last executing test programs: 9.843050465s ago: executing program 0 (id=4546): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='-)', 0x2) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv9\x00', 0x102, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100), 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="c826e9becc9e16f989541f1b5d3c20ecc3d349a1399b39447015570456e54d509b40a5fcb16be982e8c9adf89d559416b87740fa5fb0862678881f46f3702ac31e2fcdee0ca7e03a47", 0x49) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 8.50926225s ago: executing program 3 (id=4549): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) utimes$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x1, 0xfffffffffffffffb}) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r1) eventfd$auto(0x7) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/ns/cgroup\x00', 0x82, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty23\x00', 0x41, 0x0) setsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xa77, 0x1d, &(0x7f00000002c0)='nbd\x00', 0x2) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001080)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r4, @ANYRES32=r1, @ANYRES32, @ANYBLOB="04003a8008000100", @ANYRES32=r2, @ANYBLOB='\b\x00U\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="d25e5ac5e6742725b3430f4aaa04841d21b21f9cd175dbded69449965b60324b16d765efbb0d7f4a56eb809baca4ed7d0ba9eaddbbc9f1d4ac4ddbe4187ee2b4e24c653d41cfa04543b8d606beec79b8aceb6ffd5e4ada55e5db205aaa92cd215c9ad7167f34ae0276c874232573ca11c26be3b1a2d6fa9e034a50241a0c77c5ac421d10399bf2f6ca37bcd1686506482374a8a3d2a7cc0867ea0dad7d7107228c1c6a01d61d83935b29df80ddbee69f913608cfc93b3a6ea721d61723150e1410857db0200f5ad4adc8aa0b088af301db01de13acea03cad61da6e29dcbb0a04cd713756367f9", @ANYRES32=r0, @ANYBLOB="a7007c8016f253948470f542adbbf41bc5ae1f0df0ff1b2980db6223ae888e36069a559e31b8ef26db1c3f87859a72426dd6e7e5e831ed823fee066e3fe34749bb3cbbc295063484f6669d3ae3ef8bf22c3333b23cbcbab420e022b5c84adc172f5dd0d61a0ceb98253fd74094a982ac141400966c60a49d4e5a08cde68144fa3cf4f452d6bb3129ef2a2e1b82a62c803968ec3bf7fb6c0800bd00", @ANYRES32=r3, @ANYBLOB="0400e2800400cb8000a17d2aad2291276a18ad51b027b551f8308a75b7c1b86d7703cc5426294f6ab3731085515bc3cf7f30cc92f13a18620e89d8e52fa5da8c6f15422a5760b3c2ce164a4f240e95e3d0f5e79ac6f1cd0d4dabdd206202462a4135ba804b34bfcca8a4c075b3155939d4157386e3f7091e80c2965423a541b75f1cd58b266ad1716b19889d950deec57374bbb2780377f67795be52ecf548a300963cce7866cf887ee86ed88c23254c4265379cff75db6b94ccd6f043eaf272c7205373addee12b43dbd03d9437f9783a88aaa467e48b72fcc41c11f5a0d11100463f98b44190bee69d5b06554155398e3a95205823c7467f8a2f1800318014004100ff010000000000000000000000000001a23b767d043c"], 0x760}, 0x1, 0x0, 0x0, 0x40044}, 0x200480d0) setns(0xc9, 0x0) unshare$auto(0x9) unshare$auto(0x3) ioctl$auto_MEMREADOOB(r3, 0xc0104d04, &(0x7f0000000280)={0xd, 0x1, &(0x7f0000000240)='nbd\x00'}) r5 = fcntl$auto_F_UNLCK(r3, 0x9, 0x2) ioctl$auto(r1, 0x2, r5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.296024171s ago: executing program 0 (id=4550): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='-)', 0x2) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3b) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) getsockopt$auto_SO_PEERPIDFD(r2, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv9\x00', 0x102, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000100), 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000440)="c826e9becc9e16f989541f1b5d3c20ecc3d349a1399b39447015570456e54d509b40a5fcb16be982e8c9adf89d559416b87740fa5fb0862678881f46f3702ac31e2fcdee0ca7e03a47", 0x49) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 6.822650309s ago: executing program 2 (id=4552): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='-)', 0x2) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv9\x00', 0x102, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="c80d1b", 0x3) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="c826e9becc9e16f989541f1b5d3c20ecc3d349a1399b39447015570456e54d509b40a5fcb16be982e8c9adf89d559416b87740fa5fb0862678881f46f3702ac31e2fcdee0ca7e03a47", 0x49) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 6.469612937s ago: executing program 3 (id=4553): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/4u\x00', 0x260202, 0x0) pread64$auto(r0, 0x0, 0xffffff7f, 0x8000000000009) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r1, &(0x7f00000000c0)=""/122, 0x7a) pread64$auto(r0, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x7ff, 0x6) landlock_restrict_self$auto(r1, 0xb) 6.410158076s ago: executing program 3 (id=4554): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) utimes$auto(0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) eventfd$auto(0x7) setsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xa77, 0x1d, &(0x7f00000002c0)='nbd\x00', 0x2) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001080)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16, @ANYRES32=r1, @ANYRES32, @ANYBLOB="04003a8008000100", @ANYRES32, @ANYBLOB='\b\x00U\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="a7007c8016f253948470f542adbbf41bc5ae1f0df0ff1b2980db6223ae888e36069a559e31b8ef26db1c3f87859a72426dd6e7e5e831ed823fee066e3fe34749bb3cbbc295063484f6669d3ae3ef8bf22c3333b23cbcbab420e022b5c84adc172f5dd0d61a0ceb98253fd74094a982ac141400966c60a49d4e5a08cde68144fa3cf4f452d6bb3129ef2a2e1b82a62c803968ec3bf7fb6c0800bd00", @ANYRES32=r2, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x40044}, 0x200480d0) unshare$auto(0x9) ioctl$auto_MEMREADOOB(r2, 0xc0104d04, &(0x7f0000000280)={0xd, 0x1, &(0x7f0000000240)='nbd\x00'}) r3 = fcntl$auto_F_UNLCK(r2, 0x9, 0x2) ioctl$auto(r1, 0x2, r3) 5.21205997s ago: executing program 0 (id=4555): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='-)', 0x2) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv9\x00', 0x102, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100), 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="c826e9becc9e16f989541f1b5d3c20ecc3d349a1399b39447015570456e54d509b40a5fcb16be982e8c9adf89d559416b87740fa5fb0862678881f46f3702ac31e2fcdee0ca7e03a47", 0x49) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 5.015211597s ago: executing program 2 (id=4557): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000100)="69da2ad4", 0x4) close_range$auto(0x2, 0x8, 0x0) mincore$auto(0x0, 0x200, &(0x7f0000000000)='#@$-${]\\:&\x00') r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x30000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x2, 0x801, 0x106) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x10, 0x28000009, 0x63, 0x0, 0x0, 0x0, 0x10000000000002, 0x401, 0x1003, 0x8, 0x7ffffffc, 0x3, 0xffffffffffffffff, 0x8009, 0xa, 0x280000100106}) sendfile$auto(0xffffffffffffffff, r1, &(0x7f0000000080)=0xfffffffffffffffc, 0x7fffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4ad00, 0x0) 4.870636285s ago: executing program 3 (id=4558): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) utimes$auto(0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r1) setsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xa77, 0x1d, &(0x7f00000002c0)='nbd\x00', 0x2) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001080)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r3, @ANYRES32=r1, @ANYRES32, @ANYBLOB="04003a8008000100", @ANYRES32, @ANYBLOB='\b\x00U\x00', @ANYRES32, @ANYBLOB="08001c00000000004002345dce61526e14ca5d9a35e8f69138685435e3ec7c248ed9ef1510395223ec5f30186c329c389854c55fd6059be28840e0f1986c6c88aa0cd554c1ef1d0ff2cda5812d571ac7ffd32aa195d0970030800856008068bf58ed1a8c51cef14968a95e47bf37237e32187f7eedfb82f03b857e4617acc2c4b2608f019e0b18ce053748f0f13d7853b1bb267a78495225d5798a04cdbe1670254508d30910a3a24375437ba7fdf6196eb05ac7c67b93ef5271fdb933f39c47db38d105a1029d65a4dba2941591bf1caf2ccd33268d784787d8b47e04162685f20400118008002a0010000000002574a7fba769823c2b344808792ba911d4b67155c0c55c7ae0a342bba1f39374656f7006bf01c1edde1d2adc69af21d268352e871c64eea896d131299cd7c36e560fc4de44024767849bba2d8f782c6a6924dadacf8ababb806135cb2cc3ffb4111ad0a892a18896cdc73b12b322edfe8d1a4501663f24cef6e40421f7fa6422f30203dc83d6331e3a75adac1b31e769daae38a723c307e18bfcd65363b43539ac881d693b5efcdbf574fd7c279c610074486a1c140f1da328ac353670c0125bf39c146d235546e21830e9b912931c34620022edc6e4e16474b4bf58ea40365465f5d8f027892010c3c7f63229cb04de61d3a8c100160075380d4e57ff659326a641a648012d7078ca3f09b51ee02f28e6a72f406c7ccb6c1da43cd4150ba86a029e4dedb541a5fda3542e64abfd6535c13e36a6df25a56b7aba4367a79ab9ff84d8e22ddd909eecd0c1515c159e5fa0b6c49def8a5dd97fd97def37750472b04db9ca89010faf7bd8a0f3bfbea3dbdbb9b9276c2b20548a36266f0b603d44bfb17e24e4139067d0aa9e0fd83045c6502e2d42532e48880130d9826249b993ea8b83e79a1a561ee75733907469bcc6bc34e28f8a00000008007d00ac1e00010000000800bd00ac14141b40005400f3f731bafccc06e4419f2fb52ff42d2da60f10cf0e903b0e16b41aaf28f178d8b92018668e088ce7ecb867e589a45b26d0841b8626b1c4e4a6f31eca0400a18008008500ac1414bb08004700e000000214003b00fc000000000000000000000000000001ff000980080038007263e3f7acdcc02573205f2b958bff764cd52023463c29922acbc5ed61daa0f41a9e5410d742c53ffcd6b307524282c7", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="a7007c8016f253948470f542adbbf41bc5ae1f0df0ff1b2980db6223ae888e36069a559e31b8ef26db1c3f87859a72426dd6e7e5e831ed823fee066e3fe34749bb3cbbc295063484f6669d3ae3ef8bf22c3333b23cbcbab420e022b5c84adc172f5dd0d61a0ceb98253fd74094a982ac141400966c60a49d4e5a08cde68144fa3cf4f452d6bb3129ef2a2e1b82a62c803968ec3bf7fb6c0800bd00", @ANYRES32=r2, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x40044}, 0x200480d0) unshare$auto(0x9) ioctl$auto_MEMREADOOB(r2, 0xc0104d04, &(0x7f0000000280)={0xd, 0x1, &(0x7f0000000240)='nbd\x00'}) r4 = fcntl$auto_F_UNLCK(r2, 0x9, 0x2) ioctl$auto(r1, 0x2, r4) 4.520421956s ago: executing program 2 (id=4559): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80001, 0x0) syncfs$auto(r0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) r2 = setfsgid$auto(0xee01) setresgid$auto(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) shutdown$auto(0x200000003, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) setfsuid$auto(0x0) open(0x0, 0x22240, 0x154) fchmod$auto(0xffffffffffffffff, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) write$auto(0x3, 0x0, 0x3) 4.100164239s ago: executing program 0 (id=4561): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) utimes$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x1, 0xfffffffffffffffb}) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r1) eventfd$auto(0x7) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/ns/cgroup\x00', 0x82, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty23\x00', 0x41, 0x0) setsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xa77, 0x1d, &(0x7f00000002c0)='nbd\x00', 0x2) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001080)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r4, @ANYRES32=r1, @ANYRES32, @ANYBLOB="04003a8008000100", @ANYRES32=r2, @ANYBLOB='\b\x00U\x00', @ANYRES32, @ANYBLOB="08001c00000000004002345dce61526e14ca5d9a35e8f69138685435e3ec7c248ed9ef1510395223ec5f30186c329c389854c55fd6059be28840e0f1986c6c88aa0cd554c1ef1d0ff2cda5812d571ac7ffd32aa195d0970030800856008068bf58ed1a8c51cef14968a95e47bf37237e32187f7eedfb82f03b857e4617acc2c4b2608f019e0b18ce053748f0f13d7853b1bb267a78495225d5798a04cdbe1670254508d30910a3a24375437ba7fdf6196eb05ac7c67b93ef5271fdb933f39c47db38d105a1029d65a4dba2941591bf1caf2ccd33268d784787d8b47e04162685f20400118008002a0010000000002574a7fba769823c2b344808792ba911d4b67155c0c55c7ae0a342bba1f39374656f7006bf01c1edde1d2adc69af21d268352e871c64eea896d131299cd7c36e560fc4de44024767849bba2d8f782c6a6924dadacf8ababb806135cb2cc3ffb4111ad0a892a18896cdc73b12b322edfe8d1a4501663f24cef6e40421f7fa6422f30203dc83d6331e3a75adac1b31e769daae38a723c307e18bfcd65363b43539ac881d693b5efcdbf574fd7c279c610074486a1c140f1da328ac353670c0125bf39c146d235546e21830e9b912931c34620022edc6e4e16474b4bf58ea40365465f5d8f027892010c3c7f63229cb04de61d3a8c100160075380d4e57ff659326a641a648012d7078ca3f09b51ee02f28e6a72f406c7ccb6c1da43cd4150ba86a029e4dedb541a5fda3542e64abfd6535c13e36a6df25a56b7aba4367a79ab9ff84d8e22ddd909eecd0c1515c159e5fa0b6c49def8a5dd97fd97def37750472b04db9ca89010faf7bd8a0f3bfbea3dbdbb9b9276c2b20548a36266f0b603d44bfb17e24e4139067d0aa9e0fd83045c6502e2d42532e48880130d9826249b993ea8b83e79a1a561ee75733907469bcc6bc34e28f8a00000008007d00ac1e00010000000800bd00ac14141b40005400f3f731bafccc06e4419f2fb52ff42d2da60f10cf0e903b0e16b41aaf28f178d8b92018668e088ce7ecb867e589a45b26d0841b8626b1c4e4a6f31eca0400a18008008500ac1414bb08004700e000000214003b00fc000000000000000000000000000001ff000980080038007263e3f7acdcc02573205f2b958bff764cd52023463c29922acbc5ed61daa0f41a9e5410d742c53ffcd6b307524282c7", @ANYRES32=0xee01, @ANYBLOB="d25e5ac5e6742725b3430f4aaa04841d21b21f9cd175dbded69449965b60324b16d765efbb0d7f4a56eb809baca4ed7d0ba9eaddbbc9f1d4ac4ddbe4187ee2b4e24c653d41cfa04543b8d606beec79b8aceb6ffd5e4ada55e5db205aaa92cd215c9ad7167f34ae0276c874232573ca11c26be3b1a2d6fa9e034a50241a0c77c5ac421d10399bf2f6ca37bcd1686506482374a8a3d2a7cc0867ea0dad7d7107228c1c6a01d61d83935b29df80ddbee69f913608cfc93b3a6ea721d61723150e1410857db0200f5ad4adc8aa0b088af301db01de13acea03cad61da6e29dcbb0a04cd713756367f9f412f4f559bad9b7312d5ca30006000a00", @ANYRES32=r0, @ANYBLOB="a7007c8016f253948470f542adbbf41bc5ae1f0df0ff1b2980db6223ae888e36069a559e31b8ef26db1c3f87859a72426dd6e7e5e831ed823fee066e3fe34749bb3cbbc295063484f6669d3ae3ef8bf22c3333b23cbcbab420e022b5c84adc172f5dd0d61a0ceb98253fd74094a982ac141400966c60a49d4e5a08cde68144fa3cf4f452d6bb3129ef2a2e1b82a62c803968ec3bf7fb6c0800bd00", @ANYRES32=r3, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x40044}, 0x200480d0) setns(0xc9, 0x0) unshare$auto(0x9) unshare$auto(0x3) ioctl$auto_MEMREADOOB(r3, 0xc0104d04, &(0x7f0000000280)={0xd, 0x1, &(0x7f0000000240)='nbd\x00'}) r5 = fcntl$auto_F_UNLCK(r3, 0x9, 0x2) ioctl$auto(r1, 0x2, r5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.056776724s ago: executing program 1 (id=4562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000001640)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x48, 0x18, "64cf89334997f033a12c5c6b926b3bd1e1ec44c5e82197d43214b8eb52d4252c1ea5600c540d3fb2fa617ce24b3b52bdb6fedf87fad8642509d91563fa939c6a6da422d4"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008044}, 0x40800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) clock_settime$auto(0x0, &(0x7f0000000140)={0x100000000}) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000000080)={0x199c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x42d, 0x2, 0x0, 0x1, [@nested={0x1d6, 0xf, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @u32=0x1}, @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}}, @generic="948f8ba1695341fb82b0094472485fb810ece3cc499afbeb65581bf32851f77c8f44566b851320cd70bc12a03434f47bc66fe8eb2d8238be522f9217668a0d27b05190bc82d37fe25dbd465bfdb92cae976ab7882d948290aa71f99de3a1f21b8239596bcc47c2a7ed825f47c3ee4237e1decb7610b21d97e745577129c8c8691bd27b95daae34081eee680f545d51e185930e6368b08c5d8fd0f98c4b69e95390398263cf049470fb133f984045c89336829343ade7beec9057a2dfe160422cef69223597f080fe793c059f963f320536dff6f9ea5d760eb67ce469fb45a50504eecd6c7ef28885fa74acfd27408c6e25db33cd7a53", @generic="8c1a32cf96ac3354c4864116a5744d3df0206746ecbeb5efff48f052e46b08da7bc09f8a6ebdf4739628580b7d8749237a93f700165af3c89406f7832339c9dca585e0b3919d9cc8fc3a2b38e943a1de63a5957b7a7f823c1fe4b21e6f286e37d1a3658a69e624e07428c79b86cebd486a997a46561bb02e839961b018f987b62bbba4d33e0d574fc09316bc26d1391eed07a619d6663e3dbe6041ea8ba95d7d2bb143d665ba21402befbb5a3fc34df9f999a77b4a7120a603654b095be7d7ad"]}, @nested={0x4}, @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0xc4}, @generic="84f982aed46b3cf7f5cf7aba8b1c8516ac78e00f8e5708fe70d03bca198d156f8b29ecc2251c3efe95624631e0eba468f9311fe5c3456e92efe39d822258fe7600e0901b80", @nested={0x1ed, 0xee, 0x0, 0x1, [@generic="57442d4aa1764192a659252fef51a84d51fa323f8dc3feaa996a956ca0330f06b20d41add5d5fbb42a701412c7c14e06606baa1e401516aeea21f710c441726197713315635dc1cb3dd3aaf585ee1f74d0e56943c9ccefd8c7b9d4c638acc098f5e52368b0056e3027fd178fcd7ae2156a6e061bc387affd0314518cf7b31c4fdcd06ebff3977d486e65f359006f3292cc02d5590de928844240147b4e78609d492fc5fd54f8f25698e197", @typed={0x8, 0xde, 0x0, 0x0, @fd=r2}, @generic="4d083bcb70d1e28853a760b6a5e1485fb33deeeb89aa1d73f34f27984ec70307be5e5c3afd2e78b9436404fd9e40c151af54168394e9f8ab5beb62dcaec5f41a7d781c425ced0f960c00e94f7c9211ccc1c15e084034dd", @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x128, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x11d}, @generic="133372684526dedf9f856cde948d381c4df0e8e094aea85b5ed826309b3efb7d7243ae9ac20fc8a97f80766482d00063e4aadb96c3870e4680e8afaa3a37748099523dd8a5d8bf291118e427f4c6b5be4fa31e9918d8586eddd4641f9476f3621f4a8c53b80014b2bc66929a8fd40e6434876e834eb305fa11c8bdd71e5615629b2bec72128f9598a9191d1442823cc3950b341fdc81ed4edc011701ee631988f8467181ca1657e527a1806486090e4888d3dbe676400c", @nested={0x4, 0xa4}]}]}, @TIPC_NLA_NET={0x1210, 0x7, 0x0, 0x1, [@nested={0x1004, 0x125, 0x0, 0x1, [@generic="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"]}, @nested={0x87, 0xbc, 0x0, 0x1, [@generic="e32ee1c80c4a4827d59529760b0f3702a2b70e1508034658ab66d22dff16d46a8aa9b51802ca2bc8567d662ef00c618cb69396373a421f30d95e1c94579f3a1e327a689b7e3f0acb8f224876ae6e17f4c7560bc2ac05d45a12af44361fabbb5286bb0acdc060e582d2346c449132ef2aee3a4de98859d7cbec44119e5bfbe2c155a5bd"]}, @typed={0x7, 0x147, 0x0, 0x0, @str='.