.937993][T13559] getname_flags+0x93/0xf0 [ 388.938026][T13559] do_sys_openat2+0xb9/0x290 [ 388.938051][T13559] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.938078][T13559] ? __pfx___up_read+0x10/0x10 [ 388.938106][T13559] ? __do_sys_kcmp+0x36b/0xd70 [ 388.938152][T13559] __x64_sys_openat+0x174/0x210 [ 388.938182][T13559] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.938226][T13559] do_syscall_64+0xcd/0xf80 [ 388.938274][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.938302][T13559] RIP: 0033:0x7f0ce578e010 [ 388.938325][T13559] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 388.938350][T13559] RSP: 002b:00007f0ce66a4f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 388.938375][T13559] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0ce578e010 [ 388.938393][T13559] RDX: 0000000000000002 RSI: 00007f0ce66a4fa0 RDI: 00000000ffffff9c [ 388.938410][T13559] RBP: 00007f0ce66a4fa0 R08: 0000000000000000 R09: 00007f0ce66a4cd5 [ 388.938427][T13559] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 388.938442][T13559] R13: 00007f0ce59e6038 R14: 00007f0ce59e5fa0 R15: 00007ffef2f7ee38 [ 388.938478][T13559] [ 389.226763][T13564] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2937'. [ 389.278230][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 389.967817][T13576] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 390.089404][T13576] futex_wake_op: syz.0.2939 tries to shift op by -1; fix this program [ 390.118405][T13576] FAULT_INJECTION: forcing a failure. [ 390.118405][T13576] name failslab, interval 1, probability 0, space 0, times 0 [ 390.150425][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.0.2939 Tainted: G U L syzkaller #0 PREEMPT(full) [ 390.150473][T13576] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 390.150483][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.150500][T13576] Call Trace: [ 390.150508][T13576] [ 390.150518][T13576] dump_stack_lvl+0x16c/0x1f0 [ 390.150563][T13576] should_fail_ex+0x512/0x640 [ 390.150593][T13576] ? kmem_cache_alloc_noprof+0x62/0x770 [ 390.150630][T13576] should_failslab+0xc2/0x120 [ 390.150669][T13576] kmem_cache_alloc_noprof+0x83/0x770 [ 390.150698][T13576] ? stack_depot_save_flags+0x29/0x9b0 [ 390.150725][T13576] ? alloc_empty_file+0x55/0x1e0 [ 390.150755][T13576] ? alloc_empty_file+0x55/0x1e0 [ 390.150779][T13576] ? kasan_save_track+0x14/0x30 [ 390.150812][T13576] alloc_empty_file+0x55/0x1e0 [ 390.150839][T13576] path_openat+0xde/0x3140 [ 390.150871][T13576] ? do_syscall_64+0xcd/0xf80 [ 390.150903][T13576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.150937][T13576] ? __pfx_path_openat+0x10/0x10 [ 390.150979][T13576] do_filp_open+0x20b/0x470 [ 390.151010][T13576] ? __pfx_do_filp_open+0x10/0x10 [ 390.151060][T13576] ? alloc_fd+0x471/0x7d0 [ 390.151108][T13576] do_sys_openat2+0x121/0x290 [ 390.151132][T13576] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.151167][T13576] __x64_sys_openat+0x174/0x210 [ 390.151191][T13576] ? __pfx___x64_sys_openat+0x10/0x10 [ 390.151218][T13576] ? syscall_user_dispatch+0x78/0x140 [ 390.151252][T13576] do_syscall_64+0xcd/0xf80 [ 390.151283][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.151304][T13576] RIP: 0033:0x7f3fbdf8f7c9 [ 390.151321][T13576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.151341][T13576] RSP: 002b:00007f3fbedc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.151361][T13576] RAX: ffffffffffffffda RBX: 00007f3fbe1e5fa0 RCX: 00007f3fbdf8f7c9 [ 390.151374][T13576] RDX: 0000000000020000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 390.151387][T13576] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.151400][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.151412][T13576] R13: 00007f3fbe1e6038 R14: 00007f3fbe1e5fa0 R15: 00007ffeab864708 [ 390.151444][T13576] [ 391.227660][T13610] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a [ 391.722533][T13597] dump_stack_lvl+0x16c/0x1f0 [ 391.722577][T13597] should_fail_ex+0x512/0x640 [ 391.722612][T13597] should_fail_alloc_page+0xe7/0x130 [ 391.722655][T13597] prepare_alloc_pages+0x401/0x670 [ 391.722694][T13597] ? stack_depot_save_flags+0x29/0x9b0 [ 391.722731][T13597] ? rcu_is_watching+0x12/0xc0 [ 391.722770][T13597] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 391.722801][T13597] ? kasan_save_stack+0x42/0x60 [ 391.722830][T13597] ? kasan_save_track+0x14/0x30 [ 391.722860][T13597] ? __kasan_slab_alloc+0x89/0x90 [ 391.722892][T13597] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 391.722921][T13597] ? ptlock_alloc+0x1f/0x70 [ 391.722945][T13597] ? pte_alloc_one+0x84/0x3d0 [ 391.722976][T13597] ? __pte_alloc+0x6d/0x3f0 [ 391.723008][T13597] ? copy_page_range+0x3f3e/0x6780 [ 391.723033][T13597] ? copy_process+0x3b9f/0x7430 [ 391.723073][T13597] ? __lock_acquire+0x436/0x2890 [ 391.723101][T13597] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 391.723137][T13597] ? __lock_acquire+0x436/0x2890 [ 391.723171][T13597] ? __lock_acquire+0x436/0x2890 [ 391.723200][T13597] ? __lock_acquire+0x436/0x2890 [ 391.723222][T13597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 391.723263][T13597] ? policy_nodemask+0xea/0x4e0 [ 391.723304][T13597] alloc_pages_mpol+0x1fb/0x550 [ 391.723344][T13597] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 391.723392][T13597] alloc_pages_noprof+0x131/0x390 [ 391.723432][T13597] pte_alloc_one+0x1e/0x3d0 [ 391.723468][T13597] __pte_alloc+0x6d/0x3f0 [ 391.723502][T13597] ? __pfx___pte_alloc+0x10/0x10 [ 391.723536][T13597] ? __pfx___might_resched+0x10/0x10 [ 391.723571][T13597] ? copy_page_range+0x22fb/0x6780 [ 391.723603][T13597] copy_page_range+0x3f3e/0x6780 [ 391.723674][T13597] ? __pfx_copy_page_range+0x10/0x10 [ 391.723723][T13597] ? __pfx___might_resched+0x10/0x10 [ 391.723758][T13597] ? __pfx_mas_store+0x10/0x10 [ 391.723789][T13597] ? dup_mmap+0xba4/0x20e0 [ 391.723809][T13597] ? down_write+0x14d/0x200 [ 391.723837][T13597] ? up_write+0x282/0x4e0 [ 391.723867][T13597] dup_mmap+0xbea/0x20e0 [ 391.723905][T13597] ? __pfx_dup_mmap+0x10/0x10 [ 391.723964][T13597] copy_process+0x3b9f/0x7430 [ 391.723999][T13597] ? preempt_schedule_thunk+0x16/0x30 [ 391.724040][T13597] ? __pfx_copy_process+0x10/0x10 [ 391.724075][T13597] ? find_held_lock+0x2b/0x80 [ 391.724113][T13597] ? futex_private_hash_put+0x160/0x1b0 [ 391.724148][T13597] kernel_clone+0xfc/0x910 [ 391.724186][T13597] ? __pfx_futex_wake+0x10/0x10 [ 391.724218][T13597] ? __pfx_kernel_clone+0x10/0x10 [ 391.724251][T13597] ? __pfx_vfs_writev+0x10/0x10 [ 391.724303][T13597] __do_sys_clone+0xce/0x120 [ 391.724337][T13597] ? __pfx___do_sys_clone+0x10/0x10 [ 391.724390][T13597] ? xfd_validate_state+0x61/0x180 [ 391.724412][T13597] ? __pfx_do_writev+0x10/0x10 [ 391.724454][T13597] do_syscall_64+0xcd/0xf80 [ 391.724493][T13597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.724518][T13597] RIP: 0033:0x7f3fbdf8f7c9 [ 391.724539][T13597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.724564][T13597] RSP: 002b:00007f3fbeda0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 391.724587][T13597] RAX: ffffffffffffffda RBX: 00007f3fbe1e6090 RCX: 00007f3fbdf8f7c9 [ 391.724604][T13597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 391.724619][T13597] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.724640][T13597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 391.724654][T13597] R13: 00007f3fbe1e6128 R14: 00007f3fbe1e6090 R15: 00007ffeab864708 [ 391.724694][T13597] [ 392.679466][T13647] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 393.006836][T13659] FAULT_INJECTION: forcing a failure. [ 393.006836][T13659] name failslab, interval 1, probability 0, space 0, times 0 [ 393.020816][T13659] CPU: 0 UID: 0 PID: 13659 Comm: syz.2.2953 Tainted: G U L syzkaller #0 PREEMPT(full) [ 393.020864][T13659] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 393.020875][T13659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.020891][T13659] Call Trace: [ 393.020900][T13659] [ 393.020910][T13659] dump_stack_lvl+0x16c/0x1f0 [ 393.020956][T13659] should_fail_ex+0x512/0x640 [ 393.020985][T13659] ? kmem_cache_alloc_noprof+0x62/0x770 [ 393.021021][T13659] should_failslab+0xc2/0x120 [ 393.021063][T13659] kmem_cache_alloc_noprof+0x83/0x770 [ 393.021102][T13659] ? security_file_alloc+0x34/0x2b0 [ 393.021143][T13659] ? security_file_alloc+0x34/0x2b0 [ 393.021176][T13659] security_file_alloc+0x34/0x2b0 [ 393.021212][T13659] init_file+0x93/0x4c0 [ 393.021240][T13659] alloc_empty_file+0x73/0x1e0 [ 393.021269][T13659] alloc_file_pseudo+0x13a/0x230 [ 393.021301][T13659] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 393.021331][T13659] ? alloc_fd+0x471/0x7d0 [ 393.021374][T13659] sock_alloc_file+0x50/0x210 [ 393.021409][T13659] __sys_socket+0x1c0/0x260 [ 393.021432][T13659] ? __pfx___sys_socket+0x10/0x10 [ 393.021458][T13659] ? do_user_addr_fault+0x843/0x1370 [ 393.021494][T13659] __x64_sys_socket+0x72/0xb0 [ 393.021517][T13659] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.021555][T13659] do_syscall_64+0xcd/0xf80 [ 393.021604][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.021630][T13659] RIP: 0033:0x7fb2de1916e7 [ 393.021650][T13659] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.021672][T13659] RSP: 002b:00007fb2def49fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 393.021697][T13659] RAX: ffffffffffffffda RBX: 00007fb2de3e5fa0 RCX: 00007fb2de1916e7 [ 393.021714][T13659] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 393.021730][T13659] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 393.021746][T13659] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000000 [ 393.021760][T13659] R13: 00007fb2de3e6038 R14: 00007fb2de3e5fa0 R15: 00007ffea4e6a118 [ 393.021795][T13659] [ 394.030586][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2959'. [ 394.042919][T13692] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 394.534705][T13699] zswap: compressor not available [ 394.885268][T13700] zswap: compressor not available [ 394.990282][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 395.235574][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.273583][T13720] 0x001c00000000-0x100002c00000200 : "" [ 395.308759][T13720] mtd: partition "" is out of reach -- disabled [ 395.319056][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.347308][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.366522][T13720] ftl_cs: FTL header not found. [ 395.371785][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.408437][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.424423][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.434061][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.478282][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.494836][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.533359][T13718] futex_wake_op: syz.1.2965 tries to shift op by -2048; fix this program [ 395.600378][ T5935] Bluetooth: hci1: unknown advertising packet type: 0xea [ 395.632559][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2968'. [ 396.860376][T13777] Invalid ELF header magic: != ELF [ 397.064366][T13781] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 397.085687][T13781] net nr1: uevent: failed to send synthetic uevent: -22 [ 