last executing test programs: 3m21.083185625s ago: executing program 0 (id=102): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8, 0x0) r0 = socket(0x26, 0x5, 0x6) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4680, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x6, 0x52, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/irq/9/affinity_hint\x00', 0x40, 0x0) write$auto(r2, &(0x7f00000011c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.D\xab\"4\x8a\xbbY8DZ5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\x15\xbe\x01\x88\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf1v\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0xa04c) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq1/flags\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket(0x11, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r4, 0x8, 0xd0, 0x0, 0x107) eventfd$auto(0x2200000c) setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r3) sendmsg$auto_NFC_CMD_LLC_SDREQ(r6, &(0x7f0000000300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYRESOCT=r7, @ANYRES16=r7, @ANYRES64=r0], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4c010) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r8 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r8, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x4) writev$auto(0x3, 0x0, 0x8) 3m19.986411257s ago: executing program 0 (id=104): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) preadv$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="acc849841a1fe39be3d3b79e9b7dab91e8b300f410f8b5fa463b649f62d64b8f84f86fba39757028670da2b8eb741b84a4a3057ec1df96ef3e757e7f7462b13f682c0410e234f3ca08dcd8bd95c8c1d0054c853fb1307e1c1440eada93e3ee80e53c6bdc83f4e65240f6b0a856", 0x1000}, 0x4, 0x3, 0xd37f) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sysfs$auto(0xffff70eb, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r1, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x02\x00\x00\x00\x00\x00\x00\x00', 0xb9) 3m18.525261199s ago: executing program 0 (id=113): mmap$auto(0x0, 0x410008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0xffffffffffffb5be, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0xf) bpf$auto(0x0, 0x0, 0xd) bpf$auto(0x3, 0x0, 0x8) r1 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0) write$auto_bm_register_operations_binfmt_misc(r1, &(0x7f0000000380)="0000000000000000000000ea5e73de7846238434d5e17d15d6462b64af566c4484a4bca599a01b9001b278c8fa17c92a894fefe7d699d2988914356f8e8b77c6a0fb6e67c4e989c3305b6b2b5756cbef94cfb76f4e5e646b75bf27317e60255c47128664edf3d3dccee6724dd47419d0ad48c7493e6f37b2a30a3d027693dce443ee6bba7927c9775ba8213963606d6e78821b66c80f28fc91b3444823ffb3715d57229255d1e1df9445e4578acda6a6f3c2dbf246eafabd9dc90e6c218fa3873889d26f8c055e283948", 0xca) socket(0x1d, 0x3, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008) 3m17.418570946s ago: executing program 0 (id=114): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) write$auto(0x3, 0x0, 0x3f00) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60642, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) socket(0x2c, 0x800, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3m16.779431531s ago: executing program 0 (id=119): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x9, 0x5, 0x2, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000", @inferred=0x0}, 0x8, 0x0, 0x4, @inferred, @integer64={0x100000008f1, 0x5, 0x5}, "a4699d30a05edbe0d28473c399a7dc1d7de94b4123f970bedd3460c667373fcc66b584d81592f6ab606c276807000000000000006e76803400"}) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000001100)={0xa38, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_WOL_MODES={0x165, 0x2, 0x0, 0x1, [@typed={0xd, 0xad, 0x0, 0x0, @str='\xcc,$[$@}-\x00'}, @typed={0x5, 0x47, 0x0, 0x0, @str='\x00'}, @generic="a1ffa77c3c4f5fc3e42c72d170c2f49f5ae1f26cae019b8ab2dec5d1d198ee332fd1", @typed={0x8, 0xde, 0x0, 0x0, @fd=r5}, @generic="660244ae079fd01cc83c8016898a009ccce886c8acf1", @nested={0x64, 0x30, 0x0, 0x1, [@typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x117}, @generic="e23af955e97506fb3db648ab43405efe9f5f662a7e59b77d67b3508036d3f0f563ef6af3b6e7e5e5254aabd5fae16d5bd404cd425c8d8936621f306073d57352", @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="85bda37164526c3a3312d5fc620292f9dea10b7e427edc753aa68edbdb8f292e911a9d356d61bff392fe0f34eac18839575dfeba53c92b78285f37f1c67382580c32c712a88868809dfbf2fd8fcfa888f452e8b54a9438342d8d58ca18cb4a214486ad6fe77d046f03ac6044ec30912070c7d8ec821286c39b47b2530519238691c5ab26c9024173026167e2c67e68cd04108f7de0f4d2c20f57563b7dc4ae816e3c2ea447"]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_WOL_MODES={0x48c, 0x2, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@multicast2}, @generic="8b84f44d2beed75fcac694d32563351f12c4051bd6f1ad157020f77c2890a014046882ae3211f2eb24e99f03752ee85f69ae64a9298a31608f11a85c8014e1de8632d910f6f9ad37ee09c8a860af9b9a08acce4ca1b8df0d2dfc3cb99034f9c6cf286da11f4a9f66a522b110df0d10d67d52ae2caaac0b3253d6b2935371f1bf1dd101deed86", @nested={0x8, 0x117, 0x0, 0x1, [@nested={0x4}]}, @generic, @generic="173c207726862065a0eba5f78d67aa8e223a7868c4a5eaa9b0e490a028c7c3c923a9a3e63e42b92a9a18cb0c13193b42f20c2acffe7d1b5b43aaf2cda5fc9744c47dea2a738d199f854d2fdf7e780840e521db82239051db0cf4e03ae1b97e19e4fdfffd3f45923ef7794b45bf970c0cd55f81df7f1d788e23ef46b802466aa64a15d008a66259b6b3649fafa4efbb2299168493184c11d5e8", @generic="ad286b29b09df208922ef112508e0389e33f972565afe9f1f7c7bf57e3402cd89f9d847d4f7e521b2bf0a60ba6", @generic="bb003669f9d07f2932d457c753f87b5665753f595e1a338543deb39ac06c9b47ab57c347d35d4e42f74c31c749015632315f679937f98d4fa71353dd9bae16e45260205e19ee08bbdc81a0aac37c3cccac30a45acbbfe3a12ce285ff611f947e466360172c440b7564c2aecc8b09d2de82775a6925a2ac5da76bb983b0933d46ccf5c26004fc6d0c038bb673afa25b4c8f115f4b1c526d54b934bca803c4442e2416c0014982187dcacee5a3a723aefa3efc", @generic="cbce25eed79b7ee0a3b7b0cc2d43c19b07609b1a719de51489f977afcf8447e459ee30ceaaa9981b6c9c0b570a0e9bfc07464f408b1b0596f222e9f669ca1b1ab2dad7c8569286ebb6668f0dbeb048836a5543c94160c70322864353d0049feba703911c1df94066576daa3ec4dfedbe0743beb7a36ec4421cedaf2889def521e45347ef2f3a3a8ff16106cdcc681367849b452eb541501a543f4bdd193048ccbb0e535a4327c25bd45b4adc82aef608f86990ad5e365cb2f472056f058131190a32926c8c2bf7ee8466b689eae577e9280a089117a079608fa7f1c69d8fda9d", @nested={0x121, 0x135, 0x0, 0x1, [@typed={0x18, 0x59, 0x0, 0x0, @str='*/\xf5}-*,\'@$)$}&}.\'\\.\x00'}, @nested={0x4, 0xf0}, @generic="fc048694d3c9137fe237e28003769f7b9b915af440e4b576326f68d57765fa5e5372fba522f7132ba3d22b320ff39db5703a1cde2df2e262d8841ad2aaed8f8bb00fd6eca8b5bf5246a6d0eebfaf43a50ad54a0faf861d7bbbca01a3524ab792b9a0c736d4c1e7aecd07fa4b148229194ce54028b10b7abad72ac1c01bdc0c113b7dad6f60f9f6c84d3b1e5d334d548e684d29de9e5374f845", @nested={0x4, 0x56}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x985}, @generic="956b416936e7147fa33e8c2112abd055000c28b662cd186e4f85898f51b1396ee26414f96842385d8de37266193d526fc57704ac92355fdfa6c1c58d90f88a4f032cbcd51395457cc7897ad12acb9485d76c76b17acf5579"]}, @generic="de0143566b49c1803290bec4582de23c9619390102beef8d6d42080c9d251a81fab656d7f7a3a009c688c60e4efee4dc24e145ea97d200506208ae4cb1752f9c3ab8dbc9f580e19ea1a13571d4e14bd8bf549ace21e7fd6a08979cc40a35105aca50b36ed11dde015d21f171d2288168859f099a1455"]}, @ETHTOOL_A_WOL_MODES={0x3a5, 0x2, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @u32=0x5}, @generic="f52498e8211937392f761ed71e2dbacc6d", @nested={0x64, 0x7e, 0x0, 0x1, [@nested={0x4, 0x2d}, @generic="8addf6c4a6c836f800a7d772c4a443513ebf1082ecf3d244092df9c191fe753f7c263edc53cbab0387e731c2e2d77fe0137497703c6419246696223bc19c8b053ef82658539711222295dd1980", @generic="f4c313275f62ea0cde24a650aad05d"]}, @nested={0x8c, 0x12, 0x0, 0x1, [@typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@empty}, @generic="5b3ab3112a0893d29794e1f0446ead95089ce6ea63131a3c77ff89c03e1cbe859622c8f1cc683b699872871cbae1e74cc58c332f0185a6a589d1481906213266c80bb35e62cda29381ab446205b2856a8a2fc5f9379d4bd97325ce6fd3539fe7", @typed={0x14, 0x85, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="75bd368558392624b5421163bf90db23f2b54160b28cc7a6b2621fe92284be63207acc043b5d3560a827c473b1b19584d5ecdda6c6dcffde625a528befb4b2723246a671c92c6cee65533bd24d4da8a94639c61cb75f75c44640de09e2b433cce62e73a04c5127f7b7b62321cfe7551236944dab94187b044f6423269fb62f4e1a226e85f80024fccae0bd93522f", @generic="70b32b2aa955ad23685bbe41c70025ecab0910b9ced98f4a55d2e0178a3f2360cdad6eaddef65efbb474deeeff04e025db22d4046dde", @nested={0x1d4, 0x6, 0x0, 0x1, [@generic="8aff6bd89a313f569f64a2d90180e0c96006d8c75d6940f0eb2b2d86a060515a6aab492d28ce28c7a67b61c68cf09d82c4ab93ce76dccf53a1faf4882287df21497e04014a0827b204bce920db15ffef0e02e26e35f79ddae4c00318e238ad7ccc2425aae4db0f97ee2a96f10adc5120b8bb0097c7847489c41f2bd0495173613e3664474c", @generic="da7f49fafb3bf79cfc782cb298858d68e7d878d9951c26744723c4eb9cfa0762e0df6a420509d956d88ed90d02c4a4a04ddd938319c626f56c29c206d44ac0d008e9a00914509519c24ce51649ae6d9ab7671f54bcfece2ca697e85a450a65c7a32bb19f864ada8c92542fa02e5828b2e5dce235873751caedcf70aba04243a8337b5e1b0d94ad01e5e53a1eeac439d22937f983ca", @generic="5e69a3bfb2c17c5b2d622ab647de7d0fe001ce121ff43764303fede8e246d184cf8a38c6fe786176f82acb3da229a81287128ab860add5c94585682e83e0c884599831a7676c95e8b458e6d188b58b4d630ac53a9fe1b9343ad47cbc31cadc0d4c3fb7206d66ee3a053eada08e80d6cb9a655b19895edb5026b5a23caf3d9ca929c31edf15b86eb0eda63b995362", @typed={0x8, 0x125, 0x0, 0x0, @u32=0x200}, @typed={0x6, 0x10e, 0x0, 0x0, @str='^\x00'}, @typed={0x8, 0x112, 0x0, 0x0, @pid=r3}, @typed={0x8, 0xe9, 0x0, 0x0, @u32=0x163c51bd}, @nested={0x4, 0xf2}, @nested={0x4, 0xbd}]}]}, @ETHTOOL_A_WOL_SOPASS={0x8, 0x3, "d7ab3a92"}]}, 0xa38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x400, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xea, 0x4020009, 0x800000000000df, 0xeb1, 0xffffffffffffffff, 0x6) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) ioctl$auto(r8, 0x900064b7, r8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000300)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @raw=0x1, @raw=0x3, 0x0, 0x0, 0x0, 0x0}) r9 = setfsgid$auto(0x0) fchown$auto(0xffffffffffffffff, 0xee00, r9) mmap$auto(0x0, 0x10018, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) r10 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_UBI_IOCATT(r10, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r10, 0x40046f41, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) 3m15.149335298s ago: executing program 0 (id=123): r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x13}}, 0x3000c010) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x2ffffffffffe) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x407114}, 0x8) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0xfffffffffffffffd, 0xfee0, 0x6, 0x403, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(r2, 0x0, 0x400000000002) 2m59.808993317s ago: executing program 32 (id=123): r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x13}}, 0x3000c010) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x2ffffffffffe) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x407114}, 0x8) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0xfffffffffffffffd, 0xfee0, 0x6, 0x403, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(r2, 0x0, 0x400000000002) 2m48.830037517s ago: executing program 1 (id=190): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x200, 0x810003, 0x2000ffd, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f00000000c0)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x8, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(r2, 0x9, 0x69ce, &(0x7f0000000040)='(\x00\x02\x00\x00', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x93f3, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) mmap$auto(0x0, 0x80000000020009, 0x4000000000df, 0xeb1, r3, 0x8400) socket(0x22, 0x1, 0x100) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x7ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r4, 0x2, 0x9193) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2m47.41609003s ago: executing program 1 (id=194): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x183602, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs\x00\"p\x17\x9b\xdd\xb4\xed\xb9\xb0\xc7@\xd0_\xf9\xa1\x17tP\x86\xb1,\x93\x87\xae\x03\x8a\xc4\xb5q\xd4\x8c\xc3\xa2?\xe7\xf4\xb2\xd4\xe1\x93A+\xe9\x8d\xc9\xac9|\xc7\t\xff\'\xaa\xac|\xaa\x85\xa9\xd4j\x12\xca\xfe', 0x6, &(0x7f00000004c0)="77bec3605f85e082fbcf491e2b3b12fde18109d1f64859f820ba86bbb7abcf4c75f53e3ecb7fd57568812ae0e9433c2b0bb0f0c0db3d") ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x9, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) lseek$auto(0x3, 0x8, 0x1) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xffff, 0x5, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r5 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r5) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x0, 0x0) ioctl$auto_BLKSSZGET(r6, 0x1268, 0x0) 2m46.148289029s ago: executing program 1 (id=195): madvise$auto(0x200000000000106, 0x2000040080000003, 0x2400) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0xfffffffe, 0x52, 0x0, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D1\x00', 0x10881, 0x0) prctl$auto(0x3e, 0x0, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) (async) r2 = socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) (async) syz_clone(0x282e711, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x1c9042, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000100)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1d, "011586f1c8b112f0059652a7b9638fe9"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7aa8f4c7) (async) io_cancel$auto(0x3, 0x0, 0x0) (async) mmap$auto(0x0, 0xffffffffffffff01, 0x3, 0xeb1, r2, 0x8000) (async) r5 = socket(0xa, 0x3, 0xd2) ustat$auto(0x801, 0x0) (async) listen$auto(r5, 0x800) mmap$auto(0x0, 0x2020009, 0xb, 0x11b9, r4, 0x80000003) (async) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) (async) write$auto(r3, &(0x7f0000000000)='/dev/audio1\x00', 0x4) (async) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) 2m44.242220469s ago: executing program 1 (id=199): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000e800400ca80a460d59f0efc3ec0a8f45a2dffef8a5cfae44d01fa055aa6d8cb6e80e241c7fdafa1507648930aa38ac11fc5dce5a5c212e08e90cd03dd2ba51fa1ba6de7d7923f6c5b1bb5df15bdbe08efb50a2a7cd8ca3a9f84a1fd14b82a54bd53d97adf75dc06592e771ff690f6cc86f47e322ccc2016ba8dc6a56d1779b8456135662ed3460767ac2c65f0f4acf3fb9e5f9b658e7d5e66d07b94cb5036ea9bd52f9bbf86f6fc799652339b54b5e3bf124439837d19096822f67cfce1269b3472d31d7e8dcb810dc6fc448e72910a4d44421f2909fba66402ddd7a6745511b5055ec23a9fe98772e61f8e66f7ecc87bd1bb336c666f02438ce4ec91522be8a9554ee7341badefdd75d4445131d0b5a711938f34b780512f24e6690aa76ea00980c2295936a008bcccd73d802abd50e99696e7e31c89c79ce4a9b8d52c3a1eb6ab7f2588f794695d921d3ebf5dd669e893ccd6c5d4d3bd9f014dca2303bc4d623178ff664517d4c65161d377b34341bbaa4b033922ad7847346a5581ceda1dab107e9f5109a5c8af8457ba7764b1eee0343be94d2b299b9eb8d1f0b4d4523051df7f2277a9087e230565ac893f19d83fbc7cc351602a1a08570b05d674ea37f9afb6bc62f5f7657dd3713a2ea6b58c32f8e7c57ca13a66f8f80e7e1fb0736a1d2342f7ccbbc86eecb0c8e5aa110b7f6808281b68d6f7b6ddf9a9b11507ff2b121cf75b79c32ad582b73e07721d1054c88776640acbdc38a7e7ea0df4159c1b2da3e686e024f16acb46b3eb03563e59c509542f67d4c5ff1b388eab4a8dec42786af1e3376181c3943981430de83802a44edf42f68a7d619960404f80bd08508b18382dab65e3cffc5fa942245102abd7be2c5d4c68401d2f6d2a2c42f8968509b95aec53af6a4082eabf2c7447aabfc36dc1da8163e934587d8835e61c8453a94e1b127b8d9784b75498e7ae73dc42e65b0afbfb41e3a802c5027a65b494d62b19365c382d66844880760196cd40712c78e2e288820cb2f34379df51a85ffbee675e1598c2a9a113255efe73cca36f087cbfa885491a2f3e68449436e0fca75598a4e8a15fd3704d302c4405cbeabe3d57567ad993cc92f879343be898b945c69ba5f5f1d64deaffa32c79808620e95f6fc31090dbca556da91d595f5867f45f23cc8fce505b38e63bc6f4a236556713339d5d4aa664c44f7826129538d0e157f336135ea4795bd66da491815172af611ea76ce42cb713f4e2c8b4ea92f10c2c99e78693ed70fce906aaab57ff48801c9fa03d09dc7706252ca29458af66616a42934ad215cc47c776bb4793bc856ce67524e1e74f4b3686051ebbeb6ac03e735e5a70411316aaf96499792da9f54f81761c707ee6a5adb8b3d5f8d070ebec81ab1733ec2e4abb364bfef0430396402f2950ab40c25e475ae51613d2c5fdf44e879f36528dc83d34a314ced34fb83b64d25bf548cc79dbc8583503b8ef03e36ef313b870d1f84a666ab362e29d25eb3dad6021972c3c45e30d224b29f3f03e0ca26790cb594ab705368fc76a6bd8d0fc883e3566c50739318feddcfca26268830b8f1621747ce77c8e809930a68d9969ce5741df3bdc2142c17b99a71d6da05348a58890d5978259a7cecc0a28ecb61681c84e5a59ed8c3478b2f4384342c1ea0d83d79f8aa00c40a66fb07d90b10ab049848ad54f7765a707c63c059b0d11841ea3d046cb1f47962f48420ced1697fda0bca7d9813045172391db71c42eff09db637020e927289877df4a3f7a2fae5a43859896d662a339bf80e50cc7563f8e4a3ccc39d846169bf2ccc486af07e35059829a783535ca03371e7a826825e4549a2e9422af50c25b3e5accd0f9602f5b50d69c3a7c83eb8ddf49050b429913539bc3f9e440cd506b410c9518cd62f9bacb4aecd9e588881f4acac5a867132e68a070e094393654695ed4f3a7e7619fbfd98668a9ee077460b0ca6832eaeb53340ec449172c25dcc56e3afb20c706cc0f175835635b2b052c77012e25721c4bdae210979eb691d3c8fb6d552b8eaa56f4876bce7e034ef08567b905e94e7209fee65de32e4faa4ed34c99478d784b6f302c8b87fdfdde132a5fe333d5fefa4231e4264f944a7d1a4cc1cee8dbba444b9ea9196d4c97f04d543b0c37f9a5dc9af0ee8e57ae631d291af40714a192343db5b32c241b840fcc1cb9aeb72e46ed7b42abcac4ad8edf2e2f9db14c2377b8a75b700bac7bc85d097530362b3cbce5e2da7384c2ca8538ba368cd08d09a182c83ca34704bb428828358155de5b15c2b1805a029c7aa123bd2c34189e1561a27700c495b9ad0e14fead9f618ce2abcbcf93d392f63aa2386dde1312ac0657d6280195305c75547208e9e7ba64ee1105136e76a7248ead12313bbc3f6c9afd4219d31917775da5efc363b5d76af78ef62e61849e8d43fbeaca7e0500e9ab76e7dcd855273c1e0b70ed0f4ee54064fa189eb7d5b41b5d948037bbf92bee5bc1b511c3fa3381a881d6b293feb6072b1e7c2e592281b8f7eda430f4c4eb89c8abb08ce3757863a726c8c531e0300cafafa3b85c588372ef3bcca6fc65fcbba544deea1cfe52a345ded4f752c07923105177c183bfe02b95a3f1f580547b76a56c6a3f26600c1b992d287179b771dc5560e11013787080dd0259231b0145db8e63f8130b03f47ad2af6c27f44aae9b063a45f6122e58b868fdd0703d086b328643db27206a6fcd73bd8dc64d28191eee9f6a29c3c48f149d43a4dd4af67cd232510ac0dfb963800a1736317c0582e7d3ad2babba44faacb094fa592237a87f51582eb608e7ed487b4a6f4a7a486e33d397ca1ceb9c9f3f6943e7355c4a4905086bc727b6100b18778999adafbc275060780c8ff3d491d2373a559fae0054e296d67471b6c5f100bc46dd2998adc9d5d73bb4ae734159a6b252749c11ca27be84fb1ed3e5e7e08170cd4ef705e098d1b99f870fcf434de7edc3f921b820a854de549d156b9c2c2dc385f045318d8c741b82065b2db4b7bb7eb657436680cb136e899e96c43f9c8b05edcf76ddc9b874227bde3abed5c7a209b2de9bc4a697d113bee2a0671ddad481c60646a07333a8ee6c26b59aa52d3a52ac78c4521db522bf7068a7cd0bc94b57256bd95f9fd5d7e8f5038b1ae156dd222ed5636695a4974875252c6f4ffea7bbc592a7f983c48b2a1d28c2899ade27eab4b84e5e8df5748aaabfcbb11bf81493db4bd11c17ae38160e7f369e5d349ac689bbd469ee29c14ea392e0a90b4bef7827feb854866a4b708c04d6f5555234fba6115b2e9997754bbf178c049b7d77b2223f83ebf60a8cb99c9ad6a999033e15f0050af031cef4926eb14b0902c4f668c4768c206f28d3725a83f638ec55241a67b6e50a1c16541fcc0eead0a6175ee1477c8823978d7bc21241faee47b18cc7d193cbdbd9855eb90066fb3810790d80dea9315c3dc9a7238a80655f4849707772bb879b1ce9d91458ac4c16a7c0c6677b1ef17bc4fa0a83a1817b1f3d8ba64db14986dba57a633ae0080e8e0f5c298d8f56caad1430abd28e6c375ac80867a58b35cfb064b64acf0544492cf86752e5787a067678abe314f4d38390402f955737b995c798eae18a20cf5eef02de3fb2fcbb38daebd6fc6f7a4e4c25a3b8fc83728020effd05bca49f420cbde29dcd7f6bf18ca49dcc6b0c15db0229a3dae6ba9a579cce34fb13f881c450e6b4b27ac8af9eb4c718812e6d9ffea41f9bd4fc31be63248d7451bea9e7cb39bb29ed116af7904e93d3f2ee8fd37a822b2a4dc9b055e38d534b561176e0e527e2cfc9225915c998ab73ab3efe400f363e86f866d079ff62520492a7fbc0a0eb028c760cf667b8ec142790055b1bb4d901ce623e7dbfbe847247d76993213745babcc990931c27275094199cdf191bc6e356b166dc6c2b1a7044e54369b42fd455359c892dabd2d643e30da4b6f5bbdfee5932baff5d3dcd242c9a6b547c9ca08e598c87bbc31119349c70d2d68dabea4046e0006d876021cd7f831f7295a6bd9c234a73c1161a79a4b48930d9cd61cca69c0a888138ba501a99125615cbe18c1d22b86dc2066b74b37c6d122177b763ad1b4f7804838408a3f0d9d0d1ff7fa7b06b8b4d232f76b8aaf8c0c24baebdc18e0d5ee9b87c53bfe82a483daea7607f1da9a1ffecf0d9ce845ed70fae10b78fc0e60dde135f20b9c979683dadaf8c1938027c602a47061fd27ad705017fb7d8d857b09173ac4dc2092b7cafd16a068580182d4385f948e11cffc2997cd51b268d6c49906227e70200d5f2d39d461454d75c643144869d87583aec09cdea198f1c9ea613fbe9336df22dbd21fd6242d186ae209a351d4eb9911f361e0dd6f8bcdd1a00d938044aecbeaf00abb3df9b3af99c6f6d90c3520d36fe2a55addecc0086a58aeffff6e6cade5afe58351d168dc40eeeef01fc3e31c8c67d264be94f71cd4db810a57b9c330d9d5ef732f0d6a7658b5a0175bfbb5ff479ec494a1f4ca44b68670ebfa35066b5b0b465618eba7ba32cdbde54a908f85cb496545389a98a23f78f5c99438da7038071cf9173609d447260d58eb114e7d14ba8d5dcac54abb50dffad1f8e6c9393233981eccdb87202c5681b8904fbe095fb1a0c834cec31afcde2de9969879c2c7211397a62fcfef5568fa2a62bbf9376ac14f014ad7c53dacfc334ab43e8f08bebe1e8c96dd51b1b93ab9c7bb4d547948232193db13c43a0e8ec9d5af4a2c1006888ca3f441bb378a6aa94f6602b9b80d84cdfc4cfa57f91ab034bdabbdec3521c429409dcb22236222eb79bd1cd29aeebffb54df1fd04e7f7c8ee4c3ec9635d6331d2a3e789ddcb59d573d3b694d1d07d703584deda17ed458cc889d5e189de77985edef0dde8c896db2924d91df41a3ee08e32c25a6117adb55d160ff922926e0aac203416c7acdb65526305b840247192934748d60db993eb645812b9b7d7ab1b79d45c530417415a22dd9546178b54e6842faa8e478061af2197ddc4e30bde39c8b3e4cb09da50cccece72370bfa0482c04931f1bde40235a201c6e5890cdee9c29fa0c6b4565730ee7cb163ba6a63f1e3678046ad73cc241f49c876df73113204834337bc5ccd2b7297a2d6bec1c30204a05b6ba91fc1370dbbde622c7072abe925d9237ddcf5dc47d1784337fd3f25107e236bcfc1dc352aa0cf3ebf576c0dfd1890c283b30892fe0b9bf75b8294813ea89ca367f7cc330e781ea25380d02923142019d4b45db31c8cdce3188809cc453dabf1648e5286da1f0aa4fb4f199616ac48501f70069db6595540c1e80f9556956fa5e31565ec0bcdff39c5de8268c5831ef03c98149561241472ad30c3f5659921019f6d7f4f1ac62dfcfcc740b94813ea2531745c3f03caa0d52097a1328d515c6eee016aad65125c1a3b8b6cd41333a9cf353045d8c35315adb7d5b4b3c66ef34c7cc255054f7ce845f6dea3e5ddb020f34973dce7ae2345a80cdb8d1db6507075e6893fabc5db1e3e0330d3fc7d669d596000ae64dd397b71d9d88562c096a12dfe4c9f2a888bba68cf23de27ef7e533f87636c78b1de7617d34289854aaf54d3626b9fa6ecf2ae5cf8c40a5ec083c44f1c0da260296ea4b9222bcdb0eef3baa0ab7fb7a98ed86a9f3634ca9dd622efcd2786bc0a22acec3453e74fcee407a94d381638f4e9f423b89d251ae2393d1e4d713dead8c0c162d009434eb8eda45e35dd8225dc1e36069e5024c922d355770ac93549a874f4e322163aa8ceeb0a6d4c3cdf29b95513c4c2678fa24e53c167241bca67bc106bca9c3eac1eff1c5b0ab789c81ba931d60dcd8463f02e8822c2f863bd1d77e3e5c300000400bd000800f300", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x408a00, 0x0) prctl$auto(0x203e, 0xffffffffffff5414, 0x0, 0x5, 0xfffffffffffffffd) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000380)='\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xf1!