last executing test programs: 13.212455744s ago: executing program 2 (id=987): mmap$auto(0x0, 0x400008, 0xe2, 0x100000000bb72, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x0, 0x30, 0x0, 0x568) 11.570495703s ago: executing program 2 (id=992): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xcf80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x6, 0x1001ff000) r4 = prctl$auto(0x37, 0x100000000000001, 0xffffffffffffffff, 0x10000, 0x9) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) getsockopt$auto(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000340), 0xffffffffffffffff) fgetxattr$auto(r0, &(0x7f0000000280)='\\@--*\x86\\#]:+]\xc5\x00', 0x0, 0x0) r5 = getsockopt$auto(r4, 0x0, 0x2, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) r6 = socket(0x2b, 0x1, 0x1) r7 = pidfd_getfd$auto(r5, r6, 0x8) r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r2) sendmsg$auto_IEEE802154_ADD_IFACE(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x74, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xb7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x10}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe4}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_PHY_NAME={0x2f, 0x1f, '/sys/devices/virtual/block/nbd13/trace/pid\x00'}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xff}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x801) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x62142, 0x0) setsockopt$auto_SO_BSDCOMPAT(r6, 0x6, 0xe, 0x0, 0x80001) setsockopt$auto_SO_WIFI_STATUS(r0, 0x5, 0x29, &(0x7f0000000040)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r5, 0x5501, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 6.472848216s ago: executing program 2 (id=1008): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x3ec, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="9bff29bd720005000000012000000ac4bfb7862df0b129abe799248f27d5778e537bc84976065d120423612a70dd2cc35ebd0812c3522bcd3542605e"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.389143262s ago: executing program 3 (id=1025): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x40, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r0, 0xc0884123, &(0x7f00000002c0)={0xae, 0x0, @reserved="e7c0c0895a501b3173edff13a35d9efa2947528a6ef00b9117d400000000000100af00b40b535f1ecc00f6f9adeb30798d3212ca349fc63eb5b35fee9f075da2", @reserved="24e727ded8cb0e9aff3e3ecb5f19bada32c7a2bfdb0d979b5b49dcb01000000000000000a779465b3c0a8cda641da50000040100"}) socket(0xa, 0x3, 0x3b) socket(0x29, 0x3, 0x3a) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0c\x00', 0x81, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r1, 0x4143, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x30, 0x65f, 0x6, 0x2, 0x3, 0x20000002, 0x7, 0x3, 0x4, 0x4, 0xb4, 0x6, 0x80000000000a, 0x10003, 0x80, 0x4, 0x3, 0x2, 0x1002000, 0x205, 0x108, 0x84, 0xfffffffffffffffd, 0x0, 0x0, 0x40000000, 0x0, [0x0, 0xfbfffffffffffffc, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x400000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1]}, 0x3, 0xd) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(r2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="18000000", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) sysfs$auto(0x6, 0x4, 0x6) write$auto(r4, &(0x7f0000000000)='-\x00', 0x30) 4.098583049s ago: executing program 3 (id=1027): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x6) mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, 0x0, 0xa041) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, 0x0, 0x20000800) poll$auto(0x0, 0x8, 0x1) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000c00)={0x6c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x46}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10) mkdir$auto(&(0x7f0000001580)='macsec\x00', 0x9) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x4) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x8000) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r2 = gettid() setpgid$auto(r2, 0xe83) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40090) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) memfd_create$auto(0x0, 0x5) 3.176906829s ago: executing program 2 (id=1031): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) statx$auto(r1, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x5, 0x4380, 0x1) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = setfsuid$auto(0x0) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r3, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x1, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x10000080000001, 0x4, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) setpriority$auto(0x4, r3, 0x5) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0x1e, 0x4, 0x0) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x5, 0x0, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) close_range$auto(0x2, 0x8, 0x0) listxattrat$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x10000000000000) close_range$auto(0x2, r2, 0x0) 3.043872997s ago: executing program 0 (id=1032): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) pread64$auto(r0, 0x0, 0x10000000d, 0x5) r1 = socket(0x2, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x84, 0x0, 0x0) socket(0x11, 0x3, 0x9) syz_clone(0x90260400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) (async) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_VHOST_SET_VRING_ERR2(r3, 0x4008af22, 0x0) r4 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) (async) sendto$auto(r4, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) epoll_create$auto(0x7) r5 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r5, &(0x7f00000001c0)=""/132, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket(0x2, 0x2, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) (async) shutdown$auto(0x200000003, 0x2) r6 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) write$auto(r6, 0x0, 0xfffffdef) (async) fcntl$auto_F_ADD_SEALS(r6, 0x409, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8c42, 0x0) 2.97410253s ago: executing program 3 (id=1033): prctl$auto(0x23, 0x4, 0x2008, 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x593a06, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) r2 = ioctl$auto_TUNSETLINK(r1, 0x400454cd, &(0x7f0000000080)=0x6) ioctl$auto_OSS_ALSAEMULVER2(r2, 0x80044df9, &(0x7f00000000c0)="537d1368122853eb33e75bd4c1ad1ab56cce621ef53fa84255987d91085a805eee55") close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto_SO_PROTOCOL(r1, 0x4, 0x26, &(0x7f0000000100)='\x00', 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = socket(0x2, 0x801, 0x106) r4 = getsockopt$auto(r3, 0x11c, 0x3, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0xc, 0x0, 0x8, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x11, 0x20000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.537905892s ago: executing program 3 (id=1034): mmap$auto(0x0, 0x1, 0x37eb, 0x40eb2, 0x4, 0x300000000000) r0 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000000)=0x7) ioctl$auto_FIOCLEX(r0, 0x5451, 0x8) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0xca, &(0x7f0000000080)='\x04 \xa1M\x11=.!\xd3\'\x8a\x00\x00\x00\x00\x00\xbd\x90q\xd0\xff\xea\xe9\x04B\x1c\x9a\x02y(\x83\xdf-g\xd7.\x83\xb2\xe4x\xdb\xfb\x18#&\x83\x17\x18\x05\x12|\x83$\xd0\x9a?\xf2W\xdd\xd3Z*\xa5\x81V\x98+q\xef(]\x81\x1c\x98B]\x9c\xd7\x05\x11\xcc\x1d\xc5\t\xe1A\fA\x8b\xd8\x8b\xb5\xa0\x9c\xab\xb6:\x18\xeaz\xc2!x0\f\xaa\xbd\xbeGh\x0f\v2\x83\x12>\xe7\x9e\xdb\xb5yO\xa3*\xb8\x9fH\xc0K0\x87\xc3N~2\xb1\xc4\xc7y9u\xa6\x89\xa9@\xf1\x92M(\x9e\xf9\x8e\xbf\x86\xfav7t\x14\xde\xd9Wd1G\x97\x13\x84\xff\x99\xdf\xd2\xa2\xf5l\xd6\xcf\x04\f^@r\xe9!\xb1X\xf19$\xf0h\v\r\xd0\xd9\xefm[l\xa4\xc7\x0e+H\xed\xf8\x82Wh%\x1f\x99\xaa\xf2\xb3\xb3Nr\xb0\x9a\xd2\xb67\xca\xdar\xa6\xe07\x061\xb7\xa6\xa9\x1b?>\x03\xad^\xd7\xbb-\'}\xc7\x82\xaa\n\xac\xa3\x15\x82\xc0\x02\x18\x1f\xb1cX\xc9\xcaGf((p<\x17|\x03\x00\x00\x00Qop^Y\xf4\xeccl\xa0$\xe0\'\xf8\x83\x8c\x7fW!p^=\x12\xbf$\xae7\xa2,\xce\xd1\xb0\xbd\x01\xf0z\x97\x0f\x94\xb5\x10&@\xaeF\xb8\x92\xd5\x15E\xf8\\ =SMH6\xd6\xd2\xa2~\x0e\x87\f\x0e\xe2\xd7\xfc\xed9\xaa\x81Qdw\xa0\xe7;D\xfa\xd3+\x93<\xce\xf16%\xc1s\b\xb0\xfe\xcd\xaf\x1a\xed\xf9\xd3HD\x82\xb5d\x9e\x91\xa1\x04\xe0\x86\xd94\x06O2\xc4O\xffm\xc3O\xe89\xbe\x03B\x0f6\xbe\xaf\xaa=[7\xd9\xca\xd2\xa0&\xc4(=%\xda\rM(&\xe4\x12S\nm\xd8\xb4\x8a\x1f\x00', 0x7e) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getdents64$auto(0x2, 0xfffffffffffffffe, 0x1) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, &(0x7f0000000440)=0x2) r5 = set_tid_address$auto(0x0) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0xf, 0x0, 0x6) r7 = setfsuid$auto(0xee00) setresuid$auto(r7, 0x0, r7) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000200)={{0x9, 0x0, 0xffffffffffffffff, 0x800, 0x10, 0xad15, 0x7}, &(0x7f0000000180)=0xf, &(0x7f00000003c0)=0x3, 0x3ff, 0x5, 0x200, 0x0, 0x65, 0x7, 0x2, 0x3, @inferred=r4, @inferred=r5}) fstat$auto(r6, &(0x7f0000000300)={0x0, 0xf07, 0xaf4, 0x9, r7, r8, 0x0, 0x0, 0x8000000000, 0x74786f25, 0x1, 0x7, 0x40, 0x2, 0x1, 0xa841, 0x100000000000}) r9 = waitid$auto_P_ALL(0x0, 0x0, &(0x7f0000000280)={@_si_pad}, 0x1000, &(0x7f0000000300)={{0x1, 0x100000001}, {0x7, 0x3}, 0x6, 0x200000000, 0x1, 0x5, 0xe, 0x4, 0xfa70, 0x7, 0x0, 0x10001, 0x3ff, 0xccf9, 0x6, 0x9}) sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="e0130000", @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf250600000052030980080023000900000033002b8004005a800400158008000000", @ANYRES32=r1, @ANYBLOB="0400cc809072f3084a60417501453d10e698e938ec857e465b599ef2d47f7d00576eb95a3b3cb44147c01122ce3d8536fd2f959b1fffa33742679f96037e2ae317119d27a2c23168d62623fec61f908f1436a6c160df5aadc6886cae3bc94555140d562fafd4c14461395399b3d0543b51827fce9a51f3059fdbd2059f97eec560576935201437d34053f83e9891c1e1e68d7b5d6c4aa27a9fe06eb867e2b08086478bfcfd8c5fb53d1d8802d68008002f00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08001200", @ANYRES32=r9, @ANYBLOB="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"], 0x13e0}}, 0x4000) ioctl$auto(0x3, 0xae41, r2) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x103801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value=[0x6, 0x0, 0x5, 0x80, 0xfffffffffffffffe, 0x8b0, 0x4, 0x8000000000000001, 0x100000000000004, 0x2090, 0xf7a, 0x6, 0x3, 0x1, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x6, 0x2, 0x8, 0x10, 0xfffffffffffffffe, 0x3, 0x7, 0x6d, 0x3, 0xfffffffffffffff7, 0x10000, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x7, 0x200000000a78, 0x100000000000000, 0x100000004, 0x1, 0x0, 0x29, 0x81, 0x50, 0x5, 0x6, 0x8, 0x2afb, 0x803, 0x80, 0x4, 0x0, 0x4572, 0x9, 0xce13, 0x0, 0x4, 0x6, 0xd, 0x0, 0xfff, 0xc, 0xfffffffffffffffb, 0x6, 0xff, 0x10001, 0x0, 0x9, 0x9, 0x3, 0xd3ad, 0x9, 0x5, 0x7, 0x100000001, 0xffffffffffffffdc, 0x5, 0x1, 0x1000, 0x100000001, 0x100, 0x80000001, 0x8, 0x7, 0x4, 0x8, 0x800000000010, 0xff, 0x6, 0xff8000000, 0x2a4c32e3, 0x800, 0x18, 0x200000000000007, 0x4, 0x57, 0x1, 0x6, 0x7fffffffffffffff, 0x119af68c, 0x3, 0x4, 0x7, 0x6, 0x0, 0x8000000000000001, 0x5, 0x8, 0xc8d, 0x7, 0x7, 0x2, 0x9, 0xfffffffffffffff8, 0x4, 0xc, 0x6, 0xa, 0x10001, 0x4bb2, 0x2, 0x400, 0x401, 0x8, 0x7], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) r12 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r12, 0x0, 0x0) 1.987668025s ago: executing program 0 (id=1036): prctl$auto(0x23, 0x4, 0x2008, 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x593a06, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r2 = socket(0x22, 0x2, 0x1) fstat$auto(r2, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r3, 0x3b87, 0x38) r4 = ioctl$auto_TUNSETLINK(r1, 0x400454cd, &(0x7f0000000080)=0x6) ioctl$auto_OSS_ALSAEMULVER2(r4, 0x80044df9, &(0x7f00000000c0)="537d1368122853eb33e75bd4c1ad1ab56cce621ef53fa84255987d91085a805eee55") close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto_SO_PROTOCOL(r1, 0x4, 0x26, 0x0, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = socket(0x2, 0x801, 0x106) r6 = getsockopt$auto(r5, 0x11c, 0x3, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r6, 0x541c, r6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) socket(0x2, 0x1, 0x0) 1.906227529s ago: executing program 0 (id=1037): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, 0x0, 0x2080) socket(0x11, 0x80003, 0x300) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x13, 0x0, 0x25, 0x70bd25, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) rt_sigqueueinfo$auto(0x0, 0x10, 0x0) 1.904769336s ago: executing program 1 (id=1038): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) msgget$auto(0xc, 0x77d9) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20a"}, 0x9, 0x3, 0x2af3) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x169c81, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x7}, 0xcf, 0xab) 1.869700963s ago: executing program 1 (id=1039): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x3ec, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="9bff29bd720005000000012000000ac4bfb7862df0b129abe799248f27d5778e537bc84976065d120423612a70dd2cc35ebd0812c3522bcd3542605e"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.773753886s ago: executing program 0 (id=1040): fanotify_init$auto(0x1, 0x2) mmap$auto(0x0, 0x400005, 0xdc, 0x9b72, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x10002, 0xffffffffffff0005, 0x9) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) socket(0x29, 0x2, 0x0) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x101041, 0x0) write$auto(r0, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000000)=0x8) close_range$auto(0x2, 0x8, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) ptrace$auto_PTRACE_GETSIGINFO(0x4202, r1, 0xff, 0x0) io_uring_setup$auto(0xa, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x21, 0x1, 0x85) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x9) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) setsockopt$auto(0x400000000000003, 0x8029, 0xca, 0x0, 0x567) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) 1.484912281s ago: executing program 2 (id=1041): sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xffffffffffffffff, 0x8000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0xaa042, 0x0) write$auto(0x3, 0x0, 0x3f00) 1.162903324s ago: executing program 3 (id=1042): mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvme_core/parameters/iopolicy\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/7, 0x7) 1.093821141s ago: executing program 0 (id=1043): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/10u\x00', 0x0, 0x0) read$auto_mon_fops_text_t_mon_text(r0, &(0x7f0000000040)=""/91, 0x5b) r1 = syz_clone3(&(0x7f0000001200)={0x8800, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x18}, &(0x7f0000000180)=""/57, 0x39, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r3 = waitid$auto(0x7fff, r2, &(0x7f0000001280)={@_si_pad}, 0x2d2982cd, &(0x7f0000001300)={{0x4418, 0xff}, {0xfffffffffffffffb, 0x1}, 0x7ff, 0x9, 0x8, 0xfff, 0x2, 0xc, 0x2, 0x5, 0x4, 0x81, 0x7fffffffffffffff, 0x8, 0x18000, 