399.707682][T13838] ERROR: Out of memory at tomoyo_memory_ok. [ 401.393464][T13877] FAULT_INJECTION: forcing a failure. [ 401.393464][T13877] name failslab, interval 1, probability 0, space 0, times 0 [ 401.484327][T13877] CPU: 0 UID: 0 PID: 13877 Comm: syz.0.3002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 401.484355][T13877] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 401.484360][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.484369][T13877] Call Trace: [ 401.484374][T13877] [ 401.484380][T13877] dump_stack_lvl+0x16c/0x1f0 [ 401.484407][T13877] should_fail_ex+0x512/0x640 [ 401.484432][T13877] ? fs_reclaim_acquire+0xae/0x150 [ 401.484470][T13877] should_failslab+0xc2/0x120 [ 401.484505][T13877] __kmalloc_noprof+0xeb/0x910 [ 401.484522][T13877] ? tomoyo_encode2+0x100/0x3e0 [ 401.484546][T13877] ? tomoyo_encode2+0x100/0x3e0 [ 401.484563][T13877] tomoyo_encode2+0x100/0x3e0 [ 401.484584][T13877] tomoyo_encode+0x29/0x50 [ 401.484603][T13877] tomoyo_realpath_from_path+0x18f/0x6e0 [ 401.484628][T13877] tomoyo_check_open_permission+0x2ab/0x3c0 [ 401.484646][T13877] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 401.484681][T13877] ? do_raw_spin_lock+0x12c/0x2b0 [ 401.484703][T13877] tomoyo_file_open+0x6b/0x90 [ 401.484737][T13877] security_file_open+0x84/0x1e0 [ 401.484766][T13877] do_dentry_open+0x597/0x1590 [ 401.484789][T13877] ? security_inode_permission+0xbf/0x260 [ 401.484809][T13877] vfs_open+0x82/0x3f0 [ 401.484826][T13877] path_openat+0x2078/0x3140 [ 401.484854][T13877] ? __pfx_path_openat+0x10/0x10 [ 401.484882][T13877] do_filp_open+0x20b/0x470 [ 401.484912][T13877] ? __pfx_do_filp_open+0x10/0x10 [ 401.484947][T13877] ? alloc_fd+0x471/0x7d0 [ 401.484973][T13877] do_sys_openat2+0x121/0x290 [ 401.484989][T13877] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.485012][T13877] __x64_sys_openat+0x174/0x210 [ 401.485028][T13877] ? __pfx___x64_sys_openat+0x10/0x10 [ 401.485046][T13877] ? syscall_user_dispatch+0x78/0x140 [ 401.485070][T13877] do_syscall_64+0xcd/0xf80 [ 401.485093][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.485109][T13877] RIP: 0033:0x7f3fbdf8f7c9 [ 401.485120][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.485134][T13877] RSP: 002b:00007f3fbeda1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.485151][T13877] RAX: ffffffffffffffda RBX: 00007f3fbe1e6090 RCX: 00007f3fbdf8f7c9 [ 401.485160][T13877] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 401.485169][T13877] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.485178][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.485186][T13877] R13: 00007f3fbe1e6128 R14: 00007f3fbe1e6090 R15: 00007ffeab864708 [ 401.485205][T13877] [ 401.485228][T13877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.803794][T13882] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 402.221572][T13897] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 402.999087][ T30] audit: type=1800 audit(5529314013.962:14): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3008" name="members" dev="configfs" ino=54942 res=0 errno=0 [ 403.582580][T13927] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 403.855686][T13936] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 404.855783][T13954] [U] [ 404.858637][T13954] [U] [ 404.861365][T13954] [U] [ 404.864082][T13954] [U] [ 404.867892][T13954] [U] [ 404.870625][T13954] [U] [ 404.873342][T13954] [U] [ 404.876055][T13954] [U] [ 404.879645][T13954] [U] [ 404.882373][T13954] [U] [ 404.885087][T13954] [U] [ 404.887797][T13954] [U] [ 404.891401][T13954] [U] [ 404.894130][T13954] [U] [ 404.896851][T13954] [U] [ 404.899563][T13954] [U] [ 404.903309][T13954] [U] [ 404.906040][T13954] [U] [ 404.908756][T13954] [U] [ 404.911475][T13954] [U] [ 404.937355][T13954] [U] [ 406.006129][T13988] netlink: Conntrack attr has 16 unknown bytes [ 406.025229][T13988] FAULT_INJECTION: forcing a failure. [ 406.025229][T13988] name failslab, interval 1, probability 0, space 0, times 0 [ 406.041351][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.2.3025 Tainted: G U L syzkaller #0 PREEMPT(full) [ 406.041394][T13988] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 406.041400][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.041410][T13988] Call Trace: [ 406.041416][T13988] [ 406.041429][T13988] dump_stack_lvl+0x16c/0x1f0 [ 406.041457][T13988] should_fail_ex+0x512/0x640 [ 406.041475][T13988] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 406.041496][T13988] should_failslab+0xc2/0x120 [ 406.041519][T13988] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 406.041539][T13988] ? __d_alloc+0x35/0xa80 [ 406.041555][T13988] ? __d_alloc+0x35/0xa80 [ 406.041567][T13988] __d_alloc+0x35/0xa80 [ 406.041581][T13988] d_alloc_pseudo+0x1c/0xc0 [ 406.041599][T13988] alloc_file_pseudo+0xcf/0x230 [ 406.041616][T13988] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 406.041632][T13988] ? alloc_fd+0x471/0x7d0 [ 406.041656][T13988] sock_alloc_file+0x50/0x210 [ 406.041678][T13988] __sys_socket+0x1c0/0x260 [ 406.041692][T13988] ? __pfx___sys_socket+0x10/0x10 [ 406.041705][T13988] ? xfd_validate_state+0x61/0x180 [ 406.041724][T13988] __x64_sys_socket+0x72/0xb0 [ 406.041737][T13988] ? lockdep_hardirqs_on+0x7c/0x110 [ 406.041760][T13988] do_syscall_64+0xcd/0xf80 [ 406.041784][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.041798][T13988] RIP: 0033:0x7fb2de18f7c9 [ 406.041812][T13988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.041826][T13988] RSP: 002b:00007fb2def4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 406.041840][T13988] RAX: ffffffffffffffda RBX: 00007fb2de3e5fa0 RCX: 00007fb2de18f7c9 [ 406.041850][T13988] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 406.041858][T13988] RBP: 00007fb2de213f91 R08: 0000000000000000 R09: 0000000000000000 [ 406.041867][T13988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.041875][T13988] R13: 00007fb2de3e6038 R14: 00007fb2de3e5fa0 R15: 00007ffea4e6a118 [ 406.041895][T13988] [ 406.379022][T13989] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 406.824220][T14001] sp0: Synchronizing with TNC [ 407.061150][T14011] synth uevent: /module/orangefs: unknown uevent action string [ 407.145125][T14015] bridge0: port 3(hsr0) entered blocking state [ 407.151991][T14015] bridge0: port 3(hsr0) entered disabled state [ 407.158821][T14015] hsr0: entered allmulticast mode [ 407.164013][T14015] hsr_slave_0: entered allmulticast mode [ 407.174175][T14015] hsr_slave_1: entered allmulticast mode [ 407.181517][T14015] hsr0: entered promiscuous mode [ 407.220821][T14015] bridge0: port 3(hsr0) entered blocking state [ 407.227086][T14015] bridge0: port 3(hsr0) entered forwarding state [ 407.327010][T14023] netlink: 'syz.0.3033': attribute type 1 has an invalid length. [ 407.356990][T14023] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3033'. [ 407.944868][T14036] FAULT_INJECTION: forcing a failure. [ 407.944868][T14036] name failslab, interval 1, probability 0, space 0, times 0 [ 407.958588][T14036] CPU: 1 UID: 0 PID: 14036 Comm: syz.3.3038 Tainted: G U L syzkaller #0 PREEMPT(full) [ 407.958629][T14036] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 407.958639][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.958652][T14036] Call Trace: [ 407.958660][T14036] [ 407.958668][T14036] dump_stack_lvl+0x16c/0x1f0 [ 407.958709][T14036] should_fail_ex+0x512/0x640 [ 407.958738][T14036] ? fs_reclaim_acquire+0xae/0x150 [ 407.958777][T14036] should_failslab+0xc2/0x120 [ 407.958813][T14036] __kmalloc_noprof+0xeb/0x910 [ 407.958840][T14036] ? tomoyo_encode2+0x100/0x3e0 [ 407.958878][T14036] ? tomoyo_encode2+0x100/0x3e0 [ 407.958906][T14036] tomoyo_encode2+0x100/0x3e0 [ 407.958940][T14036] tomoyo_encode+0x29/0x50 [ 407.958971][T14036] tomoyo_realpath_from_path+0x18f/0x6e0 [ 407.959018][T14036] tomoyo_mkdev_perm+0x22b/0x570 [ 407.959048][T14036] ? tomoyo_mkdev_perm+0x217/0x570 [ 407.959082][T14036] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 407.959113][T14036] ? do_raw_spin_lock+0x12c/0x2b0 [ 407.959153][T14036] ? do_raw_spin_unlock+0x172/0x230 [ 407.959203][T14036] ? __pfx_current_check_access_path+0x10/0x10 [ 407.959240][T14036] ? simple_lookup+0x105/0x1d0 [ 407.959283][T14036] tomoyo_path_mknod+0x12a/0x190 [ 407.959321][T14036] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 407.959362][T14036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 407.959406][T14036] security_path_mknod+0x161/0x310 [ 407.959439][T14036] do_mknodat+0x24e/0x6f0 [ 407.959479][T14036] ? __pfx_do_mknodat+0x10/0x10 [ 407.959516][T14036] ? getname_flags.part.0+0x1c5/0x550 [ 407.959554][T14036] __x64_sys_mknod+0x87/0xb0 [ 407.959603][T14036] do_syscall_64+0xcd/0xf80 [ 407.959645][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.959671][T14036] RIP: 0033:0x7f851038f7c9 [ 407.959690][T14036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.959716][T14036] RSP: 002b:00007f85112d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 407.959742][T14036] RAX: ffffffffffffffda RBX: 00007f85105e5fa0 RCX: 00007f851038f7c9 [ 407.959760][T14036] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 407.959776][T14036] RBP: 00007f8510413f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.959793][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.959809][T14036] R13: 00007f85105e6038 R14: 00007f85105e5fa0 R15: 00007ffcc806fe78 [ 407.959848][T14036] [ 407.960738][T14036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.523854][T14020] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 408.540319][T14020] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 408.564778][T14020] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 408.586416][T14020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.618582][T14020] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 408.638636][T14020] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 408.692221][T14020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.727638][T14020] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 408.756710][T14020] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 408.811292][T14020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.834664][T14020] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 408.877421][T14020] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 409.102671][T14049] program syz.1.3041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.106509][T14052] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 409.190500][T14055] FAULT_INJECTION: forcing a failure. [ 409.190500][T14055] name fail_futex, interval 1, probability 0, space 0, times 0 [ 409.247064][T14055] CPU: 0 UID: 0 PID: 14055 Comm: syz.3.3042 Tainted: G U L syzkaller #0 PREEMPT(full) [ 409.247109][T14055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 409.247117][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.247139][T14055] Call Trace: [ 409.247148][T14055] [ 409.247158][T14055] dump_stack_lvl+0x16c/0x1f0 [ 409.247198][T14055] should_fail_ex+0x512/0x640 [ 409.247230][T14055] get_futex_key+0x1d0/0x15f0 [ 409.247261][T14055] ? __pfx_get_futex_key+0x10/0x10 [ 409.247285][T14055] ? find_held_lock+0x2b/0x80 [ 409.247327][T14055] futex_wake+0xea/0x530 [ 409.247363][T14055] ? __pfx_futex_wake+0x10/0x10 [ 409.247403][T14055] ? find_held_lock+0x2b/0x80 [ 409.247437][T14055] do_futex+0x1e3/0x350 [ 409.247469][T14055] ? __pfx_do_futex+0x10/0x10 [ 409.247506][T14055] __x64_sys_futex+0x1e0/0x4c0 [ 409.247536][T14055] ? __pfx_do_readv+0x10/0x10 [ 409.247567][T14055] ? __pfx___x64_sys_futex+0x10/0x10 [ 409.247595][T14055] ? xfd_validate_state+0x61/0x180 [ 409.247630][T14055] do_syscall_64+0xcd/0xf80 [ 409.247667][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.247692][T14055] RIP: 0033:0x7f851038f7c9 [ 409.247712][T14055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.247735][T14055] RSP: 002b:00007f85112d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 409.247760][T14055] RAX: ffffffffffffffda RBX: 00007f85105e5fa8 RCX: 00007f851038f7c9 [ 409.247777][T14055] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f85105e5fac [ 409.247794][T14055] RBP: 00007f85105e5fa0 R08: 00007f85112d1000 R09: 0000000000000000 [ 409.247810][T14055] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 409.247826][T14055] R13: 00007f85105e6038 R14: 00007ffcc806fd90 R15: 00007ffcc806fe78 [ 409.247862][T14055] [ 409.518321][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 409.696009][T14049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3041'. [ 409.738545][T14049] ipvlan0: entered promiscuous mode [ 409.748496][T14049] ipvlan0: entered allmulticast mode [ 409.754056][T14049] veth0_vlan: entered allmulticast mode [ 409.787841][T14051] netlink: set zone limit has 8 unknown bytes [ 409.836141][T14068] input: f¬ as /devices/virtual/input/input17 [ 409.951975][T14072] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 410.333807][T14085] FAULT_INJECTION: forcing a failure. [ 410.333807][T14085] name failslab, interval 1, probability 0, space 0, times 0 [ 410.498643][T14085] CPU: 1 UID: 0 PID: 14085 Comm: syz.1.3048 Tainted: G U L syzkaller #0 PREEMPT(full) [ 410.498690][T14085] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 410.498701][T14085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.498717][T14085] Call Trace: [ 410.498726][T14085] [ 410.498738][T14085] dump_stack_lvl+0x16c/0x1f0 [ 410.498784][T14085] should_fail_ex+0x512/0x640 [ 410.498812][T14085] ? fs_reclaim_acquire+0xae/0x150 [ 410.498856][T14085] should_failslab+0xc2/0x120 [ 410.498895][T14085] __kmalloc_noprof+0xeb/0x910 [ 410.498926][T14085] ? tomoyo_encode2+0x100/0x3e0 [ 410.498975][T14085] ? tomoyo_encode2+0x100/0x3e0 [ 410.499026][T14085] tomoyo_encode2+0x100/0x3e0 [ 410.499066][T14085] tomoyo_encode+0x29/0x50 [ 410.499098][T14085] tomoyo_realpath_from_path+0x18f/0x6e0 [ 410.499142][T14085] tomoyo_mkdev_perm+0x22b/0x570 [ 410.499171][T14085] ? tomoyo_mkdev_perm+0x217/0x570 [ 410.499203][T14085] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 410.499233][T14085] ? do_raw_spin_lock+0x12c/0x2b0 [ 410.499272][T14085] ? do_raw_spin_unlock+0x172/0x230 [ 410.499322][T14085] ? __pfx_current_check_access_path+0x10/0x10 [ 410.499360][T14085] ? simple_lookup+0x105/0x1d0 [ 410.499411][T14085] tomoyo_path_mknod+0x12a/0x190 [ 410.499452][T14085] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 410.499493][T14085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 410.499536][T14085] security_path_mknod+0x161/0x310 [ 410.499568][T14085] do_mknodat+0x24e/0x6f0 [ 410.499609][T14085] ? __pfx_do_mknodat+0x10/0x10 [ 410.499647][T14085] ? getname_flags.part.0+0x1c5/0x550 [ 410.499683][T14085] __x64_sys_mknod+0x87/0xb0 [ 410.499723][T14085] do_syscall_64+0xcd/0xf80 [ 410.499765][T14085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.499793][T14085] RIP: 0033:0x7f0ce578f7c9 [ 410.499815][T14085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.499840][T14085] RSP: 002b:00007f0ce66a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 410.499867][T14085] RAX: ffffffffffffffda RBX: 00007f0ce59e5fa0 RCX: 00007f0ce578f7c9 [ 410.499886][T14085] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 410.499903][T14085] RBP: 00007f0ce5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.499918][T14085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.499938][T14085] R13: 00007f0ce59e6038 R14: 00007f0ce59e5fa0 R15: 00007ffef2f7ee38 [ 410.499976][T14085] [ 410.501903][T14085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 410.598782][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.762010][ T9219] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.840220][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.302351][T14101] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 411.548415][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 412.224213][T14131] binder: 14130:14131 ioctl c018620c 0 returned -22 [ 412.326421][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3057'. [ 412.658306][ T5935] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 412.828461][ T9219] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.836093][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.920740][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 413.018854][T14155] FAULT_INJECTION: forcing a failure. [ 413.018854][T14155] name failslab, interval 1, probability 0, space 0, times 0 [ 413.048685][T14155] CPU: 1 UID: 0 PID: 14155 Comm: syz.2.3062 Tainted: G U L syzkaller #0 PREEMPT(full) [ 413.048733][T14155] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 413.048744][T14155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.048759][T14155] Call Trace: [ 413.048768][T14155] [ 413.048778][T14155] dump_stack_lvl+0x16c/0x1f0 [ 413.048822][T14155] should_fail_ex+0x512/0x640 [ 413.048848][T14155] ? fs_reclaim_acquire+0xae/0x150 [ 413.048891][T14155] should_failslab+0xc2/0x120 [ 413.048932][T14155] __kmalloc_noprof+0xeb/0x910 [ 413.048960][T14155] ? tomoyo_encode2+0x100/0x3e0 [ 413.048999][T14155] ? tomoyo_encode2+0x100/0x3e0 [ 413.049031][T14155] tomoyo_encode2+0x100/0x3e0 [ 413.049069][T14155] tomoyo_encode+0x29/0x50 [ 413.049102][T14155] tomoyo_realpath_from_path+0x18f/0x6e0 [ 413.049161][T14155] tomoyo_mkdev_perm+0x22b/0x570 [ 413.049188][T14155] ? tomoyo_mkdev_perm+0x217/0x570 [ 413.049219][T14155] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 413.049248][T14155] ? do_raw_spin_lock+0x12c/0x2b0 [ 413.049286][T14155] ? do_raw_spin_unlock+0x172/0x230 [ 413.049328][T14155] ? __pfx_current_check_access_path+0x10/0x10 [ 413.049365][T14155] ? simple_lookup+0x105/0x1d0 [ 413.049407][T14155] tomoyo_path_mknod+0x12a/0x190 [ 413.049446][T14155] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 413.049485][T14155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.049525][T14155] security_path_mknod+0x161/0x310 [ 413.049557][T14155] do_mknodat+0x24e/0x6f0 [ 413.049595][T14155] ? __pfx_do_mknodat+0x10/0x10 [ 413.049631][T14155] ? getname_flags.part.0+0x1c5/0x550 [ 413.049670][T14155] __x64_sys_mknod+0x87/0xb0 [ 413.049698][T14155] do_syscall_64+0xcd/0xf80 [ 413.049722][T14155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.049737][T14155] RIP: 0033:0x7fb2de18f7c9 [ 413.049752][T14155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.049767][T14155] RSP: 002b:00007fb2def4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 413.049782][T14155] RAX: ffffffffffffffda RBX: 00007fb2de3e5fa0 RCX: 00007fb2de18f7c9 [ 413.049792][T14155] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 413.049801][T14155] RBP: 00007fb2de213f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.049810][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.049819][T14155] R13: 00007fb2de3e6038 R14: 00007fb2de3e5fa0 R15: 00007ffea4e6a118 [ 413.049840][T14155] [ 413.529355][T14155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 413.629121][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 413.665026][T14158] ima: policy update failed [ 413.669775][ T30] audit: type=1802 audit(5529314024.632:15): pid=14158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3063" res=0 errno=0 [ 414.908374][ T9219] Bluetooth: hci2: command 0x0c1a tx timeout [ 414.914678][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 414.991515][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 415.948802][T14202] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 417.633621][T14236] FAULT_INJECTION: forcing a failure. [ 417.633621][T14236] name failslab, interval 1, probability 0, space 0, times 0 [ 417.665639][T14236] CPU: 1 UID: 0 PID: 14236 Comm: syz.0.3080 Tainted: G U L syzkaller #0 PREEMPT(full) [ 417.665687][T14236] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 417.665696][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.665720][T14236] Call Trace: [ 417.665729][T14236] [ 417.665740][T14236] dump_stack_lvl+0x16c/0x1f0 [ 417.665785][T14236] should_fail_ex+0x512/0x640 [ 417.665813][T14236] ? fs_reclaim_acquire+0xae/0x150 [ 417.665855][T14236] should_failslab+0xc2/0x120 [ 417.665892][T14236] __kmalloc_noprof+0xeb/0x910 [ 417.665922][T14236] ? tomoyo_encode2+0x100/0x3e0 [ 417.665962][T14236] ? tomoyo_encode2+0x100/0x3e0 [ 417.665993][T14236] tomoyo_encode2+0x100/0x3e0 [ 417.666031][T14236] tomoyo_encode+0x29/0x50 [ 417.666062][T14236] tomoyo_realpath_from_path+0x18f/0x6e0 [ 417.666114][T14236] tomoyo_mkdev_perm+0x22b/0x570 [ 417.666141][T14236] ? tomoyo_mkdev_perm+0x217/0x570 [ 417.666172][T14236] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 417.666271][T14236] ? do_raw_spin_lock+0x12c/0x2b0 [ 417.666313][T14236] ? do_raw_spin_unlock+0x172/0x230 [ 417.666364][T14236] ? __pfx_current_check_access_path+0x10/0x10 [ 417.666401][T14236] ? simple_lookup+0x105/0x1d0 [ 417.666443][T14236] tomoyo_path_mknod+0x12a/0x190 [ 417.666482][T14236] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 417.666523][T14236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.666567][T14236] security_path_mknod+0x161/0x310 [ 417.666600][T14236] do_mknodat+0x24e/0x6f0 [ 417.666643][T14236] ? __pfx_do_mknodat+0x10/0x10 [ 417.666680][T14236] ? getname_flags.part.0+0x1c5/0x550 [ 417.666724][T14236] __x64_sys_mknod+0x87/0xb0 [ 417.666765][T14236] do_syscall_64+0xcd/0xf80 [ 417.666806][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.666833][T14236] RIP: 0033:0x7f3fbdf8f7c9 [ 417.666855][T14236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.666881][T14236] RSP: 002b:00007f3fbedc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 417.666906][T14236] RAX: ffffffffffffffda RBX: 00007f3fbe1e5fa0 RCX: 00007f3fbdf8f7c9 [ 417.666925][T14236] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 417.666941][T14236] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.666959][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.666975][T14236] R13: 00007f3fbe1e6038 R14: 00007f3fbe1e5fa0 R15: 00007ffeab864708 [ 417.667013][T14236] [ 417.667159][T14236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.071553][T14271] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 421.766532][T14336] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 422.522299][T14346] [U] [ 422.525110][T14346] [U] [ 422.527787][T14346] [U] [ 422.530460][T14346] [U] [ 422.533373][T14346] [U] [ 422.536058][T14346] [U] [ 422.538801][T14346] [U] [ 422.541473][T14346] [U] [ 422.544493][T14346] [U] [ 422.547222][T14346] [U] [ 422.549939][T14346] [U] [ 422.552649][T14346] [U] [ 422.593927][T14346] [U] [ 