[\x00'}, @generic="4d5f47523c25cea23b760f2124a206cf9e73c060d9e361209ee8e87d186448f51df5b85c03b7813cd05cd78068846e3db3532d9659f9d2bed73cd1e41adbee545b43a557090393d00c405d4c8760be8ad0f7219be472a0139b9a4fcc2265ed89e3b28eb5be1dae00f451f1594de6fc8d1e6b47ca3aab84a09b34b589c4f99d92de", @generic="98cf42784e4c6fff3e8eee0d5d2e5e8bb070dc390d56a4d3dcb76ebdb412015d2cb195a72b28d64c1e7e09adb646f71fa6ecb2ae9b6171920cf3a7978d3059e59968ea73f4c09cff8ba4971e12149b3426a9d640f46d84849b0ca4275b539739680332e12c0ed00e5f2cfb88781cc9e67830bfb5ba1b45b6266ab29f2e66d2490a698d933c7973c4c322260e8adf3ea54ebb65f135faf84079f6ad9ce6672d8d3c87b3ef625ad9e4f59f84462b26edd8b7d21b0e0d0e73e5e10ce08b92fec9dc4df489c5f4d229ffdbb61a1331c94f8a3370b51410c148e82a52253f5dc7576aa031a7475e4b2ce8077d8a0757d62a7f36525adc0aea31"]}, @TIPC_NLA_UNSPEC={0xd0, 0x0, "cd78e672e94baea0b59ab5a4af98d92168b2ebbe67ff4286de9afa5602fb2adf4aff2726dac953927df93d8c10893f4cee996019c34d98e9d40ecee79aca04309a75d9e8b237fad571f69b081803df992fe768faa26b31cca0266f2c8bbb6b899cbd514c287401094bebebb28c1806b311e72e70a3465112056ceda3b6cc35a7aa963281f66fc980493d8e2dd4d9c994f5bcde0cb66e61ee4e29b8fbe3cee261119b48720e1c4b74082f64840a299cc6d4a27b77c5e08bba4e9eeb82519b670781ccaa45170a2c82effd2548"}, @TIPC_NLA_PUBL={0x12d, 0x3, 0x0, 0x1, [@generic="bbad781fb676be1bfd376873791b8baf0212f08a1fe26c8b3021c4b21d27314e0152453046c9444d4f72a8fc0f332e37b88f2b39e26a9949fa9b98bdfa64d1e045a722eb729ab5909303f41dc7c0bbee51370b83e32b215a158dcb2100e6e49ac7ed65eee24a1ba27a9a6cf2daa4587ec7c342eadb2d5bb4e327e9707764af846d53d22e8bfbba94a6aae2121f267f373d1ab97d3b9f64fd1b981899e7276ec129628158ad1ec7a32149cd19b46e14e0064b717ae8528a6bac64827c9eca3d1f33a40b2af1", @nested={0x57, 0x91, 0x0, 0x1, [@typed={0x4, 0x150}, @typed={0x8, 0x157, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x29}, @nested={0x4, 0x64}, @nested={0x4, 0xf}, @generic="694714f348eb835f5c6338cc072be0ab64b802f0b4a00a2abfe4d2959dcee9", @typed={0x8, 0x137, 0x0, 0x0, @fd=r2}]}, @typed={0x4, 0x10b}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}]}, @TIPC_NLA_MEDIA={0x145, 0x5, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="f4b7e85ed798cf1bf487c940a0692d7fcc4ac40ae5e73680a1981735f667f9457763990f4e488b7cf5ff51ebabd82c6195bbb21588d72d9f344589b6392536b0941cf178b2f0562d7a7c218ce4", @generic="0596e157d5f8b128f60348fa7a3f18fd8b7cb44e92eb664a575ba4e43f578a2ee596d78c7faec4fbb8120678ffb5e4b380bd1b03e83b4ace4d0e8657d3f869c45bf8fc7ed54ea0b43d381b4c761cae236dd4e3fa9178635f68501ae7e4668dd593dccd5b2229988eab023ef5ad107f399d1e9a942e020b7f498c37d210737a0253ad254e9c6c74e22a526bd28d72a3131aafd9f700f53e94f167b038578695440707baaaba8768873f917b5f18a20bd47e01764a", @typed={0xc, 0x15, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r2}, @nested={0x14, 0x7f, 0x0, 0x1, [@nested={0x4, 0x166}, @typed={0x8, 0x70, 0x0, 0x0, @u32}, @nested={0x4, 0x113}]}, @typed={0x8, 0x146, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x111, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x199c}, 0x1, 0x0, 0x0, 0x400c814}, 0x4) io_uring_register$auto(0x2, 0x19, 0x0, 0x0) 3.927340075s ago: executing program 1 (id=4563): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) statx$auto(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8, 0x2, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = io_uring_setup$auto(0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r2 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50x0, 0x0, 0x9, 0x1, 0x7, 0x5}, &(0x7f0000000340)=0x5, 0x0, 0xc10, 0x1652, 0x3, 0x10000, 0x6a2d, 0x96, 0x4, 0x1, @raw=0x401, @inferred=0x0}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) waitid$auto(0x6, r1, &(0x7f0000000180)={@siginfo_0_0={0x9, 0x59, 0x2, @_kill={r5, r4}}}, 0x35333282, &(0x7f0000000240)={{0xfffffffffffffffc, 0x9}, {0xff, 0x2588f244}, 0x7fffffff, 0x6, 0x0, 0x3, 0x72, 0x3, 0x8000000000000000, 0x8000000000000001, 0x550, 0x535, 0xfffffffffffffe19, 0x7, 0x0, 0x10000}) ptrace$auto(0x7, r6, 0x5, 0x4) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx$auto(0xffffffffffffff9c, 0x0, 0x1000, 0x10000, 0x0) readv$auto(0x3, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setns(0xffffffffffffffff, 0x60020000) r7 = socket(0x10, 0x2, 0x4) write$auto(r7, 0x0, 0x2fe) 2.25719327s ago: executing program 2 (id=4564): close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@test={0xffffffffffffffff, 0x7, 0x7, 0x1, 0x5, 0x8, 0x1, 0x4bab, 0x5, 0x2, 0x4, 0x5, 0x80000001, 0x0, 0x5}, 0x7) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x5, 0x200000, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, 0x0, 0x55) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20050001}, 0x80) socket(0x1d, 0x2, 0x3ff) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2000002, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8}, 0x901, 0x0) read$auto_binder_features_fops_(r0, &(0x7f0000000140)=""/195, 0xc3) 2.218626082s ago: executing program 3 (id=4565): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002c, 0x0) fsopen$auto(0x0, 0x1) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x80000001, &(0x7f0000000280)={@_si_pad}, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) r1 = socket(0x28, 0x3, 0xb) getsockopt$auto(r1, 0x0, 0x32, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = io_uring_setup$auto(0x1, 0x0) msgctl$auto(0xda, 0xffffffff, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) readv$auto(0x3, 0x0, 0x1) setns(0xffffffffffffffff, 0x60020000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004810}, 0xc0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\x13\x00', 0x2fe) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.149314028s ago: executing program 2 (id=4566): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) utimes$auto(0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) eventfd$auto(0x7) setsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xa77, 0x1d, &(0x7f00000002c0)='nbd\x00', 0x2) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001080)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16, @ANYRES32=r1, @ANYRES32, @ANYBLOB="04003a8008000100", @ANYRES32, @ANYBLOB='\b\x00U\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="d25e5ac5e6742725b3430f4aaa04841d21b21f9cd175dbded69449965b60324b16d765efbb0d7f4a56eb809baca4ed7d0ba9eaddbbc9f1d4ac4ddbe4187ee2b4e24c653d41cfa04543b8d606beec79b8aceb6ffd5e4ada55e5db205aaa92cd215c9ad7167f34ae0276c874232573ca11c26be3b1a2d6fa9e034a50241a0c77c5ac421d10399bf2f6ca37bcd1686506482374a8a3d2a7cc0867ea0dad7d7107228c1c6a01d61d83935b29df80ddbee69f913608cfc93b3a6ea721d61723150e1410857db0200f5ad4adc8aa0b088af301db01de13acea03cad61da6e29dcbb0a04cd713756367f9f412f4f559bad9b7312d5ca30006000a0021260000c80109800c00208008000b00", @ANYRES32=r0, @ANYBLOB="a7007c8016f253948470f542adbbf41bc5ae1f0df0ff1b2980db6223ae888e36069a559e31b8ef26db1c3f87859a72426dd6e7e5e831ed823fee066e3fe34749bb3cbbc295063484f6669d3ae3ef8bf22c3333b23cbcbab420e022b5c84adc172f5dd0d61a0ceb98253fd74094a982ac141400966c60a49d4e5a08cde68144fa3cf4f452d6bb3129ef2a2e1b82a62c803968ec3bf7fb6c0800bd00", @ANYRES32=r2, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x40044}, 0x200480d0) unshare$auto(0x9) ioctl$auto_MEMREADOOB(r2, 0xc0104d04, &(0x7f0000000280)={0xd, 0x1, &(0x7f0000000240)='nbd\x00'}) r3 = fcntl$auto_F_UNLCK(r2, 0x9, 0x2) ioctl$auto(r1, 0x2, r3) 2.089732454s ago: executing program 0 (id=4567): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) socket(0x1d, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r1 = io_uring_setup$auto(0x1, 0x0) fcntl$auto_F_GETOWN(r1, 0x9, 0xb4) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000016c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2020001}, 0xc, &(0x7f00000001c0)={&(0x7f0000001700)=ANY=[], 0x1274}}, 0x4044840) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x800, 0x0) mq_open$auto(0x0, 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9}) 2.071069243s ago: executing program 1 (id=4568): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000100)="69da2ad4", 0x4) close_range$auto(0x2, 0x8, 0x0) mincore$auto(0x0, 0x200, &(0x7f0000000000)='#@$-${]\\:&\x00') r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x30000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x2, 0x801, 0x106) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x10, 0x28000009, 0x63, 0x0, 0x0, 0x0, 0x10000000000002, 0x401, 0x1003, 0x8, 0x7ffffffc, 0x3, 0xffffffffffffffff, 0x8009, 0xa, 0x280000100106}) sendfile$auto(0xffffffffffffffff, r1, &(0x7f0000000080)=0xfffffffffffffffc, 0x7fffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4ad00, 0x0) 1.575430174s ago: executing program 1 (id=4569): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffd, &(0x7f0000000080)={0x0, 0x1}, 0xa, 0x0, 0x4, 0x401}, 0xed7138c}, 0xfffffffd, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x81, 0x0, 0x0) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 1.196308386s ago: executing program 1 (id=4570): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x6}, {0x51, 0xd8bd}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf252b0000000c00050000000000000000000500340003000000080024000600000006000b0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd0/queue/iostats_passthrough\x00', 0x88b02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002f, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r4, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, 0x0, 0x40000000000081) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="a8010000", @ANYRESDEC=r1, @ANYBLOB="000426bd7000fddbdf251f0000004f012d80d21fb0847bc0659ddefe29b691d6a7e824cb1e7abb03e4b7465c6df74109e2d1e5567ed6961fba434110614c854b955b97b7601b72c2f27e2e40901a00018008006300", @ANYRES32=r3, @ANYBLOB="04007d8046cf6927efff08c1d8c50000dd0067802baeefc49f8a8e2f3d8329d6e01291e87ae05224094e42dec072cc082a96b7b88ca1f34fbe5d0fb0647bb00c10d4bc9bff58839d6a5c13002fa24bc73dfa02a4e195a14d4833a0e2829c725908006800", @ANYRES32=0x0, @ANYBLOB="2baf5a5a00b7800800e40000", @ANYBLOB="6d9469b0b00582d99075689eaccb152e390446d184154c723006426f9a91b997dec547233e9c5c63788057ad0a3079a43e704de9ba3d833db9d1fe1f53b7963a702c274bd996a73ecc3fb2219e9230b7f6027afb6fc6d240b11daaf997060dc33abcac8570441dbf2ba36298a0eebf9a1cc9424dd5981d3b68e8e9cf3fae768554327df0333fa3e6d551c00d291b723bfb21f7e797158153c6be8a2a17b4c99af19642a6ca", @ANYRES64=r2, @ANYRES32, @ANYBLOB="040038800004008700080009000800000005002a016a0000000800cb00010000001f0007008de1825bd54b961640da37fbea4cfe033c5bd4e9935990ffabc8ce000800a4716fdb0c8500ff030000"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000000) madvise$auto(0x0, 0x2003f2, 0x15) 882.636076ms ago: executing program 1 (id=4571): socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20003, 0xdf, 0x1000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80802, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) rt_sigsuspend$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) setsockopt$auto_SO_KEEPALIVE(r1, 0x3, 0x9, &(0x7f0000000040)='#$-{{\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 107.136177ms ago: executing program 2 (id=4572): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) accept4$auto(r0, &(0x7f0000000080)=@generic={0x1f, "12453e7d6a618bd082317601b5ff"}, &(0x7f0000000100)=0x3, 0x1) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 72.357535ms ago: executing program 3 (id=4573): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) accept4$auto(r0, &(0x7f0000000080)=@generic={0x1f, "12453e7d6a618bd082317601b5ff"}, &(0x7f0000000100)=0x3, 0x1) prctl$auto_SIGCONT(0x0, 0x12, 0xffffffffffffffff, 0x1, 0xa0b5) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) 0s ago: executing program 0 (id=4574): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='-)', 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv9\x00', 0x102, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000100)="c80d1b5d399b", 0x6) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="c826e9becc9e16f989541f1b5d3c20ecc3d349a1399b39447015570456e54d509b40a5fcb16be982e8c9adf89d559416b87740fa5fb0862678881f46f3702ac31e2fcdee0ca7e03a47", 0x49) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) kernel console output (not intermixed with test programs): 38969][T15118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.681332][T15099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.721111][T22379] FAULT_INJECTION: forcing a failure. [ 1071.721111][T22379] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.754751][T22379] CPU: 0 UID: 0 PID: 22379 Comm: syz.0.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.754801][T22379] Tainted: [L]=SOFTLOCKUP [ 1071.754811][T22379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1071.754826][T22379] Call Trace: [ 1071.754834][T22379] [ 1071.754844][T22379] dump_stack_lvl+0x100/0x190 [ 1071.754879][T22379] should_fail_ex.cold+0x5/0xa [ 1071.754909][T22379] should_failslab+0xc2/0x120 [ 1071.754949][T22379] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1071.754990][T22379] ? kstrdup_const+0x63/0x80 [ 1071.755029][T22379] kstrdup+0x51/0xe0 [ 1071.755061][T22379] kstrdup_const+0x63/0x80 [ 1071.755092][T22379] __kernfs_new_node+0x9b/0xa10 [ 1071.755144][T22379] ? __pfx___kernfs_new_node+0x10/0x10 [ 1071.755181][T22379] ? find_held_lock+0x2b/0x80 [ 1071.755216][T22379] ? kernfs_root+0xee/0x2a0 [ 1071.755239][T22379] ? kernfs_root+0xee/0x2a0 [ 1071.755272][T22379] kernfs_new_node+0x117/0x150 [ 1071.755308][T22379] kernfs_create_link+0xcc/0x240 [ 1071.755348][T22379] sysfs_do_create_link_sd+0x90/0x140 [ 1071.755395][T22379] sysfs_create_link+0x61/0xc0 [ 1071.755438][T22379] device_add+0x675/0x1970 [ 1071.755487][T22379] ? __pfx_device_add+0x10/0x10 [ 1071.755511][T22379] ? __kasan_kmalloc+0xaa/0xb0 [ 1071.755547][T22379] ? lockdep_init_map_type+0x5c/0x250 [ 1071.755576][T22379] ? lockdep_init_map_type+0x5c/0x250 [ 1071.755606][T22379] input_register_device+0x7d2/0xe00 [ 1071.755726][T22379] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 1071.755786][T22379] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1071.755826][T22379] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1071.755867][T22379] ? find_held_lock+0x2b/0x80 [ 1071.755900][T22379] ? __fget_files+0x215/0x3d0 [ 1071.755942][T22379] ? __pfx_uinput_ioctl+0x10/0x10 [ 1071.755974][T22379] __x64_sys_ioctl+0x18e/0x210 [ 1071.756016][T22379] do_syscall_64+0x115/0x840 [ 1071.756050][T22379] ? clear_bhb_loop+0x70/0xc0 [ 1071.756082][T22379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.756111][T22379] RIP: 0033:0x7f1eea99e0d9 [ 1071.756132][T22379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.756158][T22379] RSP: 002b:00007f1eeb7cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1071.756183][T22379] RAX: ffffffffffffffda RBX: 00007f1eeac26270 RCX: 00007f1eea99e0d9 [ 1071.756201][T22379] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 1071.756217][T22379] RBP: 00007f1eeb7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.756233][T22379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1071.756248][T22379] R13: 00007f1eeac26308 R14: 00007f1eeac26270 R15: 00007ffcbc1c1ce8 [ 1071.756283][T22379] [ 1072.043738][T16627] Bluetooth: hci0: command 0x0c1a tx timeout [ 1072.049870][T16627] Bluetooth: hci2: command 0x0c1a tx timeout [ 1072.073440][T21909] Bluetooth: hci1: command 0x0c1a tx timeout [ 1072.165718][T15118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.173660][T15118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.281300][T15106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.289218][T15106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.551407][T22427] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. ”[ 1076.486768][T22452] Format for deleting device is "id" (uint). [ 1078.767443][T22495] vivid-007: ================= START STATUS ================= [ 1078.809038][T22495] vivid-007: Generate PTS: true [ 1078.831420][T22495] vivid-007: Generate SCR: true [ 1078.839253][T22495] tpg source WxH: 320x240 (Y'CbCr) [ 1078.868074][T22495] tpg field: 1 [ 1078.881457][T22495] tpg crop: (0,0)/320x240 [ 1078.885846][T22495] tpg compose: (0,0)/320x240 [ 1078.893192][T22495] tpg colorspace: 8 [ 1078.897054][T22495] tpg transfer function: 0/0 [ 1078.902061][T22495] tpg Y'CbCr encoding: 0/0 [ 1078.906584][T22495] tpg quantization: 0/0 [ 1078.911180][T22495] tpg RGB range: 0/2 [ 1078.915136][T22495] vivid-007: ================== END STATUS ================== [ 1080.331970][T22522] program syz.2.2414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1082.525185][T22554] Format for deleting device is "id" (uint). [ 1083.432257][T22571] FAULT_INJECTION: forcing a failure. [ 1083.432257][T22571] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.450556][T22571] CPU: 1 UID: 0 PID: 22571 Comm: syz.3.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.450594][T22571] Tainted: [L]=SOFTLOCKUP [ 1083.450605][T22571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.450619][T22571] Call Trace: [ 1083.450627][T22571] [ 1083.450635][T22571] dump_stack_lvl+0x100/0x190 [ 1083.450668][T22571] should_fail_ex.cold+0x5/0xa [ 1083.450696][T22571] should_failslab+0xc2/0x120 [ 1083.450730][T22571] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1083.450763][T22571] ? __alloc_skb+0x5b7/0x710 [ 1083.450798][T22571] ? __alloc_skb+0x140/0x710 [ 1083.450838][T22571] __alloc_skb+0x140/0x710 [ 1083.450868][T22571] ? __alloc_skb+0x5b7/0x710 [ 1083.450899][T22571] ? __pfx___alloc_skb+0x10/0x10 [ 1083.450940][T22571] netlink_alloc_large_skb+0x69/0x150 [ 1083.450972][T22571] netlink_sendmsg+0x680/0xda0 [ 1083.451006][T22571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.451038][T22571] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1083.451070][T22571] ____sys_sendmsg+0xa4d/0xbe0 [ 1083.451094][T22571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.451130][T22571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1083.451170][T22571] ___sys_sendmsg+0x190/0x1e0 [ 1083.451202][T22571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.451227][T22571] ? __lock_acquire+0x49f/0x1a40 [ 1083.451249][T22571] ? get_pid_task+0x106/0x250 [ 1083.451312][T22571] __sys_sendmsg+0x160/0x210 [ 1083.451347][T22571] ? __pfx___sys_sendmsg+0x10/0x10 [ 1083.451398][T22571] do_syscall_64+0x115/0x840 [ 1083.451428][T22571] ? clear_bhb_loop+0x70/0xc0 [ 1083.451457][T22571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.451480][T22571] RIP: 0033:0x7fec6df9e0d9 [ 1083.451499][T22571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.451523][T22571] RSP: 002b:00007fec6eda5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.451546][T22571] RAX: ffffffffffffffda RBX: 00007fec6e225fa0 RCX: 00007fec6df9e0d9 [ 1083.451562][T22571] RDX: 000000000000c000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1083.451577][T22571] RBP: 00007fec6eda5090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.451591][T22571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.451606][T22571] R13: 00007fec6e226038 R14: 00007fec6e225fa0 R15: 00007ffcfea06d98 [ 1083.451636][T22571] [ 1085.269208][T22604] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1088.494362][T22660] Format for deleting device is "id" (uint). [ 1088.640925][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1088.650344][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.798380][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1088.811021][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.935984][T22664] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2438'. [ 1088.997498][T22672] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2439'. ”[ 1092.796769][T15106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.103502][T22765] Format for deleting device is "id" (uint). [ 