last executing test programs: 9.076946024s ago: executing program 3 (id=296): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89b0, &(0x7f0000000140)={'macvlan1\x00'}) (async) sendmsg$auto_NFC_CMD_DEV_UP(r2, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000000680)={0x1084, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0xc}, @NFC_ATTR_LLC_PARAM_MIUX={0x6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1}, @NFC_ATTR_SE_APDU={0x54, 0x19, "542d8fff32724f2fc3a9163ab11c1697d0bbf93488d910a84d23e2d713fa96e438e6f3bb61b469ec75b3b856fc9bd4530273aac862ec1cae358e85c13be6692fff27a6406e0d1aa1019551f6542d54e1"}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "553dc7957628099333f558c9be47d7e848828db1e9bfaa576eec01c6483af4baaf2919423d487693dbda02a3ad43fd662952386360dd14f342cdaf10c36d003afd1091d79e16bcb6a522245e99b47f4c7e9e578f109c943866d59c25d2f33a0ada1c0d50a5597d572065c74ae981be67dd547ed576a1691909e405e7557ef8f973887d65f0ac403b3dd76b3770b2207ac4ca475b9520d41ea0beea37565d44a70d7f0ad2697f8e0ecc09db45342de0a9e12c0c86751c85888d711b7a9334cb1074ab0b319598240e029f4223e46c1c154aae39d442571ab13981fec296684b1279246299f306ef51f78b60c48014930ab5bf4320eb05e292c53247929fae75570e7a629ddb9ca55590fecf7f711635e3cbbc0e13aa37b395d8cefaab507783ae8b8ff6250b91edc96d3ea4325285703d04e78ae1380701ae266054efdc951882b075cb0ec221cce2ce986ba65a594f524ddba2b72a7ed69810ddfc436a1a96a25bb031569b2f9ad395212a7818d82a5d82b645ebb4eb1680c0c98780a22d3c82c08c7aebbeef180100b1028c652c7a15b057804fe2083b552e32c896dfbdfb8b0d142742cdf7618f4230ae3454af6bbd5eef7d84402def5f6518f2da69f9c379c573b6aa01c300761328d67d88c4fa857ef9f668204d0d6cd8116edc5ad183c1f85f933bdfd477a56c8726172b4fb7c3e0e2e93d2e9192dd752a1f4cc0fbf9e6bc3de52836cbecf7e21a60d791d121c586d12378d78db9bbed61bac8b3f9f0458b18dff1eabe314a7910b4ee67b12bed9a0142ae7c072dc11d70b24ffbb5728deb3a760fa274ed6bde2588fb304ba23324b10a1d05174f20c439f71922ef95a590157119df3411098d68a7ba8a4203df24e8611b15468708bf97e773b30c93da869bf982342b7ff15ac36d35c4a09365d4f8efdbc8d2e35bceb0c2c5f965677725412e1e669ebee0775391614a5f097a2a65a437df6230c765df5680288eba45d96b3f22debe840fc42d62db5c2860a1cd44482d4c6bdc095b18102cfc81be6d0dfc5fe71460884a444448df8e7a4b488b40bb295bb4f3186457be7d756ff7c443eab552bcbca05ee7516f5379a1a5da13c9c45a44bb537969fe94f30c5de195709203b911fb9bbb5b30849e34d00f3af3c5ed2248046f6bcc78d34b56b2c3a512fd9a36b56b59244d7d3432638ebf274d2e5a62158507b39e26b827a9a5a2b1ae864fe6baaa6ce01f93b9683058d260629f281c5093c9ead88814f8320ef08e6e1b0e6dad020ff44763ca3af8244a97c1117c328936d9a552afb249cbdc2343da9f07b2fd95b5b2f33a561c1f49b8b553c7f8589c3c36cebe7496fb7be102652a5cbb40667935c5e98f576e5953eb3dfb1e57f40ef43e45d94cae040898ab212d482f071c656cddbb5da5755977976ec48e4b42ef4fb6b77d0cda289d8a06595cb2828920bd443548128c122ce02c55b4c16ff57fab1c0677d92bd94d3c1a6a4eca74c61d453167a13f7c1db806e2608f67fa24061e6874ccc90cdf6fb891089a8701ccf7bfaadcf2f390fe9b0e76a487fc3ac9c84849cf4f6ccaf52e5c757c643257902e017ceacdfefe4af8ca6b2982d1ff267473655a41da5b6d62209e5d79419112da82dd43fa8c767ba95dfc8a8fb1ca8a75dac42c65f9b3c5ef6ab135d138201fa676a2b8cbdaaae2956e1047f5e5bd0cca4cb679ebea54790bb4ee49cac5e1d88dae46c437652f203e7ec0274d8c77d186ee81f55dd0020b7bec2d72d9f5a18c1f8de59908468272a49bfd7f1a1c24f7d900c03b8d7d239edbc0efbcaff3adb1e0ae302d0a0f6d2587a60430be01ea62ec5085a9149e93b5a0e72506c1f3e44db304bbe133d9b48701aedde8ae97f7c031fa4f8d80b26c789f7673f05cef4e0f858f69adb815a99b5abb001d4856b05c81ead70f34b170056d92d2ba8e3c4ff68568a63020bebf4496d4378845288d9b4c817be5e862f20aa7da60dbbb868b1122102ec18ac679903d715b91236664d9164aedaabccdd7cd2d6d030e882ae87ff6cfff11aa992c1654af91fe642c9a35a4ae2a40de83025488371fbece44cb77b6362cd50da45384d2dd1551e8f2e1316b56981e4d4b5e612f2e0d2f425bfa24d395e3c859270bfb2fc584ef8356272bc2f9333849bb904d4ec7dfd71f21cf218c8fb2b475e49943e893754284a84b4aee177cefa2a00be906890b2f8c7a4151db22166e386c0dec088c24212519e7f241f24a942de1ddbc1fadcf0b30de9e14269dd70aeb2527c5ef36e4387fa8313e5f3b47e7b9933d462560155dd0cbdfd119c5202021c1c39de59ae8867cfd31cfa2a26e1d094c970c80b13e8552b9eeaae17de91c256480aa108a3af043b6aa91308b84fb8a96a6e848cf79f61924335c99c126e09d4ccc72dba4118a0bc2f4b0c73f9e4e7e748e5a73ca2cf631bbbdc8372198f73fdccefb1ff361a18fcd6b3fea1c906eb06811b5a5703b8f937904bcb4499993abc4c607bf2bb99de10ce66fff98c248c20cecfb66e0fb5627a475cea264b1fe13f49d25bb5e0fd4bcdc2e996e42099d9ec95ea4f7d7dc3f086580d9f835dcb454d1c14968c7b059bc034bc83f5c17733f3b7789d935fefe16c6a50780278c52dbb05382581d2ce92755d57814e6d865870ec40285def3942b2c5912ec906952f626b8c5ed2a90d35fba2dcc229f6e35beb57664840aa1aa7a604be5d45d83a2f7bdd399ba5e9aed1c4a7a20a4300b6acf91dd2020847b96e091c630219a383d11343100a449edc24cca81b44671d05b910d513a05ae5ea0c75ab97a186e6fbf0d3db8252eab52711ebe57094ab206815931e775d57fcf1c281adf8d4f19dd1b3429f94f2700025ef5f7531b06a2f355618392f475c23a41c7c98bdc3ffeaa6ce1ee2341aaf7df6082c2da197ccca590821548265dda1ddd198854e4d09b181642f24d30820d28c532e997ec2f915329ffb332f07875f6f3b5b6281f5e2225709a4a37a74e5d2482543df16800b35fd50d6bfda24a37f44c0bf7766207c79a4e4a2051ad96fb21783c77764829697f0bf30210bf4ef9591d4ea10c08ee380da7a2cca27ef0a92cc6c362528cd81ef2b084d47af3468a69caccbb5ea0be7c3af690f757cc5604bdfa3f12d0266b6881f1d04f7b5760b9a6bd8d2c9c9a7a6791f21c55aa37d5ee35db9ef9295b1c878c790ba44a39d76d30a52b0d68388734cf2ce5dadbf8ff107012d3d3ac0f19d41568b1da12421fa0f61b832954ecdd2d8290a22df66e98874c4504bc79531cdd4d28e17048960bd6ed101b3f8b113a14c3e46c5010671abe7cadab84c83e016009c87e54a7f2a0be9cbb3e37a64b35c924feeec5baf21c3112d7ff9c2628b7206ae87c87459d884ab34c26c90b93cdb1b273caab91b801590cb1293990e5a510653917a8c54984723b2adebd506f7d061dd4dcb44b7886ff52162199694b6505ac4de319557bb4efa7428d6969d3b36471cd60d857d21173749120a133738797e1c10554fadcab4a98e9269824bcb6d5ba781889146881f18d0578baf8be39e99c50a792b92f417698af3be9defdb89f298336df3e0598715b4defa62e0d68929e9ebec2fafb7c7aa750a49903cda95111269de3dbb68b0c6343e604de9a5dad88139ef367fb1cf728149fbd3692c18c9c5a669a9677415e480ccf7348d5c341951d1554c6e6e7e9dba4c88a121857df7c3ef178a4cff3a31d92b39153aced291f858180b930b45673daa08b786527618c4cd69fc9f09567aa360e00e3885f7241358813d2ee931e3726397d1e6080bd27a72b64d94857ad376d1375a98000d12f1c870fa5c3ee7cf208cd4ab8c76e8b7547971ac1a4d9d871fb807ed16986133a7e385e7aa10a05bf7f8896043b3a21e52be2570290d7cdc3d5609de14e2635e0ae7a29486361db0fdba784c3e6f747903e1c4a11a9d86e3c5c128e76b61caa50ae58b1d3848f023c27084e47ec89a3882e95158f51003a75e66274bf6f362b43e275183a3c7032c9f06f829f5902ef9fa468492a3cea52d2c60dc91852194d05a8ffb0d46de47203731a38abcf0a926e7bf7f14cc5f657fcaf77749a2cec6d472d1903bac36feabea0bc077e30d970bac2b377ee52b8019b78971ade9543748a6ebd1f36d4c78378c67599121e9d2357ae85997becad0fcbe2ab01bc1fc18986a6fcd3577a06f46976a4b9c1df4a25cf1ee24201c2f50154f2a4f3726fe7d973f2cfddb849ee8c2498c58b129f1b3886042aca177cfb17b7e9b9197ca94c9f5afcd4a8a0870313f7a192b10c5e54430abc63c6a2ce62b4f1307510d028eba394745872c5c59880b0cac67c61291b8d78b186af84e4f803945cc93cc2ce836b658e8390f13a9c99239b7f86317644f1a45c6b8981bb2efe3842ab6741d9429e3f473722786cb283020eb0ecc7d1f143d03c873db66cdf40c0f31a48451462a8312c3ef2edc9409ea8a0487b42447efe93e411f4ba46cfd22da5a49aa2dcdd628359b51a730b4ae0153b35cdac9f21e0cff108549678320f8f4739be6fd56032416c024b8062d589b4936dbe1914fe3dc7781ea0a24a1d23861c08f766af096aab519e9c72b61869dcf57e1d5999d17425499298ce4db099c23399a91471115d6d0f17fcb8aa9a323df167d779fc6773478661adf0f8343b800b173c320d30846091cc088a904b55bcbe7b2dd83eb361eb2c8e19169f9e0a7c304898e6e73d550cb10f00518ee9b8831df3cd77fcf0699748e58520c9085f6e843960d557ac249f1e85b3ede2963ddadfc76e4e3820d2dd5c9148cb51daefdf149c26a2e37c41f128ed5ac2456f1b67c8426135cfb8ebd7c741ce43ed03b5840a1508ea796fc1e009fd4b302b7899c39d2744f3a4cb7d07eca2e0575d5d1da622054d1fc6ed2788cea1dcc17beb3683aa80e58e7968ceae385d4f1177bad2382c0807ea0681466be17cd8631234dcc443248727401fc32c5ec98def2ab7b4e1730f5cb29d0e5ce3e369c86c95d0295f38cdabc7b195690cf3a992e866ba6614e9f323f73b85ed194359b827f7ec9db225c4d91b7d32ffa243d3cdca80929f4860b2ed9dc0172754ba094762052bc2a342bc5b370120c35a367b267c4ca5a1a13c366f77c49c4b656bf0860c24dcff01013646bf299bb6e102e528824f97886e4fef98963adcb54636ce570e64d18bb9a690fd50be70f4f277d8713eba48047830050430b93a1d795b573308df8727510391467f2f6a131e4c937e075e2ab0dc6e05691d36430ac43f0e1a4d0ae05f2b570ecc1f100abd64100b5849a1bbab2a9ef3c5f9f0229afaed2b4b185215627281a74b4b6804142b7cd5361f33e5628169ddc76305a2a31ce2793d98390bcdef1740bcfcd47ede4deb37ff419fa5607199f63c8127e4d6d50f3f29f5beef6efa81a70d37f6784d6537e4fb03451b72baba1c2b8824e7dd5141df4684e3e96f95c67d0c876e353d71e652d894139eeef63cebd0cd495f8ed3713233d1177ee3920814b06bde37e3d1c719e17e415f5d0a183d6853efadfb47ae0b6fb9cda55346e97cc7d64a9bc7e1d54fe5f6ac6f4ebb023e76e58d137da5027829002872cc216bfe7c012122d1655ee078fd113ff6ab8a64669e2b530a32a40080609e9c048fa3dc53a13e0820675687da6b28fac074c77db1b09b52fbe6526bcd9db8bd22746d002994b1dbf9613cbb6e381c079a6c888a92c4bb2ae51e28c8056297cca8ffa9add16b2e82aa8fbec3d09bf656b2f0f4646083e9fc07acefc8f97b2cd6290af1"}]}, 0x1084}, 0x1, 0x0, 0x0, 0x40810}, 0xc0800) (async) wait4$auto(0x1, 0xfffffffffffffffc, 0x60000002, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040084}, 0x48080) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 8.039593202s ago: executing program 3 (id=298): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRES16], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy6/hwflags\x00', 0x630480, 0x0) ioctl$auto(r0, 0x2, r1) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdfdf250200000008000100030000005d0166a2887355188350df627879103c6b261340e2e877ab39172973237e32a6c7d9193a983265eb04224abf054801dd2fadb09048904ef72894f3e885dfdc2e471ebb094310fcea65e8968463e7f268f5fd97abad5dee5f6d4f010f880000000000000101758a78872518335456ed9c80b8c3b78b73ad257fb476"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="141a0000", @ANYRES16=0x0, @ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0xc005) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB='Z'], 0x1ac}}, 0x24040000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000440)={0x0, 0xc4}, 0x2, 0x0, 0x2, 0x9}, 0xfffffffa}, 0x3, 0x0) (async) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x101000, 0x0) ioctl$auto_BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'dvmrp1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'lo\x00'}) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) close_range$auto(0xffffffffffffffff, 0x8, 0x20000003) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/dax/drivers/device_dax/remove_id\x00', 0xa081, 0x0) write$auto(r5, &(0x7f0000000000)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4a\xb5\x1b\xad0\x10\x19b\xbf\xb7\xa5`\x97\xddzG\x01[{\x17\x05I\xe0\xb1d\x00\x00\x00\x00L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2z\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00', 0x33) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_ADVISE(r6, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3) (async) ioctl$auto_VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000004c0)={0x8001, r6}) (async) getsid$auto(0x0) 7.683727364s ago: executing program 3 (id=301): socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x5) shutdown$auto(0x200000003, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0xd, 0x7, 0x2, 0x80080001]}, 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x5, 0x1, '\x96'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/7:6/strict_limit\x00', 0x0, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x34, 0x8, 0xdf, 0x2000017, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x3}, 0x40040000001, &(0x7f0000000180)={&(0x7f0000000040)="d40db321dd73e84559e31078267e5ae2dfe10317378b729d233d3f7bec012032c6c5ef6e4c55dd67ea37f22287ec8dc582bf46bb2fc9b64d123be127f6850efa2898e5fd211fac47f8c523bdc452fe270896dc5e0472030efb0300000000000000f1644096355ed7", 0x7}, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) 4.858059621s ago: executing program 2 (id=313): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x101, 0x0) (async) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0xa, 0xffff8001) (async) socket(0x2, 0x1, 0x80) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0xc, 0xd7, 0x0, 0x9) (async) unshare$auto(0x40000080) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) r3 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x800, 0x2, 0x0, 0x9, 0xe5) sendfile$auto(r3, r3, 0x0, 0x40000000c07) (async) prctl$auto(0x8, 0x674, 0x0, 0x6, 0x8) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty62\x00', 0x2000, 0x0) (async) ioctl$auto(r1, 0x7, r0) (async) socket(0x10, 0x2, 0x0) (async) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x18bd01, 0x0) ioctl$auto_USBDEVFS_BULK(r4, 0xc0185502, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) (async) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 4.58955864s ago: executing program 0 (id=315): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) msgctl$auto_MSG_STAT(0x4, 0xb, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x1, 0x7, 0xffffff68, 0x4}, 0x0, &(0x7f0000000200)=0x8, 0x10, 0x7, 0x3, 0x46, 0x7, 0x6, 0x9f5, 0x8, @raw=0xc}) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x7, 0x100000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x0) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xdb, 0x13) write$auto(r3, &(0x7f0000000240)=',-\t', 0x2000008008) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28014044}, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0xb8a03, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x100, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/size\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0xc) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_virt_wifi/ra_honor_pio_pflag\x00', 0xaa441, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x500) write$auto_tomoyo_operations_securityfs_if(r4, 0x0, 0x0) 4.536457308s ago: executing program 3 (id=316): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) mmap$auto(0xffffffffffffffff, 0x400008, 0x40000000000df, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x1c1041, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7ffff000) 4.053632993s ago: executing program 3 (id=319): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/mdio_bus/drivers/Asix Electronics AX88772C/bind\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) poll$auto(&(0x7f0000000000)={r3, 0xe7f1, 0x1723}, 0x8, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) mseal$auto(0x1000000000000000, 0x0, 0x0) creat$auto(0x0, 0x7) set_mempolicy_home_node$auto(0x2, 0x2, 0x9, 0xf3a) 3.839843933s ago: executing program 2 (id=321): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x8, 0xd7d) (async) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="cd53ed46dacd30efc2b3ab06aeaa86e64117f94d33cdabb6c57acb71384ff7283a9e03eb24135107da644558143f22b569bfed477d0c3c3062a3db17cb14620e5c2dff6ec5b00b66286e5d056e6890ca3171346f223d3a05fd49d1a0910685203aa92d53265933f94e2116210a5e213927b11ac1a358a326c4860fe96d9bb6fa1d2505629600d982d139a235215772fbf7bfe96de587efe3e1b5185f785b216ded59999b6f660d86e109c7c34f4e5f34d654e121fd74bb005a520dd3b976951ca79d2a76be3858ad2e0442accde8c70425839921750431103f311a86be2f83b11bfb60d27373051ad4248e938005e6a785a382c2cba5", @ANYBLOB="1200", @ANYRESDEC=r1], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kcore\x00', 