last executing test programs: 56.62232494s ago: executing program 0 (id=2425): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002200)='*){\x85,\x00', &(0x7f0000002240), 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop2/queue/write_cache\x00', 0x212182, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x40000000029, 0x17, 0xfffffffffffffffe, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x9, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xc, 0x2, 0x19, 0x20000000009, 0x7}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYRES16=r0], 0x6c}, 0x1, 0x0, 0x0, 0x44005}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r2 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x74082, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r2, &(0x7f0000000300)="11c1d6159bacf7db7d742f0ffb363d6a634028173c553ff2a1723a035cb24f53df0000a558f5c7e4169f3acc83971fd59e83ff22633cf728500189ebd6dc0b07a650dc896fba7e6e257c342f2a9dd1b748f7b60285114722a6b57bf3dc95b0a5bec343c8fa113741ff1d0ef37b3ec2f799dc9761915069150953381668515c5b01e17229bb3914962dbcf84120ca79e8ba01635d9033567bb09f9e1075b34ff9f9f20cbc48afafa7d939e5be8abd8e4e2d5381d6b152e8b6deae152e62774ef08c7e5ac7186a3f9b00"/228, 0xfffffffffffffeb6) r3 = open(&(0x7f0000000200)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x292801, 0x1b7) getdents64$auto(r3, 0x0, 0xb012) getsockopt$auto_SO_NETNS_COOKIE(r3, 0xfffffffe, 0x47, &(0x7f0000000040)='*){\x85,\x00', &(0x7f0000000100)=0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 55.407629104s ago: executing program 0 (id=2429): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f00000002c0), 0x42800, 0x0) getpeername$auto(r0, &(0x7f00000001c0)=@rc={0x1f, @any, 0x20}, &(0x7f0000000240)=0xfffffffa) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x2) r2 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r2, 0x1, 0xd, 0x5) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b33f313d76e3000065b39ea39cd45b6d05e343e60b79384f6e7d9fce8fa52080c8a0675eef1d5b8eac455a", @ANYRES16=r3, @ANYBLOB="010327bd700003dcdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x101501, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0\x8d\xbb\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x0, 0x2) write$auto(r4, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) socket(0x10, 0x2, 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x7) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x9}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0xa, 0x0) 44.570299881s ago: executing program 2 (id=2454): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mseal$auto(0x0, 0x7dda, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x23, 0x4, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) mlockall$auto(0x800000000000005) mremap$auto(0x421, 0x85, 0x8, 0x1000, 0xbe6) mmap$auto(0x0, 0x20009, 0x4000000000dd, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x2, 0x0, 0x4) r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r7 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) arch_prctl$auto(0x1003, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) r8 = inotify_init1$auto(0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f00000001c0)=r7) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r10, &(0x7f0000000580)="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", 0xace) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) write$auto_ftrace_event_filter_fops_trace_events(r8, &(0x7f0000000240)="dcbb29bea4c19dbc9c3988ec7569219e306a23f64701c160a101f6b7fcdecfe65971b44fa57116632f17a6db3cc123fd0f25277684762edd9f9e272d22f4eb25bab2eb707a1151c5918e3c7e", 0x4c) mmap$auto(0x0, 0x0, 0x80000000000000df, 0x9b72, r9, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r11 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r11, &(0x7f0000001100)=""/4096, 0x1000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 42.329192468s ago: executing program 2 (id=2457): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x44000000000eb1, r4, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r5, &(0x7f0000005900)='\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x8001, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x3, 0x4, [{r6, 0x0, 0x8000000000000000, 0x8001}, {r7, 0x0, 0x9, 0xd}, {r6, 0x0, 0x4}, {r0, 0x0, 0x9}, {r6, 0x0, 0x1, 0x7fffffff}]}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f00000000c0)="21b36c04d666f0732f3652c23f", 0xfff, &(0x7f0000000100)="06e56a4f2dc6e03baa8d4742f8", 0x355, &(0x7f0000000140)="6dd8c10bfb58d8d71b9862c99bb6e5756007028711c2f5d4e48736ad9fc79263e8c458c89c615cdfb913bdbf3cb62b67cc5c9799d237c23c1735d7647adc7d1e1a99223317f3bb3b24d0474d9243dda8f16abd10fdfaefd703c10d2337f9d484541e19491136db8c01fda62feeeb85b5b22b6f54a8fdc2e02d4401cc37566dfeb126d3c4d94dc6e1f1bd5723f437571bb0ce26c49e9d04cb77d81684b803c8bd74b5fe30ec3b270ab8b26994209fbd4205", &(0x7f0000000200)=0x6}, 0x0, &(0x7f0000000280)={0x32800000, 0x6f40, &(0x7f0000000240)="ddf2c8991be1696b4b759b8159e62ff538996022611e9ff72d932555758a7834", &(0x7f0000000300)="f3633c1c0aea4bd0cc8e1787c01d068bf3616be2c77dc38539cd0cdd5385dc5e9e1978bf715885c63335b67d4813bdeaa73e2839fa7e77aafa2858bb49e06a7f1f9253968a099a59b6a05b74ec3cb99f81cdb84b6a0caaf42613cb3a5f507295f0a52affdb14089e4646dd83370ebcf395a63cbfd5e7e7", 0x2, 0x5}}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 41.089741754s ago: executing program 2 (id=2463): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x2, 0x7, 0x10001, 0x9b73, 0x2, 0xfffffffffffffffd) r2 = socket(0xa, 0x1, 0x84) r3 = getsockopt$auto(r2, 0x84, 0x80, 0x0, &(0x7f00000000c0)=0x97) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64$auto(r5, 0x0, 0x4, 0x3) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x5, 0x0) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000f14e7c7b0dd22ccaafd38e32eda5f8effa02e2012d1cbc0d6dcd94685a72aaf1d558d707cd592f", @ANYRES64=r5, @ANYBLOB="00dbdf25010000000500040003000000ea000106000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) r6 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x180b008}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES64=r6, @ANYRES32=r3], 0x90}}, 0x41001) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r7 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) arch_prctl$auto(0x1003, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) r8 = inotify_init1$auto(0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f00000001c0)=r7) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r10, &(0x7f0000000580)="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", 0xace) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) write$auto_ftrace_event_filter_fops_trace_events(r8, &(0x7f0000000240)="dcbb29bea4c19dbc9c3988ec7569219e306a23f64701c160a101f6b7fcdecfe65971b44fa57116632f17a6db3cc123fd0f25277684762edd9f9e272d22f4eb25bab2eb707a1151c5918e3c7e", 0x4c) mmap$auto(0x0, 0x0, 0x80000000000000df, 0x9b72, r9, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r11 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r11, &(0x7f0000001100)=""/4096, 0x1000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 39.291317029s ago: executing program 2 (id=2466): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r0 = io_uring_setup$auto(0x4, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon30\x00', 0x20880, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 38.770205803s ago: executing program 2 (id=2467): r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0xe, &(0x7f0000000340)={0xffffffff, 0x2000001, 0x0, 0xa4c, 0x7, 0x10, r0, [0x3, 0x1, 0x7], {0x8, 0x6f4, 0x0, 0xfc, 0xa, 0x5, 0x130, 0x1, 0x3}, {0xd5, 0xfffffffe, 0xff, 0xa, 0x8004d54, 0x80002, 0x80003, 0x6, 0x99a}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x25, 0x1, 0x0) sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10004041) sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="04082bbd7000fddbdf2510000000080042000600000005005900a600000005003901f4000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) fallocate$auto(0xffffffffffffffff, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5c7b, 0xd, 0x100000001, 0x948b, 0x7fffffffffffffff, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000101, 0x7, 0x1, 0x8, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) mmap$auto(0xfffffffffffffffd, 0x80040000d, 0x5, 0x9b72, 0xffffffffffffffff, 0x8000) dup$auto(r2) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd6\x00', 0x20002, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xd9, 0x948b, 0x0, 0x95f4fa0a, 0xffffffffffffffff, 0x3, 0x66, 0x80000005, 0x3e, 0x80000002, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) 38.759654249s ago: executing program 0 (id=2433): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)=0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022cbd7000fddbdf2503000000100002800c0001000a0000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_setup$auto(0x7ffe, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x7) mmap$auto(0xa0, 0x2000400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x1, 0x4001, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0x561dc2, 0x0) sendfile$auto(r3, r3, 0x0, 0x4000000000001) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/pagemap\x00', 0x272cc1, 0x0) r4 = socket(0x6, 0x800, 0x20000002) getsockopt$auto_SO_DEBUG(r4, 0x4, 0x1, 0x0, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) ioctl$auto(r5, 0x404064c7, 0xffffffffffffffff) r6 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x2000000000000005, 0x400000000003, 0x9}, 0x5, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0x10, r6, 0xb) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x47c302, 0x0) mlockall$auto(0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0x100000000000000a, 0x0) io_uring_setup$auto(0x7, 0x0) prctl$auto(0x0, 0x64, 0x0, 0xfffffffffffffffd, 0x401) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r7, 0x3, 0x29, 0x0, 0x6) 37.713528115s ago: executing program 0 (id=2472): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0xb4c1, 0x1, 0x0, 0x5, 0x7) open_tree$auto(r0, 0x0, 0x1001) (async) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000000)=0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) write$auto(0x3, 0x0, 0x6) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) unshare$auto(0xba5) (async) socket(0xf, 0x5, 0x20401) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) sendfile$auto(r1, r1, 0x0, 0x71) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0xffffffffffffffff, 0xfff, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xf}) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto_NS_GET_TGID_FROM_PIDNS(r3, 0x8004b707, &(0x7f0000000440)) (async) ioctl$auto(r1, 0x540a, r2) (async) close_range$auto(0x2, 0x8, 0x0) (async) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) (async) mmap$auto(0x200, 0x40000b, 0xdf, 0x14, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0x0, 0x2a, 0xdf, 0xe9f, 0x1000, 0x28000) (async) madvise$auto(0x2, 0x5c61fa2c, 0xf) mmap$auto(0x0, 0x2, 0x20004400000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x192ccc03, 0x5, 0x10, 0x0) (async) io_uring_setup$auto(0x6, 0x0) 37.079237273s ago: executing program 0 (id=2473): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = socket(0xa, 0x3, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r2 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_MON_IOCX_GET(r3, 0x40189206, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x7fffffe) lsm_set_self_attr$auto(0x8, &(0x7f0000000040)={0x6, 0xc7b, 0x2, 0x96, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def017464"}, 0x6, 0x9) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="130026bd7000ffffffff0200000008000300", @ANYRES32, @ANYBLOB="08000c01"], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) r5 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00'}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_3={0x4, 0xd37, 0x822, 0x4, 0x5, 0x9, 0x2, 0x81, 0x200000, "f12dfc7ce3582b2fecd00c5f436abd7c", 0x0, 0x3, r0, 0xf20, 0x7, 0x49, 0x80000001, 0xfffffffffffffffc, 0x8c2e, 0x6fa9, @attach_prog_fd=r5, 0x4fa4, 0x0, 0x2, 0x6a40, 0x100, r1, r2}, 0xf) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x90, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40440d8}, 0x40001) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 35.710389136s ago: executing program 0 (id=2479): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x44000000000eb1, r4, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r5, &(0x7f0000005900)='\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x8001, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x3, 0x4, [{r6, 0x0, 0x8000000000000000, 0x8001}, {r7, 0x0, 0x9, 0xd}, {r6, 0x0, 0x4}, {r0, 0x0, 0x9}, {r6, 0x0, 0x1, 0x7fffffff}]}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f00000000c0)="21b36c04d666f0732f3652c23f", 0xfff, &(0x7f0000000100)="06e56a4f2dc6e03baa8d4742f8", 0x355, &(0x7f0000000140)="6dd8c10bfb58d8d71b9862c99bb6e5756007028711c2f5d4e48736ad9fc79263e8c458c89c615cdfb913bdbf3cb62b67cc5c9799d237c23c1735d7647adc7d1e1a99223317f3bb3b24d0474d9243dda8f16abd10fdfaefd703c10d2337f9d484541e19491136db8c01fda62feeeb85b5b22b6f54a8fdc2e02d4401cc37566dfeb126d3c4d94dc6e1f1bd5723f437571bb0ce26c49e9d04cb77d81684b803c8bd74b5fe30ec3b270ab8b26994209fbd4205", &(0x7f0000000200)=0x6}, 0x0, &(0x7f0000000280)={0x32800000, 0x6f40, &(0x7f0000000240)="ddf2c8991be1696b4b759b8159e62ff538996022611e9ff72d932555758a7834", &(0x7f0000000300)="f3633c1c0aea4bd0cc8e1787c01d068bf3616be2c77dc38539cd0cdd5385dc5e9e1978bf715885c63335b67d4813bdeaa73e2839fa7e77aafa2858bb49e06a7f1f9253968a099a59b6a05b74ec3cb99f81cdb84b6a0caaf42613cb3a5f507295f0a52affdb14089e4646dd83370ebcf395a63cbfd5e7e7", 0x2, 0x5}}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 20.573726911s ago: executing program 32 (id=2479): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x44000000000eb1, r4, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r5, &(0x7f0000005900)='\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x8001, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x3, 0x4, [{r6, 0x0, 0x8000000000000000, 0x8001}, {r7, 0x0, 0x9, 0xd}, {r6, 0x0, 0x4}, {r0, 0x0, 0x9}, {r6, 0x0, 0x1, 0x7fffffff}]}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f00000000c0)="21b36c04d666f0732f3652c23f", 0xfff, &(0x7f0000000100)="06e56a4f2dc6e03baa8d4742f8", 0x355, &(0x7f0000000140)="6dd8c10bfb58d8d71b9862c99bb6e5756007028711c2f5d4e48736ad9fc79263e8c458c89c615cdfb913bdbf3cb62b67cc5c9799d237c23c1735d7647adc7d1e1a99223317f3bb3b24d0474d9243dda8f16abd10fdfaefd703c10d2337f9d484541e19491136db8c01fda62feeeb85b5b22b6f54a8fdc2e02d4401cc37566dfeb126d3c4d94dc6e1f1bd5723f437571bb0ce26c49e9d04cb77d81684b803c8bd74b5fe30ec3b270ab8b26994209fbd4205", &(0x7f0000000200)=0x6}, 0x0, &(0x7f0000000280)={0x32800000, 0x6f40, &(0x7f0000000240)="ddf2c8991be1696b4b759b8159e62ff538996022611e9ff72d932555758a7834", &(0x7f0000000300)="f3633c1c0aea4bd0cc8e1787c01d068bf3616be2c77dc38539cd0cdd5385dc5e9e1978bf715885c63335b67d4813bdeaa73e2839fa7e77aafa2858bb49e06a7f1f9253968a099a59b6a05b74ec3cb99f81cdb84b6a0caaf42613cb3a5f507295f0a52affdb14089e4646dd83370ebcf395a63cbfd5e7e7", 0x2, 0x5}}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 19.341115463s ago: executing program 1 (id=2485): exit$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001bc0)="51426572911c17e9", 0x8) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20048014) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="10"], 0x1ac}, 0x1, 0x0, 0x0, 0x22084844}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x5, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfffffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0) msgctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000000400)={{0x2, 0x0, 0xee00, 0x1, 0x81, 0x718}, &(0x7f0000000040)=0xfa, &(0x7f0000000140)=0x4, 0x8, 0x2, 0x4e3a, 0x5, 0x80d, 0x6, 0x355, 0x7, @inferred=0xffffffffffffffff}) setreuid$auto(0xee01, r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xffd8) munmap$auto(0x2, 0x4) 18.432153521s ago: executing program 1 (id=2487): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x40080, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000040)="3fe89b2198ed39b65c2741aec52cdcd1f3a619400088595d071764fb3cc24b5194ea24d3ff8baa9cd4494c6f6f833e5a29d989bbf241eaa67a2a40646a09585d9a97bd90d7cf217e901cf61f816000a86dfcf4cee7903126b8f5d28c23fc933cfbe039233fd63c67acf611", 0xfffffffa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xffffffffffffffff]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0x8000000000000001, 0x58a, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) 17.582848392s ago: executing program 1 (id=2490): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf2502fffff70400080014"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/maps\x00', 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1, 0x1, 0x0, 0x3, 0x2a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x10000200) mmap$auto(0x0, 0x1, 0xc0000006, 0x9b72, 0x2, 0x8000000000000000) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) ioctl$auto(0x3, 0x541b, 0x10000000000402) syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid$auto(0x0, 0x0, 0x0) socketpair$auto(0x400001, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x400) socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r0, 0xae60, 0x10000000000402) 17.124448091s ago: executing program 1 (id=2491): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x40080, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000040)="3fe89b2198ed39b65c2741aec52cdcd1f3a619400088595d071764fb3cc24b5194ea24d3ff8baa9cd4494c6f6f833e5a29d989bbf241eaa67a2a40646a09585d9a97bd90d7cf217e901cf61f816000a86dfcf4cee7903126b8f5d28c23fc933cfbe039233fd63c67acf611", 0xfffffffa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xffffffffffffffff]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0x8000000000000001, 0x58a, 0x8) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x1, 0x0) 16.964709155s ago: executing program 3 (id=2492): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp7\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) bind$auto(r0, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 16.690305188s ago: executing program 3 (id=2493): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp7\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 16.49842059s ago: executing program 3 (id=2494): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x7, 0x0, 0x0) mmap$auto(0x2, 0x3, 0x800000000000008, 0x17, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = epoll_create$auto(0x8800001) epoll_ctl$auto(r3, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x7c, 0x6) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r4, 0x0, 0x1f40) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0xfefffffb, 0x10001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x204402, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004890}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0xc0060}, 0x39b9701844812f3c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) 16.126408466s ago: executing program 1 (id=2495): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp7\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 