last executing test programs: 5.552369043s ago: executing program 2 (id=706): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x10000, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x9e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sysfs$auto(0x2, 0x10000000000002d, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) writev$auto(r2, &(0x7f0000000000)={&(0x7f0000000080), 0x72}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) setsockopt$auto_SO_RXQ_OVFL(r1, 0x0, 0x28, &(0x7f00000000c0)=':-)-\\:-]\\\x00', 0x3) close_range$auto(0x2, 0xa, 0x0) 5.432479179s ago: executing program 3 (id=707): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r0, r0, 0x0, 0x6) r1 = socket(0x28, 0x0, 0xe3) getsockopt$auto_SO_PASSPIDFD(r1, 0x1000, 0x4c, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', &(0x7f00000001c0)=0x5f) fstat$auto(0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = io_uring_setup$auto(0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000440)="b4cfbaa27e5d", 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) write$auto(0xffffffffffffffff, 0x0, 0x9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000200)="da7ab6ec5aff55a5dd64f8b66c0ad399af84e67bbb018f8e303f0373c51fe6b2f1662b41cab67bdb9d1800032569e03d6f737eb0ab46694d2bb0034735751b1bde954e2b06c6c3b2ae53d493250dbe6c50b976c4f4af8630657e36d12bb86e4a6677621481b128bcffab3a0945e2f7bf52d21c0b650c5bc6cc0c29847794e6c5ec133ddbac52140edb992f078931628a2847fec8c1fc8a088f663f1af2e9fbf227e80f19ec26b6") bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, r0, 0x8, 0x5, 0x5, 0x809, r3, 0x10000, 0x5}, 0x14) fcntl$auto_F_OFD_SETLKW(r2, 0x26, 0x4) 4.89779935s ago: executing program 3 (id=709): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) (async) socket(0x2, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2101, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xb8002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) socketpair$auto(0x1, 0x9, 0x7, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x30, 0x5, 0xc) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) (async) prctl$auto(0x7f, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2, 0x1, 0x106) connect$auto(r2, 0x0, 0x61a) (async) ioprio_set$auto(0x8a, 0x0, 0x6) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = syz_clone(0x3012200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r3, 0x0, 0xe0000000000, &(0x7f0000000040)={&(0x7f0000000600)="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", 0x40}, 0x0, 0x4) 4.751588345s ago: executing program 2 (id=711): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000000180)='./file0/file0\x00', 0x8000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') unlinkat$auto(r0, &(0x7f0000000080)='}[,&*}\x00', 0x6) close_range$auto(0x0, r0, 0x4) open(&(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x408) mmap$auto(0x3, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0xe, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2a2cc1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x0, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video57\x00', 0xa240, 0x0) ioctl$auto(r2, 0xc0585611, r2) 4.236911336s ago: executing program 1 (id=716): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = eventfd$auto(0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101801, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto_MADV_SEQUENTIAL(0x7, 0x3, 0x2) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x420800, 0x0) close_range$auto(r2, r2, 0x6) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xa4}) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000180)={r1, 0x4, 0x1, 0x1000}) 4.067367887s ago: executing program 1 (id=717): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x7ef3837b7f62005, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptybc\x00', 0x80, 0x0) fstat$auto(0x2, 0x0) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop10/queue/max_integrity_segments\x00', 0x100, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aeb2, r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_hda_intel/parameters/bdl_pos_adj\x00', 0x80102, 0x0) sendfile$auto(r2, r2, 0x0, 0x8777) 3.81632733s ago: executing program 3 (id=718): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x80002, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0x800002000000eb1, r0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x7, 0x0, 0xfffff801, @_timer={0x0, 0x1, @sival_ptr=&(0x7f0000000000)="e8b77a75819188771133f92b02e5f9da100917d58607decd5d99ae2624b99b8e05b0c7a2749e4d2f6ece18ac186b1469e4919b32ef02136578c8d06d8092721e28e57db007d6c8bcc9888e620cef0e18932fbdb6194835131632f41e1684aecde7cd0fcf5196d03339e2f789c45b69", 0x8001}}}, 0x1000, &(0x7f0000000100)={{0x3, 0x3}, {0x4, 0x100000001}, 0x4, 0xe2d, 0x2, 0xfc, 0x2f, 0x4, 0x62c3, 0xa, 0xff, 0xffffffffffff6fdd, 0x9, 0x7, 0xf0}) r2 = prctl$auto(0x1000000003b, 0x1000000000000001, r1, 0x5, 0x7) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) r3 = epoll_create$auto(0x20009) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000001c0)={0x1}) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, r3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$auto(0xffffffffffffffff, 0x40084d02, 0xffffffffffffffff) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 3.438779223s ago: executing program 0 (id=719): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) (async) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x8001, 0x400000000001, 0x8000000004, 0x9bfe, r0, 0x4) (async) mmap$auto(0x8001, 0x400000000001, 0x8000000004, 0x9bfe, r0, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.events\x00', 0x60640, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000010c0)=""/4111, 0x100f) close_range$auto(r1, r0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) r3 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) fanotify_init$auto(0x200, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x7d3, 0x0) ioctl$auto(0x1, 0x890b, 0x8) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0xffff7fff) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) timer_settime$auto(0x8, 0x7, &(0x7f0000000000)={{0x247, 0xfffffffffffff38c}, {0xfffffffffffffd9b, 0x4}}, 0x0) (async) timer_settime$auto(0x8, 0x7, &(0x7f0000000000)={{0x247, 0xfffffffffffff38c}, {0xfffffffffffffd9b, 0x4}}, 0x0) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) (async) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) 3.433174617s ago: executing program 1 (id=720): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x10000, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x9e) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sysfs$auto(0x2, 0x10000000000002d, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) writev$auto(r2, &(0x7f0000000000)={&(0x7f0000000080), 0x72}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) setsockopt$auto_SO_RXQ_OVFL(r1, 0x0, 0x28, &(0x7f00000000c0)=':-)-\\:-]\\\x00', 0x3) close_range$auto(0x2, 0xa, 0x0) 2.725054629s ago: executing program 0 (id=721): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000004400), r1) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8850}, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) r2 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5c5) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x3ff, 0x3, 0x100000001, 0x6, 0x6, 0x4, 0x11ffffffbfffb, 0xb2, 0x2, 0x6, 0xd, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x5, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7ffffffb, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x400, 0x0, 0xff, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) r3 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) writev$auto(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0x80000000}, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x480001, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/sym-offset\x00', 0x100, 0x0) write$auto(r4, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x0, 0x4, 0x4, 0x6, 0x5d) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) 2.712645182s ago: executing program 2 (id=722): request_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000080)='L^[^\x00', &(0x7f00000000c0)=',^@\\([-$&$(}/\x00', &(0x7f0000000100)=',^@\\([-$&$(}/\x00', 0xfffffffffffffff9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x470000000, 0xd, 0x4000000000000df, 0x109b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000040)={0x5, 0x8, 0x80000001, 0x1000, 0x4, 0x2}, 0x8001, 0x0, 0x7) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x8009) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000140), 0x84000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x2, 0x4}) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x10000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 2.693827475s ago: executing program 1 (id=723): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x80002, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0x800002000000eb1, r0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x7, 0x0, 0xfffff801, @_timer={0x0, 0x1, @sival_ptr=&(0x7f0000000000)="e8b77a75819188771133f92b02e5f9da100917d58607decd5d99ae2624b99b8e05b0c7a2749e4d2f6ece18ac186b1469e4919b32ef02136578c8d06d8092721e28e57db007d6c8bcc9888e620cef0e18932fbdb6194835131632f41e1684aecde7cd0fcf5196d03339e2f789c45b69", 0x8001}}}, 0x1000, &(0x7f0000000100)={{0x3, 0x3}, {0x4, 0x100000001}, 0x4, 0xe2d, 0x2, 0xfc, 0x2f, 0x4, 0x62c3, 0xa, 0xff, 0xffffffffffff6fdd, 0x9, 0x7, 0xf0}) prctl$auto(0x1000000003b, 0x1000000000000001, r1, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) acct$auto(0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = epoll_create$auto(0x20009) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, r3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r5, 0x40084d02, r5) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000200)='/*/-\x00') 2.45161982s ago: executing program 3 (id=724): flistxattr$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/dsp1\x00', 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) madvise$auto(0x0, 0x2003f0, 0x800015) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/bssid\x00', 0x220880, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="00000005000f00520600000000000000000000000000000000002bae5b07c51c18ccead5593fdce5610000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x400e42, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a000006000700", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) 1.058893981s ago: executing program 0 (id=725): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000004400), r1) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8850}, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) r2 = epoll_create$auto(0x4) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, 0x0, 0x401, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x3ff, 0x3, 0x100000001, 0x6, 0x6, 0x4, 0x11ffffffbfffb, 0xb2, 0x2, 0x6, 0xd, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x5, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7ffffffb, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x400, 0x0, 0xff, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) writev$auto(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0x80000000}, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x480001, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/sym-offset\x00', 0x100, 0x0) write$auto(r4, 0x0, 0x100000a3d9) unshare$auto(0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) 1.048870689s ago: executing program 3 (id=726): socket(0xa, 0x3, 0x3a) unshare$auto(0x40000080) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) acct$auto(&(0x7f0000000040)='/dev/video1\x00') prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x4, 0x5, 0x53, 0x5) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x24, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty0\x00', 0x102, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x2, 0xd}, 0xacc}, 0x3, 0x10000) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/status\x00', 0x44800, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f00000000c0)=""/14, 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) write$auto(r2, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x4100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) setfsuid$auto(0xee00) preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xf15e}, 0x2, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) acct$auto(&(0x7f0000000000)='/proc/self/net/rpc/use-gss-proxy\x00') read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x40, 0x0) 750.921795ms ago: executing program 0 (id=727): socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="b5e3"], 0x1c}}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000020", @ANYRES8=r0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 582.387198ms ago: executing program 0 (id=728): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 566.437496ms ago: executing program 2 (id=729): openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(r0, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="b5e3492bd200fcdbdf252100"], 0x1c}}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 415.321677ms ago: executing program 0 (id=730): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x5, 0x4, 0x7) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r1, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x400000f1, 0x2, 0x6}]}) close_range$auto(r0, r1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto_IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000ac0)="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", 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r3, 0x9, 0x9, r4, 0x0) ioctl$auto_BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000000c0)="2956e7468976312c2dac0257063d13555c12e94c21cfa5ca9115efbeabedbc6ffcb2b557c0f562cbe556aaf248f16bd33abd7d3887169013ff94c941e469d31e88cd5ef1bd73cd8a5b40613bd3441a60616e611bbb34b602e053da5570dbbed680a3c655fd3864c9dd218496f0ae55c4d11386f4629742272fffcb671eb7c2e1") mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x5, 0xfffffff7) r5 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r5, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 351.792709ms ago: executing program 3 (id=731): mmap$auto(0x10, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x1000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:00.0/subsystem_device\x00', 0x200, 0x0) read$auto(r0, 0x0, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec14\x00', 0x8000, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r3, 0xc2604110, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0x3) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) keyctl$auto(0xa, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffff8) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r0, 0x4, 0x5, 0x67, 0x4000007, r0, 0x6, 0x8001}, 0x6) 317.27698ms ago: executing program 2 (id=732): close_range$auto(0x2, 0xa, 0x0) 230.195431ms ago: executing program 1 (id=733): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) setsockopt$auto_SO_LOCK_FILTER(r0, 0x0, 0x2c, &(0x7f0000000000)=')[\x00', 0x9) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) (async) setsockopt$auto_SO_LOCK_FILTER(r0, 0x0, 0x2c, &(0x7f0000000000)=')[\x00', 0x9) (async) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (async) read$auto(r2, 0x0, 0x20) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) (async) write$auto(0x3, 0x0, 0x5c8) (async) 164.796509ms ago: executing program 2 (id=734): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000380), 0xffffffffffffffff) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8850}, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) r2 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5c5) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x1, 0x0, 0x8, 0x3ff, 0x5d1, 0x100000001, 0x6, 0x6, 0x4, 0x11ffffffbfffb, 0xb2, 0x2, 0x100000001, 0xd, 0x80, 0x7ff, 0x8000, 0xfffffffe, 0x5, 0x1fe, 0x9, 0xbca7, 0x6, 0x0, 0x0, 0x0, 0x20794, [0x2, 0x6, 0x20, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7ffffffb, 0xfffffffffffffff8, 0x0, 0x2, 0x1fffffc, 0xfffffffffffffffe, 0x1, 0x8, 0x8c, 0x0, 0x7, 0x8000000000000000, 0x0, 0x1, 0x0, 0x400, 0x0, 0x100ff, 0x20000000000000, 0x8000000000, 0x1000000000000200, 0xffffffffffffffff, 0x3fc, 0x96, 0x8001, 0x0, 0xe17, 0x20000000000004, 0x8000000000006]}, 0x1fe, 0x1) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) writev$auto(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0x80000000}, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x480001, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/sym-offset\x00', 0x100, 0x0) write$auto(r4, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x0, 0x4, 0x4, 0x6, 0x5d) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x19, r4, 0x28000) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) getresuid$auto(&(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x2) 0s ago: executing program 1 (id=735): mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) ioctl$auto_BLKROSET(r1, 0x125d, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) r2 = fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x11, 0x8000000000000000, 0x8000) setsockopt$auto_SO_REUSEPORT(r2, 0x200, 0xf, &(0x7f0000000080)='/d\x14(\'\xda)\x9d\xe5\xa5\xc9_\xf2\x96U\xf8:\xfb\x99\xc6a\x00\x00\x00\x00\x00\x00\x00\x00dt\xdb\xfb\x9b\xa0\x9b', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 69.652049][ T5807] cgroup: Unknown subsys name 'net' [ 69.738618][ T5807] cgroup: Unknown subsys name 'cpuset' [ 69.747460][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.176998][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.338465][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345208][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.237382][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.245784][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.247390][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.253605][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.261610][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.276181][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.276713][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.283476][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.294442][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.297638][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.304818][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.312302][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.320076][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.333023][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.341215][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.342038][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.350313][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.362620][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.363478][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.404886][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.854336][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 73.944468][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 74.012823][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 74.059993][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 74.168620][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.175909][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.183321][ T5818] bridge_slave_0: entered allmulticast mode [ 74.191163][ T5818] bridge_slave_0: entered promiscuous mode [ 74.223126][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.230503][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.237679][ T5818] bridge_slave_1: entered allmulticast mode [ 74.244759][ T5818] bridge_slave_1: entered promiscuous mode [ 74.252150][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.259357][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.266522][ T5821] bridge_slave_0: entered allmulticast mode [ 74.273483][ T5821] bridge_slave_0: entered promiscuous mode [ 74.311335][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.318532][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.325983][ T5821] bridge_slave_1: entered allmulticast mode [ 74.332910][ T5821] bridge_slave_1: entered promiscuous mode [ 74.378569][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.385762][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.392997][ T5819] bridge_slave_0: entered allmulticast mode [ 74.400265][ T5819] bridge_slave_0: entered promiscuous mode [ 74.421206][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.440042][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.447510][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.455062][ T5819] bridge_slave_1: entered allmulticast mode [ 74.461997][ T5819] bridge_slave_1: entered promiscuous mode [ 74.469122][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.476509][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.483594][ T5820] bridge_slave_0: entered allmulticast mode [ 74.490806][ T5820] bridge_slave_0: entered promiscuous mode [ 