0x40000, 0x0) (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x20000, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) (async) socket(0x23, 0x2, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/phonet\x00', 0x600, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) pread64$auto(r3, 0x0, 0x800003, 0x270) (async) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x40, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0xa, 0x2, 0x0, 0x1, [@generic="00b487080d9c"]}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) ioctl$auto(r0, 0x8921, 0x24) 3.163497033s ago: executing program 0 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffff004, 0x2) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r1, 0xab09, r1) (async) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) fsopen$auto(&(0x7f0000000000)='\x00', 0x400) (async) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x303, 0x1070bd29, 0x25dfdbf8, {}, [@OVS_VPORT_ATTR_NETNSID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x4004010) 2.84381277s ago: executing program 0 (id=323): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, 0x0, 0x22) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = set_tid_address$auto(0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/query\x00', 0x40d02, 0x0) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, 0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x0) getdents$auto(r2, 0x0, 0x18) getdents$auto(r2, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) 2.211271859s ago: executing program 2 (id=326): r0 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r0, 0x11b, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy15/hwflags\x00', 0x94000, 0x0) bind$auto(r1, &(0x7f0000000040)=@isdn={0x22, 0x4, 0x7, 0x7, 0x80}, 0x7f) 1.927151467s ago: executing program 2 (id=328): mlockall$auto(0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x513, "288f46801f4aa13b868c1be872b61cec9fab25eba3a4ec5fb4cc891e07c48316", @raw=0x3}) openat2$auto(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x5, 0x8}, 0x401) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, r1, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x5, 0x2, 0x4}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r4 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x80010, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x3, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) 1.883882953s ago: executing program 1 (id=329): pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x75e8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x412200, 0x0) (async) ioctl$auto_MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000002680)=0x4d831b32) sethostname$auto(&(0x7f0000000000)='802.15.4 MAC\x00', 0x2) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x240440d4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) write$auto(0xffffffffffffffff, 0x0, 0x2fb) (async) mmap$auto(0xfffffffffffffffe, 0x9, 0xdf, 0x9b76, 0x2, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x3, 0x6) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14c"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xc4}, 0x10000000001, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)=0x2) 1.608493854s ago: executing program 0 (id=330): r0 = socket(0xa, 0x3, 0x3c) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000280002002f70726f632f7379732f6e65742f676f72652f7270735f646566617572c4422b96067fd9"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48050) write$auto(r0, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa167d20b4ec6fcbd}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100cc000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0xffffffff, 0xffffffffffffffff, @relative_fd, 0x8001}, 0xf) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) map_shadow_stack$auto(0x40, 0x7, 0x1ff) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0xe1d2b27bdc14aa3c) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) (async) socket(0x2, 0x4, 0x8000) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) (async) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x400000a, 0x400003) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 1.535982946s ago: executing program 1 (id=331): unshare$auto(0x40000080) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x80, 0x81bd82232b7b3a09}, 0x18) faccessat2$auto(r0, &(0x7f0000000180)='./file0\x00', 0x9, 0x251) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x145000, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = getpgid(0x0) pidfd_open$auto(r2, 0x0) ptrace$auto_ARCH_SHSTK_DISABLE(0x1, r2, 0x80000000, 0x5002) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.252962754s ago: executing program 1 (id=332): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub0/sw_params\x00', 0x610902, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3ae55be8b5f870918621c10d9e916f6fe4fca6d7515871f05cc91f4246f6515662789a97d863c26cfd02b1cf15933b053fbdab9b22b1", 0x4e) 1.21860257s ago: executing program 2 (id=333): r0 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pim6reg\x00', 0x0}) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) pread64$auto(r5, 0x0, 0x8, 0xfffd) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_3={0x7, 0x8, 0x2, 0xfffffffffffffffd, 0x5, 0x0, 0x8461, 0x5, 0x5, "79d5b79d4df9a91c43346fb089bc987f", r4, 0x8, r3, 0xb413, 0x3, 0x2, 0x481f2260, 0x5, 0x6, 0xfffffff8, @attach_btf_obj_fd=r3, 0x2, 0x6b7c, 0x609b, 0x80, 0x7, r0, r5}, 0xf) splice$auto(r1, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0xd9bd, 0x9, 0x9) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x91) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x4800, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) 1.019679049s ago: executing program 1 (id=334): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r0 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x80, 0x0) (rerun: 32) ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS2(r0, 0xc080661a, &(0x7f00000001c0)={{0x5, 0x0, @identifier="6725f534906113494a1a41e45d254a69"}, '\x00', 0x9, 0xc, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18840, 0x0) (async) mmap$auto(0x0, 0x400008, 0x2, 0x400000000009b72, 0x2, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptya2\x00', 0x101800, 0x0) (async) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, 0x0, 0x11, 0x2) r3 = pipe2$auto(0x0, 0x80) ioctl$auto(r3, 0x5761, 0x4) (async) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000280), r2) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}]}, 0x68}}, 0x80) (async) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3b3d2abd7000fddbdf250304000008000300", @ANYRES32=r10, @ANYBLOB='\n\x00\t'], 0x28}}, 0x80) (async) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20004024) (async, rerun: 32) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xbc}) (async, rerun: 32) request_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000040)='^[%+\'%\x00', &(0x7f00000000c0)='\'(*\x00', &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffff9) 839.6456ms ago: executing program 3 (id=335): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x13, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000200)='/dev/virtual_nci\x00') io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0xffffffffffffffff, 0x20005, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4f59414a7fbe3f83, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff50, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmmsg$auto(r1, 0x0, 0x4, 0x4008) 825.61429ms ago: executing program 2 (id=336): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x4, 0x15, 0x0) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) bpf$auto(0x3, &(0x7f0000000040)=@bpf_attr_0={0x10, 0x6, 0x0, 0x4, 0x401, r1, 0x0, "6898149e1c644aea26486c9c6172408d", r2, r1, 0x2, 0xe, 0x1, 0x6, r0, r1}, 0x0) 539.040572ms ago: executing program 0 (id=337): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c1, 0x400005, 0x100000005}}) (async) fsopen$auto(&(0x7f0000000000)='!