422.596690][T14346] [U] [ 422.599410][T14346] [U] [ 422.602127][T14346] [U] [ 422.638733][T14346] [U] [ 422.641462][T14346] [U] [ 422.644140][T14346] [U] [ 422.646814][T14346] [U] [ 422.716877][T14346] [U] [ 422.719595][T14346] [U] [ 422.722272][T14346] [U] [ 422.724947][T14346] [U] [ 422.771504][T14346] [U] [ 422.774241][T14346] [U] [ 422.776956][T14346] [U] [ 422.779638][T14346] [U] [ 422.788449][T14346] [U] [ 422.791178][T14346] [U] [ 422.793853][T14346] [U] [ 422.796529][T14346] [U] [ 422.827978][T14346] [U] [ 422.830727][T14346] [U] [ 422.834052][T14346] [U] [ 422.836726][T14346] [U] [ 422.898464][T14346] [U] [ 422.901179][T14346] [U] [ 422.903882][T14346] [U] [ 422.906576][T14346] [U] [ 422.954316][T14346] [U] [ 422.957091][T14346] [U] [ 422.959811][T14346] [U] [ 422.962528][T14346] [U] [ 423.046641][T14346] [U] [ 423.049379][T14346] [U] [ 423.052085][T14346] [U] [ 423.054774][T14346] [U] [ 423.089682][T14346] [U] [ 423.092624][T14346] [U] [ 423.095312][T14346] [U] [ 423.097994][T14346] [U] [ 423.131266][T14346] [U] [ 423.134014][T14346] [U] [ 423.136716][T14346] [U] [ 423.139409][T14346] [U] [ 423.143577][T14346] [U] [ 423.146305][T14346] [U] [ 423.149028][T14346] [U] [ 423.151739][T14346] [U] [ 423.168450][T14346] [U] [ 423.171195][T14346] [U] [ 423.173934][T14346] [U] [ 423.176658][T14346] [U] [ 423.181346][T14346] [U] [ 423.184061][T14346] [U] [ 423.186755][T14346] [U] [ 423.189444][T14346] [U] [ 423.194845][T14346] [U] [ 423.197573][T14346] [U] [ 423.200287][T14346] [U] [ 423.203005][T14346] [U] [ 423.206646][T14346] [U] [ 423.209376][T14346] [U] [ 423.212088][T14346] [U] [ 423.214794][T14346] [U] [ 423.229884][T14346] [U] [ 424.830829][T14403] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 425.495841][T14420] netlink: 'syz.1.3121': attribute type 2 has an invalid length. [ 425.551217][ T30] audit: type=1800 audit(4294967297.910:16): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=58220 res=0 errno=0 [ 426.296824][T14450] binder: 14447:14450 ioctl 40046f41 0 returned -22 [ 426.639488][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.645512][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 426.659937][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.667734][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 426.686109][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.701855][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 426.713788][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.719929][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 426.728885][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.740760][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 426.747509][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.768377][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 426.783275][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.792234][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 426.816454][T14459] binder: BINDER_SET_CONTEXT_MGR already set [ 426.841497][T14459] binder: 14438:14459 ioctl 40046207 0 returned -16 [ 428.616557][T14511] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 428.859507][T14523] random: crng reseeded on system resumption [ 430.662811][ T5942] bridge_slave_1: left allmulticast mode [ 430.676779][ T5942] bridge_slave_1: left promiscuous mode [ 430.683235][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.709349][ T5942] bridge_slave_0: left allmulticast mode [ 430.715243][ T5942] bridge_slave_0: left promiscuous mode [ 430.721560][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.216393][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.229888][ T5942] bond0 (unregistering): Released all slaves [ 431.535789][T14559] kfence: re-enabled [ 432.520686][ T5942] hsr_slave_0: left promiscuous mode [ 432.548407][ T5942] hsr_slave_1: left promiscuous mode [ 432.564858][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.572895][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.589968][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.607747][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.876809][ T5942] veth1_macvtap: left promiscuous mode [ 432.886181][ T5942] veth0_macvtap: left promiscuous mode [ 432.930091][ T5942] veth1_vlan: left promiscuous mode [ 432.951396][ T5942] veth0_vlan: left promiscuous mode [ 433.616566][ T5935] Bluetooth: hci1: Malformed LE Event: 0x1d [ 433.633274][T14601] FAULT_INJECTION: forcing a failure. [ 433.633274][T14601] name failslab, interval 1, probability 0, space 0, times 0 [ 433.674699][T14601] CPU: 0 UID: 0 PID: 14601 Comm: syz.0.3153 Tainted: G U L syzkaller #0 PREEMPT(full) [ 433.674742][T14601] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 433.674751][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.674765][T14601] Call Trace: [ 433.674773][T14601] [ 433.674783][T14601] dump_stack_lvl+0x16c/0x1f0 [ 433.674825][T14601] should_fail_ex+0x512/0x640 [ 433.674852][T14601] ? __kmalloc_cache_noprof+0x5f/0x800 [ 433.674884][T14601] should_failslab+0xc2/0x120 [ 433.674920][T14601] __kmalloc_cache_noprof+0x80/0x800 [ 433.674947][T14601] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 433.674972][T14601] ? madvise_collapse+0x1a9/0xa40 [ 433.675004][T14601] ? madvise_collapse+0x1a9/0xa40 [ 433.675029][T14601] madvise_collapse+0x1a9/0xa40 [ 433.675059][T14601] ? lock_acquire+0x179/0x330 [ 433.675092][T14601] ? __pfx_madvise_collapse+0x10/0x10 [ 433.675132][T14601] madvise_vma_behavior+0xe8a/0x29e0 [ 433.675160][T14601] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 433.675197][T14601] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 433.675223][T14601] ? mas_prev+0x9b/0xf0 [ 433.675244][T14601] ? __pfx_mas_prev+0x10/0x10 [ 433.675288][T14601] ? find_vma_prev+0xd3/0x150 [ 433.675323][T14601] ? __pfx_find_vma_prev+0x10/0x10 [ 433.675369][T14601] ? preempt_schedule_common+0x44/0xc0 [ 433.675409][T14601] madvise_walk_vmas+0x31f/0xac0 [ 433.675441][T14601] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 433.675476][T14601] madvise_do_behavior+0x1e2/0x530 [ 433.675500][T14601] ? futex_private_hash_put+0x160/0x1b0 [ 433.675528][T14601] ? __pfx_madvise_do_behavior+0x10/0x10 [ 433.675555][T14601] ? down_read+0x13d/0x460 [ 433.675597][T14601] do_madvise+0x176/0x240 [ 433.675620][T14601] ? __pfx_do_madvise+0x10/0x10 [ 433.675643][T14601] ? do_futex+0x122/0x350 [ 433.675697][T14601] ? xfd_validate_state+0x61/0x180 [ 433.675729][T14601] __x64_sys_madvise+0xa9/0x110 [ 433.675752][T14601] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.675786][T14601] do_syscall_64+0xcd/0xf80 [ 433.675824][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.675859][T14601] RIP: 0033:0x7f3fbdf8f7c9 [ 433.675880][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.675903][T14601] RSP: 002b:00007f3fbedc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 433.675928][T14601] RAX: ffffffffffffffda RBX: 00007f3fbe1e5fa0 RCX: 00007f3fbdf8f7c9 [ 433.675946][T14601] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 433.675962][T14601] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.675977][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.675993][T14601] R13: 00007f3fbe1e6038 R14: 00007f3fbe1e5fa0 R15: 00007ffeab864708 [ 433.676029][T14601] [ 434.018461][ T5935] Bluetooth: hci1: Malformed LE Event: 0x1d [ 434.506984][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 434.553779][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 435.225881][T14624] serio: Serial port ttyS2 [ 436.149430][ T5935] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 437.291526][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b0d5400: rx timeout, send abort [ 437.801291][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b0d5400: abort rx timeout. Force session deactivation [ 437.912895][T14682] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 438.072740][T14685] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 439.044059][T14700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.348084][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'. [ 441.634129][T14785] random: crng reseeded on system resumption [ 441.671022][T14783] sd 0:0:1:0: PR command failed: 1026 [ 441.683172][T14783] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 441.698328][T14783] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 442.044336][T14800] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 443.735908][T14855] FAULT_INJECTION: forcing a failure. [ 443.735908][T14855] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.798401][T14855] CPU: 1 UID: 0 PID: 14855 Comm: syz.0.3207 Tainted: G U L syzkaller #0 PREEMPT(full) [ 443.798447][T14855] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 443.798456][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.798469][T14855] Call Trace: [ 443.798477][T14855] [ 443.798485][T14855] dump_stack_lvl+0x16c/0x1f0 [ 443.798524][T14855] should_fail_ex+0x512/0x640 [ 443.798552][T14855] should_fail_alloc_page+0xe7/0x130 [ 443.798588][T14855] prepare_alloc_pages+0x401/0x670 [ 443.798620][T14855] ? rcu_is_watching+0x12/0xc0 [ 443.798652][T14855] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 443.798682][T14855] ? __pfx_stack_trace_save+0x10/0x10 [ 443.798719][T14855] ? __lock_acquire+0x436/0x2890 [ 443.798740][T14855] ? __lock_acquire+0x436/0x2890 [ 443.798765][T14855] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 443.798790][T14855] ? relay_open+0x653/0xad0 [ 443.798826][T14855] ? rcu_read_unlock+0x17/0x60 [ 443.798844][T14855] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 443.798878][T14855] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.798910][T14855] ? policy_nodemask+0xea/0x4e0 [ 443.798943][T14855] alloc_pages_mpol+0x1fb/0x550 [ 443.798975][T14855] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 443.799004][T14855] ? trace_kmalloc+0x2b/0xb0 [ 443.799034][T14855] ? trace_kmalloc+0x2b/0xb0 [ 443.799061][T14855] ? __kmalloc_noprof.cold+0x5d/0x62 [ 443.799091][T14855] ? relay_open_buf.part.0+0x194/0xc40 [ 443.799119][T14855] alloc_pages_noprof+0x131/0x390 [ 443.799151][T14855] relay_open_buf.part.0+0x262/0xc40 [ 443.799188][T14855] relay_open+0x653/0xad0 [ 443.799215][T14855] ? debugfs_create_file_full+0x41/0x60 [ 443.799239][T14855] blk_trace_setup_prepare+0x38e/0x700 [ 443.799268][T14855] blk_trace_setup+0x1c5/0x3b0 [ 443.799295][T14855] ? __pfx_blk_trace_setup+0x10/0x10 [ 443.799319][T14855] ? vsnprintf+0x331/0x11e0 [ 443.799353][T14855] ? __pfx_vsnprintf+0x10/0x10 [ 443.799396][T14855] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.799433][T14855] ? do_vfs_ioctl+0x128/0x14f0 [ 443.799474][T14855] blk_trace_ioctl+0x2ce/0x300 [ 443.799501][T14855] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 443.799532][T14855] ? find_held_lock+0x2b/0x80 [ 443.799560][T14855] ? hook_file_ioctl_common+0x144/0x410 [ 443.799589][T14855] blkdev_ioctl+0x1fa/0x6e0 [ 443.799613][T14855] ? __pfx_blkdev_ioctl+0x10/0x10 [ 443.799642][T14855] ? __pfx_blkdev_ioctl+0x10/0x10 [ 443.799667][T14855] __x64_sys_ioctl+0x18e/0x210 [ 443.799695][T14855] do_syscall_64+0xcd/0xf80 [ 443.799727][T14855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.799748][T14855] RIP: 0033:0x7f3fbdf8f7c9 [ 