last executing test programs: 1m53.561072124s ago: executing program 0 (id=82): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/net/teql0/statistics/rx_compressed\x00', 0xc2700, 0x0) mmap$auto_kernfs_file_fops_kernfs_internal(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000004, 0x14052, r0, 0x2) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) 1m53.319461766s ago: executing program 0 (id=85): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) ioctl$auto_IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000180)={0x8, 0x5, 0x5}) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xffffffff], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x5, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, 0x0, 0x10) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, 0x0}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x20000000000001, 0xffffffffffffffff, 0x1, 0x5, 0x101, 0x15f4da0e, 0x8, 0x9, 0x100000000000000f, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 1m52.709046691s ago: executing program 0 (id=88): mmap$auto(0x2dc, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="b799cb8b", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250200000005000500ffff0000"], 0xffffffffffffffc7}, 0x1, 0x0, 0x0, 0x20040cc4}, 0x4004450) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYRESHEX], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x4225, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7020f8dbdf2501fffe0008000200", @ANYBLOB="08000100486652000800"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) munmap$auto(0x8000, 0xffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x80806, 0x300) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0x2}) r2 = socket(0xa, 0x2, 0x73) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r3, 0x4, r3}, 0x10) bpf$auto(0x3, &(0x7f0000000140)=@raw_tracepoint={0x7, r4, 0x0, 0xf}, 0x1) sendto$auto(r2, 0x0, 0x5, 0x2, &(0x7f0000000000)=@generic={0xa, "e208004002de00"}, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) r5 = pipe$auto(0x0) r6 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r6, 0x0, 0x3) read$auto(r5, 0x0, 0x15) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001200), r0) 1m51.791139753s ago: executing program 0 (id=94): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x4d, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r0, 0x540a, 0x0) (async) r1 = socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x1006, 0xb, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29e, 0xfc, 0x83, 0x7fffffff, 0x6, 0x2}, {0xfc, 0x1, 0x800, 0x5, 0x1, 0x40, 0x400076c5, 0x8, 0x100000000}}) (async) r2 = pidfd_open$auto(0x1, 0x0) process_mrelease$auto(r2, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r1) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x1, 0x7ff) ptrace$auto(0xc, r3, 0x9, 0xfffffffffffff6de) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)="158f4a2b") (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(r4, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1m49.114386168s ago: executing program 0 (id=100): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf25970000001e00be0008a51b422c6ba4eae24dd182beb8faf0471234229226fcbc26e000000500ee00090000000b002400fe98ea953dcf5e00"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0xc0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) 1m48.462878134s ago: executing program 0 (id=105): rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) sysfs$auto(0x1, 0xfffffffffffffff4, 0x9) rseq$auto(&(0x7f00000002c0)={0x7, 0x4, 0xffffffffffff0000, 0xa, 0x0, 0x10, "0bdf98835933ba0e2e9ed6d9aaf3855bc4117f0a293ed16bf7e17e1d68a21b50a861d6a01a39dc9eedaf609c10713888745f47"}, 0x0, 0x0, 0x10001) mmap$auto(0x0, 0x20006, 0x4000000000dd, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) unshare$auto(0x40000080) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) mmap$auto(0x0, 0x100, 0x4020000000df, 0x13, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x1, 0xa00006, 0x4, 0x40eb2, 0xffffffffffffffff, 0x8000) socket(0x27, 0x2, 0x106) ioprio_set$auto(0x4, 0xffffffffffffffff, 0x1b) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2$auto(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x8001, 0x1, 0x7fff}, 0xa3) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 1m32.96840995s ago: executing program 32 (id=105): rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) sysfs$auto(0x1, 0xfffffffffffffff4, 0x9) rseq$auto(&(0x7f00000002c0)={0x7, 0x4, 0xffffffffffff0000, 0xa, 0x0, 0x10, "0bdf98835933ba0e2e9ed6d9aaf3855bc4117f0a293ed16bf7e17e1d68a21b50a861d6a01a39dc9eedaf609c10713888745f47"}, 0x0, 0x0, 0x10001) mmap$auto(0x0, 0x20006, 0x4000000000dd, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) unshare$auto(0x40000080) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) mmap$auto(0x0, 0x100, 0x4020000000df, 0x13, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x1, 0xa00006, 0x4, 0x40eb2, 0xffffffffffffffff, 0x8000) socket(0x27, 0x2, 0x106) ioprio_set$auto(0x4, 0xffffffffffffffff, 0x1b) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2$auto(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x8001, 0x1, 0x7fff}, 0xa3) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 7.719810318s ago: executing program 2 (id=370): mmap$auto(0xfffffffffffffff7, 0x400008, 0xdf, 0x16, 0x2, 0x8005) socket(0x2, 0x1, 0x106) r0 = socket(0xa, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x100000001, 0xeb1, r0, 0xbf47) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) readv$auto(r2, &(0x7f0000000240)={0x0, 0x101}, 0x9) write$auto(r1, &(0x7f0000000300)='9\x00;T\x16\b\x06\x00\x00\x00\xd6\xe4mh|\xea\xa6v4\a?\x88+t\xc5L&FxW#\x8a<[t\x9f{\xb48q0c\x11\xf8X\x0ee\x81\xa0\xbe\xb2#-\x89m\x8a\xb1\xcd\xf1\xfd\x05WC\x9f\xbe]\xf4\xce\xb3\xdd$A\xd6\x99\xd5+I\x18(\xe8\xd3\xc1\xb2)\xf8\xf6\xf5o\x13\xcd\xa7\xe3\x87\x01\xab\xe1\rh\x8d\xbe0J\x1f0Si\xb2\x8b#xG\x80\x11d\xf0\xf3\x9d7\xc8ajQ\x10\a\xe36\xa6', 0xc) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x16b802, 0x0) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb3, 0x401, 0x8000) unshare$auto(0x3ff) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC0\x00', 0x0, 0x0) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x40, 0x0) unshare$auto(0x20000) mmap$auto(0x6, 0x94, 0x41, 0x200009b7f, r3, 0x6) socket(0x25, 0x1, 0x0) setrlimit$auto(0xb15, &(0x7f00000000c0)={0x7, 0x3}) setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000029, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) mmap$auto(0x0, 0xdb6, 0x3, 0x1c, 0xffffffffffffffff, 0x100000000) bpf$auto(0x0, 0x0, 0x7e) bind$auto(r3, &(0x7f0000000040)=@phonet={0x23, 0x77, 0x4}, 0x84) unshare$auto(0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) 6.322207348s ago: executing program 4 (id=376): r0 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r1 = bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x4, 0x9, 0x80100, 0xffffffffffffffff, 0x2, 0x9}, 0x4) socket(0xb, 0x80000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_vlan\x00'}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(0xffffffffffffffff, 0x0, 0x4040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) sendmsg$auto_BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @local}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8001, 0x9}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) recvmmsg$auto(r7, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 5.296080731s ago: executing program 3 (id=379): close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x40009, 0xb, 0x8000016, r0, 0x28000) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x5dc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40602, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) read$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0xa0301, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x0, 0x2, 0x9) socket(0xa, 0x2, 0x3a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyz9\x00', 0x600882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000380)='/proc/loadavg\x00', 0x40001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1f, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) 5.268416136s ago: executing program 4 (id=380): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) r1 = pipe$auto(0x0) getsockopt$auto_SO_DOMAIN(r0, 0x7c, 0x27, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', &(0x7f0000000100)=0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) statx$auto(0xffffffffffffffff, 0x0, 0x401006, 0x4015, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2c0c1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r2, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x200408d4) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x7}, @NL80211_ATTR_AUTH_DATA={0x67, 0x9c, "040f4feddc3f8811a651289deed638bb1ff9d092c779bf654c266080a47e8ddeecae6af6de85964fc31e27257478f0c124d9c2b43cfa36c9a8151a9a563f55a363b78e40aea288e9b263340540e1d58c5adb0568c88717b60800c6a65fb815ffc529a1"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x6}, @NL80211_ATTR_PMKR0_NAME={0x27, 0x102, "88402d872344730cd7fe202fabce37ace5c1e2c31844b3a73fe3050247946f148dad24"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x804) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) mremap$auto(0x2, 0x0, 0x2, 0x7, 0x7) 5.15235591s ago: executing program 2 (id=381): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x80000000, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x4, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x200c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x48080) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x900064b4, 0x2000000000000c37) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) epoll_ctl$auto(0x5, 0x3, r3, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r3) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x30) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000140), r0) 4.021773471s ago: executing program 1 (id=382): write$auto(0x3, 0x0, 0x7fffffff) 4.020010771s ago: executing program 2 (id=383): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) ioctl$auto_FS_IOC_SETFLAGS(r0, 0x40086602, 0x1) mbind$auto(0x4, 0x2091d2, 0x4, 0x0, 0x1000000000006, 0xa5ab) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x8, 0x809) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) mbind$auto(0x10001, 0x10000, 0xf7f, &(0x7f0000000080)=0x3, 0xb, 0x1e21) select$auto(0x9, &(0x7f0000000240)={[0x2, 0x1, 0xaa, 0x8000000000000000, 0x6, 0x2, 0x4, 0x7, 0x5971, 0x9, 0x10, 0x4, 0xfffffffffffffe00, 0xc5, 0x8, 0x4]}, &(0x7f00000002c0)={[0x401, 0x2, 0x597caafa, 0xfffffffffffffc01, 0x2, 0x7fffffff, 0x5, 0x2, 0x492, 0x35, 0x8000, 0x7fffffff, 0x3, 0x7, 0x4, 0x40de]}, &(0x7f0000000400)={[0x1, 0x3, 0x80000001, 0x9, 0x3ffd, 0x4df, 0x3, 0x7, 0x9, 0x1, 0x7, 0x2, 0x2, 0x7, 0x859, 0x8]}, &(0x7f0000000480)={0x80000000, 0xffffffffffffffff}) shmctl$auto_IPC_SET(0x801, 0x1, &(0x7f00000001c0)={{0xf, 0xffffffffffffffff, 0x0, 0x6, 0x3, 0x7ff, 0x3ff}, 0x8001, 0x1, 0x2, 0x3, @inferred=r1, @raw=0x400, 0x3f8c, 0x0, &(0x7f0000000000)="6a4e8b9269b0c5", &(0x7f00000000c0)="859428ce50d65cdc3005368ce1372777de088dec3c9fabb359e7a2ecb8d285a68aca5acc6d61b36fb966c95ef64305e0715a64a1b833062e054f63f379c470bef72d724c1ff0a02187466f0915fad4bc6c7c337a25b5dcbb4f2d478853fd20f363091bfe1b0c4f8a78ed94afb46840f6fecd69e32f32387f816eb3137ca0e3b387128f3808d1e8fe8b580b1e1ab3e8f9007d1603fc366d625d65b7dc47fb9f4f30f59f4d516732ab4ba482c7cbdde6761cae655267ec0301ec1fa2f1554a486e86e2344705d2aa"}) r3 = setfsuid$auto(0xee00) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="30010000", @ANYRES16=r4, @ANYBLOB="000827bd7000fbdbdf251c00000005005300022c6b8ede0094009d3be37b6e04e5d80eda799134fa54a6e485e1918069d243c8fe0000f4004580ed00ea8008004b00", @ANYRES32=r1, @ANYBLOB="0800eb006401010208003400", @ANYRES32=r0, @ANYBLOB="7b193577d5c7e2a4cfd09d499c4e0f9d6a5255aea1c3bc868d2fe29281b7bf3f1aaeebee975ff60d51bd09e7f6790356ef58af8bad406316172f386a2723704c95b3d3c181c40454a1e0bd2dcebf6f1bd1e72d0f284d9023748e5c09f6a5de9b913eae9858d5897ceb631282d69246b977353115641fda00e2d9a527b10813097b41c3c14a1cb2b3f0c9f15ba20dad021d22e6935c17ebc31a283849386c21b30bbefe22e30800d300", @ANYRES32=r2, @ANYBLOB="1400d400fc0100000000000000000000000000010400ff8004004f800800800064010100000000"], 0x130}}, 0x20000080) r5 = setfsuid$auto(0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_NET_DM_CMD_STATS_GET(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NET_DM_ATTR_HW_DROPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x400c000) setresuid$auto(r3, r5, r3) setresuid$auto(0x8, r3, 0x0) 3.91743803s ago: executing program 3 (id=384): r0 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000100)=0x2) mmap$auto(0x0, 0x2000e, 0x800000000de, 0xe31, r0, 0x8000) r1 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x107601, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'nicvf0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MBSSID_CONFIG={0x48, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x95}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xe5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r4}]}]}, 0x64}}, 0x4040044) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r6, 0xc05c5340, 0x38) r7 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000003c0)=""/231, 0xe7) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x0, 0x5, 0x8, 0x9, r1, 0x0, "5bc0ce26ab94bbf319f4848356e22d4b", r4, r6, 0x7, 0x8, 0xba, 0xb5c7, r7, r8}, 0x401) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) connect$auto(r8, &(0x7f0000000140)=@llc={0x1a, 0x307, 0x7, 0x8}, 0xf) 3.841269946s ago: executing program 1 (id=385): landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x3cfb40, 0x39642ae5d3121abb) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/109, 0x6d) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, r0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) io_uring_setup$auto(0xa, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x20000, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x10, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xd, 0x2007d48, 0x948b, 0x4, 0x0, 0x4b, 0x3, 0x0, 0x80000005, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) faccessat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x7) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x10080, 0x0) setsockopt$auto(0x3, 0x1, 0x16e00, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x800007, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x1000) mmap$auto(0x0, 0x202000a, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 3.378120932s ago: executing program 1 (id=386): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r0, 0xa0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x8) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x111442, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, r3, 0x1000, 0xffffffff, r4, @relative_fd=r2, 0x8}, 0x6) pread64$auto(r4, 0x0, 0x7, 0x6) process_madvise$auto_MADV_DOFORK(r5, 0x0, 0x0, 0xb, 0x9) unshare$auto(0x6c000000) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x4d, 0x7fffffff, 0xfffffffffffffff9, 0x13, r6, 0x8000000000000000) clone3$auto(&(0x7f0000000040)={0x3, 0x9, 0x0, 0xd701, 0x2, 0x0, 0x5, 0x8, 0x10000, 0x8, 0x6}, 0x8) remap_file_pages$auto(0xffffffff, 0x0, 0x7, 0x1, 0xfffffffffffffffd) r7 = socket(0x2, 0x801, 0x106) getsockopt$auto(r7, 0x11c, 0x1, 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0x0, 0x2}) 3.377871335s ago: executing program 3 (id=387): close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x3) (async) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/writes_28\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0xa, 0x0) (async) r2 = socketcall$auto(0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(r1, 0xae60, 0x10000000000402) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) pwrite64$auto(r3, &(0x7f0000000440)=',^\x00', 0x1, 0x2) (async) pwrite64$auto(r3, &(0x7f0000000440)=',^\x00', 0x1, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x100000000, 0x7, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x101) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x400d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' #\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf2504000000040006000800010006000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(0xc8, 0x800454d3, 0x5c8d) 3.359163496s ago: executing program 4 (id=388): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x1d, 0x800, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(r0, 0x11, 0x65, 0x0, 0x8) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x9, 0x1000) mmap$auto(0xffffffffffffff7f, 0x0, 0xffffffff, 0x17, r0, 0x4) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 2.666528045s ago: executing program 4 (id=389): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="b2", 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x24100, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\xd3', 0xfdef) 2.337321921s ago: executing program 3 (id=390): write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) rseq$auto(0x0, 0x8002, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x7ffffffd) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) madvise$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x80000001) write$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x8006, 0x0) exit$auto(0x6) timer_delete$auto(0x0) 2.164290012s ago: executing program 2 (id=391): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x80cb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf258c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\a\x00\x00;', @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf251000000008009e000900000006001401040000000800b700b70000000400cf004c004f00aa76b4a4a9ad1075bd6f3c96dd602bf9e6cf50dc7a9c6658c7f4eaaf5c592043c5b5e2c13d737fb624329716a3d85ef070329e33650fb4f8a785974f76d26d0246132c89fcb1e904"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) kexec_load$auto(0x0, 0x4, 0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) fcntl$auto(0x0, 0x3, 0x4) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x6, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r5, 0x0, 0x1) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000), 0x0) r6 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r6, 0xfffc, 0x8}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x8}, 0x0, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) 1.884647302s ago: executing program 1 (id=392): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r3 = socketpair$auto(0x1, 0xc17b, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r4 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9gj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x0, 0x6}, 0x0, 0x1001) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) sendmsg$auto_OVS_FLOW_CMD_SET(r2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r2) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r5, @ANYBLOB="000025bd7000fcdbdf2514000000080010003e0f0000050019000500000005000b0002000000050018000100000008001b00faffffff08001a004000000098001d8014000180080003000200000008000300450d000014000180080003000800000008000300070000004c0001800800030008000000080001008000001ae10996c500000008000300030000000800020001000000080001000900000008000200d90672f2c195a6a9e4ab44c18c0003000800000014000180080001000600000008000100070000000c0001800800020000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x40094) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x3, 0xae) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB="0f0026bd"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) close_range$auto(r6, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000500), r1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.345493391s