last executing test programs: 13.421246293s ago: executing program 3 (id=388): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r4, 0x1b, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0xc800) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r5, 0x5101, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f00000000c0)=""/147, 0x93) mmap$auto(0x0, 0x8, 0x2, 0x7fffffff, 0xffffffffffffffff, 0x10c) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) 10.005018486s ago: executing program 3 (id=400): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0090000", @ANYRES16=r2, @ANYBLOB="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"], 0x9d0}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/163, 0xa3) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r4, 0x11) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 8.360358606s ago: executing program 2 (id=410): mmap$auto(0x0, 0x402008, 0x8000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x240280, 0x9, 0x2}, 0x18) socket(0x1a, 0xa, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x540, 0x0) pread64$auto(r2, &(0x7f0000004380)='^{\x00', 0x3ff, 0x4c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0xffffffffffffff95}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x2, 0xfffffffffffffffe, 0x3348b8a6) 8.228597218s ago: executing program 3 (id=412): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x40901, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setfsuid$auto(0xee01) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)=@bpf_attr_11={0x7, 0x1, 0x7b3b, 0x9, 0x9, 0x8, 0x7, r3}, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x7ff) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) r5 = epoll_create$auto(0x20009) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, r5, 0x0) socket(0x2b, 0x1, 0x1) ioctl$auto(r0, 0x9, r2) socketpair$auto(0xb7f9, 0x6, 0xfffffffe, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28004) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)}) setsockopt$auto(0x3, 0x1, 0x3, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x8) unshare$auto(0x40000080) sendto$auto(r7, 0x0, 0x1, 0x92b, 0x0, 0x18) 7.784964162s ago: executing program 0 (id=414): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) clone$auto(0x801fd, 0x3, 0x0, 0x0, 0x15) r1 = open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x4ab8f800, 0xa0009, 0x4000000000db, 0x11, 0xffffffffffffffff, 0x18002) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x6a6401, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="460a9c4cb40e0b7cb296c4beecccaf2e40085de50fc374d112f7e9c0dbd4408cc479949294fe2741d3d37142f7c2fafc4306ea79432c8a254120bca26f2061222e152ef9f29f477d9248c883f972a942ee1bd00b000000000000009b366fc997f98a0ff80126d841340e0b14d64a6d6b261fec996952c5fcf037ff58f9a5485c69ecf550da", @ANYBLOB='&\x00', @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r5, &(0x7f0000000180)=""/61, 0xfffffeeb) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) 6.689696693s ago: executing program 2 (id=416): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/v4l-subdev6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x80000, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r0, 0x2400000, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x9, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x80000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="100026bd7000fedbff2503000000080004000800000006000700008000000800513a", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa3a000008000200", @ANYRES32=r4, @ANYBLOB="08000300faffffff"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_gl861/parameters/adapter_nr\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000380)=""/172, 0xac) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0x0) 6.688541599s ago: executing program 0 (id=424): mmap$auto(0x1, 0x20009, 0x2000006b9, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x347b02, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0x52fb, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010031bd7000e4dbdf250c00c9bc"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x9, 0xffffffffffff0001, 0x14) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) 5.336550077s ago: executing program 2 (id=421): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x40041, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x80000001}, 0x20000000, 0x0) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x91, 0x7, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) ioctl$auto_X86_IOC_WRMSR_REGS(r2, 0xc02063a1, &(0x7f0000000000)=[0x2, 0x2, 0x4, 0x0, 0x2, 0x200, 0x3, 0x7]) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 4.496651175s ago: executing program 1 (id=422): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000240)={0xffffffffffffffff, 0x7ff}) mmap$auto(0x0, 0xa00002, 0x0, 0x40e91, r0, 0xfffffffffffff7b1) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(r0, 0x0, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0x401, 0xcc, 0x6, 0x7, 0x2, 0x1ff, 0x5e0, 0x2, 0x408, 0x4618ecd2, 0x1, 0x18, 0x6, 0x9a8e, 0xff, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x400006, 0xcb}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES8=r0, @ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24048054}, 0x44814) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xff, 0x0, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000280), r1) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00032cbd7000fbdbdf250800000077020380aa1d347745d64ccb9e59c85a01b63a410a540411e55b7adeb172af63e302a3b5629f353633658b389a7470a89339a7afe9954fe07df72e9cfd94d78ecf83c643daa8687723cbf4f1716ce6eb77e1cda39d275c84c33bf404fed14a14ad2b757a60d905a8e3a8696f2135f89c3b139d81c12fec29c6405f3ab42fb3a3d4bb5b302ce31f87b5a6fc1407daa574bb9bbf10d6eab7daf865535fdedf1d76829501c0a1cbfc0c021e7f43ffdb31b5f7d8862021e9089ee66f992f0ec693ad78e7d96440d38cd676f34ecaa99fda280ec2582e914f5697df874188125fceb41788ed815d9d104306b3dcd51d05cb01b659d53acd1c632dee928ce910ebbffb493b8dacac64555f2ab0b2bdb53a2406404390c6bdcd6379e06c29ace11dcc116ad0b67dabee97f670a7d177ba9ef68bbefe6df44d0dc0ed1066147c8e0acee458e6626339df8d657366f28c3ff83a1a6e5b6b36759265331dfe89bb821ddce6fcb962c367bfd99f6221a762969054e2c1c328830ebc2f7f16f2810aefdb34d235e258ca7ee8782aefa89c5b463ad26beeb670f0f878f49d1c2aee58d8876126c5635b12566621adfcd975e6611fbf5acd5bd905ca2ace32ffc3858632cc06d4a9bf1bc4125eb652bf2db0e7115c6e673bf86a436e85fc69f3d37d5942496339dfcfcc849532418d708e80c7862557409509d51137a96d844b1e54ac916ee59884d9a6fa07d8d0e9809d8a0afd2224b60953fd78fe64cc1ffb0758449894085a840d042603cb9141fc41c47a7f4ddab18ce6a9879509d477a94daf33f705219c15f3581a2eca38d2f4877b1cd400f4c0ea8c8d220e5e5e341fd7f78cfcc48b90e37b4bdf31d277c6e3bc39571ef051be74a8c23ab751d4000800010000000040"], 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x29882fe5309675a8) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf250d0000000c000600010000000000000008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001340)='/sys/module/l1oip/parameters/limit\x00', 0x80302, 0x0) 4.174577027s ago: executing program 2 (id=423): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x10, 0x9, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='$!.}\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/251, 0xfb) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socket(0xa, 0x1, 0x84) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(0xffffffffffffffff, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000004c0)="e3188176b96f56170e647ad5b75e3e9d5b25824af2509ae55ed5ee191ee9257ac48ac1e8c7ca249fdb72092d4d6cb4b85c6e5e63af6e6386605a2acad0c973ffc78036fb03e7317159be64a299df97910013248ab5d114aa9179182bc486b00af747556837f9ef96271ce9d8c9987a0c8f56", 0x72) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 3.861692899s ago: executing program 3 (id=425): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_submit$auto(0x2, 0x0, &(0x7f0000000040)=&(0x7f0000000000)={0x7fff, 0xb, 0x80008, 0x3, 0x4, 0x3b, 0x2, 0x2, 0x1002, 0x0, 0x7}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x10) write$auto(0x3, 0x0, 0x14) lseek$auto(0x3, 0x2, 0x4) 3.409466114s ago: executing program 0 (id=426): r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000db07abd0c9897d1d7af6a03c10002a3271255e91d83d6ef8d08121e4f588f4fa23078f90a89e64da533dfea2ddf9cfef33185b", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf25100000000800070007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) ppoll$auto(&(0x7f0000000180)={r1, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x8c81, 0x91) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="410025bd7000fcdbdf257f00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) syz_clone3(&(0x7f0000001540)={0x10000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0, {0x2e}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000400)=""/161, &(0x7f0000001500)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r1}}, 0x58) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001600)={'batadv0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000001680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f0000001e00)={0x1554, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEC_MODES={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x124, 0x0, 0x0, @fd=r4}]}, @ETHTOOL_A_FEC_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEC_MODES={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @uid}]}, @ETHTOOL_A_FEC_AUTO={0x5}, @ETHTOOL_A_FEC_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_FEC_MODES={0x145a, 0x2, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @pid=r11}, @generic="30bc9bce60efb548932b8f444b1b2050838a7513920f00bc64b9b06340c45c9e6e8f6f4c56a77453a6059ab98b64eaefa8501a395e294827c80ebcaa6fba719fa0f97551ecc231fdb91b7d8bc8fe23ca0f8c7efe3b3d0c6c1dc2978b924f497aa0625e82a287f263b5b2add697d987e8d8c537261b1e3b0e0a83854469c85c15989027a6a36b249cc38f4cc3c7689e7af8482abc414ce004c92726a1ca619f967446440d471493c1b90c1775747fb4b2899c10c32c2ab6ca8a31ecac795eb16b132c1df1533be36edc0e95c253b8122898837d9b629096e77735653b7edadfc422aee7abb7972668784f099414f312d42d4af45b63b832ab45ecc6934dadb4f47c4696fc11adb2577df97326a11e2a4ac8cb8cb9bef25f14a0610e0a784af3fc14d1f4991dd545f33546e31c6f2bca20d41e5e52b280f74ec6c41a9a8f026ff664a4d3cbb06ffbbd55a920c7fc4981adc78f258a9b59ca703db9c342afb00c9482845d06e3af541310f433e46c21c1e8ca114c32416b5e892929ab45c4f6ce5749c5ed34ec238ed2d7372f8e94e8524d991e89e04a28edd6939ab8c7cbc2efd9a1edd99c777ca02fc4da596fb14fc2d23724e082b73ddaecbb7d8f5594e70b489a10285d21333884c0f36444a828847da8f29af45a614394c27188fa6980dfc57e6ee34a5d9d11dbb63483f7fdaf6f03cc0395f910fa8e2d5f9df05409f680a6697e5583f99f13eed21ac2f440ec12f20a7f1b49e7fbf2741fbf9058f0ed7a4a5e0b7b8b16fdeafff5a1f0b6810accece51251a396c06eb79648f1eb345c69571d993cff84bdb8080eeff3cb3ff774c3bdbaa52c3212b67bf6c59c273957b1b169635d867a51a15d9cccfd0f5dcf008f1ff798ef16e36bb9ccc15874a8c9bf3078395ea3d9b5be058fc3e236a9aee576a863fe4b5e354a56e194e19f490588f2460f7076a27c26a6f2112581c5ee8cfe6520ec14d983e9bdf25b65ecbefbca623495a6820aa9a1909e6954262e1ccfe30dd136447b5d4143074537ce0d053e1d0dd0983e5f7ffe06230f35506208fbd80ea92a25973da2da03ddd54d599c46e4491110dd0da4bb4839761365d4bea809427a4282aeb06a9e20bec73c52f157261f27706e85cb69cf83b482e310021512cddba7de1bace462355adc6f9061cfee9acdbe093bbc28e7079fdc06de463197a112f49fb8b768fdf4d4824179f3ebf10954b7b6dae569347569ec3e4664a17a7df51d1c78da6542bfaad6765950cc15611490b6c55bd7a1ffafdec79f73ea944ed68c1023d10485c9a95d723919a4491b7b2eafbb59f29f00015bdee8cbb250826c990ccf6dec635fb553d432d2830e83c327cfc32e96fab22540d20d80e3947481c7e7ee6833cab949ae181cfc7318a9fb062367092f197a37d4ccb66052d73b97b0e3674d5691a1dcd7001252e19cc6e745a1a1386d66b55d4c869c1b6e7d082a93c71ae89077c5c9cca74ce006431a6bd764b5e7342a9184037064d76e0018ba1ccad0c95f2c400bafeb64f0c89480b026047c2c889a97b852d91eff649bf130c6cf03c9e98884f7f4e5fc5fed9a16f796ee3fcba53b18b6c9c22d8ce6f670259e9eb2cd5988f405c1dd2cc0ae0085f981331963d95ae3af615881253cb128b3b7277633136de9f19b122409ca082d8bd511cedbd91375bd749d6aaddd6204c0a861c172d5e8659d289535997d1cb3e0f2145e71cb88305dc4b0a43262a2061cb33db32fe863bb0a99e99ccdb05bced224a19dad6ec28e9c8058c601731b7ba8466458b16010ad5cd61dd23f5299e6ac0d535f8df348a2c65d9def9f5147bcb2fc1f258bf660c21b490a81677da313aeac9e71bb782fe01aeffac31cc3141451af53c1f72a3c6fc9521176a3f47bd1b1f87c4aced0833b755c12f35fc9d63dabd6bd421e078b786c06ac7665e4aead020dd473bf1123ff975cc8a3a56830145879449ea969c6fae0f21bb485b2051ee094236a1c9cdc3d76e9d2df42d37bdc2cd79cdffec60fb5bf1ef1b95014d77fe7bcf2e39e1b1a0dc5f77a5955a06c1a222a8ec837d9cee8f7ffee91569fe7b6bb7783462ba64b5252db6ef9d714fa12d0fc6beec3b38a3307d41e017048c3b697d278998ad1e8139ad1395c8661ff315be24773a232386cec0eba726b4b8f97aa5802be4a516112083abee9858fd50580b9dcc14cf153fdf59b8f6f72aed40ae482c04ebc85a88502ee568b65fbf124da969b06a58632798f320bf737356d0f1b74175df110a47344960971c87a301382945fc9a05f715f13756e64d5fc8fbe834d77f5af85bde9c4f3a3c7e5e3ecd840c928bc0436d7eccb3fa9a9aae8829becbc2e2bd3d3fb4afd5057f22286cbbf3aab64ecca48dce8ed624ec2a8d6532c023154c967995dc708993df11dec060745b6bfbccd27a01101abf4d946efb663b11069596e72f284b1ba2c7a774c0f0c55592950a0b49a50142f072ea7d79af3930316cfc71e9639945f56433e2271766ebe48acacf8bad9aeacf642278e8f8a076cb1234cb5a7f5e18979674fce4f4f400b1a749433b6fe3a9d705866a142b5f894174e8cd422b1c2a63fc2d115b4f0bd2135f0361f41b21feb8a233bc0cac3487c3448756714cefae7f90d6a52b1165680ccc8bd02be0149626948c36261dc20d6f4edbde80237bdb0650db51cb942baa37303eb0f47d932cf750a4588f69b85df3be4353417f1dcc602c66cbefcd34b3f7e25550f43c59d0ec7fae69e577cb7b6f632bc4d845244ff56ad8c7e14ff02bf7373d1f311c9ceb40fa3d5cb9908151a297ecdf126386eca4f994276040edcf5af13c3346cd277cc6eb22c7c6bf0a078c446ed7df1113ae60f4a0122b3c6cb30e21495d7d456588518a65816a1583261a1e7c7c70580d129054be293a9b1b59535e8fd1a9d9ff4cf1acf0637840ac7c351451adf8508daa997476c60b312b26482db0116072986e0a8af0b95cc4bc335bac0c11f32db84594810853bf125a690efd67aadd400ddb45a6558f9e95b6e583f171a1f14c73c084beed79868e196fd9740df10e6f8d34d20d7bb8a269dc57af12f88939549c7895ada0637acd13120e6e06a67ada624e8bd3afbdacd1848629c6f36fa83885ca6808f7516b1da11178096922dad97c8b3642caa1b3c984d7ab522f88edcd5bd717bf586c1a4dad23dd62eb5a5ddf1771873f981c412f0cb0b2083e7bf7f6a23cebf9138f83ca69c05658e8eca65de7488a9b721554eb6f81ff94aaef39fdcef967736925f1ee70ef21d6f0e67d8072bc5024b3b99f65ac21fefa35af09f4f5a214a921c1643da64f114f2f9b5309938e2d83e1e06544716c9334af998509c88dc24e7d27c0c3a0a0be167b97bf9e1877a9b6f9f14c6f99257b43c8c22a2b58a561ca933a8492a6788ccd34ad01d4f65ac60b190194e6076ad4c231501c2a89f1210f1ed707be4befb6a284eca46b53552ac969ad0fbf54e65685b487f36a88e1ef5288cacf02398152b5972f4fbcdeac5ee43f2d7f3d2b005053d7f95656b472dc01a48635ef63bc07da0323f680ea4327bc17d7d5d29b90e210c62cd97bab87adee0b77e985d2f4a3076922a841c79eac9a62f9074f45d923822dc131caadecb363536355551756b92cb3dbfbd6d91ff394d022c6733013871eb60349f47d17a5f45c23fa8d34f7132b2d8c7c2161cc8d3770f8707e4532837016febc76b80472cda61d2cd1f77f8ddc922ceefa822a1837dfe73d43e9cabf3a92ebefbca0a8dc67e0248c57b8ec840b1572ac19784a52623e1b8b211edb8cee7b3d0d9f7f8fcf3cd12442c00c5f9884e391d2a498948c21b87b9bb3e1979bb2b4881a6cb0e7e6331d18cf6a2853d3ce2081c80145ce8834e2276085f7bd72c457986bb37d535b4c6dc5ab989d04746e44e658e38b868057ca46f0023712df00634c8892f97ff0c81f82a4f8e499fee8c731073bba276b4daba8496e1bfcbba667016b2e1c2f97a3fbde16a860cdd28ca5089abe45d42f7e05172cda3cb2b8e8b5a19947ade0df4c00fa6063a70d76626903e26175f4573e009d42f74de70f41a725732e6e5db590c6f4b2ea3eab8b6c6cbd4ca3cf329ff4d2fb088c53f70428bbcc1aadf3f99d815dc1c5ae331ba1b011007c527900dd80117f9a3879b7e6b9aa1f6791bb8ce3742392492160302aac79de46a11d9d03a12d4668b42c9f84482e68ab9b325ad2f949893f4c54afbe174a741632e46a9ed0245978589fa397ac804abd10a6b7992b6f66ca06fe848ab771596d620e336e744e02bbb2f371c6a5be5110e2d4bc859f2ec2053bf1edb553fd17b7dbf824495a652f31f9df4b1fa370baab802d9989e4186aba82ff6ea252c5b6be39da6b13d6d16b0b31a8b111aa860b5f5f3111e5c3f43af69096348ccc1cac22739ac5ace723d6cd0c04892e4c9f427f8de913e252a5fa2315fbe0ee68744f673abd1ae81899de3408b3622db92dae77fa8072a5f35838501fe31d23c7f4b792e3cde78e6da42444f5c1ba2a57b36b04f97a1ef529b40bfccf3f9ce314462640d95e48c4646ca4109e53f3b031ab3644fea5805aa9be4a286023ba7c26650d533db54a92a2d086cd291713ea41033a30c6dbb0c28f04b0b1314513aead1f2c64356af919c736ea97e8e28b6305f48ef8ece1cd704f9880c2c8028bf6aa479105a97750de4e1aca85f6d39da079ec077478b3de57566334995a4da309403538bbe15ea5de6c1b78f0b2407232f9eb316a3b9d25a771ac7cf3a8462d2f5690deeeead5b179a01af44d3da36544f008953f2bf38b9dcc79c8cfb195f371e57da68e39a544618e0aff584f12a7975579df7d736a54bed3f6a076a4c685fec2b1c85ccddebfe0ab1a85028cc29bf5d9699dff40d49d338f581487ec03482c936b95dc7aedc15d05c6f7034ab64eee8a39c944af2713e99b592f8e5f39ef601cfee7da143145753da4b6c68c6737d337f27fab572752dbf06496350034b8d40b517f8ca9d7b940e40eaef93ae93bdd48cc86be2fb25e6d4d69801bf8190d37ecd43b200689f57ead960134ef5796d41512f32c38045a5a27c74a16da9691a4eaedf23a58d352be8bbfeb8d28fdd54f999af25952a8e7d13dd2e58fef36cb29b4535893787f0ba9e584582fe71a1cc2edb7a1c1b3976b50a87210303f1b68c93207b06137403cd5f2ebabb29efcb5a6e2902926abd32f3879f8c58257adb50a5d0c381957ee7e2b803ef1d22f55d83074de11178defb483e4e61115a8c15f5802858c019a068184575625108c752184cbd5eb23c59ed02402fffa1cff2ba4a752d990f3f1ba0f3c73699d2831b157988dcb76e26a86e738dd6604c6b9998affd7ef8563793ea5c07014b99bf6ba5f108766566906c8ccd2f4effb7e28c7cc40137f0d501c6886b2d9e17a2e7ffbc93ed3132939c596e4af3ce7be716899d3bd39127620e182970d2aae84632dfe80e2a8252eb91619a5d1c33c711cd23cac826eb60f27b45bb2af08286ace627aa9d11e334c358545ff4b42764710227310c71a7ebd4b391475a96b62f80713cccbd2a5497c392505a7934937850600420605dc2b5c1a8551a19b53f2e977c2c9e0bee59e7663a68d85ffd80d32aa284c852ed153bcfbfd3f5964aee9234ec90e064f6097c4a80525944dfe2025d6b68ff71702625424c91a005e3f0258392fa6c2fa213257146e4678e32313e031eec7a02a5a561834b11a77925352788199459f645965eed64806723518949c95af3ee6f28c2d42d156d825d2a9ebf3462", @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xc9, 