443.799766][T14855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.799787][T14855] RSP: 002b:00007f3fbeda1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.799809][T14855] RAX: ffffffffffffffda RBX: 00007f3fbe1e6090 RCX: 00007f3fbdf8f7c9 [ 443.799824][T14855] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000007 [ 443.799838][T14855] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 443.799852][T14855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.799865][T14855] R13: 00007f3fbe1e6128 R14: 00007f3fbe1e6090 R15: 00007ffeab864708 [ 443.799894][T14855] [ 444.680801][T14873] sd 0:0:1:0: PR command failed: 1026 [ 444.705045][T14873] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 444.711968][T14873] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 445.080625][T14885] netlink: 322 bytes leftover after parsing attributes in process `syz.0.3208'. [ 445.115893][T14885] netlink: 322 bytes leftover after parsing attributes in process `syz.0.3208'. [ 445.127162][T14885] netlink: 170 bytes leftover after parsing attributes in process `syz.0.3208'. [ 445.341004][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.347545][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.192666][T14900] FAULT_INJECTION: forcing a failure. [ 446.192666][T14900] name failslab, interval 1, probability 0, space 0, times 0 [ 446.222741][T14900] CPU: 1 UID: 0 PID: 14900 Comm: syz.1.3212 Tainted: G U L syzkaller #0 PREEMPT(full) [ 446.222792][T14900] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 446.222803][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.222819][T14900] Call Trace: [ 446.222828][T14900] [ 446.222839][T14900] dump_stack_lvl+0x16c/0x1f0 [ 446.222884][T14900] should_fail_ex+0x512/0x640 [ 446.222913][T14900] ? kmem_cache_alloc_noprof+0x62/0x770 [ 446.222955][T14900] should_failslab+0xc2/0x120 [ 446.222996][T14900] kmem_cache_alloc_noprof+0x83/0x770 [ 446.223026][T14900] ? __proc_create+0x2c8/0x8d0 [ 446.223067][T14900] ? __proc_create+0x2c8/0x8d0 [ 446.223096][T14900] __proc_create+0x2c8/0x8d0 [ 446.223130][T14900] ? __pfx___proc_create+0x10/0x10 [ 446.223176][T14900] proc_create_reg+0x7d/0x180 [ 446.223214][T14900] proc_create_net_data+0x8e/0x1c0 [ 446.223248][T14900] ? __pfx_proc_create_net_data+0x10/0x10 [ 446.223295][T14900] udp6_proc_init+0x57/0x80 [ 446.223330][T14900] inet6_net_init+0x6b0/0xb60 [ 446.223370][T14900] ? __pfx_inet6_net_init+0x10/0x10 [ 446.223413][T14900] ops_init+0x1e2/0x5f0 [ 446.223453][T14900] setup_net+0x11d/0x3a0 [ 446.223487][T14900] ? __pfx_setup_net+0x10/0x10 [ 446.223518][T14900] ? lockdep_init_map_type+0x5c/0x270 [ 446.223543][T14900] ? mutex_init_lockep+0x110/0x150 [ 446.223569][T14900] copy_net_ns+0x351/0x7c0 [ 446.223610][T14900] create_new_namespaces+0x3ea/0xab0 [ 446.223655][T14900] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 446.223691][T14900] ksys_unshare+0x45b/0xa40 [ 446.223728][T14900] ? __pfx_ksys_unshare+0x10/0x10 [ 446.223751][T14900] ? xfd_validate_state+0x61/0x180 [ 446.223771][T14900] __x64_sys_unshare+0x31/0x40 [ 446.223783][T14900] do_syscall_64+0xcd/0xf80 [ 446.223808][T14900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.223823][T14900] RIP: 0033:0x7f0ce578f7c9 [ 446.223837][T14900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.223852][T14900] RSP: 002b:00007f0ce66a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 446.223867][T14900] RAX: ffffffffffffffda RBX: 00007f0ce59e5fa0 RCX: 00007f0ce578f7c9 [ 446.223876][T14900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 446.223885][T14900] RBP: 00007f0ce5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 446.223893][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.223902][T14900] R13: 00007f0ce59e6038 R14: 00007f0ce59e5fa0 R15: 00007ffef2f7ee38 [ 446.223922][T14900] [ 450.499591][T14965] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 450.529031][T14969] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 451.561078][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3234'. [ 452.121273][T15002] futex_atomic_op_inuser: 56 callbacks suppressed [ 452.121290][T15002] futex_wake_op: syz.1.3235 tries to shift op by -2048; fix this program [ 452.141993][T14984] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 452.249956][T14999] zero sized request [ 452.362735][T15007] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 453.163168][T15042] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 453.697233][T15056] zswap: compressor not available [ 455.588518][T15089] usb usb36: usbfs: process 15089 (syz.0.3253) did not claim interface 0 before use [ 456.053366][T15108] netlink: 'syz.0.3256': attribute type 4 has an invalid length. [ 456.088290][T15108] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 456.476808][T15108] zswap: compressor _¥ not available [ 456.741485][T15109] zswap: compressor _¥ not available [ 456.832929][T15124] QAT: Device 6 not found [ 457.528676][T15135] random: crng reseeded on system resumption [ 458.608704][T15162] sd 0:0:1:0: PR command failed: 1026 [ 458.617509][T15162] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 458.688429][T15162] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 461.819578][T15177] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 462.900737][T15248] futex_wake_op: syz.2.3282 tries to shift op by -2048; fix this program [ 463.017613][T15250] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 463.384909][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 463.574094][T15266] XFS: Clearing xfsstats [ 464.496712][T15281] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 465.064368][T15296] netlink: 'syz.2.3291': attribute type 19 has an invalid length. [ 465.085929][T15296] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3291'. [ 466.882685][T15317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3296'. [ 468.833959][T15361] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 468.844465][T15359] FAULT_INJECTION: forcing a failure. [ 468.844465][T15359] name failslab, interval 1, probability 0, space 0, times 0 [ 468.870488][T15359] CPU: 0 UID: 0 PID: 15359 Comm: syz.0.3306 Tainted: G U L syzkaller #0 PREEMPT(full) [ 468.870528][T15359] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 468.870536][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.870549][T15359] Call Trace: [ 468.870556][T15359] [ 468.870564][T15359] dump_stack_lvl+0x16c/0x1f0 [ 468.870601][T15359] should_fail_ex+0x512/0x640 [ 468.870625][T15359] ? kmem_cache_alloc_noprof+0x62/0x770 [ 468.870658][T15359] should_failslab+0xc2/0x120 [ 468.870693][T15359] kmem_cache_alloc_noprof+0x83/0x770 [ 468.870719][T15359] ? __pfx_acct_collect+0x10/0x10 [ 468.870750][T15359] ? taskstats_exit+0x654/0xbe0 [ 468.870788][T15359] ? taskstats_exit+0x654/0xbe0 [ 468.870819][T15359] taskstats_exit+0x654/0xbe0 [ 468.870854][T15359] ? __pfx_taskstats_exit+0x10/0x10 [ 468.870890][T15359] ? exit_signals+0x388/0xb00 [ 468.870926][T15359] do_exit+0x5e4/0x2bd0 [ 468.870951][T15359] ? __pfx_do_exit+0x10/0x10 [ 468.870971][T15359] ? do_raw_spin_lock+0x12c/0x2b0 [ 468.870988][T15359] ? find_held_lock+0x2b/0x80 [ 468.871009][T15359] do_group_exit+0xd3/0x2a0 [ 468.871024][T15359] get_signal+0x2671/0x26d0 [ 468.871050][T15359] ? __pfx_get_signal+0x10/0x10 [ 468.871071][T15359] ? do_futex+0x122/0x350 [ 468.871088][T15359] arch_do_signal_or_restart+0x8f/0x7a0 [ 468.871109][T15359] ? find_held_lock+0x2b/0x80 [ 468.871127][T15359] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.871151][T15359] ? __do_sys_close_range+0x278/0x730 [ 468.871175][T15359] ? __pfx___x64_sys_futex+0x10/0x10 [ 468.871195][T15359] exit_to_user_mode_loop+0x8c/0x540 [ 468.871217][T15359] do_syscall_64+0x4ee/0xf80 [ 468.871241][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.871256][T15359] RIP: 0033:0x7f3fbdf8f7c9 [ 468.871268][T15359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.871282][T15359] RSP: 002b:00007f3fbeda10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 468.871296][T15359] RAX: fffffffffffffe00 RBX: 00007f3fbe1e6098 RCX: 00007f3fbdf8f7c9 [ 468.871306][T15359] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fbe1e6098 [ 468.871315][T15359] RBP: 00007f3fbe1e6090 R08: 0000000000000000 R09: 0000000000000000 [ 468.871323][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.871331][T15359] R13: 00007f3fbe1e6128 R14: 00007ffeab864620 R15: 00007ffeab864708 [ 468.871350][T15359] [ 470.889225][ T30] audit: type=1800 audit(4294967340.689:17): pid=15403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3319" name="lu_gp_id" dev="configfs" ino=65577 res=0 errno=0 [ 471.028344][ T30] audit: type=1800 audit(4294967340.709:18): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3319" name="lu_gp_id" dev="configfs" ino=65577 res=0 errno=0 [ 471.362460][T15417] netlink: 294 bytes leftover after parsing attributes in process `syz.3.3323'. [ 472.232884][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3324'. [ 472.542528][T15437] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 474.506568][T15459] zswap: compressor not available [ 474.522587][T15460] zswap: compressor not available [ 475.621833][T15488] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 475.782271][T15490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3338'. [ 476.102356][T15506] random: crng reseeded on system resumption [ 476.503765][T15512] FAULT_INJECTION: forcing a failure. [ 476.503765][T15512] name failslab, interval 1, probability 0, space 0, times 0 [ 476.517289][T15512] CPU: 1 UID: 0 PID: 15512 Comm: syz.0.3344 Tainted: G U L syzkaller #0 PREEMPT(full) [ 476.517334][T15512] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 476.517344][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.517360][T15512] Call Trace: [ 476.517368][T15512] [ 476.517377][T15512] dump_stack_lvl+0x16c/0x1f0 [ 476.517419][T15512] should_fail_ex+0x512/0x640 [ 476.517445][T15512] ? fs_reclaim_acquire+0xae/0x150 [ 476.517487][T15512] should_failslab+0xc2/0x120 [ 476.517525][T15512] kmem_cache_alloc_noprof+0x83/0x770 [ 476.517553][T15512] ? __pfx_map_id_range_down+0x10/0x10 [ 476.517587][T15512] ? security_inode_alloc+0x3b/0x2b0 [ 476.517618][T15512] ? security_inode_alloc+0x3b/0x2b0 [ 476.517650][T15512] security_inode_alloc+0x3b/0x2b0 [ 476.517677][T15512] inode_init_always_gfp+0xced/0x1040 [ 476.517714][T15512] alloc_inode+0x86/0x240 [ 476.517739][T15512] new_inode+0x22/0x1c0 [ 476.517767][T15512] __debugfs_create_file+0x105/0x530 [ 476.517808][T15512] debugfs_create_file_full+0x41/0x60 [ 476.517833][T15512] kvm_dev_ioctl+0x1708/0x1a80 [ 476.517873][T15512] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 476.517911][T15512] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 476.517943][T15512] __x64_sys_ioctl+0x18e/0x210 [ 476.517973][T15512] do_syscall_64+0xcd/0xf80 [ 476.518009][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.518035][T15512] RIP: 0033:0x7f3fbdf8f7c9 [ 476.518056][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.518081][T15512] RSP: 002b:00007f3fbedc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.518105][T15512] RAX: ffffffffffffffda RBX: 00007f3fbe1e5fa0 RCX: 00007f3fbdf8f7c9 [ 476.518121][T15512] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 