0x61}) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/lru_gen\x00', 0x800, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001400)='/dev/snd/pcmC0D0c\x00', 0x84100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r5, 0x4144, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP2(r5, 0x40044102, &(0x7f0000001440)=0x383) mmap$auto(0x7, 0x2, 0x2, 0x18, r4, 0x100000001) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001480)={0x5, r2, 0x6, 0x6, 0x854e, 0x2ed}) write$auto_fuse_conn_congestion_threshold_ops_control(r6, &(0x7f00000014c0)="53b929f0bede0c0004a15b00c5326d210859c8bc0787be4409ee4c214685c109100946dbad5d046850817195035afa7ceb19dbad7aa0ebed989f0e6b228fe60dc67b2733ed3bbcf3c74b8d7f9e149f0db6633685d16228d4d9150acb9e89a9f391bb2511f8669e379fe06ce7059e80ae4b4d04fa3e8cb1d781b3037ea7a3c2477da13e0a425eaf938cd9c74e7d0b8e0e1d519e2bc7e2ef82278f2efcddabcee20a83d5a0f19b0ca99c", 0xa9) r7 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) lseek$auto(r7, 0xf, 0x9) move_pages$auto(r1, 0x7, &(0x7f0000001640)=&(0x7f00000015c0)="546907f1d3c03399064aa6322331d392f86bb24c2198f800f2fabeb3b9faeed3532de3a968dd5f97b62d5de63a53c3761b4319c5c4819b2c6fe970d3189f6261ba0ea00a5248c4d3fd53f4b20d63", &(0x7f0000001680)=0x5b38b26, &(0x7f00000016c0)=0x3, 0x7561) ioctl$auto_XFS_IOC_ALLOCSP64(r6, 0x40305824, &(0x7f0000001700)={0x5, 0x7, 0x3, 0x0, 0xf, r1}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000001740)={@raw=0x5, 0x5, 0xdec, 0x6, "a2723c177e8e566a5996a1c88b07c70de711c065a4f1e68fed8d11edf1b57eb003393a85d9b9465648e77412", @inferred=r8}) getsockopt$auto_SO_TIMESTAMP_NEW(r0, 0x97, 0x3f, &(0x7f0000001780), &(0x7f00000017c0)) r10 = openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_CONFIG(r11, &(0x7f0000002980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002940)={&(0x7f0000001880)={0x109c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x105c, 0x1, 0x0, 0x1, [@nested={0x4c, 0xf9, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x8, 0xef, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x150}, @generic="8bf8b326c028871a7d689add5f2806ddf227be795cf73d43ba863e97b14bcbb764708e444b9ee7aa050a990f00a38ad5e05e20d8571272e0"]}, @typed={0x1004, 0xcf, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@nested={0xc, 0x11a, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @pid=r9}]}, @nested={0x1c, 0x143, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @u32}, @typed={0x8, 0xbc, 0x0, 0x0, @str='(.)\x00'}, @typed={0x8, 0x154, 0x0, 0x0, @ipv4=@local}]}]}]}, 0x109c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004081) r12 = getsockopt$auto(r4, 0xe365, 0x4e9, &(0x7f00000029c0)='\x00', &(0x7f0000002a00)=0x6) r13 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002a40)='/proc/sys/net/ipv6/conf/veth1/accept_ra_rtr_pref\x00', 0x250000, 0x0) prctl$auto(0x6, 0x101, r3, 0x14b5, 0x3ff) io_uring_setup$auto(0x4, &(0x7f0000002a80)={0x6, 0x17d1ca5e, 0x7, 0x1, 0x0, 0xd3, r5, [0x400, 0x1000, 0x8], {0x1, 0x5, 0xfff, 0x2, 0x3ff, 0x4, 0xfffffffe, 0x3, 0x30b0}, {0x8, 0x100, 0x3, 0x7ff, 0x80, 0x7, 0x7, 0x3}}) ioctl$auto_FS_IOC_SETFLAGS(r11, 0x40086602, 0x9) writev$auto(r10, &(0x7f0000002b80)={&(0x7f0000002b00)="94f427fb75e477f4ce3a022dfb5e0f7cd0ae8bc7c001af51872cdf6c99acbacfd61bb778050842a7bfc8cd9e748c549c2844023149c4fc3e22f414c8837dd1dee54ee009d4254d505297eb669df97477669f975cfe841284b7e6c9c206", 0x6}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) tee$auto(r13, r4, 0x5, 0xfffff000) getdents$auto(r12, &(0x7f0000002bc0)={0x420, 0xb, 0xc, "3e5b6458d68480cf71ff2320fcb4f87f100c779605381e836e62ffd782c6675fdcc816394b677476f007016b3f19b9a579d6d2da5c43152198412add0be1162de17c8cdf39de061f190d4998acb6843c1072e69046c843363c18beb6d699958c7f61971f08aaff03bd04356da3ea1930f6218aeeebdee89dc86a2c00d37e083194ca0c0602147abdc3328ffb6a35a9db50c6e8b8e3f2496148908cc8afb2bfa266e5759824fba3382d236c6ca29cc2e3c1b88091dc30eb45ed7e833a2ab84cf26f596ba80af8ed4af2787d70964298900a1d693d7aa0072bb3609c22b1bde8608ef8f43a06ae61d9fdd1ae3f2fe79326c8"}, 0xa) 945.101279ms ago: executing program 1 (id=1044): r0 = setfsgid$auto(0xee01) setresgid$auto(r0, 0x0, 0x0) shmctl$auto_IPC_STAT(0x6, 0x2, &(0x7f00000011c0)={{0x8, 0xee00, r0, 0x0, 0x1, 0x0, 0xbff}, 0x8, 0x1, 0x7f, 0x3, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000000)="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", &(0x7f0000001240)="334449434864e8de7e7550daa7d62b25b88a06b4e6fe627698361bd76451e876a0c882349c45fa10d76ca14bb45a48db04061dac007ec50581bedf20994e2b1cd13cc59016176453b648556a77809260881938b2af7509bab8bcfd767ae72ffddbd9ed0aa61dde7bc411356f80e519f397a1ce482c7fad0acbf1aed10d159f78f08ebe979083334e226186e53033dedcf0283f0e66d09fc86c7d38e06bc7a36236d6deaa7c3c05a2e71122b6afe9b3ba9c618ffaf51d1e3201c68f7becb13f7af46ade6c5cf80b1336256da517dbc6674143c2c6447b91f86fb982af0e2f4f4bffce452229408c8b66c571b2b5f155220ccff23196aeca"}) setresgid$auto(r0, r2, 0xee00) setresuid$auto(0x2, 0x7, 0x8080) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x2, r1, 0x200) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) lstat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80000001, 0x5f, 0x1, 0x3, 0xee00, 0x0, 0x0, 0x3, 0x10001, 0xff, 0x1, 0x6, 0x9, 0x0, 0x59, 0x35, 0x5}) keyctl$auto(0xb, 0xfffffffd, 0x7, r4, 0x6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="0164002bbd7000fcdbdf1e040a81467ebf92c6e60000000400"], 0x20}, 0x1, 0x0, 0x0, 0x24048084}, 0x200388c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r3, 0x8, 0x0) brk$auto(0x40008000) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd700002dcdf2503000000040008001c0001801800108014000c00fc0200000000000000000000000040ffcfd6171194376f260f950d48babf2c5b83b0a6ebb669d6fff9ab4fdb7e1c3203a34aea090380783dd4e6c66e0ed83adaa773d064703069e379bb3e1866bc27bb3bc8d408f2a4524ba81c69567aa904e54cf6a707c0ff989b297317477fc2609c8eb2c63cf4bfe0badbee429e34d261de27f936af86c2365a4d5314044d445984ed91695fb6cb02add7bbc78e09a8dc63eb6480bdcd850b3f68c6143eef292855e1a81e3c64e610fedfababe2fb967f00b324db209295f1f526967dd3f26bf8daf399dc3adae09c4adfcb25677c"], 0x34}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) mmap$auto(0x0, 0xfffffffffffffecc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x300) sendto$auto(0x3, 0x0, 0x18, 0x7, &(0x7f0000000180)=@hci={0x1f, 0xdd86, 0x7}, 0x22) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) 736.104302ms ago: executing program 3 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) read$auto(r2, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x3, 0x10001, 0x6}, &(0x7f0000000040)=0x22, &(0x7f0000000100)=0x1, 0x9, 0x6, 0x9, 0x4, 0x10001, 0x6, 0x9, 0x8}) setresuid$auto(0x0, r3, r3) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x941683, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SG_SET_DEBUG(r4, 0x227e, &(0x7f00000000c0)) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="0500290006000000ae040f00fa38fc1ce2bcbfdace4ce0a007bb13f43b3108d7e2cecccf33506bba9c0bbdc8a031ca7c3ad1025987708a5337a352660728c00d193cb3554b3b9bdd137eb5c2d52f2bcce073226aa41e76856727998c41eeb80198064cad66119de4fa829ad3584a8dfa3832f94546f3629cda63baa9967e7e546b00845a04aa0a34aec962b9c5d7c9856b0736e214b05a5566e810d3f473add19181e9e11fd74aa7906511794413e2c1868f507d1faff1b24691aeb05d2a539a993088b196c58a656c744c39a31e0951067deae831d8f5c723da1b7e2688686e184e5514091f13080da42fd236662656bf10e9833fbb4f7ecdc37fbc594c3f26d53bbbf9c818c2b71855f3a1f843bd5571d0b7832b35d380820bfd75883905f858473ede84caa005c2e9fe71f8ea2310e36c650566f68ceee7eb8b42e9262270fe3d227c021943bf8f9f00c3dc603007757fe399bc795b49fb122cf2ccf4e6a1a643f20e444706ed4f5cff66bae14cb6b9602d4c00512b19095c46e8fcd3a6d4b276bd4666c8f4a5c195fcdb2570a6d1bd5cc2377c8a863d624587a4e06d10f83f2b322dc8d6a80e8f4b5a3398c1deab5ab0a1e11ec7675e44f01409d39915a34050e4a14e1e53c560b33b58ccb788734c6ffecade76d2cbb778f6c24635078c7fbb70c420ae48011232d2148902512aa08176b6ca1a51bc5774c273b74bf450a650e8d49d10b0d9d247b6af592dcd1fb391c2d50024842c0fd5c735b35adb75030f783618a88c8c4cafedbefd2359605192bd9f70be54822fdd4cba3087ac960546f4d4695e6f7112dcf88f10368fa2cd94387652b69a167442f963e69c7b8211febc5c2bbe69afb56dffb2c2cf841ee4db972d03e1d9a360d5cb0421d43a30fc0722ced687e8c137101acc205f6a128f4f827a0e06f9be21fc66fe35ace03025f4ff159e83b3464a7b813af92ca8acd653a9e7f09e06d5da70bf7c9e3ce05431c1d73b6d5fb51f5fddf760b73aabb2883bd27f75a76ce1bf98e6349d12aaea1026d3b97375f5502022797a1d4ae012c02d85d37de68612867e3909f69eb2ac800669868abe8eff8ee8f6ac54d7233ff736b5f94de2230056f1f7a8619fbe7bcf10bc166f99540cdda69a529a20ce28aea62e82871f2676747e87e28520fd75df781b250d890ca99638fc5fc33d2bdb693bad1a2b296e59f55298480ddefa0f5e26e1789d28f2550f3d5bbc1afff16f23094179b29c8f2032e0a3d23244db82936d149d255b291881e59f6c09e3bd39a2f4f145deb9f44dc79d06a7bb084af6547875a4eb0c431c3b2415a9bdc44ce1f402552f1c130396e007f5dd83f43fd59fa248908996e1f9e31eb7c56aee98dfbbeba223f127c0e36b602f227a5d0e5e2945823947694c2976bc740ba444e46847d35d4f44fab25896a7c75ae72d43203df25a4daa26f4155de0b2d1cad44a0c5c21e8874ef21cd3efa2f1c946697b638fdbd80418a1a884b49149c45fea130bebcedb9a8c41650c85d468e088a2ac4de41f6b4f31d02038a8479211e5d64a9df6552ee5405f46641e59abb3abb88ed22b510f4b2adb0340a1ab01f175dbfdada121fbe19d2255022ad7720f16f574f57e9b405a223e28dbcf1f9fa0f58ba42d15510c855b7ade58f5cd9fd0f3b57ac38096c95ba44e2b062abf2d16de4baa178b8defc85b8522b85e3487fc4638465e0000"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) 704.377609ms ago: executing program 2 (id=1046): r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) wait4$auto(r2, 0x0, 0x80000001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r0, 0x6, &(0x7f0000000200)={@_si_pad}, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010071bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 512.941792ms ago: executing program 1 (id=1047): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff003) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}, 0x1, 0x0, 0x0, 0xa00}, 0x40000) 221.489744ms ago: executing program 1 (id=1048): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) msgget$auto(0xc, 0x77d9) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20a"}, 0x9, 0x3, 0x2af3) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x169c81, 0x0) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x7}, 0xcf, 0xab) 40.996408ms ago: executing program 1 (id=1049): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x95) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/udp6\x00', 0x80, 0x0) pread64$auto(r5, 0x0, 0x8202000, 0x2d) ioctl$auto(r4, 0x404064c8, r4) (async) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="ac0a0000", @ANYRES16=0x0, @ANYBLOB="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"], 0xaac}, 0x1, 0x0, 0x0, 0x14}, 0x20000810) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, 0x0, 0x0) getsockopt$auto_SO_RCVMARK(r3, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000300)={0x0, 0xa6, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="05032cbd7000fbdbdf2505004000"], 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 0 (id=1050): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/erofs/features/fragments\x00', 0x101900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002980)=""/4075, 0xfeb) mmap$auto(0x0, 0x402004b, 0xdf, 0xeb1, r0, 0x1) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r2, 0x901064ae, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0xc02c5341, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) write$auto(r3, 0x0, 0x10007c) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 81.911955][ T5807] cgroup: Unknown subsys name 'net' [ 82.081634][ T5807] cgroup: Unknown subsys name 'cpuset' [ 82.090787][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.814892][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.734871][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.745269][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.753390][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.760385][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.762624][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.769488][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.777090][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.783370][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.790462][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.797999][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.804251][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.812042][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.826649][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.827522][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.837093][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.843535][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.850490][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.858123][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.864253][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.889484][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.475181][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 86.524503][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 86.602297][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 86.665785][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 86.803116][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.810762][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.819144][ T5820] bridge_slave_0: entered allmulticast mode [ 86.826581][ T5820] bridge_slave_0: entered promiscuous mode [ 86.835193][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.842362][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.849920][ T5821] bridge_slave_0: entered allmulticast mode [ 86.857133][ T5821] bridge_slave_0: entered promiscuous mode [ 86.886768][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.894364][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.901652][ T5820] bridge_slave_1: entered allmulticast mode [ 86.909745][ T5820] bridge_slave_1: entered promiscuous mode [ 86.917775][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.924924][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.932315][ T5821] bridge_slave_1: entered allmulticast mode [ 86.939739][ T5821] bridge_slave_1: entered promiscuous mode [ 86.995197][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.002755][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.010027][ T5818] bridge_slave_0: entered allmulticast mode [ 87.017435][ T5818] bridge_slave_0: entered promiscuous mode [ 87.059885][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.067198][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.074677][ T5818] bridge_slave_1: entered allmulticast mode [ 87.081964][ T5818] bridge_slave_1: entered promiscuous mode [ 87.102950][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.115874][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.138008][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.145395][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.153155][ T5819] bridge_slave_0: entered allmulticast mode [ 87.161671][ T5819] bridge_slave_0: entered promiscuous mode [ 