ago: executing program 4 (id=393): write$auto(0x3, 0x0, 0x7fffffff) 1.200359543s ago: executing program 2 (id=394): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) mmap$auto(0xfffffffffffffff9, 0xc7d, 0x100000000009f, 0xeb2, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r1, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800007c0fe00"}, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) r4 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8001, &(0x7f00000000c0)="123e723a0b3b1a0bacf584f57767f2df733383ac00140a3bbe25308b3f4564b32149776bb52c796ebd39f9bf10a491542e69e3c4de839d6aa04b6dd92502e39aaaec03911f5801464d12a81ce86b68151fb2") fcntl$auto_F_DUPFD(r4, 0x0, r1) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, r4, 0x8000) r5 = memfd_create$auto(0x0, 0x4) statx$auto(r5, 0x0, 0x1000, 0xbdfc, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x4, 0x1, 0x4, r0, [0x1225, 0x7f], {0x8, 0x2, 0xdd57, 0x6ab860e6, 0x6, 0x2, 0x8, 0x0, 0x5}, {0x2, 0x8001, 0x2644, 0x8, 0x3, 0x5, 0x81, 0x2, 0x5}}) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0305602, 0xffffffffffffffff) socketpair$auto(0x1e, 0x7ff, 0x8000000000000000, 0x0) 1.141906142s ago: executing program 1 (id=395): r0 = epoll_create$auto(0x0) (async) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x3, 0x3, 0x1) (async) io_uring_register$auto(r0, 0x9, &(0x7f0000000140)="db18d1e11f2feb04332b2e0444baea82c8704a2b306d6430af7d9394895375329f31a15727d10775f0528a8298fc761e067ee1f105b627b93501c1e2b4e2def032ba55fa82714295af5600f7aee1e32eb1649cc1c9139c95aedc3820c3181f1e11e5af9edf0015c5a9851e9f4d150a3ac6171f005c1cce3cfe339b7dab74412770d468de860d5892d8357df8e64f1e00e6fbb575b62eedc0e84a8ac29195848fef02c995f00c62c4733721d31dadd80bc2049d8b6bebe0648fccd6b5cf3b50cfef196889d703d48d626249bd217fd7c5fcb5e28b59684af46845aaf563bd34c1d496e0086a3fd03ca3fe", 0x1) (async) fsync$auto(r0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r0) (async) r4 = getpgid(0x0) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x1c}}, 0x20008000) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000003c0), r2) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x6, 0x1, '\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x941) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'gretap0\x00'}) (async) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000500)="5c33a0d3b71d7f048ff7c97b012b450c7f7279f9a13fdbbec54de718659ac898337aef5d84a28f5f2c5b88ac9effd16a065199cf7060ca82409f75b25f4e0d6c01d5c375f786", 0x7fffffff) (async) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000005c0), r2) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000600)={0x16b0, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACINFO={0x1239, 0x7, 0x0, 0x1, [@generic="22b1ba12c839a9bf58afa484bb12c4fe07911970ea5d155a3c904de9a29780a85d150d72362d94c14a5dd8dca267aa81f6e05f6a4bf68b5971208efa9552434f3cd1c87e8a80c3bd932aeb4ceb7e4bc0ede4b848db94fece177c3164c255f72521c6b2c5943a9680660ad693405d91c1e3f92ea784adb87d9048a24ae9a8a099551a67204bc0f2c9022ea26ff8df40abb163abcd8784346756fbbf226a", @nested={0x1197, 0x15d, 0x0, 0x1, [@generic="77f73eb369e03f76354e63eca1b7d0575b7ff8f6ce62734898972f926b4705e789b375129b817dd96eea3c84ac1e446b93f1248b11222ab2f001e70eb2d9e6230d975a7c8c01deb76b111d37479166ac390b3a303935f1a226236efc6cab8f8675aca2de5a144b7a9b9cbb7dda8af322a37b10ab77eef1813c8829b87ab6671a672d557477f68696f6e2815ccb165fd517c17af5581de2b68e50e00bdd10633a4d812b85cdac017f46e3a60dd7778139ac7e4d930c91b99fb5607e469628336b6fea2186c0c4d49de94239846f7a6c2276237d52398e28431c0a8a3ab015af8ee059708f5c8968dece4a5172b169227b5c27481845", @generic="e16141c9ad4e1ccfa7b507ed5f59d55a33de1573843ddd3ad188c658af7b6d38ad2ef12d766de37b38db550401b9db558ef5cbd066236584eb18aa3e8d9cadc3e5ee5db67d4d5d202a583f0ba477bdf34b247cd76b367c75823af3e3292b00af217263b607b8f1312f79abb0e39983ff0e27f9317264327966983bc198c04c15e3029b01b6841948bbc3a1537099131bb37b00b2cfaeaa96eb0c", @generic="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", @nested={0x4, 0xdf}]}]}, @SEG6_ATTR_HMACINFO={0x10, 0x7, 0x0, 0x1, [@typed={0xc, 0xef, 0x0, 0x0, @u64=0x6120000}]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf6}, @SEG6_ATTR_SECRET={0xd, 0x4, "df5b594d2f991ae1e7"}, @SEG6_ATTR_HMACINFO={0x413, 0x7, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @str='nfc\x00'}, @typed={0xd, 0x6d, 0x0, 0x0, @str='nl802154\x00'}, @generic="5d26721bcddaed97c30814bb82604fef805318bd9e1edc32b4fd6ff9731a0cb6d254a8cc5e8a5c12eb70b383354533711abb9a1ae471cf20ea15add1cf7b335478af0bb9fb86519201652052b5f2f206d4da32c949027a3b03f7e8ac244e10a3216e6c6ac11f5d2ec26ef6b90a4ce85f4609ee542043fe6fe318b1ed7898d8203997fb2ea91f02ce8b42422288ae54f91c38f042e9e82c5613ba77029213f97ad77ae96b34df1be103e19c66ad0b4c294f498f344e3331ada96c5f87b2108d", @nested={0x15, 0x22, 0x0, 0x1, [@typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="cee36f9859d6e322c6"]}, @nested={0x16e, 0x10, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="e4adc0b0945bd5e6b7c829e3f0da057d2bf3bc86e77db04865b208c076c0b77fb3ac8a9fd2c518aa65b5e7a0fd64db7e7368aeb05a9d7ed950f22e77ab04fd16c30bf8a57c7167ff2102ea41fc8941059f242517aca7623a1586b971e757035d02cc389f48d39c503c1a925495abe3d0690f18a87e90089d0a4ce1b0db10b01501f849c0545d8a5812e4795a402677e9967c5178d52017802ebe180d7c6bc236ac9bb2828a3818d9edd4dda047aa8a0cdcfc64e3f6", @nested={0x4, 0x118}, @typed={0x8, 0xea, 0x0, 0x0, @fd=r2}, @typed={0xd, 0xef, 0x0, 0x0, @str='nl802154\x00'}, @nested={0x4, 0x38}, @nested={0x4, 0xa4}, @generic="433bb8eaf6413976b992c831a78c494a447ca2648b3c3e0e5d7d201ed2e4e288d0fddf0562b14d6352440d610ea559d1619bb26fe896fd60e5d117b629e4110a2e3b4e960dc3ee51f502bcfe6bc7934adf49a906b53ccf8d713dcfc42f934d4a1a5ba785679b28b553d224d84e190b01cdfb3f53abfea6f1f808781db1a7965384ed455ddcf0aac3382530537f"]}, @nested={0xae, 0x70, 0x0, 0x1, [@typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @nested={0x4, 0x29}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="b34020d6a4ec6e26fa18836230944ab2081e38b74091fac99fb0124b86330b1458739d04a2036622202fb036d85b99670b4b9c75e8fc35f4d8c6849c2033df81ec73fceccaedc878964b965689ac6b1f9965d14d1f9b9a038e1cba1c170988143b498e95ba4946463269563135b4a6bbe5897c98ebca55c489955ad6e21720b482c0", @typed={0x8, 0xe0, 0x0, 0x0, @u32=0x1}]}, @nested={0x14, 0x4c, 0x0, 0x1, [@nested={0x4, 0xf1}, @typed={0x4, 0x11}, @nested={0x4, 0x9e}, @nested={0x4, 0x119}]}, @typed={0xd, 0x5c, 0x0, 0x0, @str='nl802154\x00'}, @generic="88edd9c8012f00deeccc160b786d69ee728c15708557f807d4307d97a1d9ac2ba8e245d6081b3e8640d4f39ef3063383da33c841181f6541cbb1522a68db8bd5702af2b5b408b9661be020dfd06394b076d78f1f39b7258d9f3af91c851379a344f2172899d9cbf282920ef40b23a4773c89112a71c218c8a864fd4d81803ae6ff150e84d99994412edde960053fff0be8f8c9e9ffe8e3ef9d7c7fd67dec81deee77be0bcac19279ccff96823f823256eb4510036e5d5b4629372f8ff0cf0c84e4857ac1f49a04857aa099800577baf3a382bde1751edb45404f7b36"]}]}, 0x16b0}, 0x1, 0x0, 0x0, 0x40010}, 0x40081) (async) getsockopt$auto_SO_PEERCRED(r0, 0xfffffff4, 0x11, &(0x7f0000001d40)='/\x00', &(0x7f0000001d80)=0xe) (async) ioctl$auto_TIOCMBIC(r0, 0x5417, &(0x7f0000001dc0)="e26cc4aaa4067b21769f1af65ed33f36c9c34e791b76eb982bc32359b27fd4f98b14dfe459eaa2ebb7f648db37a99806fc9de64d244210d1d4d7d87e1d68e590ae78f8b8b8bbf9c140741b107718b1eb1bbea08a974816393377b4ec262a7da9e7cf5d303fc2c0e85f7e16cbedef1e4dc5c56a945de0dff034e7394a14645b96cd8b024f060fcc2db5aed985e9") r7 = userfaultfd$auto(0x9) r8 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000001ec0), r2) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40800) (async) mmap$auto(0x1, 0xffffffffffffffff, 0x8001, 0xfffffffffffffc11, r7, 0xe9f6) (async) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002000), r2) (async, rerun: 64) shmctl$auto_IPC_STAT(0x3, 0x2, &(0x7f0000002100)={{0x11b, 0xee00, 0x0, 0x4d, 0x5, 0xd2, 0x4}, 0x8001, 0xa, 0x1, 0x7fffffffffffffff, @inferred=r4, @raw=0x4, 0x7fff, 0x0, &(0x7f0000002040)="31fc65bba0d141ed6384eee1177932fb5ad41a3a7dfb0654a32dc6d628075a3803098c0453e1593b1f3dbd52a7560eaf2534f1c36b3f93d66d6d05e0794a69e4d65d9e7f2f67bd0c809738480f430e9e53304e0af6f257f195fd96ef63d27febba8284b1da8214f143f4e283cec968cf196a27e0cc0637ef2753b4c28cbad4", &(0x7f00000020c0)="e9a30730d7409fd02f767a32be6d587acfd45d33"}) (rerun: 64) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000002640)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002600)={&(0x7f0000002180)={0x480, r9, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@typed={0x14, 0x137, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0xc9, 0xb7, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="07349efcf015eb503b09eb3b17e1d301cd7ed1af3d01bfc1987ce9c0ebf37bcf85b090ee4109e9b2c9277dc9db0162ad0dbeb97a1960878f5647ea9d3d538ab2bfe624ce38dac14f0653833b402bce306175d063e6fef660f5971ae8c7f9d6103b80ae029ef77f2499ed6609f045d53930789d828ba3c0b07da34bc98f651f349922dc1afe93c83983a45eb026b2e35758978833c4512392b670496e362e62c395a54b7607fa94755f831478d1939d979b028a7fd98d3f6385eb1bed0c834f90fc"]}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x8000000000000000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x101}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x812}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x350, 0x2b, 0x0, 0x1, [@nested={0x12a, 0x154, 0x0, 0x1, [@generic="b79b537fd3a1ec8d899edbcde299164094d41dde71e71aa213c00fd59799179952a67ca1f3c73e694be7024a5eceda9f957bc71c204d985602905294ff43436d151ae73b5910ef26e78f213a3f65d14073598df0939bf6d2b142d632de", @typed={0x6, 0x143, 0x0, 0x0, @str='\xff\xff'}, @nested={0x4, 0x92}, @nested={0x4, 0x20}, @generic="8ecc18e1d6bfd07bfa7d79c4e68da09dca1f08bba0b63f785b4780ff82fac7c320ada7fffd7bfd9b42400183bc518e97bd4a88b05863367109d2c01626ee8d718aa7d596c08d97a0c4ffb5189d012c7147addd6523ffcfb11687d43f8ae697859bf15d886c1f67b572ab729cc8b1747db78fd105790f896b14428225ad30258edc9d52fada50458c492e20c65fc607421d3803d4e6be7a65163524090fab54946ddc5917d8600742d0fc92a765c8cb52847766637f1593f9f3"]}, @nested={0x205, 0xd, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @uid=r10}, @nested={0x4, 0xf9}, @generic="d0620732a61b87ad4b2f1c388af2c95d0b8c89e5e175339d76d9b580661f889930e2f3d6a61314b3f48a7cef5fca11174c51f51063796ec7001fddbc326be49ce2711823977d1d0d9311fb9c1e50ce9082f075ce539f975c49d10b69335cce9f1b3dfe39e26438946a4605efcc3168cecf60c3b3c8f35bdf795afb4ae92911e01ee4ac3156973816981a2fbd98591d35b7180c9b373bcc6b3d9b4fc3ff11cc26e04a16e5c94d6178cd63ab997d4c272f6438091bda784a9200602deaee9893", @generic="27060669af79f96d782b0d2b877143a189e3b8e238e76669fb8bb2d5bd312a36bfd96a3b96cb45bb8099849465b843600685a122ecce871fccf786642f3821f5fd6a43cf0c40fc2f29c5edb618a09921a8947cd43b4d0d11365e55c3f69d44ca06eefc17993dad222d49ed4378a07190ea36a6a3a6bb18bc56cf73d730759662e5ee046735c2e574829ffa79ebb2465d7cdf2c7126609b42fd119999c244d9d3fdcc23802e556eb6771b1c35f499fa9f3d95aba19185a70dbeccb7", @nested={0x4, 0x90}, @typed={0x8, 0xd4, 0x0, 0x0, @pid=r4}, @generic="12121d4200e9a8a5f58bd65ec092c9799be81d57fba41df8fe6011541d1d691cc8bdf7fdf1f27c8e5a3547246b9399fbeee8eedd2f700ab2fc760530600ce0ad62de4636603947968c9eed4f1e15510897a4c4b9e486ffb01b181f19b4fc22c4c3f73fceb166fb6cda", @generic='}V', @typed={0x4, 0xea}]}, @nested={0x10, 0xa3, 0x0, 0x1, [@typed={0xc, 0x2e, 0x0, 0x0, @u64=0x367d}]}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x7}]}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}]}, 0x480}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmmsg$auto(r0, &(0x7f0000002900)={{&(0x7f0000002680)="3aa4ce257cee75e4a9c054850f23fc1e96c99dfc31195badef7436a50245ef2e7f7e22aab1a251f8c03017ae6be6eac7b01f79f72ddee066bcd95d3379b05ebf322c5fad0677d5ca82908f0e63fdee2c42bdecedc9e07c85ea58d16bd78aa41e71364cb27da8203e8516460824e1b90e5e4d95c4f8b9fd168203cc77e2e64f9dfe1b44f59b1e7d6e121a5d54625cb4956b41e4615acedfd1b81844665b99c43eb39524a24151bdf8fc0a1f9bf8a5e2bed9fd3a7cce1bc0ce6d5032040d18b22e33fc53f4644c4588f647541729a75b9065b5d65d1946c862839da7e932", 0x31a00, &(0x7f0000002840)={&(0x7f0000002780)="60b363f0e173527e42d2ddbde20cf737012b83c616d04afa003c98d751b5f7db93cbc75c6c2421b34440b667241c874f7b6c4265f370f6c73e345e17085f1425371b1985e4e9a76a3169082d827d69e790b2f168f88361736452cb2bab04e7eb2fcbe9f1cb7af427c55a4c440d816c1315361c21c9a5b2f29c1038125681f5903b399ed3", 0x2}, 0x38000000000000, &(0x7f0000002880)="3256cd410bf7d48affd70bd63f166bab716c6ebcad5d90e5be91833cd569b6375553c36d09b389aa002917c5dcc3aa95d2c191e1e9a9472e2091293f9b286d14d1986faa131fe6dde7dead62f72fa797c990ab06014d484d5c8c0911fe6d7d46053241c6754562d89b2111869613ea99", 0x9, 0x3}, 0x90000000}, 0x0, 0x222d) io_cancel$auto(0x7, &(0x7f0000002940)={0x80000001, 0x3, 0xfd6f, 0x3, 0x0, r7, 0x800, 0x3, 0x9, 0x0, 0x3, r7}, &(0x7f0000002980)={0x7, 0x8, 0x200, 0x6}) fremovexattr$auto(r11, &(0x7f00000029c0)='nl802154\x00') write$auto(r0, &(0x7f0000002a00)='@,+-&\x00', 0x0) (async) sendfile$auto(r7, r2, &(0x7f0000002a40)=0x8000000000000000, 0x5) (async) pread64$auto(r11, &(0x7f0000002a80)='SEG6\x00', 0xff, 0xfffffffffffffff7) 983.781882ms ago: executing program 4 (id=396): landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x3cfb40, 0x39642ae5d3121abb) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/109, 0x6d) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, r0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) io_uring_setup$auto(0xa, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x20000, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x10, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xd, 0x2007d48, 0x948b, 0x4, 0x0, 0x4b, 0x3, 0x0, 0x80000005, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) faccessat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x7) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x10080, 0x0) setsockopt$auto(0x3, 0x1, 0x16e00, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x800007, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x1000) mmap$auto(0x0, 0x202000a, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 673.524118ms ago: executing program 1 (id=397): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xa}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f00000003c0)=@bpf_attr_11={0x1000, 0x40, 0x4, 0x600, 0x4, 0x3, 0xb2}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r1, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r2 = epoll_create$auto(0x1) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x8000, 0x400000007, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) 609.904608ms ago: executing program 3 (id=398): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3d, 0xfffffffffffffffc, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x73) sendto$auto(r2, 0x0, 0xfdef, 0xfe80, 0x0, 0x1c) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000b6c659c316d4c07d87bc1a605d465f0ffabae9e58e", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250400000004000e00"], 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4000000, 0x61, 0x1800000000000010, r0, 0x40000007ffc) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0xe8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0102, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x1, 0x20eb6, 0x401, 0x80008000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r7 = syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000100)='1', 0x1) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000000c0), 0x0) pread64$auto(r6, &(0x7f00000000c0)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x3, 0x4) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) ptrace$auto(0x10, r7, 0x2, 0x107) 27.429077ms ago: executing program 2 (id=399): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) ioctl$auto_BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000040)={0x2143, 0xffffffffffffffff, @start={0x4, 0xd7, "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", "695073f461468a27017365f1e636c6a7345b8debf7b83690cb3fc4d97767fe2e55ee04d6af64232537669acc95bc2364eb5cbe2c9bc823287680cbfa8465d4319799e3430674c8668ee041dee9754380adcf91004ed1156855bbba27693c21064a7bac304c8531f308db99ba1103b7d3c4fde07cae8e19ca7fc7255ab43c5dfb862084f2650ba3c5cdc73985ae25ccd214616687da8b7a3fccd4e16fcb4aa3b51b0415375c3fab637c56bc0547d7a41fc830c44bfca8fef696be9ffe2fae78fb38c147320540caf85ce3ba08e851b6d9386573d4d11460646126caa6cb48b88ab50e88ae94677a4818070075c95c6abe5112f5ff3e50494259b538d9b90621a06e12427b976ae946e2fe28fc3351c8097d1ced1c1d0cbb224f7dd74e19c7131a2473bb20137500c08fec651a45a0083e659e43f2be14f3278f8ff78e3914319bb13ad17388dc34b11698869601ff1b7dfa176863ddd4d285659582a117aca40f84fe718d2755cfc98f772b44ff612382990571dcc59304f50c3198cafaaff4df7a879afd51207f5217e73a5c50131ae540bbc90ebbf4efa8bba7ed72efea7a7ff5329dee6905261efe2d3c0d5c7fd996d832e0b715a165ef4f66c70ce4d508199634c4a59652b02cd1a8bd7f00db49d57d5588204334703f8332ce5a0e0fda81d21c1bca498e6b0cba86654661773e579c4b78f7216d2e176c9b4b5f3d5a2487a633b3802790028b8d97778879caade12f799db177fc9b9642d298439ac6728495b50ce67e8c9e22a6d0a8c9ea6bdb0d3dce99ea301483fdae67ec0c097c4d671d37fe97d8328b811fa2fde90745413ff5df16e1fd296483474bec00f1803884cd6d0bcaa967fcd4f9cb8669d8dd54d86b11ea69465ee59a095350a3acfd8f78719edb2141e8b83b5ca6fe2e871e13df3c39b336c67448f6d2e2e1bfc12544b17f24ffd083835a7e88fd85d7e8336a284e8632ecbf7f6e7cdab954a6497e86241184632d3c46956dcbe920d8109ba8cd1676b17334b01d30f4f60272bb5ed7d0f50248ee2be6fa3d07bdb87c80dae2eee339a4f556c4ce38e19bf63090042d595bb183d537ccd0aa6e28a09236e27aecb76b7eaf29258699492d95a636f2c6e5a277aba2f241f4f77afcda8094519faaea0989defbdff0ff4871777312a3f6901bc67c2d51ab5c9b05afdcb669733b9e7a12363de72275e537587bb7f029e5af52375aad4ce76f478170471f52ba89b5a0bb8a29d664894b51d01aa030ecf8784c2731fdde461e74876f6e9643b43bf517b4919a36350f48cb54353843b8bac51a0dac3c13fb255f8e5879e3bfdca23ec8e788dca45509c0130a9e9d848c43ee26c0145a418f49fdf306fd53076d012029826028c0403ca19f64b31b87047b2254b1740293b40334172f525385d644188cbe1103e21b8eb5e5f52fa766fb59d721"}, [0xfc, 0x4, 0x10001, 0x8, 0x7, 0x7, 0xff, 0x7f39, 0x9, 0x2e, 0x0, 0x33, 0x6, 0x7, 0x2, 0x3, 0x400, 0x8, 0x5, 0x0, 0xd667, 0x401, 0x8, 0x7f, 0x8, 0x80, 0x100000000000000, 0x5, 0x10000, 0x8, 0x401, 0x8, 0x1, 0x8, 0x4, 0x1000, 0x5, 0x8c, 0xe74, 0xf, 0xe, 0xc1, 0x2db2, 0x5, 0xb5a, 0xb6, 0x2, 0x7, 0xf, 0x8, 0x60eaa63, 0x4, 0x7f, 0xa2, 0x2, 0x100000000, 0x9, 0xa8, 0x7, 0x8, 0x0, 0x3, 0x80, 0x2]}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup$auto(0x86, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r4, 0xc0205647, r3) close_range$auto(0x2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r3) r5 = gettid() kill$auto(r5, 0x11) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, 0x0, 0xc800) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vlan0\x00'}) writev$auto(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xb}, 0x3) 0s ago: executing program 3 (id=400): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, r2, 0x2) pidfd_open$auto(0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) read$auto_i2cdev_fops_i2c_dev(r3, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) flistxattr$auto(0x3, 0x0, 0x3) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) sendfile$auto(r1, r4, 0x0, 0xc01) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8001, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x2a2, 0xffffffff, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x5, 0x7, 0x8, 0x8, 0x100000002}}) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x2, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 89.200027][ T5615] cgroup: Unknown subsys name 'net' [ 89.300224][ T5615] cgroup: Unknown subsys name 'cpuset' [ 89.309527][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.095399][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.089073][ T24] cfg80211: failed to load regulatory.db [ 93.320360][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.328790][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.338600][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.339096][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.354104][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.361257][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.371028][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.371052][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.375278][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.381240][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.392599][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.405075][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.415068][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.417873][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.429585][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.433126][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.445181][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.446751][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.461210][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.471857][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.008674][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.017190][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.024809][ T5629] bridge_slave_0: entered allmulticast mode [ 95.034029][ T5629] bridge_slave_0: entered promiscuous mode [ 95.078657][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.086412][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.094284][ T5629] bridge_slave_1: entered allmulticast mode [ 95.103350][ T5629] bridge_slave_1: entered promiscuous mode [ 95.186222][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.227094][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.361859][ T5629] team0: Port device team_slave_0 added [ 95.404493][ T5629] team0: Port device team_slave_1 added [ 95.410403][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.417854][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.425070][ T5628] bridge_slave_0: entered allmulticast mode [ 95.432838][ T5628] bridge_slave_0: entered promiscuous mode [ 95.448370][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.455894][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.464507][ T5626] bridge_slave_0: entered allmulticast mode [ 95.472328][ T5626] bridge_slave_0: entered promiscuous mode [ 95.498293][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.505725][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.513022][ T5628] bridge_slave_1: entered allmulticast mode [ 95.521566][ T5628] bridge_slave_1: entered promiscuous mode [ 95.529012][ T4945] Bluetooth: hci3: command tx timeout [ 95.535966][ T4945] Bluetooth: hci0: command tx timeout [ 95.537436][ T50] Bluetooth: hci2: command tx timeout [ 95.542428][ T5635] Bluetooth: hci1: command tx timeout [ 95.560938][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.568718][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.576101][ T5626] bridge_slave_1: entered allmulticast mode [ 95.583527][ T5626] bridge_slave_1: entered promiscuous mode [ 95.659333][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.668114][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.694150][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.716944][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.724264][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.731880][ T5627] bridge_slave_0: entered allmulticast mode [ 95.740660][ T5627] bridge_slave_0: entered promiscuous mode [ 95.760122][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.767309][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.793341][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.807284][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.816787][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.824866][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.832516][ T5627] bridge_slave_1: entered allmulticast mode [ 95.840295][ T5627] bridge_slave_1: entered promiscuous mode [ 95.865172][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.885675][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.922455][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.960108][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.972635][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.995001][ T5628] team0: Port device team_slave_0 added [ 96.026220][ T5626] team0: Port device team_slave_0 added [ 96.035542][ T5628] team0: Port device team_slave_1 added [ 96.085027][ T5626] team0: Port device team_slave_1 added [ 96.109560][ T5629] hsr_slave_0: entered promiscuous mode [ 96.117196][ T5629] hsr_slave_1: entered promiscuous mode [ 96.126067][ T5627] team0: Port device team_slave_0 added [ 96.156223][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.163280][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.189599][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.204029][ T5627] team0: Port device team_slave_1 added [ 96.210457][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.217685][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.243705][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.256892][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.263966][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.289999][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.313602][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.320677][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.346803][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.397221][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.404403][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.430441][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.466053][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.473281][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.499721][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.586618][ T5628] hsr_slave_0: entered promiscuous mode [ 96.593172][ T5628] hsr_slave_1: entered promiscuous mode [ 96.599932][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 96.606285][ T5628] Cannot create hsr debugfs directory [ 96.661078][ T5626] hsr_slave_0: entered promiscuous mode [ 96.667696][ T5626] hsr_slave_1: entered promiscuous mode [ 96.673928][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 96.680046][ T5626] Cannot create hsr debugfs directory [ 96.714156][ T5627] hsr_slave_0: entered promiscuous mode [ 96.720849][ T5627] hsr_slave_1: entered promiscuous mode [ 96.727582][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 96.733356][ T5627] Cannot create hsr debugfs directory [ 97.183478][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.204044][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.213130][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.227153][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.235153][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.246357][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.254877][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.265444][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.354837][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.370506][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.384472][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.397774][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.413217][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.424631][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.444826][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.457705][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.554277][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.564680][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.582850][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.593788][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.602978][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.609952][ T5635] Bluetooth: hci2: command tx timeout [ 97.615859][ T4945] Bluetooth: hci3: command tx timeout [ 97.616616][ T50] Bluetooth: hci1: command tx timeout [ 97.622560][ T5631] Bluetooth: hci0: command tx timeout [ 97.637715][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.653986][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.664639][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.759469][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.771498][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.789653][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.798564][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.809793][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.824994][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.837805][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.855472][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.867184][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.913117][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.948446][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.956249][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.991833][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.999010][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.048925][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.130876][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.153460][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.160650][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.200070][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.207391][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.244531][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.324993][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.357567][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.381494][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.388768][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.420043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.427315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.488484][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.521286][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.528520][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.554274][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.561633][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.314956][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.496269][ T5629] veth0_vlan: entered promiscuous mode [ 99.523845][ T5629] veth1_vlan: entered promiscuous mode [ 99.632604][ T5629] veth0_macvtap: entered promiscuous mode [ 99.646662][ T5629] veth1_macvtap: entered promiscuous mode [ 99.687438][ T4945] Bluetooth: hci1: command tx timeout [ 99.693587][ T5635] Bluetooth: hci3: command tx timeout [ 99.699243][ T5631] Bluetooth: hci2: command tx timeout [ 99.699270][ T50] Bluetooth: hci0: command tx timeout [ 99.712992][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.749200][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.763789][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.822233][ T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.837867][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.859671][ T3375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.887425][ T3375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.923250][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.964916][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.122033][ T5627] veth0_vlan: entered promiscuous mode [ 100.128445][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.143188][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.188194][ T5628] veth0_vlan: entered promiscuous mode [ 100.214308][ T5627] veth1_vlan: entered promiscuous mode [ 100.233702][ T3274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.243522][ T3274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.250922][ T5628] veth1_vlan: entered promiscuous mode [ 100.270949][ T5626] veth0_vlan: entered promiscuous mode [ 100.309735][ T5626] veth1_vlan: entered promiscuous mode [ 100.374040][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.387092][ T5627] veth0_macvtap: entered promiscuous mode [ 100.418896][ T5628] veth0_macvtap: entered promiscuous mode [ 100.435580][ T5627] veth1_macvtap: entered promiscuous mode [ 100.472451][ T5628] veth1_macvtap: entered promiscuous mode [ 100.520726][ T5626] veth0_macvtap: entered promiscuous mode [ 100.546631][ T5626] veth1_macvtap: entered promiscuous mode [ 100.558267][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.593293][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.626186][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.641366][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.650391][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.669605][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.683617][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.693110][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.723329][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.753893][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.788290][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.816731][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.829547][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.871880][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.890571][ T54] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.890658][ T54] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.890710][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.890762][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.078653][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.099745][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.147265][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.168393][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.248980][ T3375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.272001][ T3375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.340135][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.350694][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.425995][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.452563][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.523008][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.553433][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.620127][ T5788] input: f as /devices/virtual/input/input5 [ 101.764866][ T5790] Zero length message leads to an empty skb [ 101.767785][ T50] Bluetooth: hci0: command tx timeout [ 101.774557][ T5635] Bluetooth: hci3: command tx timeout [ 101.776410][ T50] Bluetooth: hci2: command tx timeout [ 101.776443][ T50] Bluetooth: hci1: command tx timeout [ 102.347140][ T5799] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.364892][ T5808] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.099880][ T5815] bridge0: port 3(veth1) entered blocking state [ 103.115356][ T5815] bridge0: port 3(veth1) entered disabled state [ 103.128913][ T5815] veth1: entered allmulticast mode [ 103.144607][ T5815] veth1: entered promiscuous mode [ 103.156641][ T5815] bridge0: port 3(veth1) entered blocking state [ 103.164146][ T5815] bridge0: port 3(veth1) entered forwarding state [ 103.857791][ T5833] input: f as /devices/virtual/input/input6 [ 105.062912][ T5855] __vm_enough_memory: pid: 5855, comm: syz.2.17, bytes: 4398046457856 not enough memory for the allocation [ 105.471059][ T5863] input: f as /devices/virtual/input/input7 [ 106.509814][ T5875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 106.662469][ T5875] hsr_slave_0 (unregistering): left promiscuous mode [ 107.051703][ T5883] input: f as /devices/virtual/input/input8 [ 108.448131][ T5910] input: f as /devices/virtual/input/input9 [ 108.887051][ T5918] binder: binder_mmap: 5916 0-811000 bad vm_flags failed -1 [ 110.942421][ T5965] input: f as /devices/virtual/input/input10 [ 112.324074][ T5985] deleting an unspecified loop device is not supported. [ 113.418757][ T6010] input: f as /devices/virtual/input/input11 [ 114.331747][ T5996] Process accounting resumed [ 115.182061][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.192510][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.200968][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.214038][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.223493][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.232200][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.241784][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.282207][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.291503][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.316654][ T6028] futex_wake_op: syz.1.58 tries to shift op by -2048; fix this program [ 115.412889][ T6043] netlink: 'syz.3.62': attribute type 22 has an invalid length. [ 115.423198][ T6043] netlink: 330 bytes leftover after parsing attributes in process `syz.3.62'. [ 115.622735][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 115.652411][ T6046] macvlan0: entered promiscuous mode [ 115.697727][ T6046] macvlan0: entered allmulticast mode [ 115.720845][ T6046] veth1_vlan: entered allmulticast mode [ 116.043070][ T6050] zram0: detected capacity change from 0 to 16 [ 117.073679][ T6086] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.108206][ T6082] random: crng reseeded on system resumption [ 117.330096][ T6091] netlink: 'syz.1.78': attribute type 22 has an invalid length. [ 117.345716][ T6091] netlink: 330 bytes leftover after parsing attributes in process `syz.1.78'. [ 117.590906][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 117.621985][ T6095] macvlan0: entered promiscuous mode [ 117.639503][ T6095] macvlan0: entered allmulticast mode [ 117.648857][ T6095] veth1_vlan: entered allmulticast mode [ 118.545908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 118.614379][ T6125] sg_write: data in/out 262108/4 bytes for SCSI command 0x7f-- guessing data in; [ 118.614379][ T6125] program syz.3.87 not setting count and/or reply_len properly [ 118.710263][ T6125] netlink: 322 bytes leftover after parsing attributes in process `syz.3.87'. [ 119.603341][ T6148] random: crng reseeded on system resumption [ 120.500565][ T6158] smpboot: CPU 1 is now offline [ 122.801489][ T6204] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.260195][ T6215] input: f as /devices/virtual/input/input12 [ 125.595390][ T6238] FAULT_INJECTION: forcing a failure. [ 125.595390][ T6238] name fail_futex, interval 1, probability 0, space 0, times 1 [ 125.667476][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 125.667506][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.667526][ T6238] Call Trace: [ 125.667534][ T6238] [ 125.667542][ T6238] dump_stack_lvl+0x100/0x190 [ 125.667571][ T6238] should_fail_ex.cold+0x5/0xa [ 125.667598][ T6238] get_futex_key+0xf78/0x1510 [ 125.667624][ T6238] ? __pfx_get_futex_key+0x10/0x10 [ 125.667644][ T6238] ? lock_acquire+0x1b1/0x370 [ 125.667673][ T6238] futex_wake+0xea/0x530 [ 125.667704][ T6238] ? __pfx_futex_wake+0x10/0x10 [ 125.667733][ T6238] ? exit_mm_release+0x19/0x30 [ 125.667773][ T6238] do_futex+0x32b/0x350 [ 125.667797][ T6238] ? __pfx_do_futex+0x10/0x10 [ 125.667819][ T6238] ? __might_fault+0xc5/0x140 [ 125.667861][ T6238] mm_release+0x24a/0x2f0 [ 125.667889][ T6238] do_exit+0x707/0x2a60 [ 125.667928][ T6238] ? __pfx_do_exit+0x10/0x10 [ 125.667961][ T6238] ? do_raw_spin_lock+0x128/0x260 [ 125.667986][ T6238] ? find_held_lock+0x2b/0x80 [ 125.668014][ T6238] ? get_signal+0x7e0/0x21e0 [ 125.668067][ T6238] do_group_exit+0xd5/0x2a0 [ 125.668091][ T6238] get_signal+0x1ec7/0x21e0 [ 125.668131][ T6238] ? __pfx_get_signal+0x10/0x10 [ 125.668163][ T6238] ? do_futex+0x192/0x350 [ 125.668190][ T6238] arch_do_signal_or_restart+0x91/0x7a0 [ 125.668228][ T6238] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 125.668273][ T6238] ? rcu_is_watching+0x12/0xc0 [ 125.668305][ T6238] exit_to_user_mode_loop+0x8b/0x4f0 [ 125.668327][ T6238] ? rcu_is_watching+0x12/0xc0 [ 125.668358][ T6238] do_syscall_64+0x6f2/0xf80 [ 125.668398][ T6238] ? clear_bhb_loop+0x40/0x90 [ 125.668426][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.668448][ T6238] RIP: 0033:0x7fa49d39ce59 [ 125.668471][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.668493][ T6238] RSP: 002b:00007fa49e2670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.668514][ T6238] RAX: fffffffffffffe00 RBX: 00007fa49d615fa8 RCX: 00007fa49d39ce59 [ 125.668529][ T6238] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa49d615fa8 [ 125.668543][ T6238] RBP: 00007fa49d615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.668556][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.668569][ T6238] R13: 00007fa49d616038 R14: 00007ffc47672a30 R15: 00007ffc47672b18 [ 125.668598][ T6238] [ 127.351165][ T6268] FAULT_INJECTION: forcing a failure. [ 127.351165][ T6268] name failslab, interval 1, probability 0, space 0, times 1 [ 127.374016][ T6254] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.551645][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT(full) [ 127.551679][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.551693][ T6268] Call Trace: [ 127.551700][ T6268] [ 127.551709][ T6268] dump_stack_lvl+0x100/0x190 [ 127.551739][ T6268] should_fail_ex.cold+0x5/0xa [ 127.551768][ T6268] should_failslab+0xc2/0x120 [ 127.551795][ T6268] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 127.551832][ T6268] ? security_inode_alloc+0x3b/0x2c0 [ 127.551870][ T6268] ? lockdep_init_map_type+0x5c/0x250 [ 127.551897][ T6268] security_inode_alloc+0x3b/0x2c0 [ 127.551936][ T6268] inode_init_always_gfp+0xcc0/0x1000 [ 127.551970][ T6268] alloc_inode+0x8e/0x250 [ 127.552007][ T6268] new_inode+0x22/0x1c0 [ 127.552045][ T6268] __debugfs_create_file+0x105/0x4f0 [ 127.552086][ T6268] debugfs_create_file_full+0x41/0x60 [ 127.552126][ T6268] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 127.552156][ T6268] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 127.552184][ T6268] ? ida_alloc_range+0x70d/0x830 [ 127.552250][ T6268] ? lockdep_init_map_type+0x5c/0x250 [ 127.552278][ T6268] preinit_net.part.0+0x252/0x920 [ 127.552308][ T6268] copy_net_ns+0x339/0x7c0 [ 127.552340][ T6268] create_new_namespaces+0x3ea/0xac0 [ 127.552378][ T6268] unshare_nsproxy_namespaces+0xf2/0x220 [ 127.552411][ T6268] ksys_unshare+0x438/0xab0 [ 127.552448][ T6268] ? __pfx_ksys_unshare+0x10/0x10 [ 127.552481][ T6268] ? xfd_validate_state+0x129/0x190 [ 127.552514][ T6268] __x64_sys_unshare+0x31/0x40 [ 127.552551][ T6268] do_syscall_64+0x10b/0xf80 [ 127.552584][ T6268] ? clear_bhb_loop+0x40/0x90 [ 127.552611][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.552634][ T6268] RIP: 0033:0x7f16a9b9ce59 [ 127.552652][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.552673][ T6268] RSP: 002b:00007f16aaa1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 127.552694][ T6268] RAX: ffffffffffffffda RBX: 00007f16a9e16180 RCX: 00007f16a9b9ce59 [ 127.552708][ T6268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 127.552721][ T6268] RBP: 00007f16a9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 127.552735][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.552748][ T6268] R13: 00007f16a9e16218 R14: 00007f16a9e16180 R15: 00007fffb7b82bc8 [ 127.552777][ T6268] [ 127.552828][ T6268] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888020fa5000' [ 128.458102][ T6285] Line length is too long: Should be less than 4094 [ 128.506323][ T6285] Line length is too long: Should be less than 4094 [ 133.056102][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.065073][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.239150][ T6348] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.386946][ T5635] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 136.600973][ T6357] syz.1.134 (6357) used greatest stack depth: 19720 bytes left [ 137.036000][ T6375] netlink: 342 bytes leftover after parsing attributes in process `syz.1.137'. [ 137.160783][ T6378] FAULT_INJECTION: forcing a failure. [ 137.160783][ T6378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.267810][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT(full) [ 137.267843][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.267858][ T6378] Call Trace: [ 137.267865][ T6378] [ 137.267874][ T6378] dump_stack_lvl+0x100/0x190 [ 137.267906][ T6378] should_fail_ex.cold+0x5/0xa [ 137.267931][ T6378] ? prepare_alloc_pages+0x16d/0x5f0 [ 137.267964][ T6378] should_fail_alloc_page+0xeb/0x140 [ 137.267995][ T6378] prepare_alloc_pages+0x1f0/0x5f0 [ 137.268030][ T6378] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 137.268074][ T6378] ? lru_gen_add_folio+0x20f/0x13d0 [ 137.268109][ T6378] ? folios_put_refs+0x716/0xa90 [ 137.268136][ T6378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.268182][ T6378] ? __lock_acquire+0x4a5/0x2630 [ 137.268205][ T6378] ? __lock_acquire+0x4a5/0x2630 [ 137.268227][ T6378] ? css_rstat_updated+0x1ce/0x5a0 [ 137.268274][ T6378] ? lock_acquire+0x1b1/0x370 [ 137.268296][ T6378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.268334][ T6378] ? policy_nodemask+0xed/0x4f0 [ 137.268364][ T6378] alloc_pages_mpol+0x1fb/0x540 [ 137.268393][ T6378] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.268431][ T6378] ? __lock_acquire+0x4a5/0x2630 [ 137.268456][ T6378] folio_alloc_mpol_noprof+0x36/0x260 [ 137.268491][ T6378] vma_alloc_folio_noprof+0xed/0x1d0 [ 137.268524][ T6378] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 137.268567][ T6378] do_anonymous_page+0xb46/0x2050 [ 137.268604][ T6378] ? rcu_read_unlock+0x2d/0xb0 [ 137.268649][ T6378] __handle_mm_fault+0x1d2c/0x2a00 [ 137.268689][ T6378] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.268721][ T6378] ? __pfx___handle_mm_fault+0x10/0x10 [ 137.268759][ T6378] ? pte_offset_map_lock+0x174/0x320 [ 137.268787][ T6378] ? find_held_lock+0x2b/0x80 [ 137.268827][ T6378] ? follow_page_pte+0x4d0/0x13f0 [ 137.268862][ T6378] handle_mm_fault+0x36d/0xa20 [ 137.268904][ T6378] __get_user_pages+0x1178/0x32a0 [ 137.268945][ T6378] ? __pfx___get_user_pages+0x10/0x10 [ 137.268983][ T6378] populate_vma_page_range+0x267/0x3f0 [ 137.269017][ T6378] ? __pfx_populate_vma_page_range+0x10/0x10 [ 137.269057][ T6378] ? __pfx_find_vma_intersection+0x10/0x10 [ 137.269088][ T6378] ? do_mmap+0x93f/0x12f0 [ 137.269120][ T6378] __mm_populate+0x107/0x3a0 [ 137.269152][ T6378] ? __pfx___mm_populate+0x10/0x10 [ 137.269186][ T6378] ? up_write+0x28c/0x4f0 [ 137.269216][ T6378] vm_mmap_pgoff+0x37f/0x470 [ 137.269253][ T6378] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 137.269286][ T6378] ? do_futex+0x192/0x350 [ 137.269312][ T6378] ? __pfx_do_futex+0x10/0x10 [ 137.269338][ T6378] ? snd_pcm_oss_ioctl+0x2b6/0x37c0 [ 137.269379][ T6378] ksys_mmap_pgoff+0xe4/0x610 [ 137.269414][ T6378] ? __x64_sys_futex+0x358/0x4d0 [ 137.269441][ T6378] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 137.269470][ T6378] ? xfd_validate_state+0x129/0x190 [ 137.269501][ T6378] __x64_sys_mmap+0x125/0x190 [ 137.269531][ T6378] do_syscall_64+0x10b/0xf80 [ 137.269567][ T6378] ? clear_bhb_loop+0x40/0x90 [ 137.269596][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.269620][ T6378] RIP: 0033:0x7f16a9b9ce59 [ 137.269639][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.269662][ T6378] RSP: 002b:00007f16aaa5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 137.269684][ T6378] RAX: ffffffffffffffda RBX: 00007f16a9e15fa0 RCX: 00007f16a9b9ce59 [ 137.269700][ T6378] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 137.269714][ T6378] RBP: 00007f16a9c32d6f R08: 000000000000000c R09: 0000000800008000 [ 137.269729][ T6378] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 137.269743][ T6378] R13: 00007f16a9e16038 R14: 00007f16a9e15fa0 R15: 00007fffb7b82bc8 [ 137.269773][ T6378] [ 137.801249][ T6380] futex_atomic_op_inuser: 23 callbacks suppressed [ 137.801267][ T6380] futex_wake_op: syz.2.138 tries to shift op by -2048; fix this program [ 137.817364][ T6380] 0x000000000001-0x000000020000 : "" [ 138.241148][ T6380] ftl_cs: FTL header corrupt! [ 138.847167][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.924738][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.968522][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.034601][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.065588][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.206308][ T50] Bluetooth: hci4: command tx timeout [ 142.625320][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.657307][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.690335][ T6390] bridge_slave_0: entered allmulticast mode [ 142.726954][ T6390] bridge_slave_0: entered promiscuous mode [ 142.757528][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.815114][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.859710][ T6390] bridge_slave_1: entered allmulticast mode [ 142.902844][ T6390] bridge_slave_1: entered promiscuous mode [ 142.929689][ T6431] input: f as /devices/virtual/input/input13 [ 142.952525][ T6433] Line length is too long: Should be less than 4094 [ 143.005483][ T6433] Line length is too long: Should be less than 4094 [ 143.179151][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.234905][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.287275][ T50] Bluetooth: hci4: command tx timeout [ 143.903970][ T6390] team0: Port device team_slave_0 added [ 143.972720][ T6390] team0: Port device team_slave_1 added [ 144.129155][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 144.289447][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.313229][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.433500][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.574930][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.600371][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.686983][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.056920][ T6390] hsr_slave_0: entered promiscuous mode [ 145.104568][ T6390] hsr_slave_1: entered promiscuous mode [ 145.134422][ T6390] debugfs: 'hsr0' already exists in 'hsr' [ 145.168294][ T6390] Cannot create hsr debugfs directory [ 145.368327][ T50] Bluetooth: hci4: command tx timeout [ 145.942804][ T6467] FAULT_INJECTION: forcing a failure. [ 145.942804][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.021393][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.2.158 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.021427][ T6467] Tainted: [L]=SOFTLOCKUP [ 146.021435][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.021448][ T6467] Call Trace: [ 146.021455][ T6467] [ 146.021462][ T6467] dump_stack_lvl+0x100/0x190 [ 146.021492][ T6467] should_fail_ex.cold+0x5/0xa [ 146.021519][ T6467] _copy_from_user+0x2e/0xd0 [ 146.021553][ T6467] do_pagemap_scan+0xc4/0xcd0 [ 146.021579][ T6467] ? __pfx_do_pagemap_scan+0x10/0x10 [ 146.021607][ T6467] ? do_vfs_ioctl+0x226/0x13e0 [ 146.021629][ T6467] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 146.021667][ T6467] ? __fget_files+0x21f/0x3d0 [ 146.021698][ T6467] do_pagemap_cmd+0x58/0x80 [ 146.021717][ T6467] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 146.021738][ T6467] __x64_sys_ioctl+0x18e/0x210 [ 146.021764][ T6467] do_syscall_64+0x10b/0xf80 [ 146.021796][ T6467] ? clear_bhb_loop+0x40/0x90 [ 146.021823][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.021846][ T6467] RIP: 0033:0x7f16a9b9ce59 [ 146.021863][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.021883][ T6467] RSP: 002b:00007f16aaa5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.021903][ T6467] RAX: ffffffffffffffda RBX: 00007f16a9e15fa0 RCX: 00007f16a9b9ce59 [ 146.021917][ T6467] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000004 [ 146.021930][ T6467] RBP: 00007f16aaa5c090 R08: 0000000000000000 R09: 0000000000000000 [ 146.021943][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.021956][ T6467] R13: 00007f16a9e16038 R14: 00007f16a9e15fa0 R15: 00007fffb7b82bc8 [ 146.021983][ T6467] [ 146.447811][ T5635] Bluetooth: hci2: command 0x2016 tx timeout [ 147.425321][ T6484] netlink: 342 bytes leftover after parsing attributes in process `syz.3.161'. [ 147.446192][ T50] Bluetooth: hci4: command tx timeout [ 147.813215][ T6390] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.883360][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.924689][ T6390] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.997908][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.038274][ T6390] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.098709][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.148576][ T6390] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.227698][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.497756][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 148.538671][ T6496] input: f as /devices/virtual/input/input14 [ 148.574185][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 148.823342][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.883851][ T6213] Process accounting paused [ 149.345238][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.449584][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.456822][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.614918][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.622149][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.940399][ T5635] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 151.022566][ T1038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.651702][ T1038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.006329][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 152.019587][ T1038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.477365][ T1038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.502289][ T6554] input: f as /devices/virtual/input/input15 [ 153.339439][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.508359][ T6569] FAULT_INJECTION: forcing a failure. [ 153.508359][ T6569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.572716][ T1038] bridge_slave_1: left allmulticast mode [ 153.604201][ T1038] bridge_slave_1: left promiscuous mode [ 153.619566][ T6569] CPU: 0 UID: 0 PID: 6569 Comm: syz.2.170 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.619602][ T6569] Tainted: [L]=SOFTLOCKUP [ 153.619609][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.619623][ T6569] Call Trace: [ 153.619630][ T6569] [ 153.619638][ T6569] dump_stack_lvl+0x100/0x190 [ 153.619668][ T6569] should_fail_ex.cold+0x5/0xa [ 153.619697][ T6569] _copy_from_user+0x2e/0xd0 [ 153.619721][ T6569] do_pagemap_scan+0xc4/0xcd0 [ 153.619748][ T6569] ? __pfx_do_pagemap_scan+0x10/0x10 [ 153.619770][ T6569] ? do_vfs_ioctl+0x226/0x13e0 [ 153.619793][ T6569] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 153.619832][ T6569] ? __fget_files+0x21f/0x3d0 [ 153.619865][ T6569] do_pagemap_cmd+0x58/0x80 [ 153.619885][ T6569] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 153.619906][ T6569] __x64_sys_ioctl+0x18e/0x210 [ 153.619931][ T6569] do_syscall_64+0x10b/0xf80 [ 153.619965][ T6569] ? clear_bhb_loop+0x40/0x90 [ 153.619993][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.620022][ T6569] RIP: 0033:0x7f16a9b9ce59 [ 153.620040][ T6569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.620062][ T6569] RSP: 002b:00007f16aaa5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.620083][ T6569] RAX: ffffffffffffffda RBX: 00007f16a9e15fa0 RCX: 00007f16a9b9ce59 [ 153.620098][ T6569] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000004 [ 153.620112][ T6569] RBP: 00007f16aaa5c090 R08: 0000000000000000 R09: 0000000000000000 [ 153.620126][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.620139][ T6569] R13: 00007f16a9e16038 R14: 00007f16a9e15fa0 R15: 00007fffb7b82bc8 [ 153.620168][ T6569] [ 153.845073][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.999862][ T1038] bridge_slave_0: left allmulticast mode [ 154.069715][ T1038] bridge_slave_0: left promiscuous mode [ 154.094627][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 154.104670][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.416768][ T6580] process 'syz.3.171' launched ':,' with NULL argv: empty string added [ 154.586934][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.614588][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.641249][ T1038] bond0 (unregistering): Released all slaves [ 155.915380][ T1038] hsr_slave_1: left promiscuous mode [ 155.946611][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.992121][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.037921][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.073747][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.215054][ T1038] veth1_macvtap: left promiscuous mode [ 156.256244][ T1038] veth0_macvtap: left promiscuous mode [ 156.290259][ T1038] veth1_vlan: left promiscuous mode [ 156.322583][ T1038] veth0_vlan: left promiscuous mode [ 157.827176][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 157.881423][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 158.494290][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 158.631545][ T6621] netlink: 252 bytes leftover after parsing attributes in process `syz.3.179'. [ 158.691295][ T6390] veth0_vlan: entered promiscuous mode [ 158.705004][ T6621] netlink: 252 bytes leftover after parsing attributes in process `syz.3.179'. [ 158.768120][ T6390] veth1_vlan: entered promiscuous mode [ 158.933198][ T6390] veth0_macvtap: entered promiscuous mode [ 159.008477][ T6390] veth1_macvtap: entered promiscuous mode [ 159.144818][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.232752][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.340750][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.379983][ T6629] FAULT_INJECTION: forcing a failure. [ 159.379983][ T6629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.403337][ T1038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.453483][ T1038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.466388][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.1.