1093.143096][T16627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1093.158778][T16627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1093.171444][T16627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1093.181052][T16627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1093.189364][T16627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1093.200645][T15106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.400551][T15106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.724549][T15106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.852583][T15106] bridge_slave_1: left allmulticast mode [ 1094.869012][T15106] bridge_slave_1: left promiscuous mode [ 1094.876300][T15106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.925834][T15106] bridge_slave_0: left allmulticast mode [ 1094.941275][T15106] bridge_slave_0: left promiscuous mode [ 1094.957222][T15106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.274440][T21909] Bluetooth: hci1: command tx timeout [ 1095.398713][T15106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.437650][T15106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.460245][T15106] bond0 (unregistering): Released all slaves [ 1095.749381][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1096.524360][T15106] hsr_slave_0: left promiscuous mode [ 1096.541324][T15106] hsr_slave_1: left promiscuous mode [ 1096.560678][T15106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.568115][T15106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.583052][T15106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.590555][T15106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.614452][T15106] veth1_macvtap: left promiscuous mode [ 1096.629229][T15106] veth0_macvtap: left promiscuous mode [ 1096.644025][T15106] veth1_vlan: left promiscuous mode [ 1096.649370][T15106] veth0_vlan: left promiscuous mode [ 1096.975581][T15106] team0 (unregistering): Port device team_slave_1 removed [ 1097.010791][T15106] team0 (unregistering): Port device team_slave_0 removed [ 1097.259231][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1097.349406][T21909] Bluetooth: hci1: command tx timeout [ 1097.766566][T22766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.799049][T22766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.822563][T22766] bridge_slave_0: entered allmulticast mode [ 1097.845691][T22766] bridge_slave_0: entered promiscuous mode [ 1097.880983][T22766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.905875][T22766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.920422][T22766] bridge_slave_1: entered allmulticast mode [ 1097.937098][T22766] bridge_slave_1: entered promiscuous mode [ 1098.428538][T22766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.512283][T22766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.722920][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1098.846015][T22889] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190700582), cmd(5) [ 1098.893264][T22766] team0: Port device team_slave_0 added [ 1098.906217][T22766] team0: Port device team_slave_1 added [ 1099.097803][T22766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.113548][T22766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.168662][T22766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.306373][T22766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.321013][T22766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.362392][T22766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.429666][T21909] Bluetooth: hci1: command tx timeout [ 1099.911827][T22766] hsr_slave_0: entered promiscuous mode [ 1099.918604][T22766] hsr_slave_1: entered promiscuous mode [ 1099.926134][T22766] debugfs: 'hsr0' already exists in 'hsr' [ 1099.932654][T22766] Cannot create hsr debugfs directory [ 1099.962127][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1100.371630][T21909] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 1100.436727][T22917] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2472'. [ 1101.509277][T21909] Bluetooth: hci1: command tx timeout [ 1104.136024][T22766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1104.157935][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.323604][T22766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1104.346396][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.369734][T22766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1104.383867][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.453300][T22766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1104.474509][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 ”[ 1105.140638][T22766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.298405][T22766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.543101][T15118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.550361][T15118] bridge0: port 1(bridge_slave_0) entered forwarding state ”[ 1105.675246][T15118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.682458][T15118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.723621][T22766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1108.869726][T22766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.992806][T22766] veth0_vlan: entered promiscuous mode [ 1109.017990][T22766] veth1_vlan: entered promiscuous mode [ 1109.089946][T22766] veth0_macvtap: entered promiscuous mode [ 1109.120290][T22766] veth1_macvtap: entered promiscuous mode [ 1109.171218][T22766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.214844][T22766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.998983][T15118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.078983][T15118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.098967][T15118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.120077][T15118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.488918][T15270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.630386][T16784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.101719][T16784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.109927][T16784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.757102][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.765015][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.204653][T23210] Format for deleting device is "id" (uint). [ 1121.232123][T21909] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 1121.314155][T23278] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2510'. [ 1123.951749][T23305] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. ”[ 1125.682646][T23346] FAULT_INJECTION: forcing a failure. [ 1125.682646][T23346] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1125.709087][T23346] CPU: 1 UID: 0 PID: 23346 Comm: syz.0.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 1125.709136][T23346] Tainted: [L]=SOFTLOCKUP [ 1125.709148][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.709167][T23346] Call Trace: [ 1125.709177][T23346] [ 1125.709189][T23346] dump_stack_lvl+0x100/0x190 [ 1125.709233][T23346] should_fail_ex.cold+0x5/0xa [ 1125.709271][T23346] get_futex_key+0x1d2/0x14f0 [ 1125.709316][T23346] ? __pfx_get_futex_key+0x10/0x10 [ 1125.709350][T23346] ? rcu_is_watching+0x12/0xc0 [ 1125.709393][T23346] ? vfs_writev+0x1d5/0xdd0 [ 1125.709452][T23346] ? kfree+0x1e5/0x6c0 [ 1125.709494][T23346] futex_wake+0xf4/0x5e0 [ 1125.709543][T23346] ? __pfx_futex_wake+0x10/0x10 [ 1125.709594][T23346] ? find_held_lock+0x2b/0x80 [ 1125.709635][T23346] ? do_writev+0x214/0x340 [ 1125.709685][T23346] ? do_writev+0x214/0x340 [ 1125.709742][T23346] do_futex+0x2b2/0x440 [ 1125.709782][T23346] ? __pfx_do_futex+0x10/0x10 [ 1125.709820][T23346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1125.709869][T23346] ? __fget_files+0x21f/0x3d0 [ 1125.709906][T23346] __x64_sys_futex+0x34f/0x4d0 [ 1125.709948][T23346] ? __pfx___x64_sys_futex+0x10/0x10 [ 1125.709992][T23346] ? __pfx_do_writev+0x10/0x10 [ 1125.710056][T23346] do_syscall_64+0x115/0x840 [ 1125.710097][T23346] ? clear_bhb_loop+0x70/0xc0 [ 1125.710139][T23346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.710173][T23346] RIP: 0033:0x7f1eea99e0d9 [ 1125.710199][T23346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.710231][T23346] RSP: 002b:00007f1eeb8320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1125.710262][T23346] RAX: ffffffffffffffda RBX: 00007f1eeac25fa8 RCX: 00007f1eea99e0d9 [ 1125.710285][T23346] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1eeac25fac [ 1125.710305][T23346] RBP: 00007f1eeac25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1125.710325][T23346] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1125.710345][T23346] R13: 00007f1eeac26038 R14: 00007ffcbc1c1c00 R15: 00007ffcbc1c1ce8 [ 1125.710385][T23346] [ 1126.483112][T23352] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1127.079208][T23364] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 ”[ 1127.704964][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2531'. ”[ 1130.610299][T23422] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1132.844269][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1132.958901][T23442] netlink: 'syz.2.2544': attribute type 11 has an invalid length. [ 1139.423286][T23547] FAULT_INJECTION: forcing a failure. [ 1139.423286][T23547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.486272][T23547] CPU: 1 UID: 0 PID: 23547 Comm: syz.3.2564 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.486314][T23547] Tainted: [L]=SOFTLOCKUP [ 1139.486324][T23547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1139.486339][T23547] Call Trace: [ 1139.486348][T23547] [ 1139.486358][T23547] dump_stack_lvl+0x100/0x190 [ 1139.486396][T23547] should_fail_ex.cold+0x5/0xa [ 1139.486428][T23547] _copy_from_iter+0x1f4/0x1690 [ 1139.486478][T23547] ? __asan_memset+0x23/0x50 [ 1139.486511][T23547] ? __pfx__copy_from_iter+0x10/0x10 [ 1139.486555][T23547] ? __pfx___alloc_skb+0x10/0x10 [ 1139.486612][T23547] netlink_sendmsg+0x808/0xda0 [ 1139.486653][T23547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.486693][T23547] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1139.486729][T23547] ____sys_sendmsg+0xa4d/0xbe0 [ 1139.486772][T23547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.486809][T23547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.486857][T23547] ___sys_sendmsg+0x190/0x1e0 [ 1139.486892][T23547] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.486923][T23547] ? __lock_acquire+0x49f/0x1a40 [ 1139.486951][T23547] ? get_pid_task+0x106/0x250 [ 1139.487024][T23547] __sys_sendmsg+0x160/0x210 [ 1139.487067][T23547] ? __pfx___sys_sendmsg+0x10/0x10 [ 1139.487126][T23547] do_syscall_64+0x115/0x840 [ 1139.487161][T23547] ? clear_bhb_loop+0x70/0xc0 [ 1139.487194][T23547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.487223][T23547] RIP: 0033:0x7fae45b9e0d9 [ 1139.487244][T23547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.487331][T23547] RSP: 002b:00007fae46a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.487357][T23547] RAX: ffffffffffffffda RBX: 00007fae45e25fa0 RCX: 00007fae45b9e0d9 [ 1139.487376][T23547] RDX: 0000000000000040 RSI: 0000200000005380 RDI: 0000000000000003 [ 1139.487392][T23547] RBP: 00007fae46a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.487409][T23547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.487425][T23547] R13: 00007fae45e26038 R14: 00007fae45e25fa0 R15: 00007ffd455c1d88 [ 1139.487461][T23547] [ 1141.715969][T23591] FAULT_INJECTION: forcing a failure. [ 1141.715969][T23591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1141.780183][T23591] CPU: 1 UID: 0 PID: 23591 Comm: syz.3.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 1141.780230][T23591] Tainted: [L]=SOFTLOCKUP [ 1141.780241][T23591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1141.780259][T23591] Call Trace: [ 1141.780268][T23591] [ 1141.780279][T23591] dump_stack_lvl+0x100/0x190 [ 1141.780319][T23591] should_fail_ex.cold+0x5/0xa [ 1141.780346][T23591] ? fs_reclaim_acquire+0x70/0x100 [ 1141.780393][T23591] should_fail_alloc_page+0xeb/0x140 [ 1141.780438][T23591] prepare_alloc_pages+0x1f0/0x5f0 [ 1141.780490][T23591] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1141.780531][T23591] ? __schedule+0x31d8/0x6730 [ 1141.780574][T23591] ? rcu_is_watching+0x12/0xc0 [ 1141.780612][T23591] ? trace_sched_exit_tp+0x120/0x160 [ 1141.780651][T23591] ? __schedule+0x126e/0x6730 [ 1141.780687][T23591] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1141.780727][T23591] ? irqentry_exit+0x24d/0xa00 [ 1141.780773][T23591] ? __pfx___schedule+0x10/0x10 [ 1141.780814][T23591] ? irqentry_exit+0x24d/0xa00 [ 1141.780849][T23591] ? lockdep_hardirqs_on+0x78/0x100 [ 1141.780885][T23591] ? irqentry_exit+0x24d/0xa00 [ 1141.780921][T23591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1141.780967][T23591] ? policy_nodemask+0xed/0x4f0 [ 1141.781015][T23591] alloc_pages_mpol+0x1fb/0x540 [ 1141.781060][T23591] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1141.781102][T23591] ? alloc_frozen_pages_noprof+0x16/0x160 [ 1141.781133][T23591] ? __sanitizer_cov_trace_pc+0x44/0x70 [ 1141.781185][T23591] alloc_pages_noprof+0x1a/0x160 [ 1141.781215][T23591] relay_open_buf.part.0+0x261/0xb70 [ 1141.781267][T23591] relay_open+0x7b9/0xa00 [ 1141.781309][T23591] blk_trace_setup_prepare+0x35c/0x6c0 [ 1141.781352][T23591] blk_trace_setup+0x217/0x440 [ 1141.781395][T23591] ? __pfx_blk_trace_setup+0x10/0x10 [ 1141.781431][T23591] ? local_clock_noinstr+0xf6/0x100 [ 1141.781477][T23591] ? __pfx_vsnprintf+0x10/0x10 [ 1141.781537][T23591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1141.781592][T23591] ? do_vfs_ioctl+0x226/0x13e0 [ 1141.781641][T23591] blk_trace_ioctl+0x245/0x320 [ 1141.781681][T23591] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1141.781726][T23591] ? find_held_lock+0x2b/0x80 [ 1141.781763][T23591] ? __fget_files+0x215/0x3d0 [ 1141.781790][T23591] ? hook_file_ioctl_common+0x140/0x440 [ 1141.781835][T23591] blkdev_ioctl+0x17c/0x6f0 [ 1141.781891][T23591] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1141.781927][T23591] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1141.781959][T23591] __x64_sys_ioctl+0x18e/0x210 [ 1141.782005][T23591] do_syscall_64+0x115/0x840 [ 1141.782042][T23591] ? clear_bhb_loop+0x70/0xc0 [ 1141.782079][T23591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.782110][T23591] RIP: 0033:0x7fae45b9e0d9 [ 1141.782134][T23591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.782164][T23591] RSP: 002b:00007fae46a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1141.782192][T23591] RAX: ffffffffffffffda RBX: 00007fae45e26090 RCX: 00007fae45b9e0d9 [ 1141.782211][T23591] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 1141.782230][T23591] RBP: 00007fae45c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1141.782248][T23591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.782265][T23591] R13: 00007fae45e26128 R14: 00007fae45e26090 R15: 00007ffd455c1d88 [ 1141.782303][T23591] [ 1142.234564][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 1142.243781][T23596] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1143.242202][T23612] FAULT_INJECTION: forcing a failure. [ 1143.242202][T23612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1143.341606][T23612] CPU: 1 UID: 0 PID: 23612 Comm: syz.3.2578 Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.341650][T23612] Tainted: [L]=SOFTLOCKUP [ 1143.341662][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1143.341679][T23612] Call Trace: [ 1143.341688][T23612] [ 1143.341698][T23612] dump_stack_lvl+0x100/0x190 [ 1143.341738][T23612] should_fail_ex.cold+0x5/0xa [ 1143.341766][T23612] ? fs_reclaim_acquire+0x70/0x100 [ 1143.341816][T23612] should_fail_alloc_page+0xeb/0x140 [ 1143.341862][T23612] prepare_alloc_pages+0x1f0/0x5f0 [ 1143.341911][T23612] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1143.341960][T23612] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1143.341999][T23612] ? __pfx_stack_trace_save+0x10/0x10 [ 1143.342042][T23612] ? stack_depot_save_flags+0x27/0x9d0 [ 1143.342100][T23612] ? kasan_save_stack+0x3f/0x50 [ 1143.342136][T23612] ? kasan_save_stack+0x30/0x50 [ 1143.342173][T23612] ? kasan_save_track+0x14/0x30 [ 1143.342209][T23612] ? __kasan_kmalloc+0xaa/0xb0 [ 1143.342245][T23612] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1143.342275][T23612] ? relay_open_buf.part.0+0x91/0xb70 [ 1143.342315][T23612] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1143.342354][T23612] ? __lock_acquire+0x49f/0x1a40 [ 1143.342399][T23612] ? find_held_lock+0x2b/0x80 [ 1143.342437][T23612] ? rcu_read_unlock+0x17/0x60 [ 1143.342484][T23612] ? rcu_read_unlock+0x17/0x60 [ 1143.342535][T23612] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1143.342583][T23612] ? policy_nodemask+0xed/0x4f0 [ 1143.342630][T23612] alloc_pages_mpol+0x1fb/0x540 [ 1143.342675][T23612] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1143.342730][T23612] alloc_pages_noprof+0x1a/0x160 [ 1143.342761][T23612] relay_open_buf.part.0+0x261/0xb70 [ 1143.342815][T23612] relay_open+0x7b9/0xa00 [ 1143.342858][T23612] blk_trace_setup_prepare+0x35c/0x6c0 [ 1143.342903][T23612] blk_trace_setup+0x217/0x440 [ 1143.342963][T23612] ? __pfx_blk_trace_setup+0x10/0x10 [ 1143.343001][T23612] ? local_clock_noinstr+0xf6/0x100 [ 1143.343071][T23612] ? __pfx_vsnprintf+0x10/0x10 [ 1143.343157][T23612] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1143.343215][T23612] ? do_vfs_ioctl+0x226/0x13e0 [ 1143.343273][T23612] blk_trace_ioctl+0x245/0x320 [ 1143.343321][T23612] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1143.343375][T23612] ? find_held_lock+0x2b/0x80 [ 1143.343420][T23612] ? __fget_files+0x215/0x3d0 [ 1143.343451][T23612] ? hook_file_ioctl_common+0x140/0x440 [ 1143.343504][T23612] blkdev_ioctl+0x17c/0x6f0 [ 1143.343541][T23612] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1143.343584][T23612] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1143.343621][T23612] __x64_sys_ioctl+0x18e/0x210 [ 1143.343676][T23612] do_syscall_64+0x115/0x840 [ 1143.343720][T23612] ? clear_bhb_loop+0x70/0xc0 [ 1143.343760][T23612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.343793][T23612] RIP: 0033:0x7fae45b9e0d9 [ 1143.343819][T23612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.343851][T23612] RSP: 002b:00007fae46a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1143.343882][T23612] RAX: ffffffffffffffda RBX: 00007fae45e26090 RCX: 00007fae45b9e0d9 [ 1143.343903][T23612] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 1143.343934][T23612] RBP: 00007fae45c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1143.343955][T23612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.343975][T23612] R13: 00007fae45e26128 R14: 00007fae45e26090 R15: 00007ffd455c1d88 [ 1143.344018][T23612] [ 1145.651301][T23653] FAULT_INJECTION: forcing a failure. [ 1145.651301][T23653] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.664155][T23653] CPU: 