0x7c, 0x0, 0x1, [@nested={0x4, 0x11e}, @typed={0x8, 0x139, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x154, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x1b}, @nested={0x4, 0x1b}, @generic="2ada571b6c09783d50c87b4235324c4ae03e591af90ce74aeb36d22df6e3972d8be9df395123e21fee2a2277b74302d19c4351f62e673157093588ff1d6bf19626a31d738472108fbf8420b9739a9e2c4d36c26d9b72b990ff7f8427a570484afe6e4a11006595baf02dc72092224f60f97b70814f86b7da61475ae6c7864681152e8ad91e9e57788ecc99ac99b4da5291ad0b3b2c87751087026fc28c", @nested={0x4, 0x123}]}, @typed={0x82, 0x12a, 0x0, 0x0, @binary="9a1a4ad57c45253e97858ba77d46380550b351c370bfdf4de9c2b5cca4f06f759f29a80b8915db24f89dbd05e73c24e2d646c35808760c592e182a6a45e90be85a9de9328e99429f1849fb513d05b768048402e7c77e690894bf51897c12e9819dbef5099eeb259876fc44196eaa07800559ff6390a661c3b07d8f7e5435"}, @nested={0x97, 0x2e, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0xe3}, @generic="35a3df19fd544cebeafe316e962030503361e519983a66d407c4779d", @generic="e8cccf22c98dc4a1654cf1e5c1ce5d968b5676ae57dda4d55aba3312f69380e39ae9d8cae711788f9b1145ba901e7b6152c9c1a2270853b2b2add289924c3304b773f3efbff697fd96bdaf0691aea423fc9d96e724be4a73bf0ea53bd63d7e9cafa0b544d7e231d6338b0f", @nested={0x4, 0x117}]}, @generic="80a1818bcb0d982d18c414c0f03ba86ec40970c0e33f5b68dd542da9db45d771639161d76b0d66e025a1f89c07e93aacc318db7e179394c39e9957047a4f495c6e5d9ced04bb36624c33c3bdf54f5df147b2bb12332096ecebdacf1c818e40ac6377c991dd1e3a652a0dea173e2a0dcd51405a866b5b5c33879836cb3d8b88902d179b1e98b8478f1dfe0193", @generic="cb5d4d08bafa44404508a437e83537b8fcc5c7e25fab3757fb10c6f0e1d62f6a18f2f429a85ceaa185122dc85e7c7cfeb9ed1ae3c841274faec3fbfdac40d4a44d999a716321b7e088ba4cf7b72b7713fe2bdad6ffdd410b86d0ba4024d4c6b05b1cf4272e82dd847ce5b1851dbdcbce8c1ead84dec1e8cfff2f0246f83cdd53348d2eacd9f331d9f1e8aade2c6cf0b942880fdeed06087df2ee69fbabf0134a2725b554d1974a5b50a2db6e9d8c765fd9d66c236594f2b78d615c9e3e419f311fa332b6a4631115647a769e09a60037b78e30e549ac", @nested={0xfa, 0xfd, 0x0, 0x1, [@nested={0x4, 0xe0}, @nested={0x4, 0x10}, @generic="a476440b8eea2c7b2bc5f97bf70cac7d56c83449f35144897c07191ae061bca930b684fa561601accaaf3b560d48fd2ac3d337773235279809c2593fee71fd2cf9cc139c2e0a217cc9e2d961b582cbbf7549bb0d10356569932cae7c81ed063edc78f9d4aa8981518557bbe6e0e18bed531a674694f605ccf11693561317f6f73faddb4730dfe76f2606c93b81b2ddd5d08b891058eb00219c99eac9d687a559e5be1a94dd3e26a5c511c552f0b2fd0e3782", @nested={0x4, 0x2c}, @typed={0x2e, 0x141, 0x0, 0x0, @binary="9b7107f87a44337deaa1e32bb2c025bd81b2fc3f2d298f378f444e6efbc1fff0c98907de9d0363900752"}, @typed={0x4, 0x124}, @nested={0x4, 0x51}]}]}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x5}, @ETHTOOL_A_FEC_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x1554}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) close_range$auto(r3, r0, 0x5) socket(0x11, 0x3, 0x9) r14 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r15 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r14, @ANYRES8=r15], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) write$auto(r14, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2404c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 3.399559736s ago: executing program 1 (id=427): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/v4l-subdev6\x00', 0x8a240, 0x0) read$auto_configfs_file_operations_configfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x13) ioctl$auto(r0, 0x5646, r0) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x80000, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r0, 0x2400000, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x9, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x80000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_gl861/parameters/adapter_nr\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/172, 0xac) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0x0) 3.188466325s ago: executing program 2 (id=428): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x81a0ae8c, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, 0x0, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x80000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, 0xffffffff}, @GTPA_TID={0xc, 0x3, 0x7}, @GTPA_VERSION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040850}, 0x4048040) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="b728973f8849074704b3f4002df06ef9c1924baa0000000000000000000087de000000", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf25000000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040041) socket(0x28, 0x1, 0x0) socket(0x2c, 0x3, 0x0) utimes$auto(0x0, &(0x7f0000000380)={0x0, 0xffffffffffffffff}) socket(0x2, 0x1, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.095208942s ago: executing program 0 (id=429): openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0xa0040, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2f01, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x88442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x7, 0x7, 0xd3e, 0x3, 0x948b, 0x7, 0x1, 0x10001, 0x3, 0x5e, 0x80000001, 0xfffffffffffffff7, 0x6d3c, 0x2000000000000009, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/uapsd_queues\x00', 0x1242, 0x0) socket(0xa, 0x1, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) read$auto(0x3, 0x0, 0x1f40) write$auto(r2, 0x0, 0x9) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 2.35785681s ago: executing program 2 (id=430): bpf$auto(0x8000000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) r0 = socket(0x2c, 0x3, 0x0) getsockopt$auto(r0, 0x11b, 0x8, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) socket(0x8, 0xa, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r3, 0x0, 0x62d4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x4) ioctl$auto(0x3, 0x4, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto_SW_SYNC_GET_DEADLINE(r3, 0xc0105702, &(0x7f0000000040)={0x9}) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START(r4, 0x54a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.33517381s ago: executing program 1 (id=431): socket(0x2, 0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/version\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = getpid() rt_tgsigqueueinfo$auto(r0, 0x0, 0x21, 0x0) prctl$auto(0x0, 0x400, r0, 0x9, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice$auto(r1, 0x0, 0x3ff, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd5/queue/write_zeroes_max_bytes\x00', 0x0, 0x0) socket(0x2, 0x3, 0xa) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/019/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x4b564d03, 0x3, 0x3e}]}) sendfile$auto(0x3, r2, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) setsockopt$auto_SO_BSDCOMPAT(r5, 0x7, 0xe, &(0x7f0000000140)='\x00', 0x9) 1.953194761s ago: executing program 0 (id=432): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1ac}}, 0x801) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/hugepages/hugepages-2048kB/surplus_hugepages\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4105, 0x1009) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c000380080003000400158012000100898771f1c19f1779048590828f470000040002"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x421, 0x7}, 0x9, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.820243668s ago: executing program 3 (id=433): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0xfffffffffffffffd, 0x202000b, 0x3, 0x17, 0xfffffffffffffffa, 0x8002) open(&(0x7f00000001c0)='./file0\x00', 0x591a00, 0x154) (async) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x591a00, 0x154) read$auto(r0, 0x0, 0x7) (async) read$auto(r0, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r2) (async) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r2) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x24}}, 0x40004) write$auto(r4, 0x0, 0x81) (async) write$auto(r4, 0x0, 0x81) bpf$auto(0x0, 0x0, 0x6f4) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xfffffffffffffff7) sendmmsg$auto(r3, 0x0, 0x8, 0xe4) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(0xffffffffffffffff, 0x8, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x80, 0xffffe0ac, @_sigpoll={0x6}}}, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x2, 0x7) (async) r6 = socket(0x0, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) sendto$auto(r6, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r8 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000280)={@_si_pad}, 0xfff, &(0x7f0000000300)={{0xfffffffffffffffc, 0x7}, {0x7ff, 0x401}, 0x6, 0x1, 0xe66f, 0xfff, 0xd, 0x200, 0x7, 0x1129, 0xff, 0x6, 0x3, 0x61d, 0x8, 0x1}) prctl$auto(0x0, 0x6, r8, 0x7ece, 0x80000001) 1.742059665s ago: executing program 1 (id=434): r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2404c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) (fail_nth: 2) 1.625099771s ago: executing program 0 (id=435): setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r1 = getsid$auto(0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x729b83, 0x0) (async) write$auto(r0, 0x0, 0x100000a3dd) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) (async) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, &(0x7f00000002c0)="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") (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) (async) madvise$auto(0x0, 0x400053, 0x9) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/tags_bitmap\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x6c, 0xfc) (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x69) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/cgroup\x00') (async) syz_clone(0x8000400, &(0x7f0000000840)="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", 0x501, 0x0, 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@generic={0xb, "3448ebf343abc2d16d452d494955"}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x18, 0x0, 0x0) (async) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/mem\x00', 0x11bc43, 0x0) 1.136685334s ago: executing program 1 (id=436): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_ratio\x00', 0x141241, 0x0) write$auto(r0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0xffffffffff600700, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003200)={0x14, r3, 0xad36ff18956c1b91, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20045800}, 0x20040000) 817.801653ms ago: executing program 1 (id=437): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x101041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x7, 0x5, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0x104, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}}) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r3, 0x0, 0x0) select$auto(0xd9cb, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffffff8, 0x1e, 0x1, 0x1948d, 0x5, 0x10015f4da0a, 0x10, 0x55daad93, 0x7926, 0x8000001f, 0x2, 0xde, 0xc, 0x2, 0x1]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) r5 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r5, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x2) mmap$auto(0x0, 0x40000b, 0x2, 0x9b72, 0x2, 0x800008002) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r7, r7, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r6, 0x3314, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r4, 0x7, r2) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) 0s ago: executing program 3 (id=438): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/container/PNP0A06:02/power/control\x00', 0x353401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) (async) memfd_secret$auto(0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x17, 0x0) (async) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) (async) setrlimit$auto(0x7ffb, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000340)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) (async) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), 0xffffffffffffffff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) socket(0x11, 0x80003, 0x304) mmap$auto(0x0, 0x1fffffffffff, 0x3, 0xdd59, 0xffffffffffffffff, 0x8002) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 82.528557][ T5811] cgroup: Unknown subsys name 'net' [ 82.655827][ T5811] cgroup: Unknown subsys name 'cpuset' [ 82.664530][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.178207][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.990303][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.000795][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.013280][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.019912][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.021620][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.032715][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.037436][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.043753][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.051508][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.060612][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.070920][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.072264][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.078408][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.086605][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.101423][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.117758][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.126288][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.134325][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.152078][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.166020][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.653061][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.712093][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 86.814097][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.835021][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 86.950315][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.962073][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.969577][ T5825] bridge_slave_0: entered allmulticast mode [ 86.993027][ T5825] bridge_slave_0: entered promiscuous mode [ 87.048622][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.057122][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.064711][ T5825] bridge_slave_1: entered allmulticast mode [ 87.072757][ T5825] bridge_slave_1: entered promiscuous mode [ 87.107932][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.115600][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.123245][ T5823] bridge_slave_0: entered allmulticast mode [ 87.131150][ T5823] bridge_slave_0: entered promiscuous mode [ 87.178602][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.187205][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.194841][ T5823] bridge_slave_1: entered allmulticast mode [ 87.202039][ T5823] bridge_slave_1: entered promiscuous mode [ 87.240998][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.280842][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.321649][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.340228][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.347568][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.355058][ T5824] bridge_slave_0: entered allmulticast mode [ 87.362140][ T5824] bridge_slave_0: entered promiscuous mode [ 87.369457][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.377355][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.384619][ T5822] bridge_slave_0: entered allmulticast mode [ 87.391728][ T5822] bridge_slave_0: entered promiscuous mode [ 87.401712][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.412996][ T5825] team0: Port device team_slave_0 added [ 87.418960][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.426232][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.433822][ T5824] bridge_slave_1: entered allmulticast mode [ 87.440758][ T5824] bridge_slave_1: entered promiscuous mode [ 87.448059][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.455678][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.463428][ T5822] bridge_slave_1: entered allmulticast mode [ 87.470357][ T5822] bridge_slave_1: entered promiscuous mode [ 87.488816][ T5825] team0: Port device team_slave_1 added [ 87.557535][ T5823] team0: Port device team_slave_0 added [ 87.565887][ T5823] team0: Port device team_slave_1 added [ 87.582017][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.594832][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.614459][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.621441][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.647580][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.662281][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.674914][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.704875][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.712040][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.738627][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.776509][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.783753][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.810579][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.824076][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.831056][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.857858][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.882105][ T5822] team0: Port device team_slave_0 added [ 87.906669][ T5824] team0: Port device team_slave_0 added [ 87.915949][ T5824] team0: Port device team_slave_1 added [ 87.938045][ T5822] team0: Port device team_slave_1 added [ 87.985079][ T5825] hsr_slave_0: entered promiscuous mode [ 87.991526][ T5825] hsr_slave_1: entered promiscuous mode [ 