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.466428][ T6629] Tainted: [L]=SOFTLOCKUP [ 159.466436][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.466449][ T6629] Call Trace: [ 159.466456][ T6629] [ 159.466464][ T6629] dump_stack_lvl+0x100/0x190 [ 159.466494][ T6629] should_fail_ex.cold+0x5/0xa [ 159.466524][ T6629] _copy_to_user+0x32/0xd0 [ 159.466549][ T6629] simple_read_from_buffer+0xcb/0x170 [ 159.466579][ T6629] proc_fail_nth_read+0x1af/0x230 [ 159.466617][ T6629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.466656][ T6629] ? rw_verify_area+0xce/0x6d0 [ 159.466679][ T6629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.466715][ T6629] vfs_read+0x1e4/0xb30 [ 159.466745][ T6629] ? __pfx_vfs_read+0x10/0x10 [ 159.466770][ T6629] ? __fget_files+0x215/0x3d0 [ 159.466810][ T6629] ? __fget_files+0x21f/0x3d0 [ 159.466845][ T6629] ksys_read+0x12a/0x250 [ 159.466870][ T6629] ? __pfx_ksys_read+0x10/0x10 [ 159.466898][ T6629] ? rcu_is_watching+0x12/0xc0 [ 159.466930][ T6629] do_syscall_64+0x10b/0xf80 [ 159.466963][ T6629] ? clear_bhb_loop+0x40/0x90 [ 159.466991][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.467014][ T6629] RIP: 0033:0x7f9271b5d68e [ 159.467031][ T6629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.467052][ T6629] RSP: 002b:00007f9272a78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.467073][ T6629] RAX: ffffffffffffffda RBX: 00007f9272a796c0 RCX: 00007f9271b5d68e [ 159.467088][ T6629] RDX: 000000000000000f RSI: 00007f9272a790a0 RDI: 0000000000000005 [ 159.467101][ T6629] RBP: 00007f9272a79090 R08: 0000000000000000 R09: 0000000000000000 [ 159.467114][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.467127][ T6629] R13: 00007f9271e16038 R14: 00007f9271e15fa0 R15: 00007ffc8fdb47a8 [ 159.467156][ T6629] [ 159.822338][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.504776][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.549427][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.595832][ T6647] random: crng reseeded on system resumption [ 160.851707][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.875737][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.133547][ T6654] input: f as /devices/virtual/input/input16 [ 161.379508][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 162.961071][ T6689] udc dummy_udc.0: soft-connect without a gadget driver [ 163.188730][ T6694] syz.3.192 uses obsolete (PF_INET,SOCK_PACKET) [ 163.990207][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.974019][ T6723] FAULT_INJECTION: forcing a failure. [ 164.974019][ T6723] name fail_futex, interval 1, probability 0, space 0, times 0 [ 165.092978][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.4.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.093010][ T6723] Tainted: [L]=SOFTLOCKUP [ 165.093017][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.093028][ T6723] Call Trace: [ 165.093035][ T6723] [ 165.093042][ T6723] dump_stack_lvl+0x100/0x190 [ 165.093070][ T6723] should_fail_ex.cold+0x5/0xa [ 165.093096][ T6723] get_futex_key+0xf78/0x1510 [ 165.093120][ T6723] ? __pfx_get_futex_key+0x10/0x10 [ 165.093140][ T6723] ? lock_acquire+0x1b1/0x370 [ 165.093167][ T6723] futex_wake+0xea/0x530 [ 165.093197][ T6723] ? __pfx_futex_wake+0x10/0x10 [ 165.093223][ T6723] ? exit_mm_release+0x19/0x30 [ 165.093261][ T6723] do_futex+0x32b/0x350 [ 165.093284][ T6723] ? __pfx_do_futex+0x10/0x10 [ 165.093305][ T6723] ? __might_fault+0xc5/0x140 [ 165.093344][ T6723] mm_release+0x24a/0x2f0 [ 165.093371][ T6723] do_exit+0x707/0x2a60 [ 165.093406][ T6723] ? __pfx_do_exit+0x10/0x10 [ 165.093438][ T6723] ? do_raw_spin_lock+0x128/0x260 [ 165.093462][ T6723] ? find_held_lock+0x2b/0x80 [ 165.093488][ T6723] ? get_signal+0x7e0/0x21e0 [ 165.093518][ T6723] do_group_exit+0xd5/0x2a0 [ 165.093538][ T6723] get_signal+0x1ec7/0x21e0 [ 165.093574][ T6723] ? __pfx_get_signal+0x10/0x10 [ 165.093603][ T6723] ? do_futex+0x192/0x350 [ 165.093627][ T6723] arch_do_signal_or_restart+0x91/0x7a0 [ 165.093681][ T6723] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 165.093725][ T6723] ? rcu_is_watching+0x12/0xc0 [ 165.093755][ T6723] exit_to_user_mode_loop+0x8b/0x4f0 [ 165.093776][ T6723] ? rcu_is_watching+0x12/0xc0 [ 165.093805][ T6723] do_syscall_64+0x6f2/0xf80 [ 165.093837][ T6723] ? clear_bhb_loop+0x40/0x90 [ 165.093863][ T6723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.093885][ T6723] RIP: 0033:0x7f0782d9ce59 [ 165.093934][ T6723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.093956][ T6723] RSP: 002b:00007f0780fd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.093976][ T6723] RAX: fffffffffffffe00 RBX: 00007f0783016278 RCX: 00007f0782d9ce59 [ 165.093991][ T6723] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0783016278 [ 165.094004][ T6723] RBP: 00007f0783016270 R08: 0000000000000000 R09: 0000000000000000 [ 165.094020][ T6723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.094033][ T6723] R13: 00007f0783016308 R14: 00007fff9b6efa40 R15: 00007fff9b6efb28 [ 165.094061][ T6723] [ 165.927932][ T6738] FAULT_INJECTION: forcing a failure. [ 165.927932][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 166.112705][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.2.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.112743][ T6738] Tainted: [L]=SOFTLOCKUP [ 166.112752][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.112766][ T6738] Call Trace: [ 166.112773][ T6738] [ 166.112782][ T6738] dump_stack_lvl+0x100/0x190 [ 166.112813][ T6738] should_fail_ex.cold+0x5/0xa [ 166.112844][ T6738] should_failslab+0xc2/0x120 [ 166.112877][ T6738] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 166.112918][ T6738] ? __d_alloc+0x34/0xa40 [ 166.112956][ T6738] __d_alloc+0x34/0xa40 [ 166.113005][ T6738] d_alloc+0x4a/0x1e0 [ 166.113038][ T6738] lookup_one_qstr_excl+0x171/0x250 [ 166.113077][ T6738] start_dirop+0x59/0xb0 [ 166.113104][ T6738] simple_start_creating+0xf9/0x110 [ 166.113132][ T6738] ? __pfx_simple_start_creating+0x10/0x10 [ 166.113160][ T6738] ? mntput+0x70/0xa0 [ 166.113184][ T6738] ? simple_pin_fs+0xa3/0x190 [ 166.113209][ T6738] debugfs_start_creating.part.0+0x82/0x170 [ 166.113247][ T6738] __debugfs_create_file+0xb3/0x4f0 [ 166.113287][ T6738] debugfs_create_file_full+0x41/0x60 [ 166.113326][ T6738] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 166.113356][ T6738] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 166.113384][ T6738] ? ida_alloc_range+0x70d/0x830 [ 166.113442][ T6738] ? lockdep_init_map_type+0x5c/0x250 [ 166.113471][ T6738] preinit_net.part.0+0x252/0x920 [ 166.113501][ T6738] copy_net_ns+0x339/0x7c0 [ 166.113533][ T6738] create_new_namespaces+0x3ea/0xac0 [ 166.113580][ T6738] unshare_nsproxy_namespaces+0xf2/0x220 [ 166.113612][ T6738] ksys_unshare+0x438/0xab0 [ 166.113646][ T6738] ? __pfx_ksys_unshare+0x10/0x10 [ 166.113677][ T6738] ? xfd_validate_state+0x129/0x190 [ 166.113699][ T6738] ? ksys_write+0x1ac/0x250 [ 166.113749][ T6738] __x64_sys_unshare+0x31/0x40 [ 166.113784][ T6738] do_syscall_64+0x10b/0xf80 [ 166.113817][ T6738] ? clear_bhb_loop+0x40/0x90 [ 166.113845][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.113875][ T6738] RIP: 0033:0x7f16a9b9ce59 [ 166.113893][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.113915][ T6738] RSP: 002b:00007f16aaa3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 166.113937][ T6738] RAX: ffffffffffffffda RBX: 00007f16a9e16090 RCX: 00007f16a9b9ce59 [ 166.113952][ T6738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 166.113965][ T6738] RBP: 00007f16a9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 166.113979][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.113992][ T6738] R13: 00007f16a9e16128 R14: 00007f16a9e16090 R15: 00007fffb7b82bc8 [ 166.114021][ T6738] [ 167.719417][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 169.743986][ T5635] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 171.458741][ T6815] input: f as /devices/virtual/input/input17 [ 172.492177][ T6824] FAULT_INJECTION: forcing a failure. [ 172.492177][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 172.601163][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.1.214 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.601198][ T6824] Tainted: [L]=SOFTLOCKUP [ 172.601206][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.601218][ T6824] Call Trace: [ 172.601225][ T6824] [ 172.601233][ T6824] dump_stack_lvl+0x100/0x190 [ 172.601263][ T6824] should_fail_ex.cold+0x5/0xa [ 172.601302][ T6824] ? tomoyo_realpath_from_path+0xb6/0x690 [ 172.601331][ T6824] should_failslab+0xc2/0x120 [ 172.601357][ T6824] __kmalloc_noprof+0xe0/0x850 [ 172.601377][ T6824] ? kfree+0x1dd/0x6c0 [ 172.601413][ T6824] tomoyo_realpath_from_path+0xb6/0x690 [ 172.601448][ T6824] tomoyo_check_open_permission+0x2af/0x3c0 [ 172.601473][ T6824] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 172.601508][ T6824] ? hook_file_open+0x24e/0x7a0 [ 172.601551][ T6824] ? path_get+0x61/0x80 [ 172.601587][ T6824] tomoyo_file_open+0x6b/0x90 [ 172.601620][ T6824] security_file_open+0xb5/0x1e0 [ 172.601648][ T6824] do_dentry_open+0x5aa/0x1660 [ 172.601677][ T6824] ? security_inode_permission+0xbf/0x250 [ 172.601706][ T6824] vfs_open+0x82/0x3f0 [ 172.601742][ T6824] path_openat+0x208c/0x31a0 [ 172.601779][ T6824] ? __pfx_path_openat+0x10/0x10 [ 172.601818][ T6824] do_file_open+0x20e/0x430 [ 172.601848][ T6824] ? __pfx_do_file_open+0x10/0x10 [ 172.601901][ T6824] ? alloc_fd+0x476/0x790 [ 172.601950][ T6824] ? do_getname+0x191/0x390 [ 172.601986][ T6824] do_sys_openat2+0x10d/0x1e0 [ 172.602022][ T6824] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.602069][ T6824] __x64_sys_openat+0x12d/0x210 [ 172.602105][ T6824] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.602140][ T6824] ? ksys_write+0x1ac/0x250 [ 172.602170][ T6824] ? rcu_is_watching+0x12/0xc0 [ 172.602203][ T6824] do_syscall_64+0x10b/0xf80 [ 172.602237][ T6824] ? clear_bhb_loop+0x40/0x90 [ 172.602264][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.602293][ T6824] RIP: 0033:0x7f9271b9ce59 [ 172.602311][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.602333][ T6824] RSP: 002b:00007f9272a58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.602354][ T6824] RAX: ffffffffffffffda RBX: 00007f9271e16090 RCX: 00007f9271b9ce59 [ 172.602369][ T6824] RDX: 0000000000048300 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 172.602383][ T6824] RBP: 00007f9271c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 172.602396][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.602409][ T6824] R13: 00007f9271e16128 R14: 00007f9271e16090 R15: 00007ffc8fdb47a8 [ 172.602438][ T6824] [ 172.905451][ T6824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.732186][ T6873] FAULT_INJECTION: forcing a failure. [ 175.732186][ T6873] name fail_futex, interval 1, probability 0, space 0, times 0 [ 175.840384][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.1.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.840420][ T6873] Tainted: [L]=SOFTLOCKUP [ 175.840428][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.840441][ T6873] Call Trace: [ 175.840448][ T6873] [ 175.840456][ T6873] dump_stack_lvl+0x100/0x190 [ 175.840485][ T6873] should_fail_ex.cold+0x5/0xa [ 175.840514][ T6873] get_futex_key+0xf78/0x1510 [ 175.840540][ T6873] ? __pfx_get_futex_key+0x10/0x10 [ 175.840562][ T6873] ? lock_acquire+0x1b1/0x370 [ 175.840592][ T6873] futex_wake+0xea/0x530 [ 175.840625][ T6873] ? __pfx_futex_wake+0x10/0x10 [ 175.840654][ T6873] ? exit_mm_release+0x19/0x30 [ 175.840696][ T6873] do_futex+0x32b/0x350 [ 175.840722][ T6873] ? __pfx_do_futex+0x10/0x10 [ 175.840745][ T6873] ? __might_fault+0xc5/0x140 [ 175.840788][ T6873] mm_release+0x24a/0x2f0 [ 175.840817][ T6873] do_exit+0x707/0x2a60 [ 175.840857][ T6873] ? __pfx_do_exit+0x10/0x10 [ 175.840893][ T6873] ? do_raw_spin_lock+0x128/0x260 [ 175.840919][ T6873] ? find_held_lock+0x2b/0x80 [ 175.840949][ T6873] ? get_signal+0x7e0/0x21e0 [ 175.840984][ T6873] do_group_exit+0xd5/0x2a0 [ 175.841007][ T6873] get_signal+0x1ec7/0x21e0 [ 175.841053][ T6873] ? __pfx_get_signal+0x10/0x10 [ 175.841086][ T6873] ? do_futex+0x192/0x350 [ 175.841113][ T6873] arch_do_signal_or_restart+0x91/0x7a0 [ 175.841150][ T6873] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 175.841196][ T6873] ? rcu_is_watching+0x12/0xc0 [ 175.841234][ T6873] exit_to_user_mode_loop+0x8b/0x4f0 [ 175.841255][ T6873] ? rcu_is_watching+0x12/0xc0 [ 175.841286][ T6873] do_syscall_64+0x6f2/0xf80 [ 175.841319][ T6873] ? clear_bhb_loop+0x40/0x90 [ 175.841347][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.841369][ T6873] RIP: 0033:0x7f9271b9ce59 [ 175.841387][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.841408][ T6873] RSP: 002b:00007f9272a790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.841429][ T6873] RAX: fffffffffffffe00 RBX: 00007f9271e15fa8 RCX: 00007f9271b9ce59 [ 175.841444][ T6873] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9271e15fa8 [ 175.841457][ T6873] RBP: 00007f9271e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 175.841470][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.841483][ T6873] R13: 00007f9271e16038 R14: 00007ffc8fdb46c0 R15: 00007ffc8fdb47a8 [ 175.841512][ T6873] [ 176.251061][ T6892] input: f as /devices/virtual/input/input18 [ 176.697379][ T5635] Bluetooth: hci2: unexpected event 0x10 length: 124 > 1 [ 176.698579][ T5635] Bluetooth: hci2: hardware error 0x00 [ 176.772440][ T6904] input: f as /devices/virtual/input/input19 [ 176.910591][ T6904] FAULT_INJECTION: forcing a failure. [ 176.910591][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 176.959337][ T6904] CPU: 0 UID: 0 PID: 6904 Comm: syz.4.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.959376][ T6904] Tainted: [L]=SOFTLOCKUP [ 176.959384][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.959397][ T6904] Call Trace: [ 176.959405][ T6904] [ 176.959413][ T6904] dump_stack_lvl+0x100/0x190 [ 176.959442][ T6904] should_fail_ex.cold+0x5/0xa [ 176.959471][ T6904] should_failslab+0xc2/0x120 [ 176.959499][ T6904] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 176.959523][ T6904] ? kasprintf+0xc7/0x100 [ 176.959552][ T6904] kvasprintf+0xbc/0x150 [ 176.959575][ T6904] ? __pfx_kvasprintf+0x10/0x10 [ 176.959597][ T6904] ? sysfs_remove_group+0xc6/0x1b0 [ 176.959624][ T6904] ? evdev_disconnect+0x40/0xb0 [ 176.959646][ T6904] ? __input_unregister_device+0x1f8/0x470 [ 176.959671][ T6904] ? input_unregister_device+0xc2/0x110 [ 176.959695][ T6904] ? uinput_destroy_device+0x236/0x2b0 [ 176.959729][ T6904] ? uinput_release+0x34/0x50 [ 176.959754][ T6904] ? __fput+0x3ff/0xb50 [ 176.959784][ T6904] ? task_work_run+0x150/0x240 [ 176.959806][ T6904] ? get_signal+0x1bd/0x21e0 [ 176.959839][ T6904] kasprintf+0xc7/0x100 [ 176.959869][ T6904] ? __pfx_kasprintf+0x10/0x10 [ 176.959904][ T6904] ? __pfx_input_devnode+0x10/0x10 [ 176.959936][ T6904] device_get_devnode+0x166/0x2c0 [ 176.959971][ T6904] devtmpfs_delete_node+0xc8/0x1d0 [ 176.960006][ T6904] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 176.960048][ T6904] ? kobject_put+0xb9/0x640 [ 176.960072][ T6904] ? __pfx_klist_children_put+0x10/0x10 [ 176.960113][ T6904] ? klist_children_put+0x49/0x60 [ 176.960147][ T6904] ? klist_put+0x10a/0x1d0 [ 176.960183][ T6904] device_del+0x717/0x9b0 [ 176.960210][ T6904] ? __pfx_device_del+0x10/0x10 [ 176.960241][ T6904] ? find_held_lock+0x2b/0x80 [ 176.960274][ T6904] cdev_device_del+0x1d/0x110 [ 176.960304][ T6904] evdev_disconnect+0x40/0xb0 [ 176.960327][ T6904] __input_unregister_device+0x1f8/0x470 [ 176.960356][ T6904] input_unregister_device+0xc2/0x110 [ 176.960382][ T6904] uinput_destroy_device+0x236/0x2b0 [ 176.960412][ T6904] ? __pfx_uinput_release+0x10/0x10 [ 176.960440][ T6904] uinput_release+0x34/0x50 [ 176.960466][ T6904] __fput+0x3ff/0xb50 [ 176.960504][ T6904] task_work_run+0x150/0x240 [ 176.960528][ T6904] ? __pfx_task_work_run+0x10/0x10 [ 176.960559][ T6904] get_signal+0x1bd/0x21e0 [ 176.960593][ T6904] ? task_work_add+0x201/0x3b0 [ 176.960616][ T6904] ? __pfx_task_work_add+0x10/0x10 [ 176.960638][ T6904] ? __pfx_get_signal+0x10/0x10 [ 176.960675][ T6904] arch_do_signal_or_restart+0x91/0x7a0 [ 176.960709][ T6904] ? __pfx___fput_deferred+0x10/0x10 [ 176.960742][ T6904] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 176.960787][ T6904] ? rcu_is_watching+0x12/0xc0 [ 176.960818][ T6904] exit_to_user_mode_loop+0x8b/0x4f0 [ 176.960840][ T6904] ? rcu_is_watching+0x12/0xc0 [ 176.960876][ T6904] do_syscall_64+0x6f2/0xf80 [ 176.960910][ T6904] ? clear_bhb_loop+0x40/0x90 [ 176.960938][ T6904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.960960][ T6904] RIP: 0033:0x7f0782d9ce59 [ 176.960979][ T6904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.961000][ T6904] RSP: 002b:00007f0783b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 176.961021][ T6904] RAX: fffffffffffffe00 RBX: 00007f0783015fa0 RCX: 00007f0782d9ce59 [ 176.961036][ T6904] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 176.961050][ T6904] RBP: 00007f0783b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.961063][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.961076][ T6904] R13: 00007f0783016038 R14: 00007f0783015fa0 R15: 00007fff9b6efb28 [ 176.961105][ T6904] [ 178.967127][ T5635] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 179.153492][ T6923] FAULT_INJECTION: forcing a failure. [ 179.153492][ T6923] name fail_futex, interval 1, probability 0, space 0, times 0 [ 179.206464][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.4.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.206500][ T6923] Tainted: [L]=SOFTLOCKUP [ 179.206508][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.206522][ T6923] Call Trace: [ 179.206529][ T6923] [ 179.206537][ T6923] dump_stack_lvl+0x100/0x190 [ 179.206567][ T6923] should_fail_ex.cold+0x5/0xa [ 179.206595][ T6923] get_futex_key+0x295/0x1510 [ 179.206622][ T6923] ? __pfx_get_futex_key+0x10/0x10 [ 179.206647][ T6923] ? lock_acquire+0x1b1/0x370 [ 179.206677][ T6923] futex_wake+0xea/0x530 [ 179.206716][ T6923] ? __pfx_futex_wake+0x10/0x10 [ 179.206745][ T6923] ? exit_mm_release+0x19/0x30 [ 179.206787][ T6923] do_futex+0x32b/0x350 [ 179.206813][ T6923] ? __pfx_do_futex+0x10/0x10 [ 179.206836][ T6923] ? __might_fault+0xc5/0x140 [ 179.206878][ T6923] mm_release+0x24a/0x2f0 [ 179.206908][ T6923] do_exit+0x707/0x2a60 [ 179.206947][ T6923] ? __pfx_do_exit+0x10/0x10 [ 179.206982][ T6923] ? do_raw_spin_lock+0x128/0x260 [ 179.207007][ T6923] ? find_held_lock+0x2b/0x80 [ 179.207036][ T6923] ? get_signal+0x7e0/0x21e0 [ 179.207068][ T6923] do_group_exit+0xd5/0x2a0 [ 179.207090][ T6923] get_signal+0x1ec7/0x21e0 [ 179.207129][ T6923] ? __pfx_get_signal+0x10/0x10 [ 179.207161][ T6923] ? do_futex+0x192/0x350 [ 179.207187][ T6923] arch_do_signal_or_restart+0x91/0x7a0 [ 179.207224][ T6923] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 179.207269][ T6923] ? rcu_is_watching+0x12/0xc0 [ 179.207301][ T6923] exit_to_user_mode_loop+0x8b/0x4f0 [ 179.207323][ T6923] ? rcu_is_watching+0x12/0xc0 [ 179.207353][ T6923] do_syscall_64+0x6f2/0xf80 [ 179.207386][ T6923] ? clear_bhb_loop+0x40/0x90 [ 179.207414][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.207437][ T6923] RIP: 0033:0x7f0782d9ce59 [ 179.207455][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.207476][ T6923] RSP: 002b:00007f0783b9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.207497][ T6923] RAX: fffffffffffffe00 RBX: 00007f0783015fa8 RCX: 00007f0782d9ce59 [ 179.207512][ T6923] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0783015fa8 [ 179.207526][ T6923] RBP: 00007f0783015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 179.207545][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.207559][ T6923] R13: 00007f0783016038 R14: 00007fff9b6efa40 R15: 00007fff9b6efb28 [ 179.207587][ T6923] [ 181.248669][ T6945] FAULT_INJECTION: forcing a failure. [ 181.248669][ T6945] name fail_futex, interval 1, probability 0, space 0, times 0 [ 181.344398][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.4.