1 UID: 0 PID: 23653 Comm: syz.0.2586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.664195][T23653] Tainted: [L]=SOFTLOCKUP [ 1145.664205][T23653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.664221][T23653] Call Trace: [ 1145.664229][T23653] [ 1145.664239][T23653] dump_stack_lvl+0x100/0x190 [ 1145.664279][T23653] should_fail_ex.cold+0x5/0xa [ 1145.664311][T23653] should_failslab+0xc2/0x120 [ 1145.664353][T23653] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1145.664393][T23653] ? __alloc_skb+0x140/0x710 [ 1145.664439][T23653] __alloc_skb+0x140/0x710 [ 1145.664476][T23653] ? __alloc_skb+0x5b7/0x710 [ 1145.664514][T23653] ? __pfx___alloc_skb+0x10/0x10 [ 1145.664552][T23653] ? genl_rcv_msg+0x4be/0x800 [ 1145.664600][T23653] netlink_ack+0x117/0xb80 [ 1145.664645][T23653] netlink_rcv_skb+0x333/0x420 [ 1145.664679][T23653] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.664721][T23653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1145.664778][T23653] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1145.664816][T23653] genl_rcv+0x28/0x40 [ 1145.664850][T23653] netlink_unicast+0x585/0x850 [ 1145.664888][T23653] ? __pfx_netlink_unicast+0x10/0x10 [ 1145.664931][T23653] netlink_sendmsg+0x8b0/0xda0 [ 1145.664971][T23653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.665010][T23653] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1145.665045][T23653] ____sys_sendmsg+0xa4d/0xbe0 [ 1145.665073][T23653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.665110][T23653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1145.665158][T23653] ___sys_sendmsg+0x190/0x1e0 [ 1145.665193][T23653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.665223][T23653] ? __lock_acquire+0x49f/0x1a40 [ 1145.665252][T23653] ? get_pid_task+0x106/0x250 [ 1145.665329][T23653] __sys_sendmsg+0x160/0x210 [ 1145.665371][T23653] ? __pfx___sys_sendmsg+0x10/0x10 [ 1145.665432][T23653] do_syscall_64+0x115/0x840 [ 1145.665470][T23653] ? clear_bhb_loop+0x70/0xc0 [ 1145.665505][T23653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.665534][T23653] RIP: 0033:0x7f1eea99e0d9 [ 1145.665557][T23653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.665583][T23653] RSP: 002b:00007f1eeb832028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.665610][T23653] RAX: ffffffffffffffda RBX: 00007f1eeac25fa0 RCX: 00007f1eea99e0d9 [ 1145.665629][T23653] RDX: 0000000000004000 RSI: 0000200000001700 RDI: 0000000000000003 [ 1145.665646][T23653] RBP: 00007f1eeb832090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.665663][T23653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.665679][T23653] R13: 00007f1eeac26038 R14: 00007f1eeac25fa0 R15: 00007ffcbc1c1ce8 [ 1145.665716][T23653] [ 1147.741238][T16627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1147.762055][T16627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1147.770197][T16627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1147.778245][T16627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1147.786049][T16627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1148.651543][T23705] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2592'. [ 1149.828925][T16627] Bluetooth: hci3: command tx timeout [ 1150.957274][T23679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.971873][T23679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.987663][T23679] bridge_slave_0: entered allmulticast mode [ 1151.006417][T23679] bridge_slave_0: entered promiscuous mode [ 1151.148723][T23679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.161353][T23679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.168635][T23679] bridge_slave_1: entered allmulticast mode [ 1151.177581][T23679] bridge_slave_1: entered promiscuous mode [ 1151.244355][T23740] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 1151.665838][T23679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.789212][T23679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.908880][T16627] Bluetooth: hci3: command tx timeout [ 1152.067013][T23679] team0: Port device team_slave_0 added [ 1152.094839][T23679] team0: Port device team_slave_1 added [ 1152.371227][T23679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.390449][T23679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.438878][T23679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.578047][T23679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.589327][T23679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.632111][T23679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.923230][T23679] hsr_slave_0: entered promiscuous mode [ 1152.937367][T23679] hsr_slave_1: entered promiscuous mode [ 1152.949488][T23679] debugfs: 'hsr0' already exists in 'hsr' [ 1152.965236][T23679] Cannot create hsr debugfs directory [ 1153.990736][T16627] Bluetooth: hci3: command tx timeout [ 1154.310402][T23679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.498640][T23679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.799408][T23679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.990070][T23796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2605'. [ 1155.420549][T23679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.453982][T23796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.535182][T23796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.070018][T21909] Bluetooth: hci3: command tx timeout [ 1157.622315][T23679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1157.644458][T23679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1157.660191][T23679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1157.696079][T23679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.002164][T23679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1158.033387][T23679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1158.041536][T23679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1158.052865][T23679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.467237][T23871] random: crng reseeded on system resumption [ 1159.152596][T23885] HfR: entered promiscuous mode [ 1160.058212][T23679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.434410][T23679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.515295][T23778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.522494][T23778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.554895][T23780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.562108][T23780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.817279][T23679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.153579][T23679] veth0_vlan: entered promiscuous mode [ 1165.667238][T23679] veth1_vlan: entered promiscuous mode [ 1166.620082][T23679] veth0_macvtap: entered promiscuous mode [ 1166.701956][T23679] veth1_macvtap: entered promiscuous mode [ 1166.781087][T23679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.795960][T23679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.871995][T23780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.915191][T23780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.931876][T23780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.942413][T23780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.089941][T15108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.101349][T15108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.180452][T15108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.202528][T15108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.507233][T24113] FAULT_INJECTION: forcing a failure. [ 1173.507233][T24113] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.530134][T24113] CPU: 0 UID: 0 PID: 24113 Comm: syz.1.2648 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.530174][T24113] Tainted: [L]=SOFTLOCKUP [ 1173.530184][T24113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1173.530200][T24113] Call Trace: [ 1173.530209][T24113] [ 1173.530219][T24113] dump_stack_lvl+0x100/0x190 [ 1173.530256][T24113] should_fail_ex.cold+0x5/0xa [ 1173.530288][T24113] should_failslab+0xc2/0x120 [ 1173.530330][T24113] __kmalloc_noprof+0xfc/0x820 [ 1173.530368][T24113] ? __pfx_from_kuid+0x10/0x10 [ 1173.530410][T24113] ? tomoyo_init_log+0x1224/0x20c0 [ 1173.530458][T24113] tomoyo_init_log+0x1224/0x20c0 [ 1173.530503][T24113] ? number+0x983/0xc90 [ 1173.530548][T24113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1173.530601][T24113] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1173.530672][T24113] tomoyo_write_log2+0x2ed/0xbc0 [ 1173.530723][T24113] tomoyo_supervisor+0x15e/0x1340 [ 1173.530760][T24113] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1173.530808][T24113] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1173.530867][T24113] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 1173.530940][T24113] tomoyo_path_number_perm+0x445/0x580 [ 1173.530986][T24113] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1173.531068][T24113] ? find_held_lock+0x2b/0x80 [ 1173.531108][T24113] ? __fget_files+0x215/0x3d0 [ 1173.531137][T24113] ? hook_file_ioctl_common+0x140/0x440 [ 1173.531189][T24113] ? __fget_files+0x21f/0x3d0 [ 1173.531227][T24113] security_file_ioctl+0xd3/0x230 [ 1173.531270][T24113] __x64_sys_ioctl+0xb7/0x210 [ 1173.531320][T24113] do_syscall_64+0x115/0x840 [ 1173.531358][T24113] ? clear_bhb_loop+0x70/0xc0 [ 1173.531398][T24113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.531431][T24113] RIP: 0033:0x7f8b3719e0d9 [ 1173.531457][T24113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.531489][T24113] RSP: 002b:00007f8b37fd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.531518][T24113] RAX: ffffffffffffffda RBX: 00007f8b37425fa0 RCX: 00007f8b3719e0d9 [ 1173.531539][T24113] RDX: 0000000000000000 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1173.531558][T24113] RBP: 00007f8b37fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.531577][T24113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.531596][T24113] R13: 00007f8b37426038 R14: 00007f8b37425fa0 R15: 00007ffc3be74a18 [ 1173.531643][T24113] [ 1174.381140][T24117] FAULT_INJECTION: forcing a failure. [ 1174.381140][T24117] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.422729][T24117] CPU: 0 UID: 0 PID: 24117 Comm: syz.1.2650 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.422786][T24117] Tainted: [L]=SOFTLOCKUP [ 1174.422798][T24117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.422817][T24117] Call Trace: [ 1174.422828][T24117] [ 1174.422839][T24117] dump_stack_lvl+0x100/0x190 [ 1174.422882][T24117] should_fail_ex.cold+0x5/0xa [ 1174.422920][T24117] should_failslab+0xc2/0x120 [ 1174.422969][T24117] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1174.423012][T24117] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 1174.423053][T24117] ? sp_alloc+0x27/0x160 [ 1174.423091][T24117] sp_alloc+0x27/0x160 [ 1174.423124][T24117] mpol_set_shared_policy+0xa5/0x890 [ 1174.423166][T24117] ? __pfx_shmem_set_policy+0x10/0x10 [ 1174.423212][T24117] mbind_range+0x339/0x550 [ 1174.423251][T24117] do_mbind+0x7dc/0xfd0 [ 1174.423294][T24117] ? __pfx_do_mbind+0x10/0x10 [ 1174.423329][T24117] ? find_held_lock+0x2b/0x80 [ 1174.423371][T24117] ? ksys_write+0x190/0x250 [ 1174.423420][T24117] ? __pfx_get_nodes+0x10/0x10 [ 1174.423465][T24117] ? __fget_files+0x21f/0x3d0 [ 1174.423505][T24117] kernel_mbind+0x1b7/0x200 [ 1174.423555][T24117] ? __pfx_kernel_mbind+0x10/0x10 [ 1174.423610][T24117] do_syscall_64+0x115/0x840 [ 1174.423644][T24117] ? clear_bhb_loop+0x70/0xc0 [ 1174.423680][T24117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.423708][T24117] RIP: 0033:0x7f8b3719e0d9 [ 1174.423730][T24117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.423757][T24117] RSP: 002b:00007f8b37fd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1174.423791][T24117] RAX: ffffffffffffffda RBX: 00007f8b37425fa0 RCX: 00007f8b3719e0d9 [ 1174.423809][T24117] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 1174.423826][T24117] RBP: 00007f8b37fd3090 R08: 0000000000000003 R09: 0000000000000002 [ 1174.423842][T24117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.423857][T24117] R13: 00007f8b37426038 R14: 00007f8b37425fa0 R15: 00007ffc3be74a18 [ 1174.423895][T24117] [ 1175.175101][T24128] hub 1-0:1.0: USB hub found [ 1175.197106][T24128] hub 1-0:1.0: 1 port detected [ 1175.616941][T24144] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1175.945253][T24147] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1176.226257][T24151] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1177.201743][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.212147][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.106630][T24192] FAULT_INJECTION: forcing a failure. [ 1178.106630][T24192] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.127224][T24192] CPU: 1 UID: 0 PID: 24192 Comm: syz.2.2663 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.127270][T24192] Tainted: [L]=SOFTLOCKUP [ 1178.127280][T24192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.127297][T24192] Call Trace: [ 1178.127306][T24192] [ 1178.127316][T24192] dump_stack_lvl+0x100/0x190 [ 1178.127360][T24192] should_fail_ex.cold+0x5/0xa [ 1178.127395][T24192] should_failslab+0xc2/0x120 [ 1178.127444][T24192] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1178.127483][T24192] ? mas_preallocate+0x1105/0x14a0 [ 1178.127536][T24192] mas_preallocate+0x1105/0x14a0 [ 1178.127588][T24192] ? __pfx_mas_preallocate+0x10/0x10 [ 1178.127644][T24192] ? vm_area_alloc+0x1f/0x160 [ 1178.127675][T24192] ? lockdep_init_map_type+0x5c/0x250 [ 1178.127711][T24192] __mmap_region+0x1230/0x2db0 [ 1178.127750][T24192] ? __pfx___mmap_region+0x10/0x10 [ 1178.127790][T24192] ? __lock_acquire+0x49f/0x1a40 [ 1178.127840][T24192] ? __lock_acquire+0x49f/0x1a40 [ 1178.127890][T24192] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1178.127953][T24192] ? rcu_is_watching+0x12/0xc0 [ 1178.127991][T24192] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1178.128025][T24192] ? lockdep_hardirqs_on+0x78/0x100 [ 1178.128117][T24192] mmap_region+0x35d/0x620 [ 1178.128153][T24192] ? rcu_is_watching+0x12/0xc0 [ 1178.128190][T24192] ? __pfx_mmap_region+0x10/0x10 [ 1178.128229][T24192] ? cap_mmap_addr+0x4b/0x120 [ 1178.128260][T24192] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1178.128289][T24192] ? security_mmap_addr+0x71/0x1e0 [ 1178.128331][T24192] ? __get_unmapped_area+0x255/0x3e0 [ 1178.128379][T24192] do_mmap+0xc63/0x12f0 [ 1178.128428][T24192] ? __pfx_do_mmap+0x10/0x10 [ 1178.128472][T24192] ? __pfx_down_write_killable+0x10/0x10 [ 1178.128514][T24192] ? __pfx_futex_wait+0x10/0x10 [ 1178.128559][T24192] vm_mmap_pgoff+0x29e/0x470 [ 1178.128608][T24192] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1178.128656][T24192] ? __pfx_do_futex+0x10/0x10 [ 1178.128696][T24192] ksys_mmap_pgoff+0xe4/0x610 [ 1178.128739][T24192] ? __x64_sys_futex+0x358/0x4d0 [ 1178.128778][T24192] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1178.128821][T24192] ? xfd_validate_state+0x129/0x190 [ 1178.128865][T24192] __x64_sys_mmap+0x125/0x190 [ 1178.128906][T24192] do_syscall_64+0x115/0x840 [ 1178.128949][T24192] ? clear_bhb_loop+0x70/0xc0 [ 1178.128986][T24192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.129017][T24192] RIP: 0033:0x7f72e659e0d9 [ 1178.129039][T24192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.129069][T24192] RSP: 002b:00007f72e7448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1178.129097][T24192] RAX: ffffffffffffffda RBX: 00007f72e6826090 RCX: 00007f72e659e0d9 [ 1178.129117][T24192] RDX: 00000000000000df RSI: 0000000000128009 RDI: 0000000000000000 [ 1178.129134][T24192] RBP: 00007f72e6635024 R08: 0000000000000401 R09: 0000000000008000 [ 1178.129152][T24192] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1178.129169][T24192] R13: 00007f72e6826128 R14: 00007f72e6826090 R15: 00007ffedc834dd8 [ 1178.129207][T24192] [ 1178.950169][T24206] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1181.392037][T24248] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1181.562671][T16627] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1182.603936][T24269] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1185.466966][T16627] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1186.123461][T24334] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1187.566528][T24350] FAULT_INJECTION: forcing a failure. [ 1187.566528][T24350] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.583051][T24350] CPU: 1 UID: 0 PID: 24350 Comm: syz.2.2692 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.583090][T24350] Tainted: [L]=SOFTLOCKUP [ 1187.583101][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1187.583124][T24350] Call Trace: [ 1187.583133][T24350] [ 1187.583146][T24350] dump_stack_lvl+0x100/0x190 [ 1187.583184][T24350] should_fail_ex.cold+0x5/0xa [ 1187.583216][T24350] should_failslab+0xc2/0x120 [ 1187.583257][T24350] __kmalloc_noprof+0xfc/0x820 [ 1187.583292][T24350] ? dmabuffs_dname+0x1d4/0x250 [ 1187.583359][T24350] ? tomoyo_encode2+0xfb/0x3c0 [ 1187.583408][T24350] tomoyo_encode2+0xfb/0x3c0 [ 1187.583454][T24350] tomoyo_encode+0x29/0x50 [ 1187.583493][T24350] tomoyo_realpath_from_path+0x18c/0x690 [ 1187.583544][T24350] tomoyo_path_number_perm+0x23c/0x580 [ 1187.583580][T24350] ? tomoyo_path_number_perm+0x22e/0x580 [ 1187.583624][T24350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1187.583695][T24350] ? find_held_lock+0x2b/0x80 [ 1187.583730][T24350] ? __fget_files+0x215/0x3d0 [ 1187.583756][T24350] ? hook_file_ioctl_common+0x140/0x440 [ 1187.583792][T24350] ? __fget_files+0x215/0x3d0 [ 1187.583825][T24350] ? __fget_files+0x21f/0x3d0 [ 1187.583857][T24350] security_file_ioctl+0xd3/0x230 [ 1187.583895][T24350] __x64_sys_ioctl+0xb7/0x210 [ 1187.583939][T24350] do_syscall_64+0x115/0x840 [ 1187.583974][T24350] ? clear_bhb_loop+0x70/0xc0 [ 1187.584008][T24350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.584037][T24350] RIP: 0033:0x7f72e659e0d9 [ 1187.584059][T24350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.584086][T24350] RSP: 002b:00007f72e7469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.584118][T24350] RAX: ffffffffffffffda RBX: 00007f72e6825fa0 RCX: 00007f72e659e0d9 [ 1187.584136][T24350] RDX: 0000000000000038 RSI: 0000000040086203 RDI: 0000000000000003 [ 1187.584153][T24350] RBP: 00007f72e7469090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.584170][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.584186][T24350] R13: 00007f72e6826038 R14: 00007f72e6825fa0 R15: 00007ffedc834dd8 [ 1187.584223][T24350] [ 1187.584267][T24350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1192.671359][T23775] bridge_slave_1: left allmulticast mode [ 1192.681372][T23775] bridge_slave_1: left promiscuous mode [ 1192.697299][T23775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.727364][T23775] bridge_slave_0: left allmulticast mode [ 1192.736672][T23775] bridge_slave_0: left promiscuous mode [ 1192.746952][T23775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.120406][T23775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.148525][T23775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.167933][T23775] bond0 (unregistering): Released all slaves [ 1193.894205][T23775] hsr_slave_0: left promiscuous mode [ 1193.922417][T23775] hsr_slave_1: left promiscuous mode [ 1193.935101][T23775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.950165][T23775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.981769][T23775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.996849][T23775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.055578][T23775] veth1_macvtap: left promiscuous mode [ 1194.071887][T23775] veth0_macvtap: left promiscuous mode [ 1194.100688][T23775] veth1_vlan: left promiscuous mode [ 1194.114573][T23775] veth0_vlan: left promiscuous mode [ 1194.735293][T23775] team0 (unregistering): Port device team_slave_1 removed [ 1194.775391][T23775] team0 (unregistering): Port device team_slave_0 removed [ 1194.871315][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1198.131213][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1201.888977][T16627] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 1202.157563][T16627] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 1203.403965][T24572] bond0: invalid ARP target specified [ 1203.513551][T24572] hub 1-0:1.0: USB hub found [ 1203.529560][T24572] hub 1-0:1.0: 1 port detected [ 1204.064378][T24579] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1207.367026][T24647] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1217.270985][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1217.278342][T24809] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2771'. [ 1220.236522][T16627] Bluetooth: hci1: command 0x0406 tx timeout [ 1221.586742][T21909] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1221.599698][T24877] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2783'. [ 1233.672015][T21909] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1233.734182][T25076] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1238.635510][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.641967][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.410149][T21909] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1242.484385][T25205] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2833'. [ 1254.859752][T21909] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 1254.941472][T25395] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2860'. [ 1260.766204][T21909] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 1260.826895][T25498] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1271.370170][T25670] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1271.434509][T21909] Bluetooth: hci3: command 0x0406 tx timeout [ 1277.325247][T23783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.526568][T21909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1277.541769][T21909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1277.554663][T21909] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1277.572866][T21909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1277.584638][T21909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1277.742123][T23783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.977660][T23783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.205536][T23783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.609149][T23783] bridge_slave_1: left allmulticast mode [ 1278.619255][T23783] bridge_slave_1: left promiscuous mode [ 1278.627122][T23783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.647550][T23783] bridge_slave_0: left allmulticast mode [ 1278.653415][T23783] bridge_slave_0: left promiscuous mode [ 1278.659976][T23783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.112324][T23783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.160631][T23783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.172781][T23783] bond0 (unregistering): Released all slaves [ 1279.669002][T16627] Bluetooth: hci2: command tx timeout [ 1280.261462][T23783] hsr_slave_0: left promiscuous mode [ 1280.267805][T23783] hsr_slave_1: left promiscuous mode [ 1280.274327][T23783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.288079][T23783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.300307][T23783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.307867][T23783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.322937][T23783] veth1_macvtap: left promiscuous mode [ 1280.328660][T23783] veth0_macvtap: left promiscuous mode [ 1280.334652][T23783] veth1_vlan: left promiscuous mode [ 1280.343283][T23783] veth0_vlan: left promiscuous mode [ 1280.560617][T23783] team0 (unregistering): Port device team_slave_1 removed [ 1280.576264][T23783] team0 (unregistering): Port device team_slave_0 removed [ 1280.727562][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1281.211692][T25773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.229796][T25773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.238709][T25773] bridge_slave_0: entered allmulticast mode [ 1281.246594][T25773] bridge_slave_0: entered promiscuous mode [ 1281.262368][T25773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.275038][T25773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.284276][T25773] bridge_slave_1: entered allmulticast mode [ 1281.292607][T25773] bridge_slave_1: entered promiscuous mode [ 1281.343967][T25773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.557254][T25773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.742400][T25773] team0: Port device team_slave_0 added [ 1281.751443][T16627] Bluetooth: hci2: command tx timeout [ 1281.769282][T25773] team0: Port device team_slave_1 added [ 1282.102415][T25773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.124601][T25773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.164734][T25773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.179754][T25773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.186739][T25773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.213315][T25773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.410466][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1283.069714][T25773] hsr_slave_0: entered promiscuous mode [ 1283.077943][T25773] hsr_slave_1: entered promiscuous mode [ 1283.088966][T25773] debugfs: 'hsr0' already exists in 'hsr' [ 1283.094764][T25773] Cannot create hsr debugfs directory [ 1283.830903][T16627] Bluetooth: hci2: command tx timeout [ 1283.972222][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1285.676373][T25934] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1285.914830][T16627] Bluetooth: hci2: command tx timeout [ 1286.341095][T25773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1286.394866][T25773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1286.411970][T25773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1286.426185][T25773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1286.438132][T25773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1286.464296][T25773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1286.602659][T25773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1286.622867][T25773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1288.167207][T25773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.220701][T25773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.256648][T23780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.263863][T23780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.331047][T23780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.338237][T23780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.704451][T25773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.843445][T25773] veth0_vlan: entered promiscuous mode [ 1291.352042][T25773] veth1_vlan: entered promiscuous mode [ 1292.145604][T25773] veth0_macvtap: entered promiscuous mode [ 1292.188005][T25773] veth1_macvtap: entered promiscuous mode [ 1292.249371][T25773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.284858][T25773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.391362][T23780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.432962][T23780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.470782][T23783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.497434][T23783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.551095][T23782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.572129][T23782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.631892][T23782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.649893][T23782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.847569][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1292.937720][T26109] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2911'. [ 1300.094212][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.105143][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.728324][T26288] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1308.532614][T26333] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1313.154882][T16627] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 1313.164141][T26365] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2974'. [ 1313.981562][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1314.050915][T26378] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1314.594056][T26382] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1317.914286][T16627] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 1317.922338][T26418] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2983'. [ 1322.097812][T16627] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 1325.735273][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1331.122777][T26633] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1332.496877][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1332.635337][T26651] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3017'. [ 1333.205817][T26654] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1337.804520][T26747] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1361.512238][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.518578][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.011589][T27233] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1370.944945][T27289] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1373.233527][T27319] FAULT_INJECTION: forcing a failure. [ 1373.233527][T27319] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.246527][T27319] CPU: 1 UID: 0 PID: 27319 Comm: syz.2.3114 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.246572][T27319] Tainted: [L]=SOFTLOCKUP [ 1373.246589][T27319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1373.246609][T27319] Call Trace: [ 1373.246622][T27319] [ 1373.246631][T27319] dump_stack_lvl+0x100/0x190 [ 1373.246670][T27319] should_fail_ex.cold+0x5/0xa [ 1373.246699][T27319] should_failslab+0xc2/0x120 [ 1373.246736][T27319] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1373.246769][T27319] ? __pfx_map_id_range_down+0x10/0x10 [ 1373.246804][T27319] ? rcu_is_watching+0x12/0xc0 [ 1373.246833][T27319] ? security_inode_alloc+0x3b/0x2c0 [ 1373.246869][T27319] security_inode_alloc+0x3b/0x2c0 [ 1373.246897][T27319] inode_init_always_gfp+0xc77/0xfb0 [ 1373.246928][T27319] alloc_inode+0x8e/0x250 [ 1373.246960][T27319] new_inode+0x22/0x1c0 [ 1373.246994][T27319] shmem_get_inode+0x1e3/0xf70 [ 1373.247033][T27319] ? __pfx_shmem_get_inode+0x10/0x10 [ 1373.247078][T27319] __shmem_file_setup+0x382/0x460 [ 1373.247118][T27319] ? __pfx___shmem_file_setup+0x10/0x10 [ 1373.247158][T27319] ? vm_area_alloc+0x1f/0x160 [ 1373.247185][T27319] shmem_zero_setup+0x96/0x1b0 [ 1373.247214][T27319] __mmap_region+0x24ef/0x2db0 [ 1373.247246][T27319] ? __pfx___mmap_region+0x10/0x10 [ 1373.247278][T27319] ? __lock_acquire+0x49f/0x1a40 [ 1373.247319][T27319] ? __lock_acquire+0x49f/0x1a40 [ 1373.247355][T27319] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1373.247399][T27319] ? rcu_is_watching+0x12/0xc0 [ 1373.247427][T27319] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1373.247455][T27319] ? lockdep_hardirqs_on+0x78/0x100 [ 1373.247534][T27319] mmap_region+0x35d/0x620 [ 1373.247562][T27319] ? rcu_is_watching+0x12/0xc0 [ 1373.247608][T27319] ? __pfx_mmap_region+0x10/0x10 [ 1373.247640][T27319] ? cap_mmap_addr+0x4b/0x120 [ 1373.247666][T27319] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1373.247690][T27319] ? security_mmap_addr+0x71/0x1e0 [ 1373.247725][T27319] ? __get_unmapped_area+0x255/0x3e0 [ 1373.247764][T27319] do_mmap+0xc63/0x12f0 [ 1373.247804][T27319] ? __pfx_do_mmap+0x10/0x10 [ 1373.247839][T27319] ? __pfx_down_write_killable+0x10/0x10 [ 1373.247877][T27319] ? __pfx_futex_wait+0x10/0x10 [ 1373.247916][T27319] vm_mmap_pgoff+0x29e/0x470 [ 1373.247957][T27319] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1373.247997][T27319] ? __pfx_do_futex+0x10/0x10 [ 1373.248029][T27319] ksys_mmap_pgoff+0xe4/0x610 [ 1373.248063][T27319] ? __x64_sys_futex+0x358/0x4d0 [ 1373.248092][T27319] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1373.248132][T27319] ? xfd_validate_state+0x129/0x190 [ 1373.248176][T27319] __x64_sys_mmap+0x125/0x190 [ 1373.248218][T27319] do_syscall_64+0x115/0x840 [ 1373.248259][T27319] ? clear_bhb_loop+0x70/0xc0 [ 1373.248298][T27319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.248332][T27319] RIP: 0033:0x7f72e659e0d9 [ 1373.248357][T27319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.248387][T27319] RSP: 002b:00007f72e7469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1373.248418][T27319] RAX: ffffffffffffffda RBX: 00007f72e6825fa0 RCX: 00007f72e659e0d9 [ 1373.248438][T27319] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1373.248458][T27319] RBP: 00007f72e6635024 R08: 0000000000000006 R09: 0000000000008000 [ 1373.248478][T27319] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1373.248497][T27319] R13: 00007f72e6826038 R14: 00007f72e6825fa0 R15: 00007ffedc834dd8 [ 1373.248539][T27319] [ 1373.767869][T27322] FAULT_INJECTION: forcing a failure. [ 1373.767869][T27322] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.860657][T27322] CPU: 0 UID: 0 PID: 27322 Comm: syz.3.3113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.860698][T27322] Tainted: [L]=SOFTLOCKUP [ 1373.860709][T27322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1373.860725][T27322] Call Trace: [ 1373.860734][T27322] [ 1373.860744][T27322] dump_stack_lvl+0x100/0x190 [ 1373.860780][T27322] should_fail_ex.cold+0x5/0xa [ 1373.860816][T27322] should_failslab+0xc2/0x120 [ 1373.860858][T27322] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1373.860897][T27322] ? stack_trace_save+0x8e/0xc0 [ 1373.860938][T27322] ? alloc_empty_file+0x5b/0x1c0 [ 1373.860984][T27322] alloc_empty_file+0x5b/0x1c0 [ 1373.861025][T27322] path_openat+0xe7/0x4280 [ 1373.861063][T27322] ? __kasan_slab_alloc+0x89/0x90 [ 1373.861105][T27322] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1373.861139][T27322] ? do_getname+0x35/0x390 [ 1373.861176][T27322] ? do_sys_openat2+0xc7/0x1e0 [ 1373.861217][T27322] ? __x64_sys_openat+0x12d/0x210 [ 1373.861254][T27322] ? do_syscall_64+0x115/0x840 [ 1373.861293][T27322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.861333][T27322] ? __pfx_path_openat+0x10/0x10 [ 1373.861376][T27322] do_file_open+0x20e/0x430 [ 1373.861409][T27322] ? __pfx_do_file_open+0x10/0x10 [ 1373.861468][T27322] ? alloc_fd+0x471/0x7a0 [ 1373.861504][T27322] ? do_getname+0x191/0x390 [ 1373.861544][T27322] do_sys_openat2+0x10f/0x1e0 [ 1373.861585][T27322] ? __pfx_do_sys_openat2+0x10/0x10 [ 1373.861625][T27322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1373.861672][T27322] __x64_sys_openat+0x12d/0x210 [ 1373.861713][T27322] ? __pfx___x64_sys_openat+0x10/0x10 [ 1373.861769][T27322] do_syscall_64+0x115/0x840 [ 1373.861807][T27322] ? clear_bhb_loop+0x70/0xc0 [ 1373.861841][T27322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.861873][T27322] RIP: 0033:0x7fae45b5e90e [ 1373.861896][T27322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1373.861923][T27322] RSP: 002b:00007fae46a79f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1373.861953][T27322] RAX: ffffffffffffffda RBX: 00007fae46a7a6c0 RCX: 00007fae45b5e90e [ 1373.861971][T27322] RDX: 0000000000000002 RSI: 00007fae45c3492b RDI: ffffffffffffff9c [ 1373.861989][T27322] RBP: 00007fae45c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1373.862005][T27322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.862026][T27322] R13: 00007fae45e26038 R14: 00007fae45e25fa0 R15: 00007ffd455c1d88 [ 1373.862068][T27322] [ 1383.920789][T27473] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1392.033732][T16627] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1392.256375][T27607] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1394.286325][T27656] FAULT_INJECTION: forcing a failure. [ 1394.286325][T27656] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.313818][T27656] CPU: 1 UID: 0 PID: 27656 Comm: syz.0.3163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1394.313868][T27656] Tainted: [L]=SOFTLOCKUP [ 1394.313878][T27656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1394.313894][T27656] Call Trace: [ 1394.313903][T27656] [ 1394.313913][T27656] dump_stack_lvl+0x100/0x190 [ 1394.313950][T27656] should_fail_ex.cold+0x5/0xa [ 1394.313982][T27656] should_failslab+0xc2/0x120 [ 1394.314023][T27656] __kmalloc_cache_noprof+0x91/0x6c0 [ 1394.314055][T27656] ? usbdev_open+0x9d/0x870 [ 1394.314160][T27656] usbdev_open+0x9d/0x870 [ 1394.314190][T27656] ? kobject_get_unless_zero+0x156/0x200 [ 1394.314276][T27656] ? __pfx_usbdev_open+0x10/0x10 [ 1394.314303][T27656] ? chrdev_open+0x10b/0x6a0 [ 1394.314334][T27656] ? chrdev_open+0x10b/0x6a0 [ 1394.314369][T27656] ? __pfx_usbdev_open+0x10/0x10 [ 1394.314397][T27656] chrdev_open+0x234/0x6a0 [ 1394.314425][T27656] ? __pfx_apparmor_file_open+0x10/0x10 [ 1394.314459][T27656] ? __pfx_chrdev_open+0x10/0x10 [ 1394.314490][T27656] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1394.314533][T27656] do_dentry_open+0x6ab/0x14d0 [ 1394.314561][T27656] ? __pfx_chrdev_open+0x10/0x10 [ 1394.314597][T27656] vfs_open+0x82/0x3f0 [ 1394.314638][T27656] path_openat+0x2873/0x4280 [ 1394.314682][T27656] ? __pfx_path_openat+0x10/0x10 [ 1394.314721][T27656] do_file_open+0x20e/0x430 [ 1394.314754][T27656] ? __pfx_do_file_open+0x10/0x10 [ 1394.314809][T27656] ? alloc_fd+0x471/0x7a0 [ 1394.314849][T27656] ? do_getname+0x191/0x390 [ 1394.314890][T27656] do_sys_openat2+0x10f/0x1e0 [ 1394.314929][T27656] ? __pfx_do_sys_openat2+0x10/0x10 [ 1394.314969][T27656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1394.315009][T27656] ? __fget_files+0x21f/0x3d0 [ 1394.315042][T27656] __x64_sys_openat+0x12d/0x210 [ 1394.315082][T27656] ? __pfx___x64_sys_openat+0x10/0x10 [ 1394.315121][T27656] ? ksys_write+0x1ac/0x250 [ 1394.315160][T27656] do_syscall_64+0x115/0x840 [ 1394.315195][T27656] ? clear_bhb_loop+0x70/0xc0 [ 1394.315230][T27656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.315259][T27656] RIP: 0033:0x7f293339e0d9 [ 1394.315283][T27656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.315311][T27656] RSP: 002b:00007f29315f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1394.315337][T27656] RAX: ffffffffffffffda RBX: 00007f2933626090 RCX: 00007f293339e0d9 [ 1394.315355][T27656] RDX: 0000000000080d00 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1394.315373][T27656] RBP: 00007f29315f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.315389][T27656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1394.315406][T27656] R13: 00007f2933626128 R14: 00007f2933626090 R15: 00007ffc07acf228 [ 1394.315441][T27656] [ 1394.694923][T27659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1396.126952][T16627] Bluetooth: hci1: unexpected event 0x02 length: 1021 > 260 [ 1400.071919][T16627] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 1404.549622][T27781] Bluetooth: hci2: command 0x0406 tx timeout [ 1405.104343][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1412.614984][T27907] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1421.890419][T16627] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 1422.472857][T28041] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1422.964415][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.974151][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.366237][T28213] FAULT_INJECTION: forcing a failure. [ 1431.366237][T28213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.410643][T28213] CPU: 0 UID: 0 PID: 28213 Comm: syz.1.3244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.410683][T28213] Tainted: [L]=SOFTLOCKUP [ 1431.410694][T28213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1431.410711][T28213] Call Trace: [ 1431.410719][T28213] [ 1431.410729][T28213] dump_stack_lvl+0x100/0x190 [ 1431.410769][T28213] should_fail_ex.cold+0x5/0xa [ 1431.410802][T28213] _copy_from_iter+0x43a/0x1690 [ 1431.410856][T28213] ? __pfx__copy_from_iter+0x10/0x10 [ 1431.410899][T28213] ? __kvmalloc_node_noprof+0x36d/0x970 [ 1431.410939][T28213] ? __asan_memset+0x23/0x50 [ 1431.410970][T28213] ? __build_skb_around+0x278/0x390 [ 1431.411009][T28213] ? is_vmalloc_addr+0x86/0xa0 [ 1431.411044][T28213] netlink_sendmsg+0x808/0xda0 [ 1431.411085][T28213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.411124][T28213] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1431.411160][T28213] ____sys_sendmsg+0xa4d/0xbe0 [ 1431.411190][T28213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.411226][T28213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1431.411281][T28213] ? __pfx__kstrtoull+0x10/0x10 [ 1431.411323][T28213] ___sys_sendmsg+0x190/0x1e0 [ 1431.411361][T28213] ? __pfx____sys_sendmsg+0x10/0x10 [ 1431.411414][T28213] ? find_held_lock+0x2b/0x80 [ 1431.411476][T28213] __sys_sendmmsg+0x20c/0x440 [ 1431.411525][T28213] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1431.411570][T28213] ? ksys_write+0x190/0x250 [ 1431.411637][T28213] ? fput+0x79/0x100 [ 1431.411681][T28213] ? ksys_write+0x1ac/0x250 [ 1431.411708][T28213] ? __pfx_ksys_write+0x10/0x10 [ 1431.411740][T28213] __x64_sys_sendmmsg+0x9c/0x100 [ 1431.411782][T28213] ? lockdep_hardirqs_on+0x78/0x100 [ 1431.411819][T28213] do_syscall_64+0x115/0x840 [ 1431.411852][T28213] ? clear_bhb_loop+0x70/0xc0 [ 1431.411888][T28213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.411917][T28213] RIP: 0033:0x7f8b3719e0d9 [ 1431.411939][T28213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.411966][T28213] RSP: 002b:00007f8b37fd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1431.411993][T28213] RAX: ffffffffffffffda RBX: 00007f8b37425fa0 RCX: 00007f8b3719e0d9 [ 1431.412011][T28213] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1431.412028][T28213] RBP: 00007f8b37fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.412044][T28213] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 1431.412061][T28213] R13: 00007f8b37426038 R14: 00007f8b37425fa0 R15: 00007ffc3be74a18 [ 1431.412097][T28213] [ 1435.663664][T28276] FAULT_INJECTION: forcing a failure. [ 1435.663664][T28276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1435.682760][T28276] CPU: 0 UID: 0 PID: 28276 Comm: syz.3.3254 Tainted: G L syzkaller #0 PREEMPT(full) [ 1435.682799][T28276] Tainted: [L]=SOFTLOCKUP [ 1435.682809][T28276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1435.682826][T28276] Call Trace: [ 1435.682835][T28276] [ 1435.682845][T28276] dump_stack_lvl+0x100/0x190 [ 1435.682883][T28276] should_fail_ex.cold+0x5/0xa [ 1435.682916][T28276] _copy_from_user+0x2e/0xd0 [ 1435.682963][T28276] generic_map_update_batch+0x4bb/0x800 [ 1435.683025][T28276] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1435.683068][T28276] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1435.683101][T28276] bpf_map_do_batch+0x66f/0x6d0 [ 1435.683149][T28276] __sys_bpf+0x4ce/0x4e80 [ 1435.683193][T28276] ? __pfx___sys_bpf+0x10/0x10 [ 1435.683226][T28276] ? find_held_lock+0x2b/0x80 [ 1435.683265][T28276] ? get_pid_task+0xfc/0x250 [ 1435.683304][T28276] ? get_pid_task+0xfc/0x250 [ 1435.683361][T28276] ? find_held_lock+0x2b/0x80 [ 1435.683409][T28276] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1435.683451][T28276] ? find_held_lock+0x2b/0x80 [ 1435.683488][T28276] ? ksys_write+0x190/0x250 [ 1435.683517][T28276] ? ksys_write+0x190/0x250 [ 1435.683573][T28276] ? fput+0x79/0x100 [ 1435.683615][T28276] ? __x64_sys_bpf+0xce/0x140 [ 1435.683647][T28276] ? syscall_user_dispatch+0x76/0x130 [ 1435.683680][T28276] __x64_sys_bpf+0xce/0x140 [ 1435.683714][T28276] ? do_syscall_64+0x90/0x840 [ 1435.683757][T28276] do_syscall_64+0x115/0x840 [ 1435.683793][T28276] ? clear_bhb_loop+0x70/0xc0 [ 1435.683829][T28276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.683871][T28276] RIP: 0033:0x7fae45b9e0d9 [ 1435.683894][T28276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.683922][T28276] RSP: 002b:00007fae46a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1435.683948][T28276] RAX: ffffffffffffffda RBX: 00007fae45e25fa0 RCX: 00007fae45b9e0d9 [ 1435.683966][T28276] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a [ 1435.683983][T28276] RBP: 00007fae46a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.684001][T28276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1435.684017][T28276] R13: 00007fae45e26038 R14: 00007fae45e25fa0 R15: 00007ffd455c1d88 [ 1435.684054][T28276] [ 1435.946458][T28279] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1440.692014][T28344] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1466.145243][T28639] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1478.547049][T23782] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.900034][T23782] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.993571][T27781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1479.016234][T27781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1479.024995][T27781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1479.034831][T27781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1479.043413][T27781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1479.442064][T23782] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.630191][T23782] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.950600][T27781] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 1480.046976][T23782] bridge_slave_1: left allmulticast mode [ 1480.064903][T23782] bridge_slave_1: left promiscuous mode [ 1480.071239][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.084792][T23782] bridge_slave_0: left allmulticast mode [ 1480.097341][T23782] bridge_slave_0: left promiscuous mode [ 1480.113438][T23782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.684506][T23782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.749416][T23782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.779912][T23782] bond0 (unregistering): Released all slaves [ 1481.014684][T23782] HfR: left promiscuous mode [ 1481.121489][T27781] Bluetooth: hci0: command tx timeout [ 1481.916727][T23782] hsr_slave_0: left promiscuous mode [ 1481.922693][T23782] hsr_slave_1: left promiscuous mode [ 1481.930173][T23782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.940612][T23782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.948501][T23782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.956865][T23782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.970943][T23782] veth1_macvtap: left promiscuous mode [ 1481.976460][T23782] veth0_macvtap: left promiscuous mode [ 1481.982093][T23782] veth1_vlan: left promiscuous mode [ 1481.987389][T23782] veth0_vlan: left promiscuous mode [ 1482.322434][T23782] team0 (unregistering): Port device team_slave_1 removed [ 1482.344138][T23782] team0 (unregistering): Port device team_slave_0 removed [ 1482.534538][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1483.189623][T27781] Bluetooth: hci0: command tx timeout [ 1484.013544][T28823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.027279][T28823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.034655][T28823] bridge_slave_0: entered allmulticast mode [ 1484.042580][T28823] bridge_slave_0: entered promiscuous mode [ 1484.062538][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1484.177900][T28823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.185284][T28823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.192564][T28823] bridge_slave_1: entered allmulticast mode [ 1484.200393][T28823] bridge_slave_1: entered promiscuous mode [ 1484.237282][T28823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.308209][T28823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.391349][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.400529][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.590559][T28823] team0: Port device team_slave_0 added [ 1484.613890][T28823] team0: Port device team_slave_1 added [ 1484.708372][T28823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.716283][T28823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.743263][T28823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.822977][T28823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.856099][T28823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.888755][T28823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.167312][T28925] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1485.269354][T27781] Bluetooth: hci0: command tx timeout [ 1485.373843][T28823] hsr_slave_0: entered promiscuous mode [ 1485.392695][T28823] hsr_slave_1: entered promiscuous mode [ 1485.635218][T27781] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 1485.810804][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1487.023475][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1487.348802][T27781] Bluetooth: hci0: command tx timeout [ 1489.762007][T28823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1489.783473][T28823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1489.799612][T28823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1489.836971][T28823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1489.866272][T28823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1489.885497][T28823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1490.204282][T28823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1490.224969][T28823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1493.158892][T28823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.250544][T28823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.286248][T23782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.293462][T23782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.332275][T23782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.339484][T23782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.328719][T28823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.132374][T28823] veth0_vlan: entered promiscuous mode [ 1496.653277][T28823] veth1_vlan: entered promiscuous mode [ 1497.071521][T28823] veth0_macvtap: entered promiscuous mode [ 1497.084655][T28823] veth1_macvtap: entered promiscuous mode [ 1497.107786][T28823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.316705][T28823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.498988][T23775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.635223][T15270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.975098][T29215] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1498.040057][T16784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.361964][T23775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.386537][T23775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.612839][T15270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.709951][T15106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.725894][T15106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.900809][T29499] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1524.451219][T29642] sd 0:0:1:0: PR command failed: 1026 [ 1524.462934][T29642] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1524.470215][T29642] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1526.949349][ T30] audit: type=1800 audit(1786778146.467:58): pid=29671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3428" name="lu_gp_id" dev="configfs" ino=253657 res=0 errno=0 [ 1529.435729][T29712] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1539.577842][T29864] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1540.285098][T29870] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1543.704972][T29928] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1545.836749][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.844843][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.415522][T30076] FAULT_INJECTION: forcing a failure. [ 1554.415522][T30076] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.436000][T30076] CPU: 0 UID: 0 PID: 30076 Comm: syz.3.3487 Tainted: G L syzkaller #0 PREEMPT(full) [ 1554.436040][T30076] Tainted: [L]=SOFTLOCKUP [ 1554.436050][T30076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.436066][T30076] Call Trace: [ 1554.436078][T30076] [ 1554.436088][T30076] dump_stack_lvl+0x100/0x190 [ 1554.436130][T30076] should_fail_ex.cold+0x5/0xa [ 1554.436167][T30076] should_failslab+0xc2/0x120 [ 1554.436215][T30076] __kmalloc_noprof+0xfc/0x820 [ 1554.436252][T30076] ? tomoyo_encode2+0xfb/0x3c0 [ 1554.436307][T30076] tomoyo_encode2+0xfb/0x3c0 [ 1554.436357][T30076] tomoyo_encode+0x29/0x50 [ 1554.436397][T30076] tomoyo_realpath_from_path+0x18c/0x690 [ 1554.436459][T30076] tomoyo_path_number_perm+0x23c/0x580 [ 1554.436500][T30076] ? tomoyo_path_number_perm+0x22e/0x580 [ 1554.436539][T30076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1554.436615][T30076] ? find_held_lock+0x2b/0x80 [ 1554.436656][T30076] ? __fget_files+0x215/0x3d0 [ 1554.436683][T30076] ? hook_file_ioctl_common+0x140/0x440 [ 1554.436723][T30076] ? __fget_files+0x215/0x3d0 [ 1554.436757][T30076] ? __fget_files+0x21f/0x3d0 [ 1554.436794][T30076] security_file_ioctl+0xd3/0x230 [ 1554.436832][T30076] __x64_sys_ioctl+0xb7/0x210 [ 1554.436881][T30076] do_syscall_64+0x115/0x840 [ 1554.436917][T30076] ? clear_bhb_loop+0x70/0xc0 [ 1554.436957][T30076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.436987][T30076] RIP: 0033:0x7fae45b9e0d9 [ 1554.437013][T30076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.437046][T30076] RSP: 002b:00007fae46a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.437076][T30076] RAX: ffffffffffffffda RBX: 00007fae45e25fa0 RCX: 00007fae45b9e0d9 [ 1554.437095][T30076] RDX: 0000000000000000 RSI: 00000000c004500a RDI: 0000000000000003 [ 1554.437111][T30076] RBP: 00007fae46a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.437128][T30076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.437149][T30076] R13: 00007fae45e26038 R14: 00007fae45e25fa0 R15: 00007ffd455c1d88 [ 1554.437185][T30076] [ 1554.437210][T30076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1558.831062][T30130] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1560.649739][T30149] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1564.741552][T30193] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1570.350481][T30280] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1571.880105][T30305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1582.311470][T30454] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1583.871329][T23783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.222860][T16627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1584.242608][T16627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1584.251224][T16627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1584.266419][T16627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1584.274896][T16627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1584.545677][T23783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.954707][T23783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.177400][T23783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.641559][T23783] bridge_slave_1: left allmulticast mode [ 1585.660156][T23783] bridge_slave_1: left promiscuous mode [ 1585.676510][T23783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.696828][T23783] bridge_slave_0: left allmulticast mode [ 1585.717083][T23783] bridge_slave_0: left promiscuous mode [ 1585.724704][T23783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.294311][T23783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.347227][T23783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.379857][T23783] bond0 (unregistering): Released all slaves [ 1586.390707][T27781] Bluetooth: hci2: command tx timeout [ 1587.142107][T23783] hsr_slave_0: left promiscuous mode [ 1587.148325][T23783] hsr_slave_1: left promiscuous mode [ 