last executing test programs: 19.664254795s ago: executing program 2 (id=308): setgid$auto(0x7ff) keyctl$auto(0x7, 0x0, 0x0, 0x0, 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto(r0, 0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/amidi2\x00', 0x20141, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000024c0)={0x1, 0xf, 0x1, 0x3, 0x2c01, "34ca74e98a8b28b0ea83636a87d9be641c7553f01f8630dcee799d12f7e3c85be0ae665c02bfdf8514615339e0b84db0b1ce9f6b6360aa0d759cdfa79caaf3fb", "9cf0e44dd5455d5aa7b320139f421f47ca9c3afd3cbcc8947ce5731c0b85e88a41ea99be0e037380d62da4783537c0b6a0ac79b66128e30f1d865970629cf0213a7a331b0b7b8d9a6a8c22f7e0315d33", "ee4ac7644478dd16c2ce5f27f778c651ce8a49982701b992ee9784aeac8981d4", 0x9, 0x20002, 0x3, "1924bb38d188b3ac2343881b244065bb03578ea94da9be48931053172768fc68b40c3f8acab3f56d6e8337b5fd2521416b1bd9349977dbc021df3958"}) unshare$auto(0x40000080) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r2, 0x0, 0xfff) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, r4, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0x7, 0xd, 0x1, 0xc, 0x4, 0x15f4da0a, 0x3, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) init_module$auto(0x0, 0xffff9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r5) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x4d1c269f8dc1d864, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18.698587584s ago: executing program 2 (id=309): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20028090}, 0x400d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty51\x00', 0x0, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) write$auto(0x3, 0x0, 0x2a9) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyy9\x00', 0x90300, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x86900, 0x0) socket(0x11, 0x2, 0x2) pipe2$auto(0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x121140, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x100000, 0x0) r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x3, 0xfdd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x8542, 0x0) read$auto(0x3, 0x0, 0x100000b) writev$auto(0x3, &(0x7f0000000000)={0x0, 0x7111}, 0xc) 17.60576401s ago: executing program 2 (id=315): r0 = memfd_secret$auto(0x0) fcntl$auto_F_UNLCK(r0, 0x8, 0x2) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) exit$auto(0x2) fstat$auto(r1, &(0x7f0000000740)={0x5, 0x3, 0x4, 0x4, 0xee01, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x5, 0x5, 0x6, 0x1000, 0x3, 0x0, 0xd, 0x880}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, 0x0) 16.610235963s ago: executing program 2 (id=317): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(r0, r1, 0x800f111) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) r3 = socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x1000000007, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r4, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x6, 0x1, 0x0, 0x0, @str=')\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0) sendmsg$auto_TIPC_NL_MEDIA_GET(r4, &(0x7f00000014c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000001480)={&(0x7f00000010c0)=ANY=[@ANYBLOB="b0030000", @ANYRES16=r7, @ANYBLOB="000126bd7000fedbdf250b000000e700068000dcfe818ec503551bdc7cd83c5f4ccef0532e53a73fb6f4e50710efb946bfc08fbf34a8d9e3f03803e3155e6670bb5b5609c17e18f91408a903b7ba177e2de06adfd20a9e3bcbac5cc198c8807c11431da6418656e6339dbe0d77c7dac5ae9090661794138180dad448c1b1887ca028c51a530d069982e85b36ab336d91f2ace4d2c8b26680c2a8f25463e8a27d39f72794c6140000000000000000000000000000000000000108008a0081ffffff0800e900", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) sendfile$auto(r3, r2, 0x0, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch8\x00', 0x0, 0x0) ioctl$auto_TUNSETOFFLOAD2(r1, 0x400454d0, &(0x7f0000001040)=0x1) read$auto_v4l2_fops_v4l2_dev(r9, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r10 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r11 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r11, &(0x7f0000000140)=']}\x00', 0x101, 0x8) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r10, 0x454f, 0x5f, 0x0, 0x0, r10, 0x80000001}, 0x6d4) 15.162927436s ago: executing program 2 (id=323): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20028090}, 0x400d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty51\x00', 0x0, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) write$auto(0x3, 0x0, 0x2a9) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyy9\x00', 0x90300, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x86900, 0x0) socket(0x11, 0x2, 0x2) pipe2$auto(0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x121140, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x100000, 0x0) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x8542, 0x0) read$auto(0x3, 0x0, 0x100000b) writev$auto(0x3, &(0x7f0000000000)={0x0, 0x7111}, 0xc) 14.007971306s ago: executing program 2 (id=327): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x4020009, 0xdf, 0xebe, 0x401, 0x8000) unshare$auto(0x4) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="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") move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo$auto(r1, r1, 0x208, &(0x7f0000000100)={@siginfo_0_0={0x3, 0xffff, 0x0, @_sigsys={&(0x7f0000000340)="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", 0x9}}}) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x40) socket(0x6, 0x1, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x81}, 0x40000000009) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x8000b, 0x5d) socket(0xa, 0x1, 0x84) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x54) getsockopt$auto(r0, 0x29, 0x18, 0x0, 0x0) 3.331730669s ago: executing program 3 (id=374): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r0 = socket(0x18, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_3={0x7, 0x101, 0x3ff, 0xffffffffffffff80, 0xc1e, 0x1, 0x9, 0x9ce9, 0x1, "e1fd3ac6e88c17d559e8b53bdd94ba79", 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x7, 0x1, 0x82c, 0x5, 0x9d4, 0x7, @attach_prog_fd, 0x4, 0x4, 0x5, 0x6, 0x8}, 0x10) statmount$auto(0x0, &(0x7f00000006c0)={0x81, 0xffffffff, 0x44f, 0x807, 0x5, 0x8, 0x1ffde, 0x7, 0x3, 0xb, 0x9, 0x80003, 0x8000000000000000, 0x80000001, 0x384, 0x1, 0x8, 0x6, 0x400007f, 0xfffffffffffffffc, 0x2, 0xe, 0x22000, 0x200, 0xffffffff, 0x84, 0x0, 0x0, 0x10000006, 0x0, 0x0, [0x350, 0x0, 0x0, 0xd, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x73bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x3b7, 0xe, 0x6, 0x1, 0x0, 0x0, 0x2]}, 0x9, 0xd) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae90, &(0x7f0000000080)={0xfc}) socket(0xa, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x80487436, 0x0) 3.004848805s ago: executing program 0 (id=375): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001a00)={0x0, 0xfffffdd2, &(0x7f00000019c0)={&(0x7f00000001c0)={0x18, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x100000}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) write$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1556c2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffff70001, 0x1) shmctl$auto_SHM_UNLOCK(0x40a03811, 0xc, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x3f, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) r2 = open(0x0, 0x101140, 0x408) getdents64$auto(r2, 0x0, 0x17fe000) getdents64$auto(r2, 0x0, 0x400) write$auto_ocfs2_control_fops_stack_user(r2, 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) sendfile$auto(r1, r1, 0x0, 0x3) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 2.947870609s ago: executing program 0 (id=376): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x80000000, 0x6, &(0x7f0000000000)=0xc0000000) io_uring_setup$auto(0x6, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8440, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) bpf$auto(0x400, 0x0, 0x4a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x1000000, 0x1ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) 2.50065909s ago: executing program 3 (id=378): setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) setresuid$auto(0x8, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) faccessat2$auto(0x1, 0x0, 0x2, 0x1000) 2.407292691s ago: executing program 3 (id=379): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x700, 0x0) unshare$auto(0x200) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r0, 0x0) (async) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250400dff775f20f645df256276d0b6c88dda80000080017000800000004000e00533fc53b02646f204db82639a1257a0b4f0a0b9eda3b9eaf88cb822f8c8b2d3521798bddcd59c32fec11dc0581d7ba074be6f579c858fd75aac2eac366"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) (async) mmap$auto(0x0, 0xe983, 0x8, 0xeb0, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) (async) socket(0x6, 0x3, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) mmap$auto(0x1c, 0x20009, 0x8, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) read$auto(r3, 0x0, 0x4cb) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) kill$auto(0x0, 0x1) (async) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) kill$auto(r4, 0x11) 2.266219019s ago: executing program 0 (id=381): userfaultfd$auto(0x1) socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000000)=0x1) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) r1 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040c26bd7076e9ee37e947477f4bc3a00279046500fcdbdf2501791f00"], 0x14}}, 0x20000801) readv$auto(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000040)=0x1) pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) r3 = getpgid$auto(0x0) migrate_pages$auto(r3, 0x0, &(0x7f0000000300)=0xb2, &(0x7f0000000380)=0x7) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000007ec0)=""/253, 0xfd) close_range$auto(r0, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x101082, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 1.507572135s ago: executing program 3 (id=382): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x8000000006, 0x18, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0c, 0x3, 0x3, 0x62, 0x80000004, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 1.325133996s ago: executing program 0 (id=383): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20028090}, 0x400d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty51\x00', 0x0, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) write$auto(0x3, 0x0, 0x2a9) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyy9\x00', 0x90300, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x86900, 0x0) socket(0x11, 0x2, 