476.518137][T15512] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 476.518153][T15512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.518168][T15512] R13: 00007f3fbe1e6038 R14: 00007f3fbe1e5fa0 R15: 00007ffeab864708 [ 476.518205][T15512] [ 476.518236][T15512] debugfs: out of free dentries, can not create file 'exits' [ 476.836243][ T30] audit: type=1800 audit(4294968369.629:19): pid=15521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3346" name="dbroot" dev="configfs" ino=65993 res=0 errno=0 [ 476.911932][T15521] : Can't lookup blockdev [ 477.304886][T15547] : Can't lookup blockdev [ 477.326354][T15548] netlink: 294 bytes leftover after parsing attributes in process `syz.0.3349'. [ 477.345473][T15547] netlink: 246 bytes leftover after parsing attributes in process `syz.3.3357'. [ 477.632195][T15555] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 477.927802][T15561] __vm_enough_memory: pid: 15561, comm: syz.0.3353, bytes: 4398046511104 not enough memory for the allocation [ 477.977179][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 477.989757][ T30] audit: type=1800 audit(4294968370.789:20): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3354" name="dbroot" dev="configfs" ino=66108 res=0 errno=0 [ 478.016049][T15565] tc_dump_action: action bad kind [ 478.627945][T15571] FAULT_INJECTION: forcing a failure. [ 478.627945][T15571] name failslab, interval 1, probability 0, space 0, times 0 [ 478.661313][T15571] CPU: 0 UID: 0 PID: 15571 Comm: syz.2.3352 Tainted: G U L syzkaller #0 PREEMPT(full) [ 478.661362][T15571] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 478.661374][T15571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.661391][T15571] Call Trace: [ 478.661400][T15571] [ 478.661412][T15571] dump_stack_lvl+0x16c/0x1f0 [ 478.661464][T15571] should_fail_ex+0x512/0x640 [ 478.661490][T15571] ? fs_reclaim_acquire+0xae/0x150 [ 478.661536][T15571] should_failslab+0xc2/0x120 [ 478.661573][T15571] kmem_cache_alloc_noprof+0x83/0x770 [ 478.661603][T15571] ? __pfx_map_id_range_down+0x10/0x10 [ 478.661636][T15571] ? security_inode_alloc+0x3b/0x2b0 [ 478.661667][T15571] ? security_inode_alloc+0x3b/0x2b0 [ 478.661688][T15571] security_inode_alloc+0x3b/0x2b0 [ 478.661714][T15571] inode_init_always_gfp+0xced/0x1040 [ 478.661753][T15571] alloc_inode+0x86/0x240 [ 478.661779][T15571] iget_locked+0x1d9/0x6d0 [ 478.661806][T15571] ? __pfx_iget_locked+0x10/0x10 [ 478.661832][T15571] ? kernfs_root+0xee/0x2a0 [ 478.661865][T15571] kernfs_get_inode+0x46/0x470 [ 478.661892][T15571] kernfs_iop_lookup+0x1a7/0x2d0 [ 478.661923][T15571] __lookup_slow+0x251/0x460 [ 478.661951][T15571] ? __pfx___lookup_slow+0x10/0x10 [ 478.661995][T15571] ? __d_lookup+0x266/0x4a0 [ 478.662034][T15571] lookup_slow+0x50/0x70 [ 478.662062][T15571] link_path_walk+0x16fd/0x1c70 [ 478.662108][T15571] path_lookupat+0x74/0xc40 [ 478.662147][T15571] filename_lookup+0x224/0x5f0 [ 478.662182][T15571] ? __pfx_filename_lookup+0x10/0x10 [ 478.662251][T15571] ? getname_flags.part.0+0x1c5/0x550 [ 478.662287][T15571] user_path_at+0x3a/0x60 [ 478.662327][T15571] __x64_sys_name_to_handle_at+0x1e7/0x310 [ 478.662371][T15571] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 478.662425][T15571] do_syscall_64+0xcd/0xf80 [ 478.662471][T15571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.662496][T15571] RIP: 0033:0x7fb2de18f7c9 [ 478.662518][T15571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.662543][T15571] RSP: 002b:00007fb2dc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 478.662568][T15571] RAX: ffffffffffffffda RBX: 00007fb2de3e6090 RCX: 00007fb2de18f7c9 [ 478.662585][T15571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 478.662602][T15571] RBP: 00007fb2de213f91 R08: 0000000000000002 R09: 0000000000000000 [ 478.662618][T15571] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 478.662633][T15571] R13: 00007fb2de3e6128 R14: 00007fb2de3e6090 R15: 00007ffea4e6a118 [ 478.662670][T15571] [ 482.683961][T15630] random: crng reseeded on system resumption [ 482.954198][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3370'. [ 483.053646][T15635] tc_dump_action: action bad kind [ 483.764338][T15638] FAULT_INJECTION: forcing a failure. [ 483.764338][T15638] name failslab, interval 1, probability 0, space 0, times 0 [ 483.844423][T15648] random: crng reseeded on system resumption [ 483.867748][T15638] CPU: 1 UID: 0 PID: 15638 Comm: syz.1.3370 Tainted: G U L syzkaller #0 PREEMPT(full) [ 483.867775][T15638] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 483.867780][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.867789][T15638] Call Trace: [ 483.867795][T15638] [ 483.867801][T15638] dump_stack_lvl+0x16c/0x1f0 [ 483.867828][T15638] should_fail_ex+0x512/0x640 [ 483.867845][T15638] ? fs_reclaim_acquire+0xae/0x150 [ 483.867870][T15638] should_failslab+0xc2/0x120 [ 483.867893][T15638] kmem_cache_alloc_noprof+0x83/0x770 [ 483.867910][T15638] ? __pfx_map_id_range_down+0x10/0x10 [ 483.867940][T15638] ? security_inode_alloc+0x3b/0x2b0 [ 483.867961][T15638] ? security_inode_alloc+0x3b/0x2b0 [ 483.867975][T15638] security_inode_alloc+0x3b/0x2b0 [ 483.867991][T15638] inode_init_always_gfp+0xced/0x1040 [ 483.868017][T15638] alloc_inode+0x86/0x240 [ 483.868033][T15638] iget_locked+0x1d9/0x6d0 [ 483.868057][T15638] ? __pfx_iget_locked+0x10/0x10 [ 483.868074][T15638] ? kernfs_root+0xee/0x2a0 [ 483.868096][T15638] kernfs_get_inode+0x46/0x470 [ 483.868113][T15638] kernfs_iop_lookup+0x1a7/0x2d0 [ 483.868134][T15638] __lookup_slow+0x251/0x460 [ 483.868151][T15638] ? __pfx___lookup_slow+0x10/0x10 [ 483.868177][T15638] ? __d_lookup+0x266/0x4a0 [ 483.868199][T15638] lookup_slow+0x50/0x70 [ 483.868215][T15638] path_lookupat+0x5e9/0xc40 [ 483.868238][T15638] filename_lookup+0x224/0x5f0 [ 483.868259][T15638] ? __pfx_filename_lookup+0x10/0x10 [ 483.868296][T15638] ? getname_flags.part.0+0x1c5/0x550 [ 483.868315][T15638] user_path_at+0x3a/0x60 [ 483.868335][T15638] __x64_sys_name_to_handle_at+0x1e7/0x310 [ 483.868361][T15638] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 483.868390][T15638] do_syscall_64+0xcd/0xf80 [ 483.868414][T15638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.868429][T15638] RIP: 0033:0x7f0ce578f7c9 [ 483.868442][T15638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.868456][T15638] RSP: 002b:00007f0ce6684038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 483.868470][T15638] RAX: ffffffffffffffda RBX: 00007f0ce59e6090 RCX: 00007f0ce578f7c9 [ 483.868481][T15638] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 483.868490][T15638] RBP: 00007f0ce5813f91 R08: 0000000000000002 R09: 0000000000000000 [ 483.868500][T15638] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 483.868509][T15638] R13: 00007f0ce59e6128 R14: 00007f0ce59e6090 R15: 00007ffef2f7ee38 [ 483.868530][T15638] [ 485.563126][T15658] Invalid ELF header magic: != ELF [ 485.692853][T15662] netlink: Unknown NAT attribute (type=262, max=9) [ 486.591555][T15696] FAULT_INJECTION: forcing a failure. [ 486.591555][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 486.636174][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.1.3383 Tainted: G U L syzkaller #0 PREEMPT(full) [ 486.636222][T15696] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 486.636233][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.636249][T15696] Call Trace: [ 486.636258][T15696] [ 486.636268][T15696] dump_stack_lvl+0x16c/0x1f0 [ 486.636312][T15696] should_fail_ex+0x512/0x640 [ 486.636339][T15696] ? kmem_cache_alloc_noprof+0x62/0x770 [ 486.636375][T15696] should_failslab+0xc2/0x120 [ 486.636414][T15696] kmem_cache_alloc_noprof+0x83/0x770 [ 486.636445][T15696] ? __lock_acquire+0x436/0x2890 [ 486.636469][T15696] ? ep_ptable_queue_proc+0x5b/0x280 [ 486.636512][T15696] ? ep_ptable_queue_proc+0x5b/0x280 [ 486.636546][T15696] ep_ptable_queue_proc+0x5b/0x280 [ 486.636583][T15696] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 486.636618][T15696] snd_seq_oss_readq_poll+0x56/0xb0 [ 486.636654][T15696] snd_seq_oss_poll+0x122/0x1d0 [ 486.636681][T15696] ? __pfx_odev_poll+0x10/0x10 [ 486.636715][T15696] odev_poll+0x4a/0x90 [ 486.636758][T15696] ep_item_poll+0x141/0x1f0 [ 486.636799][T15696] do_epoll_ctl+0x1fae/0x3790 [ 486.636856][T15696] ? __pfx_do_epoll_ctl+0x10/0x10 [ 486.636892][T15696] ? find_held_lock+0x2b/0x80 [ 486.636922][T15696] ? __might_fault+0xe3/0x190 [ 486.636950][T15696] ? __might_fault+0xe3/0x190 [ 486.636977][T15696] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 486.637027][T15696] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 486.637063][T15696] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 486.637103][T15696] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 486.637154][T15696] do_syscall_64+0xcd/0xf80 [ 486.637193][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.637220][T15696] RIP: 0033:0x7f0ce578f7c9 [ 486.637243][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.637268][T15696] RSP: 002b:00007f0ce66a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 486.637294][T15696] RAX: ffffffffffffffda RBX: 00007f0ce59e5fa0 RCX: 00007f0ce578f7c9 [ 486.637313][T15696] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 486.637329][T15696] RBP: 00007f0ce5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.637345][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.637362][T15696] R13: 00007f0ce59e6038 R14: 00007f0ce59e5fa0 R15: 00007ffef2f7ee38 [ 486.637401][T15696] [ 486.922940][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 486.968436][T15694] tc_dump_action: action bad kind [ 487.124950][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.134543][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.144145][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.174592][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.183058][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.232615][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.252855][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.293359][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.453960][T15701] FAULT_INJECTION: forcing a failure. [ 487.453960][T15701] name failslab, interval 1, probability 0, space 0, times 0 [ 487.464749][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.466967][T15701] CPU: 1 UID: 0 PID: 15701 Comm: syz.3.3382 Tainted: G U L syzkaller #0 PREEMPT(full) [ 487.467011][T15701] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 487.467021][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.467036][T15701] Call Trace: [ 487.467046][T15701] [ 487.467055][T15701] dump_stack_lvl+0x16c/0x1f0 [ 487.467098][T15701] should_fail_ex+0x512/0x640 [ 487.467126][T15701] ? fs_reclaim_acquire+0xae/0x150 [ 487.467168][T15701] should_failslab+0xc2/0x120 [ 487.467204][T15701] kmem_cache_alloc_noprof+0x83/0x770 [ 487.467234][T15701] ? __pfx_map_id_range_down+0x10/0x10 [ 487.467269][T15701] ? security_inode_alloc+0x3b/0x2b0 [ 487.467302][T15701] ? security_inode_alloc+0x3b/0x2b0 [ 487.467327][T15701] security_inode_alloc+0x3b/0x2b0 [ 487.467355][T15701] inode_init_always_gfp+0xced/0x1040 [ 487.467406][T15701] alloc_inode+0x86/0x240 [ 487.467435][T15701] iget_locked+0x1d9/0x6d0 [ 487.467466][T15701] ? __pfx_iget_locked+0x10/0x10 [ 