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.344434][ T6945] Tainted: [L]=SOFTLOCKUP [ 181.344441][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.344454][ T6945] Call Trace: [ 181.344462][ T6945] [ 181.344471][ T6945] dump_stack_lvl+0x100/0x190 [ 181.344524][ T6945] should_fail_ex.cold+0x5/0xa [ 181.344553][ T6945] get_futex_key+0x295/0x1510 [ 181.344580][ T6945] ? __pfx_get_futex_key+0x10/0x10 [ 181.344602][ T6945] ? lock_acquire+0x1b1/0x370 [ 181.344631][ T6945] futex_wake+0xea/0x530 [ 181.344663][ T6945] ? __pfx_futex_wake+0x10/0x10 [ 181.344692][ T6945] ? exit_mm_release+0x19/0x30 [ 181.344734][ T6945] do_futex+0x32b/0x350 [ 181.344760][ T6945] ? __pfx_do_futex+0x10/0x10 [ 181.344782][ T6945] ? __might_fault+0xc5/0x140 [ 181.344826][ T6945] mm_release+0x24a/0x2f0 [ 181.344854][ T6945] do_exit+0x707/0x2a60 [ 181.344894][ T6945] ? __pfx_do_exit+0x10/0x10 [ 181.344929][ T6945] ? do_raw_spin_lock+0x128/0x260 [ 181.344955][ T6945] ? find_held_lock+0x2b/0x80 [ 181.344984][ T6945] ? get_signal+0x7e0/0x21e0 [ 181.345016][ T6945] do_group_exit+0xd5/0x2a0 [ 181.345038][ T6945] get_signal+0x1ec7/0x21e0 [ 181.345077][ T6945] ? __pfx_get_signal+0x10/0x10 [ 181.345109][ T6945] ? do_futex+0x192/0x350 [ 181.345135][ T6945] arch_do_signal_or_restart+0x91/0x7a0 [ 181.345172][ T6945] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 181.345217][ T6945] ? rcu_is_watching+0x12/0xc0 [ 181.345248][ T6945] exit_to_user_mode_loop+0x8b/0x4f0 [ 181.345270][ T6945] ? rcu_is_watching+0x12/0xc0 [ 181.345300][ T6945] do_syscall_64+0x6f2/0xf80 [ 181.345334][ T6945] ? clear_bhb_loop+0x40/0x90 [ 181.345362][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.345385][ T6945] RIP: 0033:0x7f0782d9ce59 [ 181.345407][ T6945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.345429][ T6945] RSP: 002b:00007f0783b9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.345451][ T6945] RAX: fffffffffffffe00 RBX: 00007f0783015fa8 RCX: 00007f0782d9ce59 [ 181.345466][ T6945] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0783015fa8 [ 181.345479][ T6945] RBP: 00007f0783015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 181.345498][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.345514][ T6945] R13: 00007f0783016038 R14: 00007fff9b6efa40 R15: 00007fff9b6efb28 [ 181.345543][ T6945] [ 182.007354][ T6960] FAULT_INJECTION: forcing a failure. [ 182.007354][ T6960] name fail_futex, interval 1, probability 0, space 0, times 0 [ 182.054271][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.3.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.054307][ T6960] Tainted: [L]=SOFTLOCKUP [ 182.054314][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.054328][ T6960] Call Trace: [ 182.054335][ T6960] [ 182.054343][ T6960] dump_stack_lvl+0x100/0x190 [ 182.054373][ T6960] should_fail_ex.cold+0x5/0xa [ 182.054402][ T6960] get_futex_key+0x295/0x1510 [ 182.054436][ T6960] ? __pfx_get_futex_key+0x10/0x10 [ 182.054458][ T6960] ? lock_acquire+0x1b1/0x370 [ 182.054488][ T6960] futex_wake+0xea/0x530 [ 182.054520][ T6960] ? __pfx_futex_wake+0x10/0x10 [ 182.054549][ T6960] ? exit_mm_release+0x19/0x30 [ 182.054591][ T6960] do_futex+0x32b/0x350 [ 182.054616][ T6960] ? __pfx_do_futex+0x10/0x10 [ 182.054639][ T6960] ? __might_fault+0xc5/0x140 [ 182.054682][ T6960] mm_release+0x24a/0x2f0 [ 182.054711][ T6960] do_exit+0x707/0x2a60 [ 182.054751][ T6960] ? __pfx_do_exit+0x10/0x10 [ 182.054786][ T6960] ? do_raw_spin_lock+0x128/0x260 [ 182.054812][ T6960] ? find_held_lock+0x2b/0x80 [ 182.054841][ T6960] ? get_signal+0x7e0/0x21e0 [ 182.054873][ T6960] do_group_exit+0xd5/0x2a0 [ 182.054895][ T6960] get_signal+0x1ec7/0x21e0 [ 182.054934][ T6960] ? __pfx_get_signal+0x10/0x10 [ 182.054966][ T6960] ? do_futex+0x192/0x350 [ 182.054997][ T6960] arch_do_signal_or_restart+0x91/0x7a0 [ 182.055034][ T6960] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 182.055079][ T6960] ? rcu_is_watching+0x12/0xc0 [ 182.055110][ T6960] exit_to_user_mode_loop+0x8b/0x4f0 [ 182.055132][ T6960] ? rcu_is_watching+0x12/0xc0 [ 182.055162][ T6960] do_syscall_64+0x6f2/0xf80 [ 182.055196][ T6960] ? clear_bhb_loop+0x40/0x90 [ 182.055224][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.055246][ T6960] RIP: 0033:0x7fa49d39ce59 [ 182.055264][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.055286][ T6960] RSP: 002b:00007fa49e2670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.055306][ T6960] RAX: fffffffffffffe00 RBX: 00007fa49d615fa8 RCX: 00007fa49d39ce59 [ 182.055321][ T6960] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa49d615fa8 [ 182.055335][ T6960] RBP: 00007fa49d615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 182.055348][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.055361][ T6960] R13: 00007fa49d616038 R14: 00007ffc47672a30 R15: 00007ffc47672b18 [ 182.055389][ T6960] [ 184.604072][ T7021] capability: warning: `syz.2.259' uses deprecated v2 capabilities in a way that may be insecure [ 186.559878][ T5635] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 186.707375][ T7053] netlink: 186 bytes leftover after parsing attributes in process `syz.2.264'. [ 187.084655][ T7055] FAULT_INJECTION: forcing a failure. [ 187.084655][ T7055] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.084693][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.1.265 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.084725][ T7055] Tainted: [L]=SOFTLOCKUP [ 187.084733][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.084746][ T7055] Call Trace: [ 187.084753][ T7055] [ 187.084760][ T7055] dump_stack_lvl+0x100/0x190 [ 187.084790][ T7055] should_fail_ex.cold+0x5/0xa [ 187.084818][ T7055] get_futex_key+0x295/0x1510 [ 187.084845][ T7055] ? __pfx_get_futex_key+0x10/0x10 [ 187.084867][ T7055] ? lock_acquire+0x1b1/0x370 [ 187.084909][ T7055] futex_wake+0xea/0x530 [ 187.084940][ T7055] ? __pfx_futex_wake+0x10/0x10 [ 187.084969][ T7055] ? exit_mm_release+0x19/0x30 [ 187.085015][ T7055] do_futex+0x32b/0x350 [ 187.085040][ T7055] ? __pfx_do_futex+0x10/0x10 [ 187.085062][ T7055] ? __might_fault+0xc5/0x140 [ 187.085104][ T7055] mm_release+0x24a/0x2f0 [ 187.085132][ T7055] do_exit+0x707/0x2a60 [ 187.085171][ T7055] ? __pfx_do_exit+0x10/0x10 [ 187.085204][ T7055] ? do_raw_spin_lock+0x128/0x260 [ 187.085229][ T7055] ? find_held_lock+0x2b/0x80 [ 187.085257][ T7055] ? get_signal+0x7e0/0x21e0 [ 187.085288][ T7055] do_group_exit+0xd5/0x2a0 [ 187.085309][ T7055] get_signal+0x1ec7/0x21e0 [ 187.085347][ T7055] ? __pfx_get_signal+0x10/0x10 [ 187.085378][ T7055] ? do_futex+0x192/0x350 [ 187.085403][ T7055] arch_do_signal_or_restart+0x91/0x7a0 [ 187.085439][ T7055] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 187.085482][ T7055] ? rcu_is_watching+0x12/0xc0 [ 187.085517][ T7055] exit_to_user_mode_loop+0x8b/0x4f0 [ 187.085538][ T7055] ? rcu_is_watching+0x12/0xc0 [ 187.085567][ T7055] do_syscall_64+0x6f2/0xf80 [ 187.085599][ T7055] ? clear_bhb_loop+0x40/0x90 [ 187.085626][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.085648][ T7055] RIP: 0033:0x7f9271b9ce59 [ 187.085665][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.085685][ T7055] RSP: 002b:00007f9272a790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.085705][ T7055] RAX: fffffffffffffe00 RBX: 00007f9271e15fa8 RCX: 00007f9271b9ce59 [ 187.085719][ T7055] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9271e15fa8 [ 187.085731][ T7055] RBP: 00007f9271e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 187.085744][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.085757][ T7055] R13: 00007f9271e16038 R14: 00007ffc8fdb46c0 R15: 00007ffc8fdb47a8 [ 187.085784][ T7055] [ 188.791208][ T7085] FAULT_INJECTION: forcing a failure. [ 188.791208][ T7085] name fail_futex, interval 1, probability 0, space 0, times 0 [ 188.791248][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.1.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.791278][ T7085] Tainted: [L]=SOFTLOCKUP [ 188.791285][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.791298][ T7085] Call Trace: [ 188.791305][ T7085] [ 188.791313][ T7085] dump_stack_lvl+0x100/0x190 [ 188.791341][ T7085] should_fail_ex.cold+0x5/0xa [ 188.791369][ T7085] get_futex_key+0xf78/0x1510 [ 188.791395][ T7085] ? __pfx_get_futex_key+0x10/0x10 [ 188.791416][ T7085] ? lock_acquire+0x1b1/0x370 [ 188.791445][ T7085] futex_wake+0xea/0x530 [ 188.791476][ T7085] ? __pfx_futex_wake+0x10/0x10 [ 188.791505][ T7085] ? exit_mm_release+0x19/0x30 [ 188.791545][ T7085] do_futex+0x32b/0x350 [ 188.791570][ T7085] ? __pfx_do_futex+0x10/0x10 [ 188.791592][ T7085] ? __might_fault+0xc5/0x140 [ 188.791634][ T7085] mm_release+0x24a/0x2f0 [ 188.791663][ T7085] do_exit+0x707/0x2a60 [ 188.791701][ T7085] ? __pfx_do_exit+0x10/0x10 [ 188.791735][ T7085] ? do_raw_spin_lock+0x128/0x260 [ 188.791760][ T7085] ? find_held_lock+0x2b/0x80 [ 188.791788][ T7085] ? get_signal+0x7e0/0x21e0 [ 188.791819][ T7085] do_group_exit+0xd5/0x2a0 [ 188.791847][ T7085] get_signal+0x1ec7/0x21e0 [ 188.791885][ T7085] ? __pfx_get_signal+0x10/0x10 [ 188.791916][ T7085] ? do_futex+0x192/0x350 [ 188.791942][ T7085] arch_do_signal_or_restart+0x91/0x7a0 [ 188.791977][ T7085] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 188.792022][ T7085] ? rcu_is_watching+0x12/0xc0 [ 188.792052][ T7085] exit_to_user_mode_loop+0x8b/0x4f0 [ 188.792074][ T7085] ? rcu_is_watching+0x12/0xc0 [ 188.792103][ T7085] do_syscall_64+0x6f2/0xf80 [ 188.792136][ T7085] ? clear_bhb_loop+0x40/0x90 [ 188.792162][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.792185][ T7085] RIP: 0033:0x7f9271b9ce59 [ 188.792202][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.792223][ T7085] RSP: 002b:00007f9272a790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.792244][ T7085] RAX: fffffffffffffe00 RBX: 00007f9271e15fa8 RCX: 00007f9271b9ce59 [ 188.792259][ T7085] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9271e15fa8 [ 188.792272][ T7085] RBP: 00007f9271e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 188.792285][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.792298][ T7085] R13: 00007f9271e16038 R14: 00007ffc8fdb46c0 R15: 00007ffc8fdb47a8 [ 188.792325][ T7085] [ 189.457005][ T7113] futex_wake_op: syz.1.274 tries to shift op by -2048; fix this program [ 190.284689][ T7126] FAULT_INJECTION: forcing a failure. [ 190.284689][ T7126] name failslab, interval 1, probability 0, space 0, times 0 [ 190.284820][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.1.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.284853][ T7126] Tainted: [L]=SOFTLOCKUP [ 190.284860][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.284874][ T7126] Call Trace: [ 190.284881][ T7126] [ 190.284889][ T7126] dump_stack_lvl+0x100/0x190 [ 190.284920][ T7126] should_fail_ex.cold+0x5/0xa [ 190.284949][ T7126] should_failslab+0xc2/0x120 [ 190.284977][ T7126] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 190.285015][ T7126] ? ptlock_alloc+0x1f/0x70 [ 190.285049][ T7126] ? do_raw_spin_lock+0x128/0x260 [ 190.285080][ T7126] ptlock_alloc+0x1f/0x70 [ 190.285114][ T7126] pte_alloc_one+0x82/0x3d0 [ 190.285150][ T7126] do_fault+0x86c/0x1750 [ 190.285179][ T7126] ? __pmd_alloc+0x3fb/0x950 [ 190.285211][ T7126] __handle_mm_fault+0x187d/0x2a00 [ 190.285251][ T7126] ? mt_find+0x45e/0x8e0 [ 190.285290][ T7126] ? __pfx___handle_mm_fault+0x10/0x10 [ 190.285323][ T7126] ? __pfx_mt_find+0x10/0x10 [ 190.285375][ T7126] ? find_vma+0xbf/0x140 [ 190.285400][ T7126] ? __pfx_find_vma+0x10/0x10 [ 190.285428][ T7126] handle_mm_fault+0x36d/0xa20 [ 190.285470][ T7126] do_user_addr_fault+0x74c/0x12f0 [ 190.285502][ T7126] ? trace_page_fault_kernel+0x7a/0x200 [ 190.285533][ T7126] exc_page_fault+0x6f/0xd0 [ 190.285567][ T7126] asm_exc_page_fault+0x26/0x30 [ 190.285590][ T7126] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 190.285617][ T7126] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 190.285639][ T7126] RSP: 0018:ffffc900044cfb78 EFLAGS: 00050212 [ 190.285657][ T7126] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000022 [ 190.285670][ T7126] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900044cfbd8 [ 190.285684][ T7126] RBP: 0000000000000022 R08: 0000000000000001 R09: fffff52000899f7f [ 190.285697][ T7126] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 190.285710][ T7126] R13: ffffc900044cfbd8 R14: ffffc900044cfca0 R15: ffffc900044cfbd8 [ 190.285739][ T7126] _copy_from_user+0x98/0xd0 [ 190.285770][ T7126] kstrtouint_from_user+0xd6/0x1d0 [ 190.285801][ T7126] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 190.285831][ T7126] ? __lock_acquire+0x4a5/0x2630 [ 190.285858][ T7126] ? lock_acquire+0x1b1/0x370 [ 190.285885][ T7126] proc_fail_nth_write+0x83/0x220 [ 190.285923][ T7126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 190.285969][ T7126] vfs_write+0x2aa/0x1070 [ 190.285997][ T7126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 190.286038][ T7126] ? __pfx_vfs_write+0x10/0x10 [ 190.286064][ T7126] ? __fget_files+0x215/0x3d0 [ 190.286097][ T7126] ? __fget_files+0x21f/0x3d0 [ 190.286132][ T7126] ksys_write+0x12a/0x250 [ 190.286159][ T7126] ? __pfx_ksys_write+0x10/0x10 [ 190.286188][ T7126] ? rcu_is_watching+0x12/0xc0 [ 190.286220][ T7126] do_syscall_64+0x10b/0xf80 [ 190.286253][ T7126] ? clear_bhb_loop+0x40/0x90 [ 190.286281][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.286304][ T7126] RIP: 0033:0x7f9271b9ce59 [ 190.286323][ T7126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.286344][ T7126] RSP: 002b:00007f9272a58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.286364][ T7126] RAX: ffffffffffffffda RBX: 00007f9271e16090 RCX: 00007f9271b9ce59 [ 190.286379][ T7126] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 190.286392][ T7126] RBP: 00007f9271c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.286406][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.286419][ T7126] R13: 00007f9271e16128 R14: 00007f9271e16090 R15: 00007ffc8fdb47a8 [ 190.286448][ T7126] [ 190.330604][ T7126] wlan1: mtu less than device minimum [ 190.997508][ T7124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.998546][ T7124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.044695][ T7124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.054892][ T7124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.054980][ T7124] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.063836][ T7124] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.100131][ T7124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.100216][ T7124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.107434][ T7124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.405804][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 192.856414][ T5635] block nbd0: Receive control failed (result -32) [ 193.127570][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.127658][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 193.439036][ T7168] bridge0: port 4(batadv0) entered blocking state [ 193.492760][ T7168] bridge0: port 4(batadv0) entered disabled state [ 193.529866][ T7168] batadv0: entered allmulticast mode [ 193.568284][ T7168] batadv0: entered promiscuous mode [ 193.605058][ T7168] bridge0: port 4(batadv0) entered blocking state [ 193.611646][ T7168] bridge0: port 4(batadv0) entered forwarding state [ 193.706845][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 193.716551][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 194.487454][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 194.499207][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.515910][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.924286][ T7194] netlink: 350 bytes leftover after parsing attributes in process `syz.4.290'. [ 195.205625][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.211767][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 196.060066][ T7214] FAULT_INJECTION: forcing a failure. [ 196.060066][ T7214] name failslab, interval 1, probability 0, space 0, times 0 [ 196.221857][ T7214] CPU: 0 UID: 0 PID: 7214 Comm: syz.3.295 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.221899][ T7214] Tainted: [L]=SOFTLOCKUP [ 196.221907][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.221922][ T7214] Call Trace: [ 196.221930][ T7214] [ 196.221939][ T7214] dump_stack_lvl+0x100/0x190 [ 196.221971][ T7214] should_fail_ex.cold+0x5/0xa [ 196.222002][ T7214] should_failslab+0xc2/0x120 [ 196.222030][ T7214] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 196.222073][ T7214] ? __d_alloc+0x34/0xa40 [ 196.222111][ T7214] __d_alloc+0x34/0xa40 [ 196.222146][ T7214] d_alloc+0x4a/0x1e0 [ 196.222187][ T7214] lookup_one_qstr_excl+0x171/0x250 [ 196.222228][ T7214] start_dirop+0x59/0xb0 [ 196.222256][ T7214] simple_start_creating+0xf9/0x110 [ 196.222286][ T7214] ? __pfx_simple_start_creating+0x10/0x10 [ 196.222316][ T7214] ? mntput+0x70/0xa0 [ 196.222341][ T7214] ? simple_pin_fs+0xa3/0x190 [ 196.222367][ T7214] debugfs_start_creating.part.0+0x82/0x170 [ 196.222406][ T7214] __debugfs_create_file+0xb3/0x4f0 [ 196.222447][ T7214] debugfs_create_file_full+0x41/0x60 [ 196.222488][ T7214] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 196.222520][ T7214] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 196.222549][ T7214] ? ida_alloc_range+0x70d/0x830 [ 196.222609][ T7214] ? lockdep_init_map_type+0x5c/0x250 [ 196.222638][ T7214] preinit_net.part.0+0x252/0x920 [ 196.222682][ T7214] copy_net_ns+0x339/0x7c0 [ 196.222715][ T7214] create_new_namespaces+0x3ea/0xac0 [ 196.222752][ T7214] unshare_nsproxy_namespaces+0xf2/0x220 [ 196.222785][ T7214] ksys_unshare+0x438/0xab0 [ 196.222821][ T7214] ? __pfx_ksys_unshare+0x10/0x10 [ 196.222855][ T7214] ? xfd_validate_state+0x129/0x190 [ 196.222878][ T7214] ? ksys_write+0x1ac/0x250 [ 196.222912][ T7214] __x64_sys_unshare+0x31/0x40 [ 196.222946][ T7214] do_syscall_64+0x10b/0xf80 [ 196.222980][ T7214] ? clear_bhb_loop+0x40/0x90 [ 196.223007][ T7214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.223031][ T7214] RIP: 0033:0x7fa49d39ce59 [ 196.223050][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.223071][ T7214] RSP: 002b:00007fa49e246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 196.223092][ T7214] RAX: ffffffffffffffda RBX: 00007fa49d616090 RCX: 00007fa49d39ce59 [ 196.223108][ T7214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 196.223121][ T7214] RBP: 00007fa49d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 196.223134][ T7214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.223148][ T7214] R13: 00007fa49d616128 R14: 00007fa49d616090 R15: 00007ffc47672b18 [ 196.223183][ T7214] [ 196.652511][ T7224] mmap: syz.1.298 (7224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.848376][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 197.285661][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.291883][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.452526][ T7257] FAULT_INJECTION: forcing a failure. [ 199.452526][ T7257] name failslab, interval 1, probability 0, space 0, times 0 [ 199.550762][ T7257] CPU: 0 UID: 0 PID: 7257 Comm: syz.4.