87.179227][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.229502][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.260345][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.267982][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.275340][ T5819] bridge_slave_1: entered allmulticast mode [ 87.284351][ T5819] bridge_slave_1: entered promiscuous mode [ 87.293715][ T5820] team0: Port device team_slave_0 added [ 87.329303][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.343706][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.389314][ T5820] team0: Port device team_slave_1 added [ 87.471099][ T5821] team0: Port device team_slave_0 added [ 87.501716][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.531545][ T5821] team0: Port device team_slave_1 added [ 87.554363][ T5818] team0: Port device team_slave_0 added [ 87.562945][ T5818] team0: Port device team_slave_1 added [ 87.570975][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.581776][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.589017][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.615540][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.629656][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.636966][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.663672][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.714137][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.721290][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.748245][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.783802][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.791270][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.818131][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.830704][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.838160][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.864559][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.878967][ T5819] team0: Port device team_slave_0 added [ 87.892836][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.900090][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.927414][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.948519][ T5828] Bluetooth: hci1: command tx timeout [ 87.948522][ T5142] Bluetooth: hci2: command tx timeout [ 87.948781][ T5828] Bluetooth: hci3: command tx timeout [ 87.954719][ T5825] Bluetooth: hci0: command tx timeout [ 87.976240][ T5819] team0: Port device team_slave_1 added [ 88.043691][ T5820] hsr_slave_0: entered promiscuous mode [ 88.050330][ T5820] hsr_slave_1: entered promiscuous mode [ 88.074169][ T5821] hsr_slave_0: entered promiscuous mode [ 88.080897][ T5821] hsr_slave_1: entered promiscuous mode [ 88.087062][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 88.093157][ T5821] Cannot create hsr debugfs directory [ 88.099576][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.107068][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.133923][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.147075][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.154212][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.180425][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.240201][ T5818] hsr_slave_0: entered promiscuous mode [ 88.246636][ T5818] hsr_slave_1: entered promiscuous mode [ 88.253588][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 88.259474][ T5818] Cannot create hsr debugfs directory [ 88.403050][ T5819] hsr_slave_0: entered promiscuous mode [ 88.410309][ T5819] hsr_slave_1: entered promiscuous mode [ 88.416600][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 88.422824][ T5819] Cannot create hsr debugfs directory [ 88.799673][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.821378][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.832730][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.852481][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.920500][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.938422][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.958943][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.983058][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.070326][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.082602][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.100845][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.112290][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.204460][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.220583][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.242319][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.253893][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.304043][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.380382][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.413151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.420588][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.431893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.439294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.504617][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.556251][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.571990][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.596277][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.605438][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.636987][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.644489][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.679844][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.695503][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.735371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.742683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.791070][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.802158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.809524][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.866699][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.874277][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.895473][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.902836][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.029209][ T5825] Bluetooth: hci0: command tx timeout [ 90.029807][ T5828] Bluetooth: hci2: command tx timeout [ 90.034673][ T5825] Bluetooth: hci1: command tx timeout [ 90.040925][ T5835] Bluetooth: hci3: command tx timeout [ 90.174969][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.365473][ T5820] veth0_vlan: entered promiscuous mode [ 90.411601][ T5820] veth1_vlan: entered promiscuous mode [ 90.555954][ T5820] veth0_macvtap: entered promiscuous mode [ 90.579665][ T5820] veth1_macvtap: entered promiscuous mode [ 90.615000][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.625964][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.660059][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.682141][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.702944][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.722977][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.765816][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.792246][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.805459][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.909774][ T5821] veth0_vlan: entered promiscuous mode [ 90.948388][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.962246][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.989919][ T5821] veth1_vlan: entered promiscuous mode [ 91.001325][ T5818] veth0_vlan: entered promiscuous mode [ 91.052738][ T5818] veth1_vlan: entered promiscuous mode [ 91.062681][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.079214][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.080757][ T5819] veth0_vlan: entered promiscuous mode [ 91.133031][ T5819] veth1_vlan: entered promiscuous mode [ 91.173953][ T5821] veth0_macvtap: entered promiscuous mode [ 91.201718][ T5821] veth1_macvtap: entered promiscuous mode [ 91.212151][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.212613][ T5818] veth0_macvtap: entered promiscuous mode [ 91.259560][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.270490][ T5818] veth1_macvtap: entered promiscuous mode [ 91.293555][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.362374][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.376143][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.399498][ T5819] veth0_macvtap: entered promiscuous mode [ 91.423410][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.447155][ T5819] veth1_macvtap: entered promiscuous mode [ 91.456457][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.497395][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.521588][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.565669][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.652141][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.686434][ T1031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.707036][ T1031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.725341][ T1031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.737793][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.745851][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.780282][ T1031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.802398][ T1031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.853873][ T1031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.882774][ T1031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.952398][ T1031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.983411][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.996891][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.107883][ T5828] Bluetooth: hci2: command tx timeout [ 92.113396][ T5828] Bluetooth: hci3: command tx timeout [ 92.120726][ T5835] Bluetooth: hci1: command tx timeout [ 92.121466][ T5825] Bluetooth: hci0: command tx timeout [ 92.133114][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.169122][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.277423][ T24] cfg80211: failed to load regulatory.db [ 92.327002][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.337983][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.366832][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.392626][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.465509][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.495598][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.848842][ T5934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.878372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.648190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.188417][ T5825] Bluetooth: hci3: command tx timeout [ 94.189669][ T5828] Bluetooth: hci1: command tx timeout [ 94.194092][ T5825] Bluetooth: hci2: command tx timeout [ 94.200367][ T5142] Bluetooth: hci0: command tx timeout [ 94.622181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.687933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.798746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.910091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.995920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.246162][ T5142] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 95.254375][ T5142] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 95.507801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 95.677731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.805687][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.927026][ T5953] syz.3.8 (5953) used greatest stack depth: 19672 bytes left [ 96.121888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #150!!! [ 97.690127][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 97.731832][ T6008] vlan1: entered promiscuous mode [ 97.770301][ T6008] vlan1: entered allmulticast mode [ 97.775568][ T6008] veth0_vlan: entered allmulticast mode [ 99.583253][ T6034] mmap: syz.1.22 (6034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.834044][ T6029] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.559535][ T6070] Zero length message leads to an empty skb [ 101.749060][ T6067] bridge0: port 3(gretap0) entered blocking state [ 101.756588][ T6067] bridge0: port 3(gretap0) entered disabled state [ 101.788798][ T6067] gretap0: entered allmulticast mode [ 101.826107][ T6067] gretap0: entered promiscuous mode [ 101.840391][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.31'. [ 101.850663][ T6067] bridge0: port 3(gretap0) entered blocking state [ 101.857591][ T6067] bridge0: port 3(gretap0) entered forwarding state [ 101.912361][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.930953][ T6075] bridge_slave_1 (unregistering): left allmulticast mode [ 101.939833][ T6075] bridge_slave_1 (unregistering): left promiscuous mode [ 101.947903][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.682027][ T6096] __vm_enough_memory: pid: 6096, comm: syz.3.35, bytes: 8589938688 not enough memory for the allocation [ 104.400395][ T6114] netlink: 322 bytes leftover after parsing attributes in process `syz.3.39'. [ 105.479670][ T6122] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.486995][ T6122] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 106.746505][ T6139] Invalid ELF header magic: != ELF [ 109.029814][ T6163] netlink: 54 bytes leftover after parsing attributes in process `syz.0.50'. [ 109.662463][ T6168] zswap: compressor not available [ 110.401075][ T6184] mkiss: ax0: crc mode is auto. [ 113.370716][ T6239] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 113.806621][ T6243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.852312][ T6243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.890188][ T6243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.903899][ T6243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.910343][ T6243] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.920410][ T6243] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.000899][ T6243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.009085][ T6243] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.076872][ T6243] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.168522][ T6243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.174841][ T6243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.201481][ T6243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.401879][ T6250] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.867860][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.948694][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.137782][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.197735][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.189085][ T6286] syz.1.74 uses obsolete (PF_INET,SOCK_PACKET) [ 117.953535][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.027937][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.187768][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.277297][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.028210][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.108446][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.267842][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.357856][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.341976][ T6438] netlink: 354 bytes leftover after parsing attributes in process `syz.1.105'. [ 126.017182][ T6477] netlink: 'syz.0.114': attribute type 3 has an invalid length. [ 127.070294][ T6511] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.934497][ T6558] zswap: compressor not available [ 130.247759][ T6567] zswap: compressor cover enable write trace failed, mode=0 not available [ 130.605853][ T6567] zswap: compressor (errno 9) not available [ 133.235455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248682][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371480][ T6631] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 133.943424][ T6642] bridge0: port 3(vlan0) entered blocking state [ 133.957806][ T6642] bridge0: port 3(vlan0) entered disabled state [ 133.964537][ T6642] vlan0: entered allmulticast mode [ 133.975713][ T6642] veth0_vlan: entered allmulticast mode [ 133.997227][ T6642] vlan0: entered promiscuous mode [ 134.003715][ T6642] bridge0: port 3(vlan0) entered blocking state [ 134.010238][ T6642] bridge0: port 3(vlan0) entered forwarding state [ 137.672717][ T6689] binder: 6686:6689 ioctl c018620c 0 returned -1 [ 140.735431][ T6733] FAULT_INJECTION: forcing a failure. [ 140.735431][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 140.782119][ T6711] Setting dangerous option i915.mitigations - tainting kernel [ 140.854615][ T6733] CPU: 0 UID: 0 PID: 6733 Comm: syz.1.162 Tainted: G U syzkaller #0 PREEMPT(full) [ 140.854645][ T6733] Tainted: [U]=USER [ 140.854651][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.854661][ T6733] Call Trace: [ 140.854668][ T6733] [ 140.854674][ T6733] dump_stack_lvl+0x100/0x190 [ 140.854705][ T6733] should_fail_ex.cold+0x5/0xa [ 140.854726][ T6733] should_failslab+0xc2/0x120 [ 140.854753][ T6733] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 140.854775][ T6733] ? __proc_create+0x2cb/0x8c0 [ 140.854803][ T6733] __proc_create+0x2cb/0x8c0 [ 140.854828][ T6733] ? __pfx___proc_create+0x10/0x10 [ 140.854854][ T6733] ? _raw_write_unlock+0x28/0x50 [ 140.854889][ T6733] ? proc_register+0x559/0x8a0 [ 140.854916][ T6733] proc_create_reg+0x75/0x170 [ 140.854943][ T6733] proc_create_net_data+0x8e/0x1c0 [ 140.854968][ T6733] ? __pfx_proc_create_net_data+0x10/0x10 [ 140.854992][ T6733] ? net_generic+0xea/0x2a0 [ 140.855021][ T6733] ? __pfx_vlan_init_net+0x10/0x10 [ 140.855039][ T6733] vlan_proc_init+0xe6/0x160 [ 140.855065][ T6733] ops_init+0x1e2/0x5f0 [ 140.855085][ T6733] setup_net+0x118/0x3a0 [ 140.855102][ T6733] ? __pfx_setup_net+0x10/0x10 [ 140.855118][ T6733] ? lockdep_init_map_type+0x5c/0x250 [ 140.855141][ T6733] ? mutex_init_lockep+0x110/0x150 [ 140.855166][ T6733] copy_net_ns+0x46f/0x7c0 [ 140.855187][ T6733] create_new_namespaces+0x3ea/0xac0 [ 140.855210][ T6733] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 140.855230][ T6733] ksys_unshare+0x455/0xab0 [ 140.855252][ T6733] ? __pfx_ksys_unshare+0x10/0x10 [ 140.855281][ T6733] __x64_sys_unshare+0x31/0x40 [ 140.855302][ T6733] do_syscall_64+0x106/0xf80 [ 140.855317][ T6733] ? clear_bhb_loop+0x40/0x90 [ 140.855339][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.855356][ T6733] RIP: 0033:0x7f1e6a59c139 [ 140.855372][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.855388][ T6733] RSP: 002b:00007f1e6b37f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 140.855406][ T6733] RAX: ffffffffffffffda RBX: 00007f1e6a816090 RCX: 00007f1e6a59c139 [ 140.855416][ T6733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 140.855426][ T6733] RBP: 00007f1e6a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 140.855436][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.855446][ T6733] R13: 00007f1e6a816128 R14: 00007f1e6a816090 R15: 00007fff760d6e48 [ 140.855468][ T6733] [ 140.855476][ T6733] 8021q: can't create entry in proc filesystem! [ 142.378648][ T6752] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.991494][ T6756] FAULT_INJECTION: forcing a failure. [ 142.991494][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 143.026925][ T6756] CPU: 1 UID: 0 PID: 6756 Comm: syz.1.167 Tainted: G U syzkaller #0 PREEMPT(full) [ 143.026975][ T6756] Tainted: [U]=USER [ 143.026986][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.027004][ T6756] Call Trace: [ 143.027014][ T6756] [ 143.027026][ T6756] dump_stack_lvl+0x100/0x190 [ 143.027078][ T6756] should_fail_ex.cold+0x5/0xa [ 143.027114][ T6756] should_failslab+0xc2/0x120 [ 143.027162][ T6756] __kmalloc_cache_noprof+0x7a/0x6f0 [ 143.027198][ T6756] ? kvm_dev_ioctl+0xa8d/0x1a80 [ 143.027240][ T6756] kvm_dev_ioctl+0xa8d/0x1a80 [ 143.027282][ T6756] ? find_held_lock+0x2b/0x80 [ 143.027328][ T6756] ? __fget_files+0x215/0x3d0 [ 143.027369][ T6756] ? hook_file_ioctl_common+0x146/0x410 [ 143.027412][ T6756] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 143.027450][ T6756] ? __fget_files+0x21f/0x3d0 [ 143.027490][ T6756] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 143.027527][ T6756] __x64_sys_ioctl+0x18e/0x210 [ 143.027561][ T6756] do_syscall_64+0x106/0xf80 [ 143.027588][ T6756] ? clear_bhb_loop+0x40/0x90 [ 143.027621][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.027648][ T6756] RIP: 0033:0x7f1e6a59c139 [ 143.027671][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.027698][ T6756] RSP: 002b:00007f1e6b3a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.027727][ T6756] RAX: ffffffffffffffda RBX: 00007f1e6a815fa0 RCX: 00007f1e6a59c139 [ 143.027748][ T6756] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 143.027766][ T6756] RBP: 00007f1e6a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 143.027783][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.027801][ T6756] R13: 00007f1e6a816038 R14: 00007f1e6a815fa0 R15: 00007fff760d6e48 [ 143.027841][ T6756] [ 143.749116][ T6759] netlink: 'syz.3.168': attribute type 64 has an invalid length. [ 143.756923][ T6759] netlink: 74 bytes leftover after parsing attributes in process `syz.3.168'. [ 144.336812][ T6784] futex_wake_op: syz.2.175 tries to shift op by -2048; fix this program [ 144.389200][ T6787] misc userio: No port type given on /dev/userio [ 144.435792][ T6784] futex_wake_op: syz.2.175 tries to shift op by -2048; fix this program [ 144.500225][ T6778] netlink: 146 bytes leftover after parsing attributes in process `syz.3.174'. [ 148.134441][ T6875] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 148.211016][ T6875] FAULT_INJECTION: forcing a failure. [ 148.211016][ T6875] name failslab, interval 1, probability 0, space 0, times 0 [ 148.241719][ T6875] CPU: 1 UID: 0 PID: 6875 Comm: syz.3.194 Tainted: G U syzkaller #0 PREEMPT(full) [ 148.241769][ T6875] Tainted: [U]=USER [ 148.241779][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.241796][ T6875] Call Trace: [ 148.241805][ T6875] [ 148.241815][ T6875] dump_stack_lvl+0x100/0x190 [ 148.241864][ T6875] should_fail_ex.cold+0x5/0xa [ 148.241900][ T6875] should_failslab+0xc2/0x120 [ 148.241945][ T6875] __kmalloc_cache_noprof+0x7a/0x6f0 [ 148.241977][ T6875] ? append_filter_err+0xb8/0x620 [ 148.242015][ T6875] ? process_preds+0x937/0x1e10 [ 148.242070][ T6875] append_filter_err+0xb8/0x620 [ 148.242114][ T6875] apply_subsystem_event_filter+0x73d/0x17d0 [ 148.242171][ T6875] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 148.242229][ T6875] ? _copy_from_user+0x59/0xd0 [ 148.242271][ T6875] ? __pfx_subsystem_filter_write+0x10/0x10 [ 148.242308][ T6875] subsystem_filter_write+0x95/0x120 [ 148.242350][ T6875] vfs_writev+0x5ea/0xe10 [ 148.242386][ T6875] ? rcu_is_watching+0x12/0xc0 [ 148.242438][ T6875] ? __pfx_vfs_writev+0x10/0x10 [ 148.242472][ T6875] ? fdget_pos+0x2aa/0x380 [ 148.242546][ T6875] ? __fget_files+0x21f/0x3d0 [ 148.242597][ T6875] ? do_writev+0x13e/0x340 [ 148.242634][ T6875] do_writev+0x13e/0x340 [ 148.242673][ T6875] ? __pfx_do_writev+0x10/0x10 [ 148.242718][ T6875] do_syscall_64+0x106/0xf80 [ 148.242743][ T6875] ? clear_bhb_loop+0x40/0x90 [ 148.242779][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.242810][ T6875] RIP: 0033:0x7fa83b59c139 [ 148.242833][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.242860][ T6875] RSP: 002b:00007fa83c40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 148.242886][ T6875] RAX: ffffffffffffffda RBX: 00007fa83b816090 RCX: 00007fa83b59c139 [ 148.242905][ T6875] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000007 [ 148.242923][ T6875] RBP: 00007fa83b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 148.242939][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.242954][ T6875] R13: 00007fa83b816128 R14: 00007fa83b816090 R15: 00007ffeba94b218 [ 148.242993][ T6875] [ 149.334383][ T6901] batman_adv: Routing algorithm '7' is not supported [ 149.358864][ T6901] FAULT_INJECTION: forcing a failure. [ 149.358864][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 149.390983][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.0.199 Tainted: G U syzkaller #0 PREEMPT(full) [ 149.391035][ T6901] Tainted: [U]=USER [ 149.391044][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.391061][ T6901] Call Trace: [ 149.391072][ T6901] [ 149.391084][ T6901] dump_stack_lvl+0x100/0x190 [ 149.391136][ T6901] should_fail_ex.cold+0x5/0xa [ 149.391172][ T6901] should_failslab+0xc2/0x120 [ 149.391223][ T6901] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 149.391266][ T6901] ? __d_alloc+0x34/0xa80 [ 149.391323][ T6901] __d_alloc+0x34/0xa80 [ 149.391376][ T6901] d_alloc+0x4a/0x1e0 [ 149.391426][ T6901] lookup_one_qstr_excl+0x175/0x250 [ 149.391464][ T6901] start_dirop+0x59/0xb0 [ 149.391507][ T6901] simple_start_creating+0xf9/0x110 [ 149.391550][ T6901] ? __pfx_simple_start_creating+0x10/0x10 [ 149.391594][ T6901] ? mntput+0x70/0xa0 [ 149.391633][ T6901] ? simple_pin_fs+0xa3/0x190 [ 149.391673][ T6901] debugfs_start_creating.part.0+0x82/0x170 [ 149.391715][ T6901] __debugfs_create_file+0xb3/0x4f0 [ 149.391760][ T6901] debugfs_create_file_full+0x41/0x60 [ 149.391813][ T6901] drm_debugfs_clients_add+0xd9/0x210 [ 149.391859][ T6901] drm_file_alloc+0x5c6/0xb40 [ 149.391910][ T6901] drm_open_helper+0x1fc/0x540 [ 149.391967][ T6901] drm_open+0x1a0/0x3e0 [ 149.392014][ T6901] ? __pfx_drm_open+0x10/0x10 [ 149.392056][ T6901] drm_stub_open+0x20f/0x380 [ 149.392104][ T6901] ? __pfx_drm_stub_open+0x10/0x10 [ 149.392148][ T6901] chrdev_open+0x234/0x6a0 [ 149.392193][ T6901] ? __pfx_apparmor_file_open+0x10/0x10 [ 149.392231][ T6901] ? __pfx_chrdev_open+0x10/0x10 [ 149.392279][ T6901] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 149.392335][ T6901] do_dentry_open+0x6d8/0x1660 [ 149.392379][ T6901] ? __pfx_chrdev_open+0x10/0x10 [ 149.392446][ T6901] vfs_open+0x82/0x3f0 [ 149.392485][ T6901] path_openat+0x208c/0x31a0 [ 149.392546][ T6901] ? __pfx_path_openat+0x10/0x10 [ 149.392608][ T6901] do_file_open+0x20e/0x430 [ 149.392659][ T6901] ? __pfx_do_file_open+0x10/0x10 [ 149.392732][ T6901] ? alloc_fd+0x476/0x790 [ 149.392781][ T6901] ? do_getname+0x191/0x390 [ 149.392826][ T6901] do_sys_openat2+0x10d/0x1e0 [ 149.392861][ T6901] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.392912][ T6901] __x64_sys_openat+0x12d/0x210 [ 149.392948][ T6901] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.392999][ T6901] do_syscall_64+0x106/0xf80 [ 149.393028][ T6901] ? clear_bhb_loop+0x40/0x90 [ 149.393065][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.393097][ T6901] RIP: 0033:0x7f26d759c139 [ 149.393125][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.393154][ T6901] RSP: 002b:00007f26d8398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.393184][ T6901] RAX: ffffffffffffffda RBX: 00007f26d7815fa0 RCX: 00007f26d759c139 [ 149.393204][ T6901] RDX: 0000000000040001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 149.393223][ T6901] RBP: 00007f26d76327e0 R08: 0000000000000000 R09: 0000000000000000 [ 149.393241][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.393259][ T6901] R13: 00007f26d7816038 R14: 00007f26d7815fa0 R15: 00007ffea623fab8 [ 149.393302][ T6901] [ 149.915561][ T6906] FAULT_INJECTION: forcing a failure. [ 149.915561][ T6906] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.929430][ T6906] CPU: 1 UID: 0 PID: 6906 Comm: syz.1.201 Tainted: G U syzkaller #0 PREEMPT(full) [ 149.929471][ T6906] Tainted: [U]=USER [ 149.929480][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.929496][ T6906] Call Trace: [ 149.929504][ T6906] [ 149.929514][ T6906] dump_stack_lvl+0x100/0x190 [ 149.929557][ T6906] should_fail_ex.cold+0x5/0xa [ 149.929590][ T6906] _copy_to_user+0x32/0xd0 [ 149.929632][ T6906] simple_read_from_buffer+0xcb/0x170 [ 149.929689][ T6906] proc_fail_nth_read+0x1af/0x230 [ 149.929735][ T6906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.929785][ T6906] ? rw_verify_area+0xce/0x6d0 [ 149.929817][ T6906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.929862][ T6906] vfs_read+0x1e4/0xb30 [ 149.929904][ T6906] ? __pfx_vfs_read+0x10/0x10 [ 149.929939][ T6906] ? __fget_files+0x215/0x3d0 [ 149.929984][ T6906] ? __fget_files+0x21f/0x3d0 [ 149.930027][ T6906] ksys_read+0x12a/0x250 [ 149.930071][ T6906] ? __pfx_ksys_read+0x10/0x10 [ 149.930118][ T6906] do_syscall_64+0x106/0xf80 [ 149.930143][ T6906] ? clear_bhb_loop+0x40/0x90 [ 149.930176][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.930204][ T6906] RIP: 0033:0x7f1e6a55ca0e [ 149.930229][ T6906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.930255][ T6906] RSP: 002b:00007f1e6b39ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.930282][ T6906] RAX: ffffffffffffffda RBX: 00007f1e6b3a06c0 RCX: 00007f1e6a55ca0e [ 149.930300][ T6906] RDX: 000000000000000f RSI: 00007f1e6b3a00a0 RDI: 0000000000000003 [ 149.930316][ T6906] RBP: 00007f1e6b3a0090 R08: 0000000000000000 R09: 0000000000000000 [ 149.930332][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.930348][ T6906] R13: 00007f1e6a816038 R14: 00007f1e6a815fa0 R15: 00007fff760d6e48 [ 149.930388][ T6906] [ 150.626150][ T6914] zswap: compressor 1Ў not available [ 150.738577][ T6928] capability: warning: `syz.3.205' uses 32-bit capabilities (legacy support in use) [ 150.940169][ T6930] ptp ptp0: new virtual clock ptp1 [ 150.989868][ T6930] ptp ptp0: new virtual clock ptp2 [ 151.013847][ T6930] ptp ptp0: new virtual clock ptp3 [ 151.031429][ T6930] ptp ptp0: guarantee physical clock free running [ 151.060591][ T5142] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 154.550580][ T6992] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 155.061078][ T7000] FAULT_INJECTION: forcing a failure. [ 155.061078][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 155.074228][ T7000] CPU: 0 UID: 0 PID: 7000 Comm: syz.1.221 Tainted: G U syzkaller #0 PREEMPT(full) [ 155.074277][ T7000] Tainted: [U]=USER [ 155.074287][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.074305][ T7000] Call Trace: [ 155.074315][ T7000] [ 155.074326][ T7000] dump_stack_lvl+0x100/0x190 [ 155.074370][ T7000] should_fail_ex.cold+0x5/0xa [ 155.074403][ T7000] should_failslab+0xc2/0x120 [ 155.074448][ T7000] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 155.074485][ T7000] ? sock_alloc_inode+0x25/0x1c0 [ 155.074520][ T7000] ? __pfx_sock_alloc_inode+0x10/0x10 [ 155.074554][ T7000] sock_alloc_inode+0x25/0x1c0 [ 155.074584][ T7000] alloc_inode+0x68/0x250 [ 155.074616][ T7000] sock_alloc+0x44/0x280 [ 155.074644][ T7000] ? security_socket_create+0x7f/0x250 [ 155.074680][ T7000] __sock_create+0xc2/0x860 [ 155.074726][ T7000] __sys_socket+0x14d/0x260 [ 155.074761][ T7000] ? __pfx___sys_socket+0x10/0x10 [ 155.074806][ T7000] __x64_sys_socket+0x72/0xb0 [ 155.074840][ T7000] ? lockdep_hardirqs_on+0x78/0x100 [ 155.074887][ T7000] do_syscall_64+0x106/0xf80 [ 155.074914][ T7000] ? clear_bhb_loop+0x40/0x90 [ 155.074949][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.074980][ T7000] RIP: 0033:0x7f1e6a59d9c7 [ 155.075016][ T7000] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.075046][ T7000] RSP: 002b:00007f1e6b39ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 155.075076][ T7000] RAX: ffffffffffffffda RBX: 00007f1e6a815fa0 RCX: 00007f1e6a59d9c7 [ 155.075096][ T7000] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 155.075114][ T7000] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 155.075131][ T7000] R10: 0000200000001940 R11: 0000000000000286 R12: 0000000000000000 [ 155.075150][ T7000] R13: 00007f1e6a816038 R14: 00007f1e6a815fa0 R15: 00007fff760d6e48 [ 155.075188][ T7000] [ 155.075204][ T7000] socket: no more sockets [ 155.545587][ T7009] bridge0: port 3(gretap0) entered blocking state [ 155.558052][ T7009] bridge0: port 3(gretap0) entered disabled state [ 155.747690][ T7009] gretap0: entered allmulticast mode [ 155.807944][ T7009] gretap0: entered promiscuous mode [ 155.853566][ T7009] bridge0: port 3(gretap0) entered blocking state [ 155.860140][ T7009] bridge0: port 3(gretap0) entered forwarding state [ 156.604197][ T30] audit: type=1800 audit(1771378119.942:2): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.228" name=05 dev="tmpfs" ino=285 res=0 errno=0 [ 156.998177][ T7045] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.705312][ T30] audit: type=1800 audit(1771378121.042:3): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.231" name="lu_gp_id" dev="configfs" ino=12670 res=0 errno=0 [ 158.532828][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 159.244937][ T7053] kexec: Could not allocate control_code_buffer [ 160.919150][ T7119] ima: policy update failed [ 160.932548][ T30] audit: type=1802 audit(1771378124.262:4): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.248" res=0 errno=0 [ 161.269451][ T7122] random: crng reseeded on system resumption [ 161.361044][ T7122] hub 1-0:1.0: USB hub found [ 161.378494][ T7122] hub 1-0:1.0: 1 port detected [ 163.009543][ T7150] Invalid ELF header magic: != ELF [ 163.982408][ T7166] netlink: 36 bytes leftover after parsing attributes in process `syz.3.259'. [ 164.014386][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.259'. [ 170.124979][ T7258] Invalid ELF header magic: != ELF [ 173.603092][ T7312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 177.268691][ T30] audit: type=1804 audit(4294967309.980:5): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.300" name="/newroot/76/file0" dev="tmpfs" ino=417 res=1 errno=0 [ 180.681479][ T7410] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.717949][ T7410] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 181.051703][ T5153] Trying to write to read-only block-device sda1 [ 181.204994][ T7422] random: crng reseeded on system resumption [ 181.609276][ T7418] hub 1-0:1.0: USB hub found [ 181.692280][ T7418] hub 1-0:1.0: 1 port detected [ 186.971714][ T7457] rtc_cmos 00:00: Alarms can be up to one day in the future [ 187.246336][ T7483] ptp: physical clock is free running [ 188.112865][ T7504] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 188.128248][ T7504] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 190.300714][ T7558] Invalid ELF header magic: != ELF [ 194.163021][ T7643] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.363' sets config #-1 [ 194.671278][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.678574][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.125509][ T7666] random: crng reseeded on system resumption [ 196.463359][ T7690] netlink: 138 bytes leftover after parsing attributes in process `syz.2.372'. [ 199.798801][ T7728] process 'syz.3.379' launched './file0' with NULL argv: empty string added [ 200.068092][ T7732] netlink: 'syz.3.379': attribute type 16 has an invalid length. [ 200.100240][ T7732] netlink: 50 bytes leftover after parsing attributes in process `syz.3.379'. [ 201.344116][ T7755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.377175][ T7755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.423059][ T7755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.473575][ T7755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.363394][ T7783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.435769][ T7783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.476426][ T7783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.483397][ T7783] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.529814][ T7796] zswap: compressor not available [ 204.427737][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.507848][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.513995][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.514107][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.118884][ T7841] __vm_enough_memory: pid: 7841, comm: syz.0.414, bytes: 8589938688 not enough memory for the allocation [ 213.256949][ T7951] __vm_enough_memory: pid: 7951, comm: syz.1.428, bytes: 8589938688 not enough memory for the allocation [ 216.435398][ T8006] netlink: 'syz.0.438': attribute type 16 has an invalid length. [ 216.454388][ T8006] netlink: 50 bytes leftover after parsing attributes in process `syz.0.438'. [ 218.708758][ T8052] hub 1-0:1.0: USB hub found [ 218.717032][ T8052] hub 1-0:1.0: 1 port detected [ 222.224419][ T8112] __vm_enough_memory: pid: 8112, comm: syz.2.461, bytes: 8589938688 not enough memory for the allocation [ 223.869506][ T8141] vivid-001: ================= START STATUS ================= [ 223.877665][ T8141] vivid-001: ================== END STATUS ================== [ 223.976503][ T8139] binder: 8136:8139 ioctl c018620c 0 returned -1 [ 224.018284][ T8146] netlink: 330 bytes leftover after parsing attributes in process `syz.2.470'. [ 229.179377][ T8223] zswap: compressor not available [ 229.806132][ T8237] zswap: compressor not available [ 231.087197][ T8272] zswap: compressor not available [ 231.293382][ T8266] netlink: 'syz.1.494': attribute type 64 has an invalid length. [ 231.301355][ T8266] netlink: 74 bytes leftover after parsing attributes in process `syz.1.494'. [ 231.997793][ T8285] netlink: 146 bytes leftover after parsing attributes in process `syz.0.499'. [ 232.916513][ T8315] zswap: compressor not available [ 233.047291][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.055014][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.167381][ T8334] FAULT_INJECTION: forcing a failure. [ 233.167381][ T8334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.223453][ T8334] CPU: 0 UID: 0 PID: 8334 Comm: syz.1.510 Tainted: G U syzkaller #0 PREEMPT(full) [ 233.223498][ T8334] Tainted: [U]=USER [ 233.223507][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.223527][ T8334] Call Trace: [ 233.223535][ T8334] [ 233.223543][ T8334] dump_stack_lvl+0x100/0x190 [ 233.223584][ T8334] should_fail_ex.cold+0x5/0xa [ 233.223619][ T8334] _copy_from_user+0x2e/0xd0 [ 233.223652][ T8334] __sys_bpf+0x243/0x4b90 [ 233.223684][ T8334] ? __pfx___sys_bpf+0x10/0x10 [ 233.223704][ T8334] ? proc_fail_nth_write+0x9f/0x220 [ 233.223731][ T8334] ? find_held_lock+0x2b/0x80 [ 233.223779][ T8334] ? find_held_lock+0x2b/0x80 [ 233.223825][ T8334] ? ksys_write+0x190/0x250 [ 233.223869][ T8334] ? __mutex_unlock_slowpath+0x15c/0x790 [ 233.223898][ T8334] ? __fget_files+0x215/0x3d0 [ 233.223954][ T8334] ? fput+0x79/0x100 [ 233.223979][ T8334] ? ksys_write+0x1ac/0x250 [ 233.224015][ T8334] ? __pfx_ksys_write+0x10/0x10 [ 233.224059][ T8334] __x64_sys_bpf+0x7b/0xc0 [ 233.224087][ T8334] ? lockdep_hardirqs_on+0x78/0x100 [ 233.224132][ T8334] do_syscall_64+0x106/0xf80 [ 233.224159][ T8334] ? clear_bhb_loop+0x40/0x90 [ 233.224195][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.224224][ T8334] RIP: 0033:0x7f1e6a59c139 [ 233.224250][ T8334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.224276][ T8334] RSP: 002b:00007f1e6b3a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.224305][ T8334] RAX: ffffffffffffffda RBX: 00007f1e6a815fa0 RCX: 00007f1e6a59c139 [ 233.224324][ T8334] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 233.224338][ T8334] RBP: 00007f1e6b3a0090 R08: 0000000000000000 R09: 0000000000000000 [ 233.224353][ T8334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.224369][ T8334] R13: 00007f1e6a816038 R14: 00007f1e6a815fa0 R15: 00007fff760d6e48 [ 233.224408][ T8334] [ 234.115798][ T8338] netlink: 146 bytes leftover after parsing attributes in process `syz.1.511'. [ 235.552106][ T8380] netlink: 342 bytes leftover after parsing attributes in process `syz.0.520'. [ 237.995731][ T8425] netlink: 342 bytes leftover after parsing attributes in process `syz.0.530'. [ 242.620881][ T8521] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.659238][ T8521] CIFS mount error: No usable UNC path provided in device string! [ 242.659238][ T8521] [ 242.672118][ T8521] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 242.832828][ T8517] zswap: compressor not available [ 243.063060][ T8527] __vm_enough_memory: pid: 8527, comm: syz.3.554, bytes: 8589938688 not enough memory for the allocation [ 245.695996][ T8574] __vm_enough_memory: pid: 8574, comm: syz.2.566, bytes: 8589938688 not enough memory for the allocation [ 246.082423][ T8591] netlink: 342 bytes leftover after parsing attributes in process `syz.0.569'. [ 248.396306][ T8641] netlink: 342 bytes leftover after parsing attributes in process `syz.3.582'. [ 249.710675][ T8648] NFSD: Failed to start, no listeners configured. [ 252.194353][ T8689] netlink: 138 bytes leftover after parsing attributes in process `syz.3.594'. [ 252.455173][ T8693] bridge0: port 2(gretap0) entered blocking state [ 252.502087][ T8693] bridge0: port 2(gretap0) entered disabled state [ 252.534183][ T8693] gretap0: entered allmulticast mode [ 252.582798][ T8693] gretap0: entered promiscuous mode [ 252.698541][ T8693] bridge0: port 2(gretap0) entered blocking state [ 252.705221][ T8693] bridge0: port 2(gretap0) entered forwarding state [ 254.106307][ T8718] __vm_enough_memory: pid: 8718, comm: syz.3.601, bytes: 8589938688 not enough memory for the allocation [ 254.163445][ T8726] netlink: 138 bytes leftover after parsing attributes in process `syz.0.603'. [ 254.302571][ T8730] netlink: 334 bytes leftover after parsing attributes in process `syz.3.605'. [ 254.549944][ T8720] smpboot: CPU 1 is now offline [ 254.672862][ T8728] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 254.684319][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.690730][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.508631][ T8761] __vm_enough_memory: pid: 8761, comm: syz.0.613, bytes: 8589938688 not enough memory for the allocation [ 255.968914][ T8767] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.364427][ T8794] zswap: compressor not available [ 257.463452][ T8779] delete_channel: no stack [ 257.727816][ T8803] __vm_enough_memory: pid: 8803, comm: syz.0.623, bytes: 8589938688 not enough memory for the allocation [ 258.831589][ T8817] binder: 8816:8817 ioctl c018620c 0 returned -1 [ 259.435280][ T8834] zswap: compressor not available [ 259.620883][ T8839] vivid-007: ================= START STATUS ================= [ 259.660846][ T8839] vivid-007: Generate PTS: true [ 259.732056][ T8839] vivid-007: Generate SCR: true [ 259.737086][ T8839] tpg source WxH: 320x240 (Y'CbCr) [ 259.801199][ T8839] tpg field: 1 [ 259.811092][ T8839] tpg crop: (0,0)/320x240 [ 259.824050][ T8839] tpg compose: (0,0)/320x240 [ 259.839033][ T8839] tpg colorspace: 8 [ 259.844304][ T8839] tpg transfer function: 0/0 [ 259.902010][ T8839] tpg Y'CbCr encoding: 0/0 [ 259.906516][ T8839] tpg quantization: 0/0 [ 259.910715][ T8839] tpg RGB range: 0/2 [ 259.961223][ T8839] vivid-007: ================== END STATUS ================== [ 260.589350][ T8863] vivid-007: ================= START STATUS ================= [ 260.596761][ T8858] __vm_enough_memory: pid: 8858, comm: syz.1.636, bytes: 8589938688 not enough memory for the allocation [ 260.647620][ T8863] vivid-007: Generate PTS: true [ 260.666092][ T8863] vivid-007: Generate SCR: true [ 260.682241][ T8863] tpg source WxH: 320x240 (Y'CbCr) [ 260.690210][ T8863] tpg field: 1 [ 260.695968][ T8863] tpg crop: (0,0)/320x240 [ 260.702734][ T8863] tpg compose: (0,0)/320x240 [ 260.727584][ T8863] tpg colorspace: 8 [ 260.735967][ T8863] tpg transfer function: 0/0 [ 260.786433][ T8863] tpg Y'CbCr encoding: 0/0 [ 260.793184][ T8863] tpg quantization: 0/0 [ 260.819487][ T8863] tpg RGB range: 0/2 [ 260.835310][ T8863] vivid-007: ================== END STATUS ================== [ 261.200017][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 261.209853][ T8872] smpboot: CPU 1 is now offline [ 261.271059][ T8875] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 261.860064][ T8880] netlink: 138 bytes leftover after parsing attributes in process `syz.2.641'. [ 262.656410][ T8905] netlink: 342 bytes leftover after parsing attributes in process `syz.2.646'. [ 263.050298][ T8911] smpboot: CPU 1 is now offline [ 263.097236][ T8913] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 264.481053][ T8959] netlink: 342 bytes leftover after parsing attributes in process `syz.0.662'. [ 266.035245][ T8977] __vm_enough_memory: pid: 8977, comm: syz.2.669, bytes: 8589938688 not enough memory for the allocation [ 266.318719][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 267.245929][ T8995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.292221][ T8995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.298688][ T8995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.312776][ T8995] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.413614][ T8995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.776897][ T9003] zswap: compressor not available [ 269.312989][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.318281][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.319203][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.384479][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.685'. [ 269.419035][ T9036] hsr_slave_0: left promiscuous mode [ 269.439109][ T9036] hsr_slave_1: left promiscuous mode [ 269.472000][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.974786][ T9041] zswap: compressor not available [ 270.893526][ T9055] netlink: 342 bytes leftover after parsing attributes in process `syz.2.689'. [ 271.101982][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 271.392090][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.752364][ T9097] netlink: 342 bytes leftover after parsing attributes in process `syz.0.699'. [ 274.051577][ T9101] __vm_enough_memory: pid: 9101, comm: syz.3.696, bytes: 8589938688 not enough memory for the allocation [ 275.739823][ T9137] netlink: 'syz.2.708': attribute type 7 has an invalid length. [ 275.780547][ T9137] netlink: 17 bytes leftover after parsing attributes in process `syz.2.708'. [ 275.904800][ T9142] netlink: 342 bytes leftover after parsing attributes in process `syz.1.709'. [ 277.250240][ T30] audit: type=1800 audit(4294968432.982:6): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.714" name="dbroot" dev="configfs" ino=23754 res=0 errno=0 [ 278.020886][ T9170] zswap: compressor not available [ 278.337622][ T9181] netlink: 138 bytes leftover after parsing attributes in process `syz.1.719'. [ 278.963788][ T9197] __vm_enough_memory: pid: 9197, comm: syz.2.722, bytes: 8589938688 not enough memory for the allocation [ 279.922956][ T9212] netlink: 'syz.2.725': attribute type 72 has an invalid length. [ 280.242683][ T9219] FAULT_INJECTION: forcing a failure. [ 280.242683][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 280.257142][ T9219] CPU: 1 UID: 0 PID: 9219 Comm: syz.3.728 Tainted: G U syzkaller #0 PREEMPT(full) [ 280.257188][ T9219] Tainted: [U]=USER [ 280.257198][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.257214][ T9219] Call Trace: [ 280.257224][ T9219] [ 280.257234][ T9219] dump_stack_lvl+0x100/0x190 [ 280.257282][ T9219] should_fail_ex.cold+0x5/0xa [ 280.257327][ T9219] should_failslab+0xc2/0x120 [ 280.257371][ T9219] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 280.257410][ T9219] ? __proc_create+0x2cb/0x8c0 [ 280.257457][ T9219] __proc_create+0x2cb/0x8c0 [ 280.257497][ T9219] ? __pfx___proc_create+0x10/0x10 [ 280.257542][ T9219] ? _raw_write_unlock+0x28/0x50 [ 280.257584][ T9219] ? proc_register+0x559/0x8a0 [ 280.257629][ T9219] proc_create_reg+0x75/0x170 [ 280.257673][ T9219] proc_create_data+0x86/0x110 [ 280.257715][ T9219] ? __pfx_proc_create_data+0x10/0x10 [ 280.257757][ T9219] ? cache_register_net+0x137/0x5e0 [ 280.257793][ T9219] ? cache_register_net+0x137/0x5e0 [ 280.257837][ T9219] cache_register_net+0x25a/0x5e0 [ 280.257876][ T9219] gss_svc_init_net+0x14e/0x640 [ 280.257922][ T9219] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 280.257958][ T9219] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 280.258009][ T9219] ops_init+0x1e2/0x5f0 [ 280.258052][ T9219] setup_net+0x118/0x3a0 [ 280.258085][ T9219] ? __pfx_setup_net+0x10/0x10 [ 280.258113][ T9219] ? lockdep_init_map_type+0x5c/0x250 [ 280.258155][ T9219] ? mutex_init_lockep+0x110/0x150 [ 280.258201][ T9219] copy_net_ns+0x46f/0x7c0 [ 280.258242][ T9219] create_new_namespaces+0x3ea/0xac0 [ 280.258284][ T9219] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 280.258330][ T9219] ksys_unshare+0x455/0xab0 [ 280.258372][ T9219] ? __pfx_ksys_unshare+0x10/0x10 [ 280.258425][ T9219] __x64_sys_unshare+0x31/0x40 [ 280.258464][ T9219] do_syscall_64+0x106/0xf80 [ 280.258492][ T9219] ? clear_bhb_loop+0x40/0x90 [ 280.258532][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.258564][ T9219] RIP: 0033:0x7fa83b59c139 [ 280.258592][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.258622][ T9219] RSP: 002b:00007fa83c42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 280.258653][ T9219] RAX: ffffffffffffffda RBX: 00007fa83b815fa0 RCX: 00007fa83b59c139 [ 280.258674][ T9219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 280.258693][ T9219] RBP: 00007fa83b6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 280.258711][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.258729][ T9219] R13: 00007fa83b816038 R14: 00007fa83b815fa0 R15: 00007ffeba94b218 [ 280.258771][ T9219] [ 281.239899][ T9227] netlink: 138 bytes leftover after parsing attributes in process `syz.2.730'. [ 283.252665][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 283.322770][ T9257] team0 (unregistering): Port device team_slave_0 removed [ 283.357400][ T9255] __vm_enough_memory: pid: 9255, comm: syz.1.737, bytes: 8589938688 not enough memory for the allocation [ 283.422653][ T9257] team0 (unregistering): Port device team_slave_1 removed [ 285.096035][ T9300] netlink: 138 bytes leftover after parsing attributes in process `syz.0.747'. [ 286.133669][ T9321] netlink: 98 bytes leftover after parsing attributes in process `syz.2.755'. [ 286.734605][ T9312] kexec: Could not allocate control_code_buffer [ 291.193209][ T9377] usb usb4: usbfs: process 9377 (syz.2.765) did not claim interface 0 before use [ 292.467800][ T9387] netlink: 'syz.2.766': attribute type 7 has an invalid length. [ 292.499424][ T9387] netlink: 17 bytes leftover after parsing attributes in process `syz.2.766'. [ 292.666955][ T9395] netlink: 98 bytes leftover after parsing attributes in process `syz.0.769'. [ 294.107771][ T9430] : entered promiscuous mode [ 294.800620][ T9436] netlink: 'syz.1.779': attribute type 7 has an invalid length. [ 294.822566][ T9436] netlink: 17 bytes leftover after parsing attributes in process `syz.1.779'. [ 297.661509][ T9466] FAULT_INJECTION: forcing a failure. [ 297.661509][ T9466] name fail_futex, interval 1, probability 0, space 0, times 1 [ 297.706097][ T9466] CPU: 0 UID: 0 PID: 9466 Comm: syz.1.786 Tainted: G U syzkaller #0 PREEMPT(full) [ 297.706147][ T9466] Tainted: [U]=USER [ 297.706156][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.706174][ T9466] Call Trace: [ 297.706184][ T9466] [ 297.706196][ T9466] dump_stack_lvl+0x100/0x190 [ 297.706245][ T9466] should_fail_ex.cold+0x5/0xa [ 297.706279][ T9466] get_futex_key+0x1d2/0x1620 [ 297.706316][ T9466] ? __pfx_get_futex_key+0x10/0x10 [ 297.706363][ T9466] futex_wait_setup+0x81/0x500 [ 297.706417][ T9466] __futex_wait+0x19f/0x300 [ 297.706461][ T9466] ? __pfx___futex_wait+0x10/0x10 [ 297.706500][ T9466] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 297.706542][ T9466] ? lockdep_hardirqs_on+0x78/0x100 [ 297.706589][ T9466] ? __pfx_futex_wake_mark+0x10/0x10 [ 297.706639][ T9466] ? find_held_lock+0x2b/0x80 [ 297.706685][ T9466] ? futex_wake+0x456/0x530 [ 297.706736][ T9466] futex_wait+0xed/0x380 [ 297.706779][ T9466] ? __pfx_futex_wait+0x10/0x10 [ 297.706844][ T9466] do_futex+0x1ef/0x350 [ 297.706877][ T9466] ? __pfx_do_futex+0x10/0x10 [ 297.706909][ T9466] ? ktime_get_ts64+0x2d2/0x3f0 [ 297.706940][ T9466] ? read_tsc+0x9/0x20 [ 297.706982][ T9466] ? ktime_get_ts64+0x256/0x3f0 [ 297.707017][ T9466] __x64_sys_futex+0x34f/0x4d0 [ 297.707059][ T9466] ? __pfx___x64_sys_futex+0x10/0x10 [ 297.707103][ T9466] ? __pfx___x64_sys_poll+0x10/0x10 [ 297.707159][ T9466] do_syscall_64+0x106/0xf80 [ 297.707186][ T9466] ? clear_bhb_loop+0x40/0x90 [ 297.707223][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.707255][ T9466] RIP: 0033:0x7f1e6a59c139 [ 297.707278][ T9466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.707301][ T9466] RSP: 002b:00007f1e6b3a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.707327][ T9466] RAX: ffffffffffffffda RBX: 00007f1e6a815fa8 RCX: 00007f1e6a59c139 [ 297.707346][ T9466] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e6a815fa8 [ 297.707363][ T9466] RBP: 00007f1e6a815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 297.707381][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.707398][ T9466] R13: 00007f1e6a816038 R14: 00007fff760d6d60 R15: 00007fff760d6e48 [ 297.707439][ T9466] [ 299.614866][ T9485] zswap: compressor not available [ 300.213488][ T9503] FAULT_INJECTION: forcing a failure. [ 300.213488][ T9503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.254300][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.1.796 Tainted: G U syzkaller #0 PREEMPT(full) [ 300.254347][ T9503] Tainted: [U]=USER [ 300.254356][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.254372][ T9503] Call Trace: [ 300.254381][ T9503] [ 300.254392][ T9503] dump_stack_lvl+0x100/0x190 [ 300.254440][ T9503] should_fail_ex.cold+0x5/0xa [ 300.254475][ T9503] _copy_to_user+0x32/0xd0 [ 300.254517][ T9503] simple_read_from_buffer+0xcb/0x170 [ 300.254560][ T9503] proc_fail_nth_read+0x1af/0x230 [ 300.254609][ T9503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.254660][ T9503] ? rw_verify_area+0xce/0x6d0 [ 300.254695][ T9503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.254742][ T9503] vfs_read+0x1e4/0xb30 [ 300.254787][ T9503] ? __pfx_vfs_read+0x10/0x10 [ 300.254825][ T9503] ? __fget_files+0x215/0x3d0 [ 300.254881][ T9503] ? __fget_files+0x21f/0x3d0 [ 300.254930][ T9503] ksys_read+0x12a/0x250 [ 300.254968][ T9503] ? __pfx_ksys_read+0x10/0x10 [ 300.255026][ T9503] do_syscall_64+0x106/0xf80 [ 300.255054][ T9503] ? clear_bhb_loop+0x40/0x90 [ 300.255090][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.255117][ T9503] RIP: 0033:0x7f1e6a55ca0e [ 300.255142][ T9503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.255168][ T9503] RSP: 002b:00007f1e6b37efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.255195][ T9503] RAX: ffffffffffffffda RBX: 00007f1e6b37f6c0 RCX: 00007f1e6a55ca0e [ 300.255214][ T9503] RDX: 000000000000000f RSI: 00007f1e6b37f0a0 RDI: 0000000000000003 [ 300.255229][ T9503] RBP: 00007f1e6b37f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.255245][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.255262][ T9503] R13: 00007f1e6a816128 R14: 00007f1e6a816090 R15: 00007fff760d6e48 [ 300.255307][ T9503] [ 300.771305][ T9508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'. [ 300.852424][ T9508] veth0_macvtap: left promiscuous mode [ 300.878551][ T9508] macvtap0: entered promiscuous mode [ 300.899808][ T9508] macvtap0: entered allmulticast mode [ 301.190913][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 302.569385][ T9544] netlink: 342 bytes leftover after parsing attributes in process `syz.2.806'. [ 303.358876][ T9555] netlink: 'syz.1.810': attribute type 7 has an invalid length. [ 303.371988][ T9555] netlink: 17 bytes leftover after parsing attributes in process `syz.1.810'. [ 303.855906][ T9565] zswap: compressor not available [ 304.222572][ T9569] random: crng reseeded on system resumption [ 305.356594][ T9596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.221370][ T9606] netlink: 'syz.1.822': attribute type 7 has an invalid length. [ 306.241464][ T9606] netlink: 17 bytes leftover after parsing attributes in process `syz.1.822'. [ 306.461915][ T9608] __vm_enough_memory: pid: 9608, comm: syz.2.823, bytes: 8589938688 not enough memory for the allocation [ 306.671031][ T9618] __vm_enough_memory: pid: 9618, comm: syz.1.825, bytes: 8589938688 not enough memory for the allocation [ 306.779333][ T9622] FAULT_INJECTION: forcing a failure. [ 306.779333][ T9622] name failslab, interval 1, probability 0, space 0, times 0 [ 306.845373][ T9622] CPU: 0 UID: 0 PID: 9622 Comm: syz.0.826 Tainted: G U syzkaller #0 PREEMPT(full) [ 306.845423][ T9622] Tainted: [U]=USER [ 306.845433][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.845451][ T9622] Call Trace: [ 306.845461][ T9622] [ 306.845473][ T9622] dump_stack_lvl+0x100/0x190 [ 306.845525][ T9622] should_fail_ex.cold+0x5/0xa [ 306.845562][ T9622] should_failslab+0xc2/0x120 [ 306.845609][ T9622] __kmalloc_cache_noprof+0x7a/0x6f0 [ 306.845643][ T9622] ? ip_vs_protocol_net_init+0xbe/0x300 [ 306.845690][ T9622] ip_vs_protocol_net_init+0xbe/0x300 [ 306.845731][ T9622] __ip_vs_init+0x239/0x520 [ 306.845787][ T9622] ? __pfx___ip_vs_init+0x10/0x10 [ 306.845841][ T9622] ops_init+0x1e2/0x5f0 [ 306.845879][ T9622] setup_net+0x118/0x3a0 [ 306.845911][ T9622] ? __pfx_setup_net+0x10/0x10 [ 306.845939][ T9622] ? lockdep_init_map_type+0x5c/0x250 [ 306.845981][ T9622] ? mutex_init_lockep+0x110/0x150 [ 306.846027][ T9622] copy_net_ns+0x46f/0x7c0 [ 306.846067][ T9622] create_new_namespaces+0x3ea/0xac0 [ 306.846107][ T9622] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 306.846142][ T9622] ksys_unshare+0x455/0xab0 [ 306.846182][ T9622] ? __pfx_ksys_unshare+0x10/0x10 [ 306.846241][ T9622] __x64_sys_unshare+0x31/0x40 [ 306.846279][ T9622] do_syscall_64+0x106/0xf80 [ 306.846307][ T9622] ? clear_bhb_loop+0x40/0x90 [ 306.846345][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.846377][ T9622] RIP: 0033:0x7f26d759c139 [ 306.846404][ T9622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.846432][ T9622] RSP: 002b:00007f26d8398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 306.846463][ T9622] RAX: ffffffffffffffda RBX: 00007f26d7815fa0 RCX: 00007f26d759c139 [ 306.846483][ T9622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 306.846500][ T9622] RBP: 00007f26d76327e0 R08: 0000000000000000 R09: 0000000000000000 [ 306.846518][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.846535][ T9622] R13: 00007f26d7816038 R14: 00007f26d7815fa0 R15: 00007ffea623fab8 [ 306.846577][ T9622] [ 307.176993][ T9616] zswap: compressor not available [ 307.207456][ T9631] netlink: 338 bytes leftover after parsing attributes in process `syz.2.828'. [ 307.523241][ T9638] FAULT_INJECTION: forcing a failure. [ 307.523241][ T9638] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.664147][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: syz.2.832 Tainted: G U syzkaller #0 PREEMPT(full) [ 307.664179][ T9638] Tainted: [U]=USER [ 307.664186][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.664196][ T9638] Call Trace: [ 307.664203][ T9638] [ 307.664211][ T9638] dump_stack_lvl+0x100/0x190 [ 307.664242][ T9638] should_fail_ex.cold+0x5/0xa [ 307.664263][ T9638] get_futex_key+0x1d2/0x1620 [ 307.664287][ T9638] ? __pfx_get_futex_key+0x10/0x10 [ 307.664305][ T9638] ? find_held_lock+0x2b/0x80 [ 307.664332][ T9638] ? futex_wake+0x456/0x530 [ 307.664361][ T9638] futex_wake+0xea/0x530 [ 307.664385][ T9638] ? __pfx_futex_wait+0x10/0x10 [ 307.664409][ T9638] ? __pfx_futex_wake+0x10/0x10 [ 307.664436][ T9638] ? ksys_write+0x190/0x250 [ 307.664461][ T9638] ? ksys_write+0x190/0x250 [ 307.664488][ T9638] do_futex+0x32b/0x350 [ 307.664509][ T9638] ? __pfx_do_futex+0x10/0x10 [ 307.664535][ T9638] __x64_sys_futex+0x34f/0x4d0 [ 307.664559][ T9638] ? __pfx___x64_sys_futex+0x10/0x10 [ 307.664580][ T9638] ? __pfx_from_kgid_munged+0x10/0x10 [ 307.664614][ T9638] do_syscall_64+0x106/0xf80 [ 307.664631][ T9638] ? clear_bhb_loop+0x40/0x90 [ 307.664652][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.664671][ T9638] RIP: 0033:0x7f4d4b99c139 [ 307.664686][ T9638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.664703][ T9638] RSP: 002b:00007f4d49bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.664721][ T9638] RAX: ffffffffffffffda RBX: 00007f4d4bc16098 RCX: 00007f4d4b99c139 [ 307.664732][ T9638] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4d4bc1609c [ 307.664743][ T9638] RBP: 00007f4d4bc16090 R08: 0000000000000000 R09: 