487.467496][T15701] ? kernfs_root+0xee/0x2a0 [ 487.467533][T15701] kernfs_get_inode+0x46/0x470 [ 487.467563][T15701] kernfs_iop_lookup+0x1a7/0x2d0 [ 487.467597][T15701] __lookup_slow+0x251/0x460 [ 487.467626][T15701] ? __pfx___lookup_slow+0x10/0x10 [ 487.467673][T15701] ? __d_lookup+0x266/0x4a0 [ 487.467710][T15701] lookup_slow+0x50/0x70 [ 487.467739][T15701] path_lookupat+0x5e9/0xc40 [ 487.467778][T15701] filename_lookup+0x224/0x5f0 [ 487.467814][T15701] ? __pfx_filename_lookup+0x10/0x10 [ 487.467880][T15701] ? getname_flags.part.0+0x1c5/0x550 [ 487.467915][T15701] user_path_at+0x3a/0x60 [ 487.467950][T15701] __x64_sys_name_to_handle_at+0x1e7/0x310 [ 487.467996][T15701] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 487.468046][T15701] do_syscall_64+0xcd/0xf80 [ 487.468088][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.468114][T15701] RIP: 0033:0x7f851038f7c9 [ 487.468136][T15701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.468162][T15701] RSP: 002b:00007f85112af038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 487.468187][T15701] RAX: ffffffffffffffda RBX: 00007f85105e6090 RCX: 00007f851038f7c9 [ 487.468206][T15701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 487.468223][T15701] RBP: 00007f8510413f91 R08: 0000000000000002 R09: 0000000000000000 [ 487.468239][T15701] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 487.468255][T15701] R13: 00007f85105e6128 R14: 00007f85105e6090 R15: 00007ffcc806fe78 [ 487.468291][T15701] [ 487.746254][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.759794][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.768409][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.777437][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.785936][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.794985][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.803661][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.843895][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.859791][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 487.870051][T15705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 489.146889][T15747] FAULT_INJECTION: forcing a failure. [ 489.146889][T15747] name fail_futex, interval 1, probability 0, space 0, times 0 [ 489.166539][T15747] CPU: 0 UID: 0 PID: 15747 Comm: syz.2.3394 Tainted: G U L syzkaller #0 PREEMPT(full) [ 489.166584][T15747] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 489.166594][T15747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.166609][T15747] Call Trace: [ 489.166617][T15747] [ 489.166628][T15747] dump_stack_lvl+0x16c/0x1f0 [ 489.166670][T15747] should_fail_ex+0x512/0x640 [ 489.166703][T15747] get_futex_key+0x1d0/0x15f0 [ 489.166734][T15747] ? __pfx_get_futex_key+0x10/0x10 [ 489.166761][T15747] ? find_held_lock+0x2b/0x80 [ 489.166803][T15747] futex_wake+0xea/0x530 [ 489.166840][T15747] ? __pfx_futex_wake+0x10/0x10 [ 489.166869][T15747] ? __do_sys_fsconfig+0x7c3/0xbe0 [ 489.166903][T15747] ? __mutex_unlock_slowpath+0x161/0x790 [ 489.166941][T15747] ? find_held_lock+0x2b/0x80 [ 489.166976][T15747] do_futex+0x1e3/0x350 [ 489.167004][T15747] ? __pfx_do_futex+0x10/0x10 [ 489.167041][T15747] __x64_sys_futex+0x1e0/0x4c0 [ 489.167071][T15747] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 489.167100][T15747] ? __pfx___x64_sys_futex+0x10/0x10 [ 489.167127][T15747] ? xfd_validate_state+0x61/0x180 [ 489.167162][T15747] do_syscall_64+0xcd/0xf80 [ 489.167199][T15747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.167223][T15747] RIP: 0033:0x7fb2de18f7c9 [ 489.167243][T15747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.167267][T15747] RSP: 002b:00007fb2def4b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 489.167292][T15747] RAX: ffffffffffffffda RBX: 00007fb2de3e5fa8 RCX: 00007fb2de18f7c9 [ 489.167310][T15747] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2de3e5fac [ 489.167327][T15747] RBP: 00007fb2de3e5fa0 R08: 00007fb2def4c000 R09: 0000000000000000 [ 489.167344][T15747] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 489.167360][T15747] R13: 00007fb2de3e6038 R14: 00007ffea4e6a030 R15: 00007ffea4e6a118 [ 489.167395][T15747] [ 489.846230][T15772] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 489.890887][T15772] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 490.000597][T15775] zswap: compressor 000 not available [ 490.186067][T15782] futex_wake_op: syz.0.3401 tries to shift op by -2048; fix this program [ 491.575234][T15800] ima: policy update failed [ 491.593745][ T30] audit: type=1802 audit(4294969411.388:21): pid=15800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3406" res=0 errno=0 [ 492.028502][T15809] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.3409'. [ 494.221800][T15845] overlayfs: "check_copy_up" module option is obsolete [ 494.584907][T15856] GUP no longer grows the stack in syz.0.3419 (15856): 14000-18000 (4000) [ 494.656312][T15856] CPU: 1 UID: 0 PID: 15856 Comm: syz.0.3419 Tainted: G U L syzkaller #0 PREEMPT(full) [ 494.656355][T15856] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 494.656363][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.656376][T15856] Call Trace: [ 494.656384][T15856] [ 494.656394][T15856] dump_stack_lvl+0x16c/0x1f0 [ 494.656436][T15856] gup_vma_lookup+0x1d2/0x220 [ 494.656472][T15856] __get_user_pages+0x241/0x3590 [ 494.656516][T15856] ? find_held_lock+0x2b/0x80 [ 494.656550][T15856] ? __pfx___get_user_pages+0x10/0x10 [ 494.656597][T15856] get_user_pages_remote+0x243/0xab0 [ 494.656644][T15856] ? __pfx_get_user_pages_remote+0x10/0x10 [ 494.656681][T15856] ? __pfx___might_resched+0x10/0x10 [ 494.656715][T15856] ? noop_dirty_folio+0x5e/0xb0 [ 494.656753][T15856] __access_remote_vm+0x24d/0x850 [ 494.656796][T15856] ? __pfx___access_remote_vm+0x10/0x10 [ 494.656842][T15856] mem_rw+0x20e/0x640 [ 494.656884][T15856] ? __pfx_mem_write+0x10/0x10 [ 494.656919][T15856] vfs_write+0x2a0/0x11d0 [ 494.656955][T15856] ? __pfx___mutex_lock+0x10/0x10 [ 494.656993][T15856] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 494.657033][T15856] ? __pfx_vfs_write+0x10/0x10 [ 494.657077][T15856] ? __rcu_read_unlock+0x2b5/0x5a0 [ 494.657110][T15856] ? __fget_files+0x20e/0x3c0 [ 494.657158][T15856] ksys_write+0x12a/0x250 [ 494.657192][T15856] ? __pfx_ksys_write+0x10/0x10 [ 494.657238][T15856] do_syscall_64+0xcd/0xf80 [ 494.657277][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.657305][T15856] RIP: 0033:0x7f3fbdf8f7c9 [ 494.657327][T15856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.657354][T15856] RSP: 002b:00007f3fbeda1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.657380][T15856] RAX: ffffffffffffffda RBX: 00007f3fbe1e6090 RCX: 00007f3fbdf8f7c9 [ 494.657397][T15856] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 494.657413][T15856] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.657430][T15856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.657446][T15856] R13: 00007f3fbe1e6128 R14: 00007f3fbe1e6090 R15: 00007ffeab864708 [ 494.657485][T15856] [ 495.142642][T15851] HfR: entered promiscuous mode [ 495.397512][T15863] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 496.231298][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3427'. [ 496.817927][T15896] aoe: could not set interface list: too many interfaces [ 497.535001][T15918] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 497.661077][T15918] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3433'. [ 497.743689][T15918] veth1_macvtap: left promiscuous mode [ 497.764470][T15918] macsec0: entered allmulticast mode [ 499.049229][T15946] FAULT_INJECTION: forcing a failure. [ 499.049229][T15946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.068333][T15944] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 499.185001][T15946] CPU: 1 UID: 0 PID: 15946 Comm: syz.0.3441 Tainted: G U L syzkaller #0 PREEMPT(full) [ 499.185048][T15946] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 499.185058][T15946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.185073][T15946] Call Trace: [ 499.185082][T15946] [ 499.185093][T15946] dump_stack_lvl+0x16c/0x1f0 [ 499.185138][T15946] should_fail_ex+0x512/0x640 [ 499.185173][T15946] core_sys_select+0x9cf/0xc20 [ 499.185217][T15946] ? __pfx_core_sys_select+0x10/0x10 [ 499.185259][T15946] ? futex_wake+0x1ad/0x530 [ 499.185319][T15946] ? __pfx_do_futex+0x10/0x10 [ 499.185358][T15946] ? fd_install+0x223/0x570 [ 499.185399][T15946] kern_select+0x15d/0x1e0 [ 499.185435][T15946] ? __pfx_kern_select+0x10/0x10 [ 499.185475][T15946] ? xfd_validate_state+0x61/0x180 [ 499.185498][T15946] ? __pfx_do_writev+0x10/0x10 [ 499.185533][T15946] __x64_sys_select+0xbd/0x160 [ 499.185565][T15946] ? do_syscall_64+0x91/0xf80 [ 499.185597][T15946] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.185627][T15946] do_syscall_64+0xcd/0xf80 [ 499.185660][T15946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.185681][T15946] RIP: 0033:0x7f3fbdf8f7c9 [ 499.185699][T15946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.185719][T15946] RSP: 002b:00007f3fbedc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 499.185739][T15946] RAX: ffffffffffffffda RBX: 00007f3fbe1e5fa0 RCX: 00007f3fbdf8f7c9 [ 499.185754][T15946] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000005 [ 499.185767][T15946] RBP: 00007f3fbe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 499.185780][T15946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.185794][T15946] R13: 00007f3fbe1e6038 R14: 00007f3fbe1e5fa0 R15: 00007ffeab864708 [ 499.185823][T15946] [ 499.735210][T15953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 501.008377][T15983] mkiss: ax0: crc mode is auto. [ 501.152422][T15983] i2c i2c-0: delete_device: Can't find device in list [ 501.433484][T15991] netlink: 178 bytes leftover after parsing attributes in process `syz.2.3453'. [ 501.562921][T15991] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3453'. [ 501.895679][T15995] HfR: entered promiscuous mode [ 502.006496][T16004] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.528622][ T5935] Bluetooth: hci2: Malformed LE Event: 0x1d [ 502.577684][ T5935] Bluetooth: hci2: Malformed LE Event: 0x1d [ 502.804076][T16028] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 503.934401][T16042] netlink: 178 bytes leftover after parsing attributes in process `syz.3.3466'. [ 504.170412][T16048] HfR: entered promiscuous mode [ 504.756001][T16063] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 505.570171][T16086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 506.182094][T16097] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 506.355872][T16098] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3479'. [ 506.768875][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.775384][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.841447][T16100] FAULT_INJECTION: forcing a failure. [ 506.841447][T16100] name failslab, interval 1, probability 0, space 0, times 0 [ 506.881816][T16100] CPU: 1 UID: 0 PID: 16100 Comm: syz.3.3481 Tainted: G U L syzkaller #0 PREEMPT(full) [ 506.881844][T16100] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 506.881850][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.881859][T16100] Call