\xd6\xd6\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xcc^\x04\x9cXK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r5, 0x0, 0x594c, 0x9fffffffd) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r8, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r0, 0x550c, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000bce57fe06d50fd8ef25fbede21944322f86107a202de74005bc80d745c2bc670320997511b83264d2edec24fd66de3f1e8f386b07a3aebb6c883b784fbde9462b2be18393dfc6badb079560ead4b612b821d1bc9dd13bac0523bcb4233cbebba8a0c891498", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30001000b3600d276706ed08a6fee0c9e35cd9dc037ffdaa0884dcf28e95ef8afd115b70b16ea6b802d3223d1c56ec6e259f7ce60ddb9d6cab8505aebcccdb1abe0d7be8918fe35ba56be7997f", @ANYRES16=r3, @ANYBLOB="010029bd700002dca7637c05a9db9f1928da538ac063df25030000000400087918480180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/usb/usbmon/20t\x00', 0x4e00, 0x0) 2m43.0768791s ago: executing program 1 (id=202): futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, &(0x7f0000000040)={0xb, 0x401}, &(0x7f0000000080)=0x6f5, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x801, 0x106) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)) bind$auto(0x3, 0x0, 0x6a) getsockopt$auto(r0, 0x6, 0x2, 0x0, 0x0) 2m42.768302413s ago: executing program 1 (id=203): mmap$auto(0x0, 0x7b60818d, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000140)=ANY=[@ANYBLOB="501eff0ae441383f68a1ad2096471f766dbd6ceab362823e9415e8b86e91605dc4dfc443c26ef0ec5c360cdcd86113cc792a6d", @ANYRES16=r0, @ANYBLOB="010029bd700002dcdf251f000000180001801400020076657468305f766972745f7769666900"], 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = getpid() mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200)) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0xa, 0x2, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x18, 0x800, 0xd) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) ptrace$auto_PTRACE_PEEKTEXT(0x1, r3, 0xc, 0x5) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_UI_SET_SNDBIT(r4, 0x4004556a, &(0x7f00000000c0)=0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x1000000000000004) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') 2m27.193813363s ago: executing program 33 (id=203): mmap$auto(0x0, 0x7b60818d, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000140)=ANY=[@ANYBLOB="501eff0ae441383f68a1ad2096471f766dbd6ceab362823e9415e8b86e91605dc4dfc443c26ef0ec5c360cdcd86113cc792a6d", @ANYRES16=r0, @ANYBLOB="010029bd700002dcdf251f000000180001801400020076657468305f766972745f7769666900"], 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = getpid() mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200)) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0xa, 0x2, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x18, 0x800, 0xd) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) ptrace$auto_PTRACE_PEEKTEXT(0x1, r3, 0xc, 0x5) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_UI_SET_SNDBIT(r4, 0x4004556a, &(0x7f00000000c0)=0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x1000000000000004) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') 9.331104127s ago: executing program 5 (id=607): mmap$auto(0x7, 0x200040009, 0xdf, 0x800000000009b72, 0xffffffffffffffff, 0x8da) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="0107000000000000000000000000000000000000000000000000000061dc217bd3f375114d43271e9d342d564be237545bdfafb46f8aba762787e7c60ab7d2f6e11acbf2c1e9b0152a318fd0860c8670c9b20553d55953ae536ba7d43ed29c14e4263549f25970030970c5675f3b71188a136a9ef182c73ad9941605a170dc133598fc573f723e8bf58c8f9a4e520119cd9cfb3733e0c5c0ef42af531bae56e5ebe9863a4d2a5801b76da72f7634c7a39d669e6d24255cad300a789468c7de0c24"], 0x14}, 0x1, 0x0, 0x0, 0x20048810}, 0x4804) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r3, 0x0, 0x5) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x80000001}, 0x10001}, 0x8000005, 0x20000000) bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 5.916578634s ago: executing program 2 (id=616): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0xfff6, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x40380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b842, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x2, 0x5, 0x9, 0x2, 0x0}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0xfff6, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x40380, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b842, 0x0) (async) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x2, 0x5, 0x9, 0x2, 0x0}) (async) 5.362053432s ago: executing program 3 (id=618): r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x2404c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 5.183370118s ago: executing program 4 (id=619): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/orangefs/uevent\x00', 0x301, 0x0) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x280100, 0x0) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x800000001, 0x0, 0x6, 0x0) (async) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) (async) read$auto(r2, 0x0, 0x2) (async) r4 = setfsuid$auto(0xee00) (async) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) (async) r6 = setfsgid$auto(0x0) fchown$auto(0xffffffffffffffff, 0xee00, r6) (async, rerun: 64) keyctl$auto(0xfff, 0xffffffffffffffff, r5, r6, 0x7fffffff) (async, rerun: 64) write$auto(r1, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) (async) write$auto(r0, 0x0, 0x1) 5.144352607s ago: executing program 3 (id=620): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x4c800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 5.066118256s ago: executing program 2 (id=621): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_PHYS(r0, 0x4008556c, 0x0) mmap$auto(0x20000000000, 0x4, 0x3, 0x12, r0, 0x168d) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x345480, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000000080)="e8fce183272ad4fe3b64f8da0ad5e39e34aa12b150e7eb22932a14a5fd5d934e3ef9a59f209cbdef796d8b9860d63b45e1d54520aecc1632769f560109258f49c4868565216ed7f146a0b9a7a0a866f0e7604d390e61bfb4e6951496438c4ccd9be842601922859c232764446b006edc2b78d781adea37fcfdb0e09119b53082dda164e6bb80cd48756e1fe9b635ed1a665a5a4e683cb0358bd28a8df384061ffba751c224240cf01be4d40315798c66a014ed8bd5af", 0xb6) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) getsockopt$auto_SO_SNDBUF(r2, 0x8, 0x7, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', &(0x7f00000001c0)=0x5) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) 4.700426416s ago: executing program 3 (id=622): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ptyb2/power/runtime_active_time\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x86840, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x309502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x4, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x88U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2000a, 0x1, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cmdline\x00', 0x80000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sysinfo$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyuf\x00', 0x102, 0x0) ioctl$auto(0x3, 0x5412, r0) 4.447172869s ago: executing program 5 (id=623): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x675, 0x8000012, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) socket(0x26, 0x6, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r2, 0x4020ae76, r3) 4.380043782s ago: executing program 2 (id=624): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpgrp(0xffffffffffffffff) r1 = prctl$auto(0x1000000003b, 0x1, r0, 0x3, 0x2a) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) r3 = socket(0x23, 0x5, 0x0) bind$auto(r3, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000895}, 0x24000004) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'lo\x00'}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf9}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000400), r1) r9 = waitid$auto(0x8, r1, &(0x7f0000000440)={@_si_pad}, 0x400, &(0x7f00000004c0)={{0x4, 0x8}, {0xa0, 0x9}, 0x0, 0x40, 0x6, 0xa0, 0x1, 0x6, 0x4, 0x8, 0x2, 0x9, 0x34, 0x5, 0x0, 0x4462}) sendmsg$auto_TASKSTATS_CMD_GET(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r0}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8010) fdatasync$auto(0xffffffffffffffff) 4.302175686s ago: executing program 4 (id=625): io_uring_setup$auto(0x2, &(0x7f0000000100)={0x6, 0xff, 0x18000, 0x8, 0x78, 0x0, 0xffffffffffffffff, [0x2, 0xdb1, 0x4], {0x2a9412da, 0x1000, 0x8, 0xff, 0x8, 0x4, 0x3, 0x1, 0x2}, {0x70, 0x7, 0x8, 0x5, 0x6, 0x1, 0x8b7a, 0x8, 0x3}}) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 4.195303523s ago: executing program 4 (id=626): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x17, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0x8ae02, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r1 = getpid() select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) ioctl$auto(0x3, 0xc040563e, r0) 3.931798706s ago: executing program 5 (id=627): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/connect_type\x00', 0x103280, 0x0) r1 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/psample/out_tc_occ_max\x00', 0x12200, 0x0) close_range$auto(r1, r0, 0x2b5) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003800)=""/168, 0xa8) 3.76646428s ago: executing program 4 (id=628): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@iter_create={0xffffffffffffffff, 0x3ff}, 0x2ad) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x80, 0x0) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r0, r0) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1}, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1584789b5fba10c73e3c620bab07ff3986ceea152c531c358dd8415b54d27f014d8d1486256931375f87a250f9a3926fe7eee403287db0453bf8649a9032d5fd695f897d8c3f5fc715f47b1ed0f0f7c9866230d284f333ba91b3d8da13f4834645fd8f75490fcf81c0abd474f1e32c1525a3f74f8a3f1b10adb1bd57e886733720f124f51b8fc6058f684c1862322a85337571db4c2c334bb1ff849c15a5119b35cd97edddd75d3a48fa5e19fc3c61c67ebc4976fde77c75c6fa5ee726294e768aad5e0167bd6f3df4064cc746b34c2a70b7626b7f24ae1c2504d8de", @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000008000a00080000000500070000000000080009009c781e01060002000100000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 3.719399894s ago: executing program 5 (id=629): keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) mmap$auto(0x0, 0x400005, 0xdb, 0x16, 0x2, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3ae55be8b5f870918621c10d9e916f6fe4fca6d7515871f05cc91f4246f6515662789a97d863c26cfd02b1cf15933b053fbdab9b22b1", 0x4e) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (rerun: 64) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) (async) newfstatat$auto(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x5, 0xd4e, 0x3, 0xfb, 0xee00, 0xee00, 0x0, 0x9, 0xa, 0x4, 0x0, 0x80000000, 0xfffffffffffffff4, 0x4, 0xfff, 0x7, 0x4}, 0x2) (async) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, 0x0) (async) mmap$auto(0x1, 0x3, 0x3, 0x55, r1, 0x8001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$auto_check_wx_fops_(r3, &(0x7f0000000080)=""/228, 0xe4) mlockall$auto(0x5) (async, rerun: 64) mmap$auto(0x2, 0x40000a, 0x2bb, 0x14, 0x2, 0x3) (async, rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/sit0/ioam6_id\x00', 0x88800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r4) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000440), 0xc8643, 0x0) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 3.206114572s ago: executing program 2 (id=630): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x3, 0xbb8, 0x100, 0x18, r0, 0x3) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0x39, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) socketpair$auto(0x4081, 0x5, 0xffc, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.982596751s ago: executing program 3 (id=631): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x4c800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 2.718246415s ago: executing program 2 (id=632): madvise$auto_MADV_FREE(0x5, 0x9, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) 2.636705649s ago: executing program 3 (id=633): mmap$auto(0x86, 0xa00006, 0x400002, 0x11, 0xffffffffffffffff, 0x300000000003) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000140)='/dev/audio1\x00\xf9\n!\xe1\xaf\xe5~d\x81\xa4\x10N=\xe5\xfa\x9c!pQ\t\xc2\xcf\x18O\x87)\xca\x84Km)\xa5# ,\x14\xc7Z\x99 S', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x201, 0x0, 0x200, 0x1, 0xfffffffffffffff8, 0x6, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x8, 0x0, 0xc]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xe, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x60d80, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x400005, 0xdb, 0x16, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) newfstatat$auto(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x5, 0x0, 0x5, 0xfb, 0xee00, 0xee00, 0x0, 0x7, 0x8, 0x4, 0x4000000000, 0xfffffff780000000, 0xfffffffffffffff4, 0x4, 0xfff, 0x7, 0x4}, 0x2) 2.4651284s ago: executing program 4 (id=634): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpgrp(0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_uring_setup$auto(0x85, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x487, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x3b71, 0x0) r3 = prctl$auto(0x1000000003b, 0x1, r0, 0x3, 0x2a) write$auto(0xca, &(0x7f0000000000)='\x0462\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mq_timedreceive$auto(r4, 0x0, 0x4a, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(&(0x7f0000000080)=0xe7da) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) dup2$auto(0x0, 0x4) unshare$auto(0x40000080) pipe$auto(&(0x7f0000000040)=r3) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x1, 0x8, 0x0) 1.618534872s ago: executing program 5 (id=635): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4, 0x6, 0xdc) syslog$auto(0x4, &(0x7f0000000000)='%\x00', 0x0) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) 825.606586ms ago: executing program 2 (id=636): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/ip6gre0/statistics/rx_fifo_errors\x00', 0x101000, 0x0) read$auto(r5, &(0x7f0000000280)='veth1_vlan\x00', 0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4000000003, 0x62, 0x8000001f, 0x100072c, 0x6d3e, 0x0, 0x2, 0xfffffffffffffffb]}, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r6) shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3\xb95\x98F\xf8Q\x01\x00\x93^', 0xfff) mkdir$auto(&(0x7f0000000040)='./file1\x00', 0x2) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x414a00, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) r8 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r8, &(0x7f0000000280)={0x0, 0x5}, 0xb) 756.029732ms ago: executing program 3 (id=637): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/pcrypt/pdecrypt/serial_cpumask\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008004) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_io_timeout/verbose\x00', 0x182, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e23, @multicast2}, 0x6d) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty56\x00', 0x4800c0, 0x0) ioctl$auto_TIOCGICOUNT2(r5, 0x545d, &(0x7f0000000100)="cefbea028472a3cb26290c04e36d506c1446a157a3ee57fcf5ba70c15feae3d9e9af0c95e79a5d6e3e1044020f802cd45b721b579533bbaadc966f89359b6f63c4ed3f3b0ee697239679c40e1a51f0aa855efc2ca7e03a478412fe9fda2db32b650f7cd06a5ca12f4de655e6110079820fb7b93d26282bf0d74e74054bbdec554325472bcc7cb502414a7895cf825f176019fdacc7ea6511f8fad734ca42ed6db17b7e7933d787c2fbf3cd") connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @broadcast}, 0x4a) setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xfb3) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/nr14/statistics/rx_errors\x00', 0x28400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/admmidi2\x00', 0x20400, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r7, r8, 0x0, 0x1) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/194, 0xc2) 733.93518ms ago: executing program 4 (id=638): r0 = socket(0xa, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0xff, &(0x7f00000002c0)='$\xfe\x88\xc8\x91\x8bo\xc6#\x00\x00\x00\xfd\xb1\x00\xdb\xf7i\xb8\xb0,\x86\x00\x9c~\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xe6\xb7\xd3\xe4\x00\x00\x00T@\xf0\x8b\xd4XE\x17\xaa\b', &(0x7f0000000180)=0x538) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x69, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x7f, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) 0s ago: executing program 5 (id=639): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xef70, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0x5450, 0x0) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0xf4, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xa7, 0x2b, 0x0, 0x1, [@generic="ea22294a6ae0aebcdf8bbb88514b7486d777af4f4b42b3755dab60d9f7276d6ebcd2f62f64b120e26c40be62b0db8bbc9bd18368632686659385222f61baf8ac045a2c236361b77259c6854e6b20f5389b62d203dac96bb4424e8c9c6da4f3675ba4cea249a0ddd3a48cfd7d49a8c16a4f670e2bcb67fe742399738ac4d225b4c12e9307a905a689ae6ab956bca10f50efd70dc1801477567fbafae4a1913f0af42238"]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@generic="55eab14fc8b7442d1c00b9aabeb6dc5b36e7f11a"]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) kernel console output (not intermixed with test programs): : Enslaving as an active interface with an up link [ 101.467760][ T5868] team0: Port device team_slave_0 added [ 101.516352][ T5868] team0: Port device team_slave_1 added [ 101.536877][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.544864][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.552093][ T5873] bridge_slave_0: entered allmulticast mode [ 101.560314][ T5873] bridge_slave_0: entered promiscuous mode [ 101.599829][ T5864] team0: Port device team_slave_0 added [ 101.606443][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.614753][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.621987][ T5873] bridge_slave_1: entered allmulticast mode [ 