\xe1@-\x00', 0x4) io_uring_enter$auto(r0, 0x9, 0x820e, 0x8b, 0x0, 0x18) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F 1 [ 80.212293][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.220260][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.228375][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.236222][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.305757][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.314140][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.322941][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.335356][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.348408][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.356903][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.365512][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.373149][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.381792][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.390246][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.398422][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.406839][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.427309][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.441363][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.449787][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.675109][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 80.884568][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.891810][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.899133][ T5821] bridge_slave_0: entered allmulticast mode [ 80.907159][ T5821] bridge_slave_0: entered promiscuous mode [ 80.916476][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.923847][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.931428][ T5821] bridge_slave_1: entered allmulticast mode [ 80.939122][ T5821] bridge_slave_1: entered promiscuous mode [ 81.074211][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.083637][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 81.111347][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.150520][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 81.220827][ T5821] team0: Port device team_slave_0 added [ 81.250958][ T5821] team0: Port device team_slave_1 added [ 81.266859][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 81.327765][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.335047][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.361343][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.399787][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.406912][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.434559][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.461338][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.468551][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.475801][ T5828] bridge_slave_0: entered allmulticast mode [ 81.482815][ T5828] bridge_slave_0: entered promiscuous mode [ 81.513482][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.520652][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.528128][ T5828] bridge_slave_1: entered allmulticast mode [ 81.535883][ T5828] bridge_slave_1: entered promiscuous mode [ 81.592754][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.599910][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.608166][ T5826] bridge_slave_0: entered allmulticast mode [ 81.615543][ T5826] bridge_slave_0: entered promiscuous mode [ 81.635419][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.655915][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.663307][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.670605][ T5826] bridge_slave_1: entered allmulticast mode [ 81.678023][ T5826] bridge_slave_1: entered promiscuous mode [ 81.717092][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.744313][ T5821] hsr_slave_0: entered promiscuous mode [ 81.751407][ T5821] hsr_slave_1: entered promiscuous mode [ 81.760559][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.783768][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.790935][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.798585][ T5831] bridge_slave_0: entered allmulticast mode [ 81.805837][ T5831] bridge_slave_0: entered promiscuous mode [ 81.814293][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.821488][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.828865][ T5831] bridge_slave_1: entered allmulticast mode [ 81.836599][ T5831] bridge_slave_1: entered promiscuous mode [ 81.845845][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.868897][ T5828] team0: Port device team_slave_0 added [ 81.908423][ T5828] team0: Port device team_slave_1 added [ 81.955756][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.967178][ T5826] team0: Port device team_slave_0 added [ 81.996849][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.018657][ T5826] team0: Port device team_slave_1 added [ 82.033230][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.040235][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.066516][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.104601][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.112108][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.138644][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.151769][ T5831] team0: Port device team_slave_0 added [ 82.176180][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.183217][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.209196][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.229982][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.237136][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.264009][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.264090][ T5143] Bluetooth: hci0: command tx timeout [ 82.278878][ T5831] team0: Port device team_slave_1 added [ 82.359506][ T5828] hsr_slave_0: entered promiscuous mode [ 82.366190][ T5828] hsr_slave_1: entered promiscuous mode [ 82.372630][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 82.378450][ T5828] Cannot create hsr debugfs directory [ 82.389940][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.397390][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.424783][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.467950][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.475033][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.501223][ T5143] Bluetooth: hci3: command tx timeout [ 82.501809][ T5832] Bluetooth: hci2: command tx timeout [ 82.507127][ T5143] Bluetooth: hci1: command tx timeout [ 82.512961][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.543036][ T5826] hsr_slave_0: entered promiscuous mode [ 82.549373][ T5826] hsr_slave_1: entered promiscuous mode [ 82.555695][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 82.561746][ T5826] Cannot create hsr debugfs directory [ 82.710095][ T5831] hsr_slave_0: entered promiscuous mode [ 82.716713][ T5831] hsr_slave_1: entered promiscuous mode [ 82.723465][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 82.729523][ T5831] Cannot create hsr