Trace: [ 506.881864][T16100] [ 506.881870][T16100] dump_stack_lvl+0x16c/0x1f0 [ 506.881898][T16100] should_fail_ex+0x512/0x640 [ 506.881915][T16100] ? fs_reclaim_acquire+0xae/0x150 [ 506.881940][T16100] should_failslab+0xc2/0x120 [ 506.881970][T16100] kmem_cache_alloc_noprof+0x83/0x770 [ 506.881989][T16100] ? __pfx_map_id_range_down+0x10/0x10 [ 506.882010][T16100] ? security_inode_alloc+0x3b/0x2b0 [ 506.882029][T16100] ? security_inode_alloc+0x3b/0x2b0 [ 506.882043][T16100] security_inode_alloc+0x3b/0x2b0 [ 506.882059][T16100] inode_init_always_gfp+0xced/0x1040 [ 506.882084][T16100] alloc_inode+0x86/0x240 [ 506.882100][T16100] sock_alloc+0x40/0x280 [ 506.882122][T16100] __sock_create+0xc2/0x8a0 [ 506.882138][T16100] __sys_socket+0x14d/0x260 [ 506.882153][T16100] ? __pfx___sys_socket+0x10/0x10 [ 506.882168][T16100] ? do_user_addr_fault+0x843/0x1370 [ 506.882189][T16100] __x64_sys_socket+0x72/0xb0 [ 506.882202][T16100] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.882224][T16100] do_syscall_64+0xcd/0xf80 [ 506.882247][T16100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.882265][T16100] RIP: 0033:0x7f85103916e7 [ 506.882279][T16100] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.882294][T16100] RSP: 002b:00007f85112cefa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 506.882309][T16100] RAX: ffffffffffffffda RBX: 00007f85105e5fa0 RCX: 00007f85103916e7 [ 506.882319][T16100] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 506.882327][T16100] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 506.882336][T16100] R10: 0000200000001080 R11: 0000000000000286 R12: 0000000000000000 [ 506.882344][T16100] R13: 00007f85105e6038 R14: 00007f85105e5fa0 R15: 00007ffcc806fe78 [ 506.882363][T16100] [ 506.883535][T16100] socket: no more sockets [ 507.202836][T16107] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 507.243007][T16109] __vm_enough_memory: pid: 16109, comm: syz.0.3482, bytes: 4398046511104 not enough memory for the allocation [ 508.240834][T16129] openvswitch: netlink: Multiple metadata blocks provided [ 509.086649][T16138] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 510.085643][T16151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 511.189484][T16173] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 511.788372][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 512.466177][T16199] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 512.948726][ T5935] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 514.439498][T16240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 514.530835][T16240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 514.547856][T16240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 514.569786][T16240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 514.576157][T16240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.532847][T16272] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3516'. [ 515.679274][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'. [ 516.022483][T16285] FAULT_INJECTION: forcing a failure. [ 516.022483][T16285] name failslab, interval 1, probability 0, space 0, times 0 [ 516.078770][T16278] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 516.088151][T16285] CPU: 1 UID: 0 PID: 16285 Comm: syz.1.3520 Tainted: G U L syzkaller #0 PREEMPT(full) [ 516.088193][T16285] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 516.088203][T16285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.088218][T16285] Call Trace: [ 516.088227][T16285] [ 516.088237][T16285] dump_stack_lvl+0x16c/0x1f0 [ 516.088281][T16285] should_fail_ex+0x512/0x640 [ 516.088309][T16285] ? kmem_cache_alloc_noprof+0x62/0x770 [ 516.088347][T16285] should_failslab+0xc2/0x120 [ 516.088383][T16285] kmem_cache_alloc_noprof+0x83/0x770 [ 516.088412][T16285] ? keyring_get_key_chunk+0x22d/0x280 [ 516.088444][T16285] ? key_alloc+0xbef/0x1330 [ 516.088480][T16285] ? key_alloc+0xbef/0x1330 [ 516.088505][T16285] key_alloc+0xbef/0x1330 [ 516.088548][T16285] ? __pfx_key_alloc+0x10/0x10 [ 516.088586][T16285] keyring_alloc+0x44/0xc0 [ 516.088624][T16285] keyctl_get_persistent+0x6a8/0x8c0 [ 516.088662][T16285] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 516.088701][T16285] ? __x64_sys_futex+0x1e0/0x4c0 [ 516.088729][T16285] ? __x64_sys_futex+0x1e9/0x4c0 [ 516.088765][T16285] ? xfd_validate_state+0x61/0x180 [ 516.088788][T16285] ? __pfx_ksys_write+0x10/0x10 [ 516.088829][T16285] __do_sys_keyctl+0x1a9/0x590 [ 516.088860][T16285] do_syscall_64+0xcd/0xf80 [ 516.088911][T16285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.088939][T16285] RIP: 0033:0x7f0ce578f7c9 [ 516.088961][T16285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.088986][T16285] RSP: 002b:00007f0ce66a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 516.089012][T16285] RAX: ffffffffffffffda RBX: 00007f0ce59e5fa0 RCX: 00007f0ce578f7c9 [ 516.089030][T16285] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 516.089047][T16285] RBP: 00007f0ce5813f91 R08: 000000000000000c R09: 0000000000000000 [ 516.089063][T16285] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 516.089080][T16285] R13: 00007f0ce59e6038 R14: 00007f0ce59e5fa0 R15: 00007ffef2f7ee38 [ 516.089117][T16285] [ 516.559971][T16291] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 516.610224][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 516.616244][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.622284][ T9219] Bluetooth: hci2: command 0x0c1a tx timeout [ 516.628277][ T9219] Bluetooth: hci4: command 0x0c1a tx timeout [ 516.660604][T16291] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 516.666751][T16291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 516.676579][T16291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 516.691504][T16291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.202636][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 518.349234][T16322] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 518.361258][T16322] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 518.369665][T16322] CPU: 0 UID: 0 PID: 16322 Comm: syz.1.3528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 518.380595][T16322] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 518.385771][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.395815][T16322] RIP: 0010:handshake_complete+0x31/0x390 [ 518.401537][T16322] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 c4 2a 57 f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 5c 39 0e 00 48 b8 00 [ 518.421137][T16322] RSP: 0018:ffffc9000b8174f8 EFLAGS: 00010206 [ 518.427194][T16322] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900145e6000 [ 518.435154][T16322] RDX: 0000000000000005 RSI: ffffffff8b672ddc RDI: 0000000000000028 [ 518.443116][T16322] RBP: ffffc9000b8175c0 R08: 0000000000000000 R09: ffffed1005835d80 [ 518.451076][T16322] R10: ffff88802c1aec03 R11: 0000000000000001 R12: 00000000fffffffb [ 518.459030][T16322] R13: 0000000000000000 R14: ffff88807995c680 R15: ffff888079d34b80 [ 518.466988][T16322] FS: 00007f0ce66a56c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 518.475907][T16322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.482482][T16322] CR2: 0000001b2eebeff8 CR3: 000000007c7b0000 CR4: 00000000003526f0 [ 518.490448][T16322] Call Trace: [ 518.493732][T16322] [ 518.496673][T16322] handshake_nl_accept_doit+0x30f/0x930 [ 518.502244][T16322] genl_family_rcv_msg_doit+0x209/0x2f0 [ 518.507794][T16322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 518.513862][T16322] ? genl_get_cmd+0x194/0x580 [ 518.518551][T16322] ? bpf_lsm_capable+0x9/0x10 [ 518.523224][T16322] ? security_capable+0x7e/0x260 [ 518.528160][T16322] genl_rcv_msg+0x55c/0x800 [ 518.532673][T16322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.537685][T16322] ? __pfx_handshake_nl_accept_doit+0x10/0x10 [ 518.543750][T16322] netlink_rcv_skb+0x158/0x420 [ 518.548513][T16322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.553526][T16322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.558809][T16322] ? netlink_deliver_tap+0x1ae/0xd30 [ 518.564088][T16322] genl_rcv+0x28/0x40 [ 518.568067][T16322] netlink_unicast+0x5aa/0x870 [ 518.572826][T16322] ? __pfx_netlink_unicast+0x10/0x10 [ 518.578106][T16322] netlink_sendmsg+0x8c8/0xdd0 [ 518.582863][T16322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.588141][T16322] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 518.594204][T16322] ____sys_sendmsg+0xa5d/0xc30 [ 518.598969][T16322] ? copy_msghdr_from_user+0x10a/0x160 [ 518.604418][T16322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.609703][T16322] ? __pfx_futex_wake_mark+0x10/0x10 [ 518.614986][T16322] ___sys_sendmsg+0x134/0x1d0 [ 518.619693][T16322] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.624895][T16322] ? futex_private_hash_put+0x160/0x1b0 [ 518.630452][T16322] __sys_sendmsg+0x16d/0x220 [ 518.635035][T16322] ? __pfx___sys_sendmsg+0x10/0x10 [ 518.640138][T16322] ? __x64_sys_futex+0x1e0/0x4c0 [ 518.645070][T16322] do_syscall_64+0xcd/0xf80 [ 518.649571][T16322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.655461][T16322] RIP: 0033:0x7f0ce578f7c9 [ 518.659868][T16322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.679470][T16322] RSP: 002b:00007f0ce66a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.687877][T16322] RAX: ffffffffffffffda RBX: 00007f0ce59e5fa0 RCX: 00007f0ce578f7c9 [ 518.695843][T16322] RDX: 0000000000048840 RSI: 00002000000013c0 RDI: 0000000000000003 [ 518.703806][T16322] RBP: 00007f0ce5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.711767][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.719729][T16322] R13: 00007f0ce59e6038 R14: 00007f0ce59e5fa0 R15: 00007ffef2f7ee38 [ 518.727695][T16322] [ 518.730707][T16322] Modules linked in: [ 518.735425][T16322] ---[ end trace 0000000000000000 ]--- [ 518.754980][ T9219] Bluetooth: hci4: command 0x0c1a tx timeout [ 518.761054][ T5925] Bluetooth: hci2: command 0x0c1a tx timeout [ 518.769808][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 518.776600][T16322] RIP: 0010:handshake_complete+0x31/0x390 [ 518.776662][T16293] Bluetooth: hci1: command 0x0c1a tx timeout [ 518.814096][T16322] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 c4 2a 57 f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 5c 39 0e 00 48 b8 00 [ 518.877450][T16322] RSP: 0018:ffffc9000b8174f8 EFLAGS: 00010206 [ 518.883937][T16322] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900145e6000 [ 518.912636][T16322] RDX: 0000000000000005 RSI: ffffffff8b672ddc RDI: 0000000000000028 [ 518.920744][T16322] RBP: ffffc9000b8175c0 R08: 0000000000000000 R09: ffffed1005835d80 [ 518.984333][T16322] R10: ffff88802c1aec03 R11: 0000000000000001 R12: 00000000fffffffb [ 519.011231][T16322] R13: 0000000000000000 R14: ffff88807995c680 R15: ffff888079d34b80 [ 519.033429][T16322] FS: 00007f0ce66a56c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 519.048322][T16322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.069628][T16322] CR2: 0000001b2eeafff8 CR3: 000000007c7b0000 CR4: 00000000003526f0 [ 519.082451][T16322] Kernel panic - not syncing: Fatal exception [ 519.088886][T16322] Kernel Offset: disabled [ 519.093204][T16322] Rebooting in 86400 seconds..