101.629551][ T5873] bridge_slave_1: entered promiscuous mode [ 101.638198][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.645524][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.672298][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.686075][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.693160][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.719361][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.747081][ T5864] team0: Port device team_slave_1 added [ 101.778343][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.786176][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.812657][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.854139][ T5863] Bluetooth: hci0: command tx timeout [ 101.870256][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.877653][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.904722][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.941197][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.950470][ T5863] Bluetooth: hci2: command tx timeout [ 101.956112][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.980603][ T5860] hsr_slave_0: entered promiscuous mode [ 101.988453][ T5860] hsr_slave_1: entered promiscuous mode [ 101.997724][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.004772][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.030977][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.037128][ T5863] Bluetooth: hci1: command tx timeout [ 102.090697][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.097928][ T5863] Bluetooth: hci3: command tx timeout [ 102.103931][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.130225][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.157580][ T5873] team0: Port device team_slave_0 added [ 102.167308][ T5873] team0: Port device team_slave_1 added [ 102.223286][ T5868] hsr_slave_0: entered promiscuous mode [ 102.229984][ T5868] hsr_slave_1: entered promiscuous mode [ 102.236982][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 102.242821][ T5868] Cannot create hsr debugfs directory [ 102.305155][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.312186][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.338536][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.379088][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.386403][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.412444][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.430557][ T1175] cfg80211: failed to load regulatory.db [ 102.511751][ T5864] hsr_slave_0: entered promiscuous mode [ 102.518439][ T5864] hsr_slave_1: entered promiscuous mode [ 102.525340][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 102.531108][ T5864] Cannot create hsr debugfs directory [ 102.670881][ T5873] hsr_slave_0: entered promiscuous mode [ 102.681116][ T5873] hsr_slave_1: entered promiscuous mode [ 102.688338][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 102.695044][ T5873] Cannot create hsr debugfs directory [ 102.964615][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.979746][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.019230][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.078587][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.160186][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.176537][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.214230][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.242859][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.311983][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.324246][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.338210][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.350101][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.481763][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.505121][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.519032][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.531691][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.620777][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.689948][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.708609][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.716010][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.747582][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.754886][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.805314][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.820644][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.866743][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.890425][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.897619][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.934045][ T5863] Bluetooth: hci0: command tx timeout [ 103.940034][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.947239][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.976804][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.013709][ T5863] Bluetooth: hci2: command tx timeout [ 104.028536][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.035761][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.095846][ T5863] Bluetooth: hci1: command tx timeout [ 104.119696][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.126930][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.157552][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.173979][ T5863] Bluetooth: hci3: command tx timeout [ 104.278476][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.311009][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.318293][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.374545][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.381753][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.598627][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.776557][ T5860] veth0_vlan: entered promiscuous mode [ 104.806539][ T5860] veth1_vlan: entered promiscuous mode [ 104.858513][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.931280][ T5860] veth0_macvtap: entered promiscuous mode [ 104.971508][ T5860] veth1_macvtap: entered promiscuous mode [ 104.998415][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.041379][ T5868] veth0_vlan: entered promiscuous mode [ 105.067870][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.096108][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.105257][ T5868] veth1_vlan: entered promiscuous mode [ 105.140239][ T2949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.152843][ T2949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.184678][ T2949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.218337][ T2949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.248588][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.326096][ T5868] veth0_macvtap: entered promiscuous mode [ 105.339250][ T5864] veth0_vlan: entered promiscuous mode [ 105.387645][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.395504][ T5868] veth1_macvtap: entered promiscuous mode [ 105.410660][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.419340][ T5864] veth1_vlan: entered promiscuous mode [ 105.480786][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.488803][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.503854][ T5873] veth0_vlan: entered promiscuous mode [ 105.548886][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.559289][ T5873] veth1_vlan: entered promiscuous mode [ 105.585120][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.592545][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.632298][ T5864] veth0_macvtap: entered promiscuous mode [ 105.645243][ T2949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.674004][ T5864] veth1_macvtap: entered promiscuous mode [ 105.685850][ T2949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.717111][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.760960][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.793817][ T5873] veth0_macvtap: entered promiscuous mode [ 105.840793][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.892293][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.902788][ T5873] veth1_macvtap: entered promiscuous mode [ 105.967540][ T2949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.986946][ T2949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.013453][ T5863] Bluetooth: hci0: command tx timeout [ 106.037729][ T2949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.072316][ T2949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.093940][ T5863] Bluetooth: hci2: command tx timeout [ 106.101528][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.103625][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.117892][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.168068][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.176515][ T5863] Bluetooth: hci1: command tx timeout [ 106.241047][ T2949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.245618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.258697][ T5863] Bluetooth: hci3: command tx timeout [ 106.266353][ T2949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.315410][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.325777][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.346701][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.355617][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.424900][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.432874][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.584196][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.593725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.618223][ T5958] Console: switching to colour VGA+ 80x25 [ 106.625307][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.711785][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.785389][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.785418][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.893899][ T5961] Console: switching to colour frame buffer device 128x48 [ 107.019180][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.019210][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.238039][ T5973] input: jJǸ-9%vJ86 as /devices/virtual/input/input5 [ 107.442240][ T5977] FAULT_INJECTION: forcing a failure. [ 107.442240][ T5977] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.492567][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 107.492612][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.492636][ T5977] Call Trace: [ 107.492652][ T5977] [ 107.492664][ T5977] dump_stack_lvl+0x16c/0x1f0 [ 107.492713][ T5977] should_fail_ex+0x512/0x640 [ 107.492752][ T5977] should_fail_alloc_page+0xe7/0x130 [ 107.492787][ T5977] prepare_alloc_pages+0x3c2/0x610 [ 107.492835][ T5977] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 107.492867][ T5977] ? __lock_acquire+0x62e/0x1ce0 [ 107.492902][ T5977] ? __lock_acquire+0x62e/0x1ce0 [ 107.492939][ T5977] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.492991][ T5977] ? find_held_lock+0x2b/0x80 [ 107.493022][ T5977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.493069][ T5977] ? policy_nodemask+0xea/0x4e0 [ 107.493103][ T5977] alloc_pages_mpol+0x1fb/0x550 [ 107.493136][ T5977] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 107.493176][ T5977] folio_alloc_mpol_noprof+0x36/0x2f0 [ 107.493215][ T5977] shmem_alloc_folio+0x135/0x160 [ 107.493255][ T5977] shmem_alloc_and_add_folio+0x499/0xc20 [ 107.493289][ T5977] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 107.493320][ T5977] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 107.493354][ T5977] shmem_get_folio_gfp+0x67f/0x1600 [ 107.493388][ T5977] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 107.493419][ T5977] ? filemap_map_pages+0xf58/0x1670 [ 107.493451][ T5977] shmem_fault+0x1fe/0xa30 [ 107.493480][ T5977] ? __pfx_shmem_fault+0x10/0x10 [ 107.493510][ T5977] ? rcu_is_watching+0x12/0xc0 [ 107.493534][ T5977] ? __pfx_filemap_map_pages+0x10/0x10 [ 107.493572][ T5977] ? __pfx_filemap_map_pages+0x10/0x10 [ 107.493599][ T5977] __do_fault+0x10d/0x490 [ 107.493630][ T5977] ? __pfx_filemap_map_pages+0x10/0x10 [ 107.493657][ T5977] do_pte_missing+0xf50/0x3ba0 [ 107.493683][ T5977] ? do_raw_spin_unlock+0x172/0x230 [ 107.493722][ T5977] ? __pmd_alloc+0x3fb/0x930 [ 107.493760][ T5977] __handle_mm_fault+0x152a/0x2a50 [ 107.493789][ T5977] ? mt_find+0x3ef/0xa30 [ 107.493831][ T5977] ? __pfx___handle_mm_fault+0x10/0x10 [ 107.493855][ T5977] ? __pfx_mt_find+0x10/0x10 [ 107.493905][ T5977] ? find_vma+0xbf/0x140 [ 107.493936][ T5977] ? __pfx_find_vma+0x10/0x10 [ 107.493971][ T5977] handle_mm_fault+0x589/0xd10 [ 107.493997][ T5977] ? __bpf_trace_exceptions+0x1/0x40 [ 107.494036][ T5977] do_user_addr_fault+0x7a6/0x1370 [ 107.494076][ T5977] ? rcu_is_watching+0x12/0xc0 [ 107.494103][ T5977] exc_page_fault+0x5c/0xb0 [ 107.494134][ T5977] asm_exc_page_fault+0x26/0x30 [ 107.494156][ T5977] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 107.494181][ T5977] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 107.494204][ T5977] RSP: 0018:ffffc90004a17e68 EFLAGS: 00050212 [ 107.494223][ T5977] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 107.494237][ T5977] RDX: fffff52000942fda RSI: 0000000000000000 RDI: ffffc90004a17ec0 [ 107.494252][ T5977] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52000942fd9 [ 107.494266][ T5977] R10: ffffc90004a17ecf R11: 0000000000000000 R12: 0000000000000000 [ 107.494280][ T5977] R13: ffffc90004a17ec0 R14: 0000000000000000 R15: 0000000000000000 [ 107.494310][ T5977] _copy_from_user+0x98/0xd0 [ 107.494351][ T5977] __x64_sys_setrlimit+0xc6/0x160 [ 107.494387][ T5977] ? xfd_validate_state+0x61/0x180 [ 107.494423][ T5977] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 107.494462][ T5977] ? rcu_is_watching+0x12/0xc0 [ 107.494488][ T5977] do_syscall_64+0xcd/0x490 [ 107.494522][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.494545][ T5977] RIP: 0033:0x7f11aa98ebe9 [ 107.494571][ T5977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.494593][ T5977] RSP: 002b:00007f11ab8d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 107.494614][ T5977] RAX: ffffffffffffffda RBX: 00007f11aabb5fa0 RCX: 00007f11aa98ebe9 [ 107.494629][ T5977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 107.494642][ T5977] RBP: 00007f11aaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 107.494656][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.494670][ T5977] R13: 00007f11aabb6038 R14: 00007f11aabb5fa0 R15: 00007ffeeca65a68 [ 107.494700][ T5977] [ 107.973328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.094013][ T5863] Bluetooth: hci0: command tx timeout [ 108.113440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.122550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.134434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.143543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.151899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.160793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.169461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.203064][ T5863] Bluetooth: hci2: command tx timeout [ 108.267222][ T5863] Bluetooth: hci1: command tx timeout [ 108.333671][ T5863] Bluetooth: hci3: command tx timeout [ 108.443352][ T5984] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.254986][ T6002] capability: warning: `syz.0.14' uses 32-bit capabilities (legacy support in use) [ 109.407723][ T5998] random: crng reseeded on system resumption [ 110.409807][ T6023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.563689][ T6011] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 112.045552][ T6038] Zero length message leads to an empty skb [ 112.751528][ T6063] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 114.082186][ T6079] FAULT_INJECTION: forcing a failure. [ 114.082186][ T6079] name failslab, interval 1, probability 0, space 0, times 1 [ 114.099305][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 114.099349][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.099369][ T6079] Call Trace: [ 114.099379][ T6079] [ 114.099391][ T6079] dump_stack_lvl+0x16c/0x1f0 [ 114.099439][ T6079] should_fail_ex+0x512/0x640 [ 114.099485][ T6079] ? __kmalloc_noprof+0xbf/0x510 [ 114.099527][ T6079] ? lsm_blob_alloc+0x68/0x90 [ 114.099556][ T6079] should_failslab+0xc2/0x120 [ 114.099598][ T6079] __kmalloc_noprof+0xd2/0x510 [ 114.099644][ T6079] lsm_blob_alloc+0x68/0x90 [ 114.099675][ T6079] security_prepare_creds+0x30/0x270 [ 114.099728][ T6079] prepare_creds+0x56f/0x7d0 [ 114.099781][ T6079] __do_sys_landlock_restrict_self+0x13e/0x910 [ 114.099819][ T6079] ? rcu_is_watching+0x12/0xc0 [ 114.099857][ T6079] do_syscall_64+0xcd/0x490 [ 114.099912][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.099946][ T6079] RIP: 0033:0x7f651c78ebe9 [ 114.099972][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.100005][ T6079] RSP: 002b:00007f651d61c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 114.100047][ T6079] RAX: ffffffffffffffda RBX: 00007f651c9b5fa0 RCX: 00007f651c78ebe9 [ 114.100069][ T6079] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 114.100088][ T6079] RBP: 00007f651c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 114.100107][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.100125][ T6079] R13: 00007f651c9b6038 R14: 00007f651c9b5fa0 R15: 00007ffcd54e6778 [ 114.100166][ T6079] [ 114.849220][ T6091] process 'syz.3.32' launched '/dev/fd/4' with NULL argv: empty string added [ 115.030871][ T6087] FAULT_INJECTION: forcing a failure. [ 115.030871][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 115.059642][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 115.059679][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.059693][ T6087] Call Trace: [ 115.059701][ T6087] [ 115.059710][ T6087] dump_stack_lvl+0x16c/0x1f0 [ 115.059746][ T6087] should_fail_ex+0x512/0x640 [ 115.059780][ T6087] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 115.059815][ T6087] should_failslab+0xc2/0x120 [ 115.059847][ T6087] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 115.059879][ T6087] ? kasprintf+0xc7/0x100 [ 115.059906][ T6087] kvasprintf+0xbc/0x160 [ 115.059928][ T6087] ? __pfx_kvasprintf+0x10/0x10 [ 115.059970][ T6087] kasprintf+0xc7/0x100 [ 115.059993][ T6087] ? __pfx_kasprintf+0x10/0x10 [ 115.060018][ T6087] ? __is_module_percpu_address+0x1e0/0x440 [ 115.060061][ T6087] alloc_workqueue_noprof+0x114/0x200 [ 115.060094][ T6087] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 115.060134][ T6087] ? __pfx___debug_object_init+0x10/0x10 [ 115.060169][ T6087] nci_register_device+0x511/0xb80 [ 115.060198][ T6087] ? __pfx_nci_register_device+0x10/0x10 [ 115.060228][ T6087] ? lockdep_init_map_type+0x5c/0x280 [ 115.060267][ T6087] virtual_ncidev_open+0x141/0x220 [ 115.060295][ T6087] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 115.060321][ T6087] misc_open+0x35a/0x420 [ 115.060347][ T6087] ? __pfx_misc_open+0x10/0x10 [ 115.060372][ T6087] chrdev_open+0x234/0x6a0 [ 115.060404][ T6087] ? __pfx_chrdev_open+0x10/0x10 [ 115.060437][ T6087] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 115.060470][ T6087] do_dentry_open+0x982/0x1530 [ 115.060500][ T6087] ? __pfx_chrdev_open+0x10/0x10 [ 115.060537][ T6087] vfs_open+0x82/0x3f0 [ 115.060576][ T6087] path_openat+0x1de4/0x2cb0 [ 115.060614][ T6087] ? __pfx_path_openat+0x10/0x10 [ 115.060650][ T6087] do_filp_open+0x20b/0x470 [ 115.060679][ T6087] ? __pfx_do_filp_open+0x10/0x10 [ 115.060729][ T6087] ? alloc_fd+0x471/0x7d0 [ 115.060762][ T6087] do_sys_openat2+0x11b/0x1d0 [ 115.060799][ T6087] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.060848][ T6087] __x64_sys_openat+0x174/0x210 [ 115.060886][ T6087] ? __pfx___x64_sys_openat+0x10/0x10 [ 115.060935][ T6087] do_syscall_64+0xcd/0x490 [ 115.060977][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.061001][ T6087] RIP: 0033:0x7f651c78ebe9 [ 115.061019][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.061042][ T6087] RSP: 002b:00007f651d5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.061064][ T6087] RAX: ffffffffffffffda RBX: 00007f651c9b6180 RCX: 00007f651c78ebe9 [ 115.061079][ T6087] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 115.061094][ T6087] RBP: 00007f651c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 115.061108][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.061122][ T6087] R13: 00007f651c9b6218 R14: 00007f651c9b6180 R15: 00007ffcd54e6778 [ 115.061152][ T6087] [ 115.542163][ T6100] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 