debugfs directory [ 82.953987][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.991475][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.002242][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.027104][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.123985][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.143430][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.154303][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.179430][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.254474][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.269485][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.295020][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.307372][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.419753][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.427754][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.438996][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.449966][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.478014][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.533100][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.565250][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.572640][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.600219][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.607363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.631893][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.675598][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.718767][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.730580][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.750941][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.758181][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.774554][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.781752][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.797680][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.804870][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.834530][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.841726][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.000551][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.044519][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.087737][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.094979][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.129285][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.136974][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.229426][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.331639][ T5143] Bluetooth: hci0: command tx timeout [ 84.399973][ T5821] veth0_vlan: entered promiscuous mode [ 84.434100][ T5821] veth1_vlan: entered promiscuous mode [ 84.488827][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.572584][ T5143] Bluetooth: hci2: command tx timeout [ 84.572970][ T5835] Bluetooth: hci3: command tx timeout [ 84.578037][ T5143] Bluetooth: hci1: command tx timeout [ 84.604167][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.617337][ T5821] veth0_macvtap: entered promiscuous mode [ 84.647010][ T5821] veth1_macvtap: entered promiscuous mode [ 84.676527][ T5828] veth0_vlan: entered promiscuous mode [ 84.706235][ T5828] veth1_vlan: entered promiscuous mode [ 84.720126][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.734480][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.748673][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.784623][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.795331][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.810875][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.823292][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.839567][ T5826] veth0_vlan: entered promiscuous mode [ 84.880811][ T5826] veth1_vlan: entered promiscuous mode [ 84.895077][ T5828] veth0_macvtap: entered promiscuous mode [ 84.939866][ T5828] veth1_macvtap: entered promiscuous mode [ 84.960289][ T5831] veth0_vlan: entered promiscuous mode [ 85.017722][ T5831] veth1_vlan: entered promiscuous mode [ 85.033953][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.044054][ T5826] veth0_macvtap: entered promiscuous mode [ 85.062111][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.070200][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.076632][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.097587][ T5826] veth1_macvtap: entered promiscuous mode [ 85.126074][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.136784][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.164254][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.183958][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.193300][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.202588][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.218176][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.258792][ T5831] veth0_macvtap: entered promiscuous mode [ 85.270496][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.293719][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.296312][ T5831] veth1_macvtap: entered promiscuous mode [ 85.325982][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.344221][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.359766][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.391435][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.476180][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.500303][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.525475][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.573701][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.653065][ T5912] zswap: compressor not available [ 85.669461][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.681362][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.689855][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.728474][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.751723][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.782998][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.796158][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.813516][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.927733][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.956822][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.045579][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.074683][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.194921][ T5925] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.205821][ T5925] Zero length message leads to an empty skb [ 86.411379][ T5143] Bluetooth: hci0: command tx timeout [ 86.430518][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.438810][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.471113][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.652839][ T5143] Bluetooth: hci3: command tx timeout [ 86.658359][ T5835] Bluetooth: hci2: command tx timeout [ 86.664396][ T5832] Bluetooth: hci1: command tx timeout [ 86.816074][ T5937] random: crng reseeded on system resumption [ 87.314178][ T5939] ovs_?: entered promiscuous mode [ 87.368892][ T5943] mmap: syz.1.6 (5943) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.764440][ T5947] process 'syz.1.8' launched ':,' with NULL argv: empty string added [ 87.811272][ T5947] FAULT_INJECTION: forcing a failure. [ 87.811272][ T5947] name failslab, interval 1, probability 0, space 0, times 1 [ 87.811346][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 87.811387][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.811410][ T5947] Call Trace: [ 87.811418][ T5947] [ 87.811430][ T5947] dump_stack_lvl+0x100/0x190 [ 87.811480][ T5947] should_fail_ex.cold+0x5/0xa [ 87.811512][ T5947] ? tomoyo_init_log+0x1224/0x20c0 [ 87.811548][ T5947] should_failslab+0xc2/0x120 [ 87.811580][ T5947] __kmalloc_noprof+0xe0/0x850 [ 87.811629][ T5947] tomoyo_init_log+0x1224/0x20c0 [ 87.811673][ T5947] ? vsnprintf+0x4ee/0x1240 [ 87.811708][ T5947] ? __pfx_tomoyo_init_log+0x10/0x10 [ 87.811745][ T5947] ? tomoyo_profile+0x47/0x60 [ 87.811768][ T5947] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 87.811806][ T5947] tomoyo_supervisor+0x506/0x1340 [ 87.811836][ T5947] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 87.811879][ T5947] ? tomoyo_check_path_acl+0x141/0x210 [ 87.811906][ T5947] ? tomoyo_check_acl+0x1f7/0x410 [ 87.811933][ T5947] tomoyo_path_permission+0x270/0x3b0 [ 87.811963][ T5947] tomoyo_check_open_permission+0x34d/0x3c0 [ 87.811994][ T5947] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 87.812055][ T5947] ? do_raw_spin_lock+0x128/0x260 [ 87.812095][ T5947] ? path_get+0x61/0x80 [ 87.812125][ T5947] tomoyo_file_open+0x6b/0x90 [ 87.812150][ T5947] security_file_open+0xb5/0x1e0 [ 87.812184][ T5947] do_dentry_open+0x5aa/0x1660 [ 87.812211][ T5947] ? security_inode_permission+0xbf/0x250 [ 87.812246][ T5947] vfs_open+0x82/0x3f0 [ 87.812283][ T5947] path_openat+0x208c/0x31a0 [ 87.812323][ T5947] ? __pfx_path_openat+0x10/0x10 [ 87.812364][ T5947] do_file_open+0x20e/0x430 [ 87.812403][ T5947] ? __pfx_do_file_open+0x10/0x10 [ 87.812459][ T5947] ? alloc_fd+0x476/0x790 [ 87.812493][ T5947] ? do_getname+0x191/0x390 [ 87.812533][ T5947] do_sys_openat2+0x10d/0x1e0 [ 87.812569][ T5947] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.812616][ T5947] __x64_sys_openat+0x12d/0x210 [ 87.812657][ T5947] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.812709][ T5947] do_syscall_64+0x106/0xf80 [ 87.812739][ T5947] ? clear_bhb_loop+0x40/0x90 [ 87.812773][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.812801][ T5947] RIP: 0033:0x7f06ea99c819 [ 87.812835][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.812861][ T5947] RSP: 002b:00007f06eb77e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.812893][ T5947] RAX: ffffffffffffffda RBX: 00007f06eac15fa0 RCX: 00007f06ea99c819 [ 87.812911][ T5947] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 87.812927][ T5947] RBP: 00007f06eaa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 87.812944][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.812960][ T5947] R13: 00007f06eac16038 R14: 00007f06eac15fa0 R15: 00007ffec6744e58 [ 87.812993][ T5947] [ 88.501943][ T5143] Bluetooth: hci0: command tx timeout [ 88.590690][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 88.591108][ T5963] ipvlan0: entered promiscuous mode [ 88.591135][ T5963] ipvlan0: entered allmulticast mode [ 88.591153][ T5963] veth0_vlan: entered allmulticast mode [ 88.731597][ T5143] Bluetooth: hci3: command tx timeout [ 88.731655][ T5143] Bluetooth: hci2: command tx timeout [ 88.731681][ T5143] Bluetooth: hci1: command tx timeout [ 90.494277][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.222529][ T5999] random: crng reseeded on system resumption [ 92.016173][ T24] cfg80211: failed to load regulatory.db [ 92.674804][ T6019] FAULT_INJECTION: forcing a failure. [ 92.674804][ T6019] name failslab, interval 1, probability 0, space 0, times 0 [ 92.687845][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 92.687884][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.687901][ T6019] Call Trace: [ 92.687910][ T6019] [ 92.687928][ T6019] dump_stack_lvl+0x100/0x190 [ 92.687976][ T6019] should_fail_ex.cold+0x5/0xa [ 92.688010][ T6019] should_failslab+0xc2/0x120 [ 92.688043][ T6019] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 92.688091][ T6019] ? sock_alloc_inode+0x25/0x1c0 [ 92.688128][ T6019] ? __pfx_sock_alloc_inode+0x10/0x10 [ 92.688164][ T6019] sock_alloc_inode+0x25/0x1c0 [ 92.688196][ T6019] alloc_inode+0x68/0x250 [ 92.688235][ T6019] sock_alloc+0x44/0x280 [ 92.688263][ T6019] ? security_socket_create+0x7f/0x250 [ 92.688296][ T6019] __sock_create+0xc2/0x860 [ 92.688338][ T6019] __sys_socket+0x14d/0x260 [ 92.688378][ T6019] ? __pfx___sys_socket+0x10/0x10 [ 92.688427][ T6019] __x64_sys_socket+0x72/0xb0 [ 92.688463][ T6019] ? lockdep_hardirqs_on+0x78/0x100 [ 92.688493][ T6019] do_syscall_64+0x106/0xf80 [ 92.688522][ T6019] ? clear_bhb_loop+0x40/0x90 [ 92.688558][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.688587][ T6019] RIP: 0033:0x7fce3259c819 [ 92.688613][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.688640][ T6019] RSP: 002b:00007fce3345c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 92.688666][ T6019] RAX: ffffffffffffffda RBX: 00007fce32816180 RCX: 00007fce3259c819 [ 92.688683][ T6019] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011 [ 92.688701][ T6019] RBP: 00007fce32632c91 R08: 0000000000000000 R09: 0000000000000000 [ 92.688718][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.688734][ T6019] R13: 00007fce32816218 R14: 00007fce32816180 R15: 00007fff8bf4c7d8 [ 92.688770][ T6019] [ 92.688990][ T6019] socket: no more sockets [ 93.138457][ T6017] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.717202][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 93.783297][ T6037] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.868794][ T30] audit: type=1800 audit(1775751558.711:2): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.24" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 93.923036][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.083879][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.196685][ T6036] bond0 (unregistering): Released all slaves [ 95.223335][ T6054] netlink: 334 bytes leftover after parsing attributes in process `syz.0.27'. [ 97.478663][ T6088] ubi0: attaching mtd0 [ 97.505033][ T6088] ubi0: scanning is finished [ 97.509771][ T6088] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 97.742508][ T6088] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 98.501246][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.082017][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 99.323552][ T6119] futex_wake_op: syz.3.42 tries to shift op by -2048; fix this program [ 99.351564][ T6113] syz.1.40 (6113) used greatest stack depth: 19672 bytes left [ 102.144061][ T6150] blktrace: Concurrent blktraces are not allowed on loop2 [ 103.364945][ T6167] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.672140][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 106.655753][ T6218] block2mtd: illegal erase size [ 107.875705][ T6232] netlink: 342 bytes leftover after parsing attributes in process `syz.2.64'. [ 107.974690][ T6238] futex_wake_op: syz.0.65 tries to shift op by -2048; fix this program [ 107.990203][ T6232] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 108.449074][ T6255] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 108.855503][ T6259] bridge0: port 3(dummy0) entered blocking state [ 108.862174][ T6259] bridge0: port 3(dummy0) entered disabled state [ 108.869597][ T6259] dummy0: entered allmulticast mode [ 108.880311][ T6259] dummy0: entered promiscuous mode [ 108.886920][ T6259] bridge0: port 3(dummy0) entered blocking state [ 108.893633][ T6259] bridge0: port 3(dummy0) entered forwarding state [ 109.576903][ T6276] futex_wake_op: syz.0.74 tries to shift op by -2048; fix this program [ 109.999710][ T6283] Line length is too long: Should be less than 4094 [ 110.481898][ T6291] ima: policy update failed [ 110.501498][ T30] audit: type=1802 