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.550804][ T7257] Tainted: [L]=SOFTLOCKUP [ 199.550812][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.550825][ T7257] Call Trace: [ 199.550833][ T7257] [ 199.550841][ T7257] dump_stack_lvl+0x100/0x190 [ 199.550871][ T7257] should_fail_ex.cold+0x5/0xa [ 199.550899][ T7257] should_failslab+0xc2/0x120 [ 199.550934][ T7257] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 199.550973][ T7257] ? shmem_alloc_inode+0x25/0x50 [ 199.551005][ T7257] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 199.551037][ T7257] shmem_alloc_inode+0x25/0x50 [ 199.551069][ T7257] alloc_inode+0x68/0x250 [ 199.551106][ T7257] new_inode+0x22/0x1c0 [ 199.551142][ T7257] ? trace_kmem_cache_alloc+0xd5/0x100 [ 199.551177][ T7257] shmem_get_inode+0x1e3/0xfb0 [ 199.551211][ T7257] ? __pfx_shmem_get_inode+0x10/0x10 [ 199.551250][ T7257] __shmem_file_setup+0x382/0x460 [ 199.551284][ T7257] ? __pfx___shmem_file_setup+0x10/0x10 [ 199.551322][ T7257] ? vm_area_alloc+0x1f/0x160 [ 199.551361][ T7257] shmem_zero_setup+0x96/0x1b0 [ 199.551389][ T7257] __mmap_region+0x24e9/0x2da0 [ 199.551430][ T7257] ? __pfx___mmap_region+0x10/0x10 [ 199.551468][ T7257] ? __lock_acquire+0x4a5/0x2630 [ 199.551491][ T7257] ? rcu_is_watching+0x12/0xc0 [ 199.551520][ T7257] ? trace_pelt_se_tp+0x13b/0x190 [ 199.551554][ T7257] ? __lock_acquire+0x4a5/0x2630 [ 199.551576][ T7257] ? do_raw_spin_unlock+0x145/0x1e0 [ 199.551603][ T7257] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.551651][ T7257] ? rcu_is_watching+0x12/0xc0 [ 199.551690][ T7257] ? rcu_is_watching+0x12/0xc0 [ 199.551717][ T7257] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 199.551747][ T7257] ? lockdep_hardirqs_on+0x78/0x100 [ 199.551824][ T7257] mmap_region+0x35d/0x620 [ 199.551846][ T7257] ? rcu_is_watching+0x12/0xc0 [ 199.551873][ T7257] ? __pfx_mmap_region+0x10/0x10 [ 199.551897][ T7257] ? cap_mmap_addr+0x4b/0x120 [ 199.551935][ T7257] ? bpf_lsm_mmap_addr+0x9/0x30 [ 199.551958][ T7257] ? security_mmap_addr+0x71/0x1e0 [ 199.551985][ T7257] ? __get_unmapped_area+0x255/0x3e0 [ 199.552023][ T7257] do_mmap+0xc63/0x12f0 [ 199.552057][ T7257] ? __pfx_do_mmap+0x10/0x10 [ 199.552085][ T7257] ? __pfx_down_write_killable+0x10/0x10 [ 199.552113][ T7257] vm_mmap_pgoff+0x29e/0x470 [ 199.552147][ T7257] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 199.552178][ T7257] ? do_futex+0x192/0x350 [ 199.552204][ T7257] ? __pfx_do_futex+0x10/0x10 [ 199.552233][ T7257] ksys_mmap_pgoff+0xe4/0x610 [ 199.552263][ T7257] ? __x64_sys_futex+0x358/0x4d0 [ 199.552289][ T7257] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 199.552316][ T7257] ? xfd_validate_state+0x129/0x190 [ 199.552339][ T7257] ? ksys_read+0x1ac/0x250 [ 199.552370][ T7257] __x64_sys_mmap+0x125/0x190 [ 199.552398][ T7257] do_syscall_64+0x10b/0xf80 [ 199.552434][ T7257] ? clear_bhb_loop+0x40/0x90 [ 199.552463][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.552491][ T7257] RIP: 0033:0x7f0782d9ce59 [ 199.552509][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.552530][ T7257] RSP: 002b:00007f0783b9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 199.552551][ T7257] RAX: ffffffffffffffda RBX: 00007f0783015fa0 RCX: 00007f0782d9ce59 [ 199.552565][ T7257] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 199.552578][ T7257] RBP: 00007f0782e32d6f R08: fffffffffffffffa R09: 0000000000008000 [ 199.552592][ T7257] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 199.552605][ T7257] R13: 00007f0783016038 R14: 00007f0783015fa0 R15: 00007fff9b6efb28 [ 199.552634][ T7257] [ 201.184028][ T7268] FAULT_INJECTION: forcing a failure. [ 201.184028][ T7268] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.264365][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.2.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.264399][ T7268] Tainted: [L]=SOFTLOCKUP [ 201.264407][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.264420][ T7268] Call Trace: [ 201.264427][ T7268] [ 201.264434][ T7268] dump_stack_lvl+0x100/0x190 [ 201.264464][ T7268] should_fail_ex.cold+0x5/0xa [ 201.264491][ T7268] get_futex_key+0x295/0x1510 [ 201.264517][ T7268] ? __pfx_get_futex_key+0x10/0x10 [ 201.264538][ T7268] ? lock_acquire+0x1b1/0x370 [ 201.264567][ T7268] futex_wake+0xea/0x530 [ 201.264598][ T7268] ? __pfx_futex_wake+0x10/0x10 [ 201.264627][ T7268] ? exit_mm_release+0x19/0x30 [ 201.264667][ T7268] do_futex+0x32b/0x350 [ 201.264692][ T7268] ? __pfx_do_futex+0x10/0x10 [ 201.264714][ T7268] ? __might_fault+0xc5/0x140 [ 201.264764][ T7268] mm_release+0x24a/0x2f0 [ 201.264792][ T7268] do_exit+0x707/0x2a60 [ 201.264830][ T7268] ? __pfx_do_exit+0x10/0x10 [ 201.264865][ T7268] ? do_raw_spin_lock+0x128/0x260 [ 201.264890][ T7268] ? find_held_lock+0x2b/0x80 [ 201.264918][ T7268] ? get_signal+0x7e0/0x21e0 [ 201.264950][ T7268] do_group_exit+0xd5/0x2a0 [ 201.264972][ T7268] get_signal+0x1ec7/0x21e0 [ 201.265010][ T7268] ? __pfx_get_signal+0x10/0x10 [ 201.265045][ T7268] ? do_futex+0x192/0x350 [ 201.265071][ T7268] arch_do_signal_or_restart+0x91/0x7a0 [ 201.265106][ T7268] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 201.265170][ T7268] ? rcu_is_watching+0x12/0xc0 [ 201.265201][ T7268] exit_to_user_mode_loop+0x8b/0x4f0 [ 201.265223][ T7268] ? rcu_is_watching+0x12/0xc0 [ 201.265252][ T7268] do_syscall_64+0x6f2/0xf80 [ 201.265285][ T7268] ? clear_bhb_loop+0x40/0x90 [ 201.265312][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.265335][ T7268] RIP: 0033:0x7f16a9b9ce59 [ 201.265353][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.265374][ T7268] RSP: 002b:00007f16aaa5c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.265394][ T7268] RAX: fffffffffffffe00 RBX: 00007f16a9e15fa8 RCX: 00007f16a9b9ce59 [ 201.265409][ T7268] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f16a9e15fa8 [ 201.265423][ T7268] RBP: 00007f16a9e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 201.265436][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.265449][ T7268] R13: 00007f16a9e16038 R14: 00007fffb7b82ae0 R15: 00007fffb7b82bc8 [ 201.265477][ T7268] [ 203.077406][ T50] block nbd1: Receive control failed (result -32) [ 204.602067][ T7278] Process accounting resumed [ 206.052922][ T7318] FAULT_INJECTION: forcing a failure. [ 206.052922][ T7318] name fail_futex, interval 1, probability 0, space 0, times 0 [ 206.112194][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.1.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.112227][ T7318] Tainted: [L]=SOFTLOCKUP [ 206.112234][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.112245][ T7318] Call Trace: [ 206.112252][ T7318] [ 206.112259][ T7318] dump_stack_lvl+0x100/0x190 [ 206.112285][ T7318] should_fail_ex.cold+0x5/0xa [ 206.112319][ T7318] get_futex_key+0xf78/0x1510 [ 206.112343][ T7318] ? __pfx_get_futex_key+0x10/0x10 [ 206.112366][ T7318] ? lock_acquire+0x1b1/0x370 [ 206.112393][ T7318] futex_wake+0xea/0x530 [ 206.112422][ T7318] ? __pfx_futex_wake+0x10/0x10 [ 206.112449][ T7318] ? exit_mm_release+0x19/0x30 [ 206.112487][ T7318] do_futex+0x32b/0x350 [ 206.112510][ T7318] ? __pfx_do_futex+0x10/0x10 [ 206.112549][ T7318] ? __might_fault+0xc5/0x140 [ 206.112591][ T7318] mm_release+0x24a/0x2f0 [ 206.112619][ T7318] do_exit+0x707/0x2a60 [ 206.112657][ T7318] ? __pfx_do_exit+0x10/0x10 [ 206.112691][ T7318] ? do_raw_spin_lock+0x128/0x260 [ 206.112715][ T7318] ? find_held_lock+0x2b/0x80 [ 206.112743][ T7318] ? get_signal+0x7e0/0x21e0 [ 206.112773][ T7318] do_group_exit+0xd5/0x2a0 [ 206.112795][ T7318] get_signal+0x1ec7/0x21e0 [ 206.112832][ T7318] ? __pfx_get_signal+0x10/0x10 [ 206.112863][ T7318] ? do_futex+0x192/0x350 [ 206.112889][ T7318] arch_do_signal_or_restart+0x91/0x7a0 [ 206.112924][ T7318] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 206.112968][ T7318] ? rcu_is_watching+0x12/0xc0 [ 206.112998][ T7318] exit_to_user_mode_loop+0x8b/0x4f0 [ 206.113019][ T7318] ? rcu_is_watching+0x12/0xc0 [ 206.113048][ T7318] do_syscall_64+0x6f2/0xf80 [ 206.113081][ T7318] ? clear_bhb_loop+0x40/0x90 [ 206.113107][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.113129][ T7318] RIP: 0033:0x7f9271b9ce59 [ 206.113146][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.113166][ T7318] RSP: 002b:00007f9272a790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.113186][ T7318] RAX: fffffffffffffe00 RBX: 00007f9271e15fa8 RCX: 00007f9271b9ce59 [ 206.113201][ T7318] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9271e15fa8 [ 206.113214][ T7318] RBP: 00007f9271e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 206.113226][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.113239][ T7318] R13: 00007f9271e16038 R14: 00007ffc8fdb46c0 R15: 00007ffc8fdb47a8 [ 206.113266][ T7318] [ 206.618514][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.685016][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.699351][ T29] audit: type=1800 audit(1778692115.384:2): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.323" name="dbroot" dev="configfs" ino=17537 res=0 errno=0 [ 208.971669][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 210.689501][ T7385] FAULT_INJECTION: forcing a failure. [ 210.689501][ T7385] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.757394][ T7385] CPU: 0 UID: 0 PID: 7385 Comm: syz.3.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.757432][ T7385] Tainted: [L]=SOFTLOCKUP [ 210.757439][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.757452][ T7385] Call Trace: [ 210.757460][ T7385] [ 210.757469][ T7385] dump_stack_lvl+0x100/0x190 [ 210.757502][ T7385] should_fail_ex.cold+0x5/0xa [ 210.757531][ T7385] get_futex_key+0x295/0x1510 [ 210.757556][ T7385] ? __pfx_get_futex_key+0x10/0x10 [ 210.757578][ T7385] ? lock_acquire+0x1b1/0x370 [ 210.757608][ T7385] futex_wake+0xea/0x530 [ 210.757640][ T7385] ? __pfx_futex_wake+0x10/0x10 [ 210.757669][ T7385] ? exit_mm_release+0x19/0x30 [ 210.757710][ T7385] do_futex+0x32b/0x350 [ 210.757735][ T7385] ? __pfx_do_futex+0x10/0x10 [ 210.757758][ T7385] ? __might_fault+0xc5/0x140 [ 210.757801][ T7385] mm_release+0x24a/0x2f0 [ 210.757830][ T7385] do_exit+0x707/0x2a60 [ 210.757869][ T7385] ? __pfx_do_exit+0x10/0x10 [ 210.757904][ T7385] ? do_raw_spin_lock+0x128/0x260 [ 210.757930][ T7385] ? find_held_lock+0x2b/0x80 [ 210.757965][ T7385] ? get_signal+0x7e0/0x21e0 [ 210.757997][ T7385] do_group_exit+0xd5/0x2a0 [ 210.758020][ T7385] get_signal+0x1ec7/0x21e0 [ 210.758059][ T7385] ? __pfx_get_signal+0x10/0x10 [ 210.758091][ T7385] ? do_futex+0x192/0x350 [ 210.758122][ T7385] arch_do_signal_or_restart+0x91/0x7a0 [ 210.758160][ T7385] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 210.758205][ T7385] ? rcu_is_watching+0x12/0xc0 [ 210.758237][ T7385] exit_to_user_mode_loop+0x8b/0x4f0 [ 210.758259][ T7385] ? rcu_is_watching+0x12/0xc0 [ 210.758290][ T7385] do_syscall_64+0x6f2/0xf80 [ 210.758324][ T7385] ? clear_bhb_loop+0x40/0x90 [ 210.758351][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.758374][ T7385] RIP: 0033:0x7fa49d39ce59 [ 210.758392][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.758414][ T7385] RSP: 002b:00007fa49e2670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.758435][ T7385] RAX: fffffffffffffe00 RBX: 00007fa49d615fa8 RCX: 00007fa49d39ce59 [ 210.758450][ T7385] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa49d615fa8 [ 210.758464][ T7385] RBP: 00007fa49d615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 210.758477][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.758490][ T7385] R13: 00007fa49d616038 R14: 00007ffc47672a30 R15: 00007ffc47672b18 [ 210.758519][ T7385] [ 212.458500][ T7404] FAULT_INJECTION: forcing a failure. [ 212.458500][ T7404] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.529287][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.4.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.529327][ T7404] Tainted: [L]=SOFTLOCKUP [ 212.529335][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.529348][ T7404] Call Trace: [ 212.529355][ T7404] [ 212.529363][ T7404] dump_stack_lvl+0x100/0x190 [ 212.529394][ T7404] should_fail_ex.cold+0x5/0xa [ 212.529423][ T7404] get_futex_key+0x295/0x1510 [ 212.529449][ T7404] ? __pfx_get_futex_key+0x10/0x10 [ 212.529471][ T7404] ? lock_acquire+0x1b1/0x370 [ 212.529501][ T7404] futex_wake+0xea/0x530 [ 212.529534][ T7404] ? __pfx_futex_wake+0x10/0x10 [ 212.529564][ T7404] ? exit_mm_release+0x19/0x30 [ 212.529606][ T7404] do_futex+0x32b/0x350 [ 212.529631][ T7404] ? __pfx_do_futex+0x10/0x10 [ 212.529654][ T7404] ? __might_fault+0xc5/0x140 [ 212.529697][ T7404] mm_release+0x24a/0x2f0 [ 212.529727][ T7404] do_exit+0x707/0x2a60 [ 212.529775][ T7404] ? __pfx_do_exit+0x10/0x10 [ 212.529811][ T7404] ? do_raw_spin_lock+0x128/0x260 [ 212.529837][ T7404] ? find_held_lock+0x2b/0x80 [ 212.529866][ T7404] ? get_signal+0x7e0/0x21e0 [ 212.529900][ T7404] do_group_exit+0xd5/0x2a0 [ 212.529922][ T7404] get_signal+0x1ec7/0x21e0 [ 212.529962][ T7404] ? __pfx_get_signal+0x10/0x10 [ 212.529994][ T7404] ? do_futex+0x192/0x350 [ 212.530021][ T7404] arch_do_signal_or_restart+0x91/0x7a0 [ 212.530058][ T7404] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 212.530104][ T7404] ? rcu_is_watching+0x12/0xc0 [ 212.530136][ T7404] exit_to_user_mode_loop+0x8b/0x4f0 [ 212.530158][ T7404] ? rcu_is_watching+0x12/0xc0 [ 212.530201][ T7404] do_syscall_64+0x6f2/0xf80 [ 212.530234][ T7404] ? clear_bhb_loop+0x40/0x90 [ 212.530260][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.530283][ T7404] RIP: 0033:0x7f0782d9ce59 [ 212.530300][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.530321][ T7404] RSP: 002b:00007f0783b9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.530341][ T7404] RAX: fffffffffffffe00 RBX: 00007f0783015fa8 RCX: 00007f0782d9ce59 [ 212.530356][ T7404] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0783015fa8 [ 212.530369][ T7404] RBP: 00007f0783015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 212.530382][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.530395][ T7404] R13: 00007f0783016038 R14: 00007fff9b6efa40 R15: 00007fff9b6efb28 [ 212.530441][ T7404] [ 213.726416][ T7419] input: f as /devices/virtual/input/input22 [ 213.833336][ T7420] netlink: zone id is out of range [ 214.791337][ T7429] FAULT_INJECTION: forcing a failure. [ 214.791337][ T7429] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.841539][ T7429] CPU: 0 UID: 0 PID: 7429 Comm: syz.2.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.841574][ T7429] Tainted: [L]=SOFTLOCKUP [ 214.841581][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.841594][ T7429] Call Trace: [ 214.841601][ T7429] [ 214.841609][ T7429] dump_stack_lvl+0x100/0x190 [ 214.841638][ T7429] should_fail_ex.cold+0x5/0xa [ 214.841666][ T7429] get_futex_key+0xf78/0x1510 [ 214.841691][ T7429] ? __pfx_get_futex_key+0x10/0x10 [ 214.841713][ T7429] ? lock_acquire+0x1b1/0x370 [ 214.841742][ T7429] futex_wake+0xea/0x530 [ 214.841773][ T7429] ? __pfx_futex_wake+0x10/0x10 [ 214.841802][ T7429] ? exit_mm_release+0x19/0x30 [ 214.841842][ T7429] do_futex+0x32b/0x350 [ 214.841867][ T7429] ? __pfx_do_futex+0x10/0x10 [ 214.841889][ T7429] ? __might_fault+0xc5/0x140 [ 214.841931][ T7429] mm_release+0x24a/0x2f0 [ 214.841978][ T7429] do_exit+0x707/0x2a60 [ 214.842018][ T7429] ? __pfx_do_exit+0x10/0x10 [ 214.842053][ T7429] ? do_raw_spin_lock+0x128/0x260 [ 214.842079][ T7429] ? find_held_lock+0x2b/0x80 [ 214.842108][ T7429] ? get_signal+0x7e0/0x21e0 [ 214.842140][ T7429] do_group_exit+0xd5/0x2a0 [ 214.842162][ T7429] get_signal+0x1ec7/0x21e0 [ 214.842201][ T7429] ? __pfx_get_signal+0x10/0x10 [ 214.842246][ T7429] ? do_futex+0x192/0x350 [ 214.842272][ T7429] arch_do_signal_or_restart+0x91/0x7a0 [ 214.842307][ T7429] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 214.842356][ T7429] ? rcu_is_watching+0x12/0xc0 [ 214.842414][ T7429] exit_to_user_mode_loop+0x8b/0x4f0 [ 214.842436][ T7429] ? rcu_is_watching+0x12/0xc0 [ 214.842466][ T7429] do_syscall_64+0x6f2/0xf80 [ 214.842500][ T7429] ? clear_bhb_loop+0x40/0x90 [ 214.842534][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.842558][ T7429] RIP: 0033:0x7f16a9b9ce59 [ 214.842576][ T7429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.842597][ T7429] RSP: 002b:00007f16aaa5c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 214.842618][ T7429] RAX: fffffffffffffe00 RBX: 00007f16a9e15fa8 RCX: 00007f16a9b9ce59 [ 214.842634][ T7429] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f16a9e15fa8 [ 214.842647][ T7429] RBP: 00007f16a9e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 214.842661][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.842674][ T7429] R13: 00007f16a9e16038 R14: 00007fffb7b82ae0 R15: 00007fffb7b82bc8 [ 214.842702][ T7429] [ 215.637503][ T7444] input: f as /devices/virtual/input/input23 [ 216.117896][ T7450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.347'. [ 216.457932][ T7454] FAULT_INJECTION: forcing a failure. [ 216.457932][ T7454] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.533020][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.2.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.533056][ T7454] Tainted: [L]=SOFTLOCKUP [ 216.533063][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.533076][ T7454] Call Trace: [ 216.533083][ T7454] [ 216.533094][ T7454] dump_stack_lvl+0x100/0x190 [ 216.533123][ T7454] should_fail_ex.cold+0x5/0xa [ 216.533151][ T7454] get_futex_key+0x295/0x1510 [ 216.533177][ T7454] ? __pfx_get_futex_key+0x10/0x10 [ 216.533198][ T7454] ? lock_acquire+0x1b1/0x370 [ 216.533227][ T7454] futex_wake+0xea/0x530 [ 216.533258][ T7454] ? __pfx_futex_wake+0x10/0x10 [ 216.533287][ T7454] ? exit_mm_release+0x19/0x30 [ 216.533327][ T7454] do_futex+0x32b/0x350 [ 216.533352][ T7454] ? __pfx_do_futex+0x10/0x10 [ 216.533374][ T7454] ? __might_fault+0xc5/0x140 [ 216.533421][ T7454] mm_release+0x24a/0x2f0 [ 216.533449][ T7454] do_exit+0x707/0x2a60 [ 216.533488][ T7454] ? __pfx_do_exit+0x10/0x10 [ 216.533522][ T7454] ? do_raw_spin_lock+0x128/0x260 [ 216.533547][ T7454] ? find_held_lock+0x2b/0x80 [ 216.533575][ T7454] ? get_signal+0x7e0/0x21e0 [ 216.533607][ T7454] do_group_exit+0xd5/0x2a0 [ 216.533629][ T7454] get_signal+0x1ec7/0x21e0 [ 216.533667][ T7454] ? __pfx_get_signal+0x10/0x10 [ 216.533698][ T7454] ? do_futex+0x192/0x350 [ 216.533724][ T7454] arch_do_signal_or_restart+0x91/0x7a0 [ 216.533760][ T7454] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 216.533804][ T7454] ? rcu_is_watching+0x12/0xc0 [ 216.533835][ T7454] exit_to_user_mode_loop+0x8b/0x4f0 [ 216.533856][ T7454] ? rcu_is_watching+0x12/0xc0 [ 216.533885][ T7454] do_syscall_64+0x6f2/0xf80 [ 216.533918][ T7454] ? clear_bhb_loop+0x40/0x90 [ 216.533945][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.533967][ T7454] RIP: 0033:0x7f16a9b9ce59 [ 216.533985][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.534005][ T7454] RSP: 002b:00007f16aaa5c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.534026][ T7454] RAX: fffffffffffffe00 RBX: 00007f16a9e15fa8 RCX: 00007f16a9b9ce59 [ 216.534040][ T7454] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f16a9e15fa8 [ 216.534053][ T7454] RBP: 00007f16a9e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 216.534066][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.534079][ T7454] R13: 00007f16a9e16038 R14: 00007fffb7b82ae0 R15: 00007fffb7b82bc8 [ 216.534107][ T7454] [ 217.245648][ T7467] input: f as /devices/virtual/input/input24 [ 217.431664][ T7470] netlink: zone id is out of range [ 217.523468][ T7468] FAULT_INJECTION: forcing a failure. [ 217.523468][ T7468] name fail_futex, interval 1, probability 0, space 0, times 0 [ 217.600666][ T7468] CPU: 0 UID: 0 PID: 7468 Comm: syz.4.