88.010108][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.017287][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.043333][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.075695][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.083292][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.109840][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.121689][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.129201][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.156120][ T5834] Bluetooth: hci1: command tx timeout [ 88.156124][ T5840] Bluetooth: hci0: command tx timeout [ 88.156726][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.193498][ T5823] hsr_slave_0: entered promiscuous mode [ 88.199805][ T5823] hsr_slave_1: entered promiscuous mode [ 88.206155][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 88.212393][ T5823] Cannot create hsr debugfs directory [ 88.219036][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.226188][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.252317][ T5834] Bluetooth: hci2: command tx timeout [ 88.252621][ T5834] Bluetooth: hci3: command tx timeout [ 88.258026][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.398109][ T5822] hsr_slave_0: entered promiscuous mode [ 88.404698][ T5822] hsr_slave_1: entered promiscuous mode [ 88.410776][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 88.416765][ T5822] Cannot create hsr debugfs directory [ 88.461125][ T5824] hsr_slave_0: entered promiscuous mode [ 88.467634][ T5824] hsr_slave_1: entered promiscuous mode [ 88.474120][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 88.479944][ T5824] Cannot create hsr debugfs directory [ 88.866835][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.883584][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.904392][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.916881][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.971281][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.991659][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.003818][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.035232][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.115212][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.136411][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.151657][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.162869][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.271514][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.287010][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.298047][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.309647][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.320617][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.379891][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.406065][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.413632][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.441025][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.448175][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.530116][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.600500][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.630251][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.660105][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.693227][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.700416][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.716982][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.733576][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.768116][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.775355][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.794760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.802071][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.817875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.825080][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.849180][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.856388][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.866437][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.873564][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.949694][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.986545][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.143154][ T5825] veth0_vlan: entered promiscuous mode [ 90.209348][ T5825] veth1_vlan: entered promiscuous mode [ 90.233761][ T5834] Bluetooth: hci1: command tx timeout [ 90.239303][ T5834] Bluetooth: hci0: command tx timeout [ 90.289363][ T5825] veth0_macvtap: entered promiscuous mode [ 90.310350][ T5825] veth1_macvtap: entered promiscuous mode [ 90.316856][ T5834] Bluetooth: hci3: command tx timeout [ 90.322400][ T5840] Bluetooth: hci2: command tx timeout [ 90.378288][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.429641][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.488962][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.504838][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.516898][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.532804][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.560194][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.587005][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.607541][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.704236][ T5823] veth0_vlan: entered promiscuous mode [ 90.766598][ T5823] veth1_vlan: entered promiscuous mode [ 90.776999][ T5822] veth0_vlan: entered promiscuous mode [ 90.782543][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.790513][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.820145][ T5824] veth0_vlan: entered promiscuous mode [ 90.838691][ T5822] veth1_vlan: entered promiscuous mode [ 90.869866][ T5824] veth1_vlan: entered promiscuous mode [ 90.890009][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.908411][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.930320][ T5823] veth0_macvtap: entered promiscuous mode [ 90.960104][ T5822] veth0_macvtap: entered promiscuous mode [ 90.988147][ T5822] veth1_macvtap: entered promiscuous mode [ 91.004303][ T5823] veth1_macvtap: entered promiscuous mode [ 91.021261][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.056117][ T5824] veth0_macvtap: entered promiscuous mode [ 91.078909][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.098267][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.134649][ T5824] veth1_macvtap: entered promiscuous mode [ 91.177797][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.190716][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.256168][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.271704][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.312471][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.333615][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.342663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 91.342738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 91.389539][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.410429][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.453025][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.471256][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.511546][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.527220][ T1157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.570752][ T1157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.579566][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.607648][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.623621][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708046][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.716736][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.814878][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.831828][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.906895][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.932583][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.965755][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.999306][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.011706][ T48] cfg80211: failed to load regulatory.db [ 92.097040][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.129387][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.203609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.284138][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.305079][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.322120][ T5834] Bluetooth: hci0: command tx timeout [ 92.327619][ T5840] Bluetooth: hci1: command tx timeout [ 92.392205][ T5834] Bluetooth: hci3: command tx timeout [ 92.397749][ T5840] Bluetooth: hci2: command tx timeout [ 92.776169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.785312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.938789][ T5934] could not allocate digest TFM handle [ 93.135599][ T5945] random: crng reseeded on system resumption [ 93.253118][ T5948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.287716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.297016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.391191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.400093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.412725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.324260][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.394372][ T5961] Bluetooth: hci0: command tx timeout [ 94.400309][ T5961] Bluetooth: hci1: command tx timeout [ 94.466585][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.481931][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 94.482074][ T5970] Bluetooth: hci3: command tx timeout [ 94.491351][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.496822][ T5961] Bluetooth: hci2: command tx timeout [ 94.506184][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 94.517454][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.530185][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 94.597021][ T5972] Lens A: ================= START STATUS ================= [ 94.633464][ T5972] Lens A: Focus, Absolute: 0 [ 94.642168][ T5972] Lens A: ================== END STATUS ================== [ 95.466759][ T5983] binder: 5975:5983 ioctl c018620c 0 returned -1 [ 100.215430][ T6048] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 100.473789][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.515937][ T6054] Zero length message leads to an empty skb [ 100.529463][ T6055] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.446106][ T6085] FAULT_INJECTION: forcing a failure. [ 102.446106][ T6085] name failslab, interval 1, probability 0, space 0, times 1 [ 102.459832][ T6085] CPU: 1 UID: 0 PID: 6085 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) [ 102.459854][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 102.459870][ T6085] Call Trace: [ 102.459876][ T6085] [ 102.459882][ T6085] dump_stack_lvl+0x100/0x190 [ 102.459907][ T6085] should_fail_ex.cold+0x5/0xa [ 102.459939][ T6085] should_failslab+0xc2/0x120 [ 102.459960][ T6085] __kmalloc_cache_noprof+0x80/0x810 [ 102.459976][ T6085] ? percpu_ref_init+0xec/0x3f0 [ 102.459997][ T6085] ? percpu_ref_init+0xec/0x3f0 [ 102.460012][ T6085] ? __pfx_free_ioctx_users+0x10/0x10 [ 102.460029][ T6085] percpu_ref_init+0xec/0x3f0 [ 102.460044][ T6085] ? __init_waitqueue_head+0xca/0x150 [ 102.460068][ T6085] ioctx_alloc+0x2f0/0x21e0 [ 102.460086][ T6085] ? cap_task_prctl+0x104/0xa50 [ 102.460108][ T6085] ? find_held_lock+0x2b/0x80 [ 102.460123][ T6085] ? __pfx_ioctx_alloc+0x10/0x10 [ 102.460146][ T6085] __x64_sys_io_setup+0xc9/0x220 [ 102.460165][ T6085] do_syscall_64+0xc9/0xf80 [ 102.460190][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.460206][ T6085] RIP: 0033:0x7fc26359aeb9 [ 102.460218][ T6085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.460236][ T6085] RSP: 002b:00007fc264487028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 102.460251][ T6085] RAX: ffffffffffffffda RBX: 00007fc263816090 RCX: 00007fc26359aeb9 [ 102.460261][ T6085] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 102.460269][ T6085] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 102.460278][ T6085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.460286][ T6085] R13: 00007fc263816128 R14: 00007fc263816090 R15: 00007ffd0e14b7c8 [ 102.460305][ T6085] [ 103.419777][ T6095] netlink: 338 bytes leftover after parsing attributes in process `syz.2.35'. [ 103.799416][ T6099] netlink: 334 bytes leftover after parsing attributes in process `syz.2.36'. [ 103.855359][ T6100] Lens A: ================= START STATUS ================= [ 103.882672][ T6100] Lens A: Focus, Absolute: 0 [ 103.887348][ T6100] Lens A: ================== END STATUS ================== [ 105.786625][ T6112] syz.1.38 (6112) used greatest stack depth: 19688 bytes left [ 105.929805][ T6133] netlink: 5 bytes leftover after parsing attributes in process `syz.2.43'. [ 106.220952][ T6144] FAULT_INJECTION: forcing a failure. [ 106.220952][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 106.233739][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.2.46 Not tainted syzkaller #0 PREEMPT(full) [ 106.233761][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 106.233770][ T6144] Call Trace: [ 106.233777][ T6144] [ 106.233804][ T6144] dump_stack_lvl+0x100/0x190 [ 106.233828][ T6144] should_fail_ex.cold+0x5/0xa [ 106.233853][ T6144] should_failslab+0xc2/0x120 [ 106.233874][ T6144] __kmalloc_cache_noprof+0x80/0x810 [ 106.233890][ T6144] ? percpu_ref_init+0xec/0x3f0 [ 106.233911][ T6144] ? percpu_ref_init+0xec/0x3f0 [ 106.233926][ T6144] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 106.233941][ T6144] percpu_ref_init+0xec/0x3f0 [ 106.233957][ T6144] ? __init_waitqueue_head+0xca/0x150 [ 106.233981][ T6144] ioctx_alloc+0x3ee/0x21e0 [ 106.234002][ T6144] ? cap_task_prctl+0x104/0xa50 [ 106.234026][ T6144] ? find_held_lock+0x2b/0x80 [ 106.234041][ T6144] ? __pfx_ioctx_alloc+0x10/0x10 [ 106.234063][ T6144] __x64_sys_io_setup+0xc9/0x220 [ 106.234083][ T6144] do_syscall_64+0xc9/0xf80 [ 106.234103][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.234119][ T6144] RIP: 0033:0x7fc26359aeb9 [ 106.234132][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.234146][ T6144] RSP: 002b:00007fc264487028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 106.234161][ T6144] RAX: ffffffffffffffda RBX: 00007fc263816090 RCX: 00007fc26359aeb9 [ 106.234170][ T6144] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 106.234178][ T6144] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 106.234187][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.234195][ T6144] R13: 00007fc263816128 R14: 00007fc263816090 R15: 00007ffd0e14b7c8 [ 106.234214][ T6144] [ 107.658843][ T5970] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 108.733029][ T6199] random: crng reseeded on system resumption [ 108.912433][ T6186] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 109.324550][ T6207] netlink: 146 bytes leftover after parsing attributes in process `syz.0.59'. [ 109.560243][ T6213] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 110.312093][ T30] audit: type=1804 audit(1770547911.076:2): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.61" name="/newroot/sys/kernel/debug/tracing/trace_marker" dev="tracefs" ino=1135 res=1 errno=0 [ 110.392855][ T30] audit: type=1804 audit(1770547911.136:3): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.61" name="/newroot/sys/kernel/debug/tracing/trace_marker" dev="tracefs" ino=1135 res=1 errno=0 [ 111.360787][ T6289] FAULT_INJECTION: forcing a failure. [ 111.360787][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 111.374068][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 111.374090][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 111.374099][ T6289] Call Trace: [ 111.374104][ T6289] [ 111.374110][ T6289] dump_stack_lvl+0x100/0x190 [ 111.374134][ T6289] should_fail_ex.cold+0x5/0xa [ 111.374159][ T6289] should_failslab+0xc2/0x120 [ 111.374180][ T6289] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 111.374200][ T6289] ? __alloc_skb+0x156/0x410 [ 111.374224][ T6289] ? __alloc_skb+0x156/0x410 [ 111.374241][ T6289] __alloc_skb+0x156/0x410 [ 111.374258][ T6289] ? __alloc_skb+0x35d/0x410 [ 111.374276][ T6289] ? __pfx___alloc_skb+0x10/0x10 [ 111.374295][ T6289] ? kasan_quarantine_put+0x104/0x240 [ 111.374312][ T6289] ? local_clock_noinstr+0xd0/0x100 [ 111.374334][ T6289] __pskb_copy_fclone+0xec/0xbd0 [ 111.374353][ T6289] tipc_sk_mcast_rcv+0x7e9/0xf10 [ 111.374375][ T6289] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 111.374391][ T6289] ? __pskb_copy_fclone+0x4a7/0xbd0 [ 111.374413][ T6289] ? find_held_lock+0x2b/0x80 [ 111.374428][ T6289] ? tipc_mcast_xmit+0x6d7/0xfc0 [ 111.374441][ T6289] ? tipc_mcast_xmit+0x6d7/0xfc0 [ 111.374459][ T6289] tipc_mcast_xmit+0x713/0xfc0 [ 111.374471][ T6289] ? __lock_acquire+0x4a5/0x2630 [ 111.374492][ T6289] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 111.374506][ T6289] ? skb_put+0x138/0x180 [ 111.374538][ T6289] ? tipc_send_group_bcast+0x76b/0xa20 [ 111.374558][ T6289] tipc_send_group_bcast+0x76b/0xa20 [ 111.374585][ T6289] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 111.374608][ T6289] ? __pfx_woken_wake_function+0x10/0x10 [ 111.374648][ T6289] ? __pfx_css_rstat_updated+0x10/0x10 [ 111.374667][ T6289] ? aa_label_sk_perm+0x194/0x5f0 [ 111.374694][ T6289] ? __lock_acquire+0x4a5/0x2630 [ 111.374712][ T6289] ? place_entity+0x2fa/0x400 [ 111.374733][ T6289] __tipc_sendmsg+0x4a3/0x1a80 [ 111.374753][ T6289] ? __pfx___tipc_sendmsg+0x10/0x10 [ 111.374767][ T6289] ? __lock_acquire+0x4a5/0x2630 [ 111.374785][ T6289] ? __lock_acquire+0x4a5/0x2630 [ 111.374818][ T6289] ? __local_bh_enable_ip+0x9e/0x120 [ 111.374838][ T6289] tipc_sendmsg+0x4f/0x70 [ 111.374852][ T6289] sock_write_iter+0x566/0x610 [ 111.374869][ T6289] ? __pfx_sock_write_iter+0x10/0x10 [ 111.374884][ T6289] ? futex_unqueue+0x133/0x2c0 [ 111.374908][ T6289] ? __futex_wait+0x256/0x300 [ 111.374926][ T6289] do_iter_readv_writev+0x6ee/0x920 [ 111.374942][ T6289] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 111.374956][ T6289] ? common_file_perm+0x1ab/0x4f0 [ 111.374980][ T6289] ? bpf_lsm_file_permission+0x9/0x10 [ 111.375000][ T6289] ? security_file_permission+0x76/0x210 [ 111.375022][ T6289] ? rw_verify_area+0xce/0x6d0 [ 111.375038][ T6289] vfs_writev+0x360/0xe10 [ 111.375058][ T6289] ? __pfx_vfs_writev+0x10/0x10 [ 111.375086][ T6289] ? __fget_files+0x21f/0x3d0 [ 111.375107][ T6289] ? do_writev+0x28a/0x340 [ 111.375120][ T6289] do_writev+0x28a/0x340 [ 111.375135][ T6289] ? __pfx_do_writev+0x10/0x10 [ 111.375155][ T6289] do_syscall_64+0xc9/0xf80 [ 111.375174][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.375189][ T6289] RIP: 0033:0x7fc8cb19aeb9 [ 111.375220][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.375234][ T6289] RSP: 002b:00007fc8c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 111.375250][ T6289] RAX: ffffffffffffffda RBX: 00007fc8cb416090 RCX: 00007fc8cb19aeb9 [ 111.375260][ T6289] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 111.375270][ T6289] RBP: 00007fc8cb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 111.375279][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.375287][ T6289] R13: 00007fc8cb416128 R14: 00007fc8cb416090 R15: 00007ffd09bfa8f8 [ 111.375308][ T6289] [ 111.375326][ T6289] tipc: Failed to clone mcast rcv buffer [ 113.242260][ T6326] random: crng reseeded on system resumption [ 113.305920][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 113.462882][ T6337] netlink: 342 bytes leftover after parsing attributes in process `syz.3.76'. [ 113.485778][ T6337] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.504207][ T6337] IPv6: Can't replace route, no match found [ 113.530791][ T6337] netlink: 342 bytes leftover after parsing attributes in process `syz.3.76'. [ 113.577606][ T6337] IPv6: Can't replace route, no match found [ 114.113643][ T6353] capability: warning: `syz.0.80' uses 32-bit capabilities (legacy support in use) [ 114.113826][ T6357] sd 0:0:1:0: PR command failed: 1026 [ 114.129014][ T6357] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 114.135877][ T6357] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 114.702125][ T6366] Lens A: ================= START STATUS ================= [ 114.742535][ T6366] Lens A: Focus, Absolute: 0 [ 114.747458][ T6366] Lens A: ================== END STATUS ================== [ 115.543747][ T6374] random: crng reseeded on system resumption [ 117.832596][ T6420] FAULT_INJECTION: forcing a failure. [ 117.832596][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 117.850597][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(full) [ 117.850639][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 117.850656][ T6420] Call Trace: [ 117.850666][ T6420] [ 117.850677][ T6420] dump_stack_lvl+0x100/0x190 [ 117.850731][ T6420] should_fail_ex.cold+0x5/0xa [ 117.850778][ T6420] should_failslab+0xc2/0x120 [ 117.850818][ T6420] __kmalloc_cache_noprof+0x80/0x810 [ 117.850849][ T6420] ? percpu_ref_init+0xec/0x3f0 [ 117.850889][ T6420] ? percpu_ref_init+0xec/0x3f0 [ 117.850920][ T6420] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 117.850951][ T6420] percpu_ref_init+0xec/0x3f0 [ 117.850983][ T6420] ? __init_waitqueue_head+0xca/0x150 [ 117.851031][ T6420] ioctx_alloc+0x3ee/0x21e0 [ 117.851066][ T6420] ? cap_task_prctl+0x104/0xa50 [ 117.851111][ T6420] ? find_held_lock+0x2b/0x80 [ 117.851139][ T6420] ? __pfx_ioctx_alloc+0x10/0x10 [ 117.851184][ T6420] __x64_sys_io_setup+0xc9/0x220 [ 117.851221][ T6420] do_syscall_64+0xc9/0xf80 [ 117.851270][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.851298][ T6420] RIP: 0033:0x7fc26359aeb9 [ 117.851325][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.851352][ T6420] RSP: 002b:00007fc264487028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 117.851380][ T6420] RAX: ffffffffffffffda RBX: 00007fc263816090 RCX: 00007fc26359aeb9 [ 117.851399][ T6420] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 117.851417][ T6420] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 117.851435][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.851451][ T6420] R13: 00007fc263816128 R14: 00007fc263816090 R15: 00007ffd0e14b7c8 [ 117.851490][ T6420] [ 118.724302][ T6428] Lens A: ================= START STATUS ================= [ 118.773283][ T6428] Lens A: Focus, Absolute: 0 [ 118.791606][ T6428] Lens A: ================== END STATUS ================== [ 119.357993][ T6443] FAULT_INJECTION: forcing a failure. [ 119.357993][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 119.371413][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 119.371443][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 119.371452][ T6443] Call Trace: [ 119.371457][ T6443] [ 119.371463][ T6443] dump_stack_lvl+0x100/0x190 [ 119.371486][ T6443] should_fail_ex.cold+0x5/0xa [ 119.371511][ T6443] should_failslab+0xc2/0x120 [ 119.371532][ T6443] __kmalloc_cache_noprof+0x80/0x810 [ 119.371548][ T6443] ? percpu_ref_init+0xec/0x3f0 [ 119.371569][ T6443] ? percpu_ref_init+0xec/0x3f0 [ 119.371584][ T6443] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 119.371599][ T6443] percpu_ref_init+0xec/0x3f0 [ 119.371615][ T6443] ? __init_waitqueue_head+0xca/0x150 [ 119.371640][ T6443] ioctx_alloc+0x3ee/0x21e0 [ 119.371658][ T6443] ? cap_task_prctl+0x104/0xa50 [ 119.371680][ T6443] ? find_held_lock+0x2b/0x80 [ 119.371694][ T6443] ? __pfx_ioctx_alloc+0x10/0x10 [ 119.371723][ T6443] __x64_sys_io_setup+0xc9/0x220 [ 119.371755][ T6443] do_syscall_64+0xc9/0xf80 [ 119.371798][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.371815][ T6443] RIP: 0033:0x7fc46079aeb9 [ 119.371828][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.371842][ T6443] RSP: 002b:00007fc461615028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 119.371858][ T6443] RAX: ffffffffffffffda RBX: 00007fc460a16090 RCX: 00007fc46079aeb9 [ 119.371868][ T6443] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 119.371877][ T6443] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 119.371887][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.371900][ T6443] R13: 00007fc460a16128 R14: 00007fc460a16090 R15: 00007fff4c8e5548 [ 119.371919][ T6443] [ 120.413413][ T6462] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.966692][ T6478] netlink: 266 bytes leftover after parsing attributes in process `syz.3.100'. [ 121.066757][ T6478] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.601282][ T6495] mmap: syz.2.104 (6495) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.720367][ T6525] FAULT_INJECTION: forcing a failure. [ 122.720367][ T6525] name failslab, interval 1, probability 0, space 0, times 0 [ 122.817298][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 122.817333][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 122.817347][ T6525] Call Trace: [ 122.817356][ T6525] [ 122.817365][ T6525] dump_stack_lvl+0x100/0x190 [ 122.817401][ T6525] should_fail_ex.cold+0x5/0xa [ 122.817441][ T6525] should_failslab+0xc2/0x120 [ 122.817476][ T6525] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 122.817504][ T6525] ? tcp_assign_congestion_control+0x186/0x6c0 [ 122.817537][ T6525] ? tcp_assign_congestion_control+0x186/0x6c0 [ 122.817567][ T6525] ? __d_alloc+0x34/0xa80 [ 122.817601][ T6525] ? __d_alloc+0x34/0xa80 [ 122.817626][ T6525] __d_alloc+0x34/0xa80 [ 122.817657][ T6525] d_alloc_pseudo+0x1c/0xc0 [ 122.817677][ T6525] alloc_file_pseudo+0xcf/0x230 [ 122.817710][ T6525] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 122.817744][ T6525] ? alloc_fd+0x476/0x790 [ 122.817777][ T6525] sock_alloc_file+0x50/0x210 [ 122.817815][ T6525] __sys_socket+0x1c0/0x260 [ 122.817841][ T6525] ? fput+0x79/0x100 [ 122.817871][ T6525] ? __pfx___sys_socket+0x10/0x10 [ 122.817896][ T6525] ? xfd_validate_state+0x129/0x190 [ 122.817942][ T6525] __x64_sys_socket+0x72/0xb0 [ 122.817970][ T6525] ? lockdep_hardirqs_on+0x78/0x100 [ 122.818007][ T6525] do_syscall_64+0xc9/0xf80 [ 122.818041][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.818066][ T6525] RIP: 0033:0x7fc26359aeb9 [ 122.818092][ T6525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.818116][ T6525] RSP: 002b:00007fc2644a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 122.818139][ T6525] RAX: ffffffffffffffda RBX: 00007fc263815fa0 RCX: 00007fc26359aeb9 [ 122.818154][ T6525] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 122.818167][ T6525] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 122.818180][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.818193][ T6525] R13: 00007fc263816038 R14: 00007fc263815fa0 R15: 00007ffd0e14b7c8 [ 122.818226][ T6525] [ 123.485891][ T6550] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 123.821518][ T6550] input: failed to attach handler evdev to device input5, error: -4 [ 124.318855][ T6573] netlink: 'syz.2.116': attribute type 7 has an invalid length. [ 124.330858][ T6573] netlink: 17 bytes leftover after parsing attributes in process `syz.2.116'. [ 124.543743][ T6586] Lens A: ================= START STATUS ================= [ 124.576480][ T6586] Lens A: Focus, Absolute: 0 [ 124.581258][ T6586] Lens A: ================== END STATUS ================== [ 124.924158][ T6602] FAULT_INJECTION: forcing a failure. [ 124.924158][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 124.989006][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(full) [ 124.989045][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 124.989061][ T6602] Call Trace: [ 124.989070][ T6602] [ 124.989080][ T6602] dump_stack_lvl+0x100/0x190 [ 124.989129][ T6602] should_fail_ex.cold+0x5/0xa [ 124.989178][ T6602] should_failslab+0xc2/0x120 [ 124.989217][ T6602] ? memcg_list_lru_alloc+0x4ec/0x740 [ 124.989251][ T6602] __kmalloc_noprof+0xf6/0x9c0 [ 124.989291][ T6602] ? memcg_list_lru_alloc+0x4ec/0x740 [ 124.989324][ T6602] memcg_list_lru_alloc+0x4ec/0x740 [ 124.989365][ T6602] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 124.989398][ T6602] ? rcu_read_unlock+0x17/0x60 [ 124.989447][ T6602] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 124.989482][ T6602] __memcg_slab_post_alloc_hook+0x12e/0x880 [ 124.989529][ T6602] ? kasan_save_track+0x14/0x30 [ 124.989567][ T6602] kmem_cache_alloc_lru_noprof+0x606/0x7d0 [ 124.989605][ T6602] ? rcu_is_watching+0x12/0xc0 [ 124.989632][ T6602] ? alloc_inode+0x183/0x250 [ 124.989677][ T6602] ? alloc_inode+0x183/0x250 [ 124.989715][ T6602] alloc_inode+0x183/0x250 [ 124.989755][ T6602] alloc_anon_inode+0x2a/0x3e0 [ 124.989790][ T6602] ioctx_alloc+0x4dc/0x21e0 [ 124.989824][ T6602] ? cap_task_prctl+0x104/0xa50 [ 124.989868][ T6602] ? find_held_lock+0x2b/0x80 [ 124.989896][ T6602] ? __pfx_ioctx_alloc+0x10/0x10 [ 124.989940][ T6602] __x64_sys_io_setup+0xc9/0x220 [ 124.989978][ T6602] do_syscall_64+0xc9/0xf80 [ 124.990014][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.990043][ T6602] RIP: 0033:0x7fc46079aeb9 [ 124.990065][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.990091][ T6602] RSP: 002b:00007fc461615028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 124.990125][ T6602] RAX: ffffffffffffffda RBX: 00007fc460a16090 RCX: 00007fc46079aeb9 [ 124.990144][ T6602] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 124.990161][ T6602] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 124.990178][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.990194][ T6602] R13: 00007fc460a16128 R14: 00007fc460a16090 R15: 00007fff4c8e5548 [ 124.990232][ T6602] [ 125.661583][ T6616] netlink: 350 bytes leftover after parsing attributes in process `syz.1.123'. [ 125.892603][ T6629] netlink: 'syz.0.126': attribute type 7 has an invalid length. [ 125.900293][ T6629] netlink: 17 bytes leftover after parsing attributes in process `syz.0.126'. [ 125.939186][ T6632] futex_wake_op: syz.1.128 tries to shift op by -1; fix this program [ 125.965172][ T6632] FAULT_INJECTION: forcing a failure. [ 125.965172][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 126.005086][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(full) [ 126.005128][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.005156][ T6632] Call Trace: [ 126.005166][ T6632] [ 126.005177][ T6632] dump_stack_lvl+0x100/0x190 [ 126.005218][ T6632] should_fail_ex.cold+0x5/0xa [ 126.005266][ T6632] should_failslab+0xc2/0x120 [ 126.005306][ T6632] kmem_cache_alloc_noprof+0x83/0x780 [ 126.005341][ T6632] ? fsnotify_add_mark_locked+0x2fd/0xfc0 [ 126.005380][ T6632] ? fsnotify_add_mark_locked+0x30e/0xfc0 [ 126.005425][ T6632] ? fsnotify_add_mark_locked+0x30e/0xfc0 [ 126.005463][ T6632] fsnotify_add_mark_locked+0x30e/0xfc0 [ 126.005513][ T6632] do_fanotify_mark+0x3033/0x4010 [ 126.005558][ T6632] ? __pfx_do_fanotify_mark+0x10/0x10 [ 126.005590][ T6632] ? __x64_sys_futex+0x358/0x4d0 [ 126.005633][ T6632] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 126.005680][ T6632] ? syscall_user_dispatch+0x76/0x130 [ 126.005735][ T6632] __x64_sys_fanotify_mark+0xbd/0x160 [ 126.005764][ T6632] ? do_syscall_64+0x94/0xf80 [ 126.005801][ T6632] do_syscall_64+0xc9/0xf80 [ 126.005838][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.005866][ T6632] RIP: 0033:0x7f0cb7f9aeb9 [ 126.005889][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.005915][ T6632] RSP: 002b:00007f0cb8e3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 126.005943][ T6632] RAX: ffffffffffffffda RBX: 00007f0cb8215fa0 RCX: 00007f0cb7f9aeb9 [ 126.005962][ T6632] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 126.005978][ T6632] RBP: 00007f0cb8008c1f R08: 0000000000000000 R09: 0000000000000000 [ 126.005995][ T6632] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 126.006011][ T6632] R13: 00007f0cb8216038 R14: 00007f0cb8215fa0 R15: 00007ffc119b3df8 [ 126.006054][ T6632] [ 126.872783][ T6674] input: f as /devices/virtual/input/input6 [ 127.213067][ T797] Process accounting resumed [ 127.281431][ T6692] FAULT_INJECTION: forcing a failure. [ 127.281431][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 127.281623][ T6693] netlink: 'syz.0.137': attribute type 7 has an invalid length. [ 127.340457][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.2.135 Not tainted syzkaller #0 PREEMPT(full) [ 127.340498][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 127.340515][ T6692] Call Trace: [ 127.340524][ T6692] [ 127.340535][ T6692] dump_stack_lvl+0x100/0x190 [ 127.340576][ T6692] should_fail_ex.cold+0x5/0xa [ 127.340624][ T6692] should_failslab+0xc2/0x120 [ 127.340665][ T6692] __kmalloc_cache_noprof+0x80/0x810 [ 127.340695][ T6692] ? percpu_ref_init+0xec/0x3f0 [ 127.340735][ T6692] ? percpu_ref_init+0xec/0x3f0 [ 127.340763][ T6692] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 127.340792][ T6692] percpu_ref_init+0xec/0x3f0 [ 127.340821][ T6692] ? __init_waitqueue_head+0xca/0x150 [ 127.340869][ T6692] ioctx_alloc+0x3ee/0x21e0 [ 127.340911][ T6692] ? cap_task_prctl+0x104/0xa50 [ 127.340956][ T6692] ? find_held_lock+0x2b/0x80 [ 127.340985][ T6692] ? __pfx_ioctx_alloc+0x10/0x10 [ 127.341032][ T6692] __x64_sys_io_setup+0xc9/0x220 [ 127.341071][ T6692] do_syscall_64+0xc9/0xf80 [ 127.341108][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.341136][ T6692] RIP: 0033:0x7fc26359aeb9 [ 127.341158][ T6692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.341183][ T6692] RSP: 002b:00007fc264487028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 127.341210][ T6692] RAX: ffffffffffffffda RBX: 00007fc263816090 RCX: 00007fc26359aeb9 [ 127.341228][ T6692] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 127.341245][ T6692] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 127.341260][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.341276][ T6692] R13: 00007fc263816128 R14: 00007fc263816090 R15: 00007ffd0e14b7c8 [ 127.341315][ T6692] [ 127.343853][ T6693] netlink: 17 bytes leftover after parsing attributes in process `syz.0.137'. [ 127.935378][ T6715] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.028173][ T6694] Process accounting resumed [ 129.039971][ T6754] : Can't lookup blockdev [ 129.443338][ T6766] netlink: 'syz.1.146': attribute type 7 has an invalid length. [ 129.471889][ T6766] netlink: 17 bytes leftover after parsing attributes in process `syz.1.146'. [ 129.758761][ T6774] sysfs_service_op_show: Client not running :-5: [ 130.218727][ T6786] NFSD: Failed to start, no listeners configured. [ 130.331495][ T6777] bridge0: port 3(netdevsim0) entered blocking state [ 130.340031][ T6777] bridge0: port 3(netdevsim0) entered disabled state [ 130.429841][ T6777] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 130.452287][ T6777] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 130.516877][ T6777] FAULT_INJECTION: forcing a failure. [ 130.516877][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 130.659722][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT(full) [ 130.659764][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 130.659781][ T6777] Call Trace: [ 130.659791][ T6777] [ 130.659802][ T6777] dump_stack_lvl+0x100/0x190 [ 130.659842][ T6777] should_fail_ex.cold+0x5/0xa [ 130.659889][ T6777] should_failslab+0xc2/0x120 [ 130.659930][ T6777] __kmalloc_cache_noprof+0x80/0x810 [ 130.659961][ T6777] ? nbp_vlan_init+0x163/0x500 [ 130.659996][ T6777] ? __pfx___alloc_skb+0x10/0x10 [ 130.660042][ T6777] ? nbp_vlan_init+0x163/0x500 [ 130.660077][ T6777] nbp_vlan_init+0x163/0x500 [ 130.660115][ T6777] ? __pfx_nbp_vlan_init+0x10/0x10 [ 130.660157][ T6777] ? __local_bh_enable_ip+0x9e/0x120 [ 130.660191][ T6777] ? lockdep_hardirqs_on+0x78/0x100 [ 130.660222][ T6777] ? br_fdb_add_local+0x43/0x60 [ 130.660247][ T6777] ? __local_bh_enable_ip+0x9e/0x120 [ 130.660285][ T6777] br_add_if+0xf79/0x1b40 [ 130.660332][ T6777] add_del_if+0x114/0x160 [ 130.660372][ T6777] br_dev_siocdevprivate+0x8ac/0x1650 [ 130.660412][ T6777] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 130.660477][ T6777] ? lock_acquire+0x17c/0x330 [ 130.660519][ T6777] ? __pfx___might_resched+0x10/0x10 [ 130.660569][ T6777] ? netdev_name_node_lookup+0x107/0x150 [ 130.660604][ T6777] ? __mutex_lock+0x26a/0x1b90 [ 130.660640][ T6777] dev_ifsioc+0xc15/0x1eb0 [ 130.660679][ T6777] ? __pfx_dev_ifsioc+0x10/0x10 [ 130.660713][ T6777] ? __pfx___mutex_lock+0x10/0x10 [ 130.660758][ T6777] ? dev_load+0x8e/0x240 [ 130.660789][ T6777] ? dev_load+0x8e/0x240 [ 130.660830][ T6777] dev_ioctl+0x70e/0x1070 [ 130.660870][ T6777] sock_ioctl+0x494/0x6b0 [ 130.660902][ T6777] ? __pfx_sock_ioctl+0x10/0x10 [ 130.660946][ T6777] ? __pfx_sock_ioctl+0x10/0x10 [ 130.660977][ T6777] __x64_sys_ioctl+0x18e/0x210 [ 130.661016][ T6777] do_syscall_64+0xc9/0xf80 [ 130.661048][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.661074][ T6777] RIP: 0033:0x7fc26359aeb9 [ 130.661094][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.661119][ T6777] RSP: 002b:00007fc2644a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.661142][ T6777] RAX: ffffffffffffffda RBX: 00007fc263815fa0 RCX: 00007fc26359aeb9 [ 130.661160][ T6777] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 130.661175][ T6777] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 130.661189][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.661202][ T6777] R13: 00007fc263816038 R14: 00007fc263815fa0 R15: 00007ffd0e14b7c8 [ 130.661235][ T6777] [ 130.781853][ T6777] netdevsim netdevsim2 netdevsim0: failed to initialize vlan filtering on this port [ 131.048609][ T6777] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 131.788024][ T6828] netlink: 'syz.2.157': attribute type 7 has an invalid length. [ 131.838586][ T6828] netlink: 17 bytes leftover after parsing attributes in process `syz.2.157'. [ 131.981617][ T6833] netlink: 130 bytes leftover after parsing attributes in process `syz.3.159'. [ 132.122476][ T6839] netlink: 'syz.2.160': attribute type 11 has an invalid length. [ 132.130449][ T6839] netlink: 'syz.2.160': attribute type 11 has an invalid length. [ 132.140746][ T6839] FAULT_INJECTION: forcing a failure. [ 132.140746][ T6839] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 132.157528][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: syz.2.160 Not tainted syzkaller #0 PREEMPT(full) [ 132.157550][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.157559][ T6839] Call Trace: [ 132.157564][ T6839] [ 132.157570][ T6839] dump_stack_lvl+0x100/0x190 [ 132.157595][ T6839] should_fail_ex.cold+0x5/0xa [ 132.157616][ T6839] ? prepare_alloc_pages+0x16d/0x5f0 [ 132.157639][ T6839] should_fail_alloc_page+0xeb/0x140 [ 132.157661][ T6839] prepare_alloc_pages+0x1f0/0x5f0 [ 132.157682][ T6839] ? rcu_is_watching+0x12/0xc0 [ 132.157699][ T6839] __alloc_frozen_pages_noprof+0x193/0x2410 [ 132.157718][ T6839] ? __lock_acquire+0x4a5/0x2630 [ 132.157744][ T6839] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.157762][ T6839] ? do_raw_spin_lock+0x128/0x260 [ 132.157784][ T6839] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.157806][ T6839] ? find_held_lock+0x2b/0x80 [ 132.157825][ T6839] ? __lock_acquire+0x4a5/0x2630 [ 132.157843][ T6839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.157860][ T6839] ? policy_nodemask+0xed/0x4f0 [ 132.157881][ T6839] alloc_pages_mpol+0x1fb/0x550 [ 132.157901][ T6839] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.157921][ T6839] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 132.157941][ T6839] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 132.157963][ T6839] folio_alloc_mpol_noprof+0x36/0x340 [ 132.157987][ T6839] shmem_alloc_folio+0x135/0x160 [ 132.158002][ T6839] shmem_alloc_and_add_folio+0x371/0xd40 [ 132.158024][ T6839] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 132.158043][ T6839] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 132.158065][ T6839] shmem_get_folio_gfp+0x6ab/0x1900 [ 132.158093][ T6839] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 132.158113][ T6839] ? filemap_map_pages+0x9e0/0x2110 [ 132.158135][ T6839] shmem_fault+0x1f9/0xa20 [ 132.158153][ T6839] ? __lock_acquire+0x4a5/0x2630 [ 132.158171][ T6839] ? __pfx_shmem_fault+0x10/0x10 [ 132.158193][ T6839] ? __pfx_filemap_map_pages+0x10/0x10 [ 132.158217][ T6839] __do_fault+0x10d/0x550 [ 132.158238][ T6839] do_fault+0xaf9/0x1990 [ 132.158262][ T6839] __handle_mm_fault+0x1807/0x2b50 [ 132.158281][ T6839] ? mt_find+0x45e/0x8e0 [ 132.158300][ T6839] ? __pfx___handle_mm_fault+0x10/0x10 [ 132.158315][ T6839] ? __pfx_mt_find+0x10/0x10 [ 132.158350][ T6839] ? find_vma+0xbf/0x140 [ 132.158370][ T6839] ? __pfx_find_vma+0x10/0x10 [ 132.158391][ T6839] handle_mm_fault+0x36d/0xa20 [ 132.158411][ T6839] do_user_addr_fault+0x74c/0x12f0 [ 132.158434][ T6839] exc_page_fault+0x6f/0xd0 [ 132.158452][ T6839] asm_exc_page_fault+0x26/0x30 [ 132.158466][ T6839] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 132.158488][ T6839] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 132.158503][ T6839] RSP: 0018:ffffc900039af428 EFLAGS: 00050202 [ 132.158515][ T6839] RAX: 0000000000000001 RBX: 000000000000ffcc RCX: 000000000000aed0 [ 132.158524][ T6839] RDX: 0000000000000001 RSI: 0000000000015000 RDI: ffff88804dd8510c [ 132.158533][ T6839] RBP: ffffc900039afb40 R08: 0000000000000001 R09: ffffed1009bb1ffb [ 132.158542][ T6839] R10: ffff88804dd8ffdb R11: 0000000000000000 R12: 000000000000ff04 [ 132.158550][ T6839] R13: 000000000000ff04 R14: 000000000000ffcc R15: ffffc900039afb48 [ 132.158569][ T6839] _copy_from_iter+0x498/0x1690 [ 132.158596][ T6839] ? __pfx__copy_from_iter+0x10/0x10 [ 132.158616][ T6839] ? sctp_addto_chunk+0xfa/0x2a0 [ 132.158635][ T6839] ? __asan_memcpy+0x3c/0x60 [ 132.158651][ T6839] ? sctp_make_datafrag_empty+0x1a4/0x230 [ 132.158680][ T6839] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 132.158702][ T6839] sctp_user_addto_chunk+0x84/0x240 [ 132.158724][ T6839] sctp_datamsg_from_user+0x60b/0x1360 [ 132.158751][ T6839] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 132.158773][ T6839] ? __asan_memset+0x30/0x50 [ 132.158788][ T6839] ? sctp_assoc_set_primary+0x276/0x310 [ 132.158810][ T6839] ? sctp_assoc_add_peer+0x252/0x14f0 [ 132.158827][ T6839] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 132.158847][ T6839] ? sctp_connect_new_asoc+0x41e/0x770 [ 132.158863][ T6839] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 132.158877][ T6839] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 132.158898][ T6839] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 132.158921][ T6839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.158939][ T6839] sctp_sendmsg+0x1185/0x22b0 [ 132.158958][ T6839] ? __pfx_sctp_sendmsg+0x10/0x10 [ 132.158972][ T6839] ? __lock_acquire+0x4a5/0x2630 [ 132.158993][ T6839] ? aa_sk_perm+0x2de/0xb40 [ 132.159016][ T6839] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.159041][ T6839] ? __pfx_sctp_sendmsg+0x10/0x10 [ 132.159057][ T6839] inet_sendmsg+0x11c/0x140 [ 132.159074][ T6839] ____sys_sendmsg+0x9ad/0xc30 [ 132.159092][ T6839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.159110][ T6839] ? futex_unqueue+0x133/0x2c0 [ 132.159128][ T6839] ? futex_unqueue+0x133/0x2c0 [ 132.159150][ T6839] ___sys_sendmsg+0x190/0x1e0 [ 132.159168][ T6839] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.159184][ T6839] ? __pfx___futex_wait+0x10/0x10 [ 132.159219][ T6839] __sys_sendmmsg+0x205/0x430 [ 132.159243][ T6839] ? __pfx___sys_sendmmsg+0x10/0x10 [ 132.159269][ T6839] ? __pfx_do_futex+0x10/0x10 [ 132.159297][ T6839] ? xfd_validate_state+0x129/0x190 [ 132.159324][ T6839] __x64_sys_sendmmsg+0x9c/0x100 [ 132.159352][ T6839] ? lockdep_hardirqs_on+0x78/0x100 [ 132.159370][ T6839] do_syscall_64+0xc9/0xf80 [ 132.159389][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.159404][ T6839] RIP: 0033:0x7fc26359aeb9 [ 132.159417][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.159431][ T6839] RSP: 002b:00007fc2644a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 132.159444][ T6839] RAX: ffffffffffffffda RBX: 00007fc263815fa0 RCX: 00007fc26359aeb9 [ 132.159454][ T6839] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000003 [ 132.159463][ T6839] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 132.159472][ T6839] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 132.159481][ T6839] R13: 00007fc263816038 R14: 00007fc263815fa0 R15: 00007ffd0e14b7c8 [ 132.159501][ T6839] [ 132.926759][ T6844] nfs: Unknown parameter 'm?LH>「^eko}* ' [ 132.956338][ T6844] FAULT_INJECTION: forcing a failure. [ 132.956338][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 132.975032][ T6844] CPU: 1 UID: 0 PID: 6844 Comm: syz.3.162 Not tainted syzkaller #0 PREEMPT(full) [ 132.975069][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.975084][ T6844] Call Trace: [ 132.975094][ T6844] [ 132.975104][ T6844] dump_stack_lvl+0x100/0x190 [ 132.975143][ T6844] should_fail_ex.cold+0x5/0xa [ 132.975190][ T6844] should_failslab+0xc2/0x120 [ 132.975228][ T6844] ? memcg_list_lru_alloc+0x4ec/0x740 [ 132.975261][ T6844] __kmalloc_noprof+0xf6/0x9c0 [ 132.975300][ T6844] ? memcg_list_lru_alloc+0x4ec/0x740 [ 132.975332][ T6844] memcg_list_lru_alloc+0x4ec/0x740 [ 132.975376][ T6844] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 132.975408][ T6844] ? rcu_read_unlock+0x17/0x60 [ 132.975457][ T6844] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 132.975493][ T6844] __memcg_slab_post_alloc_hook+0x12e/0x880 [ 132.975539][ T6844] ? kasan_save_track+0x14/0x30 [ 132.975583][ T6844] kmem_cache_alloc_lru_noprof+0x606/0x7d0 [ 132.975623][ T6844] ? rcu_is_watching+0x12/0xc0 [ 132.975652][ T6844] ? alloc_inode+0x183/0x250 [ 132.975702][ T6844] ? alloc_inode+0x183/0x250 [ 132.975739][ T6844] alloc_inode+0x183/0x250 [ 132.975779][ T6844] alloc_anon_inode+0x2a/0x3e0 [ 132.975814][ T6844] ioctx_alloc+0x4dc/0x21e0 [ 132.975850][ T6844] ? cap_task_prctl+0x104/0xa50 [ 132.975894][ T6844] ? find_held_lock+0x2b/0x80 [ 132.975923][ T6844] ? __pfx_ioctx_alloc+0x10/0x10 [ 132.975967][ T6844] __x64_sys_io_setup+0xc9/0x220 [ 132.976005][ T6844] do_syscall_64+0xc9/0xf80 [ 132.976042][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.976070][ T6844] RIP: 0033:0x7fc8cb19aeb9 [ 132.976092][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.976118][ T6844] RSP: 002b:00007fc8cbf7d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 132.976144][ T6844] RAX: ffffffffffffffda RBX: 00007fc8cb415fa0 RCX: 00007fc8cb19aeb9 [ 132.976162][ T6844] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 132.976178][ T6844] RBP: 00007fc8cb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 132.976194][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.976211][ T6844] R13: 00007fc8cb416038 R14: 00007fc8cb415fa0 R15: 00007ffd09bfa8f8 [ 132.976248][ T6844] [ 133.288158][ T6852] sctp: [Deprecated]: syz.2.163 (pid 6852) Use of int in max_burst socket option. [ 133.288158][ T6852] Use struct sctp_assoc_value instead [ 133.650157][ T6863] sp0: Synchronizing with TNC [ 133.919688][ T6867] netlink: 'syz.1.168': attribute type 7 has an invalid length. [ 133.939688][ T6867] netlink: 17 bytes leftover after parsing attributes in process `syz.1.168'. [ 134.222944][ T6885] Lens A: ================= START STATUS ================= [ 134.240167][ T6885] Lens A: Focus, Absolute: 0 [ 134.250309][ T6885] Lens A: ================== END STATUS ================== [ 134.279529][ T6887] Lens A: ================= START STATUS ================= [ 134.292100][ T6887] Lens A: Focus, Absolute: 0 [ 134.296767][ T6887] Lens A: ================== END STATUS ================== [ 134.441832][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 134.583600][ T6900] nfs: Unknown parameter 'm?LH>「^eko}* ' [ 134.614157][ T6900] FAULT_INJECTION: forcing a failure. [ 134.614157][ T6900] name failslab, interval 1, probability 0, space 0, times 0 [ 134.668613][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) [ 134.668653][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 134.668668][ T6900] Call Trace: [ 134.668674][ T6900] [ 134.668679][ T6900] dump_stack_lvl+0x100/0x190 [ 134.668702][ T6900] should_fail_ex.cold+0x5/0xa [ 134.668727][ T6900] should_failslab+0xc2/0x120 [ 134.668748][ T6900] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 134.668768][ T6900] ? rcu_is_watching+0x12/0xc0 [ 134.668782][ T6900] ? alloc_inode+0x183/0x250 [ 134.668805][ T6900] ? alloc_inode+0x183/0x250 [ 134.668824][ T6900] alloc_inode+0x183/0x250 [ 134.668845][ T6900] alloc_anon_inode+0x2a/0x3e0 [ 134.668864][ T6900] ioctx_alloc+0x4dc/0x21e0 [ 134.668882][ T6900] ? cap_task_prctl+0x104/0xa50 [ 134.668904][ T6900] ? find_held_lock+0x2b/0x80 [ 134.668919][ T6900] ? __pfx_ioctx_alloc+0x10/0x10 [ 134.668941][ T6900] __x64_sys_io_setup+0xc9/0x220 [ 134.668961][ T6900] do_syscall_64+0xc9/0xf80 [ 134.668980][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.668996][ T6900] RIP: 0033:0x7fc26359aeb9 [ 134.669009][ T6900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.669023][ T6900] RSP: 002b:00007fc2644a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 134.669037][ T6900] RAX: ffffffffffffffda RBX: 00007fc263815fa0 RCX: 00007fc26359aeb9 [ 134.669047][ T6900] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 134.669055][ T6900] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 134.669064][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.669072][ T6900] R13: 00007fc263816038 R14: 00007fc263815fa0 R15: 00007ffd0e14b7c8 [ 134.669091][ T6900] [ 135.016989][ C1] sd 0:0:1:0: [sda] tag#9567 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 135.017039][ C1] sd 0:0:1:0: [sda] tag#9567 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 135.729087][ T6923] FAULT_INJECTION: forcing a failure. [ 135.729087][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 135.831404][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT(full) [ 135.831427][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 135.831436][ T6923] Call Trace: [ 135.831441][ T6923] [ 135.831447][ T6923] dump_stack_lvl+0x100/0x190 [ 135.831470][ T6923] should_fail_ex.cold+0x5/0xa [ 135.831495][ T6923] should_failslab+0xc2/0x120 [ 135.831515][ T6923] __kmalloc_cache_noprof+0x80/0x810 [ 135.831531][ T6923] ? snd_timer_instance_new+0x47/0x2e0 [ 135.831547][ T6923] ? __lock_acquire+0x4a5/0x2630 [ 135.831569][ T6923] ? snd_timer_instance_new+0x47/0x2e0 [ 135.831586][ T6923] snd_timer_instance_new+0x47/0x2e0 [ 135.831604][ T6923] snd_seq_timer_open+0x1d4/0x600 [ 135.831627][ T6923] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 135.831654][ T6923] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.831670][ T6923] ? lockdep_hardirqs_on+0x78/0x100 [ 135.831687][ T6923] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.831704][ T6923] queue_use+0xdc/0x1f0 [ 135.831737][ T6923] snd_seq_queue_alloc+0x2e5/0x590 [ 135.831775][ T6923] snd_seq_ioctl_create_queue+0xa9/0x370 [ 135.831819][ T6923] call_seq_client_ctl+0xa3/0x130 [ 135.831849][ T6923] snd_seq_kernel_client_ctl+0x77/0xd0 [ 135.831879][ T6923] alloc_seq_queue+0xdb/0x180 [ 135.831908][ T6923] ? __pfx_alloc_seq_queue+0x10/0x10 [ 135.831958][ T6923] ? mark_held_locks+0x40/0x70 [ 135.832006][ T6923] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.832035][ T6923] ? lockdep_hardirqs_on+0x78/0x100 [ 135.832072][ T6923] snd_seq_oss_open+0x2b2/0xa10 [ 135.832110][ T6923] odev_open+0x79/0xc0 [ 135.832135][ T6923] ? __pfx_odev_open+0x10/0x10 [ 135.832161][ T6923] soundcore_open+0x2e3/0x5a0 [ 135.832194][ T6923] ? __pfx_soundcore_open+0x10/0x10 [ 135.832221][ T6923] chrdev_open+0x234/0x6a0 [ 135.832241][ T6923] ? __pfx_apparmor_file_open+0x10/0x10 [ 135.832259][ T6923] ? __pfx_chrdev_open+0x10/0x10 [ 135.832277][ T6923] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 135.832299][ T6923] do_dentry_open+0x73e/0x1570 [ 135.832316][ T6923] ? __pfx_chrdev_open+0x10/0x10 [ 135.832333][ T6923] ? security_inode_permission+0xbf/0x250 [ 135.832357][ T6923] vfs_open+0x82/0x3f0 [ 135.832386][ T6923] path_openat+0x21dc/0x3120 [ 135.832410][ T6923] ? __pfx_path_openat+0x10/0x10 [ 135.832435][ T6923] do_filp_open+0x1f7/0x420 [ 135.832454][ T6923] ? __pfx_do_filp_open+0x10/0x10 [ 135.832484][ T6923] ? _raw_spin_unlock+0x28/0x50 [ 135.832498][ T6923] ? alloc_fd+0x476/0x790 [ 135.832519][ T6923] do_sys_openat2+0x12e/0x220 [ 135.832540][ T6923] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.832563][ T6923] ? __fget_files+0x21f/0x3d0 [ 135.832582][ T6923] __x64_sys_openat+0x12d/0x210 [ 135.832603][ T6923] ? __pfx___x64_sys_openat+0x10/0x10 [ 135.832624][ T6923] ? xfd_validate_state+0x129/0x190 [ 135.832652][ T6923] do_syscall_64+0xc9/0xf80 [ 135.832671][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.832685][ T6923] RIP: 0033:0x7fc8cb19aeb9 [ 135.832699][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.832714][ T6923] RSP: 002b:00007fc8c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.832728][ T6923] RAX: ffffffffffffffda RBX: 00007fc8cb416090 RCX: 00007fc8cb19aeb9 [ 135.832739][ T6923] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 135.832748][ T6923] RBP: 00007fc8cb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 135.832757][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.832766][ T6923] R13: 00007fc8cb416128 R14: 00007fc8cb416090 R15: 00007ffd09bfa8f8 [ 135.832786][ T6923] [ 136.695026][ T6935] Lens A: ================= START STATUS ================= [ 136.747836][ T6935] Lens A: Focus, Absolute: 0 [ 136.761853][ T6935] Lens A: ================== END STATUS ================== [ 136.813867][ T6938] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 137.041706][ T6946] Lens A: ================= START STATUS ================= [ 137.049185][ T6946] Lens A: Focus, Absolute: 0 [ 137.080821][ T6948] : Can't lookup blockdev [ 137.086781][ T6946] Lens A: ================== END STATUS ================== [ 137.923978][ T6961] program syz.1.