0x2) pipe2$auto(0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x121140, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x8542, 0x0) read$auto(0x3, 0x0, 0x100000b) writev$auto(0x3, &(0x7f0000000000)={0x0, 0x7111}, 0xc) 1.271275822s ago: executing program 1 (id=384): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41c8e4d5018fca6b1643fc"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001a00)={0x0, 0xfffffdd2, &(0x7f00000019c0)={&(0x7f00000001c0)={0x18, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x100000}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) write$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1556c2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffff70001, 0x1) shmctl$auto_SHM_UNLOCK(0x40a03811, 0xc, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x3f, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) r2 = open(0x0, 0x101140, 0x408) getdents64$auto(r2, 0x0, 0x17fe000) getdents64$auto(r2, 0x0, 0x400) write$auto_ocfs2_control_fops_stack_user(r2, 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) sendfile$auto(r1, r1, 0x0, 0x3) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 1.153005364s ago: executing program 1 (id=385): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/virt_wifi0/delay_first_probe_time\x00', 0x200000, 0x0) sendfile$auto(r0, r0, 0x0, 0x3fffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) ioprio_get$auto(0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0xa, 0x4, 0xffffffffffffffff, 0xa, "8a20d8dc6b36c8f9ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x3}, 0x10) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000001c0)="0a1b9a3ce8040000cd1aec49ec53c2efa0149258607deb6e163bb15497886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9bdbcf3401910e7733aca465c9bd40a", 0x4a) socket(0x10, 0x2, 0xb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x3, 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) read$auto(r0, 0x0, 0x1f40) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/virt_wifi0/delay_first_probe_time\x00', 0x200000, 0x0) (async) sendfile$auto(r0, r0, 0x0, 0x3fffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) ioprio_get$auto(0x5, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0xa, 0x4, 0xffffffffffffffff, 0xa, "8a20d8dc6b36c8f9ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x3}, 0x10) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) (async) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000001c0)="0a1b9a3ce8040000cd1aec49ec53c2efa0149258607deb6e163bb15497886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9bdbcf3401910e7733aca465c9bd40a", 0x4a) (async) socket(0x10, 0x2, 0xb) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getsockopt$auto(0x3, 0x200000000001, 0x3, 0x0, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) read$auto(r0, 0x0, 0x1f40) (async) 847.545162ms ago: executing program 1 (id=386): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8040}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x6}, @HSR_A_IF2_AGE={0x8, 0x4, 0x1ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040080}, 0x2000c010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r0 = socket(0x2, 0xa, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/uapsd_max_sp_len\x00', 0x82, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) setrlimit$auto(0x6, &(0x7f0000001280)={0x6, 0xf0c}) clone$auto(0x3ff, 0xa4, 0x0, 0x0, 0x8000000000000001) read$auto(r2, 0x0, 0x20) write$auto(r1, 0x0, 0x5) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(r0, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000140), 0x10, &(0x7f0000000280)={0x0, 0x4e}, 0x7ff, 0x0, 0x3, 0x1}, 0x7}, 0x4, 0x7fff) socket(0x10, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 661.643906ms ago: executing program 1 (id=387): setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) setresuid$auto(0x8, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) faccessat2$auto(0x1, 0x0, 0x2, 0x1000) 354.199684ms ago: executing program 0 (id=388): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) setsockopt$auto_SO_OOBINLINE(r0, 0xc290, 0xa, &(0x7f0000000040)='\x00', 0x9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_PROFILE(r1, 0x40045017, &(0x7f00000000c0)="f27e0f8536d454b8dd19e8ea8fcf85f9e603aeb58101b74a460b5ba1752e47c3504b308447a5d2c7dbd9f9c5d804c36fb61e384edcbd684a6facbb4a3d8e47b9398e8cd6489590888ab367e9c050822a7282ae286e0da3f20ac774e3e52158d18015f1d4933c0c4138e827db7beff7ebeae0e9c1d88e5209823a9e78c414b14812a7947a32037840ee06282005540b7035f51e00b3372ca37f0bd9bd9cf7c57be8f373b456cb5366634904866ef8c9762f7a7e581e28c21ed8eabc1999265d088b817de0979f287ebb14e09c96fbc11951ccdbf12eaa9399c00f79b70ae65a6a3f7b9802b5d48afa") r2 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci3/force_wakeup\x00', 0x40046, 0x0) setsockopt$auto_SO_BUF_LOCK(r2, 0x1ff, 0x48, &(0x7f0000000200)='/dev/audio\x00', 0x28d) ioctl$auto_SOUND_PCM_READ_FILTER(r1, 0x80045007, &(0x7f0000000240)="4189d2cc0b7c418a3ce8a4d19ca195dc1eeefd8d1c8ff20dd5d32309f532b5558fa1c8ba144684cb63b08cc81e360111cea5505b70531089b6711975e3ee8cb5fc8d679f9329a5e107aec36fbd893860f13117d8d90ca931ba58105b535659b9b2caf86b5e47aec4db36c2245b139141c6e7356ef5ea8c751c34a7bc01d50fd0311c76fde27b908404a57f0dc5ada55ac525c520e3") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000340), r1) r5 = semctl$auto_GETPID(0xa3, 0x2, 0xb, 0x1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x884) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r3) sendmsg$auto_NL80211_CMD_DEL_MPATH(r3, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xfffffffb}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x1b, 0x14e, "182f5d7d228117a3ad246b2c25a66ee0a55020897f21c4"}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xfe}]}, 0x48}, 0x1, 0x0, 0x0, 0x260408d4}, 0x440c4) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x3, &(0x7f0000000600)='\x00', &(0x7f0000000640)="bbe41a63d5de487f695b67253456f923b1a6a56863a36f2513ca834e2ff67d5a64ca56ca071be0045c453ef7d08942fd81f5ab746243aa2aefa664bd0761fb3c386859cb57ab", 0xfffffffffffffffe) ioctl$auto_FIBMAP(r3, 0x1, 0x6) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_STA_FLAGS2={0x49, 0x43, "dd965e2879881cb9edc4a4e2b61fc5dada92170c56e9931f1aa349b0a092ecbafc222351ecf14beb656dd1ba0984f9ca6f7fe7bbe9e011f5720beb4e25eaa23f3dff19e50b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x80}}, 0x0) msgrcv$auto(0x7, &(0x7f0000000800)={0x48df, 0x8}, 0x5, 0x9, 0xffffff5c) madvise$auto(0x1, 0xffff, 0x6) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000840), 0x48500, 0x0) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'dvmrp1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a80)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'veth0_to_batadv\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r3, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r9}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r10}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r11}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r12}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r14}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r15}, @NET_SHAPER_A_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000c00), 0x450402, 0x0) 353.708562ms ago: executing program 1 (id=389): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x42000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r3, 0x7439) creat$auto(&(0x7f0000000280)=']\\\xe8@!^).\'\x00', 0xcc38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r2, 0x929, 0x70bd28, 0x25dfdbff, {}, [@HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c5}, 0x4054) ioctl$auto_BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={@raw=0x800, 0x66b, &(0x7f0000000040)=0xf, 0x7, 0x2, 0x1, "437df6dedd49dc2ce5860a626b56113125f5a881bf718298ea03c04f"}) ioctl$auto_BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0xfffffffffffffff9, 0x5, 0x8, 0x8, 0x3, 0x0, 0x10, 0x3, 0xffffffff, 0x80000001}, 0x6, [0x7fffffffffffffff]}) 270.999453ms ago: executing program 1 (id=390): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyrd\x00', 0x4000, 0x0) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0x10}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0xa8, 0x3, 0xebe, 0xfffffffffffffffa, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/033/001\x00', 0x107882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x38, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) keyctl$auto_KEYCTL_SEARCH(0xa, 0xf, 0x9, 0x7, 0x8) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)=@test={r2, 0xc, 0x20000000, 0x1, 0xe, 0x385, 0x0, 0xc, 0xc, 0x6, 0x4, 0x0, 0x3, 0x7, 0x7}, 0xff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) 236.883137ms ago: executing program 3 (id=391): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x2, 0x6, 0xe, 0x9b2, 0x5, "0800aafc241cd010c7543bfbca2ce1", "02000200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5ff1c858612c4b353c022a92"]}) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) 118.998043ms ago: executing program 3 (id=392): userfaultfd$auto(0x1) socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000000)=0x1) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) r1 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040c26bd7076e9ee37e947477f4bc3a00279046500fcdbdf2501791f00"], 0x14}}, 0x20000801) readv$auto(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000040)=0x1) pread64$auto(r0, &(0x7f0000002680)='/dev/snapshot\x00', 0x73528428, 0x3) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) r3 = getpgid$auto(0x0) migrate_pages$auto(r3, 0x0, &(0x7f0000000300)=0xb2, &(0x7f0000000380)=0x7) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000007ec0)=""/253, 0xfd) (fail_nth: 1) close_range$auto(r0, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x101082, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) 0s ago: executing program 0 (id=393): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x6, 0x2000d, 0x0, 0xebe, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) eventfd$auto(0x8e) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, 0x0, 0x80000000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x184, 0x3, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x800006) close_range$auto(0x2, 0xa, 0x7ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 81.086632][ T5857] cgroup: Unknown subsys name 'net' [ 81.240541][ T5857] cgroup: Unknown subsys name 'cpuset' [ 81.249691][ T5857] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.719261][ T5857] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.971614][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.979733][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.988204][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.996928][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.004688][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.012390][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.020712][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.028539][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.040706][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.058986][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.077325][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.082045][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.086137][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.093128][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.099197][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.106565][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.113937][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.120902][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.127175][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.137588][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.614453][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 85.716245][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 85.834055][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.841309][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.849532][ T5867] bridge_slave_0: entered allmulticast mode [ 85.856632][ T5867] bridge_slave_0: entered promiscuous mode [ 85.865912][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 85.898431][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.905638][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.915010][ T5867] bridge_slave_1: entered allmulticast mode [ 85.922998][ T5867] bridge_slave_1: entered promiscuous mode [ 86.026720][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 86.037102][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.044289][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.052063][ T5868] bridge_slave_0: entered allmulticast mode [ 86.060352][ T5868] bridge_slave_0: entered promiscuous mode [ 86.070978][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.091639][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.099352][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.106497][ T5868] bridge_slave_1: entered allmulticast mode [ 86.114523][ T5868] bridge_slave_1: entered promiscuous mode [ 86.136527][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.213957][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.226673][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.237890][ T5867] team0: Port device team_slave_0 added [ 86.275458][ T5867] team0: Port device team_slave_1 added [ 86.335838][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.343109][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.350802][ T5871] bridge_slave_0: entered allmulticast mode [ 86.359581][ T5871] bridge_slave_0: entered promiscuous mode [ 86.372869][ T5868] team0: Port device team_slave_0 added [ 86.379750][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.386729][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.413074][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.425117][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.432855][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.440221][ T5871] bridge_slave_1: entered allmulticast mode [ 86.447375][ T5871] bridge_slave_1: entered promiscuous mode [ 86.465839][ T5868] team0: Port device team_slave_1 added [ 86.487890][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.494856][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.521088][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.591999][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.599578][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.606916][ T5875] bridge_slave_0: entered allmulticast mode [ 86.614057][ T5875] bridge_slave_0: entered promiscuous mode [ 86.629341][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.636303][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.663553][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.676723][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.684080][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.710072][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.723689][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.735959][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.743307][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.750522][ T5875] bridge_slave_1: entered allmulticast mode [ 86.757653][ T5875] bridge_slave_1: entered promiscuous mode [ 86.785570][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.859767][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.872621][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.932964][ T5868] hsr_slave_0: entered promiscuous mode [ 86.940293][ T5868] hsr_slave_1: entered promiscuous mode [ 86.977921][ T5867] hsr_slave_0: entered promiscuous mode [ 86.984579][ T5867] hsr_slave_1: entered promiscuous mode [ 86.994202][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 87.000791][ T5867] Cannot create hsr debugfs directory [ 87.032220][ T5871] team0: Port device team_slave_0 added [ 87.104479][ T5871] team0: Port device team_slave_1 added [ 87.127814][ T5881] Bluetooth: hci1: command tx timeout [ 87.162828][ T5875] team0: Port device team_slave_0 added [ 87.217369][ T5881] Bluetooth: hci3: command tx timeout [ 87.217778][ T5874] Bluetooth: hci0: command tx timeout [ 87.227333][ T5877] Bluetooth: hci2: command tx timeout [ 87.238784][ T5875] team0: Port device team_slave_1 added [ 87.245440][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.252635][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.278626][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.313381][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.320580][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.346878][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.402957][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.410246][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.436743][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.480855][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.488156][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.514269][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.561277][ T5871] hsr_slave_0: entered promiscuous mode [ 87.568479][ T5871] hsr_slave_1: entered promiscuous mode [ 87.574583][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 87.580972][ T5871] Cannot create hsr debugfs directory [ 87.723261][ T5875] hsr_slave_0: entered promiscuous mode [ 87.730099][ T5875] hsr_slave_1: entered promiscuous mode [ 87.736171][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 87.742442][ T5875] Cannot create hsr debugfs directory [ 87.901546][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.925261][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.963390][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.000706][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.093911][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.106792][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.139466][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.168693][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.255039][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.281281][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.291143][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.305081][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.428843][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.442285][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.463718][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.474065][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.526271][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.569693][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.610689][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.625309][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.632665][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.664493][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.671797][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.713954][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.755624][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.762876][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.785733][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.825200][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.832477][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.846150][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.873005][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.880245][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.903495][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.933633][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.940862][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.971190][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.014687][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.021981][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.080836][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.088064][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.210715][ T5877] Bluetooth: hci1: command tx timeout [ 89.256591][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.288584][ T5877] Bluetooth: hci0: command tx timeout [ 89.290289][ T5874] Bluetooth: hci2: command tx timeout [ 89.294208][ T5877] Bluetooth: hci3: command tx timeout [ 89.375853][ T5867] veth0_vlan: entered promiscuous mode [ 89.430509][ T5867] veth1_vlan: entered promiscuous mode [ 89.559700][ T5867] veth0_macvtap: entered promiscuous mode [ 89.600379][ T5867] veth1_macvtap: entered promiscuous mode [ 89.675147][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.711829][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.743996][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.758252][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.768322][ T1155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.791786][ T1155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.804307][ T1155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.844303][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.929998][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.959491][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.968072][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.021924][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.023537][ T5868] veth0_vlan: entered promiscuous mode [ 90.035395][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.074202][ T5871] veth0_vlan: entered promiscuous mode [ 90.093592][ T5868] veth1_vlan: entered promiscuous mode [ 90.145184][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.145925][ T5871] veth1_vlan: entered promiscuous mode [ 90.234319][ T5868] veth0_macvtap: entered promiscuous mode [ 90.262907][ T5875] veth0_vlan: entered promiscuous mode [ 90.282588][ T5868] veth1_macvtap: entered promiscuous mode [ 90.306051][ T5875] veth1_vlan: entered promiscuous mode [ 90.340760][ T5871] veth0_macvtap: entered promiscuous mode [ 90.360672][ T5871] veth1_macvtap: entered promiscuous mode [ 90.379619][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.409836][ T5961] FAULT_INJECTION: forcing a failure. [ 90.409836][ T5961] name failslab, interval 1, probability 0, space 0, times 1 [ 90.415473][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.430485][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 90.430522][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.430540][ T5961] Call Trace: [ 90.430549][ T5961] [ 90.430559][ T5961] dump_stack_lvl+0x16c/0x1f0 [ 90.430605][ T5961] should_fail_ex+0x512/0x640 [ 90.430645][ T5961] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 90.430681][ T5961] should_failslab+0xc2/0x120 [ 90.430713][ T5961] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 90.430738][ T5961] ? __pfx___might_resched+0x10/0x10 [ 90.430760][ T5961] ? __anon_vma_prepare+0xae/0x5e0 [ 90.430789][ T5961] __anon_vma_prepare+0xae/0x5e0 [ 90.430814][ T5961] ? __filemap_get_folio+0x32b/0xc30 [ 90.430851][ T5961] __vmf_anon_prepare+0x11c/0x240 [ 90.430903][ T5961] hugetlb_fault+0x1ba4/0x2f40 [ 90.430938][ T5961] ? __pfx_hugetlb_fault+0x10/0x10 [ 90.430981][ T5961] ? find_vma+0xbf/0x140 [ 90.431015][ T5961] ? __pfx_find_vma+0x10/0x10 [ 90.431053][ T5961] handle_mm_fault+0xbfa/0xd10 [ 90.431082][ T5961] ? trace_raw_output_exceptions+0x131/0x150 [ 90.431124][ T5961] do_user_addr_fault+0x7a6/0x1370 [ 90.431166][ T5961] ? rcu_is_watching+0x12/0xc0 [ 90.431198][ T5961] exc_page_fault+0x5c/0xb0 [ 90.431236][ T5961] asm_exc_page_fault+0x26/0x30 [ 90.431259][ T5961] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 90.431297][ T5961] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 a7 8a a6 fc 48 83 fd 07 76 22 e8 2c 8f a6 fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 58 8a a6 fc 45 85 ff 0f 84 [ 90.431329][ T5961] RSP: 0018:ffffc900048cfd10 EFLAGS: 00050246 [ 90.431351][ T5961] RAX: 0000000000000039 RBX: 0000000000000000 RCX: ffffc9000cf3c000 [ 90.431368][ T5961] RDX: 0000000000080000 RSI: ffffffff85147af4 RDI: 0000000000000007 [ 90.431384][ T5961] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 90.431400][ T5961] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000000000000 [ 90.431415][ T5961] R13: ffff88807a944420 R14: 0000000000000fe0 R15: 0000000000000000 [ 90.431445][ T5961] ? strncpy_from_user+0x144/0x2e0 [ 90.431493][ T5961] getname_flags.part.0+0x8f/0x550 [ 90.431552][ T5961] getname_flags+0x93/0xf0 [ 90.431579][ T5961] do_sys_openat2+0xb8/0x1d0 [ 90.431618][ T5961] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.431671][ T5961] __x64_sys_openat+0x174/0x210 [ 90.431695][ T5961] ? __pfx___x64_sys_openat+0x10/0x10 [ 90.431735][ T5961] do_syscall_64+0xcd/0x4c0 [ 90.431776][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.431801][ T5961] RIP: 0033:0x7f42c158eec9 [ 90.431827][ T5961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.431850][ T5961] RSP: 002b:00007f42c24b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.431873][ T5961] RAX: ffffffffffffffda RBX: 00007f42c17e6090 RCX: 00007f42c158eec9 [ 90.431890][ T5961] RDX: 000000000014fa02 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 90.431907][ T5961] RBP: 00007f42c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 90.431922][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.431938][ T5961] R13: 00007f42c17e6128 R14: 00007f42c17e6090 R15: 00007fff909fe1b8 [ 90.431975][ T5961] [ 90.456557][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.776425][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.785760][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.802728][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.818129][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.829301][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.844469][ T5875] veth0_macvtap: entered promiscuous mode [ 90.862212][ T5875] veth1_macvtap: entered promiscuous mode [ 90.871603][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.880975][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.924334][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.953877][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997692][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.014138][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.032648][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.054374][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.102416][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.112604][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.136677][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.164685][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.178373][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.202408][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.235668][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.250898][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.287813][ T5877] Bluetooth: hci1: command tx timeout [ 91.353790][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.368483][ T5877] Bluetooth: hci2: command tx timeout [ 91.373961][ T5881] Bluetooth: hci0: command tx timeout [ 91.375938][ T5874] Bluetooth: hci3: command tx timeout [ 91.402896][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.535337][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.569097][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.668740][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.707912][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.976306][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.037616][ T1213] cfg80211: failed to load regulatory.db [ 92.187509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 92.258854][ T5978] Zero length message leads to an empty skb [ 92.468748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.477557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.518248][ T5980] __vm_enough_memory: pid: 5980, comm: syz.1.2, bytes: 4398046511104 not enough memory for the allocation [ 92.626654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.203162][ T5975] FAULT_INJECTION: forcing a failure. [ 93.203162][ T5975] name failslab, interval 1, probability 0, space 0, times 0 [ 93.299086][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 93.299124][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.299139][ T5975] Call Trace: [ 93.299148][ T5975] [ 93.299159][ T5975] dump_stack_lvl+0x16c/0x1f0 [ 93.299204][ T5975] should_fail_ex+0x512/0x640 [ 93.299240][ T5975] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 93.299276][ T5975] should_failslab+0xc2/0x120 [ 93.299310][ T5975] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 93.299346][ T5975] ? ptlock_alloc+0x1f/0x70 [ 93.299377][ T5975] ptlock_alloc+0x1f/0x70 [ 93.299403][ T5975] pte_alloc_one+0x82/0x3a0 [ 93.299433][ T5975] copy_huge_pmd+0x18d/0x2f90 [ 93.299484][ T5975] ? __pfx_copy_huge_pmd+0x10/0x10 [ 93.299522][ T5975] ? __pfx___might_resched+0x10/0x10 [ 93.299548][ T5975] ? copy_page_range+0x1fa8/0x5c80 [ 93.299579][ T5975] copy_page_range+0x20d6/0x5c80 [ 93.299646][ T5975] ? mas_destroy+0x5de/0xa20 [ 93.299670][ T5975] ? __pfx_copy_page_range+0x10/0x10 [ 93.299699][ T5975] ? mas_store+0x7a9/0x1160 [ 93.299725][ T5975] ? find_held_lock+0x2b/0x80 [ 93.299751][ T5975] ? __vma_enter_locked+0x163/0x3f0 [ 93.299792][ T5975] dup_mmap+0xe88/0x21d0 [ 93.299903][ T5975] ? __pfx_dup_mmap+0x10/0x10 [ 93.299962][ T5975] copy_process+0x4081/0x7690 [ 93.300012][ T5975] ? __pfx_copy_process+0x10/0x10 [ 93.300037][ T5975] ? futex_private_hash_put+0x176/0x300 [ 93.300067][ T5975] ? futex_private_hash_put+0x18a/0x300 [ 93.300101][ T5975] kernel_clone+0xfc/0x930 [ 93.300127][ T5975] ? __pfx_futex_wake+0x10/0x10 [ 93.300155][ T5975] ? __pfx_kernel_clone+0x10/0x10 [ 93.300198][ T5975] __do_sys_clone+0xce/0x120 [ 93.300226][ T5975] ? __pfx___do_sys_clone+0x10/0x10 [ 93.300254][ T5975] ? ksys_unshare+0x687/0xa40 [ 93.300294][ T5975] ? xfd_validate_state+0x61/0x180 [ 93.300342][ T5975] do_syscall_64+0xcd/0x4c0 [ 93.300383][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.300410][ T5975] RIP: 0033:0x7f42c158eec9 [ 93.300431][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.300454][ T5975] RSP: 002b:00007f42c24d1fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 93.300478][ T5975] RAX: ffffffffffffffda RBX: 00007f42c17e5fa0 RCX: 00007f42c158eec9 [ 93.300494][ T5975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 93.300507][ T5975] RBP: 00007f42c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.300520][ T5975] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.300533][ T5975] R13: 00007f42c17e6038 R14: 00007f42c17e5fa0 R15: 00007fff909fe1b8 [ 93.300564][ T5975] [ 93.569714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.698358][ T5874] Bluetooth: hci3: command tx timeout [ 93.698421][ T5877] Bluetooth: hci0: command tx timeout [ 93.703799][ T5874] Bluetooth: hci2: command tx timeout [ 93.709254][ T5881] Bluetooth: hci1: command tx timeout [ 93.898759][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.122424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.487925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.564527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.575588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.584344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.189648][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 95.229486][ T6018] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE 鵵80潱覄y*"-魕 [ 95.621500][ T6025] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.186791][ T6041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.335924][ T6044] FAULT_INJECTION: forcing a failure. [ 97.335924][ T6044] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 97.335966][ T6044] CPU: 0 UID: 0 PID: 6044 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 97.335994][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.336009][ T6044] Call Trace: [ 97.336017][ T6044] [ 