15.945393345s ago: executing program 1 (id=2496): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x44000000000eb1, r4, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r5, &(0x7f0000005900)='\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x8001, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x3, 0x4, [{r6, 0x0, 0x8000000000000000, 0x8001}, {r7, 0x0, 0x9, 0xd}, {r6, 0x0, 0x4}, {r0, 0x0, 0x9}, {r6, 0x0, 0x1, 0x7fffffff}]}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f00000000c0)="21b36c04d666f0732f3652c23f", 0xfff, &(0x7f0000000100)="06e56a4f2dc6e03baa8d4742f8", 0x355, &(0x7f0000000140)="6dd8c10bfb58d8d71b9862c99bb6e5756007028711c2f5d4e48736ad9fc79263e8c458c89c615cdfb913bdbf3cb62b67cc5c9799d237c23c1735d7647adc7d1e1a99223317f3bb3b24d0474d9243dda8f16abd10fdfaefd703c10d2337f9d484541e19491136db8c01fda62feeeb85b5b22b6f54a8fdc2e02d4401cc37566dfeb126d3c4d94dc6e1f1bd5723f437571bb0ce26c49e9d04cb77d81684b803c8bd74b5fe30ec3b270ab8b26994209fbd4205", &(0x7f0000000200)=0x6}, 0x0, &(0x7f0000000280)={0x32800000, 0x6f40, &(0x7f0000000240)="ddf2c8991be1696b4b759b8159e62ff538996022611e9ff72d932555758a7834", &(0x7f0000000300)="f3633c1c0aea4bd0cc8e1787c01d068bf3616be2c77dc38539cd0cdd5385dc5e9e1978bf715885c63335b67d4813bdeaa73e2839fa7e77aafa2858bb49e06a7f1f9253968a099a59b6a05b74ec3cb99f81cdb84b6a0caaf42613cb3a5f507295f0a52affdb14089e4646dd83370ebcf395a63cbfd5e7e7", 0x2, 0x5}}) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) 15.606630235s ago: executing program 3 (id=2497): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x28, 0x5, 0x0) bind$auto(r0, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0xffffffffffffffff, 0x2c801, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0xfffffffffffffffc, 0x2000d, 0x4000000200df, 0x19, 0x404, 0x8007) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="b1405c4e", @ANYRES16, @ANYBLOB="01eb", @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES8=r2, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0x3}, 0x6f0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x0, 0x0) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x9, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1ec, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0xea, 0x7, "25b6f4ca738bd03c20ad567bef5513876366e9815a5140169b84d1e607e57010687bfb9a938d03b3bcee21f6cc06c686dec31fcd009575d52fb3d3596ce2c84011e4dcc90f80648ac331de8d46927e38d138fa91d85ae04f84f33dfb2fe2b8577edf24298fce87ffd67c547d6e890f5a0afef38ce94c1ac10f5d578569bcb84f9191bc642055cd0cb616009a764ab1a1bdbe30679ce83a80c465561404eb4b32ee112263bdeb432f56a2ce5751735c6857dfaeda93efbf9301a5718e27da83dba24dd9e09319ab59ec18bfe6f7055767ec367ca26fab50192d9d808325777c4f5a293be4dfd4"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x58, 0x7, "d73106e8677bb5973d681818e8c19ed8be17bdd096ef2347e8730b761f2700b0ecb795d6d3cda2b506a63e56704b6fed44c89bf13e43377917e11ceb2906edd84370a1cc171c8dcad27498abdea21588195fe70d"}, @NLBL_UNLABEL_A_SECCTX={0x50, 0x7, "7bc7c8eba62e4c54865b280e84018e16a160e15218ec666671583c19bf6d257038413363cb9a81c5b1babbc126716a6c2ce043532604091c8eedd8096fe15632095e0749cfff3a752d9f1a10"}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4044040}, 0x50) 15.37707752s ago: executing program 3 (id=2498): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x4, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon30\x00', 0x20880, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 15.310307794s ago: executing program 3 (id=2499): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x44000000000eb1, r4, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r5, &(0x7f0000005900)='\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x8001, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x3, 0x4, [{r6, 0x0, 0x8000000000000000, 0x8001}, {r7, 0x0, 0x9, 0xd}, {r6, 0x0, 0x4}, {r0, 0x0, 0x9}, {r6, 0x0, 0x1, 0x7fffffff}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) 40.116354ms ago: executing program 33 (id=2496): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x44000000000eb1, r4, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r5, &(0x7f0000005900)='\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x8001, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x3, 0x4, [{r6, 0x0, 0x8000000000000000, 0x8001}, {r7, 0x0, 0x9, 0xd}, {r6, 0x0, 0x4}, {r0, 0x0, 0x9}, {r6, 0x0, 0x1, 0x7fffffff}]}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f00000000c0)="21b36c04d666f0732f3652c23f", 0xfff, &(0x7f0000000100)="06e56a4f2dc6e03baa8d4742f8", 0x355, &(0x7f0000000140)="6dd8c10bfb58d8d71b9862c99bb6e5756007028711c2f5d4e48736ad9fc79263e8c458c89c615cdfb913bdbf3cb62b67cc5c9799d237c23c1735d7647adc7d1e1a99223317f3bb3b24d0474d9243dda8f16abd10fdfaefd703c10d2337f9d484541e19491136db8c01fda62feeeb85b5b22b6f54a8fdc2e02d4401cc37566dfeb126d3c4d94dc6e1f1bd5723f437571bb0ce26c49e9d04cb77d81684b803c8bd74b5fe30ec3b270ab8b26994209fbd4205", &(0x7f0000000200)=0x6}, 0x0, &(0x7f0000000280)={0x32800000, 0x6f40, &(0x7f0000000240)="ddf2c8991be1696b4b759b8159e62ff538996022611e9ff72d932555758a7834", &(0x7f0000000300)="f3633c1c0aea4bd0cc8e1787c01d068bf3616be2c77dc38539cd0cdd5385dc5e9e1978bf715885c63335b67d4813bdeaa73e2839fa7e77aafa2858bb49e06a7f1f9253968a099a59b6a05b74ec3cb99f81cdb84b6a0caaf42613cb3a5f507295f0a52affdb14089e4646dd83370ebcf395a63cbfd5e7e7", 0x2, 0x5}}) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) 0s ago: executing program 34 (id=2499): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x511200, 0x0) ioctl$auto_I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)="cdeee6a7e2c5f305d86b61fc3ff5a163e486b2ede64cf609cc14244a7527eab154e54896eae07983b3c65d03ab55fff7104f3bc63093c137123a249804385e91be59abf389554df439f9fd1be3debdef8ec771bb1882452a2551378b0d19222094a97e17c82411e78f33511642a234fa91b2207c004a9ae3c278be24de3319c3e815899eacc5c7ffbe465dbbe004257263aaab2a45b64b7fb08fd5c93a1f78c8bbc52b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x44000000000eb1, r4, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r5, &(0x7f0000005900)='\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x8001, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x3, 0x4, [{r6, 0x0, 0x8000000000000000, 0x8001}, {r7, 0x0, 0x9, 0xd}, {r6, 0x0, 0x4}, {r0, 0x0, 0x9}, {r6, 0x0, 0x1, 0x7fffffff}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) kernel console output (not intermixed with test programs): a0 [ 599.545364][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.545378][T14836] RIP: 0033:0x7f6f6458f6c9 [ 599.545391][T14836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.545404][T14836] RSP: 002b:00007f6f65456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.545418][T14836] RAX: ffffffffffffffda RBX: 00007f6f647e6180 RCX: 00007f6f6458f6c9 [ 599.545428][T14836] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000005 [ 599.545436][T14836] RBP: 00007f6f64611f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.545445][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.545453][T14836] R13: 00007f6f647e6218 R14: 00007f6f647e6180 R15: 00007ffe897c2fe8 [ 599.545473][T14836] [ 599.545487][T14836] Mem-Info: [ 599.902734][T14836] active_anon:3852 inactive_anon:10332 isolated_anon:0 [ 599.902734][T14836] active_file:18548 inactive_file:38692 isolated_file:0 [ 599.902734][T14836] unevictable:2294 dirty:1709 writeback:0 [ 599.902734][T14836] slab_reclaimable:12077 slab_unreclaimable:94106 [ 599.902734][T14836] mapped:29204 shmem:1394 pagetables:1206 [ 599.902734][T14836] sec_pagetables:0 bounce:0 [ 599.902734][T14836] kernel_misc_reclaimable:0 [ 599.902734][T14836] free:1313624 free_pcp:11350 free_cma:0 [ 599.954749][T14836] Node 0 active_anon:15408kB inactive_anon:37228kB active_file:74184kB inactive_file:154636kB unevictable:7588kB isolated(anon):0kB isolated(file):0kB mapped:116760kB dirty:6832kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:34816kB kernel_stack:12548kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 600.010938][T14836] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1588kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 600.095537][T14836] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.128029][T14836] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 600.133846][T14836] Node 0 DMA32 free:1335512kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15408kB inactive_anon:33736kB active_file:74184kB inactive_file:152588kB unevictable:7588kB writepending:6832kB zspages:256kB present:3129332kB managed:2545096kB mlocked:6140kB bounce:0kB free_pcp:42560kB local_pcp:21096kB free_cma:0kB [ 600.172164][T14836] lowmem_reserve[]: 0 0 1 1 1 [ 600.194158][T14836] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.270786][T14836] lowmem_reserve[]: 0 0 0 0 0 [ 600.281052][T14836] Node 1 Normal free:3909924kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1588kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:52kB bounce:0kB free_pcp:5848kB local_pcp:8kB free_cma:0kB [ 600.324353][T14836] lowmem_reserve[]: 0 0 0 0 0 [ 600.355444][T14836] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 600.378631][T14836] Node 0 DMA32: 2716*4kB (UME) 1581*8kB (UME) 1221*16kB (UME) 1342*32kB (UME) 843*64kB (UME) 523*128kB (UM) 396*256kB (UM) 167*512kB (UM) 146*1024kB (UME) 16*2048kB (UME) 186*4096kB (UM) = 1337896kB [ 600.474082][T14836] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 600.494812][T14836] Node 1 Normal: 153*4kB (UE) 44*8kB (UE) 32*16kB (UM) 173*32kB (UME) 87*64kB (UME) 30*128kB (UME) 11*256kB (UME) 3*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 947*4096kB (M) = 3909924kB [ 600.534121][T14836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.545636][T14836] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 600.573983][T14836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.583710][T14836] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 600.594729][T14836] 58833 total pagecache pages [ 600.619625][T14836] 40 pages in swap cache [ 600.624329][T14836] Free swap = 124776kB [ 600.631648][T14836] Total swap = 124996kB [ 600.675507][T14836] 2097051 pages RAM [ 600.694027][T14836] 0 pages HighMem/MovableOnly [ 600.699098][T14836] 428687 pages reserved [ 600.703379][T14836] 0 pages cma reserved [ 601.557993][T14896] usb usb23: usbfs: interface 0 claimed by hub while 'syz.1.1850' sets config #1 [ 601.728276][T14901] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 604.029383][T14958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1862'. [ 609.962370][T15094] Invalid ELF header magic: != ELF [ 610.496793][T15107] FAULT_INJECTION: forcing a failure. [ 610.496793][T15107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 610.510484][T15107] CPU: 1 UID: 0 PID: 15107 Comm: syz.2.1892 Tainted: G U syzkaller #0 PREEMPT(full) [ 610.510509][T15107] Tainted: [U]=USER [ 610.510513][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.510522][T15107] Call Trace: [ 610.510527][T15107] [ 610.510533][T15107] dump_stack_lvl+0x16c/0x1f0 [ 610.510554][T15107] should_fail_ex+0x512/0x640 [ 610.510578][T15107] should_fail_alloc_page+0xe7/0x130 [ 610.510599][T15107] prepare_alloc_pages+0x3c2/0x610 [ 610.510617][T15107] ? rcu_is_watching+0x12/0xc0 [ 610.510634][T15107] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 610.510650][T15107] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.510667][T15107] ? is_bpf_text_address+0x94/0x1a0 [ 610.510686][T15107] ? kernel_text_address+0x8d/0x100 [ 610.510707][T15107] ? __kernel_text_address+0xd/0x40 [ 610.510719][T15107] ? unwind_get_return_address+0x59/0xa0 [ 610.510734][T15107] ? arch_stack_walk+0xa6/0x100 [ 610.510749][T15107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 610.510770][T15107] ? stack_depot_save_flags+0x29/0x9c0 [ 610.510790][T15107] ? __pfx_stack_trace_save+0x10/0x10 [ 610.510808][T15107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.510830][T15107] ? policy_nodemask+0xea/0x4e0 [ 610.510850][T15107] alloc_pages_mpol+0x1fb/0x550 [ 610.510868][T15107] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 610.510891][T15107] alloc_pages_noprof+0x131/0x390 [ 610.510909][T15107] kimage_alloc_pages+0x74/0x350 [ 610.510925][T15107] kimage_alloc_control_pages+0x153/0xa00 [ 610.510943][T15107] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 610.510963][T15107] do_kexec_load+0x5d9/0x8a0 [ 610.510979][T15107] ? __pfx_do_kexec_load+0x10/0x10 [ 610.510995][T15107] ? _copy_from_user+0x59/0xd0 [ 610.511018][T15107] __x64_sys_kexec_load+0x1bf/0x230 [ 610.511034][T15107] do_syscall_64+0xcd/0xfa0 [ 610.511051][T15107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.511065][T15107] RIP: 0033:0x7fc603d8f6c9 [ 610.511077][T15107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.511090][T15107] RSP: 002b:00007fc601fd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 610.511104][T15107] RAX: ffffffffffffffda RBX: 00007fc603fe6090 RCX: 00007fc603d8f6c9 [ 610.511113][T15107] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 610.511122][T15107] RBP: 00007fc603e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.511130][T15107] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 610.511138][T15107] R13: 00007fc603fe6128 R14: 00007fc603fe6090 R15: 00007ffd54933228 [ 610.511156][T15107] [ 610.511163][T15107] kexec: Could not allocate swap buffer [ 611.269348][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1895'. [ 613.248828][T15164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1902'. [ 614.943329][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 614.953912][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 615.190913][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1907'. [ 615.269568][T15189] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 617.711074][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1915'. [ 618.476765][T15248] Invalid ELF header magic: != ELF [ 619.265647][T15267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1919'. [ 621.789880][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1928'. [ 624.286257][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.292634][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.345667][T15371] FAULT_INJECTION: forcing a failure. [ 625.345667][T15371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.619332][T15371] CPU: 1 UID: 0 PID: 15371 Comm: syz.3.1940 Tainted: G U syzkaller #0 PREEMPT(full) [ 625.619371][T15371] Tainted: [U]=USER [ 625.619379][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 625.619393][T15371] Call Trace: [ 625.619401][T15371] [ 625.619412][T15371] dump_stack_lvl+0x16c/0x1f0 [ 625.619447][T15371] should_fail_ex+0x512/0x640 [ 625.619496][T15371] _copy_from_user+0x2e/0xd0 [ 625.619529][T15371] get_timespec64+0x8b/0x1b0 [ 625.619556][T15371] ? __pfx_get_timespec64+0x10/0x10 [ 625.619596][T15371] do_pselect.constprop.0+0xc1/0x1e0 [ 625.619624][T15371] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 625.619657][T15371] ? __x64_sys_futex+0x1e0/0x4c0 [ 625.619692][T15371] __x64_sys_pselect6+0x182/0x240 [ 625.619720][T15371] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 625.619754][T15371] do_syscall_64+0xcd/0xfa0 [ 625.619786][T15371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.619813][T15371] RIP: 0033:0x7f6f6458f6c9 [ 625.619834][T15371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.619860][T15371] RSP: 002b:00007f6f65477038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 625.619885][T15371] RAX: ffffffffffffffda RBX: 00007f6f647e6090 RCX: 00007f6f6458f6c9 [ 625.619904][T15371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000007ff [ 625.619921][T15371] RBP: 00007f6f64611f91 R08: 0000200000000040 R09: 0000000000000000 [ 625.619937][T15371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.619952][T15371] R13: 00007f6f647e6128 R14: 00007f6f647e6090 R15: 00007ffe897c2fe8 [ 625.619988][T15371] [ 629.872403][T15385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1941'. [ 630.060995][T15400] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 630.280601][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1946'. [ 631.157989][T15428] sctp: [Deprecated]: syz.1.1949 (pid 15428) Use of int in max_burst socket option deprecated. [ 631.157989][T15428] Use struct sctp_assoc_value instead [ 631.527902][T15431] sctp: [Deprecated]: syz.1.1949 (pid 15431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.527902][T15431] Use struct sctp_sack_info instead [ 631.574994][T15435] sctp: [Deprecated]: syz.1.1949 (pid 15435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.574994][T15435] Use struct sctp_sack_info instead [ 632.486472][T15441] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 634.656740][T15490] random: crng reseeded on system resumption [ 634.754596][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1960'. [ 638.004142][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'. [ 639.126416][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1971'. [ 641.520445][T15608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1983'. [ 641.907431][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1984'. [ 641.947713][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.058472][T15625] FAULT_INJECTION: forcing a failure. [ 642.058472][T15625] name failslab, interval 1, probability 0, space 0, times 0 [ 642.071779][T15625] CPU: 1 UID: 0 PID: 15625 Comm: syz.3.1985 Tainted: G U syzkaller #0 PREEMPT(full) [ 642.071821][T15625] Tainted: [U]=USER [ 642.071829][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 642.071843][T15625] Call Trace: [ 642.071852][T15625] [ 642.071862][T15625] dump_stack_lvl+0x16c/0x1f0 [ 642.071896][T15625] should_fail_ex+0x512/0x640 [ 642.071932][T15625] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 642.071963][T15625] should_failslab+0xc2/0x120 [ 642.071996][T15625] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 642.072023][T15625] ? rcu_is_watching+0x12/0xc0 [ 642.072050][T15625] ? shmem_alloc_inode+0x25/0x50 [ 642.072097][T15625] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 642.072127][T15625] ? shmem_alloc_inode+0x25/0x50 [ 642.072156][T15625] shmem_alloc_inode+0x25/0x50 [ 642.072186][T15625] alloc_inode+0x64/0x240 [ 642.072220][T15625] new_inode+0x22/0x1c0 [ 642.072250][T15625] ? trace_cap_capable+0x18d/0x200 [ 642.072288][T15625] shmem_get_inode+0x19a/0xfb0 [ 642.072323][T15625] ? __vm_enough_memory+0x184/0x3f0 [ 642.072360][T15625] __shmem_file_setup+0x279/0x330 [ 642.072401][T15625] shmem_zero_setup+0x93/0x1a0 [ 642.072431][T15625] __mmap_region+0x2076/0x27a0 [ 642.072461][T15625] ? __pfx___mmap_region+0x10/0x10 [ 642.072485][T15625] ? lock_acquire+0x179/0x350 [ 642.072518][T15625] ? find_held_lock+0x2b/0x80 [ 642.072545][T15625] ? finish_task_switch.isra.0+0x21c/0xc10 [ 642.072574][T15625] ? rcu_is_watching+0x12/0xc0 [ 642.072599][T15625] ? finish_task_switch.isra.0+0x221/0xc10 [ 642.072636][T15625] ? trace_sched_exit_tp+0xd1/0x120 [ 642.072673][T15625] ? __schedule+0x11a3/0x5de0 [ 642.072712][T15625] ? __pfx_css_rstat_updated+0x10/0x10 [ 642.072788][T15625] ? trace_cap_capable+0x18d/0x200 [ 642.072831][T15625] mmap_region+0x1ab/0x3f0 [ 642.072856][T15625] ? __get_unmapped_area+0x267/0x440 [ 642.072893][T15625] do_mmap+0xa3e/0x1210 [ 642.072931][T15625] ? __pfx_do_mmap+0x10/0x10 [ 642.072964][T15625] ? __pfx_down_write_killable+0x10/0x10 [ 642.073005][T15625] vm_mmap_pgoff+0x29e/0x470 [ 642.073044][T15625] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 642.073084][T15625] ? __sock_release+0x20b/0x270 [ 642.073115][T15625] ? __x64_sys_futex+0x1e0/0x4c0 [ 642.073146][T15625] ? __x64_sys_futex+0x1e9/0x4c0 [ 642.073184][T15625] ksys_mmap_pgoff+0x7d/0x5c0 [ 642.073215][T15625] ? xfd_validate_state+0x61/0x180 [ 642.073248][T15625] ? __pfx_ksys_write+0x10/0x10 [ 642.073280][T15625] __x64_sys_mmap+0x125/0x190 [ 642.073320][T15625] do_syscall_64+0xcd/0xfa0 [ 642.073352][T15625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.073377][T15625] RIP: 0033:0x7f6f6458f6c9 [ 642.073398][T15625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.073422][T15625] RSP: 002b:00007f6f65498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 642.073447][T15625] RAX: ffffffffffffffda RBX: 00007f6f647e5fa0 RCX: 00007f6f6458f6c9 [ 642.073464][T15625] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 642.073480][T15625] RBP: 00007f6f64611f91 R08: fffffffffffffffa R09: 0000000000008000 [ 642.073497][T15625] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 642.073512][T15625] R13: 00007f6f647e6038 R14: 00007f6f647e5fa0 R15: 00007ffe897c2fe8 [ 642.073549][T15625] [ 642.434230][T15619] bridge_slave_1 (unregistering): left allmulticast mode [ 642.441292][T15619] bridge_slave_1 (unregistering): left promiscuous mode [ 642.524338][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.892967][T15643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'. [ 643.698783][T15658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1992'. [ 645.670755][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2001'. [ 645.727548][T15706] nbd: illegal input index 65536 [ 645.736424][T15706] FAULT_INJECTION: forcing a failure. [ 645.736424][T15706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.751105][T15706] CPU: 1 UID: 0 PID: 15706 Comm: syz.2.2001 Tainted: G U syzkaller #0 PREEMPT(full) [ 645.751130][T15706] Tainted: [U]=USER [ 645.751135][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 645.751143][T15706] Call Trace: [ 645.751148][T15706] [ 645.751155][T15706] dump_stack_lvl+0x16c/0x1f0 [ 645.751175][T15706] should_fail_ex+0x512/0x640 [ 645.751199][T15706] should_fail_alloc_page+0xe7/0x130 [ 645.751220][T15706] prepare_alloc_pages+0x3c2/0x610 [ 645.751243][T15706] ? arch_stack_walk+0xa6/0x100 [ 645.751271][T15706] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 645.751305][T15706] ? stack_trace_save+0x8e/0xc0 [ 645.751332][T15706] ? __pfx_stack_trace_save+0x10/0x10 [ 645.751360][T15706] ? stack_depot_save_flags+0x29/0x9c0 [ 645.751386][T15706] ? find_held_lock+0x2b/0x80 [ 645.751400][T15706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 645.751415][T15706] ? kasan_save_stack+0x42/0x60 [ 645.751430][T15706] ? kasan_save_stack+0x33/0x60 [ 645.751444][T15706] ? kasan_save_track+0x14/0x30 [ 645.751458][T15706] ? __kasan_slab_alloc+0x89/0x90 [ 645.751473][T15706] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 645.751486][T15706] ? security_inode_alloc+0x3b/0x2b0 [ 645.751505][T15706] ? inode_init_always_gfp+0xce4/0x1030 [ 645.751521][T15706] ? do_syscall_64+0xcd/0xfa0 [ 645.751535][T15706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.751553][T15706] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 645.751576][T15706] ? policy_nodemask+0xea/0x4e0 [ 645.751595][T15706] alloc_pages_mpol+0x1fb/0x550 [ 645.751614][T15706] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 645.751637][T15706] ___kmalloc_large_node+0xed/0x160 [ 645.751655][T15706] ? __lock_acquire+0x622/0x1c90 [ 645.751674][T15706] __kmalloc_large_node_noprof+0x1c/0x70 [ 645.751694][T15706] __kmalloc_noprof.cold+0xc/0x62 [ 645.751714][T15706] ? sk_prot_alloc+0x1a8/0x2a0 [ 645.751734][T15706] ? sk_prot_alloc+0x1a8/0x2a0 [ 645.751749][T15706] sk_prot_alloc+0x1a8/0x2a0 [ 645.751766][T15706] sk_alloc+0x36/0xc20 [ 645.751787][T15706] can_create+0x1e5/0x630 [ 645.751814][T15706] __sock_create+0x338/0x8d0 [ 645.751837][T15706] __sys_socket+0x14d/0x260 [ 645.751861][T15706] ? __pfx___sys_socket+0x10/0x10 [ 645.751889][T15706] ? ksys_write+0x1ac/0x250 [ 645.751913][T15706] ? __pfx_ksys_write+0x10/0x10 [ 645.751945][T15706] __x64_sys_socket+0x72/0xb0 [ 645.751975][T15706] ? lockdep_hardirqs_on+0x7c/0x110 [ 645.751992][T15706] do_syscall_64+0xcd/0xfa0 [ 645.752008][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.752022][T15706] RIP: 0033:0x7fc603d8f6c9 [ 645.752035][T15706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.752048][T15706] RSP: 002b:00007fc601fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 645.752065][T15706] RAX: ffffffffffffffda RBX: 00007fc603fe6090 RCX: 00007fc603d8f6c9 [ 645.752075][T15706] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 645.752083][T15706] RBP: 00007fc603e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 645.752092][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.752101][T15706] R13: 00007fc603fe6128 R14: 00007fc603fe6090 R15: 00007ffd54933228 [ 645.752120][T15706] [ 650.080555][T15773] FAULT_INJECTION: forcing a failure. [ 650.080555][T15773] name fail_futex, interval 1, probability 0, space 0, times 0 [ 650.255413][T15773] CPU: 1 UID: 0 PID: 15773 Comm: syz.0.2013 Tainted: G U syzkaller #0 PREEMPT(full) [ 650.255439][T15773] Tainted: [U]=USER [ 650.255444][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 650.255453][T15773] Call Trace: [ 650.255465][T15773] [ 650.255472][T15773] dump_stack_lvl+0x16c/0x1f0 [ 650.255493][T15773] should_fail_ex+0x512/0x640 [ 650.255519][T15773] get_futex_key+0x1d0/0x1560 [ 650.255540][T15773] ? __pfx_get_futex_key+0x10/0x10 [ 650.255558][T15773] ? __destroy_inode+0x2e4/0x730 [ 650.255575][T15773] ? __pfx_sock_free_inode+0x10/0x10 [ 650.255594][T15773] futex_wake+0xea/0x530 [ 650.255615][T15773] ? __pfx_evict+0x10/0x10 [ 650.255631][T15773] ? __pfx_futex_wake+0x10/0x10 [ 650.255660][T15773] do_futex+0x1e3/0x350 [ 650.255679][T15773] ? __pfx_do_futex+0x10/0x10 [ 650.255696][T15773] ? iput+0x35/0x40 [ 650.255711][T15773] ? __sock_release+0x20b/0x270 [ 650.255728][T15773] __x64_sys_futex+0x1e0/0x4c0 [ 650.255747][T15773] ? __sys_socket+0xac/0x260 [ 650.255764][T15773] ? __pfx___x64_sys_futex+0x10/0x10 [ 650.255782][T15773] ? xfd_validate_state+0x61/0x180 [ 650.255801][T15773] ? __pfx_ksys_write+0x10/0x10 [ 650.255821][T15773] do_syscall_64+0xcd/0xfa0 [ 650.255837][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.255852][T15773] RIP: 0033:0x7f0a0858f6c9 [ 650.255863][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.255876][T15773] RSP: 002b:00007f0a093840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 650.255891][T15773] RAX: ffffffffffffffda RBX: 00007f0a087e6098 RCX: 00007f0a0858f6c9 [ 650.255900][T15773] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a087e609c [ 650.255908][T15773] RBP: 00007f0a087e6090 R08: 00007f0a093a6000 R09: 0000000000000000 [ 650.255917][T15773] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 650.255926][T15773] R13: 00007f0a087e6128 R14: 00007ffe0c9ec570 R15: 00007ffe0c9ec658 [ 650.255944][T15773] [ 651.265102][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2016'. [ 651.340338][T15796] nbd: illegal input index 65536 [ 651.349959][T15796] FAULT_INJECTION: forcing a failure. [ 651.349959][T15796] name failslab, interval 1, probability 0, space 0, times 0 [ 651.364202][T15796] CPU: 0 UID: 0 PID: 15796 Comm: syz.3.2016 Tainted: G U syzkaller #0 PREEMPT(full) [ 651.364244][T15796] Tainted: [U]=USER [ 651.364252][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 651.364266][T15796] Call Trace: [ 651.364275][T15796] [ 651.364284][T15796] dump_stack_lvl+0x16c/0x1f0 [ 651.364319][T15796] should_fail_ex+0x512/0x640 [ 651.364360][T15796] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 651.364392][T15796] should_failslab+0xc2/0x120 [ 651.364430][T15796] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 651.364459][T15796] ? __d_alloc+0x32/0xae0 [ 651.364492][T15796] ? __d_alloc+0x32/0xae0 [ 651.364521][T15796] __d_alloc+0x32/0xae0 [ 651.364553][T15796] d_alloc_pseudo+0x1c/0xc0 [ 651.364587][T15796] alloc_file_pseudo+0xcf/0x230 [ 651.364624][T15796] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 651.364661][T15796] ? alloc_fd+0x471/0x7d0 [ 651.364692][T15796] sock_alloc_file+0x50/0x210 [ 651.364731][T15796] __sys_socket+0x1c0/0x260 [ 651.364767][T15796] ? __pfx___sys_socket+0x10/0x10 [ 651.364802][T15796] ? xfd_validate_state+0x61/0x180 [ 651.364834][T15796] ? __pfx_ksys_write+0x10/0x10 [ 651.364866][T15796] __x64_sys_socket+0x72/0xb0 [ 651.364899][T15796] ? lockdep_hardirqs_on+0x7c/0x110 [ 651.364928][T15796] do_syscall_64+0xcd/0xfa0 [ 651.364960][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.364985][T15796] RIP: 0033:0x7f6f6458f6c9 [ 651.365009][T15796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.365034][T15796] RSP: 002b:00007f6f65477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 651.365059][T15796] RAX: ffffffffffffffda RBX: 00007f6f647e6090 RCX: 00007f6f6458f6c9 [ 651.365077][T15796] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 651.365093][T15796] RBP: 00007f6f64611f91 R08: 0000000000000000 R09: 0000000000000000 [ 651.365110][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.365126][T15796] R13: 00007f6f647e6128 R14: 00007f6f647e6090 R15: 00007ffe897c2fe8 [ 651.365165][T15796] [ 651.693484][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2026'. [ 652.997585][ T5843] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 653.974248][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2030'. [ 654.017804][T15849] FAULT_INJECTION: forcing a failure. [ 654.017804][T15849] name fail_futex, interval 1, probability 0, space 0, times 0 [ 654.070023][T15849] CPU: 1 UID: 0 PID: 15849 Comm: syz.2.2031 Tainted: G U syzkaller #0 PREEMPT(full) [ 654.070068][T15849] Tainted: [U]=USER [ 654.070077][T15849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 654.070092][T15849] Call Trace: [ 654.070101][T15849] [ 654.070112][T15849] dump_stack_lvl+0x16c/0x1f0 [ 654.070147][T15849] should_fail_ex+0x512/0x640 [ 654.070193][T15849] get_futex_key+0x1d0/0x1560 [ 654.070234][T15849] ? __pfx_get_futex_key+0x10/0x10 [ 654.070269][T15849] ? __destroy_inode+0x2e4/0x730 [ 654.070301][T15849] ? __pfx_sock_free_inode+0x10/0x10 [ 654.070339][T15849] futex_wake+0xea/0x530 [ 654.070379][T15849] ? __pfx_evict+0x10/0x10 [ 654.070411][T15849] ? __pfx_futex_wake+0x10/0x10 [ 654.070466][T15849] do_futex+0x1e3/0x350 [ 654.070501][T15849] ? __pfx_do_futex+0x10/0x10 [ 654.070544][T15849] ? iput+0x35/0x40 [ 654.070574][T15849] ? __sock_release+0x20b/0x270 [ 654.070610][T15849] __x64_sys_futex+0x1e0/0x4c0 [ 654.070648][T15849] ? __sys_socket+0xac/0x260 [ 654.070682][T15849] ? __pfx___x64_sys_futex+0x10/0x10 [ 654.070718][T15849] ? xfd_validate_state+0x61/0x180 [ 654.070753][T15849] ? __pfx_ksys_write+0x10/0x10 [ 654.070792][T15849] do_syscall_64+0xcd/0xfa0 [ 654.070825][T15849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.070852][T15849] RIP: 0033:0x7fc603d8f6c9 [ 654.070873][T15849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.070898][T15849] RSP: 002b:00007fc601fd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 654.070924][T15849] RAX: ffffffffffffffda RBX: 00007fc603fe6098 RCX: 00007fc603d8f6c9 [ 654.070942][T15849] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc603fe609c [ 654.070958][T15849] RBP: 00007fc603fe6090 R08: 00007fc604b27000 R09: 0000000000000000 [ 654.070975][T15849] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 654.070991][T15849] R13: 00007fc603fe6128 R14: 00007ffd54933140 R15: 00007ffd54933228 [ 654.071028][T15849] [ 655.004956][T15862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'. [ 655.098870][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2032'. [ 656.636867][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2040'. [ 658.390909][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2043'. [ 658.580880][T15930] FAULT_INJECTION: forcing a failure. [ 658.580880][T15930] name fail_futex, interval 1, probability 0, space 0, times 0 [ 658.659070][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.3.2046 Tainted: G U syzkaller #0 PREEMPT(full) [ 658.659116][T15930] Tainted: [U]=USER [ 658.659132][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.659148][T15930] Call Trace: [ 658.659158][T15930] [ 658.659168][T15930] dump_stack_lvl+0x16c/0x1f0 [ 658.659205][T15930] should_fail_ex+0x512/0x640 [ 658.659252][T15930] get_futex_key+0x1d0/0x1560 [ 658.659291][T15930] ? __pfx_get_futex_key+0x10/0x10 [ 658.659325][T15930] ? __lock_acquire+0x622/0x1c90 [ 658.659369][T15930] futex_wake+0xea/0x530 [ 658.659413][T15930] ? __pfx_futex_wake+0x10/0x10 [ 658.659469][T15930] do_futex+0x1e3/0x350 [ 658.659504][T15930] ? __pfx_do_futex+0x10/0x10 [ 658.659537][T15930] ? __sys_bind+0x1c5/0x260 [ 658.659579][T15930] __x64_sys_futex+0x1e0/0x4c0 [ 658.659620][T15930] ? __pfx___x64_sys_futex+0x10/0x10 [ 658.659655][T15930] ? xfd_validate_state+0x61/0x180 [ 658.659691][T15930] ? __pfx_ksys_write+0x10/0x10 [ 658.659732][T15930] do_syscall_64+0xcd/0xfa0 [ 658.659765][T15930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.659791][T15930] RIP: 0033:0x7f6f6458f6c9 [ 658.659814][T15930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.659840][T15930] RSP: 002b:00007f6f654770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 658.659867][T15930] RAX: ffffffffffffffda RBX: 00007f6f647e6098 RCX: 00007f6f6458f6c9 [ 658.659886][T15930] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6f647e609c [ 658.659904][T15930] RBP: 00007f6f647e6090 R08: 00007f6f65499000 R09: 0000000000000000 [ 658.659921][T15930] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 658.659938][T15930] R13: 00007f6f647e6128 R14: 00007ffe897c2f00 R15: 00007ffe897c2fe8 [ 658.659975][T15930] [ 659.706253][T15952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2052'. [ 662.784890][T15985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 669.239747][T16083] FAULT_INJECTION: forcing a failure. [ 669.239747][T16083] name failslab, interval 1, probability 0, space 0, times 0 [ 669.386129][T16083] CPU: 1 UID: 0 PID: 16083 Comm: syz.0.2074 Tainted: G U syzkaller #0 PREEMPT(full) [ 669.386177][T16083] Tainted: [U]=USER [ 669.386187][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 669.386204][T16083] Call Trace: [ 669.386213][T16083] [ 669.386224][T16083] dump_stack_lvl+0x16c/0x1f0 [ 669.386260][T16083] should_fail_ex+0x512/0x640 [ 669.386301][T16083] ? __kmalloc_noprof+0xca/0x880 [ 669.386345][T16083] should_failslab+0xc2/0x120 [ 669.386381][T16083] __kmalloc_noprof+0xdd/0x880 [ 669.386434][T16083] ? __register_sysctl_table+0xea2/0x1900 [ 669.386482][T16083] ? __register_sysctl_table+0xea2/0x1900 [ 669.386521][T16083] __register_sysctl_table+0xea2/0x1900 [ 669.386567][T16083] ? __pfx___register_sysctl_table+0x10/0x10 [ 669.386609][T16083] ? is_module_address+0x69/0xf0 [ 669.386645][T16083] ? register_net_sysctl_sz+0x228/0x3e0 [ 669.386691][T16083] __devinet_sysctl_register+0x1b9/0x360 [ 669.386733][T16083] ? rcu_is_watching+0x12/0xc0 [ 669.386762][T16083] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 669.386796][T16083] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 669.386839][T16083] ? __asan_memcpy+0x3c/0x60 [ 669.386871][T16083] devinet_init_net+0x347/0x910 [ 669.386907][T16083] ? __pfx_devinet_init_net+0x10/0x10 [ 669.386942][T16083] ops_init+0x1e2/0x5f0 [ 669.386974][T16083] setup_net+0x100/0x390 [ 669.387003][T16083] ? __pfx_setup_net+0x10/0x10 [ 669.387032][T16083] ? debug_mutex_init+0x37/0x70 [ 669.387064][T16083] copy_net_ns+0x2f8/0x690 [ 669.387099][T16083] create_new_namespaces+0x3ea/0xa90 [ 669.387138][T16083] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 669.387168][T16083] ksys_unshare+0x45b/0xa40 [ 669.387203][T16083] ? __pfx_ksys_unshare+0x10/0x10 [ 669.387239][T16083] ? xfd_validate_state+0x61/0x180 [ 669.387287][T16083] __x64_sys_unshare+0x31/0x40 [ 669.387321][T16083] do_syscall_64+0xcd/0xfa0 [ 669.387354][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.387381][T16083] RIP: 0033:0x7f0a0858f6c9 [ 669.387408][T16083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.387436][T16083] RSP: 002b:00007f0a09363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 669.387462][T16083] RAX: ffffffffffffffda RBX: 00007f0a087e6180 RCX: 00007f0a0858f6c9 [ 669.387481][T16083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 669.387498][T16083] RBP: 00007f0a08611f91 R08: 0000000000000000 R09: 0000000000000000 [ 669.387515][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.387531][T16083] R13: 00007f0a087e6218 R14: 00007f0a087e6180 R15: 00007ffe0c9ec658 [ 669.387570][T16083] [ 669.716604][T16083] sysctl could not get directory: /net/ipv4/conf/default -12 [ 672.565494][T16143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2080'. [ 674.344993][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'. [ 678.555957][T16217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'. [ 679.831926][ T30] audit: type=1800 audit(4294967448.994:20): pid=16234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=54880 res=0 errno=0 [ 680.078615][T16234] could not allocate digest TFM handle [ 680.698357][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'. [ 681.963623][T16261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2105'. [ 681.972864][T16261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.980659][T16261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.059694][T16261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.067516][T16261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.320511][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'. [ 682.777527][T16281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2106'. [ 682.951254][T16287] busy [ 683.188619][T16288] Invalid ELF header magic: != ELF [ 684.183404][T16307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2113'. [ 684.485445][T16310] FAULT_INJECTION: forcing a failure. [ 684.485445][T16310] name failslab, interval 1, probability 0, space 0, times 0 [ 684.606599][T16310] CPU: 1 UID: 0 PID: 16310 Comm: syz.3.2115 Tainted: G U syzkaller #0 PREEMPT(full) [ 684.606625][T16310] Tainted: [U]=USER [ 684.606630][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.606638][T16310] Call Trace: [ 684.606644][T16310] [ 684.606650][T16310] dump_stack_lvl+0x16c/0x1f0 [ 684.606671][T16310] should_fail_ex+0x512/0x640 [ 684.606692][T16310] ? fs_reclaim_acquire+0xae/0x150 [ 684.606713][T16310] should_failslab+0xc2/0x120 [ 684.606733][T16310] kmem_cache_alloc_noprof+0x75/0x6e0 [ 684.606746][T16310] ? __pfx_map_id_range_down+0x10/0x10 [ 684.606768][T16310] ? security_inode_alloc+0x3b/0x2b0 [ 684.606791][T16310] ? security_inode_alloc+0x3b/0x2b0 [ 684.606810][T16310] security_inode_alloc+0x3b/0x2b0 [ 684.606830][T16310] inode_init_always_gfp+0xce4/0x1030 [ 684.606849][T16310] alloc_inode+0x86/0x240 [ 684.606867][T16310] sock_alloc+0x40/0x280 [ 684.606883][T16310] sock_create_lite+0x82/0x120 [ 684.606900][T16310] __netlink_kernel_create+0xbd/0x750 [ 684.606916][T16310] ? __pfx___netlink_kernel_create+0x10/0x10 [ 684.606937][T16310] fib_net_init+0x26d/0x3f0 [ 684.606953][T16310] ? __pfx___register_sysctl_table+0x10/0x10 [ 684.606974][T16310] ? __pfx_fib_net_init+0x10/0x10 [ 684.606989][T16310] ? lockdep_init_map_type+0x5c/0x280 [ 684.607008][T16310] ? __pfx_nl_fib_input+0x10/0x10 [ 684.607031][T16310] ? devinet_init_net+0x5c2/0x910 [ 684.607064][T16310] ? __pfx_fib_net_init+0x10/0x10 [ 684.607080][T16310] ops_init+0x1e2/0x5f0 [ 684.607100][T16310] setup_net+0x100/0x390 [ 684.607114][T16310] ? __pfx_setup_net+0x10/0x10 [ 684.607129][T16310] ? debug_mutex_init+0x37/0x70 [ 684.607145][T16310] copy_net_ns+0x2f8/0x690 [ 684.607162][T16310] create_new_namespaces+0x3ea/0xa90 [ 684.607183][T16310] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 684.607200][T16310] ksys_unshare+0x45b/0xa40 [ 684.607219][T16310] ? __pfx_ksys_unshare+0x10/0x10 [ 684.607244][T16310] ? xfd_validate_state+0x61/0x180 [ 684.607270][T16310] __x64_sys_unshare+0x31/0x40 [ 684.607288][T16310] do_syscall_64+0xcd/0xfa0 [ 684.607305][T16310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.607319][T16310] RIP: 0033:0x7f6f6458f6c9 [ 684.607331][T16310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.607350][T16310] RSP: 002b:00007f6f65456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 684.607365][T16310] RAX: ffffffffffffffda RBX: 00007f6f647e6180 RCX: 00007f6f6458f6c9 [ 684.607375][T16310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 684.607384][T16310] RBP: 00007f6f64611f91 R08: 0000000000000000 R09: 0000000000000000 [ 684.607393][T16310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.607401][T16310] R13: 00007f6f647e6218 R14: 00007f6f647e6180 R15: 00007ffe897c2fe8 [ 684.607422][T16310] [ 685.598650][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2124'. [ 685.697122][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.703505][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.408836][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 686.916450][T16340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2119'. [ 688.486164][T16359] Invalid ELF header magic: != ELF [ 689.967391][T16386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2129'. [ 690.300469][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 690.636919][T16403] random: crng reseeded on system resumption [ 690.721482][T16403] vhci_hcd: invalid port number 23 [ 690.737048][T16403] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 692.137216][T16426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2146'. [ 692.835773][T16432] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 693.585083][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2143'. [ 695.082495][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2150'. [ 697.622292][T16511] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 697.820001][T16527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2156'. [ 697.999838][T16529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2157'. [ 698.286779][T16534] random: crng reseeded on system resumption [ 698.349405][T16534] vhci_hcd: invalid port number 23 [ 698.368040][T16534] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 698.706397][T16537] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 700.605052][T16567] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 701.064031][T16573] ptrace attach of "./syz-executor exec"[16579] was attempted by "./syz-executor exec"[16573] [ 701.454313][T16584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2170'. [ 702.229374][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 702.260183][T16598] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2172'. [ 702.557234][T16607] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 702.626550][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2174'. [ 703.281517][T16616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2175'. [ 703.526353][T16622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2176'. [ 704.970864][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 705.051510][T16649] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2185'. [ 705.214703][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2186'. [ 706.538836][T16669] ptrace attach of ""[16674] was attempted by "./syz-executor exec"[16669] [ 706.548063][T16672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2190'. [ 707.418666][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2194'. [ 707.573995][T16693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2196'. [ 708.626178][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2202'. [ 710.537175][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2209'. [ 711.022951][T16759] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 714.361388][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 714.825010][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2223'. [ 719.792942][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2233'. [ 719.873128][T16880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2234'. [ 720.198421][T16885] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³I [ 722.139434][T16932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2245'. [ 722.707748][T16947] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³I [ 724.038153][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2256'. [ 724.620382][T16988] FAULT_INJECTION: forcing a failure. [ 724.620382][T16988] name failslab, interval 1, probability 0, space 0, times 0 [ 724.656728][T16988] CPU: 0 UID: 0 PID: 16988 Comm: syz.0.2259 Tainted: G U syzkaller #0 PREEMPT(full) [ 724.656768][T16988] Tainted: [U]=USER [ 724.656776][T16988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 724.656790][T16988] Call Trace: [ 724.656799][T16988] [ 724.656808][T16988] dump_stack_lvl+0x16c/0x1f0 [ 724.656845][T16988] should_fail_ex+0x512/0x640 [ 724.656881][T16988] ? fs_reclaim_acquire+0xae/0x150 [ 724.656903][T16988] should_failslab+0xc2/0x120 [ 724.656922][T16988] __kmalloc_noprof+0xdd/0x880 [ 724.656944][T16988] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 724.656964][T16988] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 724.656979][T16988] tomoyo_realpath_from_path+0xc2/0x6e0 [ 724.656996][T16988] ? tomoyo_profile+0x47/0x60 [ 724.657016][T16988] tomoyo_path_number_perm+0x245/0x580 [ 724.657037][T16988] ? tomoyo_path_number_perm+0x237/0x580 [ 724.657059][T16988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 724.657082][T16988] ? find_held_lock+0x2b/0x80 [ 724.657113][T16988] ? find_held_lock+0x2b/0x80 [ 724.657125][T16988] ? hook_file_ioctl_common+0x145/0x410 [ 724.657144][T16988] ? __fget_files+0x20e/0x3c0 [ 724.657161][T16988] security_file_ioctl+0x9b/0x240 [ 724.657175][T16988] __x64_sys_ioctl+0xb7/0x210 [ 724.657197][T16988] do_syscall_64+0xcd/0xfa0 [ 724.657214][T16988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.657228][T16988] RIP: 0033:0x7f0a0858f6c9 [ 724.657240][T16988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.657253][T16988] RSP: 002b:00007f0a093a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.657267][T16988] RAX: ffffffffffffffda RBX: 00007f0a087e5fa0 RCX: 00007f0a0858f6c9 [ 724.657276][T16988] RDX: 0000000000000000 RSI: 000000000000227c RDI: 0000000000000004 [ 724.657284][T16988] RBP: 00007f0a093a5090 R08: 0000000000000000 R09: 0000000000000000 [ 724.657292][T16988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.657300][T16988] R13: 00007f0a087e6038 R14: 00007f0a087e5fa0 R15: 00007ffe0c9ec658 [ 724.657325][T16988] [ 724.658892][T16988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.760198][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2265'. [ 726.923656][T17029] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³I [ 729.217443][T17078] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2282'. [ 732.164565][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2285'. [ 732.779829][T17145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2288'. [ 732.984790][T17155] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2291' sets config #0 [ 734.206701][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2295'. [ 734.424705][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 735.619002][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2302'. [ 736.947031][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2307'. [ 739.083729][T17273] can0: slcan on ptm0. [ 739.986427][T17271] can0 (unregistered): slcan off ptm0. [ 740.486292][T17317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2325'. [ 741.383532][T17333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2329'. [ 744.376331][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 745.451310][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2338'. [ 746.494272][T17428] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 747.093827][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.100183][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.308317][T17441] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 748.472779][T17452] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 748.668344][T17468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2350'. [ 749.320220][T17486] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 749.340802][T17486] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 749.392138][T17489] vhci_hcd: invalid port number 16 [ 749.419503][T17486] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 749.607432][T17492] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 750.167013][T17500] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 750.274760][T17503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.285883][T17503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.293854][T17503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.301991][T17503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.309576][T17503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.660061][T14406] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.760617][T14406] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.996543][T14406] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.166111][T14406] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.309505][T17502] chnl_net:caif_netlink_parms(): no params data found [ 751.742611][T17502] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.777747][T17502] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.854603][T17502] bridge_slave_0: entered allmulticast mode [ 751.892152][T17502] bridge_slave_0: entered promiscuous mode [ 751.995643][T14406] bridge_slave_1: left allmulticast mode [ 752.017037][T14406] bridge_slave_1: left promiscuous mode [ 752.067945][T14406] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.178821][T14406] bridge_slave_0: left allmulticast mode [ 752.198186][T14406] bridge_slave_0: left promiscuous mode [ 752.203893][T14406] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.368140][T17503] Bluetooth: hci1: command tx timeout [ 752.658676][T17545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2361'. [ 752.817859][T17551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'. [ 753.252282][T14406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.263377][T14406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.274742][T14406] bond0 (unregistering): Released all slaves [ 753.288479][T17502] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.295631][T17502] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.302971][T17502] bridge_slave_1: entered allmulticast mode [ 753.310288][T17502] bridge_slave_1: entered promiscuous mode [ 753.419558][T17502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.466113][T17502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.603006][T17502] team0: Port device team_slave_0 added [ 753.619579][T17502] team0: Port device team_slave_1 added [ 753.729027][T17502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.747857][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.816193][T17502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.881833][T17502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.929634][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.994124][T17502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.447011][T17503] Bluetooth: hci1: command tx timeout [ 754.504851][T17502] hsr_slave_0: entered promiscuous mode [ 754.551024][T17502] hsr_slave_1: entered promiscuous mode [ 754.577505][T17502] debugfs: 'hsr0' already exists in 'hsr' [ 754.594787][T17502] Cannot create hsr debugfs directory [ 755.523337][T14406] hsr_slave_0: left promiscuous mode [ 755.579259][T14406] hsr_slave_1: left promiscuous mode [ 755.689814][T14406] veth1_macvtap: left promiscuous mode [ 755.729573][T14406] veth1_vlan: left promiscuous mode [ 755.766501][T14406] veth0_vlan: left promiscuous mode [ 756.192732][T17607] vhci_hcd: invalid port number 16 [ 756.530752][T17503] Bluetooth: hci1: command tx timeout [ 756.692090][T14406] team0 (unregistering): Port device team_slave_1 removed [ 756.774109][T14406] team0 (unregistering): Port device team_slave_0 removed [ 757.202318][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2374'. [ 758.380903][T17641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2376'. [ 758.625104][T17503] Bluetooth: hci1: command tx timeout [ 758.808328][T17502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 758.995435][T17502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 759.049947][T17502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 759.120176][T17502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 759.875865][T17502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.309752][T17502] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.391550][T14431] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.398791][T14431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.507185][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.514375][T14438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.633313][T17502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.439499][T17502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.496443][T17502] veth0_vlan: entered promiscuous mode [ 761.560533][T17502] veth1_vlan: entered promiscuous mode [ 761.589303][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2383'. [ 761.775366][T17502] veth0_macvtap: entered promiscuous mode [ 761.836489][T17502] veth1_macvtap: entered promiscuous mode [ 762.027092][T17502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.066831][T17502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.086797][T14430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.153618][T14430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.200975][T14430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.260242][T14430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.385744][T14419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.431936][T14419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.472782][T14406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.518594][T14406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.738113][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 766.754776][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 766.780268][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 766.792876][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 766.807937][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.075229][ T8549] bridge0: port 3(syz_tun) entered disabled state [ 767.216849][ T8549] syz_tun (unregistering): left allmulticast mode [ 767.234559][ T8549] syz_tun (unregistering): left promiscuous mode [ 767.281569][ T8549] bridge0: port 3(syz_tun) entered disabled state [ 768.132635][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.225233][T17851] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 768.351952][T17826] chnl_net:caif_netlink_parms(): no params data found [ 768.493115][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.664166][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.920039][T17503] Bluetooth: hci4: command tx timeout [ 768.929259][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.961071][T17826] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.972749][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.986470][T17826] bridge_slave_0: entered allmulticast mode [ 769.002507][T17826] bridge_slave_0: entered promiscuous mode [ 769.065924][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.097941][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.115912][T17826] bridge_slave_1: entered allmulticast mode [ 769.164061][T17826] bridge_slave_1: entered promiscuous mode [ 769.287524][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2404'. [ 769.675186][T17826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.751662][T17826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.789456][ T12] bridge_slave_0: left allmulticast mode [ 769.809439][ T12] bridge_slave_0: left promiscuous mode [ 769.817098][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.687397][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.711909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.751764][ T12] bond0 (unregistering): Released all slaves [ 770.960710][T17826] team0: Port device team_slave_0 added [ 771.000740][T17503] Bluetooth: hci4: command tx timeout [ 771.229648][ T12] tipc: Left network mode [ 771.236301][T17826] team0: Port device team_slave_1 added [ 771.852441][T17826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.859627][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.939101][T17826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.961587][T17826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.978822][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.024562][T17826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.835176][T17826] hsr_slave_0: entered promiscuous mode [ 772.853172][T17826] hsr_slave_1: entered promiscuous mode [ 772.874349][T17826] debugfs: 'hsr0' already exists in 'hsr' [ 772.977757][T17826] Cannot create hsr debugfs directory [ 773.089587][T17503] Bluetooth: hci4: command tx timeout [ 774.050655][T17930] Invalid ELF header magic: != ELF [ 774.273581][ T12] hsr_slave_0: left promiscuous mode [ 774.381081][ T12] hsr_slave_1: left promiscuous mode [ 774.501564][ T12] veth1_macvtap: left promiscuous mode [ 774.547109][ T12] veth0_macvtap: left promiscuous mode [ 774.569469][ T12] veth1_vlan: left promiscuous mode [ 774.574922][ T12] veth0_vlan: left promiscuous mode [ 775.103199][ T12] team0 (unregistering): Port device team_slave_1 removed [ 775.143276][ T12] team0 (unregistering): Port device team_slave_0 removed [ 775.166880][T17503] Bluetooth: hci4: command tx timeout [ 776.502162][T17826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 776.625367][T17826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 776.701061][T17826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 776.725460][T17826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 777.280785][T18000] __vm_enough_memory: pid: 18000, comm: syz.3.2420, bytes: 4398046511104 not enough memory for the allocation [ 777.918263][T17826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.986179][T17826] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.036836][T14431] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.044058][T14431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.281325][T14431] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.288493][T14431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.154483][T17826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.200497][T17826] veth0_vlan: entered promiscuous mode [ 779.256562][T17826] veth1_vlan: entered promiscuous mode [ 779.360661][T17826] veth0_macvtap: entered promiscuous mode [ 779.372458][T17826] veth1_macvtap: entered promiscuous mode [ 779.400976][T17826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.417702][T17826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.449031][T14406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.464192][T14406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.479150][T14406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.501015][T14406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.894304][T14406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.902161][T14406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.069010][T18055] FAULT_INJECTION: forcing a failure. [ 780.069010][T18055] name failslab, interval 1, probability 0, space 0, times 0 [ 780.094353][T18055] CPU: 0 UID: 0 PID: 18055 Comm: syz.0.2429 Tainted: G U syzkaller #0 PREEMPT(full) [ 780.094396][T18055] Tainted: [U]=USER [ 780.094405][T18055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 780.094420][T18055] Call Trace: [ 780.094429][T18055] [ 780.094439][T18055] dump_stack_lvl+0x16c/0x1f0 [ 780.094475][T18055] should_fail_ex+0x512/0x640 [ 780.094514][T18055] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 780.094547][T18055] should_failslab+0xc2/0x120 [ 780.094583][T18055] kmem_cache_alloc_node_noprof+0x78/0x770 [ 780.094610][T18055] ? __alloc_skb+0x2b2/0x380 [ 780.094657][T18055] ? __alloc_skb+0x2b2/0x380 [ 780.094700][T18055] __alloc_skb+0x2b2/0x380 [ 780.094740][T18055] ? __pfx___alloc_skb+0x10/0x10 [ 780.094778][T18055] ? find_held_lock+0x2b/0x80 [ 780.094812][T18055] ? __lock_acquire+0x622/0x1c90 [ 780.094850][T18055] sctp_packet_transmit+0x1ca/0x3040 [ 780.094905][T18055] ? find_held_lock+0x2b/0x80 [ 780.094932][T18055] ? sctp_outq_flush+0xb4e/0x3350 [ 780.094975][T18055] sctp_outq_flush+0xb68/0x3350 [ 780.095018][T18055] ? mark_held_locks+0x49/0x80 [ 780.095052][T18055] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 780.095081][T18055] ? __pfx_sctp_outq_flush+0x10/0x10 [ 780.095125][T18055] ? sctp_outq_tail+0x671/0xa30 [ 780.095158][T18055] ? sctp_sf_do_9_2_prm_shutdown+0xe7/0x150 [ 780.095203][T18055] sctp_do_sm+0x1792/0x5c80 [ 780.095251][T18055] ? arch_stack_walk+0xa6/0x100 [ 780.095279][T18055] ? __pfx_sctp_do_sm+0x10/0x10 [ 780.095315][T18055] ? look_up_lock_class+0x6b/0x150 [ 780.095346][T18055] ? register_lock_class+0x41/0x4c0 [ 780.095422][T18055] ? mark_held_locks+0x49/0x80 [ 780.095455][T18055] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 780.095483][T18055] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.095512][T18055] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 780.095545][T18055] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 780.095590][T18055] sctp_close+0x3ff/0x940 [ 780.095629][T18055] ? __pfx_sctp_close+0x10/0x10 [ 780.095662][T18055] ? __pfx___might_resched+0x10/0x10 [ 780.095704][T18055] ? ip_mc_drop_socket+0x1f/0x280 [ 780.095735][T18055] ? down_write+0x14d/0x200 [ 780.095773][T18055] inet_release+0xed/0x200 [ 780.095811][T18055] inet6_release+0x4f/0x70 [ 780.095841][T18055] __sock_release+0xb3/0x270 [ 780.095870][T18055] ? __pfx_sock_close+0x10/0x10 [ 780.095895][T18055] sock_close+0x1c/0x30 [ 780.095920][T18055] __fput+0x402/0xb70 [ 780.095961][T18055] task_work_run+0x150/0x240 [ 780.096001][T18055] ? __pfx_task_work_run+0x10/0x10 [ 780.096040][T18055] ? __pfx___do_sys_close_range+0x10/0x10 [ 780.096078][T18055] exit_to_user_mode_loop+0xec/0x130 [ 780.096118][T18055] do_syscall_64+0x426/0xfa0 [ 780.096152][T18055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.096178][T18055] RIP: 0033:0x7f0a0858f6c9 [ 780.096200][T18055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.096226][T18055] RSP: 002b:00007f0a093a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 780.096251][T18055] RAX: 0000000000000000 RBX: 00007f0a087e5fa0 RCX: 00007f0a0858f6c9 [ 780.096267][T18055] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 780.096282][T18055] RBP: 00007f0a08611f91 R08: 0000000000000000 R09: 0000000000000000 [ 780.096298][T18055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.096313][T18055] R13: 00007f0a087e6038 R14: 00007f0a087e5fa0 R15: 00007ffe0c9ec658 [ 780.096351][T18055] [ 780.545008][T14438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.552877][T14438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.088275][T18075] FAULT_INJECTION: forcing a failure. [ 781.088275][T18075] name failslab, interval 1, probability 0, space 0, times 0 [ 781.129882][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.1.2395 Tainted: G U syzkaller #0 PREEMPT(full) [ 781.129923][T18075] Tainted: [U]=USER [ 781.129931][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 781.129946][T18075] Call Trace: [ 781.129954][T18075] [ 781.129965][T18075] dump_stack_lvl+0x16c/0x1f0 [ 781.129998][T18075] should_fail_ex+0x512/0x640 [ 781.130034][T18075] ? __kmalloc_noprof+0xca/0x880 [ 781.130076][T18075] should_failslab+0xc2/0x120 [ 781.130110][T18075] __kmalloc_noprof+0xdd/0x880 [ 781.130147][T18075] ? memcg_list_lru_alloc+0x4e9/0x740 [ 781.130180][T18075] ? memcg_list_lru_alloc+0x4e9/0x740 [ 781.130206][T18075] memcg_list_lru_alloc+0x4e9/0x740 [ 781.130243][T18075] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 781.130300][T18075] __memcg_slab_post_alloc_hook+0x133/0x940 [ 781.130339][T18075] ? kasan_save_track+0x14/0x30 [ 781.130373][T18075] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 781.130400][T18075] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 781.130431][T18075] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 781.130454][T18075] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 781.130479][T18075] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 781.130506][T18075] alloc_inode+0x64/0x240 [ 781.130541][T18075] new_inode+0x22/0x1c0 [ 781.130575][T18075] hugetlbfs_get_inode+0x354/0x730 [ 781.130603][T18075] ? security_capable+0x7e/0x260 [ 781.130641][T18075] hugetlb_file_setup+0x38d/0x620 [ 781.130675][T18075] newseg+0xa74/0xe60 [ 781.130708][T18075] ? __pfx_newseg+0x10/0x10 [ 781.130738][T18075] ? ksys_write+0x190/0x250 [ 781.130775][T18075] ipcget+0xf6/0xfa0 [ 781.130804][T18075] ? do_futex+0x122/0x350 [ 781.130841][T18075] ? __pfx_do_futex+0x10/0x10 [ 781.130886][T18075] ? __pfx_ipcget+0x10/0x10 [ 781.130916][T18075] ? __x64_sys_futex+0x1e0/0x4c0 [ 781.130948][T18075] ? __x64_sys_futex+0x1e9/0x4c0 [ 781.130987][T18075] __x64_sys_shmget+0x13b/0x1b0 [ 781.131017][T18075] ? __pfx___x64_sys_shmget+0x10/0x10 [ 781.131052][T18075] ? rcu_is_watching+0x12/0xc0 [ 781.131083][T18075] do_syscall_64+0xcd/0xfa0 [ 781.131116][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.131142][T18075] RIP: 0033:0x7f5381d8f6c9 [ 781.131164][T18075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.131188][T18075] RSP: 002b:00007f5382b4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 781.131214][T18075] RAX: ffffffffffffffda RBX: 00007f5381fe5fa0 RCX: 00007f5381d8f6c9 [ 781.131232][T18075] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 781.131249][T18075] RBP: 00007f5381e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 781.131273][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.131289][T18075] R13: 00007f5381fe6038 R14: 00007f5381fe5fa0 R15: 00007fff1f001558 [ 781.131328][T18075] [ 781.811309][T18090] FAULT_INJECTION: forcing a failure. [ 781.811309][T18090] name failslab, interval 1, probability 0, space 0, times 0 [ 781.829466][T18090] CPU: 1 UID: 0 PID: 18090 Comm: syz.3.2435 Tainted: G U syzkaller #0 PREEMPT(full) [ 781.829520][T18090] Tainted: [U]=USER [ 781.829530][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 781.829546][T18090] Call Trace: [ 781.829555][T18090] [ 781.829566][T18090] dump_stack_lvl+0x16c/0x1f0 [ 781.829604][T18090] should_fail_ex+0x512/0x640 [ 781.829642][T18090] ? __kmalloc_cache_noprof+0x5f/0x780 [ 781.829688][T18090] should_failslab+0xc2/0x120 [ 781.829723][T18090] __kmalloc_cache_noprof+0x72/0x780 [ 781.829763][T18090] ? ptrace_may_access+0x35/0x50 [ 781.829795][T18090] ? sched_core_share_pid+0x3c1/0x9d0 [ 781.829826][T18090] ? do_raw_spin_unlock+0x172/0x230 [ 781.829870][T18090] ? sched_core_share_pid+0x3c1/0x9d0 [ 781.829900][T18090] sched_core_share_pid+0x3c1/0x9d0 [ 781.829929][T18090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 781.829974][T18090] ? __pfx_sched_core_share_pid+0x10/0x10 [ 781.830003][T18090] ? static_key_count+0x5a/0x70 [ 781.830036][T18090] ? security_task_prctl+0x11c/0x160 [ 781.830073][T18090] __do_sys_prctl+0x317/0x2250 [ 781.830116][T18090] ? __pfx___do_sys_prctl+0x10/0x10 [ 781.830166][T18090] do_syscall_64+0xcd/0xfa0 [ 781.830199][T18090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.830225][T18090] RIP: 0033:0x7f93fe98f6c9 [ 781.830246][T18090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.830272][T18090] RSP: 002b:00007f93fcbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 781.830299][T18090] RAX: ffffffffffffffda RBX: 00007f93febe6090 RCX: 00007f93fe98f6c9 [ 781.830317][T18090] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 781.830333][T18090] RBP: 00007f93fea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 781.830350][T18090] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 781.830366][T18090] R13: 00007f93febe6128 R14: 00007f93febe6090 R15: 00007ffcb71a6d98 [ 781.830404][T18090] [ 782.130591][T18087] FAULT_INJECTION: forcing a failure. [ 782.130591][T18087] name failslab, interval 1, probability 0, space 0, times 0 [ 782.147661][T18087] CPU: 0 UID: 0 PID: 18087 Comm: syz.1.2434 Tainted: G U syzkaller #0 PREEMPT(full) [ 782.147706][T18087] Tainted: [U]=USER [ 782.147715][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 782.147731][T18087] Call Trace: [ 782.147740][T18087] [ 782.147751][T18087] dump_stack_lvl+0x16c/0x1f0 [ 782.147786][T18087] should_fail_ex+0x512/0x640 [ 782.147832][T18087] should_failslab+0xc2/0x120 [ 782.147869][T18087] kmem_cache_alloc_node_noprof+0x78/0x770 [ 782.147898][T18087] ? zswap_store+0x850/0x2830 [ 782.147946][T18087] ? zswap_store+0x850/0x2830 [ 782.147985][T18087] zswap_store+0x850/0x2830 [ 782.148041][T18087] ? __pfx_zswap_store+0x10/0x10 [ 782.148082][T18087] ? folio_free_swap+0x141/0x4b0 [ 782.148118][T18087] ? do_raw_spin_unlock+0x172/0x230 [ 782.148160][T18087] ? _raw_spin_unlock+0x28/0x50 [ 782.148185][T18087] ? folio_free_swap+0x19d/0x4b0 [ 782.148218][T18087] ? __pfx_try_to_unmap+0x10/0x10 [ 782.148263][T18087] swap_writeout+0x3f4/0x1090 [ 782.148311][T18087] shrink_folio_list+0x3e50/0x4800 [ 782.148364][T18087] ? __pfx_shrink_folio_list+0x10/0x10 [ 782.148402][T18087] ? find_held_lock+0x2b/0x80 [ 782.148430][T18087] ? unwind_next_frame+0x3e0/0x20a0 [ 782.148465][T18087] ? unwind_next_frame+0x3fe/0x20a0 [ 782.148504][T18087] ? do_filp_open+0x20b/0x470 [ 782.148531][T18087] ? __kernel_text_address+0xd/0x40 [ 782.148559][T18087] ? arch_stack_walk+0x88/0x100 [ 782.148640][T18087] reclaim_folio_list+0xda/0x5d0 [ 782.148686][T18087] ? __pfx_reclaim_folio_list+0x10/0x10 [ 782.148741][T18087] ? __lock_acquire+0xb8a/0x1c90 [ 782.148776][T18087] ? css_rstat_updated+0x1c2/0x510 [ 782.148812][T18087] ? do_raw_spin_lock+0x12c/0x2b0 [ 782.148852][T18087] ? lru_gen_del_folio+0x32b/0x540 [ 782.148894][T18087] reclaim_pages+0x3ec/0x570 [ 782.148923][T18087] ? __pfx_reclaim_pages+0x10/0x10 [ 782.148948][T18087] ? madvise_cold_or_pageout_pte_range+0x1e2f/0x20d0 [ 782.148995][T18087] madvise_cold_or_pageout_pte_range+0x14d1/0x20d0 [ 782.149050][T18087] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 782.149091][T18087] ? __lock_acquire+0x622/0x1c90 [ 782.149129][T18087] ? __pfx_stack_trace_save+0x10/0x10 [ 782.149161][T18087] ? stack_depot_save_flags+0x29/0x9c0 [ 782.149202][T18087] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 782.149244][T18087] walk_pgd_range+0xc05/0x1f50 [ 782.149296][T18087] ? __pfx_walk_pgd_range+0x10/0x10 [ 782.149335][T18087] __walk_page_range+0x163/0x820 [ 782.149370][T18087] ? __lock_acquire+0xb8a/0x1c90 [ 782.149413][T18087] walk_page_range_vma+0x2c7/0xa20 [ 782.149448][T18087] ? __pfx_walk_page_range_vma+0x10/0x10 [ 782.149478][T18087] ? find_held_lock+0x2b/0x80 [ 782.149526][T18087] madvise_pageout+0x257/0x540 [ 782.149564][T18087] ? __pfx_madvise_pageout+0x10/0x10 [ 782.149621][T18087] ? mtree_range_walk+0x718/0xc00 [ 782.149655][T18087] madvise_vma_behavior+0xb14/0x2d50 [ 782.149701][T18087] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 782.149743][T18087] ? __pfx_mt_find+0x10/0x10 [ 782.149783][T18087] ? find_vma_prev+0xd3/0x150 [ 782.149826][T18087] ? find_vma+0xbf/0x140 [ 782.149856][T18087] ? __pfx_find_vma+0x10/0x10 [ 782.149895][T18087] madvise_walk_vmas+0x31f/0x9c0 [ 782.149939][T18087] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 782.149988][T18087] madvise_do_behavior+0x1e2/0x530 [ 782.150024][T18087] ? futex_private_hash_put+0x18a/0x300 [ 782.150059][T18087] ? __pfx_madvise_do_behavior+0x10/0x10 [ 782.150099][T18087] ? down_read+0x13d/0x480 [ 782.150151][T18087] do_madvise+0x176/0x240 [ 782.150187][T18087] ? __pfx_do_madvise+0x10/0x10 [ 782.150222][T18087] ? do_futex+0x122/0x350 [ 782.150282][T18087] ? xfd_validate_state+0x61/0x180 [ 782.150317][T18087] ? __pfx_ksys_write+0x10/0x10 [ 782.150353][T18087] __x64_sys_madvise+0xa9/0x110 [ 782.150390][T18087] ? lockdep_hardirqs_on+0x7c/0x110 [ 782.150419][T18087] do_syscall_64+0xcd/0xfa0 [ 782.150452][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.150479][T18087] RIP: 0033:0x7f5381d8f6c9 [ 782.150508][T18087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.150535][T18087] RSP: 002b:00007f5382b4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 782.150563][T18087] RAX: ffffffffffffffda RBX: 00007f5381fe5fa0 RCX: 00007f5381d8f6c9 [ 782.150582][T18087] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 782.150600][T18087] RBP: 00007f5381e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 782.150617][T18087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.150633][T18087] R13: 00007f5381fe6038 R14: 00007f5381fe5fa0 R15: 00007fff1f001558 [ 782.150671][T18087] [ 782.673241][T18089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 782.678427][T18098] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 782.679268][T18089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 782.756860][T18089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 782.800486][T18089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 782.823937][T18089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 782.859304][T18089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 782.916861][T18089] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 782.938216][T18089] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 783.000888][T18089] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 783.055217][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 783.083138][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.096877][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 783.107060][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 783.114939][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 783.699155][T14419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.870688][T14419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.201301][T14419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.274903][T18097] chnl_net:caif_netlink_parms(): no params data found [ 784.718005][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.742239][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.752642][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 784.792982][T18097] bridge_slave_0: entered allmulticast mode [ 784.810276][T18123] device-mapper: ioctl: Unable to rename non-existent device,  to ‰í`´Ë³O—XãÐj¥Ðž*ù|ÙÂôXÉ[úÏ£ëEOgaA±@f“F0ŒRŶúç [ 784.832443][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 784.851140][T18097] bridge_slave_0: entered promiscuous mode [ 784.885492][T14419] bridge_slave_1: left allmulticast mode [ 784.891224][T14419] bridge_slave_1: left promiscuous mode [ 784.897360][T14419] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.992041][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 785.137926][T14419] bridge_slave_0: left allmulticast mode [ 785.160291][T14419] bridge_slave_0: left promiscuous mode [ 785.239163][ T5843] Bluetooth: hci0: command tx timeout [ 785.267667][T14419] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.769667][T18149] FAULT_INJECTION: forcing a failure. [ 785.769667][T18149] name failslab, interval 1, probability 0, space 0, times 0 [ 785.802160][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.3.2442 Tainted: G U syzkaller #0 PREEMPT(full) [ 785.802205][T18149] Tainted: [U]=USER [ 785.802213][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.802229][T18149] Call Trace: [ 785.802239][T18149] [ 785.802256][T18149] dump_stack_lvl+0x16c/0x1f0 [ 785.802292][T18149] should_fail_ex+0x512/0x640 [ 785.802332][T18149] ? __kmalloc_noprof+0xca/0x880 [ 785.802377][T18149] should_failslab+0xc2/0x120 [ 785.802412][T18149] __kmalloc_noprof+0xdd/0x880 [ 785.802454][T18149] ? memcg_list_lru_alloc+0x4e9/0x740 [ 785.802489][T18149] ? memcg_list_lru_alloc+0x4e9/0x740 [ 785.802515][T18149] memcg_list_lru_alloc+0x4e9/0x740 [ 785.802554][T18149] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 785.802601][T18149] __memcg_slab_post_alloc_hook+0x133/0x940 [ 785.802644][T18149] ? kasan_save_track+0x14/0x30 [ 785.802683][T18149] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 785.802714][T18149] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 785.802749][T18149] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 785.802774][T18149] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 785.802801][T18149] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 785.802828][T18149] alloc_inode+0x64/0x240 [ 785.802864][T18149] new_inode+0x22/0x1c0 [ 785.802901][T18149] hugetlbfs_get_inode+0x354/0x730 [ 785.802929][T18149] ? security_capable+0x7e/0x260 [ 785.802969][T18149] hugetlb_file_setup+0x38d/0x620 [ 785.803002][T18149] newseg+0xa74/0xe60 [ 785.803037][T18149] ? __pfx_newseg+0x10/0x10 [ 785.803067][T18149] ? ksys_write+0x190/0x250 [ 785.803100][T18149] ipcget+0xf6/0xfa0 [ 785.803128][T18149] ? do_futex+0x122/0x350 [ 785.803165][T18149] ? __pfx_do_futex+0x10/0x10 [ 785.803206][T18149] ? __pfx_ipcget+0x10/0x10 [ 785.803237][T18149] ? __x64_sys_futex+0x1e0/0x4c0 [ 785.803276][T18149] ? __x64_sys_futex+0x1e9/0x4c0 [ 785.803325][T18149] __x64_sys_shmget+0x13b/0x1b0 [ 785.803357][T18149] ? __pfx___x64_sys_shmget+0x10/0x10 [ 785.803393][T18149] ? rcu_is_watching+0x12/0xc0 [ 785.803431][T18149] do_syscall_64+0xcd/0xfa0 [ 785.803465][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.803493][T18149] RIP: 0033:0x7f93fe98f6c9 [ 785.803515][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.803542][T18149] RSP: 002b:00007f93fcbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 785.803569][T18149] RAX: ffffffffffffffda RBX: 00007f93febe5fa0 RCX: 00007f93fe98f6c9 [ 785.803586][T18149] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 785.803603][T18149] RBP: 00007f93fea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 785.803619][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.803635][T18149] R13: 00007f93febe6038 R14: 00007f93febe5fa0 R15: 00007ffcb71a6d98 [ 785.803675][T18149] [ 786.096622][T18123] kexec: Could not allocate control_code_buffer [ 786.836071][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 786.909796][T14419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.918622][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 786.948632][T14419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.972770][T14419] bond0 (unregistering): Released all slaves [ 787.020161][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.053443][T18097] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.070786][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 787.101255][T18097] bridge_slave_1: entered allmulticast mode [ 787.180843][T18097] bridge_slave_1: entered promiscuous mode [ 787.320284][ T5843] Bluetooth: hci0: command tx timeout [ 787.398573][T14419] ovs_: left promiscuous mode [ 787.683638][T18097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.704084][T18097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.864826][T18097] team0: Port device team_slave_0 added [ 787.941869][T18097] team0: Port device team_slave_1 added [ 788.207734][T18176] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 788.659735][T18097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.682624][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.753818][T18097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.799162][T18097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.806313][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.834525][T18097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.992625][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 789.033254][T14419] hsr_slave_0: left promiscuous mode [ 789.043517][T14419] hsr_slave_1: left promiscuous mode [ 789.068305][T14419] veth1_macvtap: left promiscuous mode [ 789.075887][T14419] veth0_macvtap: left promiscuous mode [ 789.081637][T14419] veth1_vlan: left promiscuous mode [ 789.087238][T14419] veth0_vlan: left promiscuous mode [ 789.149677][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.395238][ T5843] Bluetooth: hci0: command tx timeout [ 789.646266][T14419] team0 (unregistering): Port device team_slave_1 removed [ 789.692452][T14419] team0 (unregistering): Port device team_slave_0 removed [ 790.054120][T18097] hsr_slave_0: entered promiscuous mode [ 790.060865][T18097] hsr_slave_1: entered promiscuous mode [ 791.489322][ T5843] Bluetooth: hci0: command tx timeout [ 792.013361][T18216] device-mapper: ioctl: Unable to rename non-existent device,  to ‰í`´Ë³O—XãÐj¥Ðž*ù|ÙÂôXÉ[úÏ£ëEOgaA±@f“F0ŒRŶúç [ 792.336438][T18097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 792.484015][T18097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 792.599429][T18097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 792.611554][T18243] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 792.631241][T18097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 792.674581][T18216] kexec: Could not allocate control_code_buffer [ 792.848857][T18097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.900283][T18097] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.940769][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2459'. [ 792.992302][T14438] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.999535][T14438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.054332][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2459'. [ 793.075725][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.082939][T14438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.160676][T18258] geneve1: entered promiscuous mode [ 793.172461][T18258] geneve1: entered allmulticast mode [ 794.281574][T18097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.698727][T18097] veth0_vlan: entered promiscuous mode [ 794.790118][T18097] veth1_vlan: entered promiscuous mode [ 794.901662][T18097] veth0_macvtap: entered promiscuous mode [ 794.989875][T18097] veth1_macvtap: entered promiscuous mode [ 795.105650][T18097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.120031][T18097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.142611][T14439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.161872][T14439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.215479][T14439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.257614][T14439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.753936][T14439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.839544][T14439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.043199][T18313] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 796.083822][T14439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.117482][T14439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.363269][T18317] netlink: 130 bytes leftover after parsing attributes in process `syz.2.2467'. [ 796.541573][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 796.582180][T18323] geneve1: entered promiscuous mode [ 796.834915][T18329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 796.886784][T18323] geneve1: entered allmulticast mode [ 797.187635][T18332] netlink: 130 bytes leftover after parsing attributes in process `syz.3.2470'. [ 797.387877][T18334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2471'. [ 798.080329][T18346] FAULT_INJECTION: forcing a failure. [ 798.080329][T18346] name failslab, interval 1, probability 0, space 0, times 0 [ 798.111084][T18346] CPU: 1 UID: 0 PID: 18346 Comm: syz.3.2474 Tainted: G U syzkaller #0 PREEMPT(full) [ 798.111130][T18346] Tainted: [U]=USER [ 798.111139][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 798.111156][T18346] Call Trace: [ 798.111163][T18346] [ 798.111174][T18346] dump_stack_lvl+0x16c/0x1f0 [ 798.111210][T18346] should_fail_ex+0x512/0x640 [ 798.111255][T18346] should_failslab+0xc2/0x120 [ 798.111291][T18346] kmem_cache_alloc_node_noprof+0x78/0x770 [ 798.111318][T18346] ? zswap_store+0x850/0x2830 [ 798.111371][T18346] ? zswap_store+0x850/0x2830 [ 798.111407][T18346] zswap_store+0x850/0x2830 [ 798.111457][T18346] ? __pfx_zswap_store+0x10/0x10 [ 798.111494][T18346] ? folio_free_swap+0x141/0x4b0 [ 798.111525][T18346] ? do_raw_spin_unlock+0x172/0x230 [ 798.111568][T18346] ? _raw_spin_unlock+0x28/0x50 [ 798.111593][T18346] ? folio_free_swap+0x19d/0x4b0 [ 798.111623][T18346] ? __pfx_try_to_unmap+0x10/0x10 [ 798.111666][T18346] swap_writeout+0x3f4/0x1090 [ 798.111715][T18346] shrink_folio_list+0x3e50/0x4800 [ 798.111769][T18346] ? __pfx_shrink_folio_list+0x10/0x10 [ 798.111807][T18346] ? find_held_lock+0x2b/0x80 [ 798.111834][T18346] ? unwind_next_frame+0x3e0/0x20a0 [ 798.111869][T18346] ? unwind_next_frame+0x3fe/0x20a0 [ 798.111899][T18346] ? do_filp_open+0x20b/0x470 [ 798.111924][T18346] ? __kernel_text_address+0xd/0x40 [ 798.111948][T18346] ? arch_stack_walk+0x88/0x100 [ 798.112022][T18346] reclaim_folio_list+0xda/0x5d0 [ 798.112063][T18346] ? __pfx_reclaim_folio_list+0x10/0x10 [ 798.112109][T18346] ? __lock_acquire+0xb8a/0x1c90 [ 798.112139][T18346] ? css_rstat_updated+0x1c2/0x510 [ 798.112170][T18346] ? do_raw_spin_lock+0x12c/0x2b0 [ 798.112207][T18346] ? lru_gen_del_folio+0x32b/0x540 [ 798.112244][T18346] reclaim_pages+0x3ec/0x570 [ 798.112271][T18346] ? __pfx_reclaim_pages+0x10/0x10 [ 798.112295][T18346] ? madvise_cold_or_pageout_pte_range+0x1e2f/0x20d0 [ 798.112342][T18346] madvise_cold_or_pageout_pte_range+0x14d1/0x20d0 [ 798.112401][T18346] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 798.112438][T18346] ? __lock_acquire+0x622/0x1c90 [ 798.112475][T18346] ? __pfx_stack_trace_save+0x10/0x10 [ 798.112506][T18346] ? stack_depot_save_flags+0x29/0x9c0 [ 798.112546][T18346] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 798.112586][T18346] walk_pgd_range+0xc05/0x1f50 [ 798.112624][T18346] ? __lock_acquire+0x622/0x1c90 [ 798.112673][T18346] ? __pfx_walk_pgd_range+0x10/0x10 [ 798.112703][T18346] ? find_held_lock+0x2b/0x80 [ 798.112736][T18346] __walk_page_range+0x163/0x820 [ 798.112770][T18346] ? __lock_acquire+0xb8a/0x1c90 [ 798.112813][T18346] walk_page_range_vma+0x2c7/0xa20 [ 798.112847][T18346] ? __pfx_walk_page_range_vma+0x10/0x10 [ 798.112877][T18346] ? find_held_lock+0x2b/0x80 [ 798.112919][T18346] madvise_pageout+0x257/0x540 [ 798.112956][T18346] ? __pfx_madvise_pageout+0x10/0x10 [ 798.113010][T18346] ? mtree_range_walk+0x718/0xc00 [ 798.113044][T18346] madvise_vma_behavior+0xb14/0x2d50 [ 798.113089][T18346] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 798.113129][T18346] ? __pfx_mt_find+0x10/0x10 [ 798.113168][T18346] ? find_vma_prev+0xd3/0x150 [ 798.113211][T18346] ? find_vma+0xbf/0x140 [ 798.113239][T18346] ? __pfx_find_vma+0x10/0x10 [ 798.113280][T18346] madvise_walk_vmas+0x31f/0x9c0 [ 798.113323][T18346] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 798.113378][T18346] madvise_do_behavior+0x1e2/0x530 [ 798.113413][T18346] ? futex_private_hash_put+0x18a/0x300 [ 798.113449][T18346] ? __pfx_madvise_do_behavior+0x10/0x10 [ 798.113488][T18346] ? down_read+0x13d/0x480 [ 798.113539][T18346] do_madvise+0x176/0x240 [ 798.113575][T18346] ? __pfx_do_madvise+0x10/0x10 [ 798.113609][T18346] ? do_futex+0x122/0x350 [ 798.113668][T18346] ? xfd_validate_state+0x61/0x180 [ 798.113704][T18346] ? __pfx_ksys_write+0x10/0x10 [ 798.113734][T18346] __x64_sys_madvise+0xa9/0x110 [ 798.113767][T18346] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.113795][T18346] do_syscall_64+0xcd/0xfa0 [ 798.113826][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.113852][T18346] RIP: 0033:0x7f93fe98f6c9 [ 798.113872][T18346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.113895][T18346] RSP: 002b:00007f93fcbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 798.113919][T18346] RAX: ffffffffffffffda RBX: 00007f93febe5fa0 RCX: 00007f93fe98f6c9 [ 798.113937][T18346] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 798.113954][T18346] RBP: 00007f93fea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 798.113969][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.113985][T18346] R13: 00007f93febe6038 R14: 00007f93febe5fa0 R15: 00007ffcb71a6d98 [ 798.114023][T18346] [ 798.944447][T17503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 798.954489][T17503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 798.963928][T17503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.000043][T17503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.007645][T17503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.368745][T14419] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.677791][T14419] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.969261][T14419] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.127180][T14419] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.371588][T18354] chnl_net:caif_netlink_parms(): no params data found [ 800.451739][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.458997][T18354] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.466656][T18354] bridge_slave_0: entered allmulticast mode [ 800.473609][T18354] bridge_slave_0: entered promiscuous mode [ 800.482089][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.489398][T18354] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.497457][T18354] bridge_slave_1: entered allmulticast mode [ 800.505948][T18354] bridge_slave_1: entered promiscuous mode [ 800.568369][T18354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.581802][T18354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.610238][T18354] team0: Port device team_slave_0 added [ 800.618863][T18354] team0: Port device team_slave_1 added [ 800.643295][T18354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.651007][T18354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.677430][T18354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.690643][T18354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.697805][T18354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.723961][T18354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.767809][T18354] hsr_slave_0: entered promiscuous mode [ 800.774479][T18354] hsr_slave_1: entered promiscuous mode [ 800.780514][T18354] debugfs: 'hsr0' already exists in 'hsr' [ 800.787097][T18354] Cannot create hsr debugfs directory [ 801.063909][ T5843] Bluetooth: hci3: command tx timeout [ 803.142881][ T5843] Bluetooth: hci3: command tx timeout [ 805.231918][ T5843] Bluetooth: hci3: command tx timeout [ 807.300710][ T5843] Bluetooth: hci3: command tx timeout [ 808.505764][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.512971][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.087039][T17503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 815.098324][T17503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 815.107370][T17503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 815.118585][T17503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 815.126248][T17503] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 815.501017][T18392] chnl_net:caif_netlink_parms(): no params data found [ 815.633872][T18405] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 815.755640][T18392] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.764455][T18392] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.787243][T18392] bridge_slave_0: entered allmulticast mode [ 815.794986][T18392] bridge_slave_0: entered promiscuous mode [ 815.803604][T18392] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.810979][T18392] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.818321][T18392] bridge_slave_1: entered allmulticast mode [ 815.825629][T18392] bridge_slave_1: entered promiscuous mode [ 815.883598][T18392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.913560][T18392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.973260][T18392] team0: Port device team_slave_0 added [ 815.981574][T18392] team0: Port device team_slave_1 added [ 816.024824][T18392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.032080][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.059848][T18392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.072183][T18392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.079405][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.105469][T18392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.212472][T18392] hsr_slave_0: entered promiscuous mode [ 816.222045][T18392] hsr_slave_1: entered promiscuous mode [ 816.232903][T18392] debugfs: 'hsr0' already exists in 'hsr' [ 816.247941][T18392] Cannot create hsr debugfs directory [ 816.616751][T18420] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 817.111863][T18429] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 817.215709][ T5843] Bluetooth: hci2: command tx timeout [ 818.195944][T18448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2492'. [ 818.475818][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2493'. [ 819.048626][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2495'. [ 819.294657][ T5843] Bluetooth: hci2: command tx timeout [ 819.500815][ T30] audit: type=1800 audit(4294967588.734:21): pid=18473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2497" name="version" dev="configfs" ino=66945 res=0 errno=0 [ 819.689124][T18477] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 821.373653][ T5843] Bluetooth: hci2: command tx timeout [ 823.452687][ T5843] Bluetooth: hci2: command tx timeout [ 835.296091][T17503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 835.315932][T17503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 835.326565][T17503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 835.335687][T17503] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 835.344479][T17503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 835.369732][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 835.389557][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 835.401439][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 835.412237][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 835.420725][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 835.591017][T18489] chnl_net:caif_netlink_parms(): no params data found [ 835.724248][T18489] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.731867][T18489] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.739403][T18489] bridge_slave_0: entered allmulticast mode [ 835.747088][T18489] bridge_slave_0: entered promiscuous mode [ 835.761014][T18489] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.768647][T18489] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.775908][T18489] bridge_slave_1: entered allmulticast mode [ 835.783834][T18489] bridge_slave_1: entered promiscuous mode [ 835.831531][T18489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.841019][T18492] chnl_net:caif_netlink_parms(): no params data found [ 835.855246][T18489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.915796][T18489] team0: Port device team_slave_0 added [ 835.928740][T18489] team0: Port device team_slave_1 added [ 835.980719][T18489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.988747][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.017365][T18489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.040741][T18489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.047932][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.074083][T18489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.085292][T18492] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.093018][T18492] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.102084][T18492] bridge_slave_0: entered allmulticast mode [ 836.109359][T18492] bridge_slave_0: entered promiscuous mode [ 836.123613][T18492] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.130871][T18492] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.138277][T18492] bridge_slave_1: entered allmulticast mode [ 836.145293][T18492] bridge_slave_1: entered promiscuous mode [ 836.183298][T18492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.207540][T18492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.244298][T18489] hsr_slave_0: entered promiscuous mode [ 836.250718][T18489] hsr_slave_1: entered promiscuous mode [ 836.257035][T18489] debugfs: 'hsr0' already exists in 'hsr' [ 836.262759][T18489] Cannot create hsr debugfs directory [ 836.295347][T18492] team0: Port device team_slave_0 added [ 836.310673][T18492] team0: Port device team_slave_1 added [ 