audit(1775751575.331:3): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.75" res=0 errno=0 [ 110.585277][ T6294] NFSD: Failed to start, no listeners configured. [ 111.361605][ T6308] bond0: invalid ARP target specified [ 111.422180][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 111.460406][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.501114][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.597366][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.611212][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.494590][ T6327] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 113.364576][ T6341] nvme_fcloop: unknown parameter or missing value '7' [ 113.970657][ T6369] FAULT_INJECTION: forcing a failure. [ 113.970657][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 113.979898][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 113.983679][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.0.99 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.983722][ T6369] Tainted: [L]=SOFTLOCKUP [ 113.983732][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 113.983747][ T6369] Call Trace: [ 113.983756][ T6369] [ 113.983766][ T6369] dump_stack_lvl+0x100/0x190 [ 113.983837][ T6369] should_fail_ex.cold+0x5/0xa [ 113.983871][ T6369] should_failslab+0xc2/0x120 [ 113.983901][ T6369] __kmalloc_cache_noprof+0x7a/0x6f0 [ 113.983946][ T6369] ? mqueue_init_fs_context+0x4b/0x690 [ 113.983984][ T6369] mqueue_init_fs_context+0x4b/0x690 [ 113.984016][ T6369] alloc_fs_context+0x60c/0xf40 [ 113.984057][ T6369] mq_init_ns+0x16e/0x820 [ 113.984091][ T6369] copy_ipcs+0x3dd/0x7e0 [ 113.984124][ T6369] create_new_namespaces+0x20a/0xac0 [ 113.984154][ T6369] ? security_capable+0x80/0x260 [ 113.984187][ T6369] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 113.984219][ T6369] ksys_unshare+0x473/0xad0 [ 113.984256][ T6369] ? __pfx_ksys_unshare+0x10/0x10 [ 113.984305][ T6369] __x64_sys_unshare+0x31/0x40 [ 113.984338][ T6369] do_syscall_64+0x106/0xf80 [ 113.984366][ T6369] ? clear_bhb_loop+0x40/0x90 [ 113.984399][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.984427][ T6369] RIP: 0033:0x7f31ae99c819 [ 113.984454][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.984479][ T6369] RSP: 002b:00007f31af89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.984505][ T6369] RAX: ffffffffffffffda RBX: 00007f31aec15fa0 RCX: 00007f31ae99c819 [ 113.984522][ T6369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 113.984537][ T6369] RBP: 00007f31aea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 113.984554][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.984570][ T6369] R13: 00007f31aec16038 R14: 00007f31aec15fa0 R15: 00007ffeb830c098 [ 113.984606][ T6369] [ 114.927246][ T6381] FAULT_INJECTION: forcing a failure. [ 114.927246][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 115.152120][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.0.103 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.152148][ T6381] Tainted: [L]=SOFTLOCKUP [ 115.152153][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.152163][ T6381] Call Trace: [ 115.152168][ T6381] [ 115.152174][ T6381] dump_stack_lvl+0x100/0x190 [ 115.152203][ T6381] should_fail_ex.cold+0x5/0xa [ 115.152235][ T6381] should_failslab+0xc2/0x120 [ 115.152266][ T6381] __kmalloc_cache_noprof+0x7a/0x6f0 [ 115.152287][ T6381] ? kobject_uevent_env+0x263/0x18b0 [ 115.152312][ T6381] kobject_uevent_env+0x263/0x18b0 [ 115.152339][ T6381] net_rx_queue_update_kobjects+0x1dd/0x760 [ 115.152360][ T6381] ? kset_register+0x1bb/0x290 [ 115.152379][ T6381] netdev_register_kobject+0x290/0x3d0 [ 115.152399][ T6381] register_netdevice+0x12e0/0x2210 [ 115.152419][ T6381] ? __pfx_register_netdevice+0x10/0x10 [ 115.152441][ T6381] __ip_tunnel_create+0x52b/0x670 [ 115.152459][ T6381] ? __pfx___ip_tunnel_create+0x10/0x10 [ 115.152473][ T6381] ? net_generic+0xea/0x2a0 [ 115.152493][ T6381] ip_tunnel_init_net+0x230/0x780 [ 115.152511][ T6381] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 115.152533][ T6381] ? __kmalloc_noprof+0x320/0x850 [ 115.152558][ T6381] ? __pfx_ipgre_init_net+0x10/0x10 [ 115.152580][ T6381] ops_init+0x1e2/0x5f0 [ 115.152597][ T6381] setup_net+0x118/0x3a0 [ 115.152613][ T6381] ? __pfx_setup_net+0x10/0x10 [ 115.152626][ T6381] ? lockdep_init_map_type+0x5c/0x250 [ 115.152647][ T6381] ? mutex_init_lockep+0x110/0x150 [ 115.152670][ T6381] copy_net_ns+0x46f/0x7c0 [ 115.152688][ T6381] create_new_namespaces+0x3ea/0xac0 [ 115.152709][ T6381] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 115.152727][ T6381] ksys_unshare+0x473/0xad0 [ 115.152747][ T6381] ? __pfx_ksys_unshare+0x10/0x10 [ 115.152773][ T6381] __x64_sys_unshare+0x31/0x40 [ 115.152791][ T6381] do_syscall_64+0x106/0xf80 [ 115.152806][ T6381] ? clear_bhb_loop+0x40/0x90 [ 115.152823][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.152838][ T6381] RIP: 0033:0x7f31ae99c819 [ 115.152852][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.152874][ T6381] RSP: 002b:00007f31af89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.152890][ T6381] RAX: ffffffffffffffda RBX: 00007f31aec15fa0 RCX: 00007f31ae99c819 [ 115.152899][ T6381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 115.152908][ T6381] RBP: 00007f31aea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 115.152917][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.152926][ T6381] R13: 00007f31aec16038 R14: 00007f31aec15fa0 R15: 00007ffeb830c098 [ 115.152946][ T6381] [ 117.368924][ T6415] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.372842][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 119.349713][ T6505] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 119.374242][ T6505] ovs_: entered promiscuous mode [ 119.390850][ T6505] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 120.823919][ T6560] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.630682][ T6582] capability: warning: `syz.3.138' uses 32-bit capabilities (legacy support in use) [ 121.720164][ T6536] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.1), cmd(6) [ 123.867625][ T6629] bridge_slave_1: left allmulticast mode [ 123.960363][ T6629] bridge_slave_1: left promiscuous mode [ 124.042079][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.179156][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.151'. [ 124.601502][ T6640] FAULT_INJECTION: forcing a failure. [ 124.601502][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 124.631807][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.2.153 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.631854][ T6640] Tainted: [L]=SOFTLOCKUP [ 124.631864][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.631880][ T6640] Call Trace: [ 124.631889][ T6640] [ 124.631898][ T6640] dump_stack_lvl+0x100/0x190 [ 124.631947][ T6640] should_fail_ex.cold+0x5/0xa [ 124.631981][ T6640] should_failslab+0xc2/0x120 [ 124.632014][ T6640] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 124.632057][ T6640] ? __d_alloc+0x34/0xa80 [ 124.632087][ T6640] ? do_raw_spin_lock+0x128/0x260 [ 124.632132][ T6640] __d_alloc+0x34/0xa80 [ 124.632170][ T6640] d_alloc_parallel+0x111/0x14e0 [ 124.632223][ T6640] ? find_held_lock+0x2b/0x80 [ 124.632250][ T6640] ? __d_lookup+0x25c/0x4a0 [ 124.632289][ T6640] ? __pfx_d_alloc_parallel+0x10/0x10 [ 124.632338][ T6640] ? __d_lookup+0x266/0x4a0 [ 124.632388][ T6640] lookup_open.isra.0+0x57c/0x11b0 [ 124.632440][ T6640] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 124.632505][ T6640] ? mnt_get_write_access+0x1e9/0x2f0 [ 124.632550][ T6640] path_openat+0xa98/0x31a0 [ 