97.336026][ T6044] dump_stack_lvl+0x16c/0x1f0 [ 97.336067][ T6044] should_fail_ex+0x512/0x640 [ 97.336110][ T6044] should_fail_alloc_page+0xe7/0x130 [ 97.336146][ T6044] prepare_alloc_pages+0x3c2/0x610 [ 97.336192][ T6044] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 97.336232][ T6044] ? check_path.constprop.0+0x24/0x50 [ 97.336269][ T6044] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 97.336306][ T6044] ? lockdep_unlock+0x64/0xe0 [ 97.336343][ T6044] ? fb_var_to_videomode+0x4c9/0x690 [ 97.336381][ T6044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.336420][ T6044] ? policy_nodemask+0xea/0x4e0 [ 97.336454][ T6044] alloc_pages_mpol+0x1fb/0x550 [ 97.336486][ T6044] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 97.336518][ T6044] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.336559][ T6044] ? vc_allocate+0x489/0x880 [ 97.336591][ T6044] ___kmalloc_large_node+0xed/0x160 [ 97.336627][ T6044] ? con_is_visible+0x65/0x150 [ 97.336658][ T6044] ? vc_allocate+0x489/0x880 [ 97.336689][ T6044] __kmalloc_large_node_noprof+0x1c/0x70 [ 97.336726][ T6044] __kmalloc_noprof.cold+0xc/0x61 [ 97.336772][ T6044] vc_allocate+0x489/0x880 [ 97.336806][ T6044] ? __pfx_vc_allocate+0x10/0x10 [ 97.336846][ T6044] con_install+0xa1/0x600 [ 97.336879][ T6044] ? __pfx_con_install+0x10/0x10 [ 97.336929][ T6044] ? __pfx_con_install+0x10/0x10 [ 97.336965][ T6044] tty_init_dev.part.0+0x99/0x500 [ 97.336990][ T6044] tty_open+0xa50/0xf90 [ 97.337018][ T6044] ? __pfx_tty_open+0x10/0x10 [ 97.337040][ T6044] ? chrdev_open+0x58c/0x6a0 [ 97.337074][ T6044] ? __pfx_tty_open+0x10/0x10 [ 97.337096][ T6044] chrdev_open+0x231/0x6a0 [ 97.337128][ T6044] ? __pfx_chrdev_open+0x10/0x10 [ 97.337163][ T6044] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 97.337198][ T6044] do_dentry_open+0x97f/0x1530 [ 97.337230][ T6044] ? __pfx_chrdev_open+0x10/0x10 [ 97.337268][ T6044] vfs_open+0x82/0x3f0 [ 97.337308][ T6044] path_openat+0x1de4/0x2cb0 [ 97.337348][ T6044] ? __pfx_path_openat+0x10/0x10 [ 97.337388][ T6044] do_filp_open+0x20b/0x470 [ 97.337420][ T6044] ? __pfx_do_filp_open+0x10/0x10 [ 97.337477][ T6044] ? alloc_fd+0x471/0x7d0 [ 97.337516][ T6044] do_sys_openat2+0x11b/0x1d0 [ 97.337553][ T6044] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.337606][ T6044] __x64_sys_openat+0x174/0x210 [ 97.337630][ T6044] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.337668][ T6044] do_syscall_64+0xcd/0x4c0 [ 97.337708][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.337733][ T6044] RIP: 0033:0x7fd813f8eec9 [ 97.337755][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.337779][ T6044] RSP: 002b:00007fd814eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.337804][ T6044] RAX: ffffffffffffffda RBX: 00007fd8141e5fa0 RCX: 00007fd813f8eec9 [ 97.337818][ T6044] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 97.337833][ T6044] RBP: 00007fd814011f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.337846][ T6044] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 97.337861][ T6044] R13: 00007fd8141e6038 R14: 00007fd8141e5fa0 R15: 00007ffe8b2e9bf8 [ 97.337895][ T6044] [ 98.302942][ T6042] vhci_hcd: invalid port number 23 [ 98.352329][ T6042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.104530][ T6052] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 99.112300][ T6057] tty tty1: ldisc open failed (-12), clearing slot 0 [ 99.759089][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 102.383406][ T6114] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.439696][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31'. [ 103.960187][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.014332][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.038257][ T6125] bond0 (unregistering): Released all slaves [ 104.430631][ T6141] netlink: 268 bytes leftover after parsing attributes in process `syz.1.34'. [ 105.063505][ T6141] syz.1.34 (6141) used greatest stack depth: 19752 bytes left [ 105.930682][ T6160] FAULT_INJECTION: forcing a failure. [ 105.930682][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 105.976714][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.2.40 Not tainted syzkaller #0 PREEMPT(full) [ 105.976749][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.976765][ T6160] Call Trace: [ 105.976774][ T6160] [ 105.976784][ T6160] dump_stack_lvl+0x16c/0x1f0 [ 105.976829][ T6160] should_fail_ex+0x512/0x640 [ 105.976868][ T6160] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 105.976904][ T6160] should_failslab+0xc2/0x120 [ 105.976941][ T6160] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 105.976967][ T6160] ? d_instantiate+0x77/0x90 [ 105.976994][ T6160] ? alloc_empty_file+0x55/0x1e0 [ 105.977030][ T6160] alloc_empty_file+0x55/0x1e0 [ 105.977067][ T6160] alloc_file_pseudo+0x13a/0x230 [ 105.977107][ T6160] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 105.977144][ T6160] ? alloc_fd+0x471/0x7d0 [ 105.977176][ T6160] sock_alloc_file+0x50/0x210 [ 105.977202][ T6160] __sys_socket+0x1c0/0x260 [ 105.977233][ T6160] ? __pfx___sys_socket+0x10/0x10 [ 105.977263][ T6160] ? xfd_validate_state+0x61/0x180 [ 105.977316][ T6160] __x64_sys_socket+0x72/0xb0 [ 105.977345][ T6160] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.977381][ T6160] do_syscall_64+0xcd/0x4c0 [ 105.977420][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.977446][ T6160] RIP: 0033:0x7f6f4f18eec9 [ 105.977467][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.977490][ T6160] RSP: 002b:00007f6f4ff63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.977512][ T6160] RAX: ffffffffffffffda RBX: 00007f6f4f3e5fa0 RCX: 00007f6f4f18eec9 [ 105.977528][ T6160] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010 [ 105.977543][ T6160] RBP: 00007f6f4f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.977558][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.977573][ T6160] R13: 00007f6f4f3e6038 R14: 00007f6f4f3e5fa0 R15: 00007fffba53a388 [ 105.977608][ T6160] [ 107.476264][ T6179] capability: warning: `syz.3.44' uses 32-bit capabilities (legacy support in use) [ 108.117453][ T51] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 108.294216][ T6194] random: crng reseeded on system resumption [ 108.352756][ T6195] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.348590][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 109.357703][ T6204] bond_slave_1: entered allmulticast mode [ 109.358798][ T6205] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.447997][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 112.253794][ T6249] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.304007][ T6240] Invalid ELF header magic: != ELF [ 112.836814][ T6253] ptrace attach of "./syz-executor exec"[6254] was attempted by "./syz-executor exec"[6253] [ 112.849403][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 116.569715][ T1155] Trying to write to read-only block-device sda1 [ 116.588529][ T6293] nfs: Unknown parameter 'w久`_呧傷螴+; 仰HY 簡环Lu>>誹h*嚅C<+ 梆累' [ 116.834889][ T6298] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 117.157844][ T6309] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.483324][ T6304] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 118.127623][ T6319] FAULT_INJECTION: forcing a failure. [ 118.127623][ T6319] name failslab, interval 1, probability 0, space 0, times 0 [ 118.143492][ T6319] CPU: 1 UID: 0 PID: 6319 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT(full) [ 118.143514][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.143523][ T6319] Call Trace: [ 118.143529][ T6319] [ 118.143535][ T6319] dump_stack_lvl+0x16c/0x1f0 [ 118.143563][ T6319] should_fail_ex+0x512/0x640 [ 118.143585][ T6319] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 118.143606][ T6319] should_failslab+0xc2/0x120 [ 118.143624][ T6319] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 118.143641][ T6319] ? __d_alloc+0x32/0xae0 [ 118.143661][ T6319] __d_alloc+0x32/0xae0 [ 118.143680][ T6319] d_alloc_pseudo+0x1c/0xc0 [ 118.143700][ T6319] alloc_file_pseudo+0xcf/0x230 [ 118.143722][ T6319] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 118.143742][ T6319] ? alloc_fd+0x471/0x7d0 [ 118.143760][ T6319] sock_alloc_file+0x50/0x210 [ 118.143775][ T6319] __sys_socket+0x1c0/0x260 [ 118.143791][ T6319] ? __pfx___sys_socket+0x10/0x10 [ 118.143807][ T6319] ? xfd_validate_state+0x61/0x180 [ 118.143826][ T6319] ? __sys_setsockopt+0x140/0x1a0 [ 118.143848][ T6319] __x64_sys_socket+0x72/0xb0 [ 118.143863][ T6319] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.143883][ T6319] do_syscall_64+0xcd/0x4c0 [ 118.143905][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.143919][ T6319] RIP: 0033:0x7fd813f8eec9 [ 118.143938][ T6319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.143952][ T6319] RSP: 002b:00007fd814eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 118.143969][ T6319] RAX: ffffffffffffffda RBX: 00007fd8141e5fa0 RCX: 00007fd813f8eec9 [ 118.143979][ T6319] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 118.143987][ T6319] RBP: 00007fd814011f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.143995][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.144004][ T6319] R13: 00007fd8141e6038 R14: 00007fd8141e5fa0 R15: 00007ffe8b2e9bf8 [ 118.144022][ T6319] [ 119.263201][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 121.147987][ T6350] zswap: compressor not available [ 124.002301][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 124.917151][ T30] audit: type=1800 audit(1758789313.992:2): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.86" name="dbroot" dev="configfs" ino=9774 res=0 errno=0 [ 124.950242][ T6413] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 125.144662][ T6417] FAULT_INJECTION: forcing a failure. [ 125.144662][ T6417] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.183166][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(full) [ 125.183204][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.183213][ T6417] Call Trace: [ 125.183219][ T6417] [ 125.183225][ T6417] dump_stack_lvl+0x16c/0x1f0 [ 125.183252][ T6417] should_fail_ex+0x512/0x640 [ 125.183277][ T6417] _copy_from_user+0x2e/0xd0 [ 125.183294][ T6417] do_pages_stat+0x24c/0x820 [ 125.183321][ T6417] ? __pfx_do_pages_stat+0x10/0x10 [ 125.183357][ T6417] ? do_raw_spin_unlock+0x172/0x230 [ 125.183381][ T6417] kernel_move_pages+0xfa8/0x1380 [ 125.183403][ T6417] ? do_futex+0x122/0x350 [ 125.183421][ T6417] ? __pfx_do_futex+0x10/0x10 [ 125.183438][ T6417] ? fput+0x9b/0xd0 [ 125.183455][ T6417] ? __pfx_kernel_move_pages+0x10/0x10 [ 125.183475][ T6417] ? __sys_sendmsg+0x18c/0x220 [ 125.183498][ T6417] ? __x64_sys_futex+0x1e0/0x4c0 [ 125.183514][ T6417] ? __x64_sys_futex+0x1e9/0x4c0 [ 125.183534][ T6417] ? xfd_validate_state+0x61/0x180 [ 125.183557][ T6417] __x64_sys_move_pages+0xe0/0x1c0 [ 125.183577][ T6417] ? do_syscall_64+0x91/0x4c0 [ 125.183597][ T6417] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.183616][ T6417] do_syscall_64+0xcd/0x4c0 [ 125.183637][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.183652][ T6417] RIP: 0033:0x7fd4d2b8eec9 [ 125.183664][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.183681][ T6417] RSP: 002b:00007fd4d3ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 125.183696][ T6417] RAX: ffffffffffffffda RBX: 00007fd4d2de6090 RCX: 00007fd4d2b8eec9 [ 125.183705][ T6417] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 125.183714][ T6417] RBP: 00007fd4d2c11f91 R08: 0000000000000000 R09: 8000400000000000 [ 125.183723][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.183731][ T6417] R13: 00007fd4d2de6128 R14: 00007fd4d2de6090 R15: 00007ffc1885dca8 [ 125.183750][ T6417] [ 125.465957][ T6417] netlink: 268 bytes leftover after parsing attributes in process `syz.1.89'. [ 127.257738][ T6441] zswap: compressor not available [ 128.153369][ T6454] zswap: compressor not available [ 129.300364][ T6482] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 129.918902][ T6494] FAULT_INJECTION: forcing a failure. [ 129.918902][ T6494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.963179][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 129.976046][ T6494] CPU: 1 UID: 0 PID: 6494 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 129.976082][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.976098][ T6494] Call Trace: [ 129.976107][ T6494] [ 129.976116][ T6494] dump_stack_lvl+0x16c/0x1f0 [ 129.976162][ T6494] should_fail_ex+0x512/0x640 [ 129.976207][ T6494] _copy_to_user+0x32/0xd0 [ 129.976241][ T6494] do_pages_stat+0x631/0x820 [ 129.976288][ T6494] ? __pfx_do_pages_stat+0x10/0x10 [ 129.976358][ T6494] ? do_raw_spin_unlock+0x172/0x230 [ 129.976404][ T6494] kernel_move_pages+0xfa8/0x1380 [ 129.976447][ T6494] ? do_futex+0x122/0x350 [ 129.976480][ T6494] ? __pfx_do_futex+0x10/0x10 [ 129.976522][ T6494] ? __pfx_kernel_move_pages+0x10/0x10 [ 129.976561][ T6494] ? __pfx___schedule+0x10/0x10 [ 129.976601][ T6494] ? __x64_sys_futex+0x1e0/0x4c0 [ 129.976633][ T6494] ? __x64_sys_futex+0x1e9/0x4c0 [ 129.976673][ T6494] ? xfd_validate_state+0x61/0x180 [ 129.976716][ T6494] __x64_sys_move_pages+0xe0/0x1c0 [ 129.976754][ T6494] ? do_syscall_64+0x91/0x4c0 [ 129.976792][ T6494] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.976828][ T6494] do_syscall_64+0xcd/0x4c0 [ 129.976868][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.976895][ T6494] RIP: 0033:0x7fd813f8eec9 [ 129.976919][ T6494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.976942][ T6494] RSP: 002b:00007fd814e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 129.976964][ T6494] RAX: ffffffffffffffda RBX: 00007fd8141e6090 RCX: 00007fd813f8eec9 [ 129.976979][ T6494] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 129.976993][ T6494] RBP: 00007fd814011f91 R08: 0000000000000000 R09: 8000400000000000 [ 129.977009][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.977024][ T6494] R13: 00007fd8141e6128 R14: 00007fd8141e6090 R15: 00007ffe8b2e9bf8 [ 129.977058][ T6494] [ 130.194940][ T6499] netlink: 268 bytes leftover after parsing attributes in process `syz.3.100'. [ 130.479347][ T6487] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 130.877263][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.103'. [ 130.921343][ T6505] bond_slave_1: entered allmulticast mode [ 131.056012][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 132.316165][ T6528] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 132.372595][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 132.457351][ T30] audit: type=1800 audit(1758789321.512:3): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.105" name="dbroot" dev="configfs" ino=10787 res=0 errno=0 [ 132.992144][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.999073][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.877329][ T6577] nfs: Unknown parameter 'w久`_呧傷螴+; 仰HY 簡环Lu>>誹h*嚅C<+ 梆累' [ 134.135673][ T6583] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 134.684473][ T6544] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 135.214515][ T6606] hugetlbfs: syz.3.114 (6606): Using mlock ulimits for SHM_HUGETLB is obsolete [ 136.575391][ T6627] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 137.665348][ T6642] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163fb29 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 137.680871][ T6642] Call Trace: [ 137.684147][ T6642] [ 137.687076][ T6642] mce_cpu_restart+0x98/0xb0 [ 137.692264][ T6642] ? __pfx_mce_cpu_restart+0x10/0x10 [ 137.697537][ T6642] smp_call_function_many_cond+0x122a/0x1600 [ 137.703510][ T6642] ? __pfx_mce_cpu_restart+0x10/0x10 [ 137.708792][ T6642] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 137.714598][ T6642] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 137.720917][ T6642] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 137.726901][ T6642] ? __pfx_mce_cpu_restart+0x10/0x10 [ 137.732197][ T6642] on_each_cpu_cond_mask+0x40/0x90 [ 137.737302][ T6642] set_bank+0x240/0x3a0 [ 137.741565][ T6642] ? __pfx_set_bank+0x10/0x10 [ 137.746243][ T6642] ? __pfx_set_bank+0x10/0x10 [ 137.750936][ T6642] dev_attr_store+0x58/0x80 [ 137.755441][ T6642] ? __pfx_dev_attr_store+0x10/0x10 [ 137.760748][ T6642] sysfs_kf_write+0xef/0x150 [ 137.765365][ T6642] kernfs_fop_write_iter+0x3ac/0x570 [ 137.770662][ T6642] ? __pfx_sysfs_kf_write+0x10/0x10 [ 137.775866][ T6642] vfs_write+0x7d3/0x11d0 [ 137.780202][ T6642] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 137.786056][ T6642] ? __pfx___mutex_lock+0x10/0x10 [ 137.791098][ T6642] ? __pfx_vfs_write+0x10/0x10 [ 137.795892][ T6642] ksys_write+0x12a/0x250 [ 137.800231][ T6642] ? __pfx_ksys_write+0x10/0x10 [ 137.805184][ T6642] do_syscall_64+0xcd/0x4c0 [ 137.809707][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.815606][ T6642] RIP: 0033:0x7fd4d2b8eec9 [ 137.820030][ T6642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.839653][ T6642] RSP: 002b:00007fd4d3af3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.848073][ T6642] RAX: ffffffffffffffda RBX: 00007fd4d2de5fa0 RCX: 00007fd4d2b8eec9 [ 137.856138][ T6642] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 137.864114][ T6642] RBP: 00007fd4d2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.872179][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.880154][ T6642] R13: 00007fd4d2de6038 R14: 00007fd4d2de5fa0 R15: 00007ffc1885dca8 [ 137.888140][ T6642] [ 138.183788][ T6672] netlink: 19 bytes leftover after parsing attributes in process `syz.0.130'. [ 138.677902][ T6642] zswap: compressor not available [ 140.712359][ T6730] zswap: compressor not available [ 140.732018][ T6739] input: jJ歉-惗9%v鴵l澬Q J86 as /devices/virtual/input/input11 [ 141.282666][ T6747] FAULT_INJECTION: forcing a failure. [ 141.282666][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 141.339609][ T6747] CPU: 1 UID: 0 PID: 6747 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) [ 141.339644][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.339659][ T6747] Call Trace: [ 141.339668][ T6747] [ 141.339686][ T6747] dump_stack_lvl+0x16c/0x1f0 [ 141.339731][ T6747] should_fail_ex+0x512/0x640 [ 141.339770][ T6747] ? fs_reclaim_acquire+0xae/0x150 [ 141.339810][ T6747] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 141.339844][ T6747] should_failslab+0xc2/0x120 [ 141.339877][ T6747] __kmalloc_noprof+0xd2/0x510 [ 141.339916][ T6747] tomoyo_realpath_from_path+0xc2/0x6e0 [ 141.339957][ T6747] ? tomoyo_profile+0x47/0x60 [ 141.339984][ T6747] tomoyo_path_number_perm+0x245/0x580 [ 141.340013][ T6747] ? tomoyo_path_number_perm+0x237/0x580 [ 141.340048][ T6747] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.340109][ T6747] ? d_alloc_parallel+0xae4/0x1480 [ 141.340147][ T6747] ? current_check_access_path+0x33c/0x460 [ 141.340183][ T6747] ? __pfx_current_check_access_path+0x10/0x10 [ 141.340229][ T6747] tomoyo_path_mknod+0x10c/0x190 [ 141.340253][ T6747] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 141.340277][ T6747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.340321][ T6747] security_path_mknod+0x161/0x310 [ 141.340356][ T6747] lookup_open.isra.0+0xc17/0x1580 [ 141.340391][ T6747] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 141.340437][ T6747] ? __pfx_down_write+0x10/0x10 [ 141.340461][ T6747] ? mnt_get_write_access+0x20c/0x300 [ 141.340506][ T6747] path_openat+0x893/0x2cb0 [ 141.340549][ T6747] ? __pfx_path_openat+0x10/0x10 [ 141.340580][ T6747] ? __lock_acquire+0xb97/0x1ce0 [ 141.340618][ T6747] do_filp_open+0x20b/0x470 [ 141.340655][ T6747] ? __pfx_do_filp_open+0x10/0x10 [ 141.340724][ T6747] ? _raw_spin_unlock+0x28/0x50 [ 141.340758][ T6747] ? alloc_fd+0x471/0x7d0 [ 141.340799][ T6747] do_sys_openat2+0x11b/0x1d0 [ 141.340837][ T6747] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.340891][ T6747] __x64_sys_open+0x153/0x1e0 [ 141.340929][ T6747] ? __pfx___x64_sys_open+0x10/0x10 [ 141.340976][ T6747] ? rcu_is_watching+0x12/0xc0 [ 141.341006][ T6747] do_syscall_64+0xcd/0x4c0 [ 141.341048][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.341074][ T6747] RIP: 0033:0x7f42c158eec9 [ 141.341094][ T6747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.341116][ T6747] RSP: 002b:00007f42c2490038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 141.341139][ T6747] RAX: ffffffffffffffda RBX: 00007f42c17e6180 RCX: 00007f42c158eec9 [ 141.341156][ T6747] RDX: 0000000000000000 RSI: 0000000000149443 RDI: 0000200000000040 [ 141.341186][ T6747] RBP: 00007f42c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 141.341210][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.341225][ T6747] R13: 00007f42c17e6218 R14: 00007f42c17e6180 R15: 00007fff909fe1b8 [ 141.341262][ T6747] [ 141.957222][ T6747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.927129][ T6782] zswap: compressor not available [ 144.178207][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 144.552188][ T6801] random: crng reseeded on system resumption [ 146.422216][ T6825] zswap: compressor not available [ 146.968081][ T13] Trying to write to read-only block-device sda [ 147.612605][ T6852] kvm: kvm [6851]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000007d) [ 147.944647][ T6863] hub 1-0:1.0: USB hub found [ 147.969638][ T6863] hub 1-0:1.0: 1 port detected [ 148.819869][ T6863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.826074][ T6863] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.051012][ T6863] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.107770][ T6863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.113787][ T6863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.159889][ T6863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.264489][ T6863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.282612][ T6863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.393569][ T6863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.489571][ T6863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.495880][ T6863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.727671][ T6863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 150.037183][ T6884] zswap: compressor not available [ 150.450570][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.179'. [ 150.888511][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.138083][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.300335][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.566177][ T5874] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.770751][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 152.787654][ T6925] zswap: compressor not available [ 152.986881][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.207357][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.232300][ T6940] process 'syz.1.192' launched '/dev/fd/5' with NULL argv: empty string added [ 153.367495][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.610539][ T5874] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.047179][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.238834][ T6960] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 155.287245][ T5874] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.447075][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.698289][ T5874] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.354069][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'. [ 157.379833][ T7002] bond_slave_1: entered allmulticast mode [ 157.792487][ T7010] CIFS: VFS: Invalid SecurityFlags: [ 157.863603][ T7014] CIFS: VFS: Invalid SecurityFlags: [ 158.173033][ T7010] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 158.173308][ T7014] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 158.510818][ T7014] ima: policy update failed [ 158.555256][ T30] audit: type=1802 audit(1758789347.632:4): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.205" res=0 errno=0 [ 158.625019][ T30] audit: type=1804 audit(1758789347.702:5): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.213" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=28 res=1 errno=0 [ 158.797056][ T7047] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 159.026796][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 159.577783][ T7062] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 160.220737][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.220'. [ 160.375494][ T5874] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 161.015585][ T7100] block nbd9: NBD_DISCONNECT [ 161.294217][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 161.410884][ T7104] bond_slave_1: entered allmulticast mode [ 162.109630][ T7118] netlink: zone id is out of range [ 162.114781][ T7118] netlink: zone id is out of range [ 162.174995][ T7118] netlink: zone id is out of range [ 162.216588][ T7118] netlink: zone id is out of range [ 162.326571][ T7118] netlink: zone id is out of range [ 162.361144][ T7118] netlink: zone id is out of range [ 162.388120][ T7118] netlink: zone id is out of range [ 162.472006][ T7118] netlink: zone id is out of range [ 162.517055][ T7118] netlink: zone id is out of range [ 162.545167][ T7118] netlink: zone id is out of range [ 162.886127][ T7126] device-mapper: ioctl: Invalid ioctl structure: name , dev 400007f00010006 [ 162.933002][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.230'. [ 162.956121][ T7124] zswap: compressor not available [ 163.429647][ T7140] input: jJ歉-惗9%v鴵l澬Q J86 as /devices/virtual/input/input13 [ 164.184207][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 165.924875][ T7185] zswap: compressor not available [ 166.901251][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 166.916090][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.059035][ T7221] netlink: 342 bytes leftover after parsing attributes in process `syz.1.251'. [ 167.137996][ T7214] bridge_slave_1 (unregistering): left allmulticast mode [ 167.158437][ T7214] bridge_slave_1 (unregistering): left promiscuous mode [ 167.233168][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.858060][ T7229] zswap: compressor not available [ 169.678687][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 169.694245][ T7285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 169.752728][ T7277] zswap: compressor not available [ 169.938421][ T7291] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[7291] [ 170.472176][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 171.844438][ T7320] FAULT_INJECTION: forcing a failure. [ 171.844438][ T7320] name failslab, interval 1, probability 0, space 0, times 0 [ 171.896794][ T7320] CPU: 0 UID: 0 PID: 7320 Comm: syz.0.276 Not tainted syzkaller #0 PREEMPT(full) [ 171.896833][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.896849][ T7320] Call Trace: [ 171.896858][ T7320] [ 171.896869][ T7320] dump_stack_lvl+0x16c/0x1f0 [ 171.896913][ T7320] should_fail_ex+0x512/0x640 [ 171.896947][ T7320] ? fs_reclaim_acquire+0xae/0x150 [ 171.896983][ T7320] ? security_inode_init_security+0x13f/0x390 [ 171.897020][ T7320] should_failslab+0xc2/0x120 [ 171.897049][ T7320] __kmalloc_noprof+0xd2/0x510 [ 171.897083][ T7320] security_inode_init_security+0x13f/0x390 [ 171.897121][ T7320] ? __pfx_shmem_initxattrs+0x10/0x10 [ 171.897156][ T7320] ? __pfx_security_inode_init_security+0x10/0x10 [ 171.897197][ T7320] ? shmem_get_inode+0x73a/0xfb0 [ 171.897241][ T7320] shmem_symlink+0x135/0x9f0 [ 171.897284][ T7320] ? __pfx_shmem_symlink+0x10/0x10 [ 171.897315][ T7320] ? bpf_lsm_inode_permission+0x9/0x10 [ 171.897347][ T7320] ? security_inode_permission+0xbf/0x260 [ 171.897380][ T7320] ? inode_permission+0x156/0x630 [ 171.897422][ T7320] vfs_symlink+0x400/0x680 [ 171.897451][ T7320] do_symlinkat+0x261/0x310 [ 171.897485][ T7320] ? __pfx_do_symlinkat+0x10/0x10 [ 171.897517][ T7320] ? getname_flags.part.0+0x1c5/0x550 [ 171.897563][ T7320] __x64_sys_symlink+0x75/0x90 [ 171.897596][ T7320] do_syscall_64+0xcd/0x4c0 [ 171.897637][ T7320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.897665][ T7320] RIP: 0033:0x7f42c158eec9 [ 171.897686][ T7320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.897710][ T7320] RSP: 002b:00007f42c24d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 171.897733][ T7320] RAX: ffffffffffffffda RBX: 00007f42c17e5fa0 RCX: 00007f42c158eec9 [ 171.897751][ T7320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 171.897767][ T7320] RBP: 00007f42c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.897782][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.897796][ T7320] R13: 00007f42c17e6038 R14: 00007f42c17e5fa0 R15: 00007fff909fe1b8 [ 171.897832][ T7320] [ 172.447612][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 174.624383][ T7378] ubi0: attaching mtd0 [ 174.630214][ T7378] ubi0: scanning is finished [ 174.634962][ T7378] ubi0: empty MTD device detected [ 175.147381][ T7378] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 175.207123][ T7378] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 175.247188][ T7378] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 175.254194][ T7378] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 175.261736][ T7378] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 175.268581][ T7378] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 175.276689][ T7378] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2755454117 [ 175.286866][ T7378] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 175.406679][ T7383] ubi0: background thread "ubi_bgt0d" started, PID 7383 [ 175.416054][ T7380] ubi0: detaching mtd0 [ 175.484028][ T7380] ubi0: mtd0 is detached [ 175.554247][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 175.629968][ T7385] net_ratelimit: 48 callbacks suppressed [ 175.669271][ T7385] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 176.037273][ T7400] random: crng reseeded on system resumption [ 177.202616][ T7422] zswap: compressor not available [ 177.308088][ T7430] FAULT_INJECTION: forcing a failure. [ 177.308088][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 177.339842][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT(full) [ 177.339876][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.339893][ T7430] Call Trace: [ 177.339901][ T7430] [ 177.339910][ T7430] dump_stack_lvl+0x16c/0x1f0 [ 177.339956][ T7430] should_fail_ex+0x512/0x640 [ 177.339995][ T7430] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 177.340026][ T7430] should_failslab+0xc2/0x120 [ 177.340055][ T7430] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 177.340082][ T7430] ? security_file_alloc+0x34/0x2b0 [ 177.340120][ T7430] security_file_alloc+0x34/0x2b0 [ 177.340155][ T7430] init_file+0x93/0x4c0 [ 177.340190][ T7430] alloc_empty_file+0x73/0x1e0 [ 177.340228][ T7430] path_openat+0xda/0x2cb0 [ 177.340256][ T7430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.340294][ T7430] ? __pfx_path_openat+0x10/0x10 [ 177.340333][ T7430] do_filp_open+0x20b/0x470 [ 177.340363][ T7430] ? __pfx_do_filp_open+0x10/0x10 [ 177.340419][ T7430] ? alloc_fd+0x471/0x7d0 [ 177.340456][ T7430] do_sys_openat2+0x11b/0x1d0 [ 177.340494][ T7430] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.340545][ T7430] __x64_sys_openat+0x174/0x210 [ 177.340569][ T7430] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.340607][ T7430] do_syscall_64+0xcd/0x4c0 [ 177.340648][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.340673][ T7430] RIP: 0033:0x7f6f4f18eec9 [ 177.340693][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.340717][ T7430] RSP: 002b:00007f6f4ff63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.340741][ T7430] RAX: ffffffffffffffda RBX: 00007f6f4f3e5fa0 RCX: 00007f6f4f18eec9 [ 177.340758][ T7430] RDX: 0000000000109200 RSI: 00002000000032c0 RDI: ffffffffffffff9c [ 177.340774][ T7430] RBP: 00007f6f4f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.340797][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.340813][ T7430] R13: 00007f6f4f3e6038 R14: 00007f6f4f3e5fa0 R15: 00007fffba53a388 [ 177.340849][ T7430] [ 177.746526][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.287442][ T7454] mmap: syz.1.307 (7454) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.271355][ T7487] zswap: compressor not available [ 183.403160][ T7536] zswap: compressor not available [ 185.080109][ T7568] ICMPv6: process `syz.1.328' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 185.961190][ T7589] zswap: compressor not available [ 186.588863][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 187.421058][ T7625] zswap: compressor not available [ 187.813322][ T7636] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 188.414481][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'. [ 188.768470][ T5874] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 190.199498][ T7664] zswap: compressor not available [ 190.291205][ T7670] ptp ptp0: only physical clock in use now [ 190.377373][ T7679] ptp ptp0: only physical clock in use now [ 190.514430][ T7688] random: crng reseeded on system resumption [ 192.466616][ T7708] random: crng reseeded on system resumption [ 192.892785][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'. [ 193.424810][ T7736] FAULT_INJECTION: forcing a failure. [ 193.424810][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 193.464690][ T7736] CPU: 1 UID: 0 PID: 7736 Comm: syz.3.371 Not tainted syzkaller #0 PREEMPT(full) [ 193.464712][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.464724][ T7736] Call Trace: [ 193.464730][ T7736] [ 193.464737][ T7736] dump_stack_lvl+0x16c/0x1f0 [ 193.464764][ T7736] should_fail_ex+0x512/0x640 [ 193.464786][ T7736] ? fs_reclaim_acquire+0xae/0x150 [ 193.464813][ T7736] ? tomoyo_open_control+0x51f/0xa30 [ 193.464827][ T7736] should_failslab+0xc2/0x120 [ 193.464850][ T7736] __kmalloc_noprof+0xd2/0x510 [ 193.464870][ T7736] tomoyo_open_control+0x51f/0xa30 [ 193.464887][ T7736] do_dentry_open+0x97f/0x1530 [ 193.464908][ T7736] ? __pfx_tomoyo_open+0x10/0x10 [ 193.464938][ T7736] vfs_open+0x82/0x3f0 [ 193.464961][ T7736] path_openat+0x1de4/0x2cb0 [ 193.464987][ T7736] ? __pfx_path_openat+0x10/0x10 [ 193.465009][ T7736] do_filp_open+0x20b/0x470 [ 193.465028][ T7736] ? __pfx_do_filp_open+0x10/0x10 [ 193.465058][ T7736] ? alloc_fd+0x471/0x7d0 [ 193.465077][ T7736] do_sys_openat2+0x11b/0x1d0 [ 193.465097][ T7736] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.465128][ T7736] __x64_sys_openat+0x174/0x210 [ 193.465141][ T7736] ? __pfx___x64_sys_openat+0x10/0x10 [ 193.465165][ T7736] do_syscall_64+0xcd/0x4c0 [ 193.465188][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.465205][ T7736] RIP: 0033:0x7fd813f8eec9 [ 193.465220][ T7736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.465234][ T7736] RSP: 002b:00007fd814eaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.465248][ T7736] RAX: ffffffffffffffda RBX: 00007fd8141e5fa0 RCX: 00007fd813f8eec9 [ 193.465258][ T7736] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 193.465267][ T7736] RBP: 00007fd814011f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.465275][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.465284][ T7736] R13: 00007fd8141e6038 R14: 00007fd8141e5fa0 R15: 00007ffe8b2e9bf8 [ 193.465302][ T7736] [ 194.126832][ T7744] syz.3.371 (7744): attempted to duplicate a private mapping with mremap. This is not supported. [ 194.413802][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420323][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.594904][ T7751] HfR: entered promiscuous mode [ 194.669085][ T7750] openvswitch: HfR: Dropping previously announced user features [ 194.703050][ T7750] FAULT_INJECTION: forcing a failure. [ 194.703050][ T7750] name fail_futex, interval 1, probability 0, space 0, times 1 [ 194.719602][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT(full) [ 194.719633][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.719647][ T7750] Call Trace: [ 194.719654][ T7750] [ 194.719662][ T7750] dump_stack_lvl+0x16c/0x1f0 [ 194.719702][ T7750] should_fail_ex+0x512/0x640 [ 194.719742][ T7750] get_futex_key+0x1d0/0x1560 [ 194.719775][ T7750] ? __pfx_get_futex_key+0x10/0x10 [ 194.719807][ T7750] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.719847][ T7750] futex_wake+0xea/0x530 [ 194.719884][ T7750] ? __pfx_futex_wake+0x10/0x10 [ 194.719932][ T7750] do_futex+0x1e3/0x350 [ 194.719962][ T7750] ? __pfx_do_futex+0x10/0x10 [ 194.719991][ T7750] ? __pfx_task_mm_cid_work+0x10/0x10 [ 194.720015][ T7750] ? __pfx___might_resched+0x10/0x10 [ 194.720044][ T7750] __x64_sys_futex+0x1e0/0x4c0 [ 194.720080][ T7750] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 194.720114][ T7750] ? __pfx___x64_sys_futex+0x10/0x10 [ 194.720144][ T7750] ? xfd_validate_state+0x61/0x180 [ 194.720189][ T7750] do_syscall_64+0xcd/0x4c0 [ 194.720226][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.720250][ T7750] RIP: 0033:0x7fd4d2b8eec9 [ 194.720269][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.720291][ T7750] RSP: 002b:00007fd4d3ad20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 194.720314][ T7750] RAX: ffffffffffffffda RBX: 00007fd4d2de6098 RCX: 00007fd4d2b8eec9 [ 194.720329][ T7750] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4d2de609c [ 194.720344][ T7750] RBP: 00007fd4d2de6090 R08: 00007fd4d3af4000 R09: 0000000000000000 [ 194.720358][ T7750] R10: 0000000000000034 R11: 0000000000000246 R12: 0000000000000000 [ 194.720372][ T7750] R13: 00007fd4d2de6128 R14: 00007ffc1885dbc0 R15: 00007ffc1885dca8 [ 194.720405][ T7750] [ 194.912634][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.496128][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'. [ 197.177411][ T7814] syz.1.386 uses obsolete (PF_INET,SOCK_PACKET) [ 198.122031][ T7837] FAULT_INJECTION: forcing a failure. [ 198.122031][ T7837] name failslab, interval 1, probability 0, space 0, times 0 [ 198.135153][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.3.392 Not tainted syzkaller #0 PREEMPT(full) [ 198.135184][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.135197][ T7837] Call Trace: [ 198.135205][ T7837] [ 198.135214][ T7837] dump_stack_lvl+0x16c/0x1f0 [ 198.135264][ T7837] should_fail_ex+0x512/0x640 [ 198.135299][ T7837] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 198.135328][ T7837] should_failslab+0xc2/0x120 [ 198.135360][ T7837] __kmalloc_cache_noprof+0x6a/0x3e0 [ 198.135386][ T7837] ? s_start+0x7b/0x320 [ 198.135416][ T7837] ? find_held_lock+0x2b/0x80 [ 198.135443][ T7837] s_start+0x7b/0x320 [ 198.135480][ T7837] seq_read_iter+0x2c1/0x12c0 [ 198.135520][ T7837] seq_read+0x3a3/0x570 [ 198.135544][ T7837] ? __pfx_seq_read+0x10/0x10 [ 198.135588][ T7837] ? rw_verify_area+0xcf/0x6c0 [ 198.135612][ T7837] ? __pfx_seq_read+0x10/0x10 [ 198.135636][ T7837] vfs_read+0x1e1/0xcf0 [ 198.135668][ T7837] ? __pfx___mutex_lock+0x10/0x10 [ 198.135704][ T7837] ? __pfx_vfs_read+0x10/0x10 [ 198.135741][ T7837] ? __fget_files+0x20e/0x3c0 [ 198.135778][ T7837] ksys_read+0x12a/0x250 [ 198.135805][ T7837] ? __pfx_ksys_read+0x10/0x10 [ 198.135842][ T7837] do_syscall_64+0xcd/0x4c0 [ 198.135880][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.135904][ T7837] RIP: 0033:0x7fd813f8eec9 [ 198.135924][ T7837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.135945][ T7837] RSP: 002b:00007fd814e68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.135967][ T7837] RAX: ffffffffffffffda RBX: 00007fd8141e6180 RCX: 00007fd813f8eec9 [ 198.135983][ T7837] RDX: 00000000000000fd RSI: 0000200000007ec0 RDI: 0000000000000004 [ 198.135997][ T7837] RBP: 00007fd814e68090 R08: 0000000000000000 R09: 0000000000000000 [ 198.136011][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.136025][ T7837] R13: 00007fd8141e6218 R14: 00007fd8141e6180 R15: 00007ffe8b2e9bf8 [ 198.136058][ T7837] [ 198.136079][ T7837] [ 198.337245][ T7837] ===================================== [ 198.342787][ T7837] WARNING: bad unlock balance detected! [ 198.348333][ T7837] syzkaller #0 Not tainted [ 198.352748][ T7837] ------------------------------------- [ 198.358342][ T7837] syz.3.392/7837 is trying to release lock (event_mutex) at: [ 198.365729][ T7837] [] seq_read_iter+0x60d/0x12c0 [ 198.372165][ T7837] but there are no more locks to release! [ 198.377885][ T7837] [ 198.377885][ T7837] other info that might help us debug this: [ 198.385945][ T7837] 2 locks held by syz.3.392/7837: [ 198.390959][ T7837] #0: ffff888032b55cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 198.400028][ T7837] #1: ffff8880330b6b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 198.408907][ T7837] [ 198.408907][ T7837] stack backtrace: [ 198.414788][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.3.392 Not tainted syzkaller #0 PREEMPT(full) [ 198.414813][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.414824][ T7837] Call Trace: [ 198.414833][ T7837] [ 198.414842][ T7837] dump_stack_lvl+0x116/0x1f0 [ 198.414872][ T7837] ? seq_read_iter+0x60d/0x12c0 [ 198.414891][ T7837] print_unlock_imbalance_bug+0x11b/0x130 [ 198.414916][ T7837] ? seq_read_iter+0x60d/0x12c0 [ 198.414934][ T7837] lock_release+0x242/0x2f0 [ 198.414960][ T7837] __mutex_unlock_slowpath+0xa2/0x7b0 [ 198.414991][ T7837] ? rcu_is_watching+0x12/0xc0 [ 198.415011][ T7837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.415041][ T7837] ? rcu_is_watching+0x12/0xc0 [ 198.415060][ T7837] ? kfree+0x24f/0x4d0 [ 198.415077][ T7837] ? __kasan_kmalloc+0x8a/0xb0 [ 198.415102][ T7837] seq_read_iter+0x60d/0x12c0 [ 198.415126][ T7837] seq_read+0x3a3/0x570 [ 198.415144][ T7837] ? __pfx_seq_read+0x10/0x10 [ 198.415169][ T7837] ? rw_verify_area+0xcf/0x6c0 [ 198.415188][ T7837] ? __pfx_seq_read+0x10/0x10 [ 198.415211][ T7837] vfs_read+0x1e1/0xcf0 [ 198.415234][ T7837] ? __pfx___mutex_lock+0x10/0x10 [ 198.415262][ T7837] ? __pfx_vfs_read+0x10/0x10 [ 198.415287][ T7837] ? __fget_files+0x20e/0x3c0 [ 198.415311][ T7837] ksys_read+0x12a/0x250 [ 198.415333][ T7837] ? __pfx_ksys_read+0x10/0x10 [ 198.415358][ T7837] do_syscall_64+0xcd/0x4c0 [ 198.415388][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.415408][ T7837] RIP: 0033:0x7fd813f8eec9 [ 198.415424][ T7837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.415442][ T7837] RSP: 002b:00007fd814e68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.415461][ T7837] RAX: ffffffffffffffda RBX: 00007fd8141e6180 RCX: 00007fd813f8eec9 [ 198.415474][ T7837] RDX: 00000000000000fd RSI: 0000200000007ec0 RDI: 0000000000000004 [ 198.415486][ T7837] RBP: 00007fd814e68090 R08: 0000000000000000 R09: 0000000000000000 [ 198.415498][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.415510][ T7837] R13: 00007fd8141e6218 R14: 00007fd8141e6180 R15: 00007ffe8b2e9bf8 [ 198.415529][ T7837]