last executing test programs: 7.756964199s ago: executing program 3 (id=492): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video69\x00', 0x82001, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x4080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x51) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r1, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x6, 0x24, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, 0x0, 0x0) 7.185395772s ago: executing program 1 (id=493): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x8080, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x2e, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x3, 0xd, 0x1, 0x948b, 0x3ff, 0x15f49a0a, 0x41000000003, 0x9, 0x62, 0x8000101b, 0x7, 0x6d3e, 0x9, 0x2, 0x200]}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) timer_settime$auto(0x6, 0x9, 0x0, &(0x7f0000000100)={{0x5, 0xf}, {0x101, 0x6}}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 6.706664033s ago: executing program 3 (id=495): r0 = waitid$auto(0x5, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) prctl$auto(0x5, 0x80000000, r0, 0x78, 0x8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r3, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x3b, 0x5, 0x8) 5.913719976s ago: executing program 1 (id=498): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x1000000}, 0x400c080) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/fs/ext4/sda1/lifetime_write_kbytes\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4096, 0x1000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4840) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_open_procfs$namespace(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r5, 0x10e, 0xfffffffc, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt/parameters/default_red\x00', 0x801, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) 5.678053423s ago: executing program 0 (id=500): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x38d400, 0x0) r0 = semctl$auto_GETPID(0xe, 0x2, 0xb, 0x1) prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/description\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xc8201, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x40000) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r5, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d000000050828001200000005002100020000"], 0x44}}, 0xc80) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40420}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00j\x00', @ANYRES16=r5, @ANYBLOB="100029bd7000fbdbdf252d00000014003000df9719fc3aff9cf2547c8af76715d1ac050022000000000005"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r6, 0x5453, 0x0) 4.710151179s ago: executing program 1 (id=502): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001000)={0x2cc, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_DATA={0x2b6, 0x9c, "fc249a3d1983089419ac78b69b94682099722346c59fad3cdc9da3f35f0935fd49f5a27676cc078edd7ee670c4046c1e48367b6a0b2d890ada0964c3c3e948f4d5de26534ae49006dadcd647aa8a892d444731813733e9273c81993530c9c8a304b4db9b563a4440f22f1c24f64f5210ee4a004a266fe34f498b3c10dd487312f7cf2d3949b2972a5df8edc3d049b1987a968b01ac3ae39449a0e164909f086d7336a2d15c3b010e20d8fd2c8b2e36bcb2ef56c0c321e101109fb275d0830dc6bc1ddd23138670bcf87a1947dbbe754a4baeea1247d2ff73fd137d4fd5412b5859488e896c39a7c5346fd6ce05e533f75ca962105e728e459c2f0f4f1fd514107cfabff58e4fe4865669a18699c92a8c8a929f79d6c2e23cedcf112966d6ec658a693bbd089312ac7acf2b23999413c68708bf9a378dd5e5d4185a11e46073b2ee9d32fff6aa3c4d3d740f836efa310f9b28bec9a35d8c066105837c893279086e4b9f32e906424f9925e5c5a9edc8b7e9f23d24d387a616d84f1bf8e6fb854c9a32c4ccd7d883493bdfa1e65001891eca1c8093363400e382b9a4fc55c66e546eee1bd98529e76615e0817a39613b11d4f6a1f60a3463bcb221a35a8d2f7e3dd9bd65140bdc42a3c51a0aa790dd12125a9b73bff95bb7e0fdb23978189f91db596fe5adaf1485941e3767a22c937825aafbeb5b541966dd9e530410107e0c5ce78da6ffcd255ed8748cfbb4b30b90717c139814c7c7b0b3826bf8d866279452578da9396725ffb301d80aff89b581bbc71e64de25c5fbf71fee75e1d9af08759a2691e858761985c0abb94fdd9ed70d8d32a64db88480673d14d6af0f2b322e333566d74cacf2a6b2dabc1f11f253127b929164d297431fed3c1845cfdeeb11ad8b68b3f0db168494bfbfdffd521ace82169dcffa60e35e539fa365cf99f65ffcf170cb78c73adac059014e87dff3b39ca0"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x48845}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="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", 0x415) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x300000000000000, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x8}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) pwrite64$auto(r3, 0x0, 0x1, 0x27) 4.578111991s ago: executing program 2 (id=503): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x1) r0 = socket(0x8, 0x4, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, r0, 0x8003) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/ext4/sda1/extent_max_zeroout_kb\x00', 0x4929c1, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r4, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, 0x0) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) statmount$auto(0x0, 0x0, 0x101fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 4.428820518s ago: executing program 0 (id=504): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) kexec_load$auto(0xff, 0x2, 0x0, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x3b, 0x5, 0x8) socket(0x27, 0x3, 0x3a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) 4.226409925s ago: executing program 3 (id=505): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sockstat6\x00', 0x40, 0x0) pread64$auto(r0, 0x0, 0x200000000009, 0xfc) unshare$auto(0x40000080) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161340, 0x130) socket(0x2, 0x2, 0x88) open(&(0x7f0000000100)='./file0\x00', 0x40801, 0x175) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop4/size\x00', 0x40000, 0x0) finit_module$auto(r3, 0x0, 0x3) ptrace$auto(0xd, r2, 0x4, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000140)={0xa0000, 0xfffffffffffffffc, 0x98, 0x4, 0x4, 0x6, 0x3ff, 0x8000, 0x2b0e, 0x6, 0x9, 0xffff, 0x3, 0x9, 0x6ff5}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) mmap$auto(0x0, 0x80003, 0xffd, 0x8000000008012, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000100)={0x0, 0xffff}, 0x1) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000300)="9a0050c109d0a32a27f9cdecc9cd2dc000282894a3f24477a83300ee06733424dded15d0e33edae3f869402bae70dbd1b53a9c6db30f487a13da4702c002a0b71362cb3c98f3610f57bb69e7", 0x4c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000001c0)="a6e934c3ba4e7f911525fcd0064de3bdd6fcd70b1b5e59f9a20cc8df434f7c74a17361ccddb96b59e96506f27a0db9e9f8900730fd682f1f9de2666faf0ad435b3bc1b66c906b36c25936cd290f61a234071287383726c5fc92a253b353f0c16d4c2f330903446c36600fe24cc741c4045e8188e5e069542e4856ae2c330d7b6705707c1d3a81e86ba0f2678544cd3db5ae6c21d1f2f0317c6634bedfbf39035c64255c8695395a0e8bc624e761ddf0971be4f36ced3760dcf61d18a1e081374306e63f4ab7818d28b0147dbb71717cc3f") listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xffffffffffffff94, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r5, r5, 0x0, 0xffffffff) 3.634008415s ago: executing program 1 (id=506): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r2, 0x0, 0x2) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) 3.599295117s ago: executing program 2 (id=507): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x6, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x1, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xd80, &(0x7f0000000040)={{0x40000000000026b, 0x4}, {0x0, 0x83}}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000080)={{0x5, 0x8}, {0x7f, 0x10000}}) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x100}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x844) writev$auto(r0, &(0x7f0000007240)={0x0, 0x9dc}, 0x1ff) sendmmsg$auto(r0, &(0x7f00000003c0)={{&(0x7f0000000180)="8bbcb05bd5dfd5cf3d6c330073a6f64d1849574a538c9bd38ab4b4f425db8911aeff8f1b0113ef6a1b84aaf9cc4869f1b21cf06c6ac00dd25b0054f1027d14f41f28d8f721093e04aed86577753c71e82eac83c9e33d5e09e71489e6410f2e74a8b527755801c6c023246a495c564bdcdd5b5eaed7c625f4f7f25d330e01e4ad69e7d3c829d8bb58b5d819eaaf7458e5f037e8c274640d9f38", 0x80000000, &(0x7f0000000300)={&(0x7f0000000240)="7419932c1d458a1cfe7e96fe218e25b93536c69f1545c0137431c3217778766b5378f217d3f9eeebf1c5397cd5e6fa162328937e2e833a4fa1c92318c1e5d71d5418a1a0101ed7d825c9bfecdee8186cb141d765aa0990050b1b6e38d03cf44e59eb3e46995c8cb5ab8f948a9f10b380529b6940068be0e3ad5b10a0cf7714ac468bb46eb48f5b7ad4f0fb015fab65fa7d812381ff398071daf4230f", 0x2}, 0x9560, &(0x7f0000000340)="ee7e28eae1f720e0ce21e84522a9c8b1a0b052d3c917a40b1b90f3f07592ff9dde54a084aa588fa5f9e1ff3d303b49c7b0e471de2b10f5bb5b50e0ef2212f3939e2924db950169ac89d2fc6e61105387dc4cf3868b5cfd5cdc", 0x100, 0x8}, 0x8}, 0x7, 0x2) 3.384820008s ago: executing program 2 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, "c63d9865e4ee33c582314f86116d291a288cc43d9b762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b9fc2b35ea765de19b038450d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696188b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef9697a4eacf5cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5ddffdf3e43deae"}, 0xd8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r4, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf4e379f37c5b8231}, 0x10000) syz_clone3(&(0x7f0000000440)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x12}, &(0x7f00000007c0)=""/4096, 0x1000, 0x0, 0x0}, 0x58) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) shmctl$auto_SHM_LOCK(0x8, 0xb, &(0x7f00000017c0)={{0xfffffffa, 0xee01, 0xee01, 0xff, 0x7ff, 0x80000001, 0x101}, 0x7, 0xfdb, 0x7, 0xf2, @raw=0x2, @inferred=0xffffffffffffffff, 0x8, 0x0, 0x0, &(0x7f0000000540)="97c41a009095bee7e4989048aa3eb8dffecb0af8daf0ea1b2f972355b51fdae7fb214fa8bf97f2fd9430654ea50ec14f9a106f5a6529e5c630d07d82b2"}) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001840)={"bbbf0f8493ccf75fa8ad08a56a365ea5a6593caba19dbfc8c498e58fe62dfa8e", 0xf9, 0x10001, 0x5, 0xfffffffffffffffb, 0x1}) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40018c4}, 0x20000094) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000003c0)) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xfffffffffffffffa, 0x9, 0xfffffffffffffbff) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9) 2.863622736s ago: executing program 0 (id=510): swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) 2.595127775s ago: executing program 0 (id=511): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) r1 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r1, 0x11b, 0x9, 0xffffffffffffffff, 0x18) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) readv$auto(r1, 0x0, 0x3) vmsplice$auto(r0, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) socket(0x28, 0x800, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x8e, 0xdf, 0x9b72, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x2, 0xa) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(r2, 0x5407, 0x38) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab40, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0xebd, 0x401, 0x7) read$auto(0xffffffffffffffff, 0x0, 0x42) 2.130009933s ago: executing program 2 (id=512): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x10100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) cachestat$auto(0x1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(0x0, &(0x7f00000002c0)='./file1\x00') 1.551154934s ago: executing program 1 (id=513): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x12, 0x0, 0x26) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) lseek$auto(r0, 0x7fffffffffffffff, 0x3) madvise$auto(0x3ba5, 0x40000000000000, 0xc894) write$auto_proc_gid_map_operations_base(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_create$auto(0x8, 0x0, 0x0) timer_getoverrun$auto(0x0) mprotect$auto(0x0, 0xfffffffffffffff9, 0x40) truncate$auto(&(0x7f0000000040)='./file0\x00', 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SOUND_MIXER_READ_CAPS2(r0, 0x80044dfc, &(0x7f0000000180)="3a4d06c1fd5ea743d5195d17bd33dce3a4a4e85998560cce7af31c2c94cc6786a7a7d649d9522d2bf017d79774c04429837f715c6f31635efb88f99b8647024af8969d50b8a555bd4c61a2767396c66a8fe101bf0d3015037f58df1ff54c8eb0aa77415e26d123a18eab125c24091950d1cbf8bd9724e129356f84af4b9aaa3b082163c4") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r1 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r1, 0x0, 0x8, 0x7fff) ioctl$auto_TIOCMGET2(0xffffffffffffffff, 0x5415, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa3db) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8880) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) 1.274769522s ago: executing program 2 (id=514): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x1401, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x80000000948b, 0x400000000003, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) splice$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x6, 