836.364825][T18492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.372148][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.398179][T18492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.417231][T18492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.424210][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.451813][T18492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.542306][T18492] hsr_slave_0: entered promiscuous mode [ 836.549051][T18492] hsr_slave_1: entered promiscuous mode [ 836.555139][T18492] debugfs: 'hsr0' already exists in 'hsr' [ 836.560935][T18492] Cannot create hsr debugfs directory [ 837.375692][ T5843] Bluetooth: hci5: command tx timeout [ 837.445735][ T5843] Bluetooth: hci6: command tx timeout [ 839.444776][ T5843] Bluetooth: hci5: command tx timeout [ 839.534573][ T5843] Bluetooth: hci6: command tx timeout [ 841.523647][ T5843] Bluetooth: hci5: command tx timeout [ 841.605512][ T5843] Bluetooth: hci6: command tx timeout [ 843.602565][ T5843] Bluetooth: hci5: command tx timeout [ 843.682797][ T5843] Bluetooth: hci6: command tx timeout [ 859.215487][T17503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 859.227709][T17503] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 859.235675][T17503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 859.243912][T17503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 859.253696][T17503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 859.401418][T18509] chnl_net:caif_netlink_parms(): no params data found [ 859.469094][T18509] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.476321][T18509] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.483479][T18509] bridge_slave_0: entered allmulticast mode [ 859.492167][T18509] bridge_slave_0: entered promiscuous mode [ 859.500059][T18509] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.507434][T18509] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.515300][T18509] bridge_slave_1: entered allmulticast mode [ 859.522341][T18509] bridge_slave_1: entered promiscuous mode [ 859.553427][T18509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.565461][T18509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.596163][T18509] team0: Port device team_slave_0 added [ 859.603832][T18509] team0: Port device team_slave_1 added [ 859.630332][T18509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.637876][T18509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.664138][T18509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.677978][T18509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.685131][T18509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.711959][T18509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.754050][T18509] hsr_slave_0: entered promiscuous mode [ 859.760685][T18509] hsr_slave_1: entered promiscuous mode [ 859.767117][T18509] debugfs: 'hsr0' already exists in 'hsr' [ 859.772846][T18509] Cannot create hsr debugfs directory [ 861.273757][ T5843] Bluetooth: hci7: command tx timeout [ 863.362682][ T5843] Bluetooth: hci7: command tx timeout [ 865.431747][ T5843] Bluetooth: hci7: command tx timeout [ 867.510696][ T5843] Bluetooth: hci7: command tx timeout [ 869.912181][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.918513][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.691516][T17503] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 874.701972][T17503] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 874.709965][T17503] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 874.718145][T17503] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 874.727867][T17503] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 874.874678][T18520] chnl_net:caif_netlink_parms(): no params data found [ 874.944847][T18520] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.952130][T18520] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.959691][T18520] bridge_slave_0: entered allmulticast mode [ 874.966980][T18520] bridge_slave_0: entered promiscuous mode [ 874.975271][T18520] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.982671][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.990501][T18520] bridge_slave_1: entered allmulticast mode [ 874.997772][T18520] bridge_slave_1: entered promiscuous mode [ 875.026165][T18520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.039854][T18520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.070582][T18520] team0: Port device team_slave_0 added [ 875.078678][T18520] team0: Port device team_slave_1 added [ 875.105410][T18520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.112694][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.138818][T18520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.151620][T18520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.159539][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.185689][T18520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.226039][T18520] hsr_slave_0: entered promiscuous mode [ 875.232417][T18520] hsr_slave_1: entered promiscuous mode [ 875.238950][T18520] debugfs: 'hsr0' already exists in 'hsr' [ 875.244733][T18520] Cannot create hsr debugfs directory [ 876.786021][ T5843] Bluetooth: hci8: command tx timeout [ 878.865014][T17503] Bluetooth: hci8: command tx timeout [ 880.943937][T17503] Bluetooth: hci8: command tx timeout [ 883.022801][T17503] Bluetooth: hci8: command tx timeout [ 895.346996][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 895.357134][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 895.366416][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 895.374645][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 895.383848][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 895.417145][T17503] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 895.427868][T17503] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 895.436699][T17503] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 895.448242][T17503] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 895.458678][T17503] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 895.728424][T18536] chnl_net:caif_netlink_parms(): no params data found [ 895.780816][T18539] chnl_net:caif_netlink_parms(): no params data found [ 895.867994][T18536] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.875246][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.883158][T18536] bridge_slave_0: entered allmulticast mode [ 895.890420][T18536] bridge_slave_0: entered promiscuous mode [ 895.902993][T18536] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.910357][T18536] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.917927][T18536] bridge_slave_1: entered allmulticast mode [ 895.924953][T18536] bridge_slave_1: entered promiscuous mode [ 895.983892][T18539] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.991183][T18539] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.999113][T18539] bridge_slave_0: entered allmulticast mode [ 896.006815][T18539] bridge_slave_0: entered promiscuous mode [ 896.016800][T18536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.026261][T18539] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.033435][T18539] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.040913][T18539] bridge_slave_1: entered allmulticast mode [ 896.049215][T18539] bridge_slave_1: entered promiscuous mode [ 896.058830][T18536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.115911][T18536] team0: Port device team_slave_0 added [ 896.125146][T18539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.138670][T18536] team0: Port device team_slave_1 added [ 896.147481][T18539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.210417][T18536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.217601][T18536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.243961][T18536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.256919][T18539] team0: Port device team_slave_0 added [ 896.263554][T18536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.270579][T18536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.298725][T18536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.311796][T18539] team0: Port device team_slave_1 added [ 896.352159][T18539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.359225][T18539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.387039][T18539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.400409][T18539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.407667][T18539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.433598][T18539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.484186][T18536] hsr_slave_0: entered promiscuous mode [ 896.490938][T18536] hsr_slave_1: entered promiscuous mode [ 896.497685][T18536] debugfs: 'hsr0' already exists in 'hsr' [ 896.503412][T18536] Cannot create hsr debugfs directory [ 896.562975][T18539] hsr_slave_0: entered promiscuous mode [ 896.569721][T18539] hsr_slave_1: entered promiscuous mode [ 896.576318][T18539] debugfs: 'hsr0' already exists in 'hsr' [ 896.582726][T18539] Cannot create hsr debugfs directory [ 897.415748][ T5843] Bluetooth: hci9: command tx timeout [ 897.495607][ T5843] Bluetooth: hci10: command tx timeout [ 899.494704][ T5843] Bluetooth: hci9: command tx timeout [ 899.574756][ T5843] Bluetooth: hci10: command tx timeout [ 901.573622][ T5843] Bluetooth: hci9: command tx timeout [ 901.653584][ T5843] Bluetooth: hci10: command tx timeout [ 903.652563][ T5843] Bluetooth: hci9: command tx timeout [ 903.732523][ T5843] Bluetooth: hci10: command tx timeout [ 907.813637][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 919.747768][ T5843] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 919.760239][ T5843] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 919.768639][ T5843] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 919.777001][ T5843] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 919.786219][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 919.949834][T18556] chnl_net:caif_netlink_parms(): no params data found [ 920.018923][T18556] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.027084][T18556] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.034512][T18556] bridge_slave_0: entered allmulticast mode [ 920.041964][T18556] bridge_slave_0: entered promiscuous mode [ 920.050068][T18556] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.057299][T18556] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.065463][T18556] bridge_slave_1: entered allmulticast mode [ 920.072500][T18556] bridge_slave_1: entered promiscuous mode [ 920.102487][T18556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.114556][T18556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.146746][T18556] team0: Port device team_slave_0 added [ 920.155097][T18556] team0: Port device team_slave_1 added [ 920.180662][T18556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.187864][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.215189][T18556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.228719][T18556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.236241][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.262350][T18556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.307154][T18556] hsr_slave_0: entered promiscuous mode [ 920.313541][T18556] hsr_slave_1: entered promiscuous mode [ 920.320085][T18556] debugfs: 'hsr0' already exists in 'hsr' [ 920.325943][T18556] Cannot create hsr debugfs directory [ 921.883508][ T5843] Bluetooth: hci11: command tx timeout [ 923.162785][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 923.962625][T17503] Bluetooth: hci11: command tx timeout [ 926.041455][T17503] Bluetooth: hci11: command tx timeout [ 928.120464][T17503] Bluetooth: hci11: command tx timeout [ 931.324136][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.330595][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.756240][ T5843] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 934.770103][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 934.780789][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 934.790847][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 934.798697][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 934.950043][T18567] chnl_net:caif_netlink_parms(): no params data found [ 935.022293][T18567] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.029577][T18567] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.037353][T18567] bridge_slave_0: entered allmulticast mode [ 935.044642][T18567] bridge_slave_0: entered promiscuous mode [ 935.052763][T18567] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.060508][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.068556][T18567] bridge_slave_1: entered allmulticast mode [ 935.075595][T18567] bridge_slave_1: entered promiscuous mode [ 935.105982][T18567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.117981][T18567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.149025][T18567] team0: Port device team_slave_0 added [ 935.157346][T18567] team0: Port device team_slave_1 added [ 935.185815][T18567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.192852][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.219746][T18567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.232427][T18567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.239539][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.266080][T18567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.306978][T18567] hsr_slave_0: entered promiscuous mode [ 935.313409][T18567] hsr_slave_1: entered promiscuous mode [ 935.320175][T18567] debugfs: 'hsr0' already exists in 'hsr' [ 935.325894][T18567] Cannot create hsr debugfs directory [ 936.836351][ T5843] Bluetooth: hci12: command tx timeout [ 938.525065][T17503] Bluetooth: hci2: command 0x0406 tx timeout [ 938.915389][T17503] Bluetooth: hci12: command tx timeout [ 941.004156][T17503] Bluetooth: hci12: command tx timeout [ 943.074087][T17503] Bluetooth: hci12: command tx timeout [ 955.422800][ T5843] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 955.434421][ T5843] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 955.443113][T18494] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 955.453535][T18494] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 955.462180][T18494] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 955.463424][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 955.478612][T18494] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 955.487103][T18494] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 955.500363][T18494] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 955.509671][T18494] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 955.798742][T18584] chnl_net:caif_netlink_parms(): no params data found [ 955.834760][T18587] chnl_net:caif_netlink_parms(): no params data found [ 955.939290][T18584] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.948027][T18584] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.955402][T18584] bridge_slave_0: entered allmulticast mode [ 955.965351][T18584] bridge_slave_0: entered promiscuous mode [ 955.983584][T18584] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.990850][T18584] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.998446][T18584] bridge_slave_1: entered allmulticast mode [ 956.005726][T18584] bridge_slave_1: entered promiscuous mode [ 956.034867][T18587] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.042359][T18587] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.050437][T18587] bridge_slave_0: entered allmulticast mode [ 956.058146][T18587] bridge_slave_0: entered promiscuous mode [ 956.079512][T18587] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.086823][T18587] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.094204][T18587] bridge_slave_1: entered allmulticast mode [ 956.101631][T18587] bridge_slave_1: entered promiscuous mode [ 956.111662][T18584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.125736][T18584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.181549][T18584] team0: Port device team_slave_0 added [ 956.190638][T18584] team0: Port device team_slave_1 added [ 956.199607][T18587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.223496][T18587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.260588][T18584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.268186][T18584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.294727][T18584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.319164][T18584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.326270][T18584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.352462][T18584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.366810][T18587] team0: Port device team_slave_0 added [ 956.381209][T18587] team0: Port device team_slave_1 added [ 956.429551][T18587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.436582][T18587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.463582][T18587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.485700][T18587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.492778][T18587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.519159][T18587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.535707][T18584] hsr_slave_0: entered promiscuous mode [ 956.542374][T18584] hsr_slave_1: entered promiscuous mode [ 956.548948][T18584] debugfs: 'hsr0' already exists in 'hsr' [ 956.554671][T18584] Cannot create hsr debugfs directory [ 956.643984][T18587] hsr_slave_0: entered promiscuous mode [ 956.650797][T18587] hsr_slave_1: entered promiscuous mode [ 956.657518][T18587] debugfs: 'hsr0' already exists in 'hsr' [ 956.664231][T18587] Cannot create hsr debugfs directory [ 957.545804][T17503] Bluetooth: hci13: command tx timeout [ 957.550197][ T53] Bluetooth: hci14: command tx timeout [ 958.989879][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 958.994869][T17503] Bluetooth: hci6: command 0x0406 tx timeout [ 959.624919][ T5843] Bluetooth: hci14: command tx timeout [ 959.626299][T18494] Bluetooth: hci13: command tx timeout [ 960.104693][ T31] INFO: task kworker/u8:28:14419 blocked for more than 143 seconds. [ 960.114186][ T31] Tainted: G U syzkaller #0 [ 960.120712][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 960.130348][ T31] task:kworker/u8:28 state:D stack:23544 pid:14419 tgid:14419 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 960.143503][ T31] Workqueue: netns cleanup_net [ 960.148408][ T31] Call Trace: [ 960.151695][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 960.154659][ T31] __schedule+0x1190/0x5de0 [ 960.159327][ T31] ? __pfx___schedule+0x10/0x10 [ 960.164862][ T31] ? find_held_lock+0x2b/0x80 [ 960.169866][ T31] ? schedule+0x2d7/0x3a0 [ 960.174272][ T31] schedule+0xe7/0x3a0 [ 960.178359][ T31] schedule_timeout+0x257/0x290 [ 960.183237][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 960.191287][ T31] ? mark_held_locks+0x49/0x80 [ 960.196165][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 960.201398][ T31] __wait_for_common+0x2fc/0x4e0 [ 960.206736][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 960.212248][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 960.244042][ T31] remove_one+0x312/0x420 [ 960.248449][ T31] ? find_next_child+0x18f/0x280 [ 960.253458][ T31] __simple_recursive_removal+0x15b/0x610 [ 960.281384][ T31] ? __pfx_remove_one+0x10/0x10 [ 960.286486][ T31] debugfs_remove+0x5d/0x80 [ 960.291022][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 960.296182][ T31] nsim_dev_reload_destroy+0x144/0x4d0 [ 960.301667][ T31] nsim_dev_reload_down+0x6e/0xd0 [ 960.306860][ T31] devlink_reload+0x1a1/0x7c0 [ 960.311557][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 960.316891][ T31] devlink_pernet_pre_exit+0x1a0/0x2b0 [ 960.322470][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 960.328778][ T31] ? up_write+0x1b2/0x520 [ 960.333119][ T31] ? kobject_put+0xab/0x5a0 [ 960.337771][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 960.343772][ T31] ops_undo_list+0x187/0xab0 [ 960.349206][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 960.354399][ T31] ? cleanup_net+0x347/0x8b0 [ 960.359009][ T31] ? idr_destroy+0x62/0x2e0 [ 960.363535][ T31] cleanup_net+0x41b/0x8b0 [ 960.368109][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 960.373062][ T31] ? rcu_is_watching+0x12/0xc0 [ 960.377897][ T31] process_one_work+0x9cf/0x1b70 [ 960.382859][ T31] ? __pfx_process_one_work+0x10/0x10 [ 960.388359][ T31] ? assign_work+0x1a0/0x250 [ 960.392969][ T31] worker_thread+0x6c8/0xf10 [ 960.397625][ T31] ? __pfx_worker_thread+0x10/0x10 [ 960.402756][ T31] kthread+0x3c5/0x780 [ 960.406935][ T31] ? __pfx_kthread+0x10/0x10 [ 960.411544][ T31] ? rcu_is_watching+0x12/0xc0 [ 960.416397][ T31] ? __pfx_kthread+0x10/0x10 [ 960.421095][ T31] ret_from_fork+0x675/0x7d0 [ 960.425895][ T31] ? __pfx_kthread+0x10/0x10 [ 960.430510][ T31] ret_from_fork_asm+0x1a/0x30 [ 960.435509][ T31] [ 960.438575][ T31] INFO: task syz-executor:18354 blocked for more than 143 seconds. [ 960.446595][ T31] Tainted: G U syzkaller #0 [ 960.453498][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 960.462279][ T31] task:syz-executor state:D stack:24456 pid:18354 tgid:18354 ppid:1 task_flags:0x400140 flags:0x00080002 [ 960.474291][ T31] Call Trace: [ 960.477560][ T31] [ 960.480478][ T31] __schedule+0x1190/0x5de0 [ 960.485040][ T31] ? check_path.constprop.0+0x24/0x50 [ 960.490433][ T31] ? __lock_acquire+0x622/0x1c90 [ 960.495443][ T31] ? __pfx___schedule+0x10/0x10 [ 960.500310][ T31] ? find_held_lock+0x2b/0x80 [ 960.505167][ T31] ? schedule+0x2d7/0x3a0 [ 960.509515][ T31] ? device_del+0xa0/0x9f0 [ 960.514106][ T31] schedule+0xe7/0x3a0 [ 960.518196][ T31] schedule_preempt_disabled+0x13/0x30 [ 960.523735][ T31] __mutex_lock+0x818/0x1060 [ 960.528453][ T31] ? device_del+0xa0/0x9f0 [ 960.532899][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 960.538020][ T31] ? mark_held_locks+0x49/0x80 [ 960.542807][ T31] ? device_del+0xa0/0x9f0 [ 960.547407][ T31] device_del+0xa0/0x9f0 [ 960.552089][ T31] ? __pfx_ida_free+0x10/0x10 [ 960.556861][ T31] ? __pfx_device_del+0x10/0x10 [ 960.561737][ T31] device_unregister+0x1d/0xc0 [ 960.566558][ T31] del_device_store+0x355/0x4a0 [ 960.571427][ T31] ? __pfx_del_device_store+0x10/0x10 [ 960.576867][ T31] ? find_held_lock+0x2b/0x80 [ 960.581554][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 960.587170][ T31] ? __pfx_del_device_store+0x10/0x10 [ 960.592575][ T31] bus_attr_store+0x74/0xb0 [ 960.597478][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 960.602704][ T31] sysfs_kf_write+0xf2/0x150 [ 960.607385][ T31] kernfs_fop_write_iter+0x3af/0x570 [ 960.612689][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 960.617951][ T31] vfs_write+0x7d3/0x11d0 [ 960.622289][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 960.628330][ T31] ? __pfx_vfs_write+0x10/0x10 [ 960.633110][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 960.638448][ T31] ksys_write+0x12a/0x250 [ 960.642819][ T31] ? __pfx_ksys_write+0x10/0x10 [ 960.647848][ T31] do_syscall_64+0xcd/0xfa0 [ 960.652954][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.659120][ T31] RIP: 0033:0x7faeb438e17f [ 960.663548][ T31] RSP: 002b:00007ffe4fb18ad0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 960.672029][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007faeb438e17f [ 960.680064][ T31] RDX: 0000000000000001 RSI: 00007ffe4fb18b20 RDI: 0000000000000005 [ 960.688105][ T31] RBP: 00007faeb44132cb R08: 0000000000000000 R09: 00007ffe4fb18927 [ 960.696203][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 960.704229][ T31] R13: 00007ffe4fb18b20 R14: 00007faeb5114620 R15: 0000000000000003 [ 960.712215][ T31] [ 960.715321][ T31] INFO: task syz.0.2479:18365 blocked for more than 143 seconds. [ 960.723055][ T31] Tainted: G U syzkaller #0 [ 960.729793][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 960.738527][ T31] task:syz.0.2479 state:D stack:27032 pid:18365 tgid:18364 ppid:18097 task_flags:0x400140 flags:0x00080002 [ 960.751412][ T31] Call Trace: [ 960.756736][ T31] [ 960.759700][ T31] __schedule+0x1190/0x5de0 [ 960.764449][ T31] ? __pfx___schedule+0x10/0x10 [ 960.769330][ T31] ? find_held_lock+0x2b/0x80 [ 960.774782][ T31] ? schedule+0x2d7/0x3a0 [ 960.779248][ T31] ? devlink_health_report+0x6b4/0xb00 [ 960.784802][ T31] schedule+0xe7/0x3a0 [ 960.789015][ T31] schedule_preempt_disabled+0x13/0x30 [ 960.794708][ T31] __mutex_lock+0x818/0x1060 [ 960.799332][ T31] ? devlink_health_report+0x6b4/0xb00 [ 960.804888][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 960.809944][ T31] ? devlink_health_report+0x6b4/0xb00 [ 960.815474][ T31] devlink_health_report+0x6b4/0xb00 [ 960.820785][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 960.830557][ T31] ? _copy_from_user+0x59/0xd0 [ 960.835449][ T31] nsim_dev_health_break_write+0x166/0x210 [ 960.841281][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 960.847720][ T31] full_proxy_write+0x131/0x1a0 [ 960.852592][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 960.858655][ T31] vfs_write+0x2a0/0x11d0 [ 960.863016][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 960.868119][ T31] ? __pfx_vfs_write+0x10/0x10 [ 960.872903][ T31] ? __fget_files+0x20e/0x3c0 [ 960.877746][ T31] ksys_write+0x12a/0x250 [ 960.882093][ T31] ? __pfx_ksys_write+0x10/0x10 [ 960.887070][ T31] do_syscall_64+0xcd/0xfa0 [ 960.891593][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.897542][ T31] RIP: 0033:0x7f06b6b8f6c9 [ 960.901964][ T31] RSP: 002b:00007f06b7958038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 960.910545][ T31] RAX: ffffffffffffffda RBX: 00007f06b6de5fa0 RCX: 00007f06b6b8f6c9 [ 960.918586][ T31] RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000007 [ 960.926623][ T31] RBP: 00007f06b6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 960.934741][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.942703][ T31] R13: 00007f06b6de6038 R14: 00007f06b6de5fa0 R15: 00007ffccd0b8c58 [ 960.950771][ T31] [ 960.953859][ T31] INFO: task syz-executor:18392 blocked for more than 144 seconds. [ 960.962147][ T31] Tainted: G U syzkaller #0 [ 960.972904][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 960.981673][ T31] task:syz-executor state:D stack:24120 pid:18392 tgid:18392 ppid:1 task_flags:0x400140 flags:0x00080002 [ 960.993898][ T31] Call Trace: [ 960.997173][ T31] [ 961.000121][ T31] __schedule+0x1190/0x5de0 [ 961.004704][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 961.010111][ T31] ? __lock_acquire+0x622/0x1c90 [ 961.015145][ T31] ? __pfx___schedule+0x10/0x10 [ 961.020019][ T31] ? find_held_lock+0x2b/0x80 [ 961.024799][ T31] ? schedule+0x2d7/0x3a0 [ 961.029151][ T31] ? del_device_store+0xd1/0x4a0 [ 961.034269][ T31] schedule+0xe7/0x3a0 [ 961.038379][ T31] schedule_preempt_disabled+0x13/0x30 [ 961.043946][ T31] __mutex_lock+0x818/0x1060 [ 961.048556][ T31] ? del_device_store+0xd1/0x4a0 [ 961.053494][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 961.058607][ T31] ? __pfx_sscanf+0x10/0x10 [ 961.063652][ T31] ? __lock_acquire+0x622/0x1c90 [ 961.068633][ T31] ? del_device_store+0xd1/0x4a0 [ 961.073692][ T31] del_device_store+0xd1/0x4a0 [ 961.078477][ T31] ? __pfx_del_device_store+0x10/0x10 [ 961.083941][ T31] ? find_held_lock+0x2b/0x80 [ 961.088651][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 961.093500][ T31] ? __pfx_del_device_store+0x10/0x10 [ 961.098989][ T31] bus_attr_store+0x74/0xb0 [ 961.103514][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 961.109017][ T31] sysfs_kf_write+0xf2/0x150 [ 961.113723][ T31] kernfs_fop_write_iter+0x3af/0x570 [ 961.119034][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 961.124312][ T31] vfs_write+0x7d3/0x11d0 [ 961.128660][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 961.134575][ T31] ? __pfx_vfs_write+0x10/0x10 [ 961.139495][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 961.145165][ T31] ? find_held_lock+0x2b/0x80 [ 961.149882][ T31] ksys_write+0x12a/0x250 [ 961.154317][ T31] ? __pfx_ksys_write+0x10/0x10 [ 961.159195][ T31] do_syscall_64+0xcd/0xfa0 [ 961.164402][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.170328][ T31] RIP: 0033:0x7f608578e17f [ 961.175008][ T31] RSP: 002b:00007ffdcf504340 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 961.183434][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f608578e17f [ 961.191503][ T31] RDX: 0000000000000001 RSI: 00007ffdcf504390 RDI: 0000000000000005 [ 961.199564][ T31] RBP: 00007f60858132cb R08: 0000000000000000 R09: 00007ffdcf504197 [ 961.207629][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 961.215762][ T31] R13: 00007ffdcf504390 R14: 00007f6086514620 R15: 0000000000000003 [ 961.224103][ T31] [ 961.227187][ T31] [ 961.227187][ T31] Showing all locks held in the system: [ 961.235013][ T31] 4 locks held by kworker/u8:0/12: [ 961.240217][ T31] #0: ffff8880b843a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 961.250234][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 961.259048][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 961.268951][ T31] #3: ffffffff8e3c45a0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 [ 961.279377][ T31] 1 lock held by khungtaskd/31: [ 961.284264][ T31] #0: ffffffff8e3c45a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 961.294292][ T31] 2 locks held by getty/12277: [ 961.299060][ T31] #0: ffff8880352d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 961.309050][ T31] #1: ffffc9000b36d2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 961.319274][ T31] 6 locks held by kworker/u8:28/14419: [ 961.324976][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 961.335519][ T31] #1: ffffc900036afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 961.345622][ T31] #2: ffffffff900d44d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 961.355059][ T31] #3: ffff88807cae20e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 961.365163][ T31] #4: ffff88807cae3250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 [ 961.376483][ T31] #5: ffff88805b078148 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 [ 961.388553][ T31] 5 locks held by syz-executor/18354: [ 961.393973][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.402979][ T31] #1: ffff888078d8b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.412821][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.423048][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.433566][ T31] #4: ffff88807cae20e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 [ 961.442404][ T31] 3 locks held by syz.0.2479/18365: [ 961.447794][ T31] #0: ffff888077814b78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 961.456948][ T31] #1: ffff888140ef8420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.465992][ T31] #2: ffff88807cae3250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xb00 [ 961.477151][ T31] 4 locks held by syz-executor/18392: [ 961.482544][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.492078][ T31] #1: ffff88803356a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.501932][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.512021][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.522398][ T31] 2 locks held by syz.1.2496/18470: [ 961.527651][ T31] #0: ffff888140ef8420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 [ 961.536976][ T31] #1: ffff88805b078148 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 [ 961.547647][ T31] 2 locks held by syz.3.2499/18480: [ 961.552860][ T31] #0: ffff888140ef8420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 [ 961.562179][ T31] #1: ffff88805b078148 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 [ 961.572643][ T31] 4 locks held by syz-executor/18489: [ 961.578627][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.587758][ T31] #1: ffff88805a839088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.597616][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.607763][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.618172][ T31] 4 locks held by syz-executor/18492: [ 961.624222][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.633200][ T31] #1: ffff8880782cd088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.643038][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.653246][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.663840][ T31] 4 locks held by syz-executor/18509: [ 961.669207][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.678774][ T31] #1: ffff88814636a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.688666][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.698796][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.709221][T18494] Bluetooth: hci13: command tx timeout [ 961.713459][ T31] 4 locks held by syz-executor/18520: [ 961.714764][ T5843] Bluetooth: hci14: command tx timeout [ 961.720048][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.735889][ T31] #1: ffff888058b2f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.745729][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.755948][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.766508][ T31] 4 locks held by syz-executor/18536: [ 961.771910][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.781504][ T31] #1: ffff88805a73d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.792040][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.803848][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.814300][ T31] 4 locks held by syz-executor/18539: [ 961.819786][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.828851][ T31] #1: ffff8880a73a2888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.838888][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.849005][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.859446][ T31] 4 locks held by syz-executor/18556: [ 961.864983][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.877154][ T31] #1: ffff88803196ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.888302][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.898443][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.909012][ T31] 4 locks held by syz-executor/18567: [ 961.914463][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.923527][ T31] #1: ffff8880ae85d888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.933424][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.943673][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.954108][ T31] 4 locks held by syz-executor/18584: [ 961.959611][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 961.968652][ T31] #1: ffff888064b62488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 961.978501][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 961.989239][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 961.999672][ T31] 4 locks held by syz-executor/18587: [ 962.005120][ T31] #0: ffff888035596420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 962.014174][ T31] #1: ffff88809a345888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 962.033175][ T31] #2: ffff888143b7b008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 962.043856][ T31] #3: ffffffff8f66cb48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 962.054292][ T31] [ 962.056617][ T31] ============================================= [ 962.056617][ T31] [ 962.065566][ T31] NMI backtrace for cpu 1 [ 962.065581][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 962.065601][ T31] Tainted: [U]=USER [ 962.065605][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 962.065614][ T31] Call Trace: [ 962.065620][ T31] [ 962.065625][ T31] dump_stack_lvl+0x116/0x1f0 [ 962.065646][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 962.065666][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 962.065687][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 962.065709][ T31] watchdog+0xf3f/0x1170 [ 962.065724][ T31] ? rcu_is_watching+0x12/0xc0 [ 962.065739][ T31] ? __pfx_watchdog+0x10/0x10 [ 962.065751][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 962.065773][ T31] ? __kthread_parkme+0x19e/0x250 [ 962.065791][ T31] ? __pfx_watchdog+0x10/0x10 [ 962.065803][ T31] kthread+0x3c5/0x780 [ 962.065822][ T31] ? __pfx_kthread+0x10/0x10 [ 962.065843][ T31] ? rcu_is_watching+0x12/0xc0 [ 962.065856][ T31] ? __pfx_kthread+0x10/0x10 [ 962.065876][ T31] ret_from_fork+0x675/0x7d0 [ 962.065896][ T31] ? __pfx_kthread+0x10/0x10 [ 962.065916][ T31] ret_from_fork_asm+0x1a/0x30 [ 962.065944][ T31] [ 962.065949][ T31] Sending NMI from CPU 1 to CPUs 0: [ 962.192844][ C0] NMI backtrace for cpu 0 [ 962.192868][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U syzkaller #0 PREEMPT(full) [ 962.192901][ C0] Tainted: [U]=USER [ 962.192908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 962.192921][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 962.192951][ C0] Code: b7 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 e4 2c 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 962.192973][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 962.192993][ C0] RAX: 0000000000cfec79 RBX: 0000000000000000 RCX: ffffffff8b5d42a9 [ 962.193011][ C0] RDX: 0000000000000000 RSI: ffffffff8da27d51 RDI: ffffffff8bf075c0 [ 962.193024][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 962.193036][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 962.193050][ C0] R13: ffffffff8e097a00 R14: ffffffff908239d0 R15: 0000000000000000 [ 962.193063][ C0] FS: 0000000000000000(0000) GS:ffff888124a10000(0000) knlGS:0000000000000000 [ 962.193084][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.193099][ C0] CR2: 000055723f532d08 CR3: 0000000033b58000 CR4: 00000000003526f0 [ 962.193113][ C0] Call Trace: [ 962.193121][ C0] [ 962.193128][ C0] default_idle+0x13/0x20 [ 962.193155][ C0] default_idle_call+0x6c/0xb0 [ 962.193185][ C0] do_idle+0x38d/0x500 [ 962.193211][ C0] ? __pfx_do_idle+0x10/0x10 [ 962.193233][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 962.193268][ C0] cpu_startup_entry+0x4f/0x60 [ 962.193290][ C0] rest_init+0x16b/0x2b0 [ 962.193321][ C0] ? acpi_subsystem_init+0x133/0x180 [ 962.193353][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 962.193386][ C0] start_kernel+0x3f6/0x4e0 [ 962.193417][ C0] x86_64_start_reservations+0x18/0x30 [ 962.193448][ C0] x86_64_start_kernel+0x130/0x190 [ 962.193479][ C0] common_startup_64+0x13e/0x148 [ 962.193510][ C0] [ 963.782591][T18494] Bluetooth: hci13: command tx timeout [ 963.788131][ T5843] Bluetooth: hci14: command tx timeout