0000000000000000 [ 307.664753][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.664763][ T9638] R13: 00007f4d4bc16128 R14: 00007ffeec63dd90 R15: 00007ffeec63de78 [ 307.664785][ T9638] [ 307.918333][ T9641] netlink: 'syz.1.833': attribute type 7 has an invalid length. [ 307.926096][ T9641] netlink: 17 bytes leftover after parsing attributes in process `syz.1.833'. [ 308.159021][ T9650] kAFS: Invalid Command on /proc/fs/afs/cells file [ 308.630704][ T9665] rtc_cmos 00:00: Alarms can be up to one day in the future [ 308.838875][ T9674] FAULT_INJECTION: forcing a failure. [ 308.838875][ T9674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 308.860383][ T9676] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 308.872369][ T9674] CPU: 0 UID: 0 PID: 9674 Comm: syz.3.843 Tainted: G U syzkaller #0 PREEMPT(full) [ 308.872417][ T9674] Tainted: [U]=USER [ 308.872427][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.872445][ T9674] Call Trace: [ 308.872454][ T9674] [ 308.872465][ T9674] dump_stack_lvl+0x100/0x190 [ 308.872534][ T9674] should_fail_ex.cold+0x5/0xa [ 308.872561][ T9674] ? prepare_alloc_pages+0x16d/0x5f0 [ 308.872612][ T9674] should_fail_alloc_page+0xeb/0x140 [ 308.872660][ T9674] prepare_alloc_pages+0x1f0/0x5f0 [ 308.872714][ T9674] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 308.872754][ T9674] ? finish_task_switch.isra.0+0x171/0xb80 [ 308.872786][ T9674] ? __pfx_css_rstat_updated+0x10/0x10 [ 308.872815][ T9674] ? rcu_is_watching+0x12/0xc0 [ 308.872858][ T9674] ? trace_sched_exit_tp+0x13a/0x180 [ 308.872891][ T9674] ? __schedule+0x1000/0x60e0 [ 308.872938][ T9674] ? rcu_is_watching+0x12/0xc0 [ 308.872981][ T9674] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 308.873028][ T9674] ? lru_gen_add_folio+0x20f/0x13e0 [ 308.873086][ T9674] ? lock_acquire+0x1cf/0x380 [ 308.873121][ T9674] ? find_held_lock+0x2b/0x80 [ 308.873164][ T9674] ? page_table_check_set+0x49a/0xa10 [ 308.873205][ T9674] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.873251][ T9674] ? policy_nodemask+0xed/0x4f0 [ 308.873296][ T9674] alloc_pages_mpol+0x1fb/0x550 [ 308.873339][ T9674] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 308.873402][ T9674] folio_alloc_mpol_noprof+0x36/0x340 [ 308.873435][ T9674] vma_alloc_folio_noprof+0xed/0x1d0 [ 308.873464][ T9674] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 308.873506][ T9674] do_anonymous_page+0xb3a/0x1fb0 [ 308.873556][ T9674] __handle_mm_fault+0x1d42/0x2b60 [ 308.873600][ T9674] ? __pfx___handle_mm_fault+0x10/0x10 [ 308.873636][ T9674] ? pte_offset_map_lock+0x174/0x320 [ 308.873679][ T9674] ? find_held_lock+0x2b/0x80 [ 308.873736][ T9674] ? follow_page_pte+0x5b3/0x1400 [ 308.873791][ T9674] handle_mm_fault+0x36d/0xa20 [ 308.873830][ T9674] __get_user_pages+0xf9c/0x34d0 [ 308.873891][ T9674] ? __pfx___get_user_pages+0x10/0x10 [ 308.873949][ T9674] populate_vma_page_range+0x267/0x3f0 [ 308.873981][ T9674] ? __pfx_populate_vma_page_range+0x10/0x10 [ 308.874009][ T9674] ? __pfx_find_vma_intersection+0x10/0x10 [ 308.874055][ T9674] ? do_mmap+0x93f/0x12f0 [ 308.874112][ T9674] __mm_populate+0x107/0x3a0 [ 308.874142][ T9674] ? __pfx___mm_populate+0x10/0x10 [ 308.874173][ T9674] ? up_write+0x290/0x4f0 [ 308.874216][ T9674] vm_mmap_pgoff+0x37f/0x470 [ 308.874267][ T9674] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 308.874315][ T9674] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 308.874371][ T9674] ? __x64_sys_futex+0x34f/0x4d0 [ 308.874403][ T9674] ? __x64_sys_futex+0x358/0x4d0 [ 308.874448][ T9674] ksys_mmap_pgoff+0x7d/0x5b0 [ 308.874499][ T9674] __x64_sys_mmap+0x125/0x190 [ 308.874546][ T9674] do_syscall_64+0x106/0xf80 [ 308.874572][ T9674] ? clear_bhb_loop+0x40/0x90 [ 308.874608][ T9674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.874637][ T9674] RIP: 0033:0x7fa83b59c139 [ 308.874662][ T9674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.874690][ T9674] RSP: 002b:00007fa83c40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 308.874717][ T9674] RAX: ffffffffffffffda RBX: 00007fa83b816090 RCX: 00007fa83b59c139 [ 308.874736][ T9674] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 308.874752][ T9674] RBP: 00007fa83b6327e0 R08: 0000000000000002 R09: 0000000000008000 [ 308.874769][ T9674] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 308.874786][ T9674] R13: 00007fa83b816128 R14: 00007fa83b816090 R15: 00007ffeba94b218 [ 308.874824][ T9674] [ 308.882573][ T9676] netlink: 17 bytes leftover after parsing attributes in process `syz.2.844'. [ 310.496358][ T9723] qrtr: Invalid version 0 [ 310.865938][ T30] audit: type=1800 audit(4294968466.592:7): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.856" name="lu_gp_id" dev="configfs" ino=26921 res=0 errno=0 [ 311.036380][ T9737] ALUA LU Group already has a valid ID, ignoring request [ 311.760077][ T9748] __vm_enough_memory: pid: 9748, comm: syz.1.858, bytes: 8589938688 not enough memory for the allocation [ 314.247575][ T9805] netlink: 'syz.2.870': attribute type 3 has an invalid length. [ 314.531690][ T9807] __vm_enough_memory: pid: 9807, comm: syz.1.871, bytes: 8589938688 not enough memory for the allocation [ 314.840137][ T9813] netlink: 'syz.0.873': attribute type 7 has an invalid length. [ 314.848442][ T9813] netlink: 17 bytes leftover after parsing attributes in process `syz.0.873'. [ 316.556922][ T9847] __vm_enough_memory: pid: 9847, comm: syz.1.880, bytes: 8589938688 not enough memory for the allocation [ 317.251157][ T9862] netlink: 98 bytes leftover after parsing attributes in process `syz.1.884'. [ 317.421231][ T9866] mmap: syz.2.885 (9866): VmData 46010368 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 317.450553][ T9866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 317.570636][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.578608][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.232192][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 318.646543][ T9899] netlink: 'syz.2.894': attribute type 32 has an invalid length. [ 319.449596][ T9924] FAULT_INJECTION: forcing a failure. [ 319.449596][ T9924] name failslab, interval 1, probability 0, space 0, times 0 [ 319.476659][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: syz.0.901 Tainted: G U syzkaller #0 PREEMPT(full) [ 319.476707][ T9924] Tainted: [U]=USER [ 319.476718][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.476736][ T9924] Call Trace: [ 319.476756][ T9924] [ 319.476767][ T9924] dump_stack_lvl+0x100/0x190 [ 319.476822][ T9924] should_fail_ex.cold+0x5/0xa [ 319.476859][ T9924] should_failslab+0xc2/0x120 [ 319.476910][ T9924] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 319.476950][ T9924] ? __kernfs_new_node+0xd2/0x960 [ 319.476996][ T9924] __kernfs_new_node+0xd2/0x960 [ 319.477039][ T9924] ? __pfx___kernfs_new_node+0x10/0x10 [ 319.477088][ T9924] ? find_held_lock+0x2b/0x80 [ 319.477139][ T9924] ? kernfs_root+0xee/0x2a0 [ 319.477175][ T9924] ? kernfs_root+0xee/0x2a0 [ 319.477234][ T9924] kernfs_new_node+0x11b/0x1a0 [ 319.477287][ T9924] __kernfs_create_file+0x53/0x350 [ 319.477343][ T9924] sysfs_add_file_mode_ns+0x207/0x3c0 [ 319.477390][ T9924] internal_create_group+0x593/0xf40 [ 319.477441][ T9924] ? __pfx_internal_create_group+0x10/0x10 [ 319.477489][ T9924] ? kernfs_create_link+0x1bd/0x240 [ 319.477546][ T9924] internal_create_groups+0x9d/0x150 [ 319.477590][ T9924] device_add+0x7c8/0x1950 [ 319.477639][ T9924] ? __pfx_device_add+0x10/0x10 [ 319.477680][ T9924] ? lockdep_init_map_type+0x5c/0x250 [ 319.477721][ T9924] ? __init_waitqueue_head+0xca/0x150 [ 319.477785][ T9924] netdev_register_kobject+0x1a9/0x3d0 [ 319.477829][ T9924] register_netdevice+0x12e0/0x2210 [ 319.477870][ T9924] ? idr_alloc+0xdd/0x130 [ 319.477919][ T9924] ? __pfx_register_netdevice+0x10/0x10 [ 319.477951][ T9924] ? net_generic+0xea/0x2a0 [ 319.478005][ T9924] ppp_dev_configure+0x986/0xcb0 [ 319.478065][ T9924] ppp_ioctl+0x985/0x2800 [ 319.478112][ T9924] ? find_held_lock+0x2b/0x80 [ 319.478152][ T9924] ? __pfx_ppp_ioctl+0x10/0x10 [ 319.478202][ T9924] ? __fget_files+0x21f/0x3d0 [ 319.478248][ T9924] ? __pfx_ppp_ioctl+0x10/0x10 [ 319.478296][ T9924] __x64_sys_ioctl+0x18e/0x210 [ 319.478336][ T9924] do_syscall_64+0x106/0xf80 [ 319.478362][ T9924] ? clear_bhb_loop+0x40/0x90 [ 319.478400][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.478431][ T9924] RIP: 0033:0x7f26d759c139 [ 319.478456][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.478484][ T9924] RSP: 002b:00007f26d8398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.478513][ T9924] RAX: ffffffffffffffda RBX: 00007f26d7815fa0 RCX: 00007f26d759c139 [ 319.478533][ T9924] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 319.478551][ T9924] RBP: 00007f26d76327e0 R08: 0000000000000000 R09: 0000000000000000 [ 319.478569][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.478587][ T9924] R13: 00007f26d7816038 R14: 00007f26d7815fa0 R15: 00007ffea623fab8 [ 319.478629][ T9924] [ 319.504803][ T9928] netlink: 98 bytes leftover after parsing attributes in process `syz.2.903'. [ 319.980261][ T9944] random: crng reseeded on system resumption [ 320.397847][ T9938] FAULT_INJECTION: forcing a failure. [ 320.397847][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 320.462207][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: syz.1.905 Tainted: G U syzkaller #0 PREEMPT(full) [ 320.462257][ T9938] Tainted: [U]=USER [ 320.462267][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.462282][ T9938] Call Trace: [ 320.462292][ T9938] [ 320.462304][ T9938] dump_stack_lvl+0x100/0x190 [ 320.462354][ T9938] should_fail_ex.cold+0x5/0xa [ 320.462389][ T9938] ? memcg_list_lru_alloc+0x4ec/0x740 [ 320.462422][ T9938] should_failslab+0xc2/0x120 [ 320.462466][ T9938] __kmalloc_noprof+0xe0/0x850 [ 320.462513][ T9938] memcg_list_lru_alloc+0x4ec/0x740 [ 320.462568][ T9938] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 320.462602][ T9938] ? rcu_read_unlock+0x17/0x60 [ 320.462655][ T9938] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 320.462696][ T9938] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 320.462750][ T9938] ? kasan_save_track+0x14/0x30 [ 320.462791][ T9938] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 320.462828][ T9938] ? alloc_inode+0x183/0x250 [ 320.462861][ T9938] ? ioctx_alloc+0x427/0x21e0 [ 320.462913][ T9938] alloc_inode+0x183/0x250 [ 320.462945][ T9938] alloc_anon_inode+0x2a/0x3e0 [ 320.462990][ T9938] ioctx_alloc+0x4dc/0x21e0 [ 320.463065][ T9938] ? find_held_lock+0x2b/0x80 [ 320.463116][ T9938] ? __pfx_ioctx_alloc+0x10/0x10 [ 320.463174][ T9938] __x64_sys_io_setup+0xc9/0x220 [ 320.463221][ T9938] do_syscall_64+0x106/0xf80 [ 320.463249][ T9938] ? clear_bhb_loop+0x40/0x90 [ 320.463284][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.463314][ T9938] RIP: 0033:0x7f1e6a59c139 [ 320.463340][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.463366][ T9938] RSP: 002b:00007f1e687f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 320.463398][ T9938] RAX: ffffffffffffffda RBX: 00007f1e6a816180 RCX: 00007f1e6a59c139 [ 320.463416][ T9938] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 320.463433][ T9938] RBP: 00007f1e6a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 320.463449][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.463466][ T9938] R13: 00007f1e6a816218 R14: 00007f1e6a816180 R15: 00007fff760d6e48 [ 320.463505][ T9938] [ 321.129874][ T9957] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[9957] [ 322.677989][ T9969] zswap: compressor not available [ 323.363668][ T9981] random: crng reseeded on system resumption [ 323.780892][ T9991] rtc_cmos 00:00: Alarms can be up to one day in the future [ 324.394677][T10017] netlink: 98 bytes leftover after parsing attributes in process `syz.3.913'. [ 324.711813][T10024] zswap: compressor not available [ 326.609321][T10053] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 326.727074][T10053] zswap: compressor not available [ 327.139955][T10051] __vm_enough_memory: pid: 10051, comm: syz.1.928, bytes: 8589938688 not enough memory for the allocation [ 327.478630][T10067] i2c i2c-0: delete_device: Can't parse I2C address [ 327.493397][T10070] i2c i2c-0: delete_device: Can't parse I2C address [ 327.671071][T10078] FAULT_INJECTION: forcing a failure. [ 327.671071][T10078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.731473][T10081] ======================================================= [ 327.731473][T10081] WARNING: The mand mount option has been deprecated and [ 327.731473][T10081] and is ignored by this kernel. Remove the mand [ 327.731473][T10081] option from the mount to silence this warning. [ 327.731473][T10081] ======================================================= [ 327.771403][T10078] CPU: 1 UID: 0 PID: 10078 Comm: syz.0.935 Tainted: G U syzkaller #0 PREEMPT(full) [ 327.771450][T10078] Tainted: [U]=USER [ 327.771458][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.771474][T10078] Call Trace: [ 327.771483][T10078] [ 327.771493][T10078] dump_stack_lvl+0x100/0x190 [ 327.771537][T10078] should_fail_ex.cold+0x5/0xa [ 327.771566][T10078] _copy_to_user+0x32/0xd0 [ 327.771603][T10078] simple_read_from_buffer+0xcb/0x170 [ 327.771640][T10078] proc_fail_nth_read+0x1af/0x230 [ 327.771682][T10078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.771750][T10078] ? rw_verify_area+0xce/0x6d0 [ 327.771780][T10078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.771821][T10078] vfs_read+0x1e4/0xb30 [ 327.771865][T10078] ? __pfx_vfs_read+0x10/0x10 [ 327.771897][T10078] ? __fget_files+0x215/0x3d0 [ 327.771939][T10078] ? __fget_files+0x21f/0x3d0 [ 327.771983][T10078] ksys_read+0x12a/0x250 [ 327.772017][T10078] ? __pfx_ksys_read+0x10/0x10 [ 327.772061][T10078] do_syscall_64+0x106/0xf80 [ 327.772085][T10078] ? clear_bhb_loop+0x40/0x90 [ 327.772117][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.772143][T10078] RIP: 0033:0x7f26d755ca0e [ 327.772165][T10078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 327.772188][T10078] RSP: 002b:00007f26d8397fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.772213][T10078] RAX: ffffffffffffffda RBX: 00007f26d83986c0 RCX: 00007f26d755ca0e [ 327.772229][T10078] RDX: 000000000000000f RSI: 00007f26d83980a0 RDI: 0000000000000004 [ 327.772244][T10078] RBP: 00007f26d8398090 R08: 0000000000000000 R09: 0000000000000000 [ 327.772258][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.772273][T10078] R13: 00007f26d7816038 R14: 00007f26d7815fa0 R15: 00007ffea623fab8 [ 327.772307][T10078] [ 327.846612][T10083] netlink: 62 bytes leftover after parsing attributes in process `syz.3.934'. [ 329.009503][T10112] __vm_enough_memory: pid: 10112, comm: syz.1.940, bytes: 8589938688 not enough memory for the allocation [ 329.065712][T10106] Invalid ELF header magic: != ELF [ 329.941365][T10131] random: crng reseeded on system resumption [ 330.700270][T10105] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.059798][T10158] __vm_enough_memory: pid: 10158, comm: syz.1.953, bytes: 8589938688 not enough memory for