0x9) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/i2c-diolan-u2c/unbind\x00', 0x2000, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) io_uring_register$auto(r3, 0x2, &(0x7f0000000040)="feb62b54d2fdf2024aa649d7ad9440503f5320b0e4a3a65e787dae782dae20550f2aa328eccb43d5afc7b296ac5dbdacf94850cb8e080e18d488ca8131548c5468f45e321445590aadef48670f1bb81f4bc7b313fe066ba5c137ac60c280943f8f323990c6145f4c4f09793558722672ca28aad480b0e8e69664b37e8249bee62639cb10848d6e22e9e993ed79fae689b9f4fc19ea7ccb43e8e84c18f2ea71e2465b01c2", 0x6) 1.166285318s ago: executing program 0 (id=515): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001000)={0x2cc, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_DATA={0x2b6, 0x9c, "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"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x48845}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="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", 0x415) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x300000000000000, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x8}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x1000000}, 0x400c080) pwrite64$auto(r3, 0x0, 0x1, 0x27) 1.075182823s ago: executing program 3 (id=516): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x1401, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x80000000948b, 0x400000000003, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) splice$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x6, 0x9) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/i2c-diolan-u2c/unbind\x00', 0x2000, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) io_uring_register$auto(r3, 0x2, &(0x7f0000000040)="feb62b54d2fdf2024aa649d7ad9440503f5320b0e4a3a65e787dae782dae20550f2aa328eccb43d5afc7b296ac5dbdacf94850cb8e080e18d488ca8131548c5468f45e321445590aadef48670f1bb81f4bc7b313fe066ba5c137ac60c280943f8f323990c6145f4c4f09793558722672ca28aad480b0e8e69664b37e8249bee62639cb10848d6e22e9e993ed79fae689b9f4fc19ea7ccb43e8e84c18f2ea71e2465b01c26ead01e7a6453786e229c71e7b08039b59e7e4a9df2919676dcc7f73fd820c3600174d9479e81bc6ec", 0x6) 600.380648ms ago: executing program 1 (id=517): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) kexec_load$auto(0xff, 0x2, 0x0, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x3b, 0x5, 0x8) socket(0x27, 0x3, 0x3a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) 394.380196ms ago: executing program 2 (id=518): syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) socket(0x25, 0x1, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r4 = ioctl$auto_SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000140)=0x100) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x3, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) syz_genetlink_get_family_id$auto_net_dm(&(0x7f00000003c0), r4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 4.945548ms ago: executing program 3 (id=519): swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) 0s ago: executing program 0 (id=520): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) pivot_root$auto(&(0x7f00000001c0)='((:\x00', &(0x7f0000000200)='nfsd\x00') mq_timedsend$auto(r2, &(0x7f0000000240)=')\x00', 0x7, 0x2, &(0x7f0000000280)={0x2, 0xffff}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000228bd7000fedbdf2587000000060014010400000029b75eaaf4bceb29f2e294e80c56cf3000420b41dc77b308e7f76d5a9036da07ae4d3950bffaa557b3222b3058dd1b100552815a830551debcbe6c109dd416cba325442eae1ea76e98f776fce69604a332b610d6eec5385f250be62d2ba60ad077cccc88c9e73651ec1b4ed91e594e3585e2d223e085ffd1c5cc578b076b29dab4df430094936ed7f1f891712cdcbed491ee4e7c136ea8c4dbc37c0c8993eb053d00807d43229c7f2b"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0xc084) mmap$auto(0x1bb, 0x7fffffff, 0x200, 0x16, r0, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r4) socket(0x22, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 98.195107][ T5818] cgroup: Unknown subsys name 'net' [ 98.327214][ T5818] cgroup: Unknown subsys name 'cpuset' [ 98.337077][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.182278][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.392838][ T10] cfg80211: failed to load regulatory.db [ 102.713985][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.724308][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.734270][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.767450][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.775899][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.784822][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.794110][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.812686][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.820436][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.843803][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.850876][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.854754][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.859948][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.868370][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.876205][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.884734][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.887602][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.896209][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.901691][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.909566][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.503995][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 103.602031][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 103.700174][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 103.836486][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.844078][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.851578][ T5837] bridge_slave_0: entered allmulticast mode [ 103.859824][ T5837] bridge_slave_0: entered promiscuous mode [ 103.875538][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 103.914588][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.921809][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.929207][ T5837] bridge_slave_1: entered allmulticast mode [ 103.936626][ T5837] bridge_slave_1: entered promiscuous mode [ 103.956831][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.965457][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.972720][ T5840] bridge_slave_0: entered allmulticast mode [ 103.980088][ T5840] bridge_slave_0: entered promiscuous mode [ 104.019412][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.026712][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.034460][ T5840] bridge_slave_1: entered allmulticast mode [ 104.041825][ T5840] bridge_slave_1: entered promiscuous mode [ 104.106382][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.154225][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.163824][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.170996][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.179119][ T5836] bridge_slave_0: entered allmulticast mode [ 104.186987][ T5836] bridge_slave_0: entered promiscuous mode [ 104.204936][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.227864][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.235297][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.242615][ T5836] bridge_slave_1: entered allmulticast mode [ 104.250025][ T5836] bridge_slave_1: entered promiscuous mode [ 104.265686][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.332648][ T5837] team0: Port device team_slave_0 added [ 104.382908][ T5837] team0: Port device team_slave_1 added [ 104.391669][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.401291][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.408798][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.416858][ T5833] bridge_slave_0: entered allmulticast mode [ 104.424648][ T5833] bridge_slave_0: entered promiscuous mode [ 104.439761][ T5840] team0: Port device team_slave_0 added [ 104.461731][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.471452][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.478852][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.486378][ T5833] bridge_slave_1: entered allmulticast mode [ 104.494080][ T5833] bridge_slave_1: entered promiscuous mode [ 104.502301][ T5840] team0: Port device team_slave_1 added [ 104.565393][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.572400][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.598978][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.652115][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.659529][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.686254][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.708939][ T5836] team0: Port device team_slave_0 added [ 104.718261][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.728351][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.735737][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.762440][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.775398][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.782382][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.809436][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.829166][ T5836] team0: Port device team_slave_1 added [ 104.837870][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.880537][ T5833] team0: Port device team_slave_0 added [ 104.916771][ T5833] team0: Port device team_slave_1 added [ 104.933193][ T52] Bluetooth: hci0: command tx timeout [ 104.936606][ T5843] Bluetooth: hci3: command tx timeout [ 104.987769][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.995426][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.022386][ T5843] Bluetooth: hci2: command tx timeout [ 105.028131][ T52] Bluetooth: hci1: command tx timeout [ 105.028288][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.052023][ T5837] hsr_slave_0: entered promiscuous mode [ 105.059014][ T5837] hsr_slave_1: entered promiscuous mode [ 105.094697][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.101716][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.128266][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.140094][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.147981][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.174210][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.199362][ T5840] hsr_slave_0: entered promiscuous mode [ 105.205994][ T5840] hsr_slave_1: entered promiscuous mode [ 105.212185][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 105.218114][ T5840] Cannot create hsr debugfs directory [ 105.224569][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.231547][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.257820][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.431074][ T5833] hsr_slave_0: entered promiscuous mode [ 105.437728][ T5833] hsr_slave_1: entered promiscuous mode [ 105.445334][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 105.451101][ T5833] Cannot create hsr debugfs directory [ 105.462314][ T5836] hsr_slave_0: entered promiscuous mode [ 105.468913][ T5836] hsr_slave_1: entered promiscuous mode [ 105.475482][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 105.481325][ T5836] Cannot create hsr debugfs directory [ 105.919269][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.933543][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.945212][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.968301][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.049029][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.064726][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.077781][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.090551][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.195920][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.209577][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.226965][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.237973][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.342372][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.368227][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.380315][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.391795][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.444524][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.525399][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.544919][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.581001][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.588334][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.621737][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.635401][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.642623][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.675485][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.700445][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.707649][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.731012][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.738247][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.758356][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.781446][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.788654][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.826439][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.833705][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.896243][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.002322][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.014878][ T52] Bluetooth: hci0: command tx timeout [ 107.014887][ T5843] Bluetooth: hci3: command tx timeout [ 107.037780][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.045060][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.092887][ T52] Bluetooth: hci1: command tx timeout [ 107.098395][ T52] Bluetooth: hci2: command tx timeout [ 107.105125][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.112317][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.379365][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.526289][ T5837] veth0_vlan: entered promiscuous mode [ 107.561904][ T5837] veth1_vlan: entered promiscuous mode [ 107.627639][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.702227][ T5837] veth0_macvtap: entered promiscuous mode [ 107.715355][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.747017][ T5837] veth1_macvtap: entered promiscuous mode [ 107.794794][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.806261][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.847798][ T5840] veth0_vlan: entered promiscuous mode [ 107.856532][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.888601][ T5836] veth0_vlan: entered promiscuous mode [ 107.896503][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.906527][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.924157][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.933829][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.974175][ T5840] veth1_vlan: entered promiscuous mode [ 107.985641][ T5836] veth1_vlan: entered promiscuous mode [ 108.092240][ T5833] veth0_vlan: entered promiscuous mode [ 108.111304][ T5840] veth0_macvtap: entered promiscuous mode [ 108.142808][ T5836] veth0_macvtap: entered promiscuous mode [ 108.154510][ T5840] veth1_macvtap: entered promiscuous mode [ 108.172331][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.181595][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.189956][ T5833] veth1_vlan: entered promiscuous mode [ 108.206500][ T5836] veth1_macvtap: entered promiscuous mode [ 108.231311][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.271917][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.285466][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.295484][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.320040][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.331476][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.376310][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.397545][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.399500][ T5833] veth0_macvtap: entered promiscuous mode [ 108.428831][ T4386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.439832][ T5833] veth1_macvtap: entered promiscuous mode [ 108.449426][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.515148][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.545700][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.568319][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.611437][ T4386] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.621122][ T4386] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.644119][ T4386] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.680575][ T4386] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.689980][ T4386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.709187][ T4386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.731741][ T4386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.731772][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.749874][ T4386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.762804][ T5924] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.771900][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.918096][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.942845][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.025722][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.056232][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.093941][ T52] Bluetooth: hci3: command tx timeout [ 109.106697][ T52] Bluetooth: hci0: command tx timeout [ 109.172201][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.181082][ T52] Bluetooth: hci1: command tx timeout [ 109.181142][ T5843] Bluetooth: hci2: command tx timeout [ 109.188459][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.270867][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.281456][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.375274][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.403613][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.508165][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.583068][ T5927] FAULT_INJECTION: forcing a failure. [ 109.583068][ T5927] name failslab, interval 1, probability 0, space 0, times 1 [ 109.620586][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 109.620630][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.620654][ T5927] Call Trace: [ 109.620665][ T5927] [ 109.620678][ T5927] dump_stack_lvl+0x16c/0x1f0 [ 109.620724][ T5927] should_fail_ex+0x512/0x640 [ 109.620770][ T5927] ? __kmalloc_noprof+0xca/0x880 [ 109.620827][ T5927] should_failslab+0xc2/0x120 [ 109.620870][ T5927] __kmalloc_noprof+0xdd/0x880 [ 109.620919][ T5927] ? __pfx___mutex_lock+0x10/0x10 [ 109.620958][ T5927] ? kvm_io_bus_register_dev+0x1cf/0x720 [ 109.621007][ T5927] ? kvm_io_bus_register_dev+0x1cf/0x720 [ 109.621046][ T5927] kvm_io_bus_register_dev+0x1cf/0x720 [ 109.621098][ T5927] kvm_ioapic_init+0x429/0x590 [ 109.621139][ T5927] kvm_arch_vm_ioctl+0x912/0x18b0 [ 109.621180][ T5927] ? register_lock_class+0x41/0x4c0 [ 109.621223][ T5927] ? find_held_lock+0x2b/0x80 [ 109.621255][ T5927] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 109.621293][ T5927] ? ima_match_policy+0x7f9/0x22e0 [ 109.621330][ T5927] ? __lock_acquire+0x622/0x1c90 [ 109.621382][ T5927] ? __lock_acquire+0x622/0x1c90 [ 109.621439][ T5927] ? __lock_acquire+0x622/0x1c90 [ 109.621493][ T5927] ? __lock_acquire+0x622/0x1c90 [ 109.621564][ T5927] ? bpf_ksym_find+0x124/0x1c0 [ 109.621611][ T5927] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.621651][ T5927] ? is_bpf_text_address+0x94/0x1a0 [ 109.621698][ T5927] ? kernel_text_address+0x8d/0x100 [ 109.621748][ T5927] ? widen_string+0xdc/0x2d0 [ 109.621791][ T5927] ? __kernel_text_address+0xd/0x40 [ 109.621819][ T5927] ? unwind_get_return_address+0x59/0xa0 [ 109.621853][ T5927] ? arch_stack_walk+0xa6/0x100 [ 109.621901][ T5927] ? stack_trace_save+0x8e/0xc0 [ 109.621939][ T5927] ? __pfx_stack_trace_save+0x10/0x10 [ 109.621978][ T5927] ? stack_depot_save_flags+0x29/0x9c0 [ 109.622031][ T5927] ? __lock_acquire+0xb8a/0x1c90 [ 109.622077][ T5927] ? kasan_save_stack+0x42/0x60 [ 109.622113][ T5927] ? kasan_save_stack+0x33/0x60 [ 109.622147][ T5927] ? kasan_save_track+0x14/0x30 [ 109.622181][ T5927] ? __kasan_save_free_info+0x3b/0x60 [ 109.622209][ T5927] ? __kasan_slab_free+0x5f/0x80 [ 109.622244][ T5927] ? kfree+0x2b8/0x6d0 [ 109.622267][ T5927] ? tomoyo_path_number_perm+0x470/0x580 [ 109.622324][ T5927] kvm_vm_ioctl+0x1a91/0x3fd0 [ 109.622376][ T5927] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 109.622443][ T5927] ? kasan_quarantine_put+0x10a/0x240 [ 109.622481][ T5927] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.622523][ T5927] ? find_held_lock+0x2b/0x80 [ 109.622558][ T5927] ? tomoyo_path_number_perm+0x295/0x580 [ 109.622626][ T5927] ? tomoyo_path_number_perm+0x18d/0x580 [ 109.622683][ T5927] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.622752][ T5927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.622810][ T5927] ? do_vfs_ioctl+0x128/0x14f0 [ 109.622860][ T5927] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 109.622922][ T5927] ? find_held_lock+0x2b/0x80 [ 109.622954][ T5927] ? hook_file_ioctl_common+0x145/0x410 [ 109.622997][ T5927] ? __fget_files+0x20e/0x3c0 [ 109.623035][ T5927] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 109.623073][ T5927] __x64_sys_ioctl+0x18e/0x210 [ 109.623127][ T5927] do_syscall_64+0xcd/0xfa0 [ 109.623166][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.623199][ T5927] RIP: 0033:0x7fe47d58efc9 [ 109.623236][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.623267][ T5927] RSP: 002b:00007fe47e40e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.623299][ T5927] RAX: ffffffffffffffda RBX: 00007fe47d7e5fa0 RCX: 00007fe47d58efc9 [ 109.623320][ T5927] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 109.623341][ T5927] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.623360][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.623380][ T5927] R13: 00007fe47d7e6038 R14: 00007fe47d7e5fa0 R15: 00007ffce708ad08 [ 109.623423][ T5927] [ 110.261748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.846926][ T5936] Zero length message leads to an empty skb [ 110.891596][ T5951] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6'. [ 111.084684][ T5951] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 111.185526][ T5843] Bluetooth: hci0: command tx timeout [ 111.190990][ T52] Bluetooth: hci3: command tx timeout [ 111.256753][ T5843] Bluetooth: hci2: command tx timeout [ 111.262241][ T52] Bluetooth: hci1: command tx timeout [ 111.285783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.294992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.802930][ T5965] bond0: invalid ARP target specified [ 111.815702][ T5965] raw_sendmsg: syz.1.9 forgot to set AF_INET. Fix it! [ 111.883170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.891542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.901589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 111.911503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.920599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.929422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.938256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.843668][ T6024] device-mapper: ioctl: Invalid ioctl structure: name , dev 200010002 [ 117.874984][ T6020] zswap: compressor not available [ 118.611782][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 119.224023][ T6041] FAULT_INJECTION: forcing a failure. [ 119.224023][ T6041] name failslab, interval 1, probability 0, space 0, times 0 [ 119.300558][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) [ 119.300600][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.300620][ T6041] Call Trace: [ 119.300632][ T6041] [ 119.300646][ T6041] dump_stack_lvl+0x16c/0x1f0 [ 119.300687][ T6041] should_fail_ex+0x512/0x640 [ 119.300735][ T6041] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 119.300773][ T6041] should_failslab+0xc2/0x120 [ 119.300816][ T6041] kmem_cache_alloc_noprof+0x75/0x6e0 [ 119.300848][ T6041] ? key_alloc+0xbef/0x1330 [ 119.300887][ T6041] ? key_alloc+0xbef/0x1330 [ 119.300926][ T6041] key_alloc+0xbef/0x1330 [ 119.300973][ T6041] ? __pfx_key_alloc+0x10/0x10 [ 119.301016][ T6041] keyring_alloc+0x44/0xc0 [ 119.301054][ T6041] keyctl_get_persistent+0x6a8/0x8c0 [ 119.301096][ T6041] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 119.301140][ T6041] ? __x64_sys_futex+0x1e0/0x4c0 [ 119.301183][ T6041] ? __x64_sys_futex+0x1e9/0x4c0 [ 119.301233][ T6041] ? xfd_validate_state+0x61/0x180 [ 119.301276][ T6041] ? __pfx_do_writev+0x10/0x10 [ 119.301314][ T6041] __do_sys_keyctl+0x1a9/0x590 [ 119.301362][ T6041] do_syscall_64+0xcd/0xfa0 [ 119.301398][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.301426][ T6041] RIP: 0033:0x7fb2c638efc9 [ 119.301450][ T6041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.301479][ T6041] RSP: 002b:00007fb2c45f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 119.301507][ T6041] RAX: ffffffffffffffda RBX: 00007fb2c65e5fa0 RCX: 00007fb2c638efc9 [ 119.301526][ T6041] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 119.301558][ T6041] RBP: 00007fb2c6411f91 R08: 0000000000000001 R09: 0000000000000000 [ 119.301576][ T6041] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 119.301593][ T6041] R13: 00007fb2c65e6038 R14: 00007fb2c65e5fa0 R15: 00007ffce8262f18 [ 119.301632][ T6041] [ 119.824731][ T5894] smpboot: CPU 0 is now offline [ 120.566479][ T6055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.757431][ T6055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.520884][ T6055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.708567][ T6055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.770940][ T6055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.985714][ T6055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.106984][ T6055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.153494][ T6055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.247398][ T6055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.272199][ T6055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.307016][ T6055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.344067][ T6055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.365633][ T6072] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.383697][ T6055] CPU0 is offline. [ 122.621260][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.656970][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.133956][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.281777][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 124.296573][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.327990][ T6099] bridge_slave_1: left allmulticast mode [ 124.370617][ T6099] bridge_slave_1: left promiscuous mode [ 124.392007][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.548672][ T6099] bridge_slave_0: left allmulticast mode [ 124.568613][ T6099] bridge_slave_0: left promiscuous mode [ 124.604528][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.694933][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.734085][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.212579][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.377591][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.567529][ T6137] futex_wake_op: syz.2.41 tries to shift op by -2048; fix this program [ 126.606885][ T6137] futex_wake_op: syz.2.41 tries to shift op by -2048; fix this program [ 126.772812][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.812713][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.292566][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.452626][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.153087][ T6152] kexec: Could not allocate control_code_buffer [ 129.413050][ T5843] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 129.862732][ T6163] kexec: Could not allocate control_code_buffer [ 130.257568][ T6182] netlink: 338 bytes leftover after parsing attributes in process `syz.2.50'. [ 130.345774][ T6182] macsec0: entered allmulticast mode [ 130.371468][ T6182] veth1_macvtap: entered allmulticast mode [ 131.571233][ T6185] kexec: Could not allocate control_code_buffer [ 132.464911][ T6201] FAULT_INJECTION: forcing a failure. [ 132.464911][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 132.542969][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(full) [ 132.543001][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.543015][ T6201] Call Trace: [ 132.543023][ T6201] [ 132.543031][ T6201] dump_stack_lvl+0x16c/0x1f0 [ 132.543062][ T6201] should_fail_ex+0x512/0x640 [ 132.543098][ T6201] ? fs_reclaim_acquire+0xae/0x150 [ 132.543132][ T6201] should_failslab+0xc2/0x120 [ 132.543164][ T6201] kmem_cache_alloc_noprof+0x75/0x6e0 [ 132.543189][ T6201] ? __kernfs_new_node+0xd2/0x8e0 [ 132.543224][ T6201] ? __kernfs_new_node+0xd2/0x8e0 [ 132.543252][ T6201] __kernfs_new_node+0xd2/0x8e0 [ 132.543286][ T6201] ? __pfx___kernfs_new_node+0x10/0x10 [ 132.543323][ T6201] ? find_held_lock+0x2b/0x80 [ 132.543348][ T6201] ? kernfs_root+0xee/0x2a0 [ 132.543384][ T6201] kernfs_new_node+0x13c/0x1e0 [ 132.543423][ T6201] __kernfs_create_file+0x53/0x350 [ 132.543451][ T6201] sysfs_add_file_mode_ns+0x207/0x3c0 [ 132.543487][ T6201] internal_create_group+0x578/0xf30 [ 132.543526][ T6201] ? __pfx_internal_create_group+0x10/0x10 [ 132.543562][ T6201] ? kernfs_create_link+0x1bd/0x240 [ 132.543590][ T6201] internal_create_groups+0x9d/0x150 [ 132.543625][ T6201] device_add+0x731/0x1aa0 [ 132.543665][ T6201] ? __pfx_device_add+0x10/0x10 [ 132.543698][ T6201] ? __pfx___might_resched+0x10/0x10 [ 132.543723][ T6201] ? is_dynamic_key+0xb4/0x160 [ 132.543764][ T6201] __add_disk+0x457/0xf00 [ 132.543800][ T6201] add_disk_fwnode+0x13f/0x5d0 [ 132.543833][ T6201] nbd_dev_add+0x783/0xbb0 [ 132.543867][ T6201] ? __pfx_nbd_dev_add+0x10/0x10 [ 132.543915][ T6201] ? bpf_lsm_capable+0x9/0x10 [ 132.543948][ T6201] ? __radix_tree_lookup+0x21f/0x2c0 [ 132.543999][ T6201] nbd_genl_connect+0x8b0/0x1c60 [ 132.544039][ T6201] ? __pfx_nbd_genl_connect+0x10/0x10 [ 132.544075][ T6201] ? __nla_parse+0x40/0x60 [ 132.544104][ T6201] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 132.544139][ T6201] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 132.544176][ T6201] genl_family_rcv_msg_doit+0x209/0x2f0 [ 132.544207][ T6201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 132.544237][ T6201] ? genl_get_cmd+0x194/0x580 [ 132.544272][ T6201] ? __radix_tree_lookup+0x21f/0x2c0 [ 132.544314][ T6201] genl_rcv_msg+0x55c/0x800 [ 132.544346][ T6201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.544375][ T6201] ? __pfx_nbd_genl_connect+0x10/0x10 [ 132.544420][ T6201] netlink_rcv_skb+0x158/0x420 [ 132.544444][ T6201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.544474][ T6201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.544511][ T6201] ? netlink_deliver_tap+0x1ae/0xd30 [ 132.544554][ T6201] genl_rcv+0x28/0x40 [ 132.544578][ T6201] netlink_unicast+0x5aa/0x870 [ 132.544606][ T6201] ? __pfx_netlink_unicast+0x10/0x10 [ 132.544641][ T6201] netlink_sendmsg+0x8c8/0xdd0 [ 132.544670][ T6201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.544699][ T6201] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 132.544738][ T6201] ____sys_sendmsg+0xa98/0xc70 [ 132.544769][ T6201] ? copy_msghdr_from_user+0x10a/0x160 [ 132.544807][ T6201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.544848][ T6201] ? __pfx_futex_wake_mark+0x10/0x10 [ 132.544891][ T6201] ___sys_sendmsg+0x134/0x1d0 [ 132.544910][ T6201] ? futex_private_hash_put+0x176/0x300 [ 132.544941][ T6201] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.544982][ T6201] ? __lock_acquire+0x622/0x1c90 [ 132.545050][ T6201] __sys_sendmsg+0x16d/0x220 [ 132.545073][ T6201] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.545094][ T6201] ? __x64_sys_futex+0x1e0/0x4c0 [ 132.545144][ T6201] do_syscall_64+0xcd/0xfa0 [ 132.545172][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.545196][ T6201] RIP: 0033:0x7fe47d58efc9 [ 132.545216][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.545238][ T6201] RSP: 002b:00007fe47e40e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.545261][ T6201] RAX: ffffffffffffffda RBX: 00007fe47d7e5fa0 RCX: 00007fe47d58efc9 [ 132.545276][ T6201] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 132.545291][ T6201] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.545305][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.545319][ T6201] R13: 00007fe47d7e6038 R14: 00007fe47d7e5fa0 R15: 00007ffce708ad08 [ 132.545350][ T6201] [ 133.673227][ T6201] nbd: failed to add new device [ 133.933100][ T6216] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.043696][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 135.919487][ T6254] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.618322][ T6268] netlink: 330 bytes leftover after parsing attributes in process `syz.0.67'. [ 136.834301][ T6268] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 137.948182][ T6276] netlink: 5 bytes leftover after parsing attributes in process `syz.3.69'. [ 138.098432][ T6284] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 140.384931][ T6305] FAULT_INJECTION: forcing a failure. [ 140.384931][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 140.470766][ T6305] CPU: 1 UID: 0 PID: 6305 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 140.470799][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.470813][ T6305] Call Trace: [ 140.470821][ T6305] [ 140.470830][ T6305] dump_stack_lvl+0x16c/0x1f0 [ 140.470860][ T6305] should_fail_ex+0x512/0x640 [ 140.470895][ T6305] ? __kmalloc_noprof+0xca/0x880 [ 140.470936][ T6305] should_failslab+0xc2/0x120 [ 140.470968][ T6305] __kmalloc_noprof+0xdd/0x880 [ 140.471006][ T6305] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 140.471037][ T6305] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 140.471062][ T6305] apply_wqattrs_prepare+0xf8/0xbd0 [ 140.471099][ T6305] apply_workqueue_attrs_locked+0x64/0xe0 [ 140.471126][ T6305] __alloc_workqueue+0xf3f/0x1810 [ 140.471162][ T6305] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 140.471189][ T6305] alloc_workqueue_noprof+0xd2/0x200 [ 140.471220][ T6305] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 140.471272][ T6305] ? __pfx___debug_object_init+0x10/0x10 [ 140.471308][ T6305] nci_register_device+0x394/0xb80 [ 140.471347][ T6305] ? __pfx_nci_register_device+0x10/0x10 [ 140.471388][ T6305] ? lockdep_init_map_type+0x5c/0x280 [ 140.471428][ T6305] virtual_ncidev_open+0x141/0x220 [ 140.471454][ T6305] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 140.471479][ T6305] misc_open+0x26d/0x450 [ 140.471514][ T6305] ? __pfx_misc_open+0x10/0x10 [ 140.471548][ T6305] chrdev_open+0x234/0x6a0 [ 140.471576][ T6305] ? __pfx_apparmor_file_open+0x10/0x10 [ 140.471611][ T6305] ? __pfx_chrdev_open+0x10/0x10 [ 140.471641][ T6305] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 140.471673][ T6305] do_dentry_open+0x982/0x1530 [ 140.471701][ T6305] ? __pfx_chrdev_open+0x10/0x10 [ 140.471735][ T6305] vfs_open+0x82/0x3f0 [ 140.471772][ T6305] path_openat+0x1de4/0x2cb0 [ 140.471807][ T6305] ? __pfx_path_openat+0x10/0x10 [ 140.471835][ T6305] ? __lock_acquire+0xb8a/0x1c90 [ 140.471870][ T6305] do_filp_open+0x20b/0x470 [ 140.471896][ T6305] ? __pfx_do_filp_open+0x10/0x10 [ 140.471947][ T6305] ? alloc_fd+0x471/0x7d0 [ 140.471985][ T6305] do_sys_openat2+0x11b/0x1d0 [ 140.472020][ T6305] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.472066][ T6305] __x64_sys_openat+0x174/0x210 [ 140.472103][ T6305] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.472155][ T6305] do_syscall_64+0xcd/0xfa0 [ 140.472183][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.472206][ T6305] RIP: 0033:0x7f092038efc9 [ 140.472224][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.472252][ T6305] RSP: 002b:00007f0921240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.472274][ T6305] RAX: ffffffffffffffda RBX: 00007f09205e5fa0 RCX: 00007f092038efc9 [ 140.472289][ T6305] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 140.472304][ T6305] RBP: 00007f0920411f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.472317][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.472331][ T6305] R13: 00007f09205e6038 R14: 00007f09205e5fa0 R15: 00007ffca34aa598 [ 140.472362][ T6305] [ 140.810988][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 142.058406][ T6315] syz.0.78 (6315) used greatest stack depth: 19720 bytes left [ 142.540973][ T6329] process 'syz.2.81' launched ':,' with NULL argv: empty string added [ 142.737620][ T6329] HfR: entered promiscuous mode [ 143.363376][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.369931][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.689963][ T6361] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 47 [ 145.108430][ T6366] netlink: 'syz.2.89': attribute type 5 has an invalid length. [ 146.389278][ T6380] FAULT_INJECTION: forcing a failure. [ 146.389278][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 146.415345][ T6367] kexec: Could not allocate control_code_buffer [ 146.482757][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT(full) [ 146.482789][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.482803][ T6380] Call Trace: [ 146.482810][ T6380] [ 146.482819][ T6380] dump_stack_lvl+0x16c/0x1f0 [ 146.482849][ T6380] should_fail_ex+0x512/0x640 [ 146.482885][ T6380] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 146.482913][ T6380] should_failslab+0xc2/0x120 [ 146.482945][ T6380] kmem_cache_alloc_noprof+0x75/0x6e0 [ 146.482967][ T6380] ? futex_wait+0x30/0x380 [ 146.482987][ T6380] ? do_epoll_ctl+0x1170/0x3790 [ 146.483018][ T6380] ? do_epoll_ctl+0x1170/0x3790 [ 146.483042][ T6380] do_epoll_ctl+0x1170/0x3790 [ 146.483067][ T6380] ? lockdep_init_map_type+0x5c/0x280 [ 146.483111][ T6380] ? __pfx_do_epoll_ctl+0x10/0x10 [ 146.483134][ T6380] ? find_held_lock+0x2b/0x80 [ 146.483157][ T6380] ? __might_fault+0xe3/0x190 [ 146.483179][ T6380] ? __might_fault+0xe3/0x190 [ 146.483213][ T6380] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 146.483237][ T6380] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 146.483264][ T6380] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 146.483299][ T6380] do_syscall_64+0xcd/0xfa0 [ 146.483326][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.483350][ T6380] RIP: 0033:0x7f092038efc9 [ 146.483368][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.483390][ T6380] RSP: 002b:00007f0921240038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 146.483411][ T6380] RAX: ffffffffffffffda RBX: 00007f09205e5fa0 RCX: 00007f092038efc9 [ 146.483426][ T6380] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 146.483440][ T6380] RBP: 00007f0920411f91 R08: 0000000000000000 R09: 0000000000000000 [ 