116.181184][ T6117] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.274281][ T6120] Invalid ELF header magic: != ELF [ 116.647481][ T6132] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.332959][ T6145] FAULT_INJECTION: forcing a failure. [ 117.332959][ T6145] name fail_futex, interval 1, probability 0, space 0, times 1 [ 117.365392][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(full) [ 117.365422][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.365438][ T6145] Call Trace: [ 117.365447][ T6145] [ 117.365455][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 117.365491][ T6145] should_fail_ex+0x512/0x640 [ 117.365528][ T6145] get_futex_key+0x293/0x1560 [ 117.365560][ T6145] ? __pfx_get_futex_key+0x10/0x10 [ 117.365588][ T6145] ? __mutex_trylock_common+0xe9/0x250 [ 117.365627][ T6145] futex_wake+0xea/0x530 [ 117.365664][ T6145] ? __pfx_futex_wake+0x10/0x10 [ 117.365711][ T6145] do_futex+0x1e3/0x350 [ 117.365740][ T6145] ? __pfx_do_futex+0x10/0x10 [ 117.365767][ T6145] ? __might_fault+0xe3/0x190 [ 117.365802][ T6145] mm_release+0x24e/0x300 [ 117.365829][ T6145] do_exit+0x68e/0x2bf0 [ 117.365867][ T6145] ? __pfx_do_exit+0x10/0x10 [ 117.365899][ T6145] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.365940][ T6145] ? find_held_lock+0x2b/0x80 [ 117.365967][ T6145] do_group_exit+0xd3/0x2a0 [ 117.366002][ T6145] get_signal+0x2673/0x26d0 [ 117.366039][ T6145] ? __pfx_get_signal+0x10/0x10 [ 117.366066][ T6145] ? do_futex+0x122/0x350 [ 117.366094][ T6145] ? __pfx_do_futex+0x10/0x10 [ 117.366126][ T6145] arch_do_signal_or_restart+0x8f/0x790 [ 117.366158][ T6145] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 117.366201][ T6145] ? __pfx___do_sys_close_range+0x10/0x10 [ 117.366236][ T6145] exit_to_user_mode_loop+0x84/0x110 [ 117.366272][ T6145] do_syscall_64+0x3f6/0x490 [ 117.366307][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.366330][ T6145] RIP: 0033:0x7f651c78ebe9 [ 117.366352][ T6145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.366374][ T6145] RSP: 002b:00007f651d5da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.366395][ T6145] RAX: fffffffffffffe00 RBX: 00007f651c9b6188 RCX: 00007f651c78ebe9 [ 117.366410][ T6145] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f651c9b6188 [ 117.366423][ T6145] RBP: 00007f651c9b6180 R08: 0000000000000000 R09: 0000000000000000 [ 117.366437][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.366450][ T6145] R13: 00007f651c9b6218 R14: 00007ffcd54e6690 R15: 00007ffcd54e6778 [ 117.366478][ T6145] [ 117.807575][ T6148] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.052828][ T6154] mmap: syz.2.41 (6154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.139675][ T5863] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 118.408043][ T6165] random: crng reseeded on system resumption [ 119.367995][ T30] audit: type=1800 audit(1756289768.761:2): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.47" name="version" dev="configfs" ino=9281 res=0 errno=0 [ 120.129898][ T6200] FAULT_INJECTION: forcing a failure. [ 120.129898][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 120.161456][ T6200] CPU: 1 UID: 0 PID: 6200 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 120.161507][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.161525][ T6200] Call Trace: [ 120.161535][ T6200] [ 120.161547][ T6200] dump_stack_lvl+0x16c/0x1f0 [ 120.161596][ T6200] should_fail_ex+0x512/0x640 [ 120.161642][ T6200] ? __kvmalloc_node_noprof+0x124/0x620 [ 120.161683][ T6200] should_failslab+0xc2/0x120 [ 120.161724][ T6200] __kvmalloc_node_noprof+0x137/0x620 [ 120.161760][ T6200] ? __pfx___mutex_lock+0x10/0x10 [ 120.161801][ T6200] ? traverse.part.0.constprop.0+0x392/0x640 [ 120.161840][ T6200] ? traverse.part.0.constprop.0+0x392/0x640 [ 120.161869][ T6200] traverse.part.0.constprop.0+0x392/0x640 [ 120.161916][ T6200] seq_read_iter+0x932/0x12c0 [ 120.161967][ T6200] seq_read+0x3a3/0x570 [ 120.161998][ T6200] ? __pfx_seq_read+0x10/0x10 [ 120.162037][ T6200] ? get_pid_task+0xfc/0x250 [ 120.162098][ T6200] full_proxy_read+0x12e/0x1a0 [ 120.162145][ T6200] ? __pfx_full_proxy_read+0x10/0x10 [ 120.162196][ T6200] vfs_read+0x1e4/0xcf0 [ 120.162240][ T6200] ? __pfx_vfs_read+0x10/0x10 [ 120.162272][ T6200] ? find_held_lock+0x2b/0x80 [ 120.162304][ T6200] ? __fget_files+0x204/0x3c0 [ 120.162345][ T6200] ? __fget_files+0x20e/0x3c0 [ 120.162376][ T6200] ? __fget_files+0x1b0/0x3c0 [ 120.162421][ T6200] __x64_sys_pread64+0x1eb/0x250 [ 120.162460][ T6200] ? __pfx___x64_sys_pread64+0x10/0x10 [ 120.162520][ T6200] do_syscall_64+0xcd/0x490 [ 120.162568][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.162599][ T6200] RIP: 0033:0x7f651c78ebe9 [ 120.162623][ T6200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.162653][ T6200] RSP: 002b:00007f651d61c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 120.162682][ T6200] RAX: ffffffffffffffda RBX: 00007f651c9b5fa0 RCX: 00007f651c78ebe9 [ 120.162702][ T6200] RDX: 00000000000000b8 RSI: 0000200000000140 RDI: 0000000000000004 [ 120.162720][ T6200] RBP: 00007f651d61c090 R08: 0000000000000000 R09: 0000000000000000 [ 120.162739][ T6200] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 120.162759][ T6200] R13: 00007f651c9b6038 R14: 00007f651c9b5fa0 R15: 00007ffcd54e6778 [ 120.162801][ T6200] [ 120.448767][ T5870] Bluetooth: hci2: command tx timeout [ 120.846449][ T6216] HfR: entered promiscuous mode [ 122.340447][ T6239] random: crng reseeded on system resumption [ 124.454102][ T6282] FAULT_INJECTION: forcing a failure. [ 124.454102][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.483179][ T6282] CPU: 1 UID: 0 PID: 6282 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 124.483220][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.483237][ T6282] Call Trace: [ 124.483248][ T6282] [ 124.483260][ T6282] dump_stack_lvl+0x16c/0x1f0 [ 124.483309][ T6282] should_fail_ex+0x512/0x640 [ 124.483362][ T6282] _copy_to_iter+0x463/0x1710 [ 124.483400][ T6282] ? hsr_node_table_show+0x3f6/0x5b0 [ 124.483437][ T6282] ? __pfx__copy_to_iter+0x10/0x10 [ 124.483468][ T6282] ? single_next+0xd/0x40 [ 124.483509][ T6282] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 124.483554][ T6282] seq_read_iter+0x719/0x12c0 [ 124.483602][ T6282] seq_read+0x3a3/0x570 [ 124.483632][ T6282] ? __pfx_seq_read+0x10/0x10 [ 124.483670][ T6282] ? get_pid_task+0xfc/0x250 [ 124.483732][ T6282] full_proxy_read+0x12e/0x1a0 [ 124.483779][ T6282] ? __pfx_full_proxy_read+0x10/0x10 [ 124.483828][ T6282] vfs_read+0x1e4/0xcf0 [ 124.483872][ T6282] ? __pfx_vfs_read+0x10/0x10 [ 124.483905][ T6282] ? find_held_lock+0x2b/0x80 [ 124.483939][ T6282] ? __fget_files+0x204/0x3c0 [ 124.483979][ T6282] ? __fget_files+0x20e/0x3c0 [ 124.484009][ T6282] ? __fget_files+0x1b0/0x3c0 [ 124.484049][ T6282] __x64_sys_pread64+0x1eb/0x250 [ 124.484079][ T6282] ? __pfx___x64_sys_pread64+0x10/0x10 [ 124.484116][ T6282] do_syscall_64+0xcd/0x490 [ 124.484156][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.484179][ T6282] RIP: 0033:0x7f50b1f8ebe9 [ 124.484198][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.484220][ T6282] RSP: 002b:00007f50b2d85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 124.484242][ T6282] RAX: ffffffffffffffda RBX: 00007f50b21b5fa0 RCX: 00007f50b1f8ebe9 [ 124.484257][ T6282] RDX: 00000000000000b8 RSI: 0000200000000140 RDI: 0000000000000004 [ 124.484271][ T6282] RBP: 00007f50b2d85090 R08: 0000000000000000 R09: 0000000000000000 [ 124.484285][ T6282] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 124.484299][ T6282] R13: 00007f50b21b6038 R14: 00007f50b21b5fa0 R15: 00007ffc2c7b7b18 [ 124.484328][ T6282] [ 125.253480][ T6302] ptrace attach of "./syz-executor exec"[6304] was attempted by "./syz-executor exec"[6302] [ 125.459802][ T6308] zero sized request [ 125.569580][ T6313] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 127.639022][ T6364] FAULT_INJECTION: forcing a failure. [ 127.639022][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.663160][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.1.79 Not tainted syzkaller #0 PREEMPT(full) [ 127.663200][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.663218][ T6364] Call Trace: [ 127.663228][ T6364] [ 127.663239][ T6364] dump_stack_lvl+0x16c/0x1f0 [ 127.663286][ T6364] should_fail_ex+0x512/0x640 [ 127.663337][ T6364] _copy_to_user+0x32/0xd0 [ 127.663370][ T6364] simple_read_from_buffer+0xcb/0x170 [ 127.663407][ T6364] proc_fail_nth_read+0x197/0x240 [ 127.663444][ T6364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.663480][ T6364] ? rw_verify_area+0xcf/0x6c0 [ 127.663513][ T6364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.663548][ T6364] vfs_read+0x1e4/0xcf0 [ 127.663590][ T6364] ? __pfx___mutex_lock+0x10/0x10 [ 127.663633][ T6364] ? __pfx_vfs_read+0x10/0x10 [ 127.663681][ T6364] ? __fget_files+0x20e/0x3c0 [ 127.663729][ T6364] ksys_read+0x12a/0x250 [ 127.663766][ T6364] ? __pfx_ksys_read+0x10/0x10 [ 127.663815][ T6364] do_syscall_64+0xcd/0x490 [ 127.663856][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.663888][ T6364] RIP: 0033:0x7f651c78d5fc [ 127.663913][ T6364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.663942][ T6364] RSP: 002b:00007f651d5da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.663971][ T6364] RAX: ffffffffffffffda RBX: 00007f651c9b6180 RCX: 00007f651c78d5fc [ 127.663991][ T6364] RDX: 000000000000000f RSI: 00007f651d5da0a0 RDI: 0000000000000005 [ 127.664009][ T6364] RBP: 00007f651d5da090 R08: 0000000000000000 R09: 0000000000000000 [ 127.664028][ T6364] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 127.664045][ T6364] R13: 00007f651c9b6218 R14: 00007f651c9b6180 R15: 00007ffcd54e6778 [ 127.664096][ T6364] [ 128.746582][ T6373] futex_wake_op: syz.2.82 tries to shift op by -2048; fix this program [ 128.781794][ T6373] futex_wake_op: syz.2.82 tries to shift op by -2048; fix this program [ 130.358508][ T6413] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 131.573420][ T6427] random: crng reseeded on system resumption [ 131.796696][ T6415] kexec: Could not allocate control_code_buffer [ 132.065561][ T6431] can: request_module (can-proto-3) failed. [ 132.615487][ T6440] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 5 [ 134.782665][ T5870] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 135.234233][ T6499] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 136.052584][ T6520] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 136.267294][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 137.556762][ T6546] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.816271][ T6549] ubi0: attaching mtd0 [ 137.827884][ T6549] ubi0: scanning is finished [ 137.832613][ T6549] ubi0: empty MTD device detected [ 138.242558][ T6549] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 138.354559][ T6549] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 138.364501][ T6549] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 138.371761][ T6549] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 138.388677][ T6557] ICMPv6: process `syz.3.121' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 138.414133][ T6549] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 138.459279][ T6549] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 138.547811][ T6549] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 520626343 [ 138.596441][ T6549] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 138.685272][ T6552] ubi0: detaching mtd0 [ 138.686762][ T6556] ubi0: background thread "ubi_bgt0d" started, PID 6556 [ 138.808364][ T6552] ubi0: mtd0 is detached [ 138.951498][ T6565] Console: switching to colour VGA+ 80x25 [ 140.449943][ T6588] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 140.465590][ T6588] Call Trace: [ 140.468893][ T6588] [ 140.471845][ T6588] mce_cpu_restart+0x98/0xb0 [ 140.476463][ T6588] ? __pfx_mce_cpu_restart+0x10/0x10 [ 140.481773][ T6588] smp_call_function_many_cond+0x1227/0x1600 [ 140.487802][ T6588] ? __pfx_mce_cpu_restart+0x10/0x10 [ 140.493207][ T6588] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 140.499064][ T6588] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 140.505435][ T6588] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 140.511470][ T6588] ? __pfx_mce_cpu_restart+0x10/0x10 [ 140.516807][ T6588] on_each_cpu_cond_mask+0x40/0x90 [ 140.522050][ T6588] set_bank+0x240/0x3a0 [ 140.526266][ T6588] ? __pfx_set_bank+0x10/0x10 [ 140.530985][ T6588] ? find_held_lock+0x2b/0x80 [ 140.535690][ T6588] ? __pfx_set_bank+0x10/0x10 [ 140.540407][ T6588] dev_attr_store+0x55/0x80 [ 140.544951][ T6588] ? __pfx_dev_attr_store+0x10/0x10 [ 140.550201][ T6588] sysfs_kf_write+0xf2/0x150 [ 140.554825][ T6588] kernfs_fop_write_iter+0x354/0x510 [ 140.560135][ T6588] ? __pfx_sysfs_kf_write+0x10/0x10 [ 140.565366][ T6588] vfs_write+0x7d0/0x11d0 [ 140.569734][ T6588] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 140.575568][ T6588] ? __pfx___mutex_lock+0x10/0x10 [ 140.580649][ T6588] ? __pfx_vfs_write+0x10/0x10 [ 140.585464][ T6588] ksys_write+0x12a/0x250 [ 140.589828][ T6588] ? __pfx_ksys_write+0x10/0x10 [ 140.594726][ T6588] do_syscall_64+0xcd/0x490 [ 140.599268][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.605187][ T6588] RIP: 0033:0x7f11aa98ebe9 [ 140.609623][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.629253][ T6588] RSP: 002b:00007f11ab8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.637695][ T6588] RAX: ffffffffffffffda RBX: 00007f11aabb5fa0 RCX: 00007f11aa98ebe9 [ 140.645691][ T6588] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 140.653689][ T6588] RBP: 00007f11aaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.661725][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.669720][ T6588] R13: 00007f11aabb6038 R14: 00007f11aabb5fa0 R15: 00007ffeeca65a68 [ 140.677731][ T6588] [ 140.680927][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.382265][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.389342][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.177698][ T6635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.200794][ T6635] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.221496][ T6635] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.243331][ T6635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.249479][ T6635] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.266207][ T6635] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.275704][ T6635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.294352][ T6635] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.304172][ T6635] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.325941][ T6635] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.354606][ T6635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.360705][ T6635] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.381557][ T6635] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.675880][ T6648] FAULT_INJECTION: forcing a failure. [ 144.675880][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 144.704798][ T6651] bond0: option all_slaves_active: invalid value (20) [ 144.723142][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.2.139 Not tainted syzkaller #0 PREEMPT(full) [ 144.723181][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.723198][ T6648] Call Trace: [ 144.723208][ T6648] [ 144.723220][ T6648] dump_stack_lvl+0x16c/0x1f0 [ 144.723270][ T6648] should_fail_ex+0x512/0x640 [ 144.723317][ T6648] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 144.723362][ T6648] should_failslab+0xc2/0x120 [ 144.723417][ T6648] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 144.723458][ T6648] ? lockdep_init_map_type+0x5c/0x280 [ 144.723503][ T6648] ? __d_alloc+0x32/0xae0 [ 144.723550][ T6648] __d_alloc+0x32/0xae0 [ 144.723595][ T6648] d_alloc_pseudo+0x1c/0xc0 [ 144.723647][ T6648] alloc_file_pseudo+0xcf/0x230 [ 144.723700][ T6648] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 144.723750][ T6648] ? alloc_fd+0x471/0x7d0 [ 144.723793][ T6648] sock_alloc_file+0x50/0x210 [ 144.723845][ T6648] __sys_socket+0x1c0/0x260 [ 144.723880][ T6648] ? __pfx___sys_socket+0x10/0x10 [ 144.723916][ T6648] ? syscall_user_dispatch+0x78/0x140 [ 144.723978][ T6648] __x64_sys_socket+0x72/0xb0 [ 144.724014][ T6648] do_syscall_64+0xcd/0x490 [ 144.724062][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.724096][ T6648] RIP: 0033:0x7f12d7f8ebe9 [ 144.724124][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.724157][ T6648] RSP: 002b:00007f12d8e90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 144.724189][ T6648] RAX: ffffffffffffffda RBX: 00007f12d81b5fa0 RCX: 00007f12d7f8ebe9 [ 144.724210][ T6648] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 144.724231][ T6648] RBP: 00007f12d8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.724251][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.724271][ T6648] R13: 00007f12d81b6038 R14: 00007f12d81b5fa0 R15: 00007fffc5ea1118 [ 144.724314][ T6648] [ 144.894700][ T6652] mkiss: ax0: crc mode is auto. [ 144.900467][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.928209][ T6651] FAULT_INJECTION: forcing a failure. [ 144.928209][ T6651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.932478][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.942230][ T6651] CPU: 1 UID: 0 PID: 6651 Comm: syz.3.141 Not tainted syzkaller #0 PREEMPT(full) [ 144.942275][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.942297][ T6651] Call Trace: [ 144.942308][ T6651] [ 144.942320][ T6651] dump_stack_lvl+0x16c/0x1f0 [ 144.942372][ T6651] should_fail_ex+0x512/0x640 [ 144.942429][ T6651] should_fail_alloc_page+0xe7/0x130 [ 144.942480][ T6651] prepare_alloc_pages+0x3c2/0x610 [ 144.942542][ T6651] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 144.942598][ T6651] ? rcu_is_watching+0x12/0xc0 [ 144.942644][ T6651] ? trace_mm_page_alloc+0x11f/0x1a0 [ 144.942699][ T6651] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 144.942742][ T6651] ? finish_task_switch.isra.0+0x21c/0xc10 [ 144.942779][ T6651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 144.942828][ T6651] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.942875][ T6651] ? finish_task_switch.isra.0+0x221/0xc10 [ 144.942923][ T6651] ? __lock_acquire+0x62e/0x1ce0 [ 144.942981][ T6651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.943044][ T6651] ? policy_nodemask+0xea/0x4e0 [ 144.943095][ T6651] alloc_pages_mpol+0x1fb/0x550 [ 144.943144][ T6651] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 144.943205][ T6651] folio_alloc_mpol_noprof+0x36/0x2f0 [ 144.943262][ T6651] vma_alloc_folio_noprof+0xed/0x1e0 [ 144.943316][ T6651] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 144.943372][ T6651] ? rcu_read_unlock+0x2d/0xb0 [ 144.943422][ T6651] do_wp_page+0x1e5b/0x4f00 [ 144.943487][ T6651] ? __pfx_do_wp_page+0x10/0x10 [ 144.943545][ T6651] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.943607][ T6651] ? ___pte_offset_map+0x2ad/0x4f0 [ 144.943666][ T6651] __handle_mm_fault+0x1b2d/0x2a50 [ 144.943716][ T6651] ? __pfx___handle_mm_fault+0x10/0x10 [ 144.943760][ T6651] ? lock_vma_under_rcu+0x1eb/0x530 [ 144.943812][ T6651] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 144.943862][ T6651] handle_mm_fault+0x589/0xd10 [ 144.943900][ T6651] ? __bpf_trace_exceptions+0x1/0x40 [ 144.943958][ T6651] do_user_addr_fault+0x60c/0x1370 [ 144.944019][ T6651] ? rcu_is_watching+0x12/0xc0 [ 144.944060][ T6651] exc_page_fault+0x5c/0xb0 [ 144.944105][ T6651] asm_exc_page_fault+0x26/0x30 [ 144.944140][ T6651] RIP: 0033:0x7f11aa948745 [ 144.944167][ T6651] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 144.944201][ T6651] RSP: 002b:00007f11ab8b0de0 EFLAGS: 00010293 [ 144.944231][ T6651] RAX: 0000000000000008 RBX: 00007f11ab6e7d60 RCX: 0000000000000000 [ 144.944253][ T6651] RDX: 0000000000000000 RSI: 00007f11aaa4f920 RDI: 00007f11ab6e7d60 [ 144.944275][ T6651] RBP: 00007f11ab8b0f00 R08: 0000000000000000 R09: 0000000000000005 [ 144.944297][ T6651] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f11aaa4f5a0 [ 144.944319][ T6651] R13: 0000000000000009 R14: 00007f11aab87460 R15: 0000000000000000 [ 144.944362][ T6651] [ 144.952063][ T6651] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 144.957767][ C0] hrtimer: interrupt took 224796559 ns [ 