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.974990][ T6961] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.091041][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.097472][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.177643][ T6961] netlink: 252 bytes leftover after parsing attributes in process `syz.1.191'. [ 138.327357][ T6961] unsupported nla_type 65535 [ 138.895941][ T6999] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 139.963178][ T7027] FAULT_INJECTION: forcing a failure. [ 139.963178][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 139.977309][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.977356][ T7027] Tainted: [L]=SOFTLOCKUP [ 139.977365][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 139.977381][ T7027] Call Trace: [ 139.977391][ T7027] [ 139.977401][ T7027] dump_stack_lvl+0x100/0x190 [ 139.977441][ T7027] should_fail_ex.cold+0x5/0xa [ 139.977488][ T7027] should_failslab+0xc2/0x120 [ 139.977525][ T7027] ? memcg_list_lru_alloc+0x4ec/0x740 [ 139.977559][ T7027] __kmalloc_noprof+0xf6/0x9c0 [ 139.977598][ T7027] ? memcg_list_lru_alloc+0x4ec/0x740 [ 139.977631][ T7027] memcg_list_lru_alloc+0x4ec/0x740 [ 139.977676][ T7027] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 139.977708][ T7027] ? rcu_read_unlock+0x17/0x60 [ 139.977757][ T7027] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 139.977792][ T7027] __memcg_slab_post_alloc_hook+0x12e/0x880 [ 139.977839][ T7027] ? kasan_save_track+0x14/0x30 [ 139.977877][ T7027] kmem_cache_alloc_lru_noprof+0x606/0x7d0 [ 139.977914][ T7027] ? rcu_is_watching+0x12/0xc0 [ 139.977941][ T7027] ? alloc_inode+0x183/0x250 [ 139.977997][ T7027] ? alloc_inode+0x183/0x250 [ 139.978035][ T7027] alloc_inode+0x183/0x250 [ 139.978076][ T7027] alloc_anon_inode+0x2a/0x3e0 [ 139.978110][ T7027] ioctx_alloc+0x4dc/0x21e0 [ 139.978145][ T7027] ? cap_task_prctl+0x104/0xa50 [ 139.978196][ T7027] ? find_held_lock+0x2b/0x80 [ 139.978225][ T7027] ? __pfx_ioctx_alloc+0x10/0x10 [ 139.978269][ T7027] __x64_sys_io_setup+0xc9/0x220 [ 139.978307][ T7027] do_syscall_64+0xc9/0xf80 [ 139.978344][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.978372][ T7027] RIP: 0033:0x7fc8cb19aeb9 [ 139.978394][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.978420][ T7027] RSP: 002b:00007fc8c93f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 139.978446][ T7027] RAX: ffffffffffffffda RBX: 00007fc8cb416090 RCX: 00007fc8cb19aeb9 [ 139.978464][ T7027] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 139.978481][ T7027] RBP: 00007fc8cb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 139.978497][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.978513][ T7027] R13: 00007fc8cb416128 R14: 00007fc8cb416090 R15: 00007ffd09bfa8f8 [ 139.978551][ T7027] [ 140.259921][ T7030] bridge_slave_1: left allmulticast mode [ 140.265812][ T7030] bridge_slave_1: left promiscuous mode [ 140.272551][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.371758][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 141.982087][ T7079] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x7f04a44b1 pfn:0x78000 [ 142.025341][ T7079] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 142.101894][ T7079] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 142.120841][ T7079] raw: 00000007f04a44b1 0000000000000000 0000000500000003 0000000000000000 [ 142.233655][ T7079] page dumped because: unmovable page [ 142.240181][ T7079] page_owner tracks the page as allocated [ 142.298886][ T7079] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5821, tgid 5821 (syz-executor), ts 85726937710, free_ts 85517708065 [ 142.321996][ T7079] post_alloc_hook+0x1e1/0x250 [ 142.331309][ T7079] get_page_from_freelist+0xe3d/0x2e10 [ 142.375156][ T7079] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 142.381372][ T7079] alloc_pages_mpol+0x1fb/0x550 [ 142.425059][ T7079] alloc_pages_noprof+0x131/0x390 [ 142.431638][ T7079] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 142.438177][ T7079] vmalloc_user_noprof+0x9e/0xe0 [ 142.444732][ T7079] kcov_ioctl+0x4c/0x720 [ 142.449243][ T7079] __x64_sys_ioctl+0x18e/0x210 [ 142.454547][ T7079] do_syscall_64+0xc9/0xf80 [ 142.459119][ T7079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.465570][ T7079] page last free pid 5811 tgid 5811 stack trace: [ 142.495334][ T7079] free_unref_folios+0xb2a/0x1760 [ 142.500892][ T7079] folios_put_refs+0x53c/0x840 [ 142.519998][ T7079] free_pages_and_swap_cache+0x242/0x480 [ 142.527217][ T7079] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 142.534735][ T7079] tlb_finish_mmu+0x1b0/0x810 [ 142.539746][ T7079] vms_clear_ptes+0x55c/0x790 [ 142.547631][ T7079] vms_complete_munmap_vmas+0x1cf/0x970 [ 142.556217][ T7079] do_vmi_align_munmap+0x44f/0x5f0 [ 142.566666][ T7079] do_vmi_munmap+0x1f8/0x3e0 [ 142.578566][ T7079] __vm_munmap+0x196/0x390 [ 142.593847][ T7079] __x64_sys_munmap+0x59/0x80 [ 142.616857][ T7079] do_syscall_64+0xc9/0xf80 [ 142.653976][ T7079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.756732][ T7081] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x7f04a44b1 pfn:0x78000 [ 142.791975][ T7081] flags: 0xfff18000000210(dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 142.803076][ T7081] raw: 00fff18000000210 0000000000000000 dead000000000122 0000000000000000 [ 142.822852][ T7081] raw: 00000007f04a44b1 0000000000000000 0000000500000003 0000000000000000 [ 142.874423][ T7081] page dumped because: unmovable page [ 142.879847][ T7081] page_owner tracks the page as allocated [ 142.911894][ T7081] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5821, tgid 5821 (syz-executor), ts 85726937710, free_ts 85517708065 [ 143.001997][ T7081] post_alloc_hook+0x1e1/0x250 [ 143.009238][ T7081] get_page_from_freelist+0xe3d/0x2e10 [ 143.037454][ T7081] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 143.051388][ T7081] alloc_pages_mpol+0x1fb/0x550 [ 143.072470][ T7081] alloc_pages_noprof+0x131/0x390 [ 143.088233][ T7081] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 143.117346][ T7081] vmalloc_user_noprof+0x9e/0xe0 [ 143.152107][ T7081] kcov_ioctl+0x4c/0x720 [ 143.169866][ T7081] __x64_sys_ioctl+0x18e/0x210 [ 143.209738][ T7081] do_syscall_64+0xc9/0xf80 [ 143.242058][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.266336][ T7081] page last free pid 5811 tgid 5811 stack trace: [ 143.273611][ T7081] free_unref_folios+0xb2a/0x1760 [ 143.279063][ T7081] folios_put_refs+0x53c/0x840 [ 143.284481][ T7081] free_pages_and_swap_cache+0x242/0x480 [ 143.290331][ T7081] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 143.296956][ T7081] tlb_finish_mmu+0x1b0/0x810 [ 143.306192][ T7081] vms_clear_ptes+0x55c/0x790 [ 143.319453][ T7081] vms_complete_munmap_vmas+0x1cf/0x970 [ 143.330288][ T7081] do_vmi_align_munmap+0x44f/0x5f0 [ 143.390109][ T7081] do_vmi_munmap+0x1f8/0x3e0 [ 143.414111][ T7081] __vm_munmap+0x196/0x390 [ 143.430819][ T7081] __x64_sys_munmap+0x59/0x80 [ 143.450992][ T7081] do_syscall_64+0xc9/0xf80 [ 143.468826][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.549902][ T7111] Lens A: ================= START STATUS ================= [ 143.559688][ T7111] Lens A: Focus, Absolute: 0 [ 143.569938][ T7111] Lens A: ================== END STATUS ================== [ 143.591069][ T7109] FAULT_INJECTION: forcing a failure. [ 143.591069][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 143.628757][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.0.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.628800][ T7109] Tainted: [L]=SOFTLOCKUP [ 143.628810][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 143.628824][ T7109] Call Trace: [ 143.628832][ T7109] [ 143.628843][ T7109] dump_stack_lvl+0x100/0x190 [ 143.628881][ T7109] should_fail_ex.cold+0x5/0xa [ 143.628924][ T7109] should_failslab+0xc2/0x120 [ 143.628961][ T7109] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 143.628995][ T7109] ? rcu_is_watching+0x12/0xc0 [ 143.629018][ T7109] ? alloc_inode+0x183/0x250 [ 143.629060][ T7109] ? alloc_inode+0x183/0x250 [ 143.629096][ T7109] alloc_inode+0x183/0x250 [ 143.629137][ T7109] alloc_anon_inode+0x2a/0x3e0 [ 143.629173][ T7109] ioctx_alloc+0x4dc/0x21e0 [ 143.629207][ T7109] ? cap_task_prctl+0x104/0xa50 [ 143.629253][ T7109] ? find_held_lock+0x2b/0x80 [ 143.629281][ T7109] ? __pfx_ioctx_alloc+0x10/0x10 [ 143.629322][ T7109] __x64_sys_io_setup+0xc9/0x220 [ 143.629357][ T7109] do_syscall_64+0xc9/0xf80 [ 143.629393][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.629420][ T7109] RIP: 0033:0x7fc46079aeb9 [ 143.629441][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.629466][ T7109] RSP: 002b:00007fc461615028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 143.629493][ T7109] RAX: ffffffffffffffda RBX: 00007fc460a16090 RCX: 00007fc46079aeb9 [ 143.629511][ T7109] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 143.629528][ T7109] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 143.629544][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.629559][ T7109] R13: 00007fc460a16128 R14: 00007fc460a16090 R15: 00007fff4c8e5548 [ 143.629597][ T7109] [ 143.849784][ T7113] Lens A: ================= START STATUS ================= [ 143.857392][ T7113] Lens A: Focus, Absolute: 0 [ 143.862106][ T7113] Lens A: ================== END STATUS ================== [ 145.115386][ T7139] zswap: compressor not available [ 145.579231][ T7154] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 146.392803][ T7179] FAULT_INJECTION: forcing a failure. [ 146.392803][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 146.413282][ T7179] CPU: 1 UID: 0 PID: 7179 Comm: syz.1.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.413324][ T7179] Tainted: [L]=SOFTLOCKUP [ 146.413333][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 146.413347][ T7179] Call Trace: [ 146.413355][ T7179] [ 146.413364][ T7179] dump_stack_lvl+0x100/0x190 [ 146.413399][ T7179] should_fail_ex.cold+0x5/0xa [ 146.413439][ T7179] should_failslab+0xc2/0x120 [ 146.413539][ T7179] __kmalloc_cache_noprof+0x80/0x810 [ 146.413567][ T7179] ? percpu_ref_init+0xec/0x3f0 [ 146.413603][ T7179] ? percpu_ref_init+0xec/0x3f0 [ 146.413629][ T7179] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 146.413656][ T7179] percpu_ref_init+0xec/0x3f0 [ 146.413682][ T7179] ? __init_waitqueue_head+0xca/0x150 [ 146.413846][ T7179] ioctx_alloc+0x3ee/0x21e0 [ 146.413891][ T7179] ? cap_task_prctl+0x104/0xa50 [ 146.413932][ T7179] ? find_held_lock+0x2b/0x80 [ 146.413959][ T7179] ? __pfx_ioctx_alloc+0x10/0x10 [ 146.413998][ T7179] __x64_sys_io_setup+0xc9/0x220 [ 146.414031][ T7179] do_syscall_64+0xc9/0xf80 [ 146.414063][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.414088][ T7179] RIP: 0033:0x7f0cb7f9aeb9 [ 146.414109][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.414133][ T7179] RSP: 002b:00007f0cb8e1a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 146.414158][ T7179] RAX: ffffffffffffffda RBX: 00007f0cb8216090 RCX: 00007f0cb7f9aeb9 [ 146.414175][ T7179] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 146.414190][ T7179] RBP: 00007f0cb8008c1f R08: 0000000000000000 R09: 0000000000000000 [ 146.414205][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.414220][ T7179] R13: 00007f0cb8216128 R14: 00007f0cb8216090 R15: 00007ffc119b3df8 [ 146.414253][ T7179] [ 146.686306][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 147.253909][ T7211] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 147.265665][ T7211] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 147.293701][ T7211] CIFS mount error: No usable UNC path provided in device string! [ 147.293701][ T7211] [ 147.304408][ T7211] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 147.797180][ T7229] FAULT_INJECTION: forcing a failure. [ 147.797180][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 147.836372][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.2.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.836417][ T7229] Tainted: [L]=SOFTLOCKUP [ 147.836428][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 147.836444][ T7229] Call Trace: [ 147.836454][ T7229] [ 147.836464][ T7229] dump_stack_lvl+0x100/0x190 [ 147.836505][ T7229] should_fail_ex.cold+0x5/0xa [ 147.836552][ T7229] should_failslab+0xc2/0x120 [ 147.836591][ T7229] kmem_cache_alloc_noprof+0x83/0x780 [ 147.836625][ T7229] ? __pfx_map_id_range_down+0x10/0x10 [ 147.836652][ T7229] ? security_inode_alloc+0x3b/0x2c0 [ 147.836707][ T7229] ? security_inode_alloc+0x3b/0x2c0 [ 147.836757][ T7229] security_inode_alloc+0x3b/0x2c0 [ 147.836798][ T7229] inode_init_always_gfp+0xced/0x1040 [ 147.836838][ T7229] alloc_inode+0x8e/0x250 [ 147.836879][ T7229] new_inode+0x22/0x1c0 [ 147.836923][ T7229] proc_pid_make_inode+0x22/0x160 [ 147.836964][ T7229] proc_pident_instantiate+0x85/0x310 [ 147.837006][ T7229] proc_pident_lookup+0x1e3/0x270 [ 147.837054][ T7229] __lookup_slow+0x251/0x460 [ 147.837093][ T7229] ? __pfx___lookup_slow+0x10/0x10 [ 147.837156][ T7229] lookup_slow+0x50/0x70 [ 147.837197][ T7229] link_path_walk+0x1377/0x1cc0 [ 147.837238][ T7229] path_openat+0x1be/0x3120 [ 147.837267][ T7229] ? getname_flags+0x93/0xf0 [ 147.837291][ T7229] ? do_sys_openat2+0xc5/0x220 [ 147.837328][ T7229] ? __x64_sys_openat+0x12d/0x210 [ 147.837363][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.837396][ T7229] ? __pfx_path_openat+0x10/0x10 [ 147.837441][ T7229] do_filp_open+0x1f7/0x420 [ 147.837469][ T7229] ? __pfx_do_filp_open+0x10/0x10 [ 147.837503][ T7229] ? __pfx_kfree_link+0x10/0x10 [ 147.837544][ T7229] ? _raw_spin_unlock+0x28/0x50 [ 147.837569][ T7229] ? alloc_fd+0x476/0x790 [ 147.837602][ T7229] do_sys_openat2+0x12e/0x220 [ 147.837635][ T7229] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.837692][ T7229] __x64_sys_openat+0x12d/0x210 [ 147.837733][ T7229] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.837764][ T7229] ? xfd_validate_state+0x129/0x190 [ 147.837815][ T7229] do_syscall_64+0xc9/0xf80 [ 147.837848][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.837874][ T7229] RIP: 0033:0x7fc26355b78e [ 147.837897][ T7229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.837920][ T7229] RSP: 002b:00007fc264465ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.837948][ T7229] RAX: ffffffffffffffda RBX: 00007fc2644666c0 RCX: 00007fc26355b78e [ 147.837966][ T7229] RDX: 0000000000000002 RSI: 00007fc264465f90 RDI: ffffffffffffff9c [ 147.837983][ T7229] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 147.837999][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.838016][ T7229] R13: 00007fc263816218 R14: 00007fc263816180 R15: 00007ffd0e14b7c8 [ 147.838049][ T7229] [ 148.259105][ T7223] warning: `syz.2.242' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.760923][ T7246] Lens A: ================= START STATUS ================= [ 148.778751][ T7246] Lens A: Focus, Absolute: 0 [ 148.789307][ T7246] Lens A: ================== END STATUS ================== [ 149.280750][ T7253] zswap: compressor not available [ 149.307777][ T7269] process 'syz.3.249' launched './file0' with NULL argv: empty string added [ 149.650192][ T7253] zswap: compressor not available [ 149.869367][ T7253] zswap: compressor not available [ 150.156928][ T7287] futex_wake_op: syz.1.252 tries to shift op by -2048; fix this program [ 150.225087][ T7287] futex_wake_op: syz.1.252 tries to shift op by -2048; fix this program [ 150.335845][ T7294] 0x000000000001-0x000000020000 : "" [ 150.456357][ T7294] ftl_cs: FTL header corrupt! [ 155.011172][ T7385] Invalid ELF header magic: != ELF [ 155.519590][ T7353] kexec: Could not allocate control_code_buffer [ 155.776274][ T7397] Lens A: ================= START STATUS ================= [ 155.799269][ T7397] Lens A: Focus, Absolute: 0 [ 155.811853][ T7397] Lens A: ================== END STATUS ================== [ 156.033096][ T7404] netlink: 108 bytes leftover after parsing attributes in process `syz.0.275'. [ 156.253570][ T7404] FAULT_INJECTION: forcing a failure. [ 156.253570][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 156.294854][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.0.275 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.294881][ T7404] Tainted: [L]=SOFTLOCKUP [ 156.294886][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.294895][ T7404] Call Trace: [ 156.294900][ T7404] [ 156.294913][ T7404] dump_stack_lvl+0x100/0x190 [ 156.294938][ T7404] should_fail_ex.cold+0x5/0xa [ 156.294963][ T7404] should_failslab+0xc2/0x120 [ 156.294985][ T7404] __kmalloc_cache_noprof+0x80/0x810 [ 156.295001][ T7404] ? sctp_add_bind_addr+0xae/0x3e0 [ 156.295022][ T7404] ? sctp_add_bind_addr+0xae/0x3e0 [ 156.295039][ T7404] sctp_add_bind_addr+0xae/0x3e0 [ 156.295059][ T7404] sctp_copy_local_addr_list+0x349/0x550 [ 156.295082][ T7404] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 156.295104][ T7404] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 156.295126][ T7404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.295145][ T7404] sctp_bind_addr_copy+0xe0/0x530 [ 156.295167][ T7404] sctp_connect_new_asoc+0x1c9/0x770 [ 156.295183][ T7404] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 156.295202][ T7404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.295219][ T7404] sctp_sendmsg+0x171a/0x22b0 [ 156.295239][ T7404] ? __pfx_sctp_sendmsg+0x10/0x10 [ 156.295253][ T7404] ? do_user_addr_fault+0x8d6/0x12f0 [ 156.295272][ T7404] ? aa_sk_perm+0x2de/0xb40 [ 156.295296][ T7404] ? __pfx_aa_sk_perm+0x10/0x10 [ 156.295321][ T7404] ? __pfx_sctp_sendmsg+0x10/0x10 [ 156.295336][ T7404] inet_sendmsg+0x11c/0x140 [ 156.295355][ T7404] ____sys_sendmsg+0x9ad/0xc30 [ 156.295372][ T7404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.295391][ T7404] ? futex_unqueue+0x133/0x2c0 [ 156.295409][ T7404] ? futex_unqueue+0x133/0x2c0 [ 156.295431][ T7404] ___sys_sendmsg+0x190/0x1e0 [ 156.295449][ T7404] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.295465][ T7404] ? __pfx___futex_wait+0x10/0x10 [ 156.295478][ T7404] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 156.295515][ T7404] __sys_sendmmsg+0x205/0x430 [ 156.295538][ T7404] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.295565][ T7404] ? __pfx_do_futex+0x10/0x10 [ 156.295582][ T7404] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.295613][ T7404] ? xfd_validate_state+0x129/0x190 [ 156.295639][ T7404] __x64_sys_sendmmsg+0x9c/0x100 [ 156.295660][ T7404] ? lockdep_hardirqs_on+0x78/0x100 [ 156.295677][ T7404] do_syscall_64+0xc9/0xf80 [ 156.295695][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.295710][ T7404] RIP: 0033:0x7fc46079aeb9 [ 156.295723][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.295736][ T7404] RSP: 002b:00007fc461636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.295751][ T7404] RAX: ffffffffffffffda RBX: 00007fc460a15fa0 RCX: 00007fc46079aeb9 [ 156.295761][ T7404] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000004 [ 156.295770][ T7404] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 156.295778][ T7404] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 156.295787][ T7404] R13: 00007fc460a16038 R14: 00007fc460a15fa0 R15: 00007fff4c8e5548 [ 156.295807][ T7404] [ 157.569099][ T7428] Lens A: ================= START STATUS ================= [ 157.601851][ T7428] Lens A: Focus, Absolute: 0 [ 157.606486][ T7428] Lens A: ================== END STATUS ================== [ 158.448492][ T7441] Process accounting paused [ 158.643643][ T7448] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 158.950686][ T7456] zero sized request [ 160.444030][ T7475] futex_wake_op: syz.0.289 tries to shift op by -2048; fix this program [ 160.510034][ T7475] futex_wake_op: syz.0.289 tries to shift op by -2048; fix this program [ 160.550144][ T7475] 0x000000000001-0x000000020000 : "" [ 160.690330][ T7475] ftl_cs: FTL header corrupt! [ 161.867296][ T7505] Lens A: ================= START STATUS ================= [ 161.909609][ T7505] Lens A: Focus, Absolute: 0 [ 161.927557][ T7505] Lens A: ================== END STATUS ================== [ 162.058883][ T5970] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 163.392025][ T7525] Lens A: ================= START STATUS ================= [ 163.404671][ T7525] Lens A: Focus, Absolute: 0 [ 163.409341][ T7525] Lens A: ================== END STATUS ================== [ 163.869977][ T7532] Lens A: ================= START STATUS ================= [ 163.888650][ T7532] Lens A: Focus, Absolute: 0 [ 163.897549][ T7532] Lens A: ================== END STATUS ================== [ 164.036028][ T7531] ubi0: attaching mtd0 [ 164.056964][ T7531] ubi0: scanning is finished [ 164.121866][ T7531] ubi0: empty MTD device detected [ 164.470586][ T7531] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 164.478218][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 164.496993][ T7531] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 164.509248][ T7531] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 164.529115][ T7531] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 164.591785][ T7531] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 164.622094][ T7531] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 164.631787][ T7531] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 307099360 [ 164.691839][ T7531] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 164.716167][ T7542] ubi0: detaching mtd0 [ 164.733614][ T7545] ubi0: background thread "ubi_bgt0d" started, PID 7545 [ 164.780317][ T7542] ubi0: mtd0 is detached [ 165.798955][ T7580] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 166.027707][ T7591] Lens A: ================= START STATUS ================= [ 166.065897][ T7591] Lens A: Focus, Absolute: 0 [ 166.084878][ T7591] Lens A: ================== END STATUS ================== [ 167.262619][ T7617] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 167.777569][ T7626] Invalid ELF header magic: != ELF [ 167.790409][ T7626] Invalid ELF header magic: != ELF [ 167.800743][ T7626] Invalid ELF header magic: != ELF [ 167.927071][ T7626] Invalid ELF header magic: != ELF [ 168.012460][ T7626] Invalid ELF header magic: != ELF [ 168.061633][ T7626] Invalid ELF header magic: != ELF [ 168.111182][ T7626] Invalid ELF header magic: != ELF [ 168.132790][ T7626] Invalid ELF header magic: != ELF [ 168.234287][ T7626] Invalid ELF header magic: != ELF [ 168.314157][ T7626] Invalid ELF header magic: != ELF [ 168.358720][ T7626] Invalid ELF header magic: != ELF [ 168.395413][ T7626] Invalid ELF header magic: != ELF [ 169.647039][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 169.667080][ T7679] sd 0:0:1:0: PR command failed: 1026 [ 169.686500][ T7679] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 169.694774][ T7679] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 169.715347][ T7682] futex_wake_op: syz.2.335 tries to shift op by -2048; fix this program [ 169.742306][ T7682] futex_wake_op: syz.2.335 tries to shift op by -2048; fix this program [ 170.384504][ T7696] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.384624][ T7696] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 170.401135][ T7696] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 170.473253][ T7696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.473893][ T7696] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.475826][ T7696] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.476618][ T7696] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.476714][ T7696] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.478595][ T7696] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.481243][ T7696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.481306][ T7696] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 170.483215][ T7696] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.149200][ T7708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.340'. [ 171.691186][ T7715] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 171.706547][ T7707] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 171.738187][ T7715] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 171.778883][ T7715] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 171.839158][ T7715] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 171.847430][ T7715] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 171.924526][ T7720] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 171.958559][ T7715] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 172.031394][ T7715] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 172.428120][ T5970] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.553316][ T5970] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.559381][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.568544][ T5961] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.835186][ T7732] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 173.192336][ T7738] syz.0.348 uses obsolete (PF_INET,SOCK_PACKET) [ 173.555926][ T7749] random: crng reseeded on system resumption [ 174.012848][ T7740] alloc_netdev: Unable to allocate device with zero queues [ 174.484485][ T7729] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.631953][ T7729] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.638163][ T5970] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.644509][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.708140][ T5961] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 174.899786][ T7771] Lens A: ================= START STATUS ================= [ 174.909726][ T7771] Lens A: Focus, Absolute: 0 [ 174.916026][ T7771] Lens A: ================== END STATUS ================== [ 176.551905][ T5961] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.711973][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.718040][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.724807][ T7729] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.807973][ T7813] netlink: 72 bytes leftover after parsing attributes in process `syz.2.361'. [ 176.894256][ T7815] FAULT_INJECTION: forcing a failure. [ 176.894256][ T7815] name failslab, interval 1, probability 0, space 0, times 0 [ 176.910072][ T7816] synth uevent: /devices/virtual/net/nr1: unknown uevent action string [ 176.919311][ T7816] net nr1: uevent: failed to send synthetic uevent: -22 [ 177.020096][ T7815] CPU: 1 UID: 0 PID: 7815 Comm: syz.0.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.020123][ T7815] Tainted: [L]=SOFTLOCKUP [ 177.020128][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 177.020137][ T7815] Call Trace: [ 177.020143][ T7815] [ 177.020149][ T7815] dump_stack_lvl+0x100/0x190 [ 177.020172][ T7815] should_fail_ex.cold+0x5/0xa [ 177.020197][ T7815] should_failslab+0xc2/0x120 [ 177.020218][ T7815] __kmalloc_cache_noprof+0x80/0x810 [ 177.020233][ T7815] ? percpu_ref_init+0xec/0x3f0 [ 177.020253][ T7815] ? percpu_ref_init+0xec/0x3f0 [ 177.020269][ T7815] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 177.020284][ T7815] percpu_ref_init+0xec/0x3f0 [ 177.020300][ T7815] ? __init_waitqueue_head+0xca/0x150 [ 177.020324][ T7815] ioctx_alloc+0x3ee/0x21e0 [ 177.020342][ T7815] ? cap_task_prctl+0x104/0xa50 [ 177.020366][ T7815] ? find_held_lock+0x2b/0x80 [ 177.020382][ T7815] ? __pfx_ioctx_alloc+0x10/0x10 [ 177.020404][ T7815] __x64_sys_io_setup+0xc9/0x220 [ 177.020424][ T7815] do_syscall_64+0xc9/0xf80 [ 177.020443][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.020459][ T7815] RIP: 0033:0x7fc46079aeb9 [ 177.020471][ T7815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.020484][ T7815] RSP: 002b:00007fc461615028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 177.020500][ T7815] RAX: ffffffffffffffda RBX: 00007fc460a16090 RCX: 00007fc46079aeb9 [ 177.020510][ T7815] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 177.020519][ T7815] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 177.020531][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.020540][ T7815] R13: 00007fc460a16128 R14: 00007fc460a16090 R15: 00007fff4c8e5548 [ 177.020560][ T7815] [ 177.495505][ T7809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.534737][ T7809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.550877][ T7809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.591609][ T7809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.639664][ T7809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.459206][ T7740] netdevsim netdevsim100: probe with driver netdevsim failed with error -12 [ 178.659488][ T7832] FAULT_INJECTION: forcing a failure. [ 178.659488][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 178.686990][ T7832] CPU: 1 UID: 0 PID: 7832 Comm: syz.2.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.687016][ T7832] Tainted: [L]=SOFTLOCKUP [ 178.687022][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.687036][ T7832] Call Trace: [ 178.687042][ T7832] [ 178.687048][ T7832] dump_stack_lvl+0x100/0x190 [ 178.687071][ T7832] should_fail_ex.cold+0x5/0xa [ 178.687100][ T7832] should_failslab+0xc2/0x120 [ 178.687121][ T7832] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 178.687143][ T7832] ? __alloc_skb+0x156/0x410 [ 178.687165][ T7832] ? __alloc_skb+0x156/0x410 [ 178.687182][ T7832] __alloc_skb+0x156/0x410 [ 178.687200][ T7832] ? __alloc_skb+0x35d/0x410 [ 178.687218][ T7832] ? __pfx___alloc_skb+0x10/0x10 [ 178.687237][ T7832] ? skb_page_frag_refill+0x220/0x5b0 [ 178.687254][ T7832] ? sk_page_frag_refill+0x6c/0x340 [ 178.687273][ T7832] kcm_sendmsg+0x1482/0x2fe0 [ 178.687302][ T7832] ? __pfx_kcm_sendmsg+0x10/0x10 [ 178.687322][ T7832] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 178.687343][ T7832] sock_sendmsg+0x3a1/0x430 [ 178.687358][ T7832] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 178.687380][ T7832] ? __pfx_sock_sendmsg+0x10/0x10 [ 178.687408][ T7832] splice_to_socket+0xb4c/0x11b0 [ 178.687435][ T7832] ? __pfx_splice_to_socket+0x10/0x10 [ 178.687475][ T7832] ? trace_kmalloc+0x83/0xb0 [ 178.687494][ T7832] ? lockdep_init_map_type+0x5c/0x250 [ 178.687521][ T7832] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 178.687539][ T7832] ? __pfx_splice_to_socket+0x10/0x10 [ 178.687558][ T7832] direct_splice_actor+0x192/0x6c0 [ 178.687578][ T7832] splice_direct_to_actor+0x345/0xa30 [ 178.687596][ T7832] ? __pfx_direct_splice_actor+0x10/0x10 [ 178.687618][ T7832] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 178.687637][ T7832] ? futex_private_hash_put+0x107/0x1c0 [ 178.687657][ T7832] do_splice_direct+0x174/0x240 [ 178.687674][ T7832] ? __pfx_do_splice_direct+0x10/0x10 [ 178.687688][ T7832] ? common_file_perm+0x1ab/0x4f0 [ 178.687709][ T7832] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 178.687726][ T7832] ? bpf_lsm_file_permission+0x9/0x10 [ 178.687745][ T7832] ? security_file_permission+0x76/0x210 [ 178.687771][ T7832] ? rw_verify_area+0xce/0x6d0 [ 178.687787][ T7832] do_sendfile+0xadc/0xe20 [ 178.687806][ T7832] ? __pfx_do_sendfile+0x10/0x10 [ 178.687824][ T7832] ? __x64_sys_futex+0x34f/0x4d0 [ 178.687842][ T7832] ? __x64_sys_futex+0x358/0x4d0 [ 178.687863][ T7832] __x64_sys_sendfile64+0x1d8/0x220 [ 178.687881][ T7832] ? xfd_validate_state+0x129/0x190 [ 178.687903][ T7832] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 178.687929][ T7832] do_syscall_64+0xc9/0xf80 [ 178.687948][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.687963][ T7832] RIP: 0033:0x7fc26359aeb9 [ 178.687975][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.687989][ T7832] RSP: 002b:00007fc2644a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 178.688004][ T7832] RAX: ffffffffffffffda RBX: 00007fc263815fa0 RCX: 00007fc26359aeb9 [ 178.688013][ T7832] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 178.688022][ T7832] RBP: 00007fc263608c1f R08: 0000000000000000 R09: 0000000000000000 [ 178.688031][ T7832] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 178.688039][ T7832] R13: 00007fc263816038 R14: 00007fc263815fa0 R15: 00007ffd0e14b7c8 [ 178.688060][ T7832] [ 179.513453][ T5961] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.594074][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.601341][ T5970] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.608470][ T7729] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.729153][ T7845] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 179.822398][ T7847] netlink: 'syz.2.371': attribute type 35 has an invalid length. [ 180.568396][ T7855] FAULT_INJECTION: forcing a failure. [ 180.568396][ T7855] name failslab, interval 1, probability 0, space 0, times 0 [ 180.581111][ T7855] CPU: 1 UID: 0 PID: 7855 Comm: syz.0.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.581137][ T7855] Tainted: [L]=SOFTLOCKUP [ 180.581142][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.581152][ T7855] Call Trace: [ 180.581159][ T7855] [ 180.581166][ T7855] dump_stack_lvl+0x100/0x190 [ 180.581191][ T7855] should_fail_ex.cold+0x5/0xa [ 180.581216][ T7855] should_failslab+0xc2/0x120 [ 180.581236][ T7855] ? memcg_list_lru_alloc+0x4ec/0x740 [ 180.581253][ T7855] __kmalloc_noprof+0xf6/0x9c0 [ 180.581274][ T7855] ? memcg_list_lru_alloc+0x4ec/0x740 [ 180.581291][ T7855] memcg_list_lru_alloc+0x4ec/0x740 [ 180.581318][ T7855] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 180.581336][ T7855] ? rcu_read_unlock+0x17/0x60 [ 180.581363][ T7855] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 180.581382][ T7855] __memcg_slab_post_alloc_hook+0x12e/0x880 [ 180.581407][ T7855] ? kasan_save_track+0x14/0x30 [ 180.581426][ T7855] kmem_cache_alloc_lru_noprof+0x606/0x7d0 [ 180.581446][ T7855] ? rcu_is_watching+0x12/0xc0 [ 180.581460][ T7855] ? alloc_inode+0x183/0x250 [ 180.581484][ T7855] ? alloc_inode+0x183/0x250 [ 180.581502][ T7855] alloc_inode+0x183/0x250 [ 180.581523][ T7855] alloc_anon_inode+0x2a/0x3e0 [ 180.581541][ T7855] ioctx_alloc+0x4dc/0x21e0 [ 180.581559][ T7855] ? cap_task_prctl+0x104/0xa50 [ 180.581582][ T7855] ? find_held_lock+0x2b/0x80 [ 180.581597][ T7855] ? __pfx_ioctx_alloc+0x10/0x10 [ 180.581619][ T7855] __x64_sys_io_setup+0xc9/0x220 [ 180.581645][ T7855] do_syscall_64+0xc9/0xf80 [ 180.581666][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.581692][ T7855] RIP: 0033:0x7fc46079aeb9 [ 180.581712][ T7855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.581736][ T7855] RSP: 002b:00007fc461615028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 180.581759][ T7855] RAX: ffffffffffffffda RBX: 00007fc460a16090 RCX: 00007fc46079aeb9 [ 180.581775][ T7855] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 180.581790][ T7855] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 180.581806][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.581821][ T7855] R13: 00007fc460a16128 R14: 00007fc460a16090 R15: 00007fff4c8e5548 [ 180.581859][ T7855] [ 181.673071][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.892342][ T7876] sctp: [Deprecated]: syz.3.376 (pid 7876) Use of int in max_burst socket option deprecated. [ 181.892342][ T7876] Use struct sctp_assoc_value instead [ 182.467742][ T7893] Lens A: ================= START STATUS ================= [ 182.519670][ T7893] Lens A: Focus, Absolute: 0 [ 182.531992][ T7893] Lens A: ================== END STATUS ================== [ 182.935376][ T7897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.956714][ T7897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.973525][ T7897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.979601][ T7897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.276665][ T7909] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 184.470487][ T7923] FAULT_INJECTION: forcing a failure. [ 184.470487][ T7923] name failslab, interval 1, probability 0, space 0, times 0 [ 184.499103][ T7923] CPU: 1 UID: 0 PID: 7923 Comm: syz.3.384 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.499148][ T7923] Tainted: [L]=SOFTLOCKUP [ 184.499153][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.499162][ T7923] Call Trace: [ 184.499168][ T7923] [ 184.499174][ T7923] dump_stack_lvl+0x100/0x190 [ 184.499197][ T7923] should_fail_ex.cold+0x5/0xa [ 184.499222][ T7923] should_failslab+0xc2/0x120 [ 184.499242][ T7923] __kmalloc_cache_noprof+0x80/0x810 [ 184.499258][ T7923] ? percpu_ref_init+0xec/0x3f0 [ 184.499279][ T7923] ? percpu_ref_init+0xec/0x3f0 [ 184.499294][ T7923] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 184.499309][ T7923] percpu_ref_init+0xec/0x3f0 [ 184.499325][ T7923] ? __init_waitqueue_head+0xca/0x150 [ 184.499350][ T7923] ioctx_alloc+0x3ee/0x21e0 [ 184.499367][ T7923] ? cap_task_prctl+0x104/0xa50 [ 184.499394][ T7923] ? find_held_lock+0x2b/0x80 [ 184.499410][ T7923] ? __pfx_ioctx_alloc+0x10/0x10 [ 184.499433][ T7923] __x64_sys_io_setup+0xc9/0x220 [ 184.499454][ T7923] do_syscall_64+0xc9/0xf80 [ 184.499473][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.499489][ T7923] RIP: 0033:0x7fc8cb19aeb9 [ 184.499502][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.499516][ T7923] RSP: 002b:00007fc8c93f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 184.499532][ T7923] RAX: ffffffffffffffda RBX: 00007fc8cb416090 RCX: 00007fc8cb19aeb9 [ 184.499541][ T7923] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 184.499549][ T7923] RBP: 00007fc8cb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 184.499558][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.499566][ T7923] R13: 00007fc8cb416128 R14: 00007fc8cb416090 R15: 00007ffd09bfa8f8 [ 184.499586][ T7923] [ 184.999202][ T7729] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.062032][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.071968][ T5970] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.078030][ T5970] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.229898][ T7936] Lens A: ================= START STATUS ================= [ 185.241867][ T7936] Lens A: Focus, Absolute: 0 [ 185.247555][ T7936] Lens A: ================== END STATUS ================== [ 186.002398][ T7947] random: crng reseeded on system resumption [ 186.208262][ T7951] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 188.113171][ T7974] could not allocate digest TFM handle [ 188.264335][ T7976] zswap: compressor not available [ 188.550712][ T7941] Process accounting resumed [ 189.103641][ T7997] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 189.197114][ T7991] binder: 7988:7991 ioctl c018620c 0 returned -1 [ 189.211902][ T7997] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 189.237479][ T7997] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 189.262049][ T7997] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 189.270024][ T7997] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 189.303839][ T7997] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 189.311738][ T7997] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 191.536727][ T30] audit: type=1800 audit(1770547992.306:4): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.414" name="lu_gp_id" dev="configfs" ino=19763 res=0 errno=0 [ 192.200780][ T8073] Lens A: ================= START STATUS ================= [ 192.231204][ T8073] Lens A: Focus, Absolute: 0 [ 192.241649][ T8073] Lens A: ================== END STATUS ================== [ 193.287395][ T7934] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 193.295653][ T7934] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 194.754742][ T8110] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 195.487179][ T8120] Lens A: ================= START STATUS ================= [ 195.505799][ T8120] Lens A: Focus, Absolute: 0 [ 195.510473][ T8120] Lens A: ================== END STATUS ================== [ 197.104043][ T8149] netlink: 'syz.1.434': attribute type 7 has an invalid length. [ 197.141872][ T8149] netlink: 17 bytes leftover after parsing attributes in process `syz.1.434'. [ 197.151571][ T8149] FAULT_INJECTION: forcing a failure. [ 197.151571][ T8149] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 197.203592][ T8149] CPU: 1 UID: 0 PID: 8149 Comm: syz.1.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.203627][ T8149] Tainted: [L]=SOFTLOCKUP [ 197.203634][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.203647][ T8149] Call Trace: [ 197.203655][ T8149] [ 197.203664][ T8149] dump_stack_lvl+0x100/0x190 [ 197.203700][ T8149] should_fail_ex.cold+0x5/0xa [ 197.203741][ T8149] _copy_to_user+0x32/0xd0 [ 197.203781][ T8149] simple_read_from_buffer+0xcb/0x170 [ 197.203809][ T8149] proc_fail_nth_read+0x1af/0x230 [ 197.203839][ T8149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.203868][ T8149] ? rw_verify_area+0xce/0x6d0 [ 197.203891][ T8149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.203921][ T8149] vfs_read+0x1e4/0xb30 [ 197.203951][ T8149] ? putname+0xf5/0x1a0 [ 197.203981][ T8149] ? __pfx_vfs_read+0x10/0x10 [ 197.204007][ T8149] ? do_sys_openat2+0x186/0x220 [ 197.204044][ T8149] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.204084][ T8149] ? __sys_sendmsg+0x18f/0x220 [ 197.204131][ T8149] ksys_read+0x12a/0x250 [ 197.204158][ T8149] ? __pfx_ksys_read+0x10/0x10 [ 197.204195][ T8149] do_syscall_64+0xc9/0xf80 [ 197.204230][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.204255][ T8149] RIP: 0033:0x7f0cb7f5b78e [ 197.204274][ T8149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.204298][ T8149] RSP: 002b:00007f0cb8e3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.204321][ T8149] RAX: ffffffffffffffda RBX: 00007f0cb8e3b6c0 RCX: 00007f0cb7f5b78e [ 197.204338][ T8149] RDX: 000000000000000f RSI: 00007f0cb8e3b0a0 RDI: 0000000000000003 [ 197.204353][ T8149] RBP: 00007f0cb8e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.204368][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.204383][ T8149] R13: 00007f0cb8216038 R14: 00007f0cb8215fa0 R15: 00007ffc119b3df8 [ 197.204426][ T8149] [ 197.649054][ T8156] FAULT_INJECTION: forcing a failure. [ 197.649054][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 197.681831][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.1.436 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.681878][ T8156] Tainted: [L]=SOFTLOCKUP [ 197.681888][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.681901][ T8156] Call Trace: [ 197.681910][ T8156] [ 197.681920][ T8156] dump_stack_lvl+0x100/0x190 [ 197.681959][ T8156] should_fail_ex.cold+0x5/0xa [ 197.682002][ T8156] should_failslab+0xc2/0x120 [ 197.682042][ T8156] kmem_cache_alloc_noprof+0x83/0x780 [ 197.682078][ T8156] ? d_instantiate+0x90/0xb0 [ 197.682108][ T8156] ? alloc_empty_file+0x55/0x1c0 [ 197.682152][ T8156] ? alloc_empty_file+0x55/0x1c0 [ 197.682187][ T8156] alloc_empty_file+0x55/0x1c0 [ 197.682226][ T8156] alloc_file_pseudo+0x13a/0x230 [ 197.682265][ T8156] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 197.682307][ T8156] ? hugetlbfs_get_inode+0x36e/0x6f0 [ 197.682340][ T8156] hugetlb_file_setup+0x2a8/0x5b0 [ 197.682365][ T8156] ? __UNIQUE_ID_modinfo_887+0x640a2910/0xffffffffffeca210 [ 197.682399][ T8156] ksys_mmap_pgoff+0x185/0x5b0 [ 197.682446][ T8156] __x64_sys_mmap+0x125/0x190 [ 197.682472][ T8156] ? __UNIQUE_ID_modinfo_887+0x640a2910/0xffffffffffeca210 [ 197.682511][ T8156] do_syscall_64+0xc9/0xf80 [ 197.682548][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.682575][ T8156] RIP: 0033:0x7f0cb7f9aeb9 [ 197.682609][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.682633][ T8156] RSP: 002b:00007f0cb8e3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 197.682658][ T8156] RAX: ffffffffffffffda RBX: 00007f0cb8215fa0 RCX: 00007f0cb7f9aeb9 [ 197.682677][ T8156] RDX: 0000000000000002 RSI: 0000000000000005 RDI: ffffffffff600700 [ 197.682691][ T8156] RBP: 00007f0cb8008c1f R08: 0000000000000401 R09: 0000300000000000 [ 197.682706][ T8156] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 197.682719][ T8156] R13: 00007f0cb8216038 R14: 00007f0cb8215fa0 R15: 00007ffc119b3df8 [ 197.682747][ T8156] ? __UNIQUE_ID_modinfo_887+0x640a2910/0xffffffffffeca210 [ 197.682788][ T8156] [ 197.751153][ T8158] FAULT_INJECTION: forcing a failure. [ 197.751153][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 197.924515][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.3.433 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.924555][ T8158] Tainted: [L]=SOFTLOCKUP [ 197.924564][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.924577][ T8158] Call Trace: [ 197.924585][ T8158] [ 197.924594][ T8158] dump_stack_lvl+0x100/0x190 [ 197.924630][ T8158] should_fail_ex.cold+0x5/0xa [ 197.924667][ T8158] should_failslab+0xc2/0x120 [ 197.924702][ T8158] __kmalloc_cache_noprof+0x80/0x810 [ 197.924728][ T8158] ? trace_pid_list_alloc+0x2fe/0x480 [ 197.924774][ T8158] ? trace_pid_list_alloc+0x2fe/0x480 [ 197.924810][ T8158] trace_pid_list_alloc+0x2fe/0x480 [ 197.924853][ T8158] trace_pid_write+0x110/0x480 [ 197.924886][ T8158] ? __pfx_trace_pid_write+0x10/0x10 [ 197.924919][ T8158] ? update_last_data+0xaa/0x510 [ 197.924969][ T8158] event_pid_write.isra.0+0x1e4/0x7f0 [ 197.924998][ T8158] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 197.925036][ T8158] vfs_write+0x2aa/0x1070 [ 197.925066][ T8158] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 197.925096][ T8158] ? __pfx_vfs_write+0x10/0x10 [ 197.925121][ T8158] ? find_held_lock+0x2b/0x80 [ 197.925146][ T8158] ? __fget_files+0x215/0x3d0 [ 197.925180][ T8158] ? __fget_files+0x21f/0x3d0 [ 197.925217][ T8158] ksys_write+0x12a/0x250 [ 197.925245][ T8158] ? __pfx_ksys_write+0x10/0x10 [ 197.925281][ T8158] do_syscall_64+0xc9/0xf80 [ 197.925314][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.925344][ T8158] RIP: 0033:0x7fc8cb19aeb9 [ 197.925364][ T8158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.925386][ T8158] RSP: 002b:00007fc8cbf7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.925407][ T8158] RAX: ffffffffffffffda RBX: 00007fc8cb415fa0 RCX: 00007fc8cb19aeb9 [ 197.925423][ T8158] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 197.925437][ T8158] RBP: 00007fc8cb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 197.925452][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.925467][ T8158] R13: 00007fc8cb416038 R14: 00007fc8cb415fa0 R15: 00007ffd09bfa8f8 [ 197.925503][ T8158] [ 198.392752][ T8173] random: crng reseeded on system resumption [ 198.826557][ T8173] hub 1-0:1.0: USB hub found [ 198.835684][ T8173] hub 1-0:1.0: 1 port detected [ 199.021162][ T8162] ================================================================== [ 199.021182][ T8162] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 199.021211][ T8162] Write of size 8 at addr ffffc900037e9460 by task syz.0.435/8162 [ 199.021229][ T8162] [ 199.021243][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.0.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.021283][ T8162] Tainted: [L]=SOFTLOCKUP [ 199.021291][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.021303][ T8162] Call Trace: [ 199.021311][ T8162] [ 199.021319][ T8162] dump_stack_lvl+0x100/0x190 [ 199.021345][ T8162] print_report+0x156/0x4c9 [ 199.021376][ T8162] ? __virt_addr_valid+0x81/0x620 [ 199.021412][ T8162] ? sys_imageblit+0x19fb/0x1d60 [ 199.021433][ T8162] kasan_report+0xdf/0x1a0 [ 199.021464][ T8162] ? sys_imageblit+0x19fb/0x1d60 [ 199.021489][ T8162] sys_imageblit+0x19fb/0x1d60 [ 199.021515][ T8162] ? __pfx_sys_imageblit+0x10/0x10 [ 199.021545][ T8162] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 199.021572][ T8162] soft_cursor+0x524/0xa10 [ 199.021612][ T8162] bit_cursor+0xe58/0x16f0 [ 199.021648][ T8162] ? __pfx_bit_cursor+0x10/0x10 [ 199.021681][ T8162] ? __lock_acquire+0x4a5/0x2630 [ 199.021713][ T8162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.021741][ T8162] ? get_color+0x1da/0x450 [ 199.021768][ T8162] ? __pfx_bit_cursor+0x10/0x10 [ 199.021799][ T8162] fbcon_cursor+0x43c/0x5e0 [ 199.021828][ T8162] ? add_softcursor+0x200/0x290 [ 199.021861][ T8162] set_cursor+0x1db/0x250 [ 199.021889][ T8162] con_write+0x89/0xb0 [ 199.021924][ T8162] n_tty_write+0x44f/0x12d0 [ 199.021959][ T8162] ? __pfx_n_tty_write+0x10/0x10 [ 199.021987][ T8162] ? __pfx_woken_wake_function+0x10/0x10 [ 199.022027][ T8162] ? __pfx___might_resched+0x10/0x10 [ 199.022066][ T8162] ? __pfx_n_tty_write+0x10/0x10 [ 199.022092][ T8162] file_tty_write.isra.0+0x4d2/0x890 [ 199.022132][ T8162] redirected_tty_write+0xd4/0x120 [ 199.022168][ T8162] vfs_write+0x6ac/0x1070 [ 199.022195][ T8162] ? __pfx_redirected_tty_write+0x10/0x10 [ 199.022232][ T8162] ? __pfx_vfs_write+0x10/0x10 [ 199.022264][ T8162] ? find_held_lock+0x2b/0x80 [ 199.022299][ T8162] ksys_write+0x12a/0x250 [ 199.022327][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 199.022360][ T8162] do_syscall_64+0xc9/0xf80 [ 199.022392][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.022418][ T8162] RIP: 0033:0x7fc46079aeb9 [ 199.022437][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.022460][ T8162] RSP: 002b:00007fc4615d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.022484][ T8162] RAX: ffffffffffffffda RBX: 00007fc460a16270 RCX: 00007fc46079aeb9 [ 199.022500][ T8162] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000009 [ 199.022515][ T8162] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 199.022530][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.022545][ T8162] R13: 00007fc460a16308 R14: 00007fc460a16270 R15: 00007fff4c8e5548 [ 199.022570][ T8162] [ 199.022579][ T8162] [ 199.022585][ T8162] The buggy address belongs to a vmalloc virtual mapping [ 199.022603][ T8162] Memory state around the buggy address: [ 199.022615][ T8162] ffffc900037e9300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 199.022633][ T8162] ffffc900037e9380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 199.022650][ T8162] >ffffc900037e9400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 199.022663][ T8162] ^ [ 199.022678][ T8162] ffffc900037e9480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 199.022695][ T8162] ffffc900037e9500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 199.022709][ T8162] ================================================================== [ 199.058858][ T8162] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.058885][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.0.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.058923][ T8162] Tainted: [L]=SOFTLOCKUP [ 199.058933][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.058947][ T8162] Call Trace: [ 199.058955][ T8162] [ 199.058965][ T8162] dump_stack_lvl+0x100/0x190 [ 199.058999][ T8162] vpanic+0x20d/0x630 [ 199.059024][ T8162] panic+0xd1/0xd1 [ 199.059046][ T8162] ? __pfx_panic+0x10/0x10 [ 199.059070][ T8162] ? sys_imageblit+0x19fb/0x1d60 [ 199.059095][ T8162] ? preempt_schedule_common+0x42/0xc0 [ 199.059127][ T8162] ? check_panic_on_warn+0x1f/0x90 [ 199.059166][ T8162] check_panic_on_warn.cold+0x19/0x34 [ 199.059192][ T8162] end_report.part.0+0x3a/0x90 [ 199.059225][ T8162] kasan_report.cold+0xe/0x18 [ 199.059259][ T8162] ? sys_imageblit+0x19fb/0x1d60 [ 199.059286][ T8162] sys_imageblit+0x19fb/0x1d60 [ 199.059315][ T8162] ? __pfx_sys_imageblit+0x10/0x10 [ 199.059346][ T8162] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 199.059373][ T8162] soft_cursor+0x524/0xa10 [ 199.059413][ T8162] bit_cursor+0xe58/0x16f0 [ 199.059451][ T8162] ? __pfx_bit_cursor+0x10/0x10 [ 199.059484][ T8162] ? __lock_acquire+0x4a5/0x2630 [ 199.059528][ T8162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.059556][ T8162] ? get_color+0x1da/0x450 [ 199.059586][ T8162] ? __pfx_bit_cursor+0x10/0x10 [ 199.059618][ T8162] fbcon_cursor+0x43c/0x5e0 [ 199.059648][ T8162] ? add_softcursor+0x200/0x290 [ 199.059683][ T8162] set_cursor+0x1db/0x250 [ 199.059715][ T8162] con_write+0x89/0xb0 [ 199.059751][ T8162] n_tty_write+0x44f/0x12d0 [ 199.059785][ T8162] ? __pfx_n_tty_write+0x10/0x10 [ 199.059810][ T8162] ? __pfx_woken_wake_function+0x10/0x10 [ 199.059847][ T8162] ? __pfx___might_resched+0x10/0x10 [ 199.059887][ T8162] ? __pfx_n_tty_write+0x10/0x10 [ 199.059916][ T8162] file_tty_write.isra.0+0x4d2/0x890 [ 199.059956][ T8162] redirected_tty_write+0xd4/0x120 [ 199.059992][ T8162] vfs_write+0x6ac/0x1070 [ 199.060020][ T8162] ? __pfx_redirected_tty_write+0x10/0x10 [ 199.060057][ T8162] ? __pfx_vfs_write+0x10/0x10 [ 199.060083][ T8162] ? find_held_lock+0x2b/0x80 [ 199.060118][ T8162] ksys_write+0x12a/0x250 [ 199.060145][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 199.060176][ T8162] do_syscall_64+0xc9/0xf80 [ 199.060208][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.060234][ T8162] RIP: 0033:0x7fc46079aeb9 [ 199.060255][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.060279][ T8162] RSP: 002b:00007fc4615d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.060305][ T8162] RAX: ffffffffffffffda RBX: 00007fc460a16270 RCX: 00007fc46079aeb9 [ 199.060322][ T8162] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000009 [ 199.060337][ T8162] RBP: 00007fc460808c1f R08: 0000000000000000 R09: 0000000000000000 [ 199.060351][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.060366][ T8162] R13: 00007fc460a16308 R14: 00007fc460a16270 R15: 00007fff4c8e5548 [ 199.060389][ T8162] [ 199.060751][ T8162] Kernel Offset: disabled