74.500158][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.511614][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.530437][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.537683][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.545227][ T5820] bridge_slave_1: entered allmulticast mode [ 74.552105][ T5820] bridge_slave_1: entered promiscuous mode [ 74.572059][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.632095][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.653029][ T5818] team0: Port device team_slave_0 added [ 74.660875][ T5821] team0: Port device team_slave_0 added [ 74.668568][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.680433][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.691641][ T5818] team0: Port device team_slave_1 added [ 74.698710][ T5821] team0: Port device team_slave_1 added [ 74.718707][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.789009][ T5819] team0: Port device team_slave_0 added [ 74.810148][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.817274][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.843378][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.855393][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.862345][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.888660][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.901407][ T5819] team0: Port device team_slave_1 added [ 74.908780][ T5820] team0: Port device team_slave_0 added [ 74.915033][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.921981][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.948637][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.960283][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.967592][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.993578][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.024790][ T5820] team0: Port device team_slave_1 added [ 75.047781][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.054798][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.080784][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.093054][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.100117][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.126277][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.161679][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.168654][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.194564][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.225115][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.232059][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.258172][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.345264][ T5818] hsr_slave_0: entered promiscuous mode [ 75.351555][ T5818] hsr_slave_1: entered promiscuous mode [ 75.363819][ T5821] hsr_slave_0: entered promiscuous mode [ 75.370116][ T5821] hsr_slave_1: entered promiscuous mode [ 75.376485][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 75.382263][ T5821] Cannot create hsr debugfs directory [ 75.394675][ T5820] hsr_slave_0: entered promiscuous mode [ 75.400829][ T5820] hsr_slave_1: entered promiscuous mode [ 75.407034][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 75.412759][ T5820] Cannot create hsr debugfs directory [ 75.415310][ T5824] Bluetooth: hci3: command tx timeout [ 75.418230][ T5834] Bluetooth: hci2: command tx timeout [ 75.423969][ T5824] Bluetooth: hci0: command tx timeout [ 75.458840][ T5819] hsr_slave_0: entered promiscuous mode [ 75.465357][ T5819] hsr_slave_1: entered promiscuous mode [ 75.471639][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 75.477407][ T5819] Cannot create hsr debugfs directory [ 75.494460][ T5824] Bluetooth: hci1: command tx timeout [ 75.921555][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.933541][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.945628][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.969255][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.012844][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.025308][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.035198][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.051937][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.134934][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.149009][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.172218][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.196333][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.254211][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.273539][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.284939][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.304581][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.366533][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.393284][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.421072][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.428368][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.438354][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.445453][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.461976][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.532769][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.561654][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.583943][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.591108][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.620805][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.627997][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.646693][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.668735][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.675921][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.722207][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.729332][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.851894][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.902094][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.956241][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.963407][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.002693][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.009867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.069265][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.216575][ T5820] veth0_vlan: entered promiscuous mode [ 77.243945][ T5820] veth1_vlan: entered promiscuous mode [ 77.331027][ T5820] veth0_macvtap: entered promiscuous mode [ 77.351468][ T5820] veth1_macvtap: entered promiscuous mode [ 77.363592][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.375841][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.412719][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.456942][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.494739][ T5824] Bluetooth: hci0: command tx timeout [ 77.495111][ T51] Bluetooth: hci3: command tx timeout [ 77.506367][ T5834] Bluetooth: hci2: command tx timeout [ 77.532844][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.543025][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.562335][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.571530][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.580996][ T5834] Bluetooth: hci1: command tx timeout [ 77.590917][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.599744][ T5818] veth0_vlan: entered promiscuous mode [ 77.614860][ T5819] veth0_vlan: entered promiscuous mode [ 77.634053][ T5818] veth1_vlan: entered promiscuous mode [ 77.672498][ T5819] veth1_vlan: entered promiscuous mode [ 77.733770][ T639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.742285][ T639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.799986][ T5818] veth0_macvtap: entered promiscuous mode [ 77.810920][ T639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.811080][ T5818] veth1_macvtap: entered promiscuous mode [ 77.827345][ T639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.835136][ T5821] veth0_vlan: entered promiscuous mode [ 77.856800][ T5821] veth1_vlan: entered promiscuous mode [ 77.885475][ T5819] veth0_macvtap: entered promiscuous mode [ 77.900497][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.912321][ T5819] veth1_macvtap: entered promiscuous mode [ 77.933420][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.963133][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.982768][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.006373][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.016098][ T5821] veth0_macvtap: entered promiscuous mode [ 78.046429][ T639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.075115][ T639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.106955][ T639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.117126][ T639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.129499][ T5821] veth1_macvtap: entered promiscuous mode [ 78.178433][ T639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.194331][ T639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.218061][ T639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.228876][ T639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.270431][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.328351][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.382154][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.394796][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.406470][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.416121][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.430442][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.454661][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.572100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.586150][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.604109][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.613418][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.655075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.718722][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.735820][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.809683][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.838133][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.957539][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.973174][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.083641][ T5924] netlink: 302 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.111446][ T5924] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.124013][ T5924] Zero length message leads to an empty skb [ 79.574586][ T5834] Bluetooth: hci0: command tx timeout [ 79.577636][ T51] Bluetooth: hci2: command tx timeout [ 79.580046][ T5834] Bluetooth: hci3: command tx timeout [ 79.592739][ T5944] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 79.644838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.655395][ T5834] Bluetooth: hci1: command tx timeout [ 80.452560][ T5950] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 80.664948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.824747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.215929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.354940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.365381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.375313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.655082][ T5834] Bluetooth: hci3: command tx timeout [ 81.660527][ T5834] Bluetooth: hci2: command tx timeout [ 81.664443][ T51] Bluetooth: hci0: command tx timeout [ 81.734594][ T51] Bluetooth: hci1: command tx timeout [ 82.293336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d2e4800: rx timeout, send abort [ 82.293891][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d2e4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.414816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.414915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.813911][ T9] cfg80211: failed to load regulatory.db [ 83.496345][ T6011] process 'syz.1.20' launched './file0' with NULL argv: empty string added [ 85.285013][ T6047] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 87.025780][ T6078] mmap: syz.3.36 (6078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.607107][ T6101] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.549009][ T6177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.670811][ T6160] syz.3.48 (6160) used greatest stack depth: 19672 bytes left [ 94.348757][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880233a3400: rx timeout, send abort [ 94.357433][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880233a3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 96.505301][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805de11400: rx timeout, send abort [ 96.513746][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805de11400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.585308][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc39400: rx timeout, send abort [ 99.593715][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc39400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 100.890966][ T6333] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 101.166713][ T6331] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.549730][ T6371] can: request_module (can-proto-5) failed. [ 105.405416][ T6395] Unable to find swap-space signature [ 106.247884][ T6409] random: crng reseeded on system resumption [ 107.424961][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 107.445167][ T6437] netlink: 54041 bytes leftover after parsing attributes in process `syz.1.105'. [ 112.455104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dcc4c00: rx timeout, send abort [ 112.463647][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dcc4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.828052][ T6507] FAULT_INJECTION: forcing a failure. [ 112.828052][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 112.924522][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(full) [ 112.924561][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.924585][ T6507] Call Trace: [ 112.924595][ T6507] [ 112.924608][ T6507] dump_stack_lvl+0x100/0x190 [ 112.924659][ T6507] should_fail_ex.cold+0x5/0xa [ 112.924700][ T6507] ? xfrm_hash_alloc+0xcf/0x100 [ 112.924735][ T6507] should_failslab+0xc2/0x120 [ 112.924778][ T6507] __kmalloc_noprof+0xe0/0x850 [ 112.924823][ T6507] xfrm_hash_alloc+0xcf/0x100 [ 112.924858][ T6507] xfrm_net_init+0x35d/0xcc0 [ 112.924903][ T6507] ? __pfx_xfrm_net_init+0x10/0x10 [ 112.924940][ T6507] ops_init+0x1e2/0x5f0 [ 112.924974][ T6507] setup_net+0x118/0x3a0 [ 112.925004][ T6507] ? __pfx_setup_net+0x10/0x10 [ 112.925031][ T6507] ? lockdep_init_map_type+0x5c/0x250 [ 112.925068][ T6507] ? mutex_init_lockep+0x110/0x150 [ 112.925105][ T6507] copy_net_ns+0x46f/0x7c0 [ 112.925139][ T6507] create_new_namespaces+0x3ea/0xac0 [ 112.925186][ T6507] copy_namespaces+0x468/0x5e0 [ 112.925215][ T6507] copy_process+0x3226/0x7a10 [ 112.925261][ T6507] ? __pfx_copy_process+0x10/0x10 [ 112.925309][ T6507] kernel_clone+0xfc/0x9a0 [ 112.925334][ T6507] ? __pfx_futex_wait+0x10/0x10 [ 112.925373][ T6507] ? __pfx_kernel_clone+0x10/0x10 [ 112.925418][ T6507] __do_sys_clone+0xd9/0x120 [ 112.925448][ T6507] ? __pfx___do_sys_clone+0x10/0x10 [ 112.925477][ T6507] ? find_held_lock+0x2b/0x80 [ 112.925544][ T6507] do_syscall_64+0x106/0xf80 [ 112.925570][ T6507] ? clear_bhb_loop+0x40/0x90 [ 112.925604][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.925632][ T6507] RIP: 0033:0x7fe535d9c629 [ 112.925655][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.925695][ T6507] RSP: 002b:00007fe536b8efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 112.925721][ T6507] RAX: ffffffffffffffda RBX: 00007fe536016090 RCX: 00007fe535d9c629 [ 112.925740][ T6507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 112.925756][ T6507] RBP: 00007fe535e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.925772][ T6507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.925788][ T6507] R13: 00007fe536016128 R14: 00007fe536016090 R15: 00007fff7ba3a708 [ 112.925826][ T6507] [ 113.651656][ T6517] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.668794][ T6516] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.815156][ T6516] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 114.988454][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ce5400: rx timeout, send abort [ 114.996848][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079ce5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.272203][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 117.298900][ T6584] netlink: 54041 bytes leftover after parsing attributes in process `syz.3.135'. [ 117.792686][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d96c000: rx timeout, send abort [ 117.801360][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d96c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.785348][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dee1800: rx timeout, send abort [ 122.793766][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dee1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.636750][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d74f400: rx timeout, send abort [ 124.645249][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d74f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.135822][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 125.156411][ T6715] netlink: 17 bytes leftover after parsing attributes in process `syz.2.161'. [ 126.489007][ T6749] netlink: 13 bytes leftover after parsing attributes in process `syz.3.170'. [ 126.987501][ T6741] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 129.857893][ T6810] bond0: option use_carrier: invalid value (/Eev/audio1) [ 130.632480][ T6834] netlink: 346 bytes leftover after parsing attributes in process `syz.3.188'. [ 132.783017][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789503][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.746966][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803340a000: rx timeout, send abort [ 134.756136][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803340a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 134.994850][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 135.050244][ T6905] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.209'. [ 135.774806][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804092e400: rx timeout, send abort [ 135.783258][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804092e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.841610][ T6916] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.212' sets config #-4 [ 136.754161][ T6944] netlink: 'syz.1.219': attribute type 4 has an invalid length. [ 136.804473][ T6944] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 136.897372][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 137.034833][ T6949] netlink: 54041 bytes leftover after parsing attributes in process `syz.2.220'. [ 146.644709][ T7102] syz.3.255 uses obsolete (PF_INET,SOCK_PACKET) [ 147.968493][ T7120] random: crng reseeded on system resumption [ 148.028064][ T7120] FAULT_INJECTION: forcing a failure. [ 148.028064][ T7120] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 148.154910][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) [ 148.154932][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.154941][ T7120] Call Trace: [ 148.154949][ T7120] [ 148.154956][ T7120] dump_stack_lvl+0x100/0x190 [ 148.154992][ T7120] should_fail_ex.cold+0x5/0xa [ 148.155007][ T7120] ? prepare_alloc_pages+0x16d/0x5f0 [ 148.155032][ T7120] should_fail_alloc_page+0xeb/0x140 [ 148.155055][ T7120] prepare_alloc_pages+0x1f0/0x5f0 [ 148.155082][ T7120] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 148.155102][ T7120] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 148.155127][ T7120] ? stack_trace_save+0x8e/0xc0 [ 148.155149][ T7120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.155167][ T7120] ? stack_depot_save_flags+0x27/0x9d0 [ 148.155188][ T7120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.155218][ T7120] ? kasan_save_stack+0x3f/0x50 [ 148.155237][ T7120] ? kasan_save_stack+0x30/0x50 [ 148.155255][ T7120] ? kasan_save_track+0x14/0x30 [ 148.155276][ T7120] ? do_sys_openat2+0x10d/0x1e0 [ 148.155291][ T7120] ? __x64_sys_openat+0x12d/0x210 [ 148.155306][ T7120] ? do_syscall_64+0x106/0xf80 [ 148.155320][ T7120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.155336][ T7120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.155359][ T7120] ? policy_nodemask+0xed/0x4f0 [ 148.155382][ T7120] alloc_pages_mpol+0x1fb/0x550 [ 148.155404][ T7120] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.155426][ T7120] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.155450][ T7120] alloc_pages_noprof+0x131/0x390 [ 148.155472][ T7120] get_zeroed_page_noprof+0x18/0xb0 [ 148.155497][ T7120] get_image_page+0x18/0x1a0 [ 148.155519][ T7120] alloc_rtree_node+0x3c/0xb0 [ 148.155540][ T7120] memory_bm_create+0x65e/0xba0 [ 148.155570][ T7120] create_basic_memory_bitmaps+0x10b/0x350 [ 148.155596][ T7120] snapshot_open+0x230/0x2a0 [ 148.155611][ T7120] ? __pfx_snapshot_open+0x10/0x10 [ 148.155631][ T7120] misc_open+0x26d/0x450 [ 148.155665][ T7120] ? __pfx_misc_open+0x10/0x10 [ 148.155698][ T7120] chrdev_open+0x234/0x6a0 [ 148.155728][ T7120] ? __pfx_apparmor_file_open+0x10/0x10 [ 148.155746][ T7120] ? __pfx_chrdev_open+0x10/0x10 [ 148.155768][ T7120] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 148.155794][ T7120] do_dentry_open+0x6d8/0x1660 [ 148.155815][ T7120] ? __pfx_chrdev_open+0x10/0x10 [ 148.155840][ T7120] vfs_open+0x82/0x3f0 [ 148.155857][ T7120] path_openat+0x208c/0x31a0 [ 148.155884][ T7120] ? __pfx_path_openat+0x10/0x10 [ 148.155911][ T7120] do_file_open+0x20e/0x430 [ 148.155933][ T7120] ? __pfx_do_file_open+0x10/0x10 [ 148.155969][ T7120] ? alloc_fd+0x476/0x790 [ 148.155991][ T7120] ? do_getname+0x191/0x390 [ 148.156007][ T7120] do_sys_openat2+0x10d/0x1e0 [ 148.156023][ T7120] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.156039][ T7120] ? find_held_lock+0x2b/0x80 [ 148.156066][ T7120] __x64_sys_openat+0x12d/0x210 [ 148.156083][ T7120] ? __pfx___x64_sys_openat+0x10/0x10 [ 148.156106][ T7120] do_syscall_64+0x106/0xf80 [ 148.156120][ T7120] ? clear_bhb_loop+0x40/0x90 [ 148.156138][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.156152][ T7120] RIP: 0033:0x7fe535d9c629 [ 148.156173][ T7120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.156188][ T7120] RSP: 002b:00007fe536b6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.156217][ T7120] RAX: ffffffffffffffda RBX: 00007fe536016180 RCX: 00007fe535d9c629 [ 148.156227][ T7120] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 148.156236][ T7120] RBP: 00007fe535e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.156245][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.156253][ T7120] R13: 00007fe536016218 R14: 00007fe536016180 R15: 00007fff7ba3a708 [ 148.156273][ T7120] [ 156.082713][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 156.093313][ T7197] netlink: 25 bytes leftover after parsing attributes in process `syz.0.275'. [ 157.054684][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 160.916770][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805de87c00: rx timeout, send abort [ 160.925230][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805de87c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.000905][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 166.581006][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 169.192195][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cc3fc00: rx timeout, send abort [ 169.200688][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc3fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 170.525795][ T7369] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 171.057736][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 175.579031][ T7420] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 178.679662][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803280b000: rx timeout, send abort [ 178.688120][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803280b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 178.731390][ C0] vcan0: j1939_simple_recv: Received already invalidated message [ 179.241573][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 180.883344][ T30] audit: type=1800 audit(1771396506.255:2): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.334" name="dbroot" dev="configfs" ino=15185 res=0 errno=0 [ 180.990680][ T7490] Console: switching to colour VGA+ 80x25 [ 181.461523][ T7489] delete_channel: no stack [ 181.906730][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 183.813741][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032ff3400: rx timeout, send abort [ 183.824710][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032ff3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 186.051701][ T7580] zswap: compressor  not available [ 188.210501][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880326e3400: rx timeout, send abort [ 188.219096][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880326e3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 188.429323][ T7624] netlink: 330 bytes leftover after parsing attributes in process `syz.2.365'. [ 188.470530][ T7624] mac80211_hwsim hwsim5 : renamed from wlan0 (while UP) [ 189.812410][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 192.139314][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd1f800: rx timeout, send abort [ 192.147857][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dd1f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.095235][ T7718] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 193.160840][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 194.224911][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231266][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.271159][ T7772] netlink: 'syz.0.396': attribute type 27 has an invalid length. [ 195.360299][ T7772] netlink: 334 bytes leftover after parsing attributes in process `syz.0.396'. [ 195.613562][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b836400: rx timeout, send abort [ 195.621996][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b836400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.299189][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 196.299210][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 196.305642][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 196.311270][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 196.750252][ T7797] Invalid ELF header magic: != ELF [ 197.257431][ T7811] FAULT_INJECTION: forcing a failure. [ 197.257431][ T7811] name failslab, interval 1, probability 0, space 0, times 0 [ 197.336370][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.2.403 Not tainted syzkaller #0 PREEMPT(full) [ 197.336403][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.336425][ T7811] Call Trace: [ 197.336433][ T7811] [ 197.336444][ T7811] dump_stack_lvl+0x100/0x190 [ 197.336485][ T7811] should_fail_ex.cold+0x5/0xa [ 197.336513][ T7811] should_failslab+0xc2/0x120 [ 197.336547][ T7811] __kmalloc_cache_node_noprof+0x7d/0x770 [ 197.336580][ T7811] ? __get_vm_area_node+0x101/0x330 [ 197.336624][ T7811] __get_vm_area_node+0x101/0x330 [ 197.336660][ T7811] ? __kasan_kmalloc+0xaa/0xb0 [ 197.336690][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.336724][ T7811] __vmalloc_node_range_noprof+0x213/0x1530 [ 197.336751][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.336780][ T7811] ? do_syscall_64+0x106/0xf80 [ 197.336804][ T7811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.336836][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.336878][ T7811] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.336920][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.336952][ T7811] vmalloc_user_noprof+0x9e/0xe0 [ 197.336977][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.337010][ T7811] vb2_vmalloc_alloc+0x135/0x410 [ 197.337041][ T7811] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 197.337076][ T7811] __vb2_queue_alloc+0x8d5/0x1160 [ 197.337134][ T7811] vb2_core_reqbufs+0x899/0xf30 [ 197.337173][ T7811] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 197.337225][ T7811] __vb2_init_fileio+0x32d/0x1000 [ 197.337256][ T7811] ? lockdep_hardirqs_on+0x78/0x100 [ 197.337284][ T7811] ? __pollwait+0x276/0x470 [ 197.337320][ T7811] vb2_core_poll+0x611/0x740 [ 197.337352][ T7811] vb2_poll+0x4b/0xe0 [ 197.337381][ T7811] vb2_fop_poll+0x10e/0x350 [ 197.337412][ T7811] ? __pfx_vb2_fop_poll+0x10/0x10 [ 197.337441][ T7811] v4l2_poll+0x15f/0x220 [ 197.337468][ T7811] ? __pfx_v4l2_poll+0x10/0x10 [ 197.337493][ T7811] do_sys_poll+0x6e5/0xeb0 [ 197.337539][ T7811] ? __pfx_do_sys_poll+0x10/0x10 [ 197.337601][ T7811] ? __futex_wait+0x256/0x300 [ 197.337637][ T7811] ? __pfx___pollwait+0x10/0x10 [ 197.337673][ T7811] ? __pfx_pollwake+0x10/0x10 [ 197.337758][ T7811] ? ktime_get_ts64+0x2d2/0x3f0 [ 197.337784][ T7811] ? read_tsc+0x9/0x20 [ 197.337809][ T7811] ? ktime_get_ts64+0x256/0x3f0 [ 197.337838][ T7811] ? poll_select_set_timeout+0xcc/0x160 [ 197.337868][ T7811] ? __x64_sys_futex+0x358/0x4d0 [ 197.337901][ T7811] __x64_sys_poll+0x1b3/0x420 [ 197.337936][ T7811] ? __pfx___x64_sys_poll+0x10/0x10 [ 197.337977][ T7811] do_syscall_64+0x106/0xf80 [ 197.338002][ T7811] ? clear_bhb_loop+0x40/0x90 [ 197.338032][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.338057][ T7811] RIP: 0033:0x7fe535d9c629 [ 197.338079][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.338109][ T7811] RSP: 002b:00007fe536b8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 197.338138][ T7811] RAX: ffffffffffffffda RBX: 00007fe536016090 RCX: 00007fe535d9c629 [ 197.338154][ T7811] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 197.338169][ T7811] RBP: 00007fe535e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 197.338183][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.338198][ T7811] R13: 00007fe536016128 R14: 00007fe536016090 R15: 00007fff7ba3a708 [ 197.338233][ T7811] [ 197.341650][ T7811] syz.2.403: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.692116][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.2.403 Not tainted syzkaller #0 PREEMPT(full) [ 197.692148][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.692161][ T7811] Call Trace: [ 197.692170][ T7811] [ 197.692179][ T7811] dump_stack_lvl+0x100/0x190 [ 197.692221][ T7811] warn_alloc.cold+0x95/0x1c1 [ 197.692264][ T7811] ? __pfx_warn_alloc+0x10/0x10 [ 197.692294][ T7811] ? trace_kmalloc+0x101/0x130 [ 197.692333][ T7811] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 197.692371][ T7811] ? __kasan_kmalloc+0x8a/0xb0 [ 197.692405][ T7811] ? __get_vm_area_node+0x208/0x330 [ 197.692451][ T7811] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 197.692478][ T7811] ? do_syscall_64+0x106/0xf80 [ 197.692502][ T7811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.692536][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.692581][ T7811] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.692624][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.692658][ T7811] vmalloc_user_noprof+0x9e/0xe0 [ 197.692684][ T7811] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.692717][ T7811] vb2_vmalloc_alloc+0x135/0x410 [ 197.692748][ T7811] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 197.692784][ T7811] __vb2_queue_alloc+0x8d5/0x1160 [ 197.692835][ T7811] vb2_core_reqbufs+0x899/0xf30 [ 197.692874][ T7811] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 197.692927][ T7811] __vb2_init_fileio+0x32d/0x1000 [ 197.692958][ T7811] ? lockdep_hardirqs_on+0x78/0x100 [ 197.692986][ T7811] ? __pollwait+0x276/0x470 [ 197.693022][ T7811] vb2_core_poll+0x611/0x740 [ 197.693057][ T7811] vb2_poll+0x4b/0xe0 [ 197.693094][ T7811] vb2_fop_poll+0x10e/0x350 [ 197.693125][ T7811] ? __pfx_vb2_fop_poll+0x10/0x10 [ 197.693154][ T7811] v4l2_poll+0x15f/0x220 [ 197.693182][ T7811] ? __pfx_v4l2_poll+0x10/0x10 [ 197.693208][ T7811] do_sys_poll+0x6e5/0xeb0 [ 197.693253][ T7811] ? __pfx_do_sys_poll+0x10/0x10 [ 197.693316][ T7811] ? __futex_wait+0x256/0x300 [ 197.693353][ T7811] ? __pfx___pollwait+0x10/0x10 [ 197.693390][ T7811] ? __pfx_pollwake+0x10/0x10 [ 197.693478][ T7811] ? ktime_get_ts64+0x2d2/0x3f0 [ 197.693505][ T7811] ? read_tsc+0x9/0x20 [ 197.693530][ T7811] ? ktime_get_ts64+0x256/0x3f0 [ 197.693560][ T7811] ? poll_select_set_timeout+0xcc/0x160 [ 197.693593][ T7811] ? __x64_sys_futex+0x358/0x4d0 [ 197.693625][ T7811] __x64_sys_poll+0x1b3/0x420 [ 197.693660][ T7811] ? __pfx___x64_sys_poll+0x10/0x10 [ 197.693704][ T7811] do_syscall_64+0x106/0xf80 [ 197.693728][ T7811] ? clear_bhb_loop+0x40/0x90 [ 197.693759][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.693786][ T7811] RIP: 0033:0x7fe535d9c629 [ 197.693808][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.693831][ T7811] RSP: 002b:00007fe536b8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 197.693854][ T7811] RAX: ffffffffffffffda RBX: 00007fe536016090 RCX: 00007fe535d9c629 [ 197.693871][ T7811] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 197.693886][ T7811] RBP: 00007fe535e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 197.693900][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.693915][ T7811] R13: 00007fe536016128 R14: 00007fe536016090 R15: 00007fff7ba3a708 [ 197.693950][ T7811] [ 197.693972][ T7811] Mem-Info: [ 198.024504][ T7811] active_anon:50852 inactive_anon:0 isolated_anon:0 [ 198.024504][ T7811] active_file:18084 inactive_file:40099 isolated_file:0 [ 198.024504][ T7811] unevictable:1975 dirty:31 writeback:0 [ 198.024504][ T7811] slab_reclaimable:12309 slab_unreclaimable:90894 [ 198.024504][ T7811] mapped:51028 shmem:39528 pagetables:1375 [ 198.024504][ T7811] sec_pagetables:0 bounce:0 [ 198.024504][ T7811] kernel_misc_reclaimable:0 [ 198.024504][ T7811] free:1279081 free_pcp:14560 free_cma:0 [ 198.120771][ T7811] Node 0 active_anon:207456kB inactive_anon:0kB active_file:72336kB inactive_file:160156kB unevictable:6312kB isolated(anon):0kB isolated(file):0kB mapped:206020kB dirty:124kB writeback:0kB shmem:160876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11924kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.194599][ T7811] Node 1 active_anon:152kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1588kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.284489][ T7811] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.365590][ T7811] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 198.494360][ T7811] Node 0 DMA32 free:1128684kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:237856kB inactive_anon:0kB active_file:72336kB inactive_file:162056kB unevictable:4212kB writepending:124kB zspages:0kB present:3129332kB managed:2537476kB mlocked:2676kB bounce:0kB free_pcp:59580kB local_pcp:33932kB free_cma:0kB [ 198.554402][ T7811] lowmem_reserve[]: 0 0 1 1 1 [ 198.564583][ T7811] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1064kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 198.616525][ T7811] lowmem_reserve[]: 0 0 0 0 0 [ 198.621288][ T7811] Node 1 Normal free:3936080kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1588kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:52kB bounce:0kB free_pcp:296kB local_pcp:296kB free_cma:0kB [ 198.674431][ T7811] lowmem_reserve[]: 0 0 0 0 0 [ 198.679199][ T7811] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.704539][ T7811] Node 0 DMA32: 1626*4kB (UM) 1229*8kB (UME) 455*16kB (UME) 98*32kB (U) 223*64kB (UME) 742*128kB (UM) 382*256kB (UME) 176*512kB (UME) 59*1024kB (UME) 4*2048kB (M) 177*4096kB (M) = 1117504kB [ 198.743764][ T7811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 198.778371][ T7811] Node 1 Normal: 11*4kB (UME) 17*8kB (UM) 21*16kB (UME) 16*32kB (UME) 18*64kB (UME) 8*128kB (UM) 7*256kB (UME) 8*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 957*4096kB (UM) = 3936132kB [ 198.824365][ T7811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.854424][ T7811] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.888384][ T7811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.914357][ T7811] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.964376][ T7811] 113185 total pagecache pages [ 198.969200][ T7811] 0 pages in swap cache [ 198.973357][ T7811] Free swap = 124996kB [ 198.987719][ T7811] Total swap = 124996kB [ 199.001359][ T7811] 2097051 pages RAM [ 199.014725][ T7811] 0 pages HighMem/MovableOnly [ 199.024568][ T7811] 430801 pages reserved [ 199.028729][ T7811] 0 pages cma reserved [ 200.288306][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 204.761462][ T7904] netlink: 338 bytes leftover after parsing attributes in process `syz.3.423'. [ 205.251601][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.425'. [ 205.386903][ T7919] veth1_vlan: entered allmulticast mode [ 206.497153][ T7939] netlink: 342 bytes leftover after parsing attributes in process `syz.0.429'. [ 208.279892][ T7962] netlink: 548 bytes leftover after parsing attributes in process `syz.2.436'. [ 208.289402][ T5834] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 208.297119][ T5834] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 209.985701][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 210.114482][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de73400: rx timeout, send abort [ 210.122935][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805de73400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 211.418680][ T8001] Invalid ELF header magic: != ELF [ 213.377978][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 215.413752][ T8070] FAULT_INJECTION: forcing a failure. [ 215.413752][ T8070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.534458][ T8070] CPU: 1 UID: 0 PID: 8070 Comm: syz.3.461 Not tainted syzkaller #0 PREEMPT(full) [ 215.534497][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.534513][ T8070] Call Trace: [ 215.534522][ T8070] [ 215.534533][ T8070] dump_stack_lvl+0x100/0x190 [ 215.534579][ T8070] should_fail_ex.cold+0x5/0xa [ 215.534605][ T8070] ? prepare_alloc_pages+0x16d/0x5f0 [ 215.534659][ T8070] should_fail_alloc_page+0xeb/0x140 [ 215.534704][ T8070] prepare_alloc_pages+0x1f0/0x5f0 [ 215.534748][ T8070] ? unwind_get_return_address+0x59/0xa0 [ 215.534781][ T8070] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 215.534830][ T8070] ? stack_trace_save+0x8e/0xc0 [ 215.534873][ T8070] ? __pfx_stack_trace_save+0x10/0x10 [ 215.534917][ T8070] ? stack_depot_save_flags+0x27/0x9d0 [ 215.534961][ T8070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 215.534999][ T8070] ? kasan_save_stack+0x3f/0x50 [ 215.535035][ T8070] ? kasan_save_track+0x14/0x30 [ 215.535069][ T8070] ? __kasan_slab_alloc+0x89/0x90 [ 215.535104][ T8070] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 215.535138][ T8070] ? __pmd_alloc+0xbf/0x9c0 [ 215.535162][ T8070] ? __handle_mm_fault+0xa99/0x2b60 [ 215.535190][ T8070] ? handle_mm_fault+0x36d/0xa20 [ 215.535218][ T8070] ? do_user_addr_fault+0x74c/0x12f0 [ 215.535258][ T8070] ? exc_page_fault+0x6f/0xd0 [ 215.535282][ T8070] ? asm_exc_page_fault+0x26/0x30 [ 215.535313][ T8070] ? netlink_recvmsg+0x27e/0xa90 [ 215.535340][ T8070] ? sock_recvmsg+0x1f9/0x250 [ 215.535371][ T8070] ? ____sys_recvmsg+0x218/0x6b0 [ 215.535401][ T8070] ? ___sys_recvmsg+0x16a/0x1a0 [ 215.535433][ T8070] ? do_recvmmsg+0x301/0x760 [ 215.535465][ T8070] ? __x64_sys_recvmmsg+0x22a/0x280 [ 215.535497][ T8070] ? do_syscall_64+0x106/0xf80 [ 215.535524][ T8070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.535556][ T8070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.535602][ T8070] ? policy_nodemask+0xed/0x4f0 [ 215.535647][ T8070] alloc_pages_mpol+0x1fb/0x550 [ 215.535695][ T8070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 215.535747][ T8070] ? __pfx_filemap_map_pages+0x10/0x10 [ 215.535782][ T8070] alloc_pages_noprof+0x131/0x390 [ 215.535825][ T8070] pte_alloc_one+0x1e/0x3e0 [ 215.535856][ T8070] __do_fault+0x359/0x550 [ 215.535897][ T8070] ? __pfx_filemap_map_pages+0x10/0x10 [ 215.535931][ T8070] do_fault+0x2db/0x1a00 [ 215.535955][ T8070] ? __pmd_alloc+0x6aa/0x9c0 [ 215.535985][ T8070] __handle_mm_fault+0x180f/0x2b60 [ 215.536023][ T8070] ? mt_find+0x45e/0x8e0 [ 215.536055][ T8070] ? __pfx___handle_mm_fault+0x10/0x10 [ 215.536085][ T8070] ? __pfx_mt_find+0x10/0x10 [ 215.536136][ T8070] ? find_vma+0xbf/0x140 [ 215.536174][ T8070] ? __pfx_find_vma+0x10/0x10 [ 215.536216][ T8070] handle_mm_fault+0x36d/0xa20 [ 215.536255][ T8070] do_user_addr_fault+0x74c/0x12f0 [ 215.536309][ T8070] exc_page_fault+0x6f/0xd0 [ 215.536339][ T8070] asm_exc_page_fault+0x26/0x30 [ 215.536366][ T8070] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 215.536405][ T8070] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 215.536434][ T8070] RSP: 0018:ffffc90002727688 EFLAGS: 00050212 [ 215.536457][ T8070] RAX: 0000000200000034 RBX: 0000000000000034 RCX: 0000000000000034 [ 215.536476][ T8070] RDX: 0000000000000001 RSI: ffff88805deeb740 RDI: 0000000000000000 [ 215.536494][ T8070] RBP: ffffc90002727bb0 R08: 0000000000000000 R09: ffffed100bbdd6ee [ 215.536512][ T8070] R10: ffff88805deeb773 R11: 0000000000000000 R12: ffff88805deeb740 [ 215.536530][ T8070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000034 [ 215.536565][ T8070] _copy_to_iter+0x4c5/0x1720 [ 215.536612][ T8070] ? __pfx__copy_to_iter+0x10/0x10 [ 215.536653][ T8070] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 215.536699][ T8070] ? __skb_recv_datagram+0x1b2/0x220 [ 215.536747][ T8070] simple_copy_to_iter+0x46/0x90 [ 215.536784][ T8070] __skb_datagram_iter+0x129/0x900 [ 215.536820][ T8070] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 215.536861][ T8070] ? skb_recv_datagram+0x88/0xc0 [ 215.536904][ T8070] skb_copy_datagram_iter+0xa1/0x270 [ 215.536945][ T8070] netlink_recvmsg+0x27e/0xa90 [ 215.536977][ T8070] ? __pfx_netlink_recvmsg+0x10/0x10 [ 215.537013][ T8070] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 215.537054][ T8070] sock_recvmsg+0x1f9/0x250 [ 215.537090][ T8070] ____sys_recvmsg+0x218/0x6b0 [ 215.537132][ T8070] ? __pfx_____sys_recvmsg+0x10/0x10 [ 215.537182][ T8070] ? __lock_acquire+0x4a5/0x2630 [ 215.537216][ T8070] ? preempt_schedule_common+0x42/0xc0 [ 215.537265][ T8070] ___sys_recvmsg+0x16a/0x1a0 [ 215.537303][ T8070] ? __pfx____sys_recvmsg+0x10/0x10 [ 215.537343][ T8070] ? find_held_lock+0x2b/0x80 [ 215.537408][ T8070] do_recvmmsg+0x301/0x760 [ 215.537450][ T8070] ? __pfx_do_recvmmsg+0x10/0x10 [ 215.537485][ T8070] ? ksys_write+0x190/0x250 [ 215.537529][ T8070] ? do_futex+0x192/0x350 [ 215.537575][ T8070] ? __x64_sys_futex+0x34f/0x4d0 [ 215.537611][ T8070] __x64_sys_recvmmsg+0x22a/0x280 [ 215.537642][ T8070] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 215.537689][ T8070] do_syscall_64+0x106/0xf80 [ 215.537716][ T8070] ? clear_bhb_loop+0x40/0x90 [ 215.537751][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.537779][ T8070] RIP: 0033:0x7f222179c629 [ 215.537802][ T8070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.537829][ T8070] RSP: 002b:00007f222270b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 215.537855][ T8070] RAX: ffffffffffffffda RBX: 00007f2221a16090 RCX: 00007f222179c629 [ 215.537873][ T8070] RDX: 00000000fffffff9 RSI: 0000200000000140 RDI: 0000000000000005 [ 215.537891][ T8070] RBP: 00007f2221832b39 R08: 0000000000000000 R09: 0000000000000000 [ 215.537908][ T8070] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 215.537924][ T8070] R13: 00007f2221a16128 R14: 00007f2221a16090 R15: 00007fff2f994ff8 [ 215.537963][ T8070] [ 216.204200][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dee0400: rx timeout, send abort [ 216.212673][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dee0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 222.455578][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cda7c00: rx timeout, send abort [ 222.464678][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cda7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 224.102888][ T8176] Invalid ELF header magic: != ELF [ 225.884740][ T8194] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 227.041980][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 227.446338][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079bb2c00: rx timeout, send abort [ 227.454790][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079bb2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 227.667647][ T8229] netlink: 342 bytes leftover after parsing attributes in process `syz.1.494'. [ 228.035074][ T30] audit: type=1800 audit(1771404353.399:3): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.497" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 229.214535][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 230.005874][ T8277] zswap: compressor not available [ 231.012248][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028ef4400: rx timeout, send abort [ 231.020695][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028ef4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.945224][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 237.950307][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cdcbc00: rx timeout, send abort [ 237.958837][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cdcbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.295622][ T8416] hub 1-0:1.0: USB hub found [ 240.308666][ T8416] hub 1-0:1.0: 1 port detected [ 241.712120][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 241.751845][ T8447] netlink: 25 bytes leftover after parsing attributes in process `syz.2.538'. [ 245.057974][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 245.086046][ T8489] netlink: 25 bytes leftover after parsing attributes in process `syz.0.548'. [ 245.209398][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 245.230343][ T8491] netlink: 25 bytes leftover after parsing attributes in process `syz.1.549'. [ 247.975001][ C1] sd 0:0:1:0: [sda] tag#5463 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 247.985491][ C1] sd 0:0:1:0: [sda] tag#5463 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 248.548860][ T8573] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 251.595888][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b61f400: rx timeout, send abort [ 251.604225][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b61f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.292513][ T8636] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 253.089746][ T8646] random: crng reseeded on system resumption [ 253.657205][ T8654] ecryptfs_miscdev_write: Invalid packet size [192] [ 254.608195][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 254.701949][ T8672] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.764553][ T8672] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 254.772148][ T8672] page_type: f5(slab) [ 254.804388][ T8672] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 255.024143][ T8672] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 255.104413][ T8672] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 255.113151][ T8672] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 255.224475][ T8672] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 255.360451][ T8672] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 255.564371][ T8672] page dumped because: unmovable page [ 255.569801][ T8672] page_owner tracks the page as allocated [ 255.624428][ T8672] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 73664958864, free_ts 71618528972 [ 255.668820][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.684480][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.761560][ T8672] post_alloc_hook+0x153/0x170 [ 255.796854][ T8672] get_page_from_freelist+0x111d/0x3140 [ 255.843193][ T8672] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 256.024358][ T8672] new_slab+0xa6/0x6d0 [ 256.028522][ T8672] refill_objects+0x26b/0x400 [ 256.066178][ T8672] __pcs_replace_empty_main+0x19f/0x600 [ 256.071808][ T8672] __kmalloc_cache_noprof+0x493/0x6f0 [ 256.124366][ T8672] kobject_uevent_env+0x263/0x18b0 [ 256.129559][ T8672] netdev_queue_update_kobjects+0x1a7/0x6f0 [ 256.194320][ T8672] netdev_register_kobject+0x2b3/0x3d0 [ 256.234317][ T8672] register_netdevice+0x12e0/0x2210 [ 256.264317][ T8672] register_netdev+0x34/0x50 [ 256.269117][ T8672] ip6_tnl_init_net+0x2ff/0x480 [ 256.361420][ T8672] ops_init+0x1e2/0x5f0 [ 256.384386][ T8672] setup_net+0x118/0x3a0 [ 256.391422][ T8672] copy_net_ns+0x46f/0x7c0 [ 256.433289][ T8672] page last free pid 5807 tgid 5807 stack trace: [ 256.453520][ T8672] __free_frozen_pages+0x7ca/0x10a0 [ 256.514805][ T8672] __folio_put+0x3b4/0x540 [ 256.524483][ T8672] skb_release_data+0x667/0x9d0 [ 256.563510][ T8672] __kfree_skb+0x4f/0x70 [ 256.578118][ T8672] tcp_ack+0x2072/0x74f0 [ 256.582403][ T8672] tcp_rcv_established+0x1175/0x3980 [ 256.685569][ T8672] tcp_v4_do_rcv+0xc64/0x10a0 [ 256.690329][ T8672] __release_sock+0x35a/0x440 [ 256.740834][ T8672] __sk_flush_backlog+0x27/0xc0 [ 256.759475][ T8672] tcp_sendmsg_locked+0x3c1e/0x45f0 [ 256.773934][ T8672] tcp_sendmsg+0x2e/0x50 [ 256.799756][ T8672] inet_sendmsg+0xb9/0x140 [ 256.812686][ T8672] sock_write_iter+0x509/0x610 [ 256.822811][ T8672] vfs_write+0x6ac/0x1070 [ 256.834436][ T8672] ksys_write+0x1f8/0x250 [ 256.841188][ T8672] do_syscall_64+0x106/0xf80 [ 256.948553][ T8680] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 256.974374][ T8680] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 256.982974][ T8680] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 257.024984][ T8680] page_type: f5(slab) [ 257.028998][ T8680] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 257.065646][ T8680] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 257.119859][ T8680] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 257.134598][ T8680] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 257.143332][ T8680] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 257.154696][ T8680] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 257.164662][ T8680] page dumped because: unmovable page [ 257.171157][ T8680] page_owner tracks the page as allocated [ 257.184337][ T8680] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 73664958864, free_ts 71618528972 [ 257.258499][ T8680] post_alloc_hook+0x153/0x170 [ 257.266174][ T8680] get_page_from_freelist+0x111d/0x3140 [ 257.285976][ T8680] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 257.310906][ T8680] new_slab+0xa6/0x6d0 [ 257.319787][ T8680] refill_objects+0x26b/0x400 [ 257.330212][ T8680] __pcs_replace_empty_main+0x19f/0x600 [ 257.340185][ T8680] __kmalloc_cache_noprof+0x493/0x6f0 [ 257.358249][ T8680] kobject_uevent_env+0x263/0x18b0 [ 257.363427][ T8680] netdev_queue_update_kobjects+0x1a7/0x6f0 [ 257.394361][ T8680] netdev_register_kobject+0x2b3/0x3d0 [ 257.399901][ T8680] register_netdevice+0x12e0/0x2210 [ 257.450506][ T8680] register_netdev+0x34/0x50 [ 257.465304][ T8680] ip6_tnl_init_net+0x2ff/0x480 [ 257.472098][ T8680] ops_init+0x1e2/0x5f0 [ 257.482050][ T8680] setup_net+0x118/0x3a0 [ 257.490879][ T8680] copy_net_ns+0x46f/0x7c0 [ 257.509922][ T8680] page last free pid 5807 tgid 5807 stack trace: [ 257.524217][ T8680] __free_frozen_pages+0x7ca/0x10a0 [ 257.538611][ T8680] __folio_put+0x3b4/0x540 [ 257.550893][ T8680] skb_release_data+0x667/0x9d0 [ 257.564360][ T8680] __kfree_skb+0x4f/0x70 [ 257.568761][ T8680] tcp_ack+0x2072/0x74f0 [ 257.589048][ T8680] tcp_rcv_established+0x1175/0x3980 [ 257.599029][ T8680] tcp_v4_do_rcv+0xc64/0x10a0 [ 257.626152][ T8680] __release_sock+0x35a/0x440 [ 257.643258][ T8680] __sk_flush_backlog+0x27/0xc0 [ 257.657309][ T8680] tcp_sendmsg_locked+0x3c1e/0x45f0 [ 257.670403][ T8680] tcp_sendmsg+0x2e/0x50 [ 257.687166][ T8680] inet_sendmsg+0xb9/0x140 [ 257.700587][ T8680] sock_write_iter+0x509/0x610 [ 257.712333][ T8680] vfs_write+0x6ac/0x1070 [ 257.726577][ T8680] ksys_write+0x1f8/0x250 [ 257.757825][ T8680] do_syscall_64+0x106/0xf80 [ 258.559118][ T8697] netlink: 186 bytes leftover after parsing attributes in process `syz.0.594'. [ 259.987596][ T8736] netlink: 186 bytes leftover after parsing attributes in process `syz.0.604'. [ 260.056680][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d502400: rx timeout, send abort [ 260.065162][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d502400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 262.408099][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 262.696607][ T8780] hub 3-0:1.0: USB hub found [ 262.715737][ T8780] hub 3-0:1.0: 1 port detected [ 262.754561][ T8780] usb usb3: authorized to connect [ 263.824721][ T8804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.883550][ T8804] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 263.928527][ T8804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.943588][ T8804] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.984936][ T8804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.998285][ T8804] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 264.026734][ T8804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.038921][ T8804] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 264.428539][ T8822] HfR: entered promiscuous mode [ 265.895043][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 265.984755][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 266.074358][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 266.080387][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 266.209517][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 267.425492][ T8873] Invalid ELF header magic: != ELF [ 267.983921][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 268.054381][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 268.134618][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 268.140666][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 270.685802][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 270.705482][ T8949] netlink: 25 bytes leftover after parsing attributes in process `syz.0.654'. [ 272.017142][ T30] audit: type=1800 audit(2147483649.600:4): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.661" name="dbroot" dev="configfs" ino=24271 res=0 errno=0 [ 272.108073][ T30] audit: type=1800 audit(2147483649.670:5): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.661" name="dbroot" dev="configfs" ino=24278 res=0 errno=0 [ 272.331899][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 272.365978][ T8983] netlink: 25 bytes leftover after parsing attributes in process `syz.1.665'. [ 272.417681][ T8987] FAULT_INJECTION: forcing a failure. [ 272.417681][ T8987] name fail_futex, interval 1, probability 0, space 0, times 1 [ 272.473163][ T8987] CPU: 0 UID: 0 PID: 8987 Comm: syz.3.666 Not tainted syzkaller #0 PREEMPT(full) [ 272.473203][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.473221][ T8987] Call Trace: [ 272.473230][ T8987] [ 272.473241][ T8987] dump_stack_lvl+0x100/0x190 [ 272.473288][ T8987] should_fail_ex.cold+0x5/0xa [ 272.473318][ T8987] get_futex_key+0x1d2/0x1620 [ 272.473350][ T8987] ? __pfx_get_futex_key+0x10/0x10 [ 272.473379][ T8987] ? find_held_lock+0x2b/0x80 [ 272.473415][ T8987] ? futex_wake+0x456/0x530 [ 272.473457][ T8987] futex_wake+0xea/0x530 [ 272.473496][ T8987] ? __pfx_futex_wake+0x10/0x10 [ 272.473540][ T8987] ? up_write+0x290/0x4f0 [ 272.473580][ T8987] do_futex+0x32b/0x350 [ 272.473612][ T8987] ? __pfx_do_futex+0x10/0x10 [ 272.473638][ T8987] ? __fget_files+0x215/0x3d0 [ 272.473683][ T8987] __x64_sys_futex+0x34f/0x4d0 [ 272.473720][ T8987] ? __pfx___x64_sys_futex+0x10/0x10 [ 272.473751][ T8987] ? __sys_setsockopt+0x139/0x190 [ 272.473804][ T8987] do_syscall_64+0x106/0xf80 [ 272.473831][ T8987] ? clear_bhb_loop+0x40/0x90 [ 272.473863][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.473890][ T8987] RIP: 0033:0x7f222179c629 [ 272.473911][ T8987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.473936][ T8987] RSP: 002b:00007f222272c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.473961][ T8987] RAX: ffffffffffffffda RBX: 00007f2221a15fa8 RCX: 00007f222179c629 [ 272.473987][ T8987] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2221a15fac [ 272.474003][ T8987] RBP: 00007f2221a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.474019][ T8987] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 272.474036][ T8987] R13: 00007f2221a16038 R14: 00007fff2f994f10 R15: 00007fff2f994ff8 [ 272.474071][ T8987] [ 272.946112][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac9b800: rx timeout, send abort [ 272.954854][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ac9b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 273.446840][ T9006] bridge0: port 3(batadv0) entered blocking state [ 273.460819][ T9006] bridge0: port 3(batadv0) entered disabled state [ 273.496725][ T9006] batadv0: entered allmulticast mode [ 273.531286][ T9006] batadv0: entered promiscuous mode [ 273.553396][ T9006] bridge0: port 3(batadv0) entered blocking state [ 273.560057][ T9006] bridge0: port 3(batadv0) entered forwarding state [ 273.705964][ T6686] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 273.715684][ T6686] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 274.369413][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 274.415403][ T9025] netlink: 25 bytes leftover after parsing attributes in process `syz.1.675'. [ 274.657619][ T5834] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 275.868752][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 275.881204][ T9068] netlink: 25 bytes leftover after parsing attributes in process `syz.1.686'. [ 277.171927][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079bbd800: rx timeout, send abort [ 277.180339][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079bbd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 277.920693][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bfe0400: rx timeout, send abort [ 277.929208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bfe0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 278.122304][ T9108] zswap: compressor not available [ 278.746813][ T9138] bridge_slave_1: left allmulticast mode [ 278.759370][ T9138] bridge_slave_1: left promiscuous mode [ 278.785593][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.476913][ T9153] FAULT_INJECTION: forcing a failure. [ 279.476913][ T9153] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 279.490434][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: syz.3.707 Not tainted syzkaller #0 PREEMPT(full) [ 279.490472][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.490488][ T9153] Call Trace: [ 279.490496][ T9153] [ 279.490507][ T9153] dump_stack_lvl+0x100/0x190 [ 279.490553][ T9153] should_fail_ex.cold+0x5/0xa [ 279.490586][ T9153] _copy_from_user+0x2e/0xd0 [ 279.490627][ T9153] __sys_bpf+0x243/0x4b90 [ 279.490660][ T9153] ? __pfx___sys_bpf+0x10/0x10 [ 279.490688][ T9153] ? __pfx_futex_wait+0x10/0x10 [ 279.490739][ T9153] ? do_vfs_ioctl+0x226/0x13e0 [ 279.490777][ T9153] ? do_futex+0x192/0x350 [ 279.490830][ T9153] ? xfd_validate_state+0x129/0x190 [ 279.490878][ T9153] __x64_sys_bpf+0x7b/0xc0 [ 279.490905][ T9153] ? lockdep_hardirqs_on+0x78/0x100 [ 279.490935][ T9153] do_syscall_64+0x106/0xf80 [ 279.490962][ T9153] ? clear_bhb_loop+0x40/0x90 [ 279.490996][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.491021][ T9153] RIP: 0033:0x7f222179c629 [ 279.491044][ T9153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.491070][ T9153] RSP: 002b:00007f222272c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.491096][ T9153] RAX: ffffffffffffffda RBX: 00007f2221a15fa0 RCX: 00007f222179c629 [ 279.491115][ T9153] RDX: 0000000000000014 RSI: 0000200000000100 RDI: 0000000000000000 [ 279.491131][ T9153] RBP: 00007f2221832b39 R08: 0000000000000000 R09: 0000000000000000 [ 279.491148][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.491164][ T9153] R13: 00007f2221a16038 R14: 00007f2221a15fa0 R15: 00007fff2f994ff8 [ 279.491201][ T9153] [ 281.337474][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 281.347839][ T9198] netlink: 354 bytes leftover after parsing attributes in process `syz.0.719'. [ 284.725483][ T9258] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] SMP KASAN PTI [ 284.737444][ T9258] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] [ 284.745860][ T9258] CPU: 1 UID: 0 PID: 9258 Comm: syz.2.734 Not tainted syzkaller #0 PREEMPT(full) [ 284.755066][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.765119][ T9258] RIP: 0010:grab_requested_root+0xde/0x3c0 [ 284.770943][ T9258] Code: 02 00 00 49 39 5d 18 0f 84 cd 01 00 00 e8 5a d9 76 ff 48 8d bb 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 82 02 00 00 48 8b 83 08 01 00 00 48 85 c0 0f 84 [ 284.790562][ T9258] RSP: 0018:ffffc90003857d88 EFLAGS: 00010206 [ 284.796637][ T9258] RAX: dffffc0000000000 RBX: ffffffffffffffea RCX: ffffc9000e713000 [ 284.804613][ T9258] RDX: 000000000000001e RSI: ffffffff82911fc6 RDI: 00000000000000f2 [ 284.812581][ T9258] RBP: ffffc90003857db0 R08: 0000000000000005 R09: 0000000000000000 [ 284.820551][ T9258] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c065ac0 [ 284.828528][ T9258] R13: ffff888063031c98 R14: ffff8880877c7828 R15: ffff8880877c7810 [ 284.836501][ T9258] FS: 00007fe536b8f6c0(0000) GS:ffff888124451000(0000) knlGS:0000000000000000 [ 284.845438][ T9258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.852035][ T9258] CR2: 0000001b3080bff8 CR3: 0000000037108000 CR4: 00000000003526f0 [ 284.860006][ T9258] Call Trace: [ 284.863280][ T9258] [ 284.866207][ T9258] __do_sys_statmount+0x359/0x2440 [ 284.871342][ T9258] ? __pfx___do_sys_statmount+0x10/0x10 [ 284.876903][ T9258] do_syscall_64+0x106/0xf80 [ 284.881500][ T9258] ? clear_bhb_loop+0x40/0x90 [ 284.886187][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.892080][ T9258] RIP: 0033:0x7fe535d9c629 [ 284.896490][ T9258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.916111][ T9258] RSP: 002b:00007fe536b8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c9 [ 284.924527][ T9258] RAX: ffffffffffffffda RBX: 00007fe536016090 RCX: 00007fe535d9c629 [ 284.932501][ T9258] RDX: 00000000000001fe RSI: 0000200000000180 RDI: 0000000000000000 [ 284.940471][ T9258] RBP: 00007fe535e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 284.948444][ T9258] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 284.956413][ T9258] R13: 00007fe536016128 R14: 00007fe536016090 R15: 00007fff7ba3a708 [ 284.964389][ T9258] [ 284.967399][ T9258] Modules linked in: [ 284.971741][ T9258] ---[ end trace 0000000000000000 ]--- [ 285.035900][ T9258] RIP: 0010:grab_requested_root+0xde/0x3c0 [ 285.041903][ T9258] Code: 02 00 00 49 39 5d 18 0f 84 cd 01 00 00 e8 5a d9 76 ff 48 8d bb 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 82 02 00 00 48 8b 83 08 01 00 00 48 85 c0 0f 84 [ 285.128693][ T9258] RSP: 0018:ffffc90003857d88 EFLAGS: 00010206 [ 285.264607][ T9258] RAX: dffffc0000000000 RBX: ffffffffffffffea RCX: ffffc9000e713000 [ 285.272640][ T9258] RDX: 000000000000001e RSI: ffffffff82911fc6 RDI: 00000000000000f2 [ 285.291561][ T5152] Trying to write to read-only block-device sda1 [ 285.344376][ T9258] RBP: ffffc90003857db0 R08: 0000000000000005 R09: 0000000000000000 [ 285.352421][ T9258] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c065ac0 [ 285.404886][ T9258] R13: ffff888063031c98 R14: ffff8880877c7828 R15: ffff8880877c7810 [ 285.414454][ T9258] FS: 00007fe536b8f6c0(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 285.423439][ T9258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.473158][ T9258] CR2: 00005632d8d38820 CR3: 0000000037108000 CR4: 00000000003526f0 [ 285.514386][ T9258] Kernel panic - not syncing: Fatal exception [ 285.520849][ T9258] Kernel Offset: disabled [ 285.525164][ T9258] Rebooting in 86400 seconds..