145.057850][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.260173][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.853498][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.255178][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.335355][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.413158][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.303273][ T6699] device-mapper: ioctl: Invalid ioctl structure: name , dev 8 [ 147.933202][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.333728][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.416053][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.493992][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.013563][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.422352][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.499098][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.573174][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.293431][ T6751] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 152.579148][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.932358][ T6772] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 154.747562][ T2949] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.814305][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.830329][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.855932][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.864164][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.873222][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.826807][ T6794] chnl_net:caif_netlink_parms(): no params data found [ 157.170570][ T30] audit: type=1800 audit(1756289806.551:3): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.178" name="lu_gp_id" dev="configfs" ino=12541 res=0 errno=0 [ 157.946640][ T5863] Bluetooth: hci4: command tx timeout [ 158.122776][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.150414][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.185677][ T6794] bridge_slave_0: entered allmulticast mode [ 158.224683][ T6794] bridge_slave_0: entered promiscuous mode [ 158.256448][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.273140][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.290885][ T6794] bridge_slave_1: entered allmulticast mode [ 158.322390][ T6794] bridge_slave_1: entered promiscuous mode [ 158.381864][ T6826] bond0: option all_slaves_active: invalid value () [ 158.464871][ T6841] phram: not enough arguments [ 158.708716][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.828724][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.429073][ T6794] team0: Port device team_slave_0 added [ 159.460076][ T6794] team0: Port device team_slave_1 added [ 159.885067][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.892220][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.963090][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.006009][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.015672][ T5863] Bluetooth: hci4: command tx timeout [ 160.023449][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.097548][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.786878][ T6794] hsr_slave_0: entered promiscuous mode [ 160.802101][ T6794] hsr_slave_1: entered promiscuous mode [ 160.839901][ T6794] debugfs: 'hsr0' already exists in 'hsr' [ 160.856411][ T6794] Cannot create hsr debugfs directory [ 162.045652][ T6794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.093254][ T5863] Bluetooth: hci4: command tx timeout [ 162.189718][ T6794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.277790][ T6794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.383834][ T6794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.847725][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.059743][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.428304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.435501][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.455056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.462199][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.191932][ T5863] Bluetooth: hci4: command tx timeout [ 165.516339][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.972742][ T6929] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 167.214971][ T6931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 168.062814][ T6794] veth0_vlan: entered promiscuous mode [ 168.327309][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.430785][ T6794] veth1_vlan: entered promiscuous mode [ 168.492440][ T30] audit: type=1800 audit(1756289817.881:4): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.195" name="dbroot" dev="configfs" ino=12984 res=0 errno=0 [ 168.517077][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.830484][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.050190][ T6794] veth0_macvtap: entered promiscuous mode [ 169.121927][ T6794] veth1_macvtap: entered promiscuous mode [ 169.380081][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.707821][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.832391][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.013746][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.127307][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.161960][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.248485][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.340776][ T37] bridge_slave_1: left allmulticast mode [ 170.360216][ T37] bridge_slave_1: left promiscuous mode [ 170.405002][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.459918][ T37] bridge_slave_0: left allmulticast mode [ 170.498104][ T37] bridge_slave_0: left promiscuous mode [ 170.528784][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.548057][ T6964] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 171.813721][ T6980] __vm_enough_memory: pid: 6980, comm: syz.1.203, bytes: 4398046511104 not enough memory for the allocation [ 171.841471][ T6980] FAULT_INJECTION: forcing a failure. [ 171.841471][ T6980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.855512][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT(full) [ 171.855550][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.855569][ T6980] Call Trace: [ 171.855579][ T6980] [ 171.855591][ T6980] dump_stack_lvl+0x16c/0x1f0 [ 171.855637][ T6980] should_fail_ex+0x512/0x640 [ 171.855689][ T6980] should_fail_alloc_page+0xe7/0x130 [ 171.855734][ T6980] prepare_alloc_pages+0x3c2/0x610 [ 171.855788][ T6980] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 171.855827][ T6980] ? arch_stack_walk+0xa6/0x100 [ 171.855877][ T6980] ? stack_trace_save+0x8e/0xc0 [ 171.855912][ T6980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 171.855950][ T6980] ? rcu_is_watching+0x12/0xc0 [ 171.855994][ T6980] ? kasan_save_track+0x14/0x30 [ 171.856029][ T6980] ? __kasan_slab_alloc+0x89/0x90 [ 171.856065][ T6980] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 171.856111][ T6980] ? __pmd_alloc+0xbf/0x930 [ 171.856156][ T6980] ? __handle_mm_fault+0xa06/0x2a50 [ 171.856186][ T6980] ? handle_mm_fault+0x589/0xd10 [ 171.856215][ T6980] ? __get_user_pages+0x551/0x34a0 [ 171.856261][ T6980] ? populate_vma_page_range+0x267/0x3f0 [ 171.856310][ T6980] ? __mm_populate+0x1d8/0x380 [ 171.856357][ T6980] ? vm_mmap_pgoff+0x37f/0x470 [ 171.856399][ T6980] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 171.856441][ T6980] ? __x64_sys_mmap+0x125/0x190 [ 171.856488][ T6980] ? do_syscall_64+0xcd/0x490 [ 171.856528][ T6980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.856578][ T6980] ? policy_nodemask+0xea/0x4e0 [ 171.856623][ T6980] alloc_pages_mpol+0x1fb/0x550 [ 171.856667][ T6980] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 171.856721][ T6980] alloc_pages_noprof+0x131/0x390 [ 171.856765][ T6980] pte_alloc_one+0x1c/0x3a0 [ 171.856799][ T6980] __pte_alloc+0x6d/0x3c0 [ 171.856842][ T6980] ? __pfx___pte_alloc+0x10/0x10 [ 171.856889][ T6980] ? do_raw_spin_lock+0x12c/0x2b0 [ 171.856941][ T6980] do_pte_missing+0x285a/0x3ba0 [ 171.856975][ T6980] ? do_raw_spin_unlock+0x172/0x230 [ 171.857026][ T6980] ? _raw_spin_unlock+0x28/0x50 [ 171.857061][ T6980] ? __pmd_alloc+0x3fb/0x930 [ 171.857118][ T6980] __handle_mm_fault+0x152a/0x2a50 [ 171.857163][ T6980] ? __pfx___handle_mm_fault+0x10/0x10 [ 171.857230][ T6980] handle_mm_fault+0x589/0xd10 [ 171.857272][ T6980] __get_user_pages+0x551/0x34a0 [ 171.857339][ T6980] ? __pfx___get_user_pages+0x10/0x10 [ 171.857399][ T6980] populate_vma_page_range+0x267/0x3f0 [ 171.857451][ T6980] ? __pfx_populate_vma_page_range+0x10/0x10 [ 171.857501][ T6980] ? __pfx_find_vma_intersection+0x10/0x10 [ 171.857550][ T6980] ? do_mmap+0x69c/0x1210 [ 171.857600][ T6980] __mm_populate+0x1d8/0x380 [ 171.857651][ T6980] ? __pfx___mm_populate+0x10/0x10 [ 171.857705][ T6980] ? up_write+0x1b2/0x520 [ 171.857755][ T6980] vm_mmap_pgoff+0x37f/0x470 [ 171.857805][ T6980] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 171.857860][ T6980] ? __x64_sys_futex+0x1e0/0x4c0 [ 171.857900][ T6980] ? __x64_sys_futex+0x1e9/0x4c0 [ 171.857945][ T6980] ksys_mmap_pgoff+0x7d/0x5c0 [ 171.857989][ T6980] ? xfd_validate_state+0x61/0x180 [ 171.858033][ T6980] ? __pfx_ksys_write+0x10/0x10 [ 171.858081][ T6980] __x64_sys_mmap+0x125/0x190 [ 171.858135][ T6980] do_syscall_64+0xcd/0x490 [ 171.858182][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.858214][ T6980] RIP: 0033:0x7f651c78ebe9 [ 171.858239][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.858269][ T6980] RSP: 002b:00007f651d5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 171.858299][ T6980] RAX: ffffffffffffffda RBX: 00007f651c9b6180 RCX: 00007f651c78ebe9 [ 171.858320][ T6980] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 171.858339][ T6980] RBP: 00007f651c811e19 R08: 0000000000000002 R09: 0000000000008000 [ 171.858358][ T6980] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 171.858377][ T6980] R13: 00007f651c9b6218 R14: 00007f651c9b6180 R15: 00007ffcd54e6778 [ 171.858417][ T6980] [ 172.708221][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.736812][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.754719][ T37] bond0 (unregistering): Released all slaves [ 172.891813][ T37] HfR: left promiscuous mode [ 172.983733][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.991580][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.259820][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.267108][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.281010][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.387288][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.729268][ T37] hsr_slave_0: left promiscuous mode [ 173.773236][ T37] hsr_slave_1: left promiscuous mode [ 173.789763][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.813875][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.863629][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.897042][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.992763][ T37] veth1_macvtap: left promiscuous mode [ 174.009537][ T37] veth0_macvtap: left promiscuous mode [ 174.026020][ T37] veth1_vlan: left promiscuous mode [ 174.034502][ T37] veth0_vlan: left promiscuous mode [ 174.587455][ T7012] netlink: zone id is out of range [ 174.603123][ T7012] netlink: zone id is out of range [ 174.633132][ T7012] netlink: zone id is out of range [ 174.638472][ T7012] netlink: zone id is out of range [ 174.676741][ T7012] netlink: zone id is out of range [ 174.683148][ T7012] netlink: zone id is out of range [ 174.721678][ T7012] netlink: zone id is out of range [ 174.728091][ T7012] netlink: zone id is out of range [ 174.739126][ T7012] netlink: zone id is out of range [ 174.748739][ T7012] netlink: zone id is out of range [ 175.903924][ T37] team0 (unregistering): Port device team_slave_1 removed [ 175.994459][ T37] team0 (unregistering): Port device team_slave_0 removed [ 179.195301][ T7071] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 180.662269][ T7065] kexec: Could not allocate control_code_buffer [ 181.369065][ T7083] net_ratelimit: 389 callbacks suppressed [ 181.369093][ T7083] openvswitch: netlink: Duplicate key (type 15). [ 181.393216][ T5863] Bluetooth: hci3: unexpected event 0x0f length: 726 > 4 [ 181.393268][ T5863] Bluetooth: hci3: unexpected event for opcode 0xf6ff [ 181.414205][ T7098] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.745096][ T7123] ecryptfs_miscdev_write: Invalid packet size [111] [ 183.211424][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 183.243624][ T7133] ubi0: attaching mtd0 [ 183.264598][ T7133] ubi0: scanning is finished [ 183.524583][ T7133] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 183.569374][ T7133] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 183.596507][ T7133] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 183.633094][ T7133] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 183.674262][ T7133] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 183.733193][ T7133] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 183.768010][ T7133] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 520626343 [ 183.813483][ T7133] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 183.874342][ T7138] ubi0: background thread "ubi_bgt0d" started, PID 7138 [ 183.913604][ T7136] ubi0: detaching mtd0 [ 183.937060][ T7136] ubi0: mtd0 is detached [ 186.901595][ T7175] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.971302][ T7178] kexec: Could not allocate control_code_buffer [ 188.189714][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.205123][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.223216][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.250093][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.263424][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.673207][ T7188] sp0: Synchronizing with TNC [ 189.234691][ T7217] ACPI: Can not change Invalid GPE/Fixed Event status [ 189.257249][ T7217] FAULT_INJECTION: forcing a failure. [ 189.257249][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 189.270538][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.2.238 Not tainted syzkaller #0 PREEMPT(full) [ 189.270581][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.270601][ T7217] Call Trace: [ 189.270612][ T7217] [ 189.270624][ T7217] dump_stack_lvl+0x16c/0x1f0 [ 189.270674][ T7217] should_fail_ex+0x512/0x640 [ 189.270718][ T7217] ? fs_reclaim_acquire+0xae/0x150 [ 189.270779][ T7217] should_failslab+0xc2/0x120 [ 189.270823][ T7217] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 189.270867][ T7217] ? sock_alloc_inode+0x25/0x1c0 [ 189.270921][ T7217] ? __pfx_sock_alloc_inode+0x10/0x10 [ 189.270969][ T7217] sock_alloc_inode+0x25/0x1c0 [ 189.271018][ T7217] alloc_inode+0x64/0x240 [ 189.271068][ T7217] sock_alloc+0x40/0x280 [ 189.271116][ T7217] __sock_create+0xc1/0x8d0 [ 189.271148][ T7217] ? lockdep_init_map_type+0x5c/0x280 [ 189.271201][ T7217] smc_create+0x15d/0x2a0 [ 189.271239][ T7217] __sock_create+0x335/0x8d0 [ 189.271280][ T7217] __sys_socket+0x14d/0x260 [ 189.271315][ T7217] ? __pfx___sys_socket+0x10/0x10 [ 189.271350][ T7217] ? xfd_validate_state+0x61/0x180 [ 189.271397][ T7217] ? __pfx___do_sys_prctl+0x10/0x10 [ 189.271460][ T7217] __x64_sys_socket+0x72/0xb0 [ 189.271493][ T7217] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.271537][ T7217] do_syscall_64+0xcd/0x490 [ 189.271586][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.271620][ T7217] RIP: 0033:0x7f12d7f8ebe9 [ 189.271645][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.271677][ T7217] RSP: 002b:00007f12d8e90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 189.271709][ T7217] RAX: ffffffffffffffda RBX: 00007f12d81b5fa0 RCX: 00007f12d7f8ebe9 [ 189.271731][ T7217] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 189.271750][ T7217] RBP: 00007f12d8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 189.271768][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.271796][ T7217] R13: 00007f12d81b6038 R14: 00007f12d81b5fa0 R15: 00007fffc5ea1118 [ 189.271839][ T7217] [ 189.271855][ T7217] socket: no more sockets [ 190.074001][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 190.336129][ T5863] Bluetooth: hci0: command tx timeout [ 191.756159][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.793241][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.837121][ T7197] bridge_slave_0: entered allmulticast mode [ 191.921463][ T7197] bridge_slave_0: entered promiscuous mode [ 191.954504][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.963392][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.013803][ T7197] bridge_slave_1: entered allmulticast mode [ 192.021539][ T7197] bridge_slave_1: entered promiscuous mode [ 192.423473][ T5863] Bluetooth: hci0: command tx timeout [ 192.435827][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.487084][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.938660][ T7253] FAULT_INJECTION: forcing a failure. [ 192.938660][ T7253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 192.951816][ T7253] CPU: 1 UID: 0 PID: 7253 Comm: syz.4.244 Not tainted syzkaller #0 PREEMPT(full) [ 192.951862][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.951883][ T7253] Call Trace: [ 192.951894][ T7253] [ 192.951906][ T7253] dump_stack_lvl+0x16c/0x1f0 [ 192.951958][ T7253] should_fail_ex+0x512/0x640 [ 192.952013][ T7253] get_futex_key+0x293/0x1560 [ 192.952055][ T7253] ? __pfx___futex_wait+0x10/0x10 [ 192.952105][ T7253] ? __pfx_get_futex_key+0x10/0x10 [ 192.952147][ T7253] ? __pfx_futex_wake_mark+0x10/0x10 [ 192.952207][ T7253] futex_wake_op+0x167/0xe40 [ 192.952260][ T7253] ? futex_private_hash_put+0x18a/0x300 [ 192.952304][ T7253] ? __pfx_futex_wake_op+0x10/0x10 [ 192.952353][ T7253] ? __pfx_futex_wait+0x10/0x10 [ 192.952416][ T7253] ? ksys_write+0x190/0x250 [ 192.952463][ T7253] do_futex+0x2e9/0x350 [ 192.952514][ T7253] ? __pfx_do_futex+0x10/0x10 [ 192.952570][ T7253] __x64_sys_futex+0x1e0/0x4c0 [ 192.952616][ T7253] ? fput+0x9b/0xd0 [ 192.952662][ T7253] ? __pfx___x64_sys_futex+0x10/0x10 [ 192.952706][ T7253] ? xfd_validate_state+0x61/0x180 [ 192.952755][ T7253] ? __pfx_ksys_write+0x10/0x10 [ 192.952806][ T7253] do_syscall_64+0xcd/0x490 [ 192.952854][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.952888][ T7253] RIP: 0033:0x7f7ce038ebe9 [ 192.952915][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.952951][ T7253] RSP: 002b:00007f7ce11ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.952982][ T7253] RAX: ffffffffffffffda RBX: 00007f7ce05b5fa0 RCX: 00007f7ce038ebe9 [ 192.953005][ T7253] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000200000000000 [ 192.953025][ T7253] RBP: 00007f7ce0411e19 R08: 0000000000000000 R09: 000000000a000000 [ 192.953046][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.953066][ T7253] R13: 00007f7ce05b6038 R14: 00007f7ce05b5fa0 R15: 00007fffbcd40568 [ 192.953109][ T7253] [ 193.285845][ T7197] team0: Port device team_slave_0 added [ 193.294511][ T7270] netlink: 338 bytes leftover after parsing attributes in process `syz.3.246'. [ 193.433118][ T7271] netlink: 338 bytes leftover after parsing attributes in process `syz.3.246'. [ 193.804821][ T7197] team0: Port device team_slave_1 added [ 194.130530][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.288248][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.410022][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.474974][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.493493][ T5863] Bluetooth: hci0: command tx timeout [ 194.526350][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.648226][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.812719][ T7197] hsr_slave_0: entered promiscuous mode [ 194.834083][ T7197] hsr_slave_1: entered promiscuous mode [ 195.004408][ T7282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.249'. [ 195.886921][ T7197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.985425][ T7197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.050294][ T7197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.075568][ T7197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.574563][ T5863] Bluetooth: hci0: command tx timeout [ 196.646453][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.906349][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.117304][ T7311] FAULT_INJECTION: forcing a failure. [ 197.117304][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 197.206473][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT(full) [ 197.206516][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.206530][ T7311] Call Trace: [ 197.206539][ T7311] [ 197.206548][ T7311] dump_stack_lvl+0x16c/0x1f0 [ 197.206584][ T7311] should_fail_ex+0x512/0x640 [ 197.206618][ T7311] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 197.206652][ T7311] should_failslab+0xc2/0x120 [ 197.206685][ T7311] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 197.206716][ T7311] ? shmem_alloc_inode+0x25/0x50 [ 197.206754][ T7311] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 197.206787][ T7311] shmem_alloc_inode+0x25/0x50 [ 197.206821][ T7311] alloc_inode+0x64/0x240 [ 197.206857][ T7311] new_inode+0x22/0x1c0 [ 197.206895][ T7311] shmem_get_inode+0x19a/0xfb0 [ 197.206939][ T7311] shmem_mknod+0x1a8/0x450 [ 197.206980][ T7311] ? __pfx_shmem_create+0x10/0x10 [ 197.207015][ T7311] lookup_open.isra.0+0x11d0/0x1580 [ 197.207045][ T7311] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 197.207085][ T7311] ? __pfx_down_write+0x10/0x10 [ 197.207132][ T7311] ? mnt_get_write_access+0x20c/0x300 [ 197.207173][ T7311] path_openat+0x893/0x2cb0 [ 197.207211][ T7311] ? __pfx_path_openat+0x10/0x10 [ 197.207241][ T7311] ? __lock_acquire+0xb97/0x1ce0 [ 197.207277][ T7311] do_filp_open+0x20b/0x470 [ 197.207306][ T7311] ? __pfx_do_filp_open+0x10/0x10 [ 197.207355][ T7311] ? _raw_spin_unlock+0x28/0x50 [ 197.207381][ T7311] ? alloc_fd+0x471/0x7d0 [ 197.207414][ T7311] do_sys_openat2+0x11b/0x1d0 [ 197.207451][ T7311] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.207500][ T7311] __x64_sys_open+0x153/0x1e0 [ 197.207537][ T7311] ? __pfx___x64_sys_open+0x10/0x10 [ 197.207581][ T7311] ? rcu_is_watching+0x12/0xc0 [ 197.207607][ T7311] do_syscall_64+0xcd/0x490 [ 197.207642][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.207666][ T7311] RIP: 0033:0x7f11aa98ebe9 [ 197.207685][ T7311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.207707][ T7311] RSP: 002b:00007f11ab8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 197.207729][ T7311] RAX: ffffffffffffffda RBX: 00007f11aabb5fa0 RCX: 00007f11aa98ebe9 [ 197.207744][ T7311] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000200000000800 [ 197.207759][ T7311] RBP: 00007f11aaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 197.207773][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.207787][ T7311] R13: 00007f11aabb6038 R14: 00007f11aabb5fa0 R15: 00007ffeeca65a68 [ 197.207816][ T7311] [ 197.470791][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.477966][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.488079][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.495336][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.551320][ T7197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.561790][ T7197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.841057][ T7323] zswap: compressor not available [ 198.872057][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.937935][ T7329] Setting dangerous option i915.mitigations - tainting kernel [ 199.274023][ T7352] ptrace attach of "./syz-executor exec"[5873] was attempted by "./syz-executor exec"[7352] [ 201.101430][ T7197] veth0_vlan: entered promiscuous mode [ 201.161222][ T7197] veth1_vlan: entered promiscuous mode [ 201.442993][ T7197] veth0_macvtap: entered promiscuous mode [ 201.494715][ T7197] veth1_macvtap: entered promiscuous mode [ 201.615745][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.692404][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.769584][ T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.806849][ T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.909475][ T34] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.973957][ T34] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.497061][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.563279][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.710848][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.747860][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.598250][ T7408] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 204.817688][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.834711][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.499825][ T7485] FAULT_INJECTION: forcing a failure. [ 207.499825][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 207.543150][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.4.273 Tainted: G U syzkaller #0 PREEMPT(full) [ 207.543201][ T7485] Tainted: [U]=USER [ 207.543212][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.543229][ T7485] Call Trace: [ 207.543240][ T7485] [ 207.543252][ T7485] dump_stack_lvl+0x16c/0x1f0 [ 207.543297][ T7485] should_fail_ex+0x512/0x640 [ 207.543340][ T7485] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 207.543375][ T7485] should_failslab+0xc2/0x120 [ 207.543411][ T7485] __kmalloc_cache_noprof+0x6a/0x3e0 [ 207.543438][ T7485] ? ip_vs_est_add_kthread+0x1d5/0x850 [ 207.543480][ T7485] ip_vs_est_add_kthread+0x1d5/0x850 [ 207.543524][ T7485] ip_vs_start_estimator+0x250/0x430 [ 207.543566][ T7485] ip_vs_control_net_init+0x158c/0x1d20 [ 207.543603][ T7485] __ip_vs_init+0x217/0x520 [ 207.543636][ T7485] ? __pfx___ip_vs_init+0x10/0x10 [ 207.543665][ T7485] ops_init+0x1e2/0x5f0 [ 207.543705][ T7485] setup_net+0x10f/0x380 [ 207.543739][ T7485] ? lockdep_init_map_type+0x5c/0x280 [ 207.543778][ T7485] ? __pfx_setup_net+0x10/0x10 [ 207.543818][ T7485] ? debug_mutex_init+0x37/0x70 [ 207.543850][ T7485] copy_net_ns+0x2a6/0x5f0 [ 207.543901][ T7485] create_new_namespaces+0x3ea/0xa90 [ 207.543944][ T7485] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 207.543993][ T7485] ksys_unshare+0x45b/0xa40 [ 207.544036][ T7485] ? __pfx_ksys_unshare+0x10/0x10 [ 207.544082][ T7485] ? xfd_validate_state+0x61/0x180 [ 207.544141][ T7485] __x64_sys_unshare+0x31/0x40 [ 207.544186][ T7485] do_syscall_64+0xcd/0x490 [ 207.544233][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.544260][ T7485] RIP: 0033:0x7f7ce038ebe9 [ 207.544283][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.544310][ T7485] RSP: 002b:00007f7ce11ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 207.544339][ T7485] RAX: ffffffffffffffda RBX: 00007f7ce05b5fa0 RCX: 00007f7ce038ebe9 [ 207.544358][ T7485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 207.544377][ T7485] RBP: 00007f7ce0411e19 R08: 0000000000000000 R09: 0000000000000000 [ 207.544400][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.544419][ T7485] R13: 00007f7ce05b6038 R14: 00007f7ce05b5fa0 R15: 00007fffbcd40568 [ 207.544461][ T7485] [ 209.628567][ T30] audit: type=1800 audit(1756289859.021:5): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.278" name="dbroot" dev="configfs" ino=15140 res=0 errno=0 [ 209.744567][ T7524] input: f as /devices/virtual/input/input11 [ 210.758932][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 210.992162][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 211.494169][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.559850][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.099959][ T7580] FAULT_INJECTION: forcing a failure. [ 212.099959][ T7580] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.177279][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.5.287 Tainted: G U syzkaller #0 PREEMPT(full) [ 212.177331][ T7580] Tainted: [U]=USER [ 212.177342][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.177361][ T7580] Call Trace: [ 212.177374][ T7580] [ 212.177395][ T7580] dump_stack_lvl+0x16c/0x1f0 [ 212.177444][ T7580] should_fail_ex+0x512/0x640 [ 212.177498][ T7580] get_futex_key+0x1d0/0x1560 [ 212.177553][ T7580] ? __pfx_get_futex_key+0x10/0x10 [ 212.177589][ T7580] ? futex_private_hash_put+0x176/0x300 [ 212.177640][ T7580] futex_wake+0xea/0x530 [ 212.177688][ T7580] ? futex_wait+0x120/0x380 [ 212.177738][ T7580] ? __pfx_futex_wait+0x10/0x10 [ 212.177788][ T7580] ? __pfx_futex_wake+0x10/0x10 [ 212.177842][ T7580] ? kmem_cache_free+0x2d1/0x4d0 [ 212.177879][ T7580] ? fd_install+0x225/0x750 [ 212.177911][ T7580] ? putname+0x154/0x1a0 [ 212.177965][ T7580] do_futex+0x1e3/0x350 [ 212.178010][ T7580] ? __pfx_do_futex+0x10/0x10 [ 212.178057][ T7580] ? __pfx___might_resched+0x10/0x10 [ 212.178097][ T7580] __x64_sys_futex+0x1e0/0x4c0 [ 212.178143][ T7580] ? __x64_sys_openat+0x174/0x210 [ 212.178196][ T7580] ? __pfx___x64_sys_futex+0x10/0x10 [ 212.178241][ T7580] ? xfd_validate_state+0x61/0x180 [ 212.178295][ T7580] ? fdget+0x187/0x210 [ 212.178338][ T7580] do_syscall_64+0xcd/0x490 [ 212.178388][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.178421][ T7580] RIP: 0033:0x7fb51b38ebe9 [ 212.178447][ T7580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.178480][ T7580] RSP: 002b:00007fb51c1760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.178520][ T7580] RAX: ffffffffffffffda RBX: 00007fb51b5b5fa8 RCX: 00007fb51b38ebe9 [ 212.178542][ T7580] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb51b5b5fac [ 212.178563][ T7580] RBP: 00007fb51b5b5fa0 R08: 00007fb51c177000 R09: 0000000000000000 [ 212.178584][ T7580] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 212.178604][ T7580] R13: 00007fb51b5b6038 R14: 00007fff58525780 R15: 00007fff58525868 [ 212.178648][ T7580] [ 215.893464][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 215.966400][ T7630] HfR: entered promiscuous mode [ 216.028807][ T7632] HfR: left promiscuous mode [ 217.648883][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.303'. [ 217.950499][ T7654] netlink: 354 bytes leftover after parsing attributes in process `syz.5.303'. [ 218.028708][ T30] audit: type=1800 audit(1756289867.421:6): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.299" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 218.112889][ T7641] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 218.172011][ T7641] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 218.237443][ T7641] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 220.189485][ T7691] netlink: 334 bytes leftover after parsing attributes in process `syz.3.310'. [ 220.794940][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 221.766107][ T7706] zswap: compressor not available [ 221.772415][ T7711] Setting dangerous option i915.mitigations - tainting kernel [ 221.978633][ T7721] random: crng reseeded on system resumption [ 222.009191][ T7726] FAULT_INJECTION: forcing a failure. [ 222.009191][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 222.095834][ T7726] CPU: 0 UID: 0 PID: 7726 Comm: syz.2.316 Tainted: G U syzkaller #0 PREEMPT(full) [ 222.095882][ T7726] Tainted: [U]=USER [ 222.095892][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.095920][ T7726] Call Trace: [ 222.095932][ T7726] [ 222.095944][ T7726] dump_stack_lvl+0x16c/0x1f0 [ 222.095996][ T7726] should_fail_ex+0x512/0x640 [ 222.096041][ T7726] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 222.096087][ T7726] should_failslab+0xc2/0x120 [ 222.096136][ T7726] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 222.096178][ T7726] ? shmem_alloc_inode+0x25/0x50 [ 222.096231][ T7726] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 222.096277][ T7726] shmem_alloc_inode+0x25/0x50 [ 222.096324][ T7726] alloc_inode+0x64/0x240 [ 222.096374][ T7726] new_inode+0x22/0x1c0 [ 222.096427][ T7726] shmem_get_inode+0x19a/0xfb0 [ 222.096489][ T7726] shmem_mknod+0x1a8/0x450 [ 222.096544][ T7726] ? __pfx_shmem_create+0x10/0x10 [ 222.096592][ T7726] lookup_open.isra.0+0x11d0/0x1580 [ 222.096633][ T7726] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 222.096687][ T7726] ? __pfx_down_write+0x10/0x10 [ 222.096731][ T7726] ? mnt_get_write_access+0x20c/0x300 [ 222.096785][ T7726] path_openat+0x893/0x2cb0 [ 222.096835][ T7726] ? __pfx_path_openat+0x10/0x10 [ 222.096878][ T7726] ? __lock_acquire+0xb97/0x1ce0 [ 222.096937][ T7726] do_filp_open+0x20b/0x470 [ 222.096977][ T7726] ? __pfx_do_filp_open+0x10/0x10 [ 222.097046][ T7726] ? _raw_spin_unlock+0x28/0x50 [ 222.097084][ T7726] ? alloc_fd+0x471/0x7d0 [ 222.097130][ T7726] do_sys_openat2+0x11b/0x1d0 [ 222.097183][ T7726] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.097251][ T7726] __x64_sys_open+0x153/0x1e0 [ 222.097302][ T7726] ? __pfx___x64_sys_open+0x10/0x10 [ 222.097365][ T7726] ? rcu_is_watching+0x12/0xc0 [ 222.097404][ T7726] do_syscall_64+0xcd/0x490 [ 222.097451][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.097483][ T7726] RIP: 0033:0x7f12d7f8ebe9 [ 222.097508][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.097539][ T7726] RSP: 002b:00007f12d8e90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 222.097568][ T7726] RAX: ffffffffffffffda RBX: 00007f12d81b5fa0 RCX: 00007f12d7f8ebe9 [ 222.097590][ T7726] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000200000000800 [ 222.097608][ T7726] RBP: 00007f12d8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.097627][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.097644][ T7726] R13: 00007f12d81b6038 R14: 00007f12d81b5fa0 R15: 00007fffc5ea1118 [ 222.097690][ T7726] [ 224.004030][ T30] audit: type=1326 audit(1756289873.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.5.321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb51b38ebe9 code=0x0 [ 224.262705][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.875248][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.893971][ T7741] netlink: 342 bytes leftover after parsing attributes in process `syz.4.320'. [ 225.192138][ T7764] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 225.193402][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.546851][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.858314][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 226.431150][ T12] bridge_slave_1: left allmulticast mode [ 226.461893][ T12] bridge_slave_1: left promiscuous mode [ 226.499460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.558964][ T12] bridge_slave_0: left allmulticast mode [ 226.597119][ T12] bridge_slave_0: left promiscuous mode [ 226.610572][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.083165][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.154523][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.178831][ T12] bond0 (unregistering): Released all slaves [ 228.724990][ T7791] openvswitch: netlink: Duplicate key (type 15). [ 229.906772][ T7798] kexec: Could not allocate control_code_buffer [ 230.311958][ T7818] sp0: Synchronizing with TNC [ 230.648331][ T12] hsr_slave_0: left promiscuous mode [ 230.682292][ T12] hsr_slave_1: left promiscuous mode [ 230.713947][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.721399][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.839808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.875812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.913095][ T12] veth1_macvtap: left promiscuous mode [ 230.918981][ T12] veth0_macvtap: left promiscuous mode [ 230.925359][ T12] veth1_vlan: left promiscuous mode [ 230.931193][ T12] veth0_vlan: left promiscuous mode [ 231.971381][ T7835] ubi0: attaching mtd0 [ 232.097946][ T7835] ubi0: scanning is finished [ 232.943906][ T7835] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 232.951417][ T7835] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 233.026527][ T7835] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 233.033983][ T7835] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 233.041414][ T7835] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 233.049239][ T7835] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 233.303083][ T7835] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 520626343 [ 233.343277][ T7835] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 233.380874][ T7839] ubi0: background thread "ubi_bgt0d" started, PID 7839 [ 233.388399][ T7836] ubi0: detaching mtd0 [ 233.445352][ T7836] ubi0: mtd0 is detached [ 234.704832][ T12] team0 (unregistering): Port device team_slave_1 removed [ 234.863779][ T12] team0 (unregistering): Port device team_slave_0 removed [ 237.193265][ T7850] zswap: compressor not available [ 237.228048][ T7857] Setting dangerous option i915.mitigations - tainting kernel [ 239.527716][ T7885] bond0: option all_slaves_active: invalid value () [ 239.540065][ T7904] FAULT_INJECTION: forcing a failure. [ 239.540065][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 239.588967][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.3.341 Tainted: G U syzkaller #0 PREEMPT(full) [ 239.589017][ T7904] Tainted: [U]=USER [ 239.589027][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.589045][ T7904] Call Trace: [ 239.589056][ T7904] [ 239.589068][ T7904] dump_stack_lvl+0x16c/0x1f0 [ 239.589116][ T7904] should_fail_ex+0x512/0x640 [ 239.589164][ T7904] ? __kmalloc_noprof+0xbf/0x510 [ 239.589205][ T7904] ? lsm_blob_alloc+0x68/0x90 [ 239.589232][ T7904] should_failslab+0xc2/0x120 [ 239.589274][ T7904] __kmalloc_noprof+0xd2/0x510 [ 239.589323][ T7904] lsm_blob_alloc+0x68/0x90 [ 239.589352][ T7904] security_sk_alloc+0x30/0x270 [ 239.589390][ T7904] sk_prot_alloc+0xfb/0x2a0 [ 239.589445][ T7904] sk_alloc+0x36/0xc20 [ 239.589495][ T7904] inet_create+0x3a1/0x1040 [ 239.589530][ T7904] ? inet_create+0x93/0x1040 [ 239.589571][ T7904] __sock_create+0x335/0x8d0 [ 239.589610][ T7904] __sys_socket+0x14d/0x260 [ 239.589642][ T7904] ? __x64_sys_openat+0x174/0x210 [ 239.589694][ T7904] ? __pfx___sys_socket+0x10/0x10 [ 239.589726][ T7904] ? xfd_validate_state+0x61/0x180 [ 239.589785][ T7904] __x64_sys_socket+0x72/0xb0 [ 239.589817][ T7904] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.589857][ T7904] do_syscall_64+0xcd/0x490 [ 239.589905][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.589936][ T7904] RIP: 0033:0x7f11aa98ebe9 [ 239.589960][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.589995][ T7904] RSP: 002b:00007f11ab8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 239.590025][ T7904] RAX: ffffffffffffffda RBX: 00007f11aabb5fa0 RCX: 00007f11aa98ebe9 [ 239.590045][ T7904] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 239.590064][ T7904] RBP: 00007f11aaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 239.590084][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.590103][ T7904] R13: 00007f11aabb6038 R14: 00007f11aabb5fa0 R15: 00007ffeeca65a68 [ 239.590143][ T7904] [ 240.332420][ T7859] netlink: 342 bytes leftover after parsing attributes in process `syz.2.334'. [ 242.942644][ T30] audit: type=1800 audit(1756289892.331:8): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.351" name="members" dev="configfs" ino=19588 res=0 errno=0 [ 242.965488][ T7988] ptrace attach of "./syz-executor exec"[7197] was attempted by "./syz-executor exec"[7988] [ 243.293196][ T7993] ICMPv6: process `syz.3.353' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 244.883274][ T8023] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 245.828312][ T8012] sd 0:0:1:0: PR command failed: 1026 [ 246.013461][ T8012] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 246.022685][ T8012] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 248.030350][ T8058] random: crng reseeded on system resumption [ 249.992201][ T8094] kAFS: Invalid Command on /proc/fs/afs/cells file [ 250.263812][ T8066] netlink: 350 bytes leftover after parsing attributes in process `syz.4.367'. [ 251.007733][ T8107] FAULT_INJECTION: forcing a failure. [ 251.007733][ T8107] name failslab, interval 1, probability 0, space 0, times 0 [ 251.203859][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.4.375 Tainted: G U syzkaller #0 PREEMPT(full) [ 251.203911][ T8107] Tainted: [U]=USER [ 251.203922][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.203941][ T8107] Call Trace: [ 251.203952][ T8107] [ 251.203965][ T8107] dump_stack_lvl+0x16c/0x1f0 [ 251.204015][ T8107] should_fail_ex+0x512/0x640 [ 251.204062][ T8107] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 251.204100][ T8107] should_failslab+0xc2/0x120 [ 251.204145][ T8107] __kmalloc_cache_noprof+0x6a/0x3e0 [ 251.204180][ T8107] ? resv_map_alloc+0x7e/0x400 [ 251.204230][ T8107] resv_map_alloc+0x7e/0x400 [ 251.204287][ T8107] hugetlbfs_get_inode+0x33f/0x730 [ 251.204331][ T8107] hugetlb_file_setup+0x15b/0x620 [ 251.204371][ T8107] ksys_mmap_pgoff+0x189/0x5c0 [ 251.204427][ T8107] __x64_sys_mmap+0x125/0x190 [ 251.204485][ T8107] do_syscall_64+0xcd/0x490 [ 251.204535][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.204568][ T8107] RIP: 0033:0x7f7ce038ebe9 [ 251.204594][ T8107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.204627][ T8107] RSP: 002b:00007f7ce11ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 251.204658][ T8107] RAX: ffffffffffffffda RBX: 