1587.154431][T23783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1587.162846][T23783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.172230][T23783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.179989][T23783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.197523][T23783] veth1_macvtap: left promiscuous mode [ 1587.203159][T23783] veth0_macvtap: left promiscuous mode [ 1587.209002][T23783] veth1_vlan: left promiscuous mode [ 1587.214303][T23783] veth0_vlan: left promiscuous mode [ 1587.466747][T23783] team0 (unregistering): Port device team_slave_1 removed [ 1587.490761][T23783] team0 (unregistering): Port device team_slave_0 removed [ 1587.631707][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1587.787654][T30496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.822653][T30496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.843513][T30496] bridge_slave_0: entered allmulticast mode [ 1587.866154][T30496] bridge_slave_0: entered promiscuous mode [ 1587.894898][T30496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.927947][T30496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.965533][T30496] bridge_slave_1: entered allmulticast mode [ 1588.011923][T30496] bridge_slave_1: entered promiscuous mode [ 1588.104373][T30496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.150050][T30496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.368839][T30496] team0: Port device team_slave_0 added [ 1588.377377][T30496] team0: Port device team_slave_1 added [ 1588.469078][T27781] Bluetooth: hci2: command tx timeout [ 1589.153314][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1589.353812][T30496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.361332][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.387711][T30496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.457931][T30496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.465071][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.491179][T30496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.746505][T30496] hsr_slave_0: entered promiscuous mode [ 1589.752924][T30496] hsr_slave_1: entered promiscuous mode [ 1589.759864][T30496] debugfs: 'hsr0' already exists in 'hsr' [ 1589.765661][T30496] Cannot create hsr debugfs directory [ 1590.548907][T27781] Bluetooth: hci2: command tx timeout [ 1592.014252][T30496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1592.091270][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1592.122092][T30496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1592.167982][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1592.374321][T30496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1592.404011][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1592.628855][T27781] Bluetooth: hci2: command tx timeout [ 1592.692039][T30496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1592.704068][T30496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1593.433932][T30496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.487178][T30496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.527554][T16784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.534777][T16784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.583946][T16784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.591231][T16784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.782114][T30496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.100426][T30496] veth0_vlan: entered promiscuous mode [ 1597.127932][T30496] veth1_vlan: entered promiscuous mode [ 1597.171254][T30496] veth0_macvtap: entered promiscuous mode [ 1597.181740][T30496] veth1_macvtap: entered promiscuous mode [ 1597.202989][T30496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.228200][T30496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.310330][T23780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.334371][T23780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.360932][T23780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.382852][T23780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.679751][T23782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.711820][T23782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.474290][T23782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.491135][T23782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.235705][T27781] Bluetooth: hci0: command 0x0406 tx timeout [ 1604.612882][ T30] audit: type=1800 audit(1786778224.127:59): pid=30887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3593" name="lu_gp_id" dev="configfs" ino=266528 res=0 errno=0 [ 1607.274459][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.282620][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.073384][ T30] audit: type=1800 audit(1786778229.587:60): pid=30961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3606" name="lu_gp_id" dev="configfs" ino=267315 res=0 errno=0 [ 1612.138228][T30976] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1617.429710][T31031] bridge0: port 3(team0) entered blocking state [ 1617.457983][T31031] bridge0: port 3(team0) entered disabled state [ 1617.474834][T31031] team0: entered allmulticast mode [ 1617.480428][T31031] team_slave_0: entered allmulticast mode [ 1617.486253][T31031] team_slave_1: entered allmulticast mode [ 1617.497715][T31031] team0: entered promiscuous mode [ 1617.503149][T31031] team_slave_0: entered promiscuous mode [ 1617.513767][T31031] team_slave_1: entered promiscuous mode [ 1617.525905][T31031] bridge0: port 3(team0) entered blocking state [ 1617.533041][T31031] bridge0: port 3(team0) entered forwarding state [ 1619.999750][ T30] audit: type=1800 audit(1786778239.517:61): pid=31085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3626" name="lu_gp_id" dev="configfs" ino=268644 res=0 errno=0 [ 1626.903629][T31169] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1632.001658][T31244] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1643.056117][T31380] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1653.837890][T31572] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1655.712285][T31609] binder: 31602:31609 ioctl 400c620e 200000000240 returned -22 [ 1656.350501][T31615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1658.917398][T31654] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1663.174265][T31726] FAULT_INJECTION: forcing a failure. [ 1663.174265][T31726] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.195163][T31726] CPU: 1 UID: 0 PID: 31726 Comm: syz.2.3726 Tainted: G L syzkaller #0 PREEMPT(full) [ 1663.195201][T31726] Tainted: [L]=SOFTLOCKUP [ 1663.195210][T31726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1663.195224][T31726] Call Trace: [ 1663.195230][T31726] [ 1663.195238][T31726] dump_stack_lvl+0x100/0x190 [ 1663.195273][T31726] should_fail_ex.cold+0x5/0xa [ 1663.195304][T31726] should_failslab+0xc2/0x120 [ 1663.195344][T31726] __kvmalloc_node_noprof+0x116/0x970 [ 1663.195378][T31726] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1663.195411][T31726] proc_sys_call_handler+0x2c7/0x5a0 [ 1663.195441][T31726] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1663.195471][T31726] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1663.195507][T31726] iter_file_splice_write+0x830/0x10b0 [ 1663.195551][T31726] ? copy_splice_read+0x739/0xbb0 [ 1663.195578][T31726] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1663.195614][T31726] ? __pfx_copy_splice_read+0x10/0x10 [ 1663.195654][T31726] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1663.195684][T31726] direct_splice_actor+0x192/0x690 [ 1663.195712][T31726] splice_direct_to_actor+0x345/0xa30 [ 1663.195743][T31726] ? __pfx_direct_splice_actor+0x10/0x10 [ 1663.195775][T31726] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1663.195814][T31726] do_splice_direct+0x174/0x240 [ 1663.195843][T31726] ? __pfx_do_splice_direct+0x10/0x10 [ 1663.195873][T31726] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1663.195902][T31726] ? rw_verify_area+0xce/0x6d0 [ 1663.195942][T31726] do_sendfile+0xadc/0xe20 [ 1663.195988][T31726] ? __pfx_do_sendfile+0x10/0x10 [ 1663.196026][T31726] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1663.196064][T31726] ? __fget_files+0x21f/0x3d0 [ 1663.196111][T31726] __x64_sys_sendfile64+0x1d8/0x220 [ 1663.196138][T31726] ? ksys_write+0x1ac/0x250 [ 1663.196159][T31726] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1663.196198][T31726] do_syscall_64+0x115/0x840 [ 1663.196229][T31726] ? clear_bhb_loop+0x70/0xc0 [ 1663.196257][T31726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.196283][T31726] RIP: 0033:0x7f3f9539e0d9 [ 1663.196304][T31726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.196330][T31726] RSP: 002b:00007f3f961bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1663.196354][T31726] RAX: ffffffffffffffda RBX: 00007f3f95625fa0 RCX: 00007f3f9539e0d9 [ 1663.196369][T31726] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1663.196383][T31726] RBP: 00007f3f961bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.196398][T31726] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1663.196413][T31726] R13: 00007f3f95626038 R14: 00007f3f95625fa0 R15: 00007ffff8537e78 [ 1663.196442][T31726] [ 1665.965983][T31768] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1668.713043][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.722208][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.515921][T31838] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1673.776269][T31914] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1676.138197][T31954] binder: 31951:31954 ioctl 400c620e 200000000240 returned -22 [ 1684.359645][T32095] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1685.882998][T32113] bond0: invalid ARP target specified [ 1686.313389][T32122] FAULT_INJECTION: forcing a failure. [ 1686.313389][T32122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.326716][T32122] CPU: 1 UID: 0 PID: 32122 Comm: syz.1.3794 Tainted: G L syzkaller #0 PREEMPT(full) [ 1686.326772][T32122] Tainted: [L]=SOFTLOCKUP [ 1686.326785][T32122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1686.326808][T32122] Call Trace: [ 1686.326817][T32122] [ 1686.326827][T32122] dump_stack_lvl+0x100/0x190 [ 1686.326863][T32122] should_fail_ex.cold+0x5/0xa [ 1686.326895][T32122] _copy_from_user+0x2e/0xd0 [ 1686.326944][T32122] mtdchar_write+0x277/0x5d0 [ 1686.327014][T32122] ? __pfx_mtdchar_write+0x10/0x10 [ 1686.327040][T32122] ? __pfx___might_resched+0x10/0x10 [ 1686.327086][T32122] ? get_pid_task+0xfc/0x250 [ 1686.327133][T32122] ? apparmor_file_permission+0x13f/0x1c0 [ 1686.327170][T32122] ? bpf_lsm_file_permission+0x9/0x10 [ 1686.327198][T32122] ? security_file_permission+0x76/0x210 [ 1686.327240][T32122] ? rw_verify_area+0xce/0x6d0 [ 1686.327285][T32122] vfs_write+0x2aa/0x1050 [ 1686.327313][T32122] ? __pfx_mtdchar_write+0x10/0x10 [ 1686.327344][T32122] ? __pfx_vfs_write+0x10/0x10 [ 1686.327369][T32122] ? find_held_lock+0x2b/0x80 [ 1686.327404][T32122] ? __fget_files+0x215/0x3d0 [ 1686.327429][T32122] ? __fget_files+0x215/0x3d0 [ 1686.327459][T32122] ? __fget_files+0x21f/0x3d0 [ 1686.327494][T32122] ksys_write+0x12a/0x250 [ 1686.327520][T32122] ? __pfx_ksys_write+0x10/0x10 [ 1686.327557][T32122] do_syscall_64+0x115/0x840 [ 1686.327599][T32122] ? clear_bhb_loop+0x70/0xc0 [ 1686.327632][T32122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.327661][T32122] RIP: 0033:0x7f8b3719e0d9 [ 1686.327683][T32122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.327709][T32122] RSP: 002b:00007f8b37fd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1686.327736][T32122] RAX: ffffffffffffffda RBX: 00007f8b37425fa0 RCX: 00007f8b3719e0d9 [ 1686.327753][T32122] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 1686.327769][T32122] RBP: 00007f8b37fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.327785][T32122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.327801][T32122] R13: 00007f8b37426038 R14: 00007f8b37425fa0 R15: 00007ffc3be74a18 [ 1686.327837][T32122] [ 1690.974119][ T30] audit: type=1800 audit(1786778310.487:62): pid=32204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3809" name="lu_gp_id" dev="configfs" ino=279948 res=0 errno=0 [ 1691.725084][T16627] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1692.289602][T15106] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.741923][T32263] NFSD: Failed to start, no listeners configured. [ 1694.762868][T32269] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1698.734599][T32340] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1698.973137][T32345] random: crng reseeded on system resumption [ 1703.116526][T32419] FAULT_INJECTION: forcing a failure. [ 1703.116526][T32419] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.129464][T32419] CPU: 0 UID: 0 PID: 32419 Comm: syz.3.3848 Tainted: G L syzkaller #0 PREEMPT(full) [ 1703.129505][T32419] Tainted: [L]=SOFTLOCKUP [ 1703.129515][T32419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1703.129531][T32419] Call Trace: [ 1703.129540][T32419] [ 1703.129550][T32419] dump_stack_lvl+0x100/0x190 [ 1703.129588][T32419] should_fail_ex.cold+0x5/0xa [ 1703.129626][T32419] should_failslab+0xc2/0x120 [ 1703.129667][T32419] __kmalloc_noprof+0xfc/0x820 [ 1703.129704][T32419] ? tomoyo_encode2+0xfb/0x3c0 [ 1703.129751][T32419] tomoyo_encode2+0xfb/0x3c0 [ 1703.129796][T32419] tomoyo_encode+0x29/0x50 [ 1703.129835][T32419] tomoyo_realpath_from_path+0x18c/0x690 [ 1703.129885][T32419] tomoyo_path_number_perm+0x23c/0x580 [ 1703.129919][T32419] ? tomoyo_path_number_perm+0x22e/0x580 [ 1703.129957][T32419] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1703.130027][T32419] ? find_held_lock+0x2b/0x80 [ 1703.130062][T32419] ? __fget_files+0x215/0x3d0 [ 1703.130086][T32419] ? hook_file_ioctl_common+0x140/0x440 [ 1703.130121][T32419] ? __fget_files+0x215/0x3d0 [ 1703.130154][T32419] ? __fget_files+0x21f/0x3d0 [ 1703.130187][T32419] security_file_ioctl+0xd3/0x230 [ 1703.130224][T32419] __x64_sys_ioctl+0xb7/0x210 [ 1703.130266][T32419] do_syscall_64+0x115/0x840 [ 1703.130300][T32419] ? clear_bhb_loop+0x70/0xc0 [ 1703.130335][T32419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.130363][T32419] RIP: 0033:0x7fae45b9e0d9 [ 1703.130385][T32419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.130416][T32419] RSP: 002b:00007fae46a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1703.130443][T32419] RAX: ffffffffffffffda RBX: 00007fae45e25fa0 RCX: 00007fae45b9e0d9 [ 1703.130466][T32419] RDX: 0000000000000038 RSI: 000000080000541b RDI: 0000000000000003 [ 1703.130483][T32419] RBP: 00007fae46a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.130498][T32419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.130514][T32419] R13: 00007fae45e26038 R14: 00007fae45e25fa0 R15: 00007ffd455c1d88 [ 1703.130549][T32419] [ 1703.130643][T32419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1706.648800][T27781] Bluetooth: hci2: command 0x0406 tx timeout [ 1715.439506][T27781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1715.451780][T27781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1715.467708][T27781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1715.476190][T27781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1715.484594][T27781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1715.587869][T23782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.032600][T23782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.363908][T23782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.659607][T23782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.446420][T23782] bridge_slave_1: left allmulticast mode [ 1717.466421][T23782] bridge_slave_1: left promiscuous mode [ 1717.478897][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.503379][T23782] bridge_slave_0: left allmulticast mode [ 1717.515905][T23782] bridge_slave_0: left promiscuous mode [ 1717.531508][T23782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.589123][T27781] Bluetooth: hci1: command tx timeout [ 1718.052518][T23782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1718.079355][T23782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1718.111305][T23782] bond0 (unregistering): Released all slaves [ 1718.585016][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1718.939646][T23782] hsr_slave_0: left promiscuous mode [ 1718.945738][T23782] hsr_slave_1: left promiscuous mode [ 1718.959010][T23782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.966509][T23782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.981213][T23782] veth1_macvtap: left promiscuous mode [ 1718.986984][T23782] veth0_macvtap: left promiscuous mode [ 1718.992661][T23782] veth1_vlan: left promiscuous mode [ 1718.997944][T23782] veth0_vlan: left promiscuous mode [ 1719.292763][T23782] team0 (unregistering): Port device team_slave_1 removed [ 1719.312048][T23782] team0 (unregistering): Port device team_slave_0 removed [ 1719.668681][T27781] Bluetooth: hci1: command tx timeout [ 1719.712662][T32633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.720881][T32633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.728272][T32633] bridge_slave_0: entered allmulticast mode [ 1719.763141][T32633] bridge_slave_0: entered promiscuous mode [ 1719.781346][T32633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.815264][T32633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.854865][T32633] bridge_slave_1: entered allmulticast mode [ 1719.863237][T32633] bridge_slave_1: entered promiscuous mode [ 1719.903061][T32633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1719.933042][T32633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.423011][T32633] team0: Port device team_slave_0 added [ 1720.476199][T32633] team0: Port device team_slave_1 added [ 1720.899446][T32633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.918662][T32633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.978682][T32633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.081223][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1721.089663][T32633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.096995][T32633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.123326][T32633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.436281][T32633] hsr_slave_0: entered promiscuous mode [ 1721.450478][T32633] hsr_slave_1: entered promiscuous mode [ 1721.456792][T32633] debugfs: 'hsr0' already exists in 'hsr' [ 1721.463529][T32633] Cannot create hsr debugfs directory [ 1721.748734][T27781] Bluetooth: hci1: command tx timeout [ 1722.985930][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1723.828923][T27781] Bluetooth: hci1: command tx