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.600703][ T7468] Tainted: [L]=SOFTLOCKUP [ 217.600711][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.600724][ T7468] Call Trace: [ 217.600731][ T7468] [ 217.600739][ T7468] dump_stack_lvl+0x100/0x190 [ 217.600769][ T7468] should_fail_ex.cold+0x5/0xa [ 217.600799][ T7468] get_futex_key+0xf78/0x1510 [ 217.600825][ T7468] ? __pfx_get_futex_key+0x10/0x10 [ 217.600846][ T7468] ? lock_acquire+0x1b1/0x370 [ 217.600876][ T7468] futex_wake+0xea/0x530 [ 217.600909][ T7468] ? __pfx_futex_wake+0x10/0x10 [ 217.600938][ T7468] ? exit_mm_release+0x19/0x30 [ 217.600980][ T7468] do_futex+0x32b/0x350 [ 217.601005][ T7468] ? __pfx_do_futex+0x10/0x10 [ 217.601028][ T7468] ? __might_fault+0xc5/0x140 [ 217.601077][ T7468] mm_release+0x24a/0x2f0 [ 217.601107][ T7468] do_exit+0x707/0x2a60 [ 217.601147][ T7468] ? __pfx_do_exit+0x10/0x10 [ 217.601182][ T7468] ? do_raw_spin_lock+0x128/0x260 [ 217.601207][ T7468] ? find_held_lock+0x2b/0x80 [ 217.601236][ T7468] ? get_signal+0x7e0/0x21e0 [ 217.601268][ T7468] do_group_exit+0xd5/0x2a0 [ 217.601290][ T7468] get_signal+0x1ec7/0x21e0 [ 217.601329][ T7468] ? __pfx_get_signal+0x10/0x10 [ 217.601361][ T7468] ? do_futex+0x192/0x350 [ 217.601395][ T7468] arch_do_signal_or_restart+0x91/0x7a0 [ 217.601432][ T7468] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 217.601478][ T7468] ? rcu_is_watching+0x12/0xc0 [ 217.601510][ T7468] exit_to_user_mode_loop+0x8b/0x4f0 [ 217.601532][ T7468] ? rcu_is_watching+0x12/0xc0 [ 217.601562][ T7468] do_syscall_64+0x6f2/0xf80 [ 217.601600][ T7468] ? clear_bhb_loop+0x40/0x90 [ 217.601628][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.601650][ T7468] RIP: 0033:0x7f0782d9ce59 [ 217.601675][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.601699][ T7468] RSP: 002b:00007f0783b9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.601721][ T7468] RAX: fffffffffffffe00 RBX: 00007f0783015fa8 RCX: 00007f0782d9ce59 [ 217.601736][ T7468] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0783015fa8 [ 217.601749][ T7468] RBP: 00007f0783015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 217.601763][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.601776][ T7468] R13: 00007f0783016038 R14: 00007fff9b6efa40 R15: 00007fff9b6efb28 [ 217.601804][ T7468] [ 220.130491][ T7520] kAFS: Invalid Command on /proc/fs/afs/cells file [ 221.031482][ T7535] input: f as /devices/virtual/input/input26 [ 221.174423][ T7535] netlink: zone id is out of range [ 221.664056][ T7549] FAULT_INJECTION: forcing a failure. [ 221.664056][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 221.724385][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.3.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.724424][ T7549] Tainted: [L]=SOFTLOCKUP [ 221.724432][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.724446][ T7549] Call Trace: [ 221.724453][ T7549] [ 221.724462][ T7549] dump_stack_lvl+0x100/0x190 [ 221.724494][ T7549] should_fail_ex.cold+0x5/0xa [ 221.724524][ T7549] should_failslab+0xc2/0x120 [ 221.724553][ T7549] __kmalloc_cache_noprof+0x7a/0x6f0 [ 221.724588][ T7549] ? copy_ipcs+0x10d/0x7e0 [ 221.724616][ T7549] copy_ipcs+0x10d/0x7e0 [ 221.724641][ T7549] create_new_namespaces+0x20a/0xac0 [ 221.724674][ T7549] ? security_capable+0x80/0x260 [ 221.724714][ T7549] unshare_nsproxy_namespaces+0xf2/0x220 [ 221.724749][ T7549] ksys_unshare+0x438/0xab0 [ 221.724787][ T7549] ? __pfx_ksys_unshare+0x10/0x10 [ 221.724822][ T7549] ? xfd_validate_state+0x129/0x190 [ 221.724856][ T7549] __x64_sys_unshare+0x31/0x40 [ 221.724892][ T7549] do_syscall_64+0x10b/0xf80 [ 221.724927][ T7549] ? clear_bhb_loop+0x40/0x90 [ 221.724960][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.724992][ T7549] RIP: 0033:0x7fa49d39ce59 [ 221.725011][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.725034][ T7549] RSP: 002b:00007fa49e267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.725056][ T7549] RAX: ffffffffffffffda RBX: 00007fa49d615fa0 RCX: 00007fa49d39ce59 [ 221.725079][ T7549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 221.725093][ T7549] RBP: 00007fa49d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 221.725107][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.725120][ T7549] R13: 00007fa49d616038 R14: 00007fa49d615fa0 R15: 00007ffc47672b18 [ 221.725150][ T7549] [ 222.644802][ T7552] FAULT_INJECTION: forcing a failure. [ 222.644802][ T7552] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.726434][ T7552] CPU: 0 UID: 0 PID: 7552 Comm: syz.3.367 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.726469][ T7552] Tainted: [L]=SOFTLOCKUP [ 222.726477][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.726489][ T7552] Call Trace: [ 222.726496][ T7552] [ 222.726504][ T7552] dump_stack_lvl+0x100/0x190 [ 222.726533][ T7552] should_fail_ex.cold+0x5/0xa [ 222.726560][ T7552] get_futex_key+0x295/0x1510 [ 222.726586][ T7552] ? __pfx_get_futex_key+0x10/0x10 [ 222.726607][ T7552] ? lock_acquire+0x1b1/0x370 [ 222.726635][ T7552] futex_wake+0xea/0x530 [ 222.726667][ T7552] ? __pfx_futex_wake+0x10/0x10 [ 222.726695][ T7552] ? exit_mm_release+0x19/0x30 [ 222.726739][ T7552] do_futex+0x32b/0x350 [ 222.726764][ T7552] ? __pfx_do_futex+0x10/0x10 [ 222.726786][ T7552] ? __might_fault+0xc5/0x140 [ 222.726827][ T7552] mm_release+0x24a/0x2f0 [ 222.726856][ T7552] do_exit+0x707/0x2a60 [ 222.726901][ T7552] ? __pfx_do_exit+0x10/0x10 [ 222.726935][ T7552] ? do_raw_spin_lock+0x128/0x260 [ 222.726960][ T7552] ? find_held_lock+0x2b/0x80 [ 222.726988][ T7552] ? get_signal+0x7e0/0x21e0 [ 222.727020][ T7552] do_group_exit+0xd5/0x2a0 [ 222.727042][ T7552] get_signal+0x1ec7/0x21e0 [ 222.727080][ T7552] ? __pfx_get_signal+0x10/0x10 [ 222.727111][ T7552] ? do_futex+0x192/0x350 [ 222.727137][ T7552] arch_do_signal_or_restart+0x91/0x7a0 [ 222.727172][ T7552] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.727217][ T7552] ? rcu_is_watching+0x12/0xc0 [ 222.727247][ T7552] exit_to_user_mode_loop+0x8b/0x4f0 [ 222.727270][ T7552] ? rcu_is_watching+0x12/0xc0 [ 222.727302][ T7552] do_syscall_64+0x6f2/0xf80 [ 222.727334][ T7552] ? clear_bhb_loop+0x40/0x90 [ 222.727361][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.727389][ T7552] RIP: 0033:0x7fa49d39ce59 [ 222.727406][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.727447][ T7552] RSP: 002b:00007fa49e2670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.727468][ T7552] RAX: fffffffffffffe00 RBX: 00007fa49d615fa8 RCX: 00007fa49d39ce59 [ 222.727483][ T7552] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa49d615fa8 [ 222.727497][ T7552] RBP: 00007fa49d615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 222.727510][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.727524][ T7552] R13: 00007fa49d616038 R14: 00007ffc47672a30 R15: 00007ffc47672b18 [ 222.727552][ T7552] [ 224.135412][ T7571] input: f as /devices/virtual/input/input27 [ 225.511624][ T7589] futex_wake_op: syz.3.377 tries to shift op by -2048; fix this program [ 225.550928][ T7589] futex_wake_op: syz.3.377 tries to shift op by -2048; fix this program [ 226.493729][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 226.558669][ T7597] FAULT_INJECTION: forcing a failure. [ 226.558669][ T7597] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.619012][ T7597] CPU: 0 UID: 0 PID: 7597 Comm: syz.4.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.619049][ T7597] Tainted: [L]=SOFTLOCKUP [ 226.619057][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.619070][ T7597] Call Trace: [ 226.619077][ T7597] [ 226.619085][ T7597] dump_stack_lvl+0x100/0x190 [ 226.619115][ T7597] should_fail_ex.cold+0x5/0xa [ 226.619147][ T7597] get_futex_key+0xf78/0x1510 [ 226.619173][ T7597] ? __pfx_get_futex_key+0x10/0x10 [ 226.619195][ T7597] ? lock_acquire+0x1b1/0x370 [ 226.619225][ T7597] futex_wake+0xea/0x530 [ 226.619257][ T7597] ? __pfx_futex_wake+0x10/0x10 [ 226.619299][ T7597] ? exit_mm_release+0x19/0x30 [ 226.619340][ T7597] do_futex+0x32b/0x350 [ 226.619365][ T7597] ? __pfx_do_futex+0x10/0x10 [ 226.619387][ T7597] ? __might_fault+0xc5/0x140 [ 226.619428][ T7597] mm_release+0x24a/0x2f0 [ 226.619457][ T7597] do_exit+0x707/0x2a60 [ 226.619495][ T7597] ? __pfx_do_exit+0x10/0x10 [ 226.619534][ T7597] ? do_raw_spin_lock+0x128/0x260 [ 226.619559][ T7597] ? find_held_lock+0x2b/0x80 [ 226.619587][ T7597] ? get_signal+0x7e0/0x21e0 [ 226.619619][ T7597] do_group_exit+0xd5/0x2a0 [ 226.619640][ T7597] get_signal+0x1ec7/0x21e0 [ 226.619677][ T7597] ? __pfx_get_signal+0x10/0x10 [ 226.619708][ T7597] ? do_futex+0x192/0x350 [ 226.619733][ T7597] arch_do_signal_or_restart+0x91/0x7a0 [ 226.619768][ T7597] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.619811][ T7597] ? rcu_is_watching+0x12/0xc0 [ 226.619841][ T7597] exit_to_user_mode_loop+0x8b/0x4f0 [ 226.619863][ T7597] ? rcu_is_watching+0x12/0xc0 [ 226.619891][ T7597] do_syscall_64+0x6f2/0xf80 [ 226.619924][ T7597] ? clear_bhb_loop+0x40/0x90 [ 226.619950][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.619972][ T7597] RIP: 0033:0x7f0782d9ce59 [ 226.619989][ T7597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.620009][ T7597] RSP: 002b:00007f0783b9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.620030][ T7597] RAX: fffffffffffffe00 RBX: 00007f0783015fa8 RCX: 00007f0782d9ce59 [ 226.620044][ T7597] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0783015fa8 [ 226.620057][ T7597] RBP: 00007f0783015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 226.620070][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.620083][ T7597] R13: 00007f0783016038 R14: 00007fff9b6efa40 R15: 00007fff9b6efb28 [ 226.620111][ T7597] [ 227.956035][ T7625] Setting dangerous option i915.mitigations - tainting kernel [ 227.985269][ T7628] FAULT_INJECTION: forcing a failure. [ 227.985269][ T7628] name failslab, interval 1, probability 0, space 0, times 0 [ 228.033510][ T7627] Setting dangerous option i915.mitigations - tainting kernel [ 228.050184][ T7628] CPU: 0 UID: 0 PID: 7628 Comm: syz.1.386 Tainted: G U L syzkaller #0 PREEMPT(full) [ 228.050222][ T7628] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 228.050231][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.050245][ T7628] Call Trace: [ 228.050252][ T7628] [ 228.050261][ T7628] dump_stack_lvl+0x100/0x190 [ 228.050290][ T7628] should_fail_ex.cold+0x5/0xa [ 228.050320][ T7628] should_failslab+0xc2/0x120 [ 228.050353][ T7628] __kmalloc_cache_noprof+0x7a/0x6f0 [ 228.050387][ T7628] ? alloc_fs_context+0x57/0xf40 [ 228.050426][ T7628] alloc_fs_context+0x57/0xf40 [ 228.050465][ T7628] mq_init_ns+0x16e/0x820 [ 228.050490][ T7628] copy_ipcs+0x3dd/0x7e0 [ 228.050513][ T7628] create_new_namespaces+0x20a/0xac0 [ 228.050545][ T7628] ? security_capable+0x80/0x260 [ 228.050584][ T7628] unshare_nsproxy_namespaces+0xf2/0x220 [ 228.050618][ T7628] ksys_unshare+0x438/0xab0 [ 228.050655][ T7628] ? __pfx_ksys_unshare+0x10/0x10 [ 228.050689][ T7628] ? xfd_validate_state+0x129/0x190 [ 228.050725][ T7628] __x64_sys_unshare+0x31/0x40 [ 228.050760][ T7628] do_syscall_64+0x10b/0xf80 [ 228.050795][ T7628] ? clear_bhb_loop+0x40/0x90 [ 228.050823][ T7628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.050846][ T7628] RIP: 0033:0x7f9271b9ce59 [ 228.050864][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.050886][ T7628] RSP: 002b:00007f9272a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 228.050907][ T7628] RAX: ffffffffffffffda RBX: 00007f9271e15fa0 RCX: 00007f9271b9ce59 [ 228.050922][ T7628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 228.050936][ T7628] RBP: 00007f9271c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 228.050949][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.050962][ T7628] R13: 00007f9271e16038 R14: 00007f9271e15fa0 R15: 00007ffc8fdb47a8 [ 228.050991][ T7628] [ 228.779901][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 228.828773][ T7637] netlink: 28905 bytes leftover after parsing attributes in process `syz.4.389'. [ 229.436278][ T7648] input: f as /devices/virtual/input/input28 [ 230.729183][ T7672] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 230.802292][ T7674] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 231.411014][ T7682] ================================================================== [ 231.411030][ T7682] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 231.411074][ T7682] Write of size 8 at addr ffffc900049f1000 by task syz.2.399/7682 [ 231.411094][ T7682] [ 231.411107][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.2.399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 231.411143][ T7682] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 231.411152][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.411181][ T7682] Call Trace: [ 231.411188][ T7682] [ 231.411197][ T7682] dump_stack_lvl+0x100/0x190 [ 231.411222][ T7682] print_report+0x13d/0x4b0 [ 231.411256][ T7682] ? _raw_spin_lock_irqsave+0x52/0x60 [ 231.411290][ T7682] ? sys_imageblit+0x19fb/0x1d60 [ 231.411323][ T7682] kasan_report+0xdf/0x1d0 [ 231.411358][ T7682] ? sys_imageblit+0x19fb/0x1d60 [ 231.411397][ T7682] sys_imageblit+0x19fb/0x1d60 [ 231.411435][ T7682] ? __asan_memcpy+0x3c/0x60 [ 231.411470][ T7682] ? __pfx_sys_imageblit+0x10/0x10 [ 231.411507][ T7682] ? desc_read+0x2e2/0x380 [ 231.411528][ T7682] ? panic_on_this_cpu+0x32/0x40 [ 231.411565][ T7682] ? _prb_read_valid+0x72a/0x880 [ 231.411588][ T7682] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 231.411618][ T7682] soft_cursor+0x524/0xa10 [ 231.411648][ T7682] ? desc_read+0x2e2/0x380 [ 231.411667][ T7682] ? fb_get_color_depth+0x120/0x250 [ 231.411700][ T7682] bit_cursor+0xca1/0x1490 [ 231.411751][ T7682] ? __pfx_bit_cursor+0x10/0x10 [ 231.411785][ T7682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.411821][ T7682] ? get_color+0x1da/0x450 [ 231.411845][ T7682] ? __pfx_bit_cursor+0x10/0x10 [ 231.411873][ T7682] fbcon_cursor+0x43c/0x5e0 [ 231.411897][ T7682] ? mark_held_locks+0x40/0x70 [ 231.411920][ T7682] hide_cursor+0x87/0x230 [ 231.411951][ T7682] do_con_write+0x2270/0x4a10 [ 231.411988][ T7682] ? trace_contention_end+0x122/0x170 [ 231.412013][ T7682] ? __mutex_lock+0x26d/0x1b10 [ 231.412049][ T7682] ? n_tty_write+0x518/0x11c0 [ 231.412074][ T7682] ? n_tty_write+0x518/0x11c0 [ 231.412101][ T7682] ? __pfx___mutex_lock+0x10/0x10 [ 231.412138][ T7682] ? __pfx_do_con_write+0x10/0x10 [ 231.412176][ T7682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 231.412216][ T7682] ? con_write+0x93/0xb0 [ 231.412253][ T7682] con_write+0x23/0xb0 [ 231.412289][ T7682] n_tty_write+0x431/0x11c0 [ 231.412320][ T7682] ? __pfx_n_tty_write+0x10/0x10 [ 231.412351][ T7682] ? __pfx_woken_wake_function+0x10/0x10 [ 231.412383][ T7682] ? __pfx___might_resched+0x10/0x10 [ 231.412409][ T7682] ? kfree+0x1dd/0x6c0 [ 231.412443][ T7682] ? __pfx_n_tty_write+0x10/0x10 [ 231.412470][ T7682] file_tty_write.isra.0+0x4d2/0x890 [ 231.412510][ T7682] redirected_tty_write+0xd4/0x120 [ 231.412547][ T7682] vfs_write+0x6ac/0x1070 [ 231.412574][ T7682] ? __pfx_redirected_tty_write+0x10/0x10 [ 231.412612][ T7682] ? __pfx_vfs_write+0x10/0x10 [ 231.412638][ T7682] ? find_held_lock+0x2b/0x80 [ 231.412678][ T7682] ksys_write+0x12a/0x250 [ 231.412704][ T7682] ? __pfx_ksys_write+0x10/0x10 [ 231.412732][ T7682] ? rcu_is_watching+0x12/0xc0 [ 231.412762][ T7682] do_syscall_64+0x10b/0xf80 [ 231.412797][ T7682] ? clear_bhb_loop+0x40/0x90 [ 231.412824][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.412848][ T7682] RIP: 0033:0x7f16a9b9ce59 [ 231.412867][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.412890][ T7682] RSP: 002b:00007f16aaa5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.412925][ T7682] RAX: ffffffffffffffda RBX: 00007f16a9e15fa0 RCX: 00007f16a9b9ce59 [ 231.412941][ T7682] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 231.412955][ T7682] RBP: 00007f16a9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 231.412969][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.412983][ T7682] R13: 00007f16a9e16038 R14: 00007f16a9e15fa0 R15: 00007fffb7b82bc8 [ 231.413006][ T7682] [ 231.413014][ T7682] [ 231.413030][ T7682] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc900046f1000 allocated at drm_gem_shmem_vmap_locked+0x553/0x860 [ 231.413072][ T7682] Memory state around the buggy address: [ 231.413084][ T7682] ffffc900049f0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 231.413121][ T7682] ffffc900049f0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 231.413138][ T7682] >ffffc900049f1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.413150][ T7682] ^ [ 231.413162][ T7682] ffffc900049f1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.413178][ T7682] ffffc900049f1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.413191][ T7682] ================================================================== [ 231.425437][ T7682] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 231.425461][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.2.399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 231.425502][ T7682] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 231.425511][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.425526][ T7682] Call Trace: [ 231.425535][ T7682] [ 231.425544][ T7682] dump_stack_lvl+0x100/0x190 [ 231.425573][ T7682] vpanic+0x552/0x970 [ 231.425597][ T7682] ? __pfx_vpanic+0x10/0x10 [ 231.425620][ T7682] ? mark_held_locks+0x40/0x70 [ 231.425645][ T7682] ? sys_imageblit+0x19fb/0x1d60 [ 231.425681][ T7682] panic+0xd1/0xe0 [ 231.425702][ T7682] ? __pfx_panic+0x10/0x10 [ 231.425726][ T7682] ? sys_imageblit+0x19fb/0x1d60 [ 231.425762][ T7682] ? preempt_schedule_common+0x42/0xc0 [ 231.425801][ T7682] check_panic_on_warn.cold+0x19/0x34 [ 231.425827][ T7682] end_report.part.0+0x3a/0x90 [ 231.425862][ T7682] kasan_report.cold+0xe/0x18 [ 231.425897][ T7682] ? sys_imageblit+0x19fb/0x1d60 [ 231.425937][ T7682] sys_imageblit+0x19fb/0x1d60 [ 231.425977][ T7682] ? __asan_memcpy+0x3c/0x60 [ 231.426015][ T7682] ? __pfx_sys_imageblit+0x10/0x10 [ 231.426051][ T7682] ? desc_read+0x2e2/0x380 [ 231.426073][ T7682] ? panic_on_this_cpu+0x32/0x40 [ 231.426112][ T7682] ? _prb_read_valid+0x72a/0x880 [ 231.426138][ T7682] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 231.426169][ T7682] soft_cursor+0x524/0xa10 [ 231.426215][ T7682] ? desc_read+0x2e2/0x380 [ 231.426236][ T7682] ? fb_get_color_depth+0x120/0x250 [ 231.426284][ T7682] bit_cursor+0xca1/0x1490 [ 231.426319][ T7682] ? __pfx_bit_cursor+0x10/0x10 [ 231.426374][ T7682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.426410][ T7682] ? get_color+0x1da/0x450 [ 231.426434][ T7682] ? __pfx_bit_cursor+0x10/0x10 [ 231.426462][ T7682] fbcon_cursor+0x43c/0x5e0 [ 231.426488][ T7682] ? mark_held_locks+0x40/0x70 [ 231.426510][ T7682] hide_cursor+0x87/0x230 [ 231.426541][ T7682] do_con_write+0x2270/0x4a10 [ 231.426577][ T7682] ? trace_contention_end+0x122/0x170 [ 231.426602][ T7682] ? __mutex_lock+0x26d/0x1b10 [ 231.426638][ T7682] ? n_tty_write+0x518/0x11c0 [ 231.426663][ T7682] ? n_tty_write+0x518/0x11c0 [ 231.426689][ T7682] ? __pfx___mutex_lock+0x10/0x10 [ 231.426726][ T7682] ? __pfx_do_con_write+0x10/0x10 [ 231.426763][ T7682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 231.426803][ T7682] ? con_write+0x93/0xb0 [ 231.426840][ T7682] con_write+0x23/0xb0 [ 231.426875][ T7682] n_tty_write+0x431/0x11c0 [ 231.426906][ T7682] ? __pfx_n_tty_write+0x10/0x10 [ 231.426932][ T7682] ? __pfx_woken_wake_function+0x10/0x10 [ 231.426962][ T7682] ? __pfx___might_resched+0x10/0x10 [ 231.426988][ T7682] ? kfree+0x1dd/0x6c0 [ 231.427020][ T7682] ? __pfx_n_tty_write+0x10/0x10 [ 231.427046][ T7682] file_tty_write.isra.0+0x4d2/0x890 [ 231.427086][ T7682] redirected_tty_write+0xd4/0x120 [ 231.427122][ T7682] vfs_write+0x6ac/0x1070 [ 231.427148][ T7682] ? __pfx_redirected_tty_write+0x10/0x10 [ 231.427186][ T7682] ? __pfx_vfs_write+0x10/0x10 [ 231.427211][ T7682] ? find_held_lock+0x2b/0x80 [ 231.427250][ T7682] ksys_write+0x12a/0x250 [ 231.427276][ T7682] ? __pfx_ksys_write+0x10/0x10 [ 231.427303][ T7682] ? rcu_is_watching+0x12/0xc0 [ 231.427333][ T7682] do_syscall_64+0x10b/0xf80 [ 231.427373][ T7682] ? clear_bhb_loop+0x40/0x90 [ 231.427400][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.427425][ T7682] RIP: 0033:0x7f16a9b9ce59 [ 231.427443][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.427466][ T7682] RSP: 002b:00007f16aaa5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.427489][ T7682] RAX: ffffffffffffffda RBX: 00007f16a9e15fa0 RCX: 00007f16a9b9ce59 [ 231.427505][ T7682] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 231.427520][ T7682] RBP: 00007f16a9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 231.427535][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.427549][ T7682] R13: 00007f16a9e16038 R14: 00007f16a9e15fa0 R15: 00007fffb7b82bc8 [ 231.427573][ T7682] [ 231.427650][ T7682] Kernel Offset: disabled