00007f7ce05b5fa0 RCX: 00007f7ce038ebe9 [ 251.204679][ T8107] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 251.204699][ T8107] RBP: 00007f7ce0411e19 R08: 0000000000000004 R09: 0000300000000000 [ 251.204720][ T8107] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 251.204740][ T8107] R13: 00007f7ce05b6038 R14: 00007f7ce05b5fa0 R15: 00007fffbcd40568 [ 251.204783][ T8107] [ 252.293375][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.344295][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.759115][ T8148] random: crng reseeded on system resumption [ 254.767231][ T8181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 254.793025][ T8177] FAULT_INJECTION: forcing a failure. [ 254.793025][ T8177] name fail_futex, interval 1, probability 0, space 0, times 0 [ 254.862375][ T8177] CPU: 1 UID: 0 PID: 8177 Comm: syz.5.386 Tainted: G U syzkaller #0 PREEMPT(full) [ 254.862423][ T8177] Tainted: [U]=USER [ 254.862432][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.862449][ T8177] Call Trace: [ 254.862458][ T8177] [ 254.862466][ T8177] dump_stack_lvl+0x16c/0x1f0 [ 254.862501][ T8177] should_fail_ex+0x512/0x640 [ 254.862538][ T8177] get_futex_key+0x1d0/0x1560 [ 254.862570][ T8177] ? __pfx_get_futex_key+0x10/0x10 [ 254.862607][ T8177] futex_wake+0xea/0x530 [ 254.862644][ T8177] ? __pfx_futex_wake+0x10/0x10 [ 254.862683][ T8177] ? ksys_write+0x190/0x250 [ 254.862715][ T8177] do_futex+0x1e3/0x350 [ 254.862745][ T8177] ? __pfx_do_futex+0x10/0x10 [ 254.862781][ T8177] __x64_sys_futex+0x1e0/0x4c0 [ 254.862812][ T8177] ? fput+0x9b/0xd0 [ 254.862844][ T8177] ? __pfx___x64_sys_futex+0x10/0x10 [ 254.862872][ T8177] ? ksys_write+0x1ac/0x250 [ 254.862900][ T8177] ? __pfx_ksys_write+0x10/0x10 [ 254.862947][ T8177] do_syscall_64+0xcd/0x490 [ 254.862991][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.863015][ T8177] RIP: 0033:0x7fb51b38ebe9 [ 254.863032][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.863054][ T8177] RSP: 002b:00007fb51c1760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.863075][ T8177] RAX: ffffffffffffffda RBX: 00007fb51b5b5fa8 RCX: 00007fb51b38ebe9 [ 254.863090][ T8177] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb51b5b5fac [ 254.863104][ T8177] RBP: 00007fb51b5b5fa0 R08: 00007fb51c177000 R09: 0000000000000000 [ 254.863118][ T8177] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 254.863131][ T8177] R13: 00007fb51b5b6038 R14: 00007fff58525780 R15: 00007fff58525868 [ 254.863166][ T8177] [ 257.726988][ T8240] Invalid ELF header magic: != ELF [ 258.070890][ T8245] netlink: 13 bytes leftover after parsing attributes in process `syz.2.396'. [ 258.098284][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 258.117561][ T8245] netlink: 13 bytes leftover after parsing attributes in process `syz.2.396'. [ 258.136101][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 258.640159][ T8261] netlink: 40 bytes leftover after parsing attributes in process `syz.5.399'. [ 259.168950][ T8271] Console: switching to colour frame buffer device 128x48 [ 259.654594][ T8285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 262.336379][ T8327] capability: warning: `syz.5.412' uses deprecated v2 capabilities in a way that may be insecure [ 263.543625][ T8351] FAULT_INJECTION: forcing a failure. [ 263.543625][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 263.561124][ T8351] CPU: 1 UID: 0 PID: 8351 Comm: syz.4.418 Tainted: G U syzkaller #0 PREEMPT(full) [ 263.561180][ T8351] Tainted: [U]=USER [ 263.561192][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.561211][ T8351] Call Trace: [ 263.561222][ T8351] [ 263.561235][ T8351] dump_stack_lvl+0x16c/0x1f0 [ 263.561287][ T8351] should_fail_ex+0x512/0x640 [ 263.561333][ T8351] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 263.561375][ T8351] should_failslab+0xc2/0x120 [ 263.561424][ T8351] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 263.561460][ T8351] ? __d_alloc+0x32/0xae0 [ 263.561496][ T8351] __d_alloc+0x32/0xae0 [ 263.561536][ T8351] d_alloc_parallel+0x111/0x1480 [ 263.561590][ T8351] ? find_held_lock+0x2b/0x80 [ 263.561621][ T8351] ? __pfx_d_alloc_parallel+0x10/0x10 [ 263.561673][ T8351] ? __d_lookup+0x266/0x4a0 [ 263.561733][ T8351] lookup_open.isra.0+0x665/0x1580 [ 263.561779][ T8351] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 263.561840][ T8351] ? lookup_fast+0x156/0x610 [ 263.561881][ T8351] path_openat+0x893/0x2cb0 [ 263.561935][ T8351] ? __pfx_path_openat+0x10/0x10 [ 263.561988][ T8351] do_filp_open+0x20b/0x470 [ 263.562030][ T8351] ? __pfx_do_filp_open+0x10/0x10 [ 263.562103][ T8351] ? alloc_fd+0x471/0x7d0 [ 263.562152][ T8351] do_sys_openat2+0x11b/0x1d0 [ 263.562206][ T8351] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.562276][ T8351] __x64_sys_openat+0x174/0x210 [ 263.562323][ T8351] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.562400][ T8351] do_syscall_64+0xcd/0x490 [ 263.562452][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.562487][ T8351] RIP: 0033:0x7f7ce038ebe9 [ 263.562516][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.562549][ T8351] RSP: 002b:00007f7ce11ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.562581][ T8351] RAX: ffffffffffffffda RBX: 00007f7ce05b5fa0 RCX: 00007f7ce038ebe9 [ 263.562604][ T8351] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 263.562626][ T8351] RBP: 00007f7ce0411e19 R08: 0000000000000000 R09: 0000000000000000 [ 263.562647][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.562667][ T8351] R13: 00007f7ce05b6038 R14: 00007f7ce05b5fa0 R15: 00007fffbcd40568 [ 263.562710][ T8351] [ 264.046296][ T8356] vivid-007: ================= START STATUS ================= [ 264.055199][ T8356] vivid-007: Generate PTS: true [ 264.063365][ T8356] vivid-007: Generate SCR: true [ 264.073065][ T8356] tpg source WxH: 320x240 (Y'CbCr) [ 264.078430][ T8356] tpg field: 1 [ 264.081830][ T8356] tpg crop: (0,0)/320x240 [ 264.114664][ T8356] tpg compose: (0,0)/320x240 [ 264.119337][ T8356] tpg colorspace: 8 [ 264.124157][ T8356] tpg transfer function: 0/0 [ 264.143877][ T8356] tpg Y'CbCr encoding: 0/0 [ 264.148377][ T8356] tpg quantization: 0/0 [ 264.159436][ T8356] tpg RGB range: 0/2 [ 264.163843][ T8356] vivid-007: ================== END STATUS ================== [ 264.663245][ T8364] can: request_module (can-proto-3) failed. [ 265.289653][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 266.257410][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.264057][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.011821][ T8412] syz.5.432 (8412) used greatest stack depth: 19192 bytes left [ 268.067600][ T30] audit: type=1800 audit(1756289917.461:9): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.427" name="dbroot" dev="configfs" ino=21078 res=0 errno=0 [ 271.200126][ T8456] FAULT_INJECTION: forcing a failure. [ 271.200126][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 271.279846][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: syz.3.439 Tainted: G U syzkaller #0 PREEMPT(full) [ 271.279885][ T8456] Tainted: [U]=USER [ 271.279892][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.279906][ T8456] Call Trace: [ 271.279915][ T8456] [ 271.279923][ T8456] dump_stack_lvl+0x16c/0x1f0 [ 271.279960][ T8456] should_fail_ex+0x512/0x640 [ 271.279995][ T8456] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 271.280028][ T8456] should_failslab+0xc2/0x120 [ 271.280061][ T8456] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 271.280091][ T8456] ? __d_alloc+0x32/0xae0 [ 271.280125][ T8456] __d_alloc+0x32/0xae0 [ 271.280159][ T8456] d_alloc_parallel+0x111/0x1480 [ 271.280205][ T8456] ? find_held_lock+0x2b/0x80 [ 271.280230][ T8456] ? __pfx_d_alloc_parallel+0x10/0x10 [ 271.280273][ T8456] ? __d_lookup+0x266/0x4a0 [ 271.280317][ T8456] lookup_open.isra.0+0x665/0x1580 [ 271.280348][ T8456] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 271.280390][ T8456] ? lookup_fast+0x156/0x610 [ 271.280418][ T8456] path_openat+0x893/0x2cb0 [ 271.280457][ T8456] ? __pfx_path_openat+0x10/0x10 [ 271.280506][ T8456] do_filp_open+0x20b/0x470 [ 271.280536][ T8456] ? __pfx_do_filp_open+0x10/0x10 [ 271.280586][ T8456] ? alloc_fd+0x471/0x7d0 [ 271.280619][ T8456] do_sys_openat2+0x11b/0x1d0 [ 271.280657][ T8456] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.280706][ T8456] __x64_sys_openat+0x174/0x210 [ 271.280746][ T8456] ? __pfx___x64_sys_openat+0x10/0x10 [ 271.280796][ T8456] do_syscall_64+0xcd/0x490 [ 271.280831][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.280855][ T8456] RIP: 0033:0x7f11aa98ebe9 [ 271.280874][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.280896][ T8456] RSP: 002b:00007f11ab8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.280918][ T8456] RAX: ffffffffffffffda RBX: 00007f11aabb5fa0 RCX: 00007f11aa98ebe9 [ 271.280933][ T8456] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 271.280947][ T8456] RBP: 00007f11aaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 271.280961][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.280975][ T8456] R13: 00007f11aabb6038 R14: 00007f11aabb5fa0 R15: 00007ffeeca65a68 [ 271.281004][ T8456] [ 272.619011][ T8476] ovs_: entered promiscuous mode [ 272.912893][ T8474] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 273.279884][ T8490] ptrace attach of "./syz-executor exec"[8493] was attempted by "./syz-executor exec"[8490] [ 275.462285][ T8487] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 275.939548][ T30] audit: type=1800 audit(1756289925.321:10): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.448" name="dbroot" dev="configfs" ino=21915 res=0 errno=0 [ 278.575956][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 281.408091][ T8573] misc userio: No port type given on /dev/userio [ 281.473822][ T8574] netlink: 13 bytes leftover after parsing attributes in process `syz.4.463'. [ 281.515412][ T8563] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 282.338934][ T8584] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 285.930593][ T8596] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 287.120182][ T8620] netlink: 13 bytes leftover after parsing attributes in process `syz.4.473'. [ 287.710577][ T8626] netlink: 342 bytes leftover after parsing attributes in process `syz.5.475'. [ 287.755027][ T8626] netlink: 274 bytes leftover after parsing attributes in process `syz.5.475'. [ 289.760475][ T8659] netlink: 13 bytes leftover after parsing attributes in process `syz.3.483'. [ 289.770442][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 289.828301][ T8659] netlink: 13 bytes leftover after parsing attributes in process `syz.3.483'. [ 289.853337][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 294.085803][ T8723] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 295.659168][ T8749] lo: entered allmulticast mode [ 295.725963][ T8749] lo: left allmulticast mode [ 296.224716][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'. [ 297.034142][ T8773] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 299.148868][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 299.169908][ T8816] netlink: 13 bytes leftover after parsing attributes in process `syz.3.513'. [ 299.234894][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 299.692770][ T5866] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 299.692814][ T5866] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 299.712723][ T5866] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 299.712818][ T5866] Bluetooth: hci4: adv larger than maximum supported [ 299.723219][ T5866] Bluetooth: hci4: adv larger than maximum supported [ 299.729959][ T5866] Bluetooth: hci4: Malformed LE Event: 0x0d [ 299.886832][ T8821] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 300.033402][ T5866] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 300.033447][ T5866] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 300.048994][ T5866] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 300.049037][ T5866] Bluetooth: hci4: adv larger than maximum supported [ 300.059448][ T5866] Bluetooth: hci4: adv larger than maximum supported [ 300.066306][ T5866] Bluetooth: hci4: adv larger than maximum supported [ 300.073419][ T5866] Bluetooth: hci4: adv larger than maximum supported [ 300.080150][ T5866] Bluetooth: hci4: Malformed LE Event: 0x0d [ 301.086713][ T8844] vivid-007: ================= START STATUS ================= [ 301.119769][ T8844] vivid-007: Generate PTS: true [ 301.150165][ T8844] vivid-007: Generate SCR: true [ 301.163297][ T8844] tpg source WxH: 320x240 (Y'CbCr) [ 301.168471][ T8844] tpg field: 1 [ 301.262977][ T8844] tpg crop: (0,0)/320x240 [ 301.269033][ T8844] tpg compose: (0,0)/320x240 [ 301.275227][ T8844] tpg colorspace: 8 [ 301.288529][ T8844] tpg transfer function: 0/0 [ 301.295803][ T8844] tpg Y'CbCr encoding: 0/0 [ 301.348656][ T8844] tpg quantization: 0/0 [ 301.422977][ T8844] tpg RGB range: 0/2 [ 301.535104][ T8844] vivid-007: ================== END STATUS ================== [ 303.325748][ T8876] random: crng reseeded on system resumption [ 303.346087][ T8871] FAULT_INJECTION: forcing a failure. [ 303.346087][ T8871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 303.381831][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.4.524 Tainted: G U syzkaller #0 PREEMPT(full) [ 303.381883][ T8871] Tainted: [U]=USER [ 303.381894][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.381924][ T8871] Call Trace: [ 303.381944][ T8871] [ 303.381958][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 303.382008][ T8871] should_fail_ex+0x512/0x640 [ 303.382062][ T8871] get_futex_key+0x1d0/0x1560 [ 303.382108][ T8871] ? __pfx_get_futex_key+0x10/0x10 [ 303.382147][ T8871] ? futex_private_hash_put+0x176/0x300 [ 303.382199][ T8871] futex_wake+0xea/0x530 [ 303.382246][ T8871] ? futex_wait+0x120/0x380 [ 303.382301][ T8871] ? __pfx_futex_wake+0x10/0x10 [ 303.382347][ T8871] ? __lock_acquire+0xb97/0x1ce0 [ 303.382398][ T8871] ? __lock_acquire+0xb97/0x1ce0 [ 303.382452][ T8871] do_futex+0x1e3/0x350 [ 303.382496][ T8871] ? __pfx_do_futex+0x10/0x10 [ 303.382539][ T8871] ? __might_fault+0x13b/0x190 [ 303.382587][ T8871] __x64_sys_futex+0x1e0/0x4c0 [ 303.382636][ T8871] ? __pfx___x64_sys_futex+0x10/0x10 [ 303.382681][ T8871] ? __pfx___x64_sys_getrlimit+0x10/0x10 [ 303.382745][ T8871] do_syscall_64+0xcd/0x490 [ 303.382795][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.382828][ T8871] RIP: 0033:0x7f7ce038ebe9 [ 303.382854][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.382905][ T8871] RSP: 002b:00007f7ce118b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 303.382934][ T8871] RAX: ffffffffffffffda RBX: 00007f7ce05b6098 RCX: 00007f7ce038ebe9 [ 303.382961][ T8871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7ce05b609c [ 303.382980][ T8871] RBP: 00007f7ce05b6090 R08: 00007f7ce11ad000 R09: 0000000000000000 [ 303.382999][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.383015][ T8871] R13: 00007f7ce05b6128 R14: 00007fffbcd40480 R15: 00007fffbcd40568 [ 303.383051][ T8871] [ 303.722517][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.5.526'. [ 305.060478][ T8896] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 305.164458][ T8896] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 305.231975][ T8896] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 305.240783][ T8896] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 305.249571][ T8896] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 305.461055][ T8896] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 305.682120][ T8901] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 306.590378][ T8932] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 306.677818][ T8936] Process accounting resumed [ 307.436784][ T8944] Console: switching to colour VGA+ 80x25 [ 308.389788][ T8967] FAULT_INJECTION: forcing a failure. [ 308.389788][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 308.427205][ T8967] CPU: 1 UID: 0 PID: 8967 Comm: syz.5.541 Tainted: G U syzkaller #0 PREEMPT(full) [ 308.427258][ T8967] Tainted: [U]=USER [ 308.427270][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.427290][ T8967] Call Trace: [ 308.427302][ T8967] [ 308.427324][ T8967] dump_stack_lvl+0x16c/0x1f0 [ 308.427376][ T8967] should_fail_ex+0x512/0x640 [ 308.427424][ T8967] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 308.427464][ T8967] should_failslab+0xc2/0x120 [ 308.427510][ T8967] __kmalloc_cache_noprof+0x6a/0x3e0 [ 308.427547][ T8967] ? alloc_fs_context+0x57/0x9c0 [ 308.427594][ T8967] alloc_fs_context+0x57/0x9c0 [ 308.427644][ T8967] mq_init_ns+0x172/0x620 [ 308.427688][ T8967] copy_ipcs+0x383/0x610 [ 308.427724][ T8967] ? copy_utsname+0xab/0x470 [ 308.427776][ T8967] create_new_namespaces+0x20a/0xa90 [ 308.427814][ T8967] ? security_capable+0x7e/0x260 [ 308.427852][ T8967] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 308.427896][ T8967] ksys_unshare+0x45b/0xa40 [ 308.427945][ T8967] ? __pfx_ksys_unshare+0x10/0x10 [ 308.428001][ T8967] ? xfd_validate_state+0x61/0x180 [ 308.428065][ T8967] __x64_sys_unshare+0x31/0x40 [ 308.428112][ T8967] do_syscall_64+0xcd/0x490 [ 308.428162][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.428195][ T8967] RIP: 0033:0x7fb51b38ebe9 [ 308.428221][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.428254][ T8967] RSP: 002b:00007fb51c176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 308.428285][ T8967] RAX: ffffffffffffffda RBX: 00007fb51b5b5fa0 RCX: 00007fb51b38ebe9 [ 308.428307][ T8967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 308.428333][ T8967] RBP: 00007fb51b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.428353][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.428373][ T8967] R13: 00007fb51b5b6038 R14: 00007fb51b5b5fa0 R15: 00007fff58525868 [ 308.428415][ T8967] [ 310.431878][ T9000] input: jJǸ-9%vJ86 as /devices/virtual/input/input16 [ 310.513075][ T5866] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 310.659861][ T9000] usb usb24: usbfs: process 9000 (syz.3.547) did not claim interface 0 before use [ 311.424204][ T9002] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 311.474423][ T9020] netlink: 'syz.4.557': attribute type 11 has an invalid length. [ 311.678147][ T9025] netlink: 'syz.4.550': attribute type 11 has an invalid length. [ 311.734156][ T9023] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 311.734818][ T9025] netlink: 'syz.4.550': attribute type 11 has an invalid length. [ 312.198796][ T9029] random: crng reseeded on system resumption [ 312.513162][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.551'. [ 314.423263][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 315.661777][ T9084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.730802][ T9084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.792110][ T9084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.807373][ T9084] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.848410][ T9084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.891622][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 315.911218][ T9084] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 315.975606][ T9093] netlink: 13 bytes leftover after parsing attributes in process `syz.4.566'. [ 315.996572][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 316.168391][ T9098] : renamed from gre0 (while UP) [ 316.192428][ T9091] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 316.292159][ T9099] nvme_fabrics: missing parameter 'transport=%s' [ 316.323667][ T9099] nvme_fabrics: missing parameter 'nqn=%s' [ 316.880533][ T9111] input: jJǸ-9%vJ86 as /devices/virtual/input/input17 [ 317.008753][ T5866] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 317.008784][ T5866] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 317.023697][ T5866] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 317.023753][ T5866] Bluetooth: hci4: Malformed LE Event: 0x0d [ 317.040882][ T9113] netlink: 342 bytes leftover after parsing attributes in process `syz.4.572'. [ 317.203701][ T9114] usb usb24: usbfs: process 9114 (syz.2.570) did not claim interface 0 before use [ 317.376687][ T5866] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.774765][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.856220][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 317.856238][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 318.817331][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 318.828931][ T9140] netlink: 13 bytes