timeout [ 1724.520903][T32633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1724.541791][T32633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1724.573841][ T323] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1724.592091][T32633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1724.626252][T32633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1724.705606][T32633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1724.734260][T32633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1724.744152][T32633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1724.772015][T32633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.925360][T32633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.702792][T32633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.807350][T23782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.814534][T23782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1727.854187][T23782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.861355][T23782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.715985][T32633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.157984][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.166885][T32633] veth0_vlan: entered promiscuous mode [ 1730.167069][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.185901][T32633] veth1_vlan: entered promiscuous mode [ 1731.381285][T32633] veth0_macvtap: entered promiscuous mode [ 1731.435409][T32633] veth1_macvtap: entered promiscuous mode [ 1731.513867][T32633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.534015][T32633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1731.612512][T23783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.678761][T23780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.736060][T23783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.749908][T23780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.775052][T23783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1731.784454][T23780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.876424][T23780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.892139][T23780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.380294][ T548] usb usb39: usbfs: process 548 (syz.3.3928) did not claim interface 0 before use [ 1754.606939][ T848] bond0: invalid ARP target specified [ 1754.785683][ T848] hub 1-0:1.0: USB hub found [ 1754.791051][ T854] nbd: socks must be embedded in a SOCK_ITEM attr [ 1754.794206][ T848] hub 1-0:1.0: 1 port detected [ 1754.840214][ T854] block nbd0: shutting down sockets [ 1781.692202][ T1328] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.009526][ T1328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.171004][ T1328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.251785][ T1328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.420329][ T1328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.060454][ T1400] FAULT_INJECTION: forcing a failure. [ 1786.060454][ T1400] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.111711][ T1400] CPU: 0 UID: 0 PID: 1400 Comm: syz.1.4056 Tainted: G L syzkaller #0 PREEMPT(full) [ 1786.111752][ T1400] Tainted: [L]=SOFTLOCKUP [ 1786.111762][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1786.111778][ T1400] Call Trace: [ 1786.111787][ T1400] [ 1786.111797][ T1400] dump_stack_lvl+0x100/0x190 [ 1786.111856][ T1400] should_fail_ex.cold+0x5/0xa [ 1786.111884][ T1400] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1786.111919][ T1400] should_failslab+0xc2/0x120 [ 1786.111973][ T1400] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1786.112013][ T1400] ? skb_clone+0x190/0x400 [ 1786.112062][ T1400] skb_clone+0x190/0x400 [ 1786.112106][ T1400] netlink_deliver_tap+0xaed/0xcc0 [ 1786.112148][ T1400] netlink_unicast+0x62b/0x850 [ 1786.112188][ T1400] ? __pfx_netlink_unicast+0x10/0x10 [ 1786.112232][ T1400] netlink_sendmsg+0x8b0/0xda0 [ 1786.112273][ T1400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1786.112313][ T1400] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1786.112350][ T1400] ____sys_sendmsg+0xa4d/0xbe0 [ 1786.112380][ T1400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1786.112418][ T1400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1786.112456][ T1400] ? __pfx__kstrtoull+0x10/0x10 [ 1786.112505][ T1400] ___sys_sendmsg+0x190/0x1e0 [ 1786.112541][ T1400] ? __pfx____sys_sendmsg+0x10/0x10 [ 1786.112592][ T1400] ? find_held_lock+0x2b/0x80 [ 1786.112653][ T1400] __sys_sendmmsg+0x20c/0x440 [ 1786.112701][ T1400] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1786.112743][ T1400] ? ksys_write+0x190/0x250 [ 1786.112797][ T1400] ? fput+0x79/0x100 [ 1786.112831][ T1400] ? ksys_write+0x1ac/0x250 [ 1786.112857][ T1400] ? __pfx_ksys_write+0x10/0x10 [ 1786.112891][ T1400] __x64_sys_sendmmsg+0x9c/0x100 [ 1786.112934][ T1400] ? lockdep_hardirqs_on+0x78/0x100 [ 1786.112970][ T1400] do_syscall_64+0x115/0x840 [ 1786.113005][ T1400] ? clear_bhb_loop+0x70/0xc0 [ 1786.113040][ T1400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.113070][ T1400] RIP: 0033:0x7f8b3719e0d9 [ 1786.113100][ T1400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.113130][ T1400] RSP: 002b:00007f8b37fd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1786.113156][ T1400] RAX: ffffffffffffffda RBX: 00007f8b37425fa0 RCX: 00007f8b3719e0d9 [ 1786.113174][ T1400] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1786.113191][ T1400] RBP: 00007f8b37fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.113208][ T1400] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1786.113224][ T1400] R13: 00007f8b37426038 R14: 00007f8b37425fa0 R15: 00007ffc3be74a18 [ 1786.113261][ T1400] [ 1791.591422][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.600705][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.605270][ T1535] i2c i2c-0: new_device: Missing parameters [ 1802.094391][ T1678] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1811.104437][ T1817] FAULT_INJECTION: forcing a failure. [ 1811.104437][ T1817] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.117196][ T1817] CPU: 1 UID: 0 PID: 1817 Comm: syz.2.4119 Tainted: G L syzkaller #0 PREEMPT(full) [ 1811.117236][ T1817] Tainted: [L]=SOFTLOCKUP [ 1811.117246][ T1817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1811.117264][ T1817] Call Trace: [ 1811.117273][ T1817] [ 1811.117283][ T1817] dump_stack_lvl+0x100/0x190 [ 1811.117329][ T1817] should_fail_ex.cold+0x5/0xa [ 1811.117361][ T1817] should_failslab+0xc2/0x120 [ 1811.117403][ T1817] __kmalloc_noprof+0xfc/0x820 [ 1811.117439][ T1817] ? __pfx_from_kuid+0x10/0x10 [ 1811.117481][ T1817] ? tomoyo_init_log+0x1224/0x20c0 [ 1811.117533][ T1817] tomoyo_init_log+0x1224/0x20c0 [ 1811.117580][ T1817] ? number+0x983/0xc90 [ 1811.117628][ T1817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1811.117679][ T1817] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1811.117731][ T1817] tomoyo_write_log2+0x2ed/0xbc0 [ 1811.117780][ T1817] tomoyo_supervisor+0x15e/0x1340 [ 1811.117817][ T1817] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1811.117863][ T1817] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1811.117913][ T1817] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 1811.117962][ T1817] tomoyo_path_number_perm+0x445/0x580 [ 1811.118003][ T1817] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1811.118074][ T1817] ? find_held_lock+0x2b/0x80 [ 1811.118108][ T1817] ? __fget_files+0x215/0x3d0 [ 1811.118134][ T1817] ? hook_file_ioctl_common+0x140/0x440 [ 1811.118178][ T1817] ? __fget_files+0x21f/0x3d0 [ 1811.118210][ T1817] security_file_ioctl+0xd3/0x230 [ 1811.118247][ T1817] __x64_sys_ioctl+0xb7/0x210 [ 1811.118291][ T1817] do_syscall_64+0x115/0x840 [ 1811.118332][ T1817] ? clear_bhb_loop+0x70/0xc0 [ 1811.118367][ T1817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.118395][ T1817] RIP: 0033:0x7f3f9539e0d9 [ 1811.118417][ T1817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.118444][ T1817] RSP: 002b:00007f3f961bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.118469][ T1817] RAX: ffffffffffffffda RBX: 00007f3f95625fa0 RCX: 00007f3f9539e0d9 [ 1811.118486][ T1817] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000003 [ 1811.118506][ T1817] RBP: 00007f3f961bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.118522][ T1817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.118538][ T1817] R13: 00007f3f95626038 R14: 00007f3f95625fa0 R15: 00007ffff8537e78 [ 1811.118574][ T1817] [ 1827.788676][ T2097] i2c i2c-0: new_device: Missing parameters [ 1829.685934][ T30] audit: type=1800 audit(1786778449.198:63): pid=2118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4167" name="lu_gp_id" dev="configfs" ino=305465 res=0 errno=0 [ 1833.314692][ T30] audit: type=1800 audit(1786778452.828:64): pid=2185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4175" name="lu_gp_id" dev="configfs" ino=305797 res=0 errno=0 [ 1839.755834][T27781] Bluetooth: hci1: command 0x0406 tx timeout [ 1853.038017][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.046246][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.477092][ T2556] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1889.316318][ T3173] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1890.899742][ T3181] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1893.194845][ T3234] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1902.557300][ T3392] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1908.145575][ T3483] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1912.331432][ T3557] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1914.470152][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.476671][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.918369][ T3687] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1926.918230][ T3788] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1942.370061][ T4022] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1948.893640][ T4137] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1952.767968][ T4193] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1955.066996][ T4235] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1958.884740][ T4308] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1963.838160][ T4378] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1975.909840][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.920434][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1983.945443][ T4688] ecryptfs_parse_packet_length: Error parsing packet length [ 1983.953035][ T4688] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1984.258840][ T4700] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1994.955273][ T4866] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1f pfn:0x36d5e [ 1994.973835][ T4866] memcg:ffff888032a8aa80 [ 1994.984809][ T4866] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 1995.001752][ T4866] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 1995.021646][ T4866] raw: 000000000000001f 0000000000000000 00000001ffffffff ffff888032a8aa80 [ 1995.050640][ T4866] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 1995.063427][ T4866] page_owner tracks the page as allocated [ 1995.073252][ T4961] ERROR: Out of memory at tomoyo_memory_ok. [ 1995.080193][ T4866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4866, tgid 4865 (syz.3.4573), ts 1994955233636, free_ts 1994946749549 [ 1995.105879][ T4866] post_alloc_hook+0xfd/0x120 [ 1995.115962][ T4866] get_page_from_freelist+0xf48/0x3530 [ 1995.122099][ T4866] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1995.128785][ T4866] alloc_pages_mpol+0x1fb/0x540 [ 1995.133720][ T4866] folio_alloc_noprof+0x22/0x250 [ 1995.138770][ T4866] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 1995.145287][ T4866] filemap_alloc_folio_noprof+0x5e/0x80 [ 1995.151033][ T4866] page_cache_ra_order+0x539/0xed0 [ 1995.156233][ T4866] filemap_fault+0x1943/0x3130 [ 1995.161189][ T4866] __do_fault+0x10b/0x440 [ 1995.165594][ T4866] do_fault+0xeb2/0x1750 [ 1995.175464][ T4866] __handle_mm_fault+0x187d/0x2a00 [ 1995.181502][ T4866] handle_mm_fault+0x37b/0xa30 [ 1995.186487][ T4866] __get_user_pages+0x1178/0x32a0 [ 1995.196424][ T4866] populate_vma_page_range+0x267/0x3f0 [ 1995.202333][ T4866] __mm_populate+0x107/0x3a0 [ 1995.207141][ T4866] page last free pid 4867 tgid 4863 stack trace: [ 1995.223908][ T4866] free_unref_folios+0xa44/0x1710 [ 1995.234293][ T4866] folios_put_refs+0x585/0xaa0 [ 1995.239549][ T4866] truncate_inode_pages_range+0x30c/0x1050 [ 1995.245553][ T4866] set_blocksize+0x2d1/0x460 [ 1995.250561][ T4866] blkdev_bszset+0x19b/0x240 [ 1995.255273][ T4866] blkdev_ioctl+0x513/0x6f0 [ 1995.260129][ T4866] __x64_sys_ioctl+0x18e/0x210 [ 1995.265068][ T4866] do_syscall_64+0x115/0x840 [ 1995.276248][ T4866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.282821][ T4866] ------------[ cut here ]------------ [ 1995.288358][ T4866] kernel BUG at mm/filemap.c:858! [ 1995.327251][ T4866] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1995.333535][ T4866] CPU: 0 UID: 0 PID: 4866 Comm: syz.3.4573 Tainted: G L syzkaller #0 PREEMPT(full) [ 1995.344421][ T4866] Tainted: [L]=SOFTLOCKUP [ 1995.348768][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1995.358841][ T4866] RIP: 0010:__filemap_add_folio+0x1033/0x12f0 [ 1995.364942][ T4866] Code: 39 c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 d5 ee 12 00 90 0f 0b e8 cd 39 c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 be ee 12 00 90 <0f> 0b e8 b6 39 c2 ff 90 0f 0b 90 e9 76 fe ff ff e8 a8 39 c2 ff 90 [ 1995.384578][ T4866] RSP: 0018:ffffc9000500f3f8 EFLAGS: 00010246 [ 1995.390674][ T4866] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900154da000 [ 1995.398681][ T4866] RDX: 0000000000080000 RSI: ffffffff825a8568 RDI: ffff88802f0a61c4 [ 1995.398704][ T4866] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1995.414664][ T4866] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 1995.414694][ T4866] R13: ffffea0000db5780 R14: 0000000000000000 R15: 1ffff92000a01eaa [ 1995.414719][ T4866] FS: 00007f8990fb26c0(0000) GS:ffff888123de7000(0000) knlGS:0000000000000000 [ 1995.414790][ T4866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1995.414810][ T4866] CR2: 0000001b2ea10ff8 CR3: 0000000052178000 CR4: 00000000003526f0 [ 1995.454193][ T4866] Call Trace: [ 1995.454205][ T4866] [ 1995.454240][ T4866] ? __pfx___filemap_add_folio+0x10/0x10 [ 1995.454335][ T4866] filemap_add_folio+0x1d3/0x630 [ 1995.471068][ T4866] ? __lock_acquire+0x49f/0x1a40 [ 1995.471103][ T4866] ? __pfx_filemap_add_folio+0x10/0x10 [ 1995.471135][ T4866] ? __pfx___css_rstat_updated+0x10/0x10 [ 1995.471188][ T4866] page_cache_ra_order+0x602/0xed0 [ 1995.471241][ T4866] filemap_fault+0x1943/0x3130 [ 1995.471275][ T4866] ? __pfx_filemap_fault+0x10/0x10 [ 1995.471308][ T4866] ? blk_cgroup_congested+0x136/0x270 [ 1995.471339][ T4866] ? blk_cgroup_congested+0x136/0x270 [ 1995.471371][ T4866] ? __pfx_filemap_map_pages+0x10/0x10 [ 1995.471399][ T4866] __do_fault+0x10b/0x440 [ 1995.471442][ T4866] do_fault+0xeb2/0x1750 [ 1995.527094][ T4866] __handle_mm_fault+0x187d/0x2a00 [ 1995.527189][ T4866] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1995.527225][ T4866] ? __pfx___handle_mm_fault+0x10/0x10 [ 1995.527256][ T4866] ? pte_offset_map_lock+0x174/0x320 [ 1995.527295][ T4866] ? find_held_lock+0x2b/0x80 [ 1995.553240][ T4866] ? follow_page_pte+0x4d0/0x13f0 [ 1995.553356][ T4866] handle_mm_fault+0x37b/0xa30 [ 1995.563144][ T4866] __get_user_pages+0x1178/0x32a0 [ 1995.568222][ T4866] ? __pfx___get_user_pages+0x10/0x10 [ 1995.573638][ T4866] populate_vma_page_range+0x267/0x3f0 [ 1995.579147][ T4866] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1995.585172][ T4866] ? __pfx_find_vma_intersection+0x10/0x10 [ 1995.591010][ T4866] ? do_mmap+0x93f/0x12f0 [ 1995.595371][ T4866] __mm_populate+0x107/0x3a0 [ 1995.600013][ T4866] ? __pfx___mm_populate+0x10/0x10 [ 1995.605173][ T4866] ? up_write+0x2e5/0x5c0 [ 1995.609545][ T4866] vm_mmap_pgoff+0x37f/0x470 [ 1995.614178][ T4866] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1995.619316][ T4866] ? __fget_files+0x215/0x3d0 [ 1995.623996][ T4866] ? __fget_files+0x21f/0x3d0 [ 1995.628676][ T4866] ksys_mmap_pgoff+0x3cb/0x610 [ 1995.633456][ T4866] ? __x64_sys_futex+0x358/0x4d0 [ 1995.638439][ T4866] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1995.643753][ T4866] ? xfd_validate_state+0x129/0x190 [ 1995.648961][ T4866] __x64_sys_mmap+0x125/0x190 [ 1995.653646][ T4866] do_syscall_64+0x115/0x840 [ 1995.658250][ T4866] ? clear_bhb_loop+0x70/0xc0 [ 1995.662952][ T4866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.668884][ T4866] RIP: 0033:0x7f899019e0d9 [ 1995.673301][ T4866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1995.692912][ T4866] RSP: 002b:00007f8990fb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1995.701330][ T4866] RAX: ffffffffffffffda RBX: 00007f8990425fa0 RCX: 00007f899019e0d9 [ 1995.709317][ T4866] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 1995.717284][ T4866] RBP: 00007f8990235024 R08: 0000000000000003 R09: 0000000000008000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1995.725253][ T4866] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 1995.733234][ T4866] R13: 00007f8990426038 R14: 00007f8990425fa0 R15: 00007ffd80e10868 [ 1995.741239][ T4866] [ 1995.744273][ T4866] Modules linked in: [ 1995.750061][ T4866] ---[ end trace 0000000000000000 ]--- [ 1995.790180][ T4866] RIP: 0010:__filemap_add_folio+0x1033/0x12f0 [ 1995.861669][ T4866] Code: 39 c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 d5 ee 12 00 90 0f 0b e8 cd 39 c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 be ee 12 00 90 <0f> 0b e8 b6 39 c2 ff 90 0f 0b 90 e9 76 fe ff ff e8 a8 39 c2 ff 90 [ 1995.929849][ T4866] RSP: 0018:ffffc9000500f3f8 EFLAGS: 00010246 [ 1995.949753][ T4866] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900154da000 [ 1995.957933][ T4866] RDX: 0000000000080000 RSI: ffffffff825a8568 RDI: ffff88802f0a61c4 [ 1995.970546][ T4866] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1995.979696][ T4866] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 1995.997700][ T4866] R13: ffffea0000db5780 R14: 0000000000000000 R15: 1ffff92000a01eaa [ 1996.009592][ T4866] FS: 00007f8990fb26c0(0000) GS:ffff888123ee7000(0000) knlGS:0000000000000000 [ 1996.023413][ T4866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1996.038103][ T4866] CR2: 0000001b2e9b2ff8 CR3: 0000000052178000 CR4: 00000000003526f0 [ 1996.061256][ T4866] Kernel panic - not syncing: Fatal exception [ 1996.067952][ T4866] Kernel Offset: disabled [ 1996.072282][ T4866] Rebooting in 86400 seconds..