the allocation [ 331.704743][T10172] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 332.082895][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.958'. [ 333.753069][T10213] netlink: 334 bytes leftover after parsing attributes in process `syz.1.965'. [ 333.818696][T10213] FAULT_INJECTION: forcing a failure. [ 333.818696][T10213] name failslab, interval 1, probability 0, space 0, times 0 [ 333.862051][T10213] CPU: 0 UID: 0 PID: 10213 Comm: syz.1.965 Tainted: G U syzkaller #0 PREEMPT(full) [ 333.862106][T10213] Tainted: [U]=USER [ 333.862116][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.862130][T10213] Call Trace: [ 333.862140][T10213] [ 333.862151][T10213] dump_stack_lvl+0x100/0x190 [ 333.862200][T10213] should_fail_ex.cold+0x5/0xa [ 333.862231][T10213] ? vhost_dev_set_owner+0x20c/0xa30 [ 333.862265][T10213] should_failslab+0xc2/0x120 [ 333.862310][T10213] __kmalloc_noprof+0xe0/0x850 [ 333.862356][T10213] vhost_dev_set_owner+0x20c/0xa30 [ 333.862404][T10213] vhost_dev_ioctl+0x521/0xe20 [ 333.862436][T10213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.862483][T10213] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 333.862525][T10213] vhost_vsock_dev_ioctl+0x320/0xb60 [ 333.862556][T10213] ? __fget_files+0x215/0x3d0 [ 333.862596][T10213] ? hook_file_ioctl_common+0x146/0x410 [ 333.862639][T10213] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 333.862677][T10213] ? __fget_files+0x21f/0x3d0 [ 333.862722][T10213] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 333.862760][T10213] __x64_sys_ioctl+0x18e/0x210 [ 333.862798][T10213] do_syscall_64+0x106/0xf80 [ 333.862824][T10213] ? clear_bhb_loop+0x40/0x90 [ 333.862862][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.862892][T10213] RIP: 0033:0x7f1e6a59c139 [ 333.862917][T10213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.862952][T10213] RSP: 002b:00007f1e6b3a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.862980][T10213] RAX: ffffffffffffffda RBX: 00007f1e6a815fa0 RCX: 00007f1e6a59c139 [ 333.862998][T10213] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000009 [ 333.863014][T10213] RBP: 00007f1e6a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 333.863031][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.863049][T10213] R13: 00007f1e6a816038 R14: 00007f1e6a815fa0 R15: 00007fff760d6e48 [ 333.863089][T10213] [ 334.988047][T10230] netlink: 98 bytes leftover after parsing attributes in process `syz.1.970'. [ 335.363398][T10240] ptp ptp0: delete virtual clock ptp3 [ 335.416529][T10240] ptp ptp0: delete virtual clock ptp2 [ 335.475228][T10240] ptp ptp0: guarantee physical clock free running [ 335.884996][T10251] netlink: 98 bytes leftover after parsing attributes in process `syz.0.975'. [ 336.156306][T10258] netlink: 'syz.0.977': attribute type 7 has an invalid length. [ 336.164486][T10258] netlink: 17 bytes leftover after parsing attributes in process `syz.0.977'. [ 336.842297][T10267] random: crng reseeded on system resumption [ 336.862105][T10264] zswap: compressor not available [ 337.113062][T10265] zswap: compressor not available [ 337.966178][T10303] netlink: 'syz.0.986': attribute type 7 has an invalid length. [ 337.973964][T10303] netlink: 17 bytes leftover after parsing attributes in process `syz.0.986'. [ 338.955949][T10323] random: crng reseeded on system resumption [ 339.419862][T10333] __vm_enough_memory: pid: 10333, comm: syz.1.994, bytes: 8589938688 not enough memory for the allocation [ 339.525626][T10329] netlink: 98 bytes leftover after parsing attributes in process `syz.3.993'. [ 341.188707][T10363] input: jJǸ-9%vJ86 as /devices/virtual/input/input5 [ 342.355637][T10379] random: crng reseeded on system resumption [ 344.886752][T10413] random: crng reseeded on system resumption [ 345.002541][T10418] random: crng reseeded on system resumption [ 345.075113][T10417] hub 1-0:1.0: USB hub found [ 345.089671][T10417] hub 1-0:1.0: 1 port detected [ 345.574119][T10434] smpboot: CPU 1 is now offline [ 345.594952][T10428] zswap: compressor not available [ 346.313645][T10451] netlink: 98 bytes leftover after parsing attributes in process `syz.1.1023'. [ 346.548041][T10457] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1025'. [ 346.737260][T10461] random: crng reseeded on system resumption [ 346.910487][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 347.601375][T10467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.642957][T10467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.649062][T10467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.692850][T10467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 348.276930][T10474] FAULT_INJECTION: forcing a failure. [ 348.276930][T10474] name fail_futex, interval 1, probability 0, space 0, times 0 [ 348.359793][ T5825] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 348.364841][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.1.1030 Tainted: G U syzkaller #0 PREEMPT(full) [ 348.364872][T10474] Tainted: [U]=USER [ 348.364878][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.364888][T10474] Call Trace: [ 348.364894][T10474] [ 348.364901][T10474] dump_stack_lvl+0x100/0x190 [ 348.364931][T10474] should_fail_ex.cold+0x5/0xa [ 348.364954][T10474] get_futex_key+0x1d2/0x1620 [ 348.364975][T10474] ? __pfx_get_futex_key+0x10/0x10 [ 348.364993][T10474] ? lock_acquire+0x1cf/0x380 [ 348.365021][T10474] futex_wake+0xea/0x530 [ 348.365047][T10474] ? __pfx_futex_wake+0x10/0x10 [ 348.365070][T10474] ? exit_mm_release+0x19/0x30 [ 348.365097][T10474] do_futex+0x32b/0x350 [ 348.365117][T10474] ? __pfx_do_futex+0x10/0x10 [ 348.365136][T10474] ? __might_fault+0xc5/0x140 [ 348.365163][T10474] mm_release+0x24a/0x2f0 [ 348.365180][T10474] do_exit+0x675/0x2aa0 [ 348.365205][T10474] ? __pfx_do_exit+0x10/0x10 [ 348.365227][T10474] ? do_raw_spin_lock+0x128/0x260 [ 348.365250][T10474] ? find_held_lock+0x2b/0x80 [ 348.365276][T10474] ? get_signal+0x7e0/0x21e0 [ 348.365294][T10474] do_group_exit+0xd5/0x2a0 [ 348.365319][T10474] get_signal+0x1ec7/0x21e0 [ 348.365343][T10474] ? __pfx_get_signal+0x10/0x10 [ 348.365364][T10474] ? do_futex+0x192/0x350 [ 348.365386][T10474] arch_do_signal_or_restart+0x91/0x770 [ 348.365406][T10474] ? __sys_connect+0xe4/0x170 [ 348.365432][T10474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 348.365458][T10474] ? __pfx___x64_sys_futex+0x10/0x10 [ 348.365483][T10474] exit_to_user_mode_loop+0x86/0x4a0 [ 348.365508][T10474] do_syscall_64+0x668/0xf80 [ 348.365524][T10474] ? clear_bhb_loop+0x40/0x90 [ 348.365545][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.365563][T10474] RIP: 0033:0x7f1e6a59c139 [ 348.365579][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.365595][T10474] RSP: 002b:00007f1e6b37f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 348.365620][T10474] RAX: fffffffffffffe00 RBX: 00007f1e6a816098 RCX: 00007f1e6a59c139 [ 348.365631][T10474] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e6a816098 [ 348.365641][T10474] RBP: 00007f1e6a816090 R08: 0000000000000000 R09: 0000000000000000 [ 348.365651][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.365661][T10474] R13: 00007f1e6a816128 R14: 00007fff760d6d60 R15: 00007fff760d6e48 [ 348.365682][T10474] [ 348.826394][T10500] netlink: 98 bytes leftover after parsing attributes in process `syz.1.1035'. [ 348.959358][T10509] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1037'. [ 349.235452][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 349.715473][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 349.721762][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.727941][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 350.159483][T10533] openvswitch: netlink: IPv6 tunnel dst address is zero [ 350.425804][T10544] netlink: 98 bytes leftover after parsing attributes in process `syz.1.1047'. [ 351.034524][T10558] ================================================================== [ 351.034539][T10558] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 351.034562][T10558] Write of size 8 at addr ffffc900042392e0 by task syz.1.1049/10558 [ 351.034578][T10558] [ 351.034589][T10558] CPU: 0 UID: 0 PID: 10558 Comm: syz.1.1049 Tainted: G U syzkaller #0 PREEMPT(full) [ 351.034613][T10558] Tainted: [U]=USER [ 351.034620][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.034637][T10558] Call Trace: [ 351.034643][T10558] [ 351.034650][T10558] dump_stack_lvl+0x100/0x190 [ 351.034675][T10558] print_report+0x156/0x4c9 [ 351.034699][T10558] ? _raw_spin_lock_irqsave+0x52/0x60 [ 351.034725][T10558] ? __virt_addr_valid+0x81/0x620 [ 351.034747][T10558] ? sys_imageblit+0x19fb/0x1d60 [ 351.034762][T10558] kasan_report+0xdf/0x1e0 [ 351.034787][T10558] ? sys_imageblit+0x19fb/0x1d60 [ 351.034805][T10558] sys_imageblit+0x19fb/0x1d60 [ 351.034823][T10558] ? __pfx_sys_imageblit+0x10/0x10 [ 351.034840][T10558] ? write_comp_data+0x40/0x90 [ 351.034865][T10558] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 351.034887][T10558] soft_cursor+0x524/0xa10 [ 351.034912][T10558] ? fb_get_color_depth+0x120/0x250 [ 351.034935][T10558] bit_cursor+0xe58/0x16f0 [ 351.034959][T10558] ? __pfx_bit_cursor+0x10/0x10 [ 351.034982][T10558] ? __lock_acquire+0x4a5/0x2630 [ 351.035004][T10558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.035030][T10558] ? get_color+0x1da/0x450 [ 351.035048][T10558] ? __pfx_bit_cursor+0x10/0x10 [ 351.035070][T10558] fbcon_cursor+0x43c/0x5e0 [ 351.035091][T10558] ? add_softcursor+0x170/0x290 [ 351.035116][T10558] set_cursor+0x1db/0x250 [ 351.035140][T10558] con_write+0x89/0xb0 [ 351.035156][T10558] n_tty_write+0x44f/0x12d0 [ 351.035180][T10558] ? __pfx_n_tty_write+0x10/0x10 [ 351.035201][T10558] ? __pfx_woken_wake_function+0x10/0x10 [ 351.035226][T10558] ? __pfx___might_resched+0x10/0x10 [ 351.035250][T10558] ? __pfx_n_tty_write+0x10/0x10 [ 351.035271][T10558] file_tty_write.isra.0+0x4d2/0x890 [ 351.035290][T10558] redirected_tty_write+0xd4/0x120 [ 351.035306][T10558] vfs_write+0x6ac/0x1070 [ 351.035330][T10558] ? __pfx_redirected_tty_write+0x10/0x10 [ 351.035348][T10558] ? __pfx_vfs_write+0x10/0x10 [ 351.035369][T10558] ? find_held_lock+0x2b/0x80 [ 351.035400][T10558] ksys_write+0x12a/0x250 [ 351.035423][T10558] ? __pfx_ksys_write+0x10/0x10 [ 351.035448][T10558] do_syscall_64+0x106/0xf80 [ 351.035464][T10558] ? clear_bhb_loop+0x40/0x90 [ 351.035483][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.035501][T10558] RIP: 0033:0x7f1e6a59c139 [ 351.035515][T10558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.035531][T10558] RSP: 002b:00007f1e687f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.035548][T10558] RAX: ffffffffffffffda RBX: 00007f1e6a816180 RCX: 00007f1e6a59c139 [ 351.035559][T10558] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 351.035570][T10558] RBP: 00007f1e6a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 351.035580][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.035590][T10558] R13: 00007f1e6a816218 R14: 00007f1e6a816180 R15: 00007fff760d6e48 [ 351.035605][T10558] [ 351.035611][T10558] [ 351.035616][T10558] The buggy address belongs to a vmalloc virtual mapping [ 351.035634][T10558] Memory state around the buggy address: [ 351.035643][T10558] ffffc90004239180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.035655][T10558] ffffc90004239200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.035667][T10558] >ffffc90004239280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.035676][T10558] ^ [ 351.035685][T10558] ffffc90004239300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.035697][T10558] ffffc90004239380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 351.035706][T10558] ================================================================== [ 351.035716][T10558] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 351.035728][T10558] CPU: 0 UID: 0 PID: 10558 Comm: syz.1.1049 Tainted: G U syzkaller #0 PREEMPT(full) [ 351.035752][T10558] Tainted: [U]=USER [ 351.035757][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.035767][T10558] Call Trace: [ 351.035773][T10558] [ 351.035779][T10558] dump_stack_lvl+0x100/0x190 [ 351.035802][T10558] vpanic+0x552/0x970 [ 351.035818][T10558] ? __pfx_vpanic+0x10/0x10 [ 351.035834][T10558] ? __pfx_vprintk_emit+0x10/0x10 [ 351.035862][T10558] ? sys_imageblit+0x19fb/0x1d60 [ 351.035877][T10558] panic+0xd1/0xe0 [ 351.035892][T10558] ? __pfx_panic+0x10/0x10 [ 351.035910][T10558] ? sys_imageblit+0x19fb/0x1d60 [ 351.035926][T10558] ? check_panic_on_warn+0x1f/0x90 [ 351.035950][T10558] check_panic_on_warn.cold+0x19/0x34 [ 351.035968][T10558] end_report.part.0+0x3a/0x90 [ 351.035992][T10558] kasan_report.cold+0xe/0x18 [ 351.036016][T10558] ? sys_imageblit+0x19fb/0x1d60 [ 351.036033][T10558] sys_imageblit+0x19fb/0x1d60 [ 351.036052][T10558] ? __pfx_sys_imageblit+0x10/0x10 [ 351.036068][T10558] ? write_comp_data+0x40/0x90 [ 351.036093][T10558] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 351.036114][T10558] soft_cursor+0x524/0xa10 [ 351.036139][T10558] ? fb_get_color_depth+0x120/0x250 [ 351.036161][T10558] bit_cursor+0xe58/0x16f0 [ 351.036186][T10558] ? __pfx_bit_cursor+0x10/0x10 [ 351.036208][T10558] ? __lock_acquire+0x4a5/0x2630 [ 351.036230][T10558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.036256][T10558] ? get_color+0x1da/0x450 [ 351.036275][T10558] ? __pfx_bit_cursor+0x10/0x10 [ 351.036297][T10558] fbcon_cursor+0x43c/0x5e0 [ 351.036317][T10558] ? add_softcursor+0x170/0x290 [ 351.036342][T10558] set_cursor+0x1db/0x250 [ 351.036366][T10558] con_write+0x89/0xb0 [ 351.036382][T10558] n_tty_write+0x44f/0x12d0 [ 351.036406][T10558] ? __pfx_n_tty_write+0x10/0x10 [ 351.036427][T10558] ? __pfx_woken_wake_function+0x10/0x10 [ 351.036452][T10558] ? __pfx___might_resched+0x10/0x10 [ 351.036476][T10558] ? __pfx_n_tty_write+0x10/0x10 [ 351.036497][T10558] file_tty_write.isra.0+0x4d2/0x890 [ 351.036516][T10558] redirected_tty_write+0xd4/0x120 [ 351.036533][T10558] vfs_write+0x6ac/0x1070 [ 351.036556][T10558] ? __pfx_redirected_tty_write+0x10/0x10 [ 351.036573][T10558] ? __pfx_vfs_write+0x10/0x10 [ 351.036595][T10558] ? find_held_lock+0x2b/0x80 [ 351.036633][T10558] ksys_write+0x12a/0x250 [ 351.036655][T10558] ? __pfx_ksys_write+0x10/0x10 [ 351.036681][T10558] do_syscall_64+0x106/0xf80 [ 351.036696][T10558] ? clear_bhb_loop+0x40/0x90 [ 351.036715][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.036733][T10558] RIP: 0033:0x7f1e6a59c139 [ 351.036745][T10558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.036761][T10558] RSP: 002b:00007f1e687f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.036776][T10558] RAX: ffffffffffffffda RBX: 00007f1e6a816180 RCX: 00007f1e6a59c139 [ 351.036787][T10558] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 351.036797][T10558] RBP: 00007f1e6a6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 351.036808][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.036818][T10558] R13: 00007f1e6a816218 R14: 00007f1e6a816180 R15: 00007fff760d6e48 [ 351.036833][T10558] [ 351.036899][T10558] Kernel Offset: disabled