leftover after parsing attributes in process `syz.4.577'. [ 318.877753][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 318.993203][ T9137] FAULT_INJECTION: forcing a failure. [ 318.993203][ T9137] name fail_futex, interval 1, probability 0, space 0, times 0 [ 319.017582][ T9137] CPU: 1 UID: 0 PID: 9137 Comm: syz.2.578 Tainted: G U syzkaller #0 PREEMPT(full) [ 319.017619][ T9137] Tainted: [U]=USER [ 319.017626][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.017639][ T9137] Call Trace: [ 319.017646][ T9137] [ 319.017654][ T9137] dump_stack_lvl+0x16c/0x1f0 [ 319.017690][ T9137] should_fail_ex+0x512/0x640 [ 319.017727][ T9137] get_futex_key+0x1d0/0x1560 [ 319.017758][ T9137] ? __pfx_get_futex_key+0x10/0x10 [ 319.017783][ T9137] ? __pfx_stack_trace_save+0x10/0x10 [ 319.017810][ T9137] ? stack_depot_save_flags+0x29/0x9c0 [ 319.017842][ T9137] ? __lock_acquire+0xb97/0x1ce0 [ 319.017877][ T9137] futex_wait_setup+0x9d/0x550 [ 319.017919][ T9137] __futex_wait+0x194/0x2f0 [ 319.017954][ T9137] ? __pfx___futex_wait+0x10/0x10 [ 319.017992][ T9137] ? __pfx_futex_wake_mark+0x10/0x10 [ 319.018030][ T9137] ? futex_private_hash_put+0x176/0x300 [ 319.018061][ T9137] ? futex_private_hash_put+0x18a/0x300 [ 319.018090][ T9137] futex_wait+0xe8/0x380 [ 319.018123][ T9137] ? __pfx_futex_wait+0x10/0x10 [ 319.018167][ T9137] ? getname_flags.part.0+0x1c5/0x550 [ 319.018206][ T9137] do_futex+0x229/0x350 [ 319.018235][ T9137] ? __pfx_do_futex+0x10/0x10 [ 319.018271][ T9137] __x64_sys_futex+0x1e0/0x4c0 [ 319.018302][ T9137] ? __x64_sys_openat+0x174/0x210 [ 319.018345][ T9137] ? __pfx___x64_sys_futex+0x10/0x10 [ 319.018388][ T9137] do_syscall_64+0xcd/0x490 [ 319.018422][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.018444][ T9137] RIP: 0033:0x7f12d7f8ebe9 [ 319.018462][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.018484][ T9137] RSP: 002b:00007f12d8e900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.018505][ T9137] RAX: ffffffffffffffda RBX: 00007f12d81b5fa8 RCX: 00007f12d7f8ebe9 [ 319.018521][ T9137] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f12d81b5fa8 [ 319.018534][ T9137] RBP: 00007f12d81b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 319.018548][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.018561][ T9137] R13: 00007f12d81b6038 R14: 00007fffc5ea1030 R15: 00007fffc5ea1118 [ 319.018589][ T9137] [ 319.819907][ T9133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.894399][ T9133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.914503][ T9133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.933121][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 319.941352][ T9133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.695719][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 321.933266][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 321.939369][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.013194][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 322.209770][ T9184] hub 8-0:1.0: USB hub found [ 322.215953][ T9184] hub 8-0:1.0: 1 port detected [ 322.722325][ T9201] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 322.831692][ T9207] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 323.671514][ T30] audit: type=1800 audit(1756289973.061:11): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.602" name="members" dev="configfs" ino=25864 res=0 errno=0 [ 325.495694][ T9256] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 325.974912][ T9271] random: crng reseeded on system resumption [ 326.084054][ T9257] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 327.704446][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.710774][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.626104][ T9304] vhci_hcd: invalid port number 255 [ 328.638754][ T9304] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 329.223223][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 329.270585][ T9312] netlink: 13 bytes leftover after parsing attributes in process `syz.3.620'. [ 329.313038][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 330.204715][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'. [ 331.308998][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 331.321982][ T9359] netlink: 13 bytes leftover after parsing attributes in process `syz.3.631'. [ 331.350222][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 331.862751][ T9366] FAULT_INJECTION: forcing a failure. [ 331.862751][ T9366] name failslab, interval 1, probability 0, space 0, times 0 [ 332.000955][ T9366] CPU: 0 UID: 0 PID: 9366 Comm: syz.2.632 Tainted: G U syzkaller #0 PREEMPT(full) [ 332.000993][ T9366] Tainted: [U]=USER [ 332.001002][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.001016][ T9366] Call Trace: [ 332.001023][ T9366] [ 332.001033][ T9366] dump_stack_lvl+0x16c/0x1f0 [ 332.001068][ T9366] should_fail_ex+0x512/0x640 [ 332.001104][ T9366] ? __kmalloc_noprof+0xbf/0x510 [ 332.001134][ T9366] ? __register_sysctl_table+0xb3/0x1900 [ 332.001169][ T9366] should_failslab+0xc2/0x120 [ 332.001201][ T9366] __kmalloc_noprof+0xd2/0x510 [ 332.001236][ T9366] __register_sysctl_table+0xb3/0x1900 [ 332.001272][ T9366] ? is_module_address+0x5f/0xf0 [ 332.001317][ T9366] ? __pfx___register_sysctl_table+0x10/0x10 [ 332.001353][ T9366] ? is_module_address+0x69/0xf0 [ 332.001386][ T9366] ? register_net_sysctl_sz+0x228/0x3e0 [ 332.001423][ T9366] ? __asan_memcpy+0x3c/0x60 [ 332.001451][ T9366] sysctl_route_net_init+0x15e/0x2c0 [ 332.001490][ T9366] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 332.001528][ T9366] ops_init+0x1e2/0x5f0 [ 332.001565][ T9366] setup_net+0x10f/0x380 [ 332.001597][ T9366] ? lockdep_init_map_type+0x5c/0x280 [ 332.001631][ T9366] ? __pfx_setup_net+0x10/0x10 [ 332.001666][ T9366] ? debug_mutex_init+0x37/0x70 [ 332.001692][ T9366] copy_net_ns+0x2a6/0x5f0 [ 332.001733][ T9366] create_new_namespaces+0x3ea/0xa90 [ 332.001767][ T9366] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 332.001797][ T9366] ksys_unshare+0x45b/0xa40 [ 332.001831][ T9366] ? __pfx_ksys_unshare+0x10/0x10 [ 332.001865][ T9366] ? xfd_validate_state+0x61/0x180 [ 332.001909][ T9366] __x64_sys_unshare+0x31/0x40 [ 332.001942][ T9366] do_syscall_64+0xcd/0x490 [ 332.001982][ T9366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.002006][ T9366] RIP: 0033:0x7f12d7f8ebe9 [ 332.002024][ T9366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.002049][ T9366] RSP: 002b:00007f12d8e6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.002072][ T9366] RAX: ffffffffffffffda RBX: 00007f12d81b6090 RCX: 00007f12d7f8ebe9 [ 332.002087][ T9366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 332.002102][ T9366] RBP: 00007f12d8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 332.002116][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.002130][ T9366] R13: 00007f12d81b6128 R14: 00007f12d81b6090 R15: 00007fffc5ea1118 [ 332.002160][ T9366] [ 332.381121][ T9344] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 332.507968][ T5863] Bluetooth: hci4: unexpected event 0x36 length: 123 > 7 [ 334.098343][ T30] audit: type=1800 audit(1756289983.431:12): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.638" name="members" dev="configfs" ino=26644 res=0 errno=0 [ 334.201867][ T9393] ================================================================== [ 334.201884][ T9393] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 334.201923][ T9393] Read of size 126 at addr ffff88807ab7a3ae by task syz.3.637/9393 [ 334.201944][ T9393] [ 334.201958][ T9393] CPU: 0 UID: 0 PID: 9393 Comm: syz.3.637 Tainted: G U syzkaller #0 PREEMPT(full) [ 334.201991][ T9393] Tainted: [U]=USER [ 334.201999][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.202013][ T9393] Call Trace: [ 334.202021][ T9393] [ 334.202030][ T9393] dump_stack_lvl+0x116/0x1f0 [ 334.202070][ T9393] print_report+0xcd/0x630 [ 334.202101][ T9393] ? __virt_addr_valid+0x81/0x610 [ 334.202131][ T9393] ? __phys_addr+0xe8/0x180 [ 334.202161][ T9393] ? fbcon_prepare_logo+0xa03/0xc70 [ 334.202190][ T9393] kasan_report+0xe0/0x110 [ 334.202221][ T9393] ? fbcon_prepare_logo+0xa03/0xc70 [ 334.202259][ T9393] kasan_check_range+0x100/0x1b0 [ 334.202295][ T9393] __asan_memcpy+0x23/0x60 [ 334.202321][ T9393] fbcon_prepare_logo+0xa03/0xc70 [ 334.202358][ T9393] fbcon_init+0xd77/0x1900 [ 334.202389][ T9393] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 334.202415][ T9393] visual_init+0x320/0x620 [ 334.202442][ T9393] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 334.202478][ T9393] store_bind+0x61d/0x760 [ 334.202509][ T9393] ? sysfs_file_kobj+0xe4/0x290 [ 334.202536][ T9393] ? __pfx_store_bind+0x10/0x10 [ 334.202565][ T9393] dev_attr_store+0x55/0x80 [ 334.202601][ T9393] ? __pfx_dev_attr_store+0x10/0x10 [ 334.202637][ T9393] sysfs_kf_write+0xf2/0x150 [ 334.202664][ T9393] kernfs_fop_write_iter+0x354/0x510 [ 334.202686][ T9393] ? __pfx_sysfs_kf_write+0x10/0x10 [ 334.202714][ T9393] iter_file_splice_write+0xa24/0x12e0 [ 334.202750][ T9393] ? __pfx_iter_file_splice_write+0x10/0x10 [ 334.202780][ T9393] ? __pfx_copy_splice_read+0x10/0x10 [ 334.202812][ T9393] ? __pfx_iter_file_splice_write+0x10/0x10 [ 334.202840][ T9393] direct_splice_actor+0x18f/0x6c0 [ 334.202866][ T9393] splice_direct_to_actor+0x345/0xa30 [ 334.202898][ T9393] ? __pfx_direct_splice_actor+0x10/0x10 [ 334.202934][ T9393] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 334.202974][ T9393] do_splice_direct+0x174/0x240 [ 334.203007][ T9393] ? __pfx_do_splice_direct+0x10/0x10 [ 334.203041][ T9393] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 334.203084][ T9393] ? rw_verify_area+0xcf/0x6c0 [ 334.203119][ T9393] do_sendfile+0xb06/0xe50 [ 334.203160][ T9393] ? __pfx_do_sendfile+0x10/0x10 [ 334.203189][ T9393] ? __x64_sys_futex+0x1e0/0x4c0 [ 334.203219][ T9393] ? __x64_sys_futex+0x1e9/0x4c0 [ 334.203250][ T9393] __x64_sys_sendfile64+0x1d8/0x220 [ 334.203284][ T9393] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 334.203323][ T9393] do_syscall_64+0xcd/0x490 [ 334.203376][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.203399][ T9393] RIP: 0033:0x7f11aa98ebe9 [ 334.203416][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.203439][ T9393] RSP: 002b:00007f11ab8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 334.203461][ T9393] RAX: ffffffffffffffda RBX: 00007f11aabb5fa0 RCX: 00007f11aa98ebe9 [ 334.203476][ T9393] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 334.203490][ T9393] RBP: 00007f11aaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.203504][ T9393] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 334.203518][ T9393] R13: 00007f11aabb6038 R14: 00007f11aabb5fa0 R15: 00007ffeeca65a68 [ 334.203540][ T9393] [ 334.203548][ T9393] [ 334.203554][ T9393] Allocated by task 0: [ 334.203563][ T9393] kasan_save_stack+0x33/0x60 [ 334.203589][ T9393] kasan_save_track+0x14/0x30 [ 334.203613][ T9393] __kasan_kmalloc+0xaa/0xb0 [ 334.203636][ T9393] __kmalloc_noprof+0x223/0x510 [ 334.203660][ T9393] ieee802_11_parse_elems_full+0x1db/0x3780 [ 334.203703][ T9393] ieee80211_inform_bss+0x10b/0x1140 [ 334.203741][ T9393] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 334.203770][ T9393] cfg80211_inform_bss_data+0x224/0x3bd0 [ 334.203797][ T9393] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 334.203826][ T9393] ieee80211_bss_info_update+0x310/0xab0 [ 334.203864][ T9393] ieee80211_scan_rx+0x4cf/0xb30 [ 334.203900][ T9393] ieee80211_rx_list+0x1bdb/0x2980 [ 334.203924][ T9393] ieee80211_rx_napi+0xdc/0x410 [ 334.203947][ T9393] ieee80211_handle_queued_frames+0xd5/0x130 [ 334.203983][ T9393] tasklet_action_common+0x284/0x400 [ 334.204012][ T9393] handle_softirqs+0x219/0x8e0 [ 334.204036][ T9393] __irq_exit_rcu+0x109/0x170 [ 334.204068][ T9393] irq_exit_rcu+0x9/0x30 [ 334.204093][ T9393] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 334.204120][ T9393] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.204145][ T9393] [ 334.204150][ T9393] Freed by task 0: [ 334.204160][ T9393] kasan_save_stack+0x33/0x60 [ 334.204186][ T9393] kasan_save_track+0x14/0x30 [ 334.204211][ T9393] kasan_save_free_info+0x3b/0x60 [ 334.204247][ T9393] __kasan_slab_free+0x60/0x70 [ 334.204274][ T9393] kfree+0x2b4/0x4d0 [ 334.204293][ T9393] ieee80211_inform_bss+0x77c/0x1140 [ 334.204331][ T9393] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 334.204360][ T9393] cfg80211_inform_bss_data+0x224/0x3bd0 [ 334.204386][ T9393] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 334.204413][ T9393] ieee80211_bss_info_update+0x310/0xab0 [ 334.204450][ T9393] ieee80211_scan_rx+0x4cf/0xb30 [ 334.204486][ T9393] ieee80211_rx_list+0x1bdb/0x2980 [ 334.204508][ T9393] ieee80211_rx_napi+0xdc/0x410 [ 334.204531][ T9393] ieee80211_handle_queued_frames+0xd5/0x130 [ 334.204565][ T9393] tasklet_action_common+0x284/0x400 [ 334.204592][ T9393] handle_softirqs+0x219/0x8e0 [ 334.204616][ T9393] __irq_exit_rcu+0x109/0x170 [ 334.204641][ T9393] irq_exit_rcu+0x9/0x30 [ 334.204665][ T9393] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 334.204692][ T9393] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.204716][ T9393] [ 334.204722][ T9393] The buggy address belongs to the object at ffff88807ab7a000 [ 334.204722][ T9393] which belongs to the cache kmalloc-1k of size 1024 [ 334.204749][ T9393] The buggy address is located 942 bytes inside of [ 334.204749][ T9393] freed 1024-byte region [ffff88807ab7a000, ffff88807ab7a400) [ 334.204783][ T9393] [ 334.204791][ T9393] The buggy address belongs to the physical page: [ 334.204814][ T9393] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ab78 [ 334.204844][ T9393] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 334.204873][ T9393] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 334.204894][ T9393] page_type: f5(slab) [ 334.204919][ T9393] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 334.204941][ T9393] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 334.204963][ T9393] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 334.204984][ T9393] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 334.205019][ T9393] head: 00fff00000000003 ffffea0001eade01 00000000ffffffff 00000000ffffffff [ 334.205038][ T9393] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 334.205051][ T9393] page dumped because: kasan: bad access detected [ 334.205067][ T9393] page_owner tracks the page as allocated [ 334.205075][ T9393] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5868, tgid 5868 (syz-executor), ts 103864969828, free_ts 103839686131 [ 334.205116][ T9393] post_alloc_hook+0x1c0/0x230 [ 334.205158][ T9393] get_page_from_freelist+0x132b/0x38e0 [ 334.205184][ T9393] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 334.205211][ T9393] alloc_pages_mpol+0x1fb/0x550 [ 334.205240][ T9393] new_slab+0x247/0x330 [ 334.205260][ T9393] ___slab_alloc+0xcf2/0x1740 [ 334.205280][ T9393] __slab_alloc.constprop.0+0x56/0xb0 [ 334.205302][ T9393] __kmalloc_node_noprof+0x2ed/0x500 [ 334.205329][ T9393] qdisc_alloc+0xbb/0xc50 [ 334.205355][ T9393] qdisc_create_dflt+0x94/0x490 [ 334.205382][ T9393] dev_activate+0x63f/0x12d0 [ 334.205408][ T9393] __dev_open+0x432/0x7c0 [ 334.205435][ T9393] __dev_change_flags+0x55d/0x720 [ 334.205464][ T9393] netif_change_flags+0x8d/0x160 [ 334.205493][ T9393] do_setlink.constprop.0+0xb53/0x4380 [ 334.205526][ T9393] rtnl_newlink+0x1446/0x2000 [ 334.205557][ T9393] page last free pid 5868 tgid 5868 stack trace: [ 334.205570][ T9393] __free_frozen_pages+0x7d5/0x10f0 [ 334.205590][ T9393] qlist_free_all+0x4d/0x120 [ 334.205613][ T9393] kasan_quarantine_reduce+0x195/0x1e0 [ 334.205639][ T9393] __kasan_slab_alloc+0x69/0x90 [ 334.205666][ T9393] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 334.205692][ T9393] __alloc_skb+0x2b2/0x380 [ 334.205718][ T9393] rtmsg_fib+0x13e/0x520 [ 334.205741][ T9393] fib_table_insert+0xbaf/0x1c40 [ 334.205770][ T9393] fib_magic+0x4d4/0x5c0 [ 334.205801][ T9393] fib_add_ifaddr+0x16d/0x580 [ 334.205820][ T9393] fib_inetaddr_event+0x147/0x270 [ 334.205840][ T9393] notifier_call_chain+0xbc/0x410 [ 334.205869][ T9393] blocking_notifier_call_chain+0x69/0xa0 [ 334.205899][ T9393] __inet_insert_ifa+0x925/0xcd0 [ 334.205931][ T9393] inet_rtm_newaddr+0xd87/0x1540 [ 334.205962][ T9393] rtnetlink_rcv_msg+0x95b/0xe90 [ 334.205994][ T9393] [ 334.205999][ T9393] Memory state around the buggy address: [ 334.206010][ T9393] ffff88807ab7a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.206027][ T9393] ffff88807ab7a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.206044][ T9393] >ffff88807ab7a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.206057][ T9393] ^ [ 334.206075][ T9393] ffff88807ab7a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 334.206092][ T9393] ffff88807ab7a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 334.206105][ T9393] ================================================================== [ 334.206272][ T9393] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.206302][ T9393] CPU: 0 UID: 0 PID: 9393 Comm: syz.3.637 Tainted: G U syzkaller #0 PREEMPT(full) [ 334.206354][ T9393] Tainted: [U]=USER [ 334.206366][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.206385][ T9393] Call Trace: [ 334.206394][ T9393] [ 334.206405][ T9393] dump_stack_lvl+0x3d/0x1f0 [ 334.206448][ T9393] vpanic+0x6e8/0x7a0 [ 334.206494][ T9393] ? __pfx_vpanic+0x10/0x10 [ 334.206545][ T9393] ? fbcon_prepare_logo+0xa03/0xc70 [ 334.206587][ T9393] panic+0xca/0xd0 [ 334.206634][ T9393] ? __pfx_panic+0x10/0x10 [ 334.206682][ T9393] ? fbcon_prepare_logo+0xa03/0xc70 [ 334.206726][ T9393] ? preempt_schedule_common+0x44/0xc0 [ 334.206770][ T9393] ? preempt_schedule_thunk+0x16/0x30 [ 334.206822][ T9393] check_panic_on_warn+0xab/0xb0 [ 334.206876][ T9393] end_report+0x107/0x170 [ 334.206919][ T9393] kasan_report+0xee/0x110 [ 334.206965][ T9393] ? fbcon_prepare_logo+0xa03/0xc70 [ 334.207015][ T9393] kasan_check_range+0x100/0x1b0 [ 334.207077][ T9393] __asan_memcpy+0x23/0x60 [ 334.207113][ T9393] fbcon_prepare_logo+0xa03/0xc70 [ 334.207168][ T9393] fbcon_init+0xd77/0x1900 [ 334.207213][ T9393] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 334.207251][ T9393] visual_init+0x320/0x620 [ 334.207289][ T9393] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 334.207347][ T9393] store_bind+0x61d/0x760 [ 334.207392][ T9393] ? sysfs_file_kobj+0xe4/0x290 [ 334.207431][ T9393] ? __pfx_store_bind+0x10/0x10 [ 334.207471][ T9393] dev_attr_store+0x55/0x80 [ 334.207522][ T9393] ? __pfx_dev_attr_store+0x10/0x10 [ 334.207573][ T9393] sysfs_kf_write+0xf2/0x150 [ 334.207612][ T9393] kernfs_fop_write_iter+0x354/0x510 [ 334.207644][ T9393] ? __pfx_sysfs_kf_write+0x10/0x10 [ 334.207684][ T9393] iter_file_splice_write+0xa24/0x12e0 [ 334.207735][ T9393] ? __pfx_iter_file_splice_write+0x10/0x10 [ 334.207778][ T9393] ? __pfx_copy_splice_read+0x10/0x10 [ 334.207823][ T9393] ? __pfx_iter_file_splice_write+0x10/0x10 [ 334.207864][ T9393] direct_splice_actor+0x18f/0x6c0 [ 334.207903][ T9393] splice_direct_to_actor+0x345/0xa30 [ 334.207941][ T9393] ? __pfx_direct_splice_actor+0x10/0x10 [ 334.207989][ T9393] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 334.208033][ T9393] do_splice_direct+0x174/0x240 [ 334.208079][ T9393] ? __pfx_do_splice_direct+0x10/0x10 [ 334.208116][ T9393] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 334.208154][ T9393] ? rw_verify_area+0xcf/0x6c0 [ 334.208190][ T9393] do_sendfile+0xb06/0xe50 [ 334.208232][ T9393] ? __pfx_do_sendfile+0x10/0x10 [ 334.208274][ T9393] ? __x64_sys_futex+0x1e0/0x4c0 [ 334.208318][ T9393] ? __x64_sys_futex+0x1e9/0x4c0 [ 334.208365][ T9393] __x64_sys_sendfile64+0x1d8/0x220 [ 334.208414][ T9393] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 334.208469][ T9393] do_syscall_64+0xcd/0x490 [ 334.208518][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.208554][ T9393] RIP: 0033:0x7f11aa98ebe9 [ 334.208582][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.208607][ T9393] RSP: 002b:00007f11ab8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 334.208630][ T9393] RAX: ffffffffffffffda RBX: 00007f11aabb5fa0 RCX: 00007f11aa98ebe9 [ 334.208646][ T9393] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 334.208662][ T9393] RBP: 00007f11aaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.208678][ T9393] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 334.208692][ T9393] R13: 00007f11aabb6038 R14: 00007f11aabb5fa0 R15: 00007ffeeca65a68 [ 334.208716][ T9393] [ 334.209056][ T9393] Kernel Offset: disabled