146.483454][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.483468][ T6380] R13: 00007f09205e6038 R14: 00007f09205e5fa0 R15: 00007ffca34aa598 [ 146.483498][ T6380] [ 146.555168][ T6385] netlink: 326 bytes leftover after parsing attributes in process `syz.3.93'. [ 147.724368][ T6380] tty tty12: ldisc open failed (-12), clearing slot 11 [ 149.354956][ T6411] kexec: Could not allocate control_code_buffer [ 150.903760][ T6424] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 151.515879][ T5843] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 153.377511][ T5843] Bluetooth: hci3: unexpected event 0x16 length: 440 > 6 [ 154.590134][ T6468] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 155.672116][ T6527] ima: policy update failed [ 155.711543][ T6527] netlink: 25 bytes leftover after parsing attributes in process `syz.3.124'. [ 155.724393][ T30] audit: type=1802 audit(4294967301.220:2): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.124" res=0 errno=0 [ 156.558463][ T6549] netlink: 146 bytes leftover after parsing attributes in process `syz.1.129'. [ 156.846677][ T6552] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 157.466049][ T6549] netlink: 186 bytes leftover after parsing attributes in process `syz.1.129'. [ 157.488401][ T6565] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 157.646667][ T6549] netlink: 146 bytes leftover after parsing attributes in process `syz.1.129'. [ 158.031488][ T6570] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 48 [ 158.200702][ T6574] netlink: 326 bytes leftover after parsing attributes in process `syz.2.134'. [ 158.663981][ T5843] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 159.715834][ T6600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.015371][ T6610] netlink: 338 bytes leftover after parsing attributes in process `syz.3.140'. [ 161.167124][ T6618] __vm_enough_memory: pid: 6618, comm: syz.2.143, bytes: 4398046511104 not enough memory for the allocation [ 161.243345][ T6612] sp0: Synchronizing with TNC [ 162.136699][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 162.183683][ T6635] netlink: 354 bytes leftover after parsing attributes in process `syz.2.148'. [ 162.572849][ T6641] netlink: 252 bytes leftover after parsing attributes in process `syz.0.150'. [ 162.701741][ T6641] unsupported nla_type 65535 [ 162.788841][ T6647] netlink: 350 bytes leftover after parsing attributes in process `syz.0.150'. [ 163.890059][ T6657] netlink: 338 bytes leftover after parsing attributes in process `syz.0.153'. [ 165.101106][ T6663] kexec: Could not allocate control_code_buffer [ 167.999613][ T6718] netlink: 338 bytes leftover after parsing attributes in process `syz.1.165'. [ 168.676726][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 168.754495][ T6722] netlink: 354 bytes leftover after parsing attributes in process `syz.1.167'. [ 168.861274][ T5894] Process accounting resumed [ 169.424637][ T6732] netlink: 338 bytes leftover after parsing attributes in process `syz.1.170'. [ 169.853846][ T6728] Process accounting resumed [ 170.520226][ T5843] Bluetooth: hci0: unexpected event 0x17 length: 440 > 6 [ 173.679517][ T6784] openvswitch: netlink: IPv4 tunnel dst address is zero [ 173.923164][ T6786] netlink: 146 bytes leftover after parsing attributes in process `syz.2.181'. [ 174.170230][ T6789] netlink: 186 bytes leftover after parsing attributes in process `syz.2.181'. [ 174.478671][ T6791] netlink: 146 bytes leftover after parsing attributes in process `syz.2.181'. [ 175.299187][ T6809] futex_wake_op: syz.2.185 tries to shift op by -9; fix this program [ 177.458967][ T6847] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 179.452340][ T6878] FAULT_INJECTION: forcing a failure. [ 179.452340][ T6878] name failslab, interval 1, probability 0, space 0, times 0 [ 179.515531][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 179.515564][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.515577][ T6878] Call Trace: [ 179.515585][ T6878] [ 179.515594][ T6878] dump_stack_lvl+0x16c/0x1f0 [ 179.515625][ T6878] should_fail_ex+0x512/0x640 [ 179.515661][ T6878] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 179.515688][ T6878] should_failslab+0xc2/0x120 [ 179.515721][ T6878] kmem_cache_alloc_noprof+0x75/0x6e0 [ 179.515744][ T6878] ? __proc_create+0x2ce/0x8e0 [ 179.515783][ T6878] ? __proc_create+0x2ce/0x8e0 [ 179.515816][ T6878] __proc_create+0x2ce/0x8e0 [ 179.515855][ T6878] ? __pfx___proc_create+0x10/0x10 [ 179.515893][ T6878] ? _raw_write_unlock+0x28/0x50 [ 179.515917][ T6878] ? proc_register+0x559/0x8b0 [ 179.515955][ T6878] proc_create_reg+0x7d/0x180 [ 179.515992][ T6878] ? __pfx_snmp_seq_show+0x10/0x10 [ 179.516025][ T6878] proc_create_net_single+0x86/0x180 [ 179.516062][ T6878] ? __pfx_proc_create_net_single+0x10/0x10 [ 179.516097][ T6878] ? __pfx_proc_create_net_data+0x10/0x10 [ 179.516140][ T6878] ? __pfx_ip_proc_init_net+0x10/0x10 [ 179.516173][ T6878] ip_proc_init_net+0xe8/0x1a0 [ 179.516205][ T6878] ops_init+0x1e2/0x5f0 [ 179.516231][ T6878] setup_net+0x100/0x390 [ 179.516255][ T6878] ? __pfx_setup_net+0x10/0x10 [ 179.516279][ T6878] ? debug_mutex_init+0x37/0x70 [ 179.516307][ T6878] copy_net_ns+0x2f8/0x690 [ 179.516342][ T6878] create_new_namespaces+0x3ea/0xa90 [ 179.516378][ T6878] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 179.516408][ T6878] ksys_unshare+0x45b/0xa40 [ 179.516440][ T6878] ? __pfx_ksys_unshare+0x10/0x10 [ 179.516472][ T6878] ? xfd_validate_state+0x61/0x180 [ 179.516514][ T6878] __x64_sys_unshare+0x31/0x40 [ 179.516545][ T6878] do_syscall_64+0xcd/0xfa0 [ 179.516573][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.516596][ T6878] RIP: 0033:0x7fe6de58efc9 [ 179.516614][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.516637][ T6878] RSP: 002b:00007fe6df377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 179.516665][ T6878] RAX: ffffffffffffffda RBX: 00007fe6de7e5fa0 RCX: 00007fe6de58efc9 [ 179.516680][ T6878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 179.516694][ T6878] RBP: 00007fe6de611f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.516707][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.516721][ T6878] R13: 00007fe6de7e6038 R14: 00007fe6de7e5fa0 R15: 00007ffc1e4b0a98 [ 179.516760][ T6878] [ 181.322244][ T6883] kexec: Could not allocate control_code_buffer [ 183.436132][ T6926] FAULT_INJECTION: forcing a failure. [ 183.436132][ T6926] name failslab, interval 1, probability 0, space 0, times 0 [ 183.581755][ T6926] CPU: 1 UID: 0 PID: 6926 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(full) [ 183.581788][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.581802][ T6926] Call Trace: [ 183.581809][ T6926] [ 183.581818][ T6926] dump_stack_lvl+0x16c/0x1f0 [ 183.581854][ T6926] should_fail_ex+0x512/0x640 [ 183.581891][ T6926] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 183.581918][ T6926] should_failslab+0xc2/0x120 [ 183.581950][ T6926] kmem_cache_alloc_noprof+0x75/0x6e0 [ 183.581974][ T6926] ? __kernfs_new_node+0xd2/0x8e0 [ 183.582009][ T6926] ? __kernfs_new_node+0xd2/0x8e0 [ 183.582038][ T6926] __kernfs_new_node+0xd2/0x8e0 [ 183.582071][ T6926] ? __pfx___kernfs_new_node+0x10/0x10 [ 183.582109][ T6926] ? find_held_lock+0x2b/0x80 [ 183.582134][ T6926] ? kernfs_root+0xee/0x2a0 [ 183.582170][ T6926] kernfs_new_node+0x13c/0x1e0 [ 183.582204][ T6926] ? current_in_userns+0xd0/0x190 [ 183.582245][ T6926] __kernfs_create_file+0x53/0x350 [ 183.582272][ T6926] sysfs_add_file_mode_ns+0x207/0x3c0 [ 183.582308][ T6926] internal_create_group+0x578/0xf30 [ 183.582345][ T6926] ? kobject_init_and_add+0x123/0x190 [ 183.582379][ T6926] ? __pfx_internal_create_group+0x10/0x10 [ 183.582409][ T6926] ? __pfx_kobject_init_and_add+0x10/0x10 [ 183.582439][ T6926] ? ops_init+0x1e2/0x5f0 [ 183.582462][ T6926] ? ksys_unshare+0x45b/0xa40 [ 183.582491][ T6926] ? __x64_sys_unshare+0x31/0x40 [ 183.582521][ T6926] ? do_syscall_64+0xcd/0xfa0 [ 183.582545][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.582574][ T6926] internal_create_groups+0x9d/0x150 [ 183.582609][ T6926] netdev_queue_update_kobjects+0x115/0x720 [ 183.582647][ T6926] netdev_register_kobject+0x2b3/0x3d0 [ 183.582679][ T6926] register_netdevice+0x13dc/0x2270 [ 183.582710][ T6926] ? __pfx_register_netdevice+0x10/0x10 [ 183.582745][ T6926] __ip_tunnel_create+0x540/0x6e0 [ 183.582775][ T6926] ? __pfx___ip_tunnel_create+0x10/0x10 [ 183.582812][ T6926] ip_tunnel_init_net+0x22f/0x7d0 [ 183.582852][ T6926] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 183.582890][ T6926] ? ops_init+0x77/0x5f0 [ 183.582914][ T6926] ? __pfx_ipgre_init_net+0x10/0x10 [ 183.582937][ T6926] ops_init+0x1e2/0x5f0 [ 183.582962][ T6926] setup_net+0x100/0x390 [ 183.582986][ T6926] ? __pfx_setup_net+0x10/0x10 [ 183.583011][ T6926] ? debug_mutex_init+0x37/0x70 [ 183.583038][ T6926] copy_net_ns+0x2f8/0x690 [ 183.583067][ T6926] create_new_namespaces+0x3ea/0xa90 [ 183.583101][ T6926] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 183.583131][ T6926] ksys_unshare+0x45b/0xa40 [ 183.583163][ T6926] ? __pfx_ksys_unshare+0x10/0x10 [ 183.583195][ T6926] ? xfd_validate_state+0x61/0x180 [ 183.583238][ T6926] __x64_sys_unshare+0x31/0x40 [ 183.583269][ T6926] do_syscall_64+0xcd/0xfa0 [ 183.583296][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.583319][ T6926] RIP: 0033:0x7fe6de58efc9 [ 183.583338][ T6926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.583360][ T6926] RSP: 002b:00007fe6df377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 183.583382][ T6926] RAX: ffffffffffffffda RBX: 00007fe6de7e5fa0 RCX: 00007fe6de58efc9 [ 183.583397][ T6926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 183.583411][ T6926] RBP: 00007fe6de611f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.583425][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.583438][ T6926] R13: 00007fe6de7e6038 R14: 00007fe6de7e5fa0 R15: 00007ffc1e4b0a98 [ 183.583468][ T6926] [ 186.365882][ T6968] netlink: 338 bytes leftover after parsing attributes in process `syz.3.214'. [ 186.426487][ T6968] veth1_macvtap: left promiscuous mode [ 187.665815][ T6964] kexec: Could not allocate control_code_buffer [ 189.952596][ T7011] futex_wake_op: syz.0.223 tries to shift op by -9; fix this program [ 192.374282][ T7042] [U]  [ 192.377312][ T7042] [U] [ 192.380036][ T7042] [U] [ 192.382746][ T7042] [U] [ 192.437192][ T7042] [U] [ 192.439978][ T7042] [U] [ 192.442691][ T7042] [U] [ 192.445414][ T7042] [U] [ 192.470709][ T7042] [U] [ 192.473476][ T7042] [U] [ 192.476206][ T7042] [U] [ 192.478921][ T7042] [U] [ 192.527678][ T7042] [U] [ 192.530444][ T7042] [U] [ 192.533339][ T7042] [U] [ 192.536051][ T7042] [U] [ 192.619167][ T7042] [U] [ 194.378731][ T7067] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 195.645246][ T30] audit: type=1804 audit(4294967334.100:3): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.234" name="/newroot/58/file0" dev="tmpfs" ino=315 res=1 errno=0 [ 195.752602][ T30] audit: type=1804 audit(4294967334.120:4): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.234" name="/newroot/58/file0" dev="tmpfs" ino=315 res=1 errno=0 [ 196.459760][ T7100] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 198.287257][ T7112] kexec: Could not allocate control_code_buffer [ 199.318784][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 200.455923][ T7146] veth0_macvtap: left promiscuous mode [ 200.489760][ T7146] macvtap0: entered promiscuous mode [ 200.511269][ T7146] macvtap0: entered allmulticast mode [ 200.527822][ T7129] Process accounting paused [ 200.694053][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 201.257964][ T7155] FAULT_INJECTION: forcing a failure. [ 201.257964][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 201.331953][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(full) [ 201.331984][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.331998][ T7155] Call Trace: [ 201.332005][ T7155] [ 201.332014][ T7155] dump_stack_lvl+0x16c/0x1f0 [ 201.332044][ T7155] should_fail_ex+0x512/0x640 [ 201.332085][ T7155] ? __kmalloc_noprof+0xca/0x880 [ 201.332127][ T7155] should_failslab+0xc2/0x120 [ 201.332160][ T7155] __kmalloc_noprof+0xdd/0x880 [ 201.332196][ T7155] ? consume_skb+0x10/0x100 [ 201.332221][ T7155] ? ethnl_default_notify+0x176/0xa40 [ 201.332265][ T7155] ? ethnl_default_notify+0x176/0xa40 [ 201.332301][ T7155] ethnl_default_notify+0x176/0xa40 [ 201.332341][ T7155] ? __build_skb_around+0x278/0x3b0 [ 201.332375][ T7155] ? __pfx_ethnl_default_notify+0x10/0x10 [ 201.332412][ T7155] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 201.332447][ T7155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.332497][ T7155] ? __pfx_ethnl_default_notify+0x10/0x10 [ 201.332541][ T7155] ethnl_notify+0xc2/0x200 [ 201.332581][ T7155] ethnl_netdev_event+0x10a/0x190 [ 201.332604][ T7155] notifier_call_chain+0xbc/0x410 [ 201.332635][ T7155] ? __pfx_ethnl_netdev_event+0x10/0x10 [ 201.332663][ T7155] call_netdevice_notifiers_info+0xbe/0x140 [ 201.332697][ T7155] netdev_update_features+0xca/0xe0 [ 201.332722][ T7155] ? __pfx_netdev_update_features+0x10/0x10 [ 201.332749][ T7155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.332790][ T7155] __tun_chr_ioctl+0x4d1/0x4880 [ 201.332812][ T7155] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.332851][ T7155] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 201.332877][ T7155] ? hook_file_ioctl_common+0x145/0x410 [ 201.332907][ T7155] ? __fget_files+0x20e/0x3c0 [ 201.332934][ T7155] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 201.332958][ T7155] __x64_sys_ioctl+0x18e/0x210 [ 201.332995][ T7155] do_syscall_64+0xcd/0xfa0 [ 201.333023][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.333046][ T7155] RIP: 0033:0x7fe6de58efc9 [ 201.333065][ T7155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.333094][ T7155] RSP: 002b:00007fe6df356038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.333116][ T7155] RAX: ffffffffffffffda RBX: 00007fe6de7e6090 RCX: 00007fe6de58efc9 [ 201.333131][ T7155] RDX: 0000000000000073 RSI: 00000000400454d0 RDI: 00000000000000c8 [ 201.333145][ T7155] RBP: 00007fe6de611f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.333159][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.333172][ T7155] R13: 00007fe6de7e6128 R14: 00007fe6de7e6090 R15: 00007ffc1e4b0a98 [ 201.333203][ T7155] [ 202.092973][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 203.446669][ T7182] kexec: Could not allocate control_code_buffer [ 204.782884][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.789229][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.614821][ T7234] ima: policy update failed [ 205.647941][ T30] audit: type=1802 audit(4294967344.100:5): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.264" res=0 errno=0 [ 205.667521][ T7234] netlink: 25 bytes leftover after parsing attributes in process `syz.0.264'. [ 210.122499][ T7291] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.276: bg 1: bad block bitmap checksum [ 210.179932][ T7291] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6667: Filesystem failed CRC [ 210.271611][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 210.390244][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.278'. [ 210.438269][ T7297] netlink: 93 bytes leftover after parsing attributes in process `syz.3.278'. [ 210.498320][ T7300] FAULT_INJECTION: forcing a failure. [ 210.498320][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 210.546009][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 210.546042][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.546056][ T7300] Call Trace: [ 210.546063][ T7300] [ 210.546072][ T7300] dump_stack_lvl+0x16c/0x1f0 [ 210.546103][ T7300] should_fail_ex+0x512/0x640 [ 210.546139][ T7300] ? __kmalloc_noprof+0xca/0x880 [ 210.546179][ T7300] should_failslab+0xc2/0x120 [ 210.546211][ T7300] __kmalloc_noprof+0xdd/0x880 [ 210.546246][ T7300] ? consume_skb+0x10/0x100 [ 210.546271][ T7300] ? ethnl_default_notify+0x176/0xa40 [ 210.546315][ T7300] ? ethnl_default_notify+0x176/0xa40 [ 210.546352][ T7300] ethnl_default_notify+0x176/0xa40 [ 210.546392][ T7300] ? __build_skb_around+0x278/0x3b0 [ 210.546422][ T7300] ? __pfx_ethnl_default_notify+0x10/0x10 [ 210.546467][ T7300] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 210.546501][ T7300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.546547][ T7300] ? __pfx_ethnl_default_notify+0x10/0x10 [ 210.546586][ T7300] ethnl_notify+0xc2/0x200 [ 210.546624][ T7300] ethnl_netdev_event+0x10a/0x190 [ 210.546647][ T7300] notifier_call_chain+0xbc/0x410 [ 210.546678][ T7300] ? __pfx_ethnl_netdev_event+0x10/0x10 [ 210.546706][ T7300] call_netdevice_notifiers_info+0xbe/0x140 [ 210.546738][ T7300] netdev_update_features+0xca/0xe0 [ 210.546763][ T7300] ? __pfx_netdev_update_features+0x10/0x10 [ 210.546791][ T7300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.546831][ T7300] __tun_chr_ioctl+0x4d1/0x4880 [ 210.546853][ T7300] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.546893][ T7300] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 210.546919][ T7300] ? hook_file_ioctl_common+0x145/0x410 [ 210.546949][ T7300] ? __fget_files+0x20e/0x3c0 [ 210.546977][ T7300] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 210.547006][ T7300] __x64_sys_ioctl+0x18e/0x210 [ 210.547043][ T7300] do_syscall_64+0xcd/0xfa0 [ 210.547071][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.547095][ T7300] RIP: 0033:0x7fe47d58efc9 [ 210.547113][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.547136][ T7300] RSP: 002b:00007fe47e3ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.547158][ T7300] RAX: ffffffffffffffda RBX: 00007fe47d7e6090 RCX: 00007fe47d58efc9 [ 210.547173][ T7300] RDX: 0000000000000073 RSI: 00000000400454d0 RDI: 00000000000000c8 [ 210.547186][ T7300] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.547200][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.547213][ T7300] R13: 00007fe47d7e6128 R14: 00007fe47d7e6090 R15: 00007ffce708ad08 [ 210.547243][ T7300] [ 211.099015][ T7302] kfence: disabled [ 212.420271][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 213.544640][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'. [ 216.576765][ T7372] kexec: Could not allocate control_code_buffer [ 217.013343][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 217.524031][ T30] audit: type=1804 audit(4294967355.980:6): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.297" name="/newroot/64/file0" dev="tmpfs" ino=353 res=1 errno=0 [ 217.639498][ T30] audit: type=1804 audit(4294967356.010:7): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.297" name="/newroot/64/file0" dev="tmpfs" ino=353 res=1 errno=0 [ 217.754636][ T30] audit: type=1800 audit(4294967356.020:8): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.297" name="file0" dev="tmpfs" ino=353 res=0 errno=0 [ 218.077756][ T7411] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 218.250618][ T24] Process accounting resumed [ 219.493198][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 219.582911][ T7440] netlink: 93 bytes leftover after parsing attributes in process `syz.1.304'. [ 222.428900][ T7474] FAULT_INJECTION: forcing a failure. [ 222.428900][ T7474] name failslab, interval 1, probability 0, space 0, times 0 [ 222.511628][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.0.312 Not tainted syzkaller #0 PREEMPT(full) [ 222.511661][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.511675][ T7474] Call Trace: [ 222.511683][ T7474] [ 222.511691][ T7474] dump_stack_lvl+0x16c/0x1f0 [ 222.511722][ T7474] should_fail_ex+0x512/0x640 [ 222.511758][ T7474] ? __kmalloc_noprof+0xca/0x880 [ 222.511799][ T7474] should_failslab+0xc2/0x120 [ 222.511831][ T7474] __kmalloc_noprof+0xdd/0x880 [ 222.511867][ T7474] ? __init_waitqueue_head+0xca/0x150 [ 222.511907][ T7474] ? __netlink_kernel_create+0x17f/0x750 [ 222.511936][ T7474] ? __netlink_kernel_create+0x17f/0x750 [ 222.511959][ T7474] __netlink_kernel_create+0x17f/0x750 [ 222.511985][ T7474] ? __pfx___netlink_kernel_create+0x10/0x10 [ 222.512018][ T7474] fib_net_init+0x26d/0x3f0 [ 222.512045][ T7474] ? __pfx___register_sysctl_table+0x10/0x10 [ 222.512091][ T7474] ? __pfx_fib_net_init+0x10/0x10 [ 222.512117][ T7474] ? lockdep_init_map_type+0x5c/0x280 [ 222.512152][ T7474] ? __pfx_nl_fib_input+0x10/0x10 [ 222.512183][ T7474] ? devinet_init_net+0x5c2/0x910 [ 222.512215][ T7474] ? __pfx_fib_net_init+0x10/0x10 [ 222.512241][ T7474] ops_init+0x1e2/0x5f0 [ 222.512270][ T7474] setup_net+0x100/0x390 [ 222.512293][ T7474] ? __pfx_setup_net+0x10/0x10 [ 222.512318][ T7474] ? debug_mutex_init+0x37/0x70 [ 222.512345][ T7474] copy_net_ns+0x2f8/0x690 [ 222.512374][ T7474] create_new_namespaces+0x3ea/0xa90 [ 222.512409][ T7474] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 222.512439][ T7474] ksys_unshare+0x45b/0xa40 [ 222.512471][ T7474] ? __pfx_ksys_unshare+0x10/0x10 [ 222.512504][ T7474] ? xfd_validate_state+0x61/0x180 [ 222.512546][ T7474] __x64_sys_unshare+0x31/0x40 [ 222.512577][ T7474] do_syscall_64+0xcd/0xfa0 [ 222.512605][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.512629][ T7474] RIP: 0033:0x7fe47d58efc9 [ 222.512647][ T7474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.512669][ T7474] RSP: 002b:00007fe47e40e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 222.512690][ T7474] RAX: ffffffffffffffda RBX: 00007fe47d7e5fa0 RCX: 00007fe47d58efc9 [ 222.512705][ T7474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 222.512719][ T7474] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.512732][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.512745][ T7474] R13: 00007fe47d7e6038 R14: 00007fe47d7e5fa0 R15: 00007ffce708ad08 [ 222.512775][ T7474] [ 225.723140][ T7528] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 227.163138][ T7558] FAULT_INJECTION: forcing a failure. [ 227.163138][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 227.238944][ T7558] CPU: 1 UID: 0 PID: 7558 Comm: syz.0.327 Not tainted syzkaller #0 PREEMPT(full) [ 227.238977][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.238991][ T7558] Call Trace: [ 227.238998][ T7558] [ 227.239007][ T7558] dump_stack_lvl+0x16c/0x1f0 [ 227.239038][ T7558] should_fail_ex+0x512/0x640 [ 227.239074][ T7558] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 227.239101][ T7558] should_failslab+0xc2/0x120 [ 227.239133][ T7558] kmem_cache_alloc_noprof+0x75/0x6e0 [ 227.239155][ T7558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.239195][ T7558] ? mas_preallocate+0xe6a/0x11f0 [ 227.239227][ T7558] ? mas_preallocate+0xe6a/0x11f0 [ 227.239253][ T7558] mas_preallocate+0xe6a/0x11f0 [ 227.239285][ T7558] ? __pfx_mas_preallocate+0x10/0x10 [ 227.239323][ T7558] ? __pfx_mt_find+0x10/0x10 [ 227.239357][ T7558] vma_link+0x12e/0x6a0 [ 227.239382][ T7558] ? __pfx_vma_link+0x10/0x10 [ 227.239421][ T7558] insert_vm_struct+0xf4/0x2d0 [ 227.239449][ T7558] create_init_stack_vma+0x2da/0x700 [ 227.239479][ T7558] alloc_bprm+0x420/0x710 [ 227.239505][ T7558] do_execveat_common.isra.0+0x1ce/0x610 [ 227.239544][ T7558] __x64_sys_execve+0x8e/0xb0 [ 227.239569][ T7558] do_syscall_64+0xcd/0xfa0 [ 227.239597][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.239621][ T7558] RIP: 0033:0x7fe47d58efc9 [ 227.239640][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.239661][ T7558] RSP: 002b:00007fe47e40e038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 227.239683][ T7558] RAX: ffffffffffffffda RBX: 00007fe47d7e5fa0 RCX: 00007fe47d58efc9 [ 227.239698][ T7558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 227.239712][ T7558] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 227.239726][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.239739][ T7558] R13: 00007fe47d7e6038 R14: 00007fe47d7e5fa0 R15: 00007ffce708ad08 [ 227.239769][ T7558] [ 228.590762][ T7570] FAULT_INJECTION: forcing a failure. [ 228.590762][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 228.672553][ T7570] CPU: 1 UID: 0 PID: 7570 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT(full) [ 228.672585][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.672599][ T7570] Call Trace: [ 228.672607][ T7570] [ 228.672616][ T7570] dump_stack_lvl+0x16c/0x1f0 [ 228.672646][ T7570] should_fail_ex+0x512/0x640 [ 228.672682][ T7570] ? fs_reclaim_acquire+0xae/0x150 [ 228.672716][ T7570] should_failslab+0xc2/0x120 [ 228.672748][ T7570] __kmalloc_cache_noprof+0x72/0x780 [ 228.672788][ T7570] ? usb_control_msg+0xbc/0x4a0 [ 228.672826][ T7570] ? usb_control_msg+0xbc/0x4a0 [ 228.672857][ T7570] usb_control_msg+0xbc/0x4a0 [ 228.672891][ T7570] ? __pfx_usb_control_msg+0x10/0x10 [ 228.672933][ T7570] hub_ext_port_status+0x14e/0x670 [ 228.672974][ T7570] hub_activate+0x6e5/0x1d60 [ 228.673015][ T7570] ? __pfx_hub_activate+0x10/0x10 [ 228.673046][ T7570] ? find_held_lock+0x2b/0x80 [ 228.673071][ T7570] ? async_completed+0xb10/0xc60 [ 228.673106][ T7570] hub_resume+0xa8/0x3f0 [ 228.673139][ T7570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.673169][ T7570] ? __pfx_hub_resume+0x10/0x10 [ 228.673202][ T7570] ? __pfx_hcd_bus_resume+0x10/0x10 [ 228.673236][ T7570] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 228.673267][ T7570] usb_resume_both+0x237/0x960 [ 228.673292][ T7570] ? __pfx_usb_resume_both+0x10/0x10 [ 228.673317][ T7570] ? __pfx_usb_runtime_resume+0x10/0x10 [ 228.673347][ T7570] ? __pfx_usb_runtime_resume+0x10/0x10 [ 228.673375][ T7570] __rpm_callback+0xc8/0x610 [ 228.673416][ T7570] ? __pfx_usb_runtime_resume+0x10/0x10 [ 228.673445][ T7570] rpm_callback+0x1b7/0x200 [ 228.673474][ T7570] ? __pfx_usb_runtime_resume+0x10/0x10 [ 228.673502][ T7570] rpm_resume+0xd16/0x1320 [ 228.673539][ T7570] ? __pfx_rpm_resume+0x10/0x10 [ 228.673568][ T7570] ? do_raw_spin_lock+0x12c/0x2b0 [ 228.673606][ T7570] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.673654][ T7570] __pm_runtime_resume+0xb6/0x170 [ 228.673688][ T7570] usb_autoresume_device+0x23/0xe0 [ 228.673717][ T7570] usbdev_open+0x228/0x8b0 [ 228.673745][ T7570] ? do_raw_spin_lock+0x12c/0x2b0 [ 228.673783][ T7570] ? __pfx_usbdev_open+0x10/0x10 [ 228.673810][ T7570] ? chrdev_open+0x58c/0x6a0 [ 228.673842][ T7570] ? __pfx_usbdev_open+0x10/0x10 [ 228.673869][ T7570] chrdev_open+0x234/0x6a0 [ 228.673898][ T7570] ? __pfx_chrdev_open+0x10/0x10 [ 228.673928][ T7570] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 228.673960][ T7570] do_dentry_open+0x982/0x1530 [ 228.673987][ T7570] ? __pfx_chrdev_open+0x10/0x10 [ 228.674021][ T7570] vfs_open+0x82/0x3f0 [ 228.674058][ T7570] path_openat+0x1de4/0x2cb0 [ 228.674094][ T7570] ? __pfx_path_openat+0x10/0x10 [ 228.674121][ T7570] ? __lock_acquire+0xb8a/0x1c90 [ 228.674156][ T7570] do_filp_open+0x20b/0x470 [ 228.674182][ T7570] ? __pfx_do_filp_open+0x10/0x10 [ 228.674228][ T7570] ? alloc_fd+0x471/0x7d0 [ 228.674259][ T7570] do_sys_openat2+0x11b/0x1d0 [ 228.674293][ T7570] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.674339][ T7570] __x64_sys_openat+0x174/0x210 [ 228.674375][ T7570] ? __pfx___x64_sys_openat+0x10/0x10 [ 228.674428][ T7570] do_syscall_64+0xcd/0xfa0 [ 228.674456][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.674480][ T7570] RIP: 0033:0x7fe47d58efc9 [ 228.674499][ T7570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.674521][ T7570] RSP: 002b:00007fe47e40e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 228.674543][ T7570] RAX: ffffffffffffffda RBX: 00007fe47d7e5fa0 RCX: 00007fe47d58efc9 [ 228.674558][ T7570] RDX: 0000000000040101 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 228.674573][ T7570] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 228.674587][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.674600][ T7570] R13: 00007fe47d7e6038 R14: 00007fe47d7e5fa0 R15: 00007ffce708ad08 [ 228.674631][ T7570] [ 228.674682][ T7570] hub 2-0:1.0: hub_ext_port_status failed (err = -12) [ 229.837499][ T7586] random: crng reseeded on system resumption [ 230.626713][ T7597] mmap: syz.1.336 (7597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.848535][ T7579] kexec: Could not allocate control_code_buffer [ 231.646441][ T7617] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 232.334629][ T7628] FAULT_INJECTION: forcing a failure. [ 232.334629][ T7628] name failslab, interval 1, probability 0, space 0, times 0 [ 232.426694][ T7628] CPU: 1 UID: 0 PID: 7628 Comm: syz.1.343 Not tainted syzkaller #0 PREEMPT(full) [ 232.426727][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.426740][ T7628] Call Trace: [ 232.426748][ T7628] [ 232.426757][ T7628] dump_stack_lvl+0x16c/0x1f0 [ 232.426788][ T7628] should_fail_ex+0x512/0x640 [ 232.426825][ T7628] ? fs_reclaim_acquire+0xae/0x150 [ 232.426860][ T7628] should_failslab+0xc2/0x120 [ 232.426892][ T7628] __kmalloc_noprof+0xdd/0x880 [ 232.426928][ T7628] ? lockdep_init_map_type+0x5c/0x280 [ 232.426963][ T7628] ? tomoyo_open_control+0x51f/0xa30 [ 232.427007][ T7628] ? tomoyo_open_control+0x51f/0xa30 [ 232.427037][ T7628] tomoyo_open_control+0x51f/0xa30 [ 232.427073][ T7628] do_dentry_open+0x982/0x1530 [ 232.427101][ T7628] ? __pfx_tomoyo_open+0x10/0x10 [ 232.427133][ T7628] vfs_open+0x82/0x3f0 [ 232.427170][ T7628] path_openat+0x1de4/0x2cb0 [ 232.427205][ T7628] ? __pfx_path_openat+0x10/0x10 [ 232.427232][ T7628] ? __lock_acquire+0xb8a/0x1c90 [ 232.427267][ T7628] do_filp_open+0x20b/0x470 [ 232.427293][ T7628] ? __pfx_do_filp_open+0x10/0x10 [ 232.427339][ T7628] ? alloc_fd+0x471/0x7d0 [ 232.427370][ T7628] do_sys_openat2+0x11b/0x1d0 [ 232.427404][ T7628] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.427450][ T7628] __x64_sys_openat+0x174/0x210 [ 232.427485][ T7628] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.427533][ T7628] do_syscall_64+0xcd/0xfa0 [ 232.427560][ T7628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.427584][ T7628] RIP: 0033:0x7fe6de58efc9 [ 232.427602][ T7628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.427624][ T7628] RSP: 002b:00007fe6df377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.427646][ T7628] RAX: ffffffffffffffda RBX: 00007fe6de7e5fa0 RCX: 00007fe6de58efc9 [ 232.427661][ T7628] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 232.427676][ T7628] RBP: 00007fe6de611f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.427690][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.427703][ T7628] R13: 00007fe6de7e6038 R14: 00007fe6de7e5fa0 R15: 00007ffc1e4b0a98 [ 232.427733][ T7628] [ 232.651064][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.862271][ T7660] tipc: Started in network mode [ 234.915243][ T7660] tipc: Node identity 45e5412, cluster identity 4711 [ 234.960881][ T7664] delete_channel: no stack [ 234.997273][ T7660] tipc: Node number set to 73290770 [ 235.459103][ T7649] kexec: Could not allocate control_code_buffer [ 236.024074][ T7682] FAULT_INJECTION: forcing a failure. [ 236.024074][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 236.119496][ T7682] CPU: 1 UID: 0 PID: 7682 Comm: syz.3.353 Not tainted syzkaller #0 PREEMPT(full) [ 236.119529][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.119543][ T7682] Call Trace: [ 236.119550][ T7682] [ 236.119559][ T7682] dump_stack_lvl+0x16c/0x1f0 [ 236.119590][ T7682] should_fail_ex+0x512/0x640 [ 236.119633][ T7682] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 236.119668][ T7682] should_failslab+0xc2/0x120 [ 236.119700][ T7682] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 236.119731][ T7682] ? kstrdup_const+0x63/0x80 [ 236.119761][ T7682] ? kstrdup+0x53/0x100 [ 236.119784][ T7682] kstrdup+0x53/0x100 [ 236.119809][ T7682] kstrdup_const+0x63/0x80 [ 236.119834][ T7682] kvasprintf_const+0x10f/0x1a0 [ 236.119858][ T7682] kobject_set_name_vargs+0x5a/0x140 [ 236.119890][ T7682] kobject_init_and_add+0xe7/0x190 [ 236.119921][ T7682] ? __pfx_kobject_init_and_add+0x10/0x10 [ 236.119958][ T7682] ? up_write+0x1b2/0x520 [ 236.120001][ T7682] sysfs_slab_add+0x194/0x1f0 [ 236.120027][ T7682] do_kmem_cache_create+0x5bb/0x740 [ 236.120062][ T7682] __kmem_cache_create_args+0x202/0x3c0 [ 236.120106][ T7682] mon_text_open+0x333/0x510 [ 236.120133][ T7682] ? __pfx_mon_text_open+0x10/0x10 [ 236.120161][ T7682] ? __pfx_mon_text_ctor+0x10/0x10 [ 236.120188][ T7682] ? __pfx_apparmor_file_open+0x10/0x10 [ 236.120222][ T7682] ? lockdown_is_locked_down+0x3f/0x130 [ 236.120254][ T7682] ? bpf_lsm_locked_down+0x9/0x10 [ 236.120289][ T7682] ? __pfx_mon_text_open+0x10/0x10 [ 236.120313][ T7682] full_proxy_open_regular+0x1b9/0x360 [ 236.120351][ T7682] do_dentry_open+0x982/0x1530 [ 236.120379][ T7682] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 236.120420][ T7682] vfs_open+0x82/0x3f0 [ 236.120457][ T7682] path_openat+0x1de4/0x2cb0 [ 236.120493][ T7682] ? __pfx_path_openat+0x10/0x10 [ 236.120520][ T7682] ? __lock_acquire+0xb8a/0x1c90 [ 236.120556][ T7682] do_filp_open+0x20b/0x470 [ 236.120583][ T7682] ? __pfx_do_filp_open+0x10/0x10 [ 236.120635][ T7682] ? alloc_fd+0x471/0x7d0 [ 236.120666][ T7682] do_sys_openat2+0x11b/0x1d0 [ 236.120702][ T7682] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.120749][ T7682] __x64_sys_openat+0x174/0x210 [ 236.120785][ T7682] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.120832][ T7682] do_syscall_64+0xcd/0xfa0 [ 236.120861][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.120885][ T7682] RIP: 0033:0x7f092038efc9 [ 236.120907][ T7682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.120929][ T7682] RSP: 002b:00007f09211fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.120951][ T7682] RAX: ffffffffffffffda RBX: 00007f09205e6180 RCX: 00007f092038efc9 [ 236.120966][ T7682] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 236.120980][ T7682] RBP: 00007f0920411f91 R08: 0000000000000000 R09: 0000000000000000 [ 236.120994][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.121007][ T7682] R13: 00007f09205e6218 R14: 00007f09205e6180 R15: 00007ffca34aa598 [ 236.121037][ T7682] [ 236.121048][ T7682] kobject: can not set name properly! [ 236.923166][ T7678] kexec: Could not allocate control_code_buffer [ 237.214585][ T7682] SLUB: Unable to add cache mon_text_ffff88805d1d5400 to sysfs [ 239.445746][ T7736] netlink: 338 bytes leftover after parsing attributes in process `syz.2.364'. [ 239.613585][ T7736] ipvlan1: entered allmulticast mode [ 239.660105][ T7736] veth0_vlan: entered allmulticast mode [ 239.953438][ T7740] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 239.982664][ T7740] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 241.836957][ T30] audit: type=1326 audit(4294967380.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.1.368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6de58efc9 code=0x0 [ 241.924007][ T7757] netlink: 268 bytes leftover after parsing attributes in process `syz.1.368'. [ 243.456608][ T7787] netlink: 330 bytes leftover after parsing attributes in process `syz.1.374'. [ 243.517762][ T7787] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 243.643548][ T7765] kexec: Could not allocate control_code_buffer [ 244.538780][ T7799] ima: policy update failed [ 244.555250][ T30] audit: type=1802 audit(4294967383.010:10): pid=7799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.378" res=0 errno=0 [ 244.588466][ T7799] netlink: 25 bytes leftover after parsing attributes in process `syz.1.378'. [ 246.842800][ T7838] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 248.171979][ T7856] syz.3.390 uses obsolete (PF_INET,SOCK_PACKET) [ 248.249001][ T7857] netlink: 334 bytes leftover after parsing attributes in process `syz.2.391'. [ 250.020776][ T7883] netlink: 338 bytes leftover after parsing attributes in process `syz.2.397'. [ 250.101058][ T7883] veth1_macvtap: left allmulticast mode [ 250.122733][ T7883] veth1_macvtap: left promiscuous mode [ 250.178330][ T7886] ptp ptp0: only physical clock in use now syzkaller syzkaller login: [ 251.792964][ T7914] netlink: 338 bytes leftover after parsing attributes in process `syz.2.404'. [ 252.209337][ T30] audit: type=1800 audit(4294967390.650:11): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.403" name="dbroot" dev="configfs" ino=16176 res=0 errno=0 [ 253.613713][ T5843] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 253.641684][ T7945] netlink: 'syz.2.411': attribute type 3 has an invalid length. [ 254.597667][ T7961] netlink: 338 bytes leftover after parsing attributes in process `syz.3.415'. [ 254.850729][ T7961] ipvlan1: entered allmulticast mode [ 254.911123][ T7961] veth0_vlan: entered allmulticast mode [ 255.536848][ T7947] kexec: Could not allocate control_code_buffer [ 255.666493][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 255.716922][ T7975] netlink: 220 bytes leftover after parsing attributes in process `syz.0.416'. [ 255.730587][ T7977] netlink: 354 bytes leftover after parsing attributes in process `syz.1.418'. [ 256.068247][ T7982] netlink: 338 bytes leftover after parsing attributes in process `syz.2.419'. [ 256.997993][ T7997] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 257.094663][ T7997] File: /dev/mtdblock0 PID: 7997 Comm: syz.3.422 syzkaller syzkaller login: [ 257.740460][ T30] audit: type=1326 audit(4294967396.190:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.0.425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe47d58efc9 code=0x0 [ 257.890733][ T8007] netlink: 268 bytes leftover after parsing attributes in process `syz.0.425'. [ 259.391694][ T8018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.431312][ T8044] netlink: 338 bytes leftover after parsing attributes in process `syz.2.433'. [ 260.079725][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 260.154310][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 260.548439][ T8064] ptp ptp0: only physical clock in use now [ 262.326504][ T8096] netlink: 338 bytes leftover after parsing attributes in process `syz.1.444'. [ 262.462947][ T8096] ipvlan1: entered allmulticast mode [ 262.491525][ T8096] veth0_vlan: entered allmulticast mode [ 264.080446][ T8134] netlink: 338 bytes leftover after parsing attributes in process `syz.1.453'. [ 264.762719][ T8143] FAULT_INJECTION: forcing a failure. [ 264.762719][ T8143] name failslab, interval 1, probability 0, space 0, times 0 [ 264.861277][ T8143] CPU: 1 UID: 0 PID: 8143 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(full) [ 264.861309][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.861323][ T8143] Call Trace: [ 264.861330][ T8143] [ 264.861339][ T8143] dump_stack_lvl+0x16c/0x1f0 [ 264.861370][ T8143] should_fail_ex+0x512/0x640 [ 264.861406][ T8143] ? fs_reclaim_acquire+0xae/0x150 [ 264.861440][ T8143] should_failslab+0xc2/0x120 [ 264.861471][ T8143] kmem_cache_alloc_noprof+0x75/0x6e0 [ 264.861494][ T8143] ? __pfx_map_id_range_down+0x10/0x10 [ 264.861532][ T8143] ? security_inode_alloc+0x3b/0x2b0 [ 264.861573][ T8143] ? security_inode_alloc+0x3b/0x2b0 [ 264.861606][ T8143] security_inode_alloc+0x3b/0x2b0 [ 264.861643][ T8143] inode_init_always_gfp+0xce4/0x1030 [ 264.861672][ T8143] alloc_inode+0x86/0x240 [ 264.861704][ T8143] sock_alloc+0x40/0x280 [ 264.861729][ T8143] sock_create_lite+0x82/0x120 [ 264.861757][ T8143] __netlink_kernel_create+0xbd/0x750 [ 264.861781][ T8143] ? __lock_acquire+0x622/0x1c90 [ 264.861822][ T8143] ? __pfx___netlink_kernel_create+0x10/0x10 [ 264.861855][ T8143] rtnetlink_net_init+0xb9/0x140 [ 264.861891][ T8143] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 264.861927][ T8143] ? lockdep_init_map_type+0x5c/0x280 [ 264.861960][ T8143] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 264.861993][ T8143] ? __pfx_rtnetlink_bind+0x10/0x10 [ 264.862027][ T8143] ? lockdep_init_map_type+0x5c/0x280 [ 264.862061][ T8143] ? debug_mutex_init+0x37/0x70 [ 264.862087][ T8143] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 264.862121][ T8143] ops_init+0x1e2/0x5f0 [ 264.862146][ T8143] setup_net+0x100/0x390 [ 264.862169][ T8143] ? __pfx_setup_net+0x10/0x10 [ 264.862193][ T8143] ? debug_mutex_init+0x37/0x70 [ 264.862221][ T8143] copy_net_ns+0x2f8/0x690 [ 264.862249][ T8143] create_new_namespaces+0x3ea/0xa90 [ 264.862283][ T8143] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 264.862313][ T8143] ksys_unshare+0x45b/0xa40 [ 264.862350][ T8143] ? __pfx_ksys_unshare+0x10/0x10 [ 264.862383][ T8143] ? xfd_validate_state+0x61/0x180 [ 264.862425][ T8143] __x64_sys_unshare+0x31/0x40 [ 264.862456][ T8143] do_syscall_64+0xcd/0xfa0 [ 264.862484][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.862507][ T8143] RIP: 0033:0x7f092038efc9 [ 264.862525][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.862548][ T8143] RSP: 002b:00007f0921240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 264.862569][ T8143] RAX: ffffffffffffffda RBX: 00007f09205e5fa0 RCX: 00007f092038efc9 [ 264.862584][ T8143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 264.862617][ T8143] RBP: 00007f0920411f91 R08: 0000000000000000 R09: 0000000000000000 [ 264.862631][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.862645][ T8143] R13: 00007f09205e6038 R14: 00007f09205e5fa0 R15: 00007ffca34aa598 [ 264.862676][ T8143] [ 265.150014][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.479111][ T8153] netlink: 338 bytes leftover after parsing attributes in process `syz.0.456'. [ 265.501866][ T8146] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 265.529707][ T8146] File: /dev/mtdblock0 PID: 8146 Comm: syz.1.454 [ 265.601541][ T8153] ipvlan1: entered allmulticast mode [ 265.628121][ T8153] veth0_vlan: entered allmulticast mode [ 266.229056][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.245078][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.565372][ T8163] snd_aloop snd_aloop.0: control 7:257:7::0 is already present [ 266.725474][ T8145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.409310][ T8180] netlink: 338 bytes leftover after parsing attributes in process `syz.3.462'. [ 267.636062][ T8189] netlink: 330 bytes leftover after parsing attributes in process `syz.2.464'. [ 267.785457][ T8187] svc: failed to register nfsdv3 RPC service (errno 111). [ 267.826126][ T8187] svc: failed to register nfsaclv3 RPC service (errno 111). [ 267.888762][ T8189] : renamed from bridge_slave_0 (while UP) [ 268.490776][ T8204] netlink: 338 bytes leftover after parsing attributes in process `syz.2.467'. [ 270.012079][ T8216] Process accounting resumed [ 270.133328][ T8230] FAULT_INJECTION: forcing a failure. [ 270.133328][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 270.182541][ T8230] CPU: 1 UID: 0 PID: 8230 Comm: syz.1.472 Not tainted syzkaller #0 PREEMPT(full) [ 270.182573][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.182587][ T8230] Call Trace: [ 270.182597][ T8230] [ 270.182608][ T8230] dump_stack_lvl+0x16c/0x1f0 [ 270.182639][ T8230] should_fail_ex+0x512/0x640 [ 270.182675][ T8230] ? __kmalloc_cache_noprof+0x5f/0x780 [ 270.182717][ T8230] should_failslab+0xc2/0x120 [ 270.182749][ T8230] __kmalloc_cache_noprof+0x72/0x780 [ 270.182789][ T8230] ? apply_subsystem_event_filter+0x460/0x17e0 [ 270.182830][ T8230] ? apply_subsystem_event_filter+0x460/0x17e0 [ 270.182865][ T8230] apply_subsystem_event_filter+0x460/0x17e0 [ 270.182910][ T8230] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 270.182951][ T8230] ? _copy_from_user+0x59/0xd0 [ 270.182992][ T8230] subsystem_filter_write+0x95/0x120 [ 270.183028][ T8230] ? __pfx_subsystem_filter_write+0x10/0x10 [ 270.183062][ T8230] vfs_write+0x2a0/0x11d0 [ 270.183092][ T8230] ? __pfx___mutex_lock+0x10/0x10 [ 270.183120][ T8230] ? __pfx_vfs_write+0x10/0x10 [ 270.183153][ T8230] ? __fget_files+0x20e/0x3c0 [ 270.183186][ T8230] ksys_write+0x12a/0x250 [ 270.183211][ T8230] ? __pfx_ksys_write+0x10/0x10 [ 270.183245][ T8230] do_syscall_64+0xcd/0xfa0 [ 270.183282][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.183307][ T8230] RIP: 0033:0x7fe6de58efc9 [ 270.183326][ T8230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.183348][ T8230] RSP: 002b:00007fe6df377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.183370][ T8230] RAX: ffffffffffffffda RBX: 00007fe6de7e5fa0 RCX: 00007fe6de58efc9 [ 270.183386][ T8230] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000b [ 270.183399][ T8230] RBP: 00007fe6de611f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.183413][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.183426][ T8230] R13: 00007fe6de7e6038 R14: 00007fe6de7e5fa0 R15: 00007ffc1e4b0a98 [ 270.183457][ T8230] [ 272.429936][ T8270] random: crng reseeded on system resumption [ 272.972127][ T8255] kexec: Could not allocate control_code_buffer [ 275.518259][ T8323] HfR: entered promiscuous mode [ 276.525243][ T8337] random: crng reseeded on system resumption [ 279.070223][ T8377] netlink: set zone limit has 8 unknown bytes [ 279.918668][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.508'. [ 280.024255][ T8382] kexec: Could not allocate control_code_buffer [ 280.365927][ T8407] random: crng reseeded on system resumption [ 280.407837][ T8409] Unable to find swap-space signature [ 283.053849][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'. [ 283.313021][ T8454] Unable to find swap-space signature [ 283.446780][ T8455] ================================================================== [ 283.446797][ T8455] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 283.446833][ T8455] Write of size 8 at addr ffffc900037893e0 by task syz.0.520/8455 [ 283.446853][ T8455] [ 283.446864][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.0.520 Not tainted syzkaller #0 PREEMPT(full) [ 283.446897][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.446914][ T8455] Call Trace: [ 283.446925][ T8455] [ 283.446936][ T8455] dump_stack_lvl+0x116/0x1f0 [ 283.446964][ T8455] print_report+0xcd/0x630 [ 283.446995][ T8455] ? __virt_addr_valid+0x81/0x610 [ 283.447028][ T8455] ? sys_imageblit+0x1a6f/0x1e60 [ 283.447053][ T8455] kasan_report+0xe0/0x110 [ 283.447084][ T8455] ? sys_imageblit+0x1a6f/0x1e60 [ 283.447113][ T8455] sys_imageblit+0x1a6f/0x1e60 [ 283.447149][ T8455] ? __pfx_sys_imageblit+0x10/0x10 [ 283.447175][ T8455] ? __pfx__prb_read_valid+0x10/0x10 [ 283.447210][ T8455] ? find_held_lock+0x2b/0x80 [ 283.447234][ T8455] ? up+0xcb/0x140 [ 283.447261][ T8455] ? do_raw_spin_unlock+0x172/0x230 [ 283.447303][ T8455] ? prb_read_valid+0x78/0xa0 [ 283.447338][ T8455] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 283.447365][ T8455] soft_cursor+0x524/0xa10 [ 283.447404][ T8455] ? fb_get_color_depth+0x120/0x250 [ 283.447439][ T8455] bit_cursor+0xe8c/0x17e0 [ 283.447477][ T8455] ? __pfx_bit_cursor+0x10/0x10 [ 283.447518][ T8455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.447558][ T8455] ? get_color+0x1da/0x450 [ 283.447588][ T8455] ? __pfx_bit_cursor+0x10/0x10 [ 283.447623][ T8455] fbcon_cursor+0x40c/0x5a0 [ 283.447654][ T8455] ? add_softcursor+0xb1/0x290 [ 283.447693][ T8455] set_cursor+0x1db/0x250 [ 283.447730][ T8455] con_write+0x89/0xb0 [ 283.447754][ T8455] n_tty_write+0x41e/0x11e0 [ 283.447793][ T8455] ? __pfx_n_tty_write+0x10/0x10 [ 283.447823][ T8455] ? trace_kmalloc+0x2b/0xd0 [ 283.447853][ T8455] ? __pfx_woken_wake_function+0x10/0x10 [ 283.447892][ T8455] ? kfree+0x252/0x6d0 [ 283.447914][ T8455] ? __pfx_n_tty_write+0x10/0x10 [ 283.447946][ T8455] file_tty_write.constprop.0+0x503/0x9b0 [ 283.447976][ T8455] redirected_tty_write+0xd4/0x150 [ 283.448001][ T8455] vfs_write+0x7d3/0x11d0 [ 283.448026][ T8455] ? __pfx_redirected_tty_write+0x10/0x10 [ 283.448054][ T8455] ? __pfx_vfs_write+0x10/0x10 [ 283.448077][ T8455] ? find_held_lock+0x2b/0x80 [ 283.448109][ T8455] ksys_write+0x12a/0x250 [ 283.448134][ T8455] ? __pfx_ksys_write+0x10/0x10 [ 283.448171][ T8455] do_syscall_64+0xcd/0xfa0 [ 283.448197][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.448222][ T8455] RIP: 0033:0x7fe47d58efc9 [ 283.448240][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.448263][ T8455] RSP: 002b:00007fe47e3ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.448285][ T8455] RAX: ffffffffffffffda RBX: 00007fe47d7e6090 RCX: 00007fe47d58efc9 [ 283.448300][ T8455] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 283.448314][ T8455] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.448328][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.448341][ T8455] R13: 00007fe47d7e6128 R14: 00007fe47d7e6090 R15: 00007ffce708ad08 [ 283.448364][ T8455] [ 283.448372][ T8455] [ 283.448378][ T8455] The buggy address belongs to a vmalloc virtual mapping [ 283.448395][ T8455] Memory state around the buggy address: [ 283.448408][ T8455] ffffc90003789280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.448425][ T8455] ffffc90003789300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.448441][ T8455] >ffffc90003789380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.448454][ T8455] ^ [ 283.448468][ T8455] ffffc90003789400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.448483][ T8455] ffffc90003789480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 283.448496][ T8455] ================================================================== [ 283.448509][ T8455] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 283.448523][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.0.520 Not tainted syzkaller #0 PREEMPT(full) [ 283.448550][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.448563][ T8455] Call Trace: [ 283.448570][ T8455] [ 283.448579][ T8455] dump_stack_lvl+0x3d/0x1f0 [ 283.448604][ T8455] vpanic+0x640/0x6f0 [ 283.448638][ T8455] panic+0xca/0xd0 [ 283.448669][ T8455] ? __pfx_panic+0x10/0x10 [ 283.448709][ T8455] check_panic_on_warn+0xab/0xb0 [ 283.448745][ T8455] end_report+0x107/0x170 [ 283.448774][ T8455] kasan_report+0xee/0x110 [ 283.448805][ T8455] ? sys_imageblit+0x1a6f/0x1e60 [ 283.448835][ T8455] sys_imageblit+0x1a6f/0x1e60 [ 283.448865][ T8455] ? __pfx_sys_imageblit+0x10/0x10 [ 283.448890][ T8455] ? __pfx__prb_read_valid+0x10/0x10 [ 283.448924][ T8455] ? find_held_lock+0x2b/0x80 [ 283.448947][ T8455] ? up+0xcb/0x140 [ 283.448973][ T8455] ? do_raw_spin_unlock+0x172/0x230 [ 283.449014][ T8455] ? prb_read_valid+0x78/0xa0 [ 283.449049][ T8455] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 283.449075][ T8455] soft_cursor+0x524/0xa10 [ 283.449113][ T8455] ? fb_get_color_depth+0x120/0x250 [ 283.449156][ T8455] bit_cursor+0xe8c/0x17e0 [ 283.449196][ T8455] ? __pfx_bit_cursor+0x10/0x10 [ 283.449237][ T8455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.449278][ T8455] ? get_color+0x1da/0x450 [ 283.449308][ T8455] ? __pfx_bit_cursor+0x10/0x10 [ 283.449343][ T8455] fbcon_cursor+0x40c/0x5a0 [ 283.449374][ T8455] ? add_softcursor+0xb1/0x290 [ 283.449413][ T8455] set_cursor+0x1db/0x250 [ 283.449449][ T8455] con_write+0x89/0xb0 [ 283.449474][ T8455] n_tty_write+0x41e/0x11e0 [ 283.449511][ T8455] ? __pfx_n_tty_write+0x10/0x10 [ 283.449542][ T8455] ? trace_kmalloc+0x2b/0xd0 [ 283.449571][ T8455] ? __pfx_woken_wake_function+0x10/0x10 [ 283.449609][ T8455] ? kfree+0x252/0x6d0 [ 283.449629][ T8455] ? __pfx_n_tty_write+0x10/0x10 [ 283.449661][ T8455] file_tty_write.constprop.0+0x503/0x9b0 [ 283.449691][ T8455] redirected_tty_write+0xd4/0x150 [ 283.449717][ T8455] vfs_write+0x7d3/0x11d0 [ 283.449742][ T8455] ? __pfx_redirected_tty_write+0x10/0x10 [ 283.449769][ T8455] ? __pfx_vfs_write+0x10/0x10 [ 283.449793][ T8455] ? find_held_lock+0x2b/0x80 [ 283.449825][ T8455] ksys_write+0x12a/0x250 [ 283.449850][ T8455] ? __pfx_ksys_write+0x10/0x10 [ 283.449879][ T8455] do_syscall_64+0xcd/0xfa0 [ 283.449906][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.449929][ T8455] RIP: 0033:0x7fe47d58efc9 [ 283.449947][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.449970][ T8455] RSP: 002b:00007fe47e3ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.449991][ T8455] RAX: ffffffffffffffda RBX: 00007fe47d7e6090 RCX: 00007fe47d58efc9 [ 283.450007][ T8455] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 283.450021][ T8455] RBP: 00007fe47d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.450035][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.450049][ T8455] R13: 00007fe47d7e6128 R14: 00007fe47d7e6090 R15: 00007ffce708ad08 [ 283.450073][ T8455] [ 283.450150][ T8455] Kernel Offset: disabled