124.632588][ T6640] ? __pfx_path_openat+0x10/0x10 [ 124.632629][ T6640] do_file_open+0x20e/0x430 [ 124.632662][ T6640] ? __pfx_do_file_open+0x10/0x10 [ 124.632720][ T6640] ? alloc_fd+0x476/0x790 [ 124.632754][ T6640] ? do_getname+0x191/0x390 [ 124.632806][ T6640] do_sys_openat2+0x10d/0x1e0 [ 124.632848][ T6640] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.632891][ T6640] ? __fget_files+0x21f/0x3d0 [ 124.632928][ T6640] __x64_sys_openat+0x12d/0x210 [ 124.632969][ T6640] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.633023][ T6640] do_syscall_64+0x106/0xf80 [ 124.633053][ T6640] ? clear_bhb_loop+0x40/0x90 [ 124.633089][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.633118][ T6640] RIP: 0033:0x7f234879c819 [ 124.633144][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.633170][ T6640] RSP: 002b:00007f2349649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.633198][ T6640] RAX: ffffffffffffffda RBX: 00007f2348a15fa0 RCX: 00007f234879c819 [ 124.633217][ T6640] RDX: 0000000000000202 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 124.633235][ T6640] RBP: 00007f2348832c91 R08: 0000000000000000 R09: 0000000000000000 [ 124.633253][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.633270][ T6640] R13: 00007f2348a16038 R14: 00007f2348a15fa0 R15: 00007ffc8fc64be8 [ 124.633308][ T6640] [ 125.272190][ T6649] Invalid ELF header magic: != ELF [ 125.989294][ T6678] random: crng reseeded on system resumption [ 128.009919][ T6714] FAULT_INJECTION: forcing a failure. [ 128.009919][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 128.025294][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.0.171 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.025339][ T6714] Tainted: [L]=SOFTLOCKUP [ 128.025346][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.025355][ T6714] Call Trace: [ 128.025361][ T6714] [ 128.025367][ T6714] dump_stack_lvl+0x100/0x190 [ 128.025399][ T6714] should_fail_ex.cold+0x5/0xa [ 128.025419][ T6714] should_failslab+0xc2/0x120 [ 128.025436][ T6714] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 128.025459][ T6714] ? __d_alloc+0x34/0xa80 [ 128.025480][ T6714] __d_alloc+0x34/0xa80 [ 128.025499][ T6714] d_alloc_pseudo+0x1c/0xc0 [ 128.025521][ T6714] alloc_file_pseudo+0xcf/0x230 [ 128.025541][ T6714] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 128.025566][ T6714] __shmem_file_setup+0x221/0x490 [ 128.025587][ T6714] ? __pfx___shmem_file_setup+0x10/0x10 [ 128.025610][ T6714] ? vm_area_alloc+0x1f/0x160 [ 128.025633][ T6714] shmem_zero_setup+0x96/0x1b0 [ 128.025656][ T6714] __mmap_region+0x21f6/0x2a50 [ 128.025683][ T6714] ? __pfx___mmap_region+0x10/0x10 [ 128.025703][ T6714] ? process_measurement+0x1f4/0x2350 [ 128.025739][ T6714] ? sched_clock+0x38/0x60 [ 128.025768][ T6714] ? lockdep_hardirqs_on+0x78/0x100 [ 128.025783][ T6714] ? finish_task_switch.isra.0+0x205/0xb80 [ 128.025800][ T6714] ? rcu_is_watching+0x12/0xc0 [ 128.025847][ T6714] ? rcu_is_watching+0x12/0xc0 [ 128.025870][ T6714] ? cap_capable+0x107/0x460 [ 128.025888][ T6714] mmap_region+0x180/0x3e0 [ 128.025914][ T6714] do_mmap+0xc63/0x12f0 [ 128.025935][ T6714] ? __pfx_do_mmap+0x10/0x10 [ 128.025952][ T6714] ? __pfx_down_write_killable+0x10/0x10 [ 128.025974][ T6714] vm_mmap_pgoff+0x29e/0x470 [ 128.025995][ T6714] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 128.026013][ T6714] ? do_futex+0x192/0x350 [ 128.026032][ T6714] ? __pfx_do_futex+0x10/0x10 [ 128.026055][ T6714] ksys_mmap_pgoff+0xe1/0x650 [ 128.026073][ T6714] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 128.026090][ T6714] ? xfd_validate_state+0x129/0x190 [ 128.026114][ T6714] __x64_sys_mmap+0x125/0x190 [ 128.026138][ T6714] do_syscall_64+0x106/0xf80 [ 128.026152][ T6714] ? clear_bhb_loop+0x40/0x90 [ 128.026170][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.026185][ T6714] RIP: 0033:0x7f31ae99c819 [ 128.026203][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.026218][ T6714] RSP: 002b:00007f31af89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.026234][ T6714] RAX: ffffffffffffffda RBX: 00007f31aec15fa0 RCX: 00007f31ae99c819 [ 128.026244][ T6714] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 128.026253][ T6714] RBP: 00007f31aea32c91 R08: fffffffffffffffa R09: 0000000000008000 [ 128.026262][ T6714] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 128.026270][ T6714] R13: 00007f31aec16038 R14: 00007f31aec15fa0 R15: 00007ffeb830c098 [ 128.026290][ T6714] [ 128.651871][ T6728] netlink: 672 bytes leftover after parsing attributes in process `syz.0.175'. [ 129.994633][ T6754] syz.2.181 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.925845][ T6777] futex_wake_op: syz.0.186 tries to shift op by -2048; fix this program [ 131.831096][ T6809] nbd: must specify a device to reconfigure [ 132.211750][ T6816] netlink: 184 bytes leftover after parsing attributes in process `syz.3.194'. [ 132.296104][ T6816] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 132.413294][ T6832] FAULT_INJECTION: forcing a failure. [ 132.413294][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 132.459966][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.1.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.460012][ T6832] Tainted: [L]=SOFTLOCKUP [ 132.460021][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.460038][ T6832] Call Trace: [ 132.460047][ T6832] [ 132.460057][ T6832] dump_stack_lvl+0x100/0x190 [ 132.460108][ T6832] should_fail_ex.cold+0x5/0xa [ 132.460144][ T6832] should_failslab+0xc2/0x120 [ 132.460178][ T6832] __kmalloc_cache_noprof+0x7a/0x6f0 [ 132.460227][ T6832] ? vkms_plane_duplicate_state+0x45/0x130 [ 132.460272][ T6832] vkms_plane_duplicate_state+0x45/0x130 [ 132.460310][ T6832] drm_atomic_get_plane_state+0x279/0x760 [ 132.460354][ T6832] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 132.460402][ T6832] ? trace_contention_end+0x140/0x180 [ 132.460449][ T6832] ? __mutex_lock+0x26a/0x1b90 [ 132.460481][ T6832] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 132.460528][ T6832] ? drm_master_internal_acquire+0x21/0x80 [ 132.460609][ T6832] drm_client_modeset_commit_locked+0x14d/0x580 [ 132.460662][ T6832] drm_client_modeset_commit+0x4f/0x80 [ 132.460708][ T6832] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 132.460758][ T6832] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 132.460808][ T6832] drm_fbdev_client_restore+0x1b/0x30 [ 132.460844][ T6832] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 132.460881][ T6832] drm_client_dev_restore+0x205/0x2a0 [ 132.460933][ T6832] drm_release+0x2c6/0x360 [ 132.460978][ T6832] ? __pfx_drm_release+0x10/0x10 [ 132.461014][ T6832] __fput+0x3ff/0xb40 [ 132.461054][ T6832] task_work_run+0x150/0x240 [ 132.461097][ T6832] ? __pfx_task_work_run+0x10/0x10 [ 132.461149][ T6832] exit_to_user_mode_loop+0x100/0x4a0 [ 132.461191][ T6832] do_syscall_64+0x668/0xf80 [ 132.461228][ T6832] ? clear_bhb_loop+0x40/0x90 [ 132.461263][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.461290][ T6832] RIP: 0033:0x7f06ea99c819 [ 132.461314][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.461339][ T6832] RSP: 002b:00007f06eb77e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 132.461366][ T6832] RAX: 0000000000000000 RBX: 00007f06eac15fa0 RCX: 00007f06ea99c819 [ 132.461382][ T6832] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 132.461398][ T6832] RBP: 00007f06eaa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 132.461415][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.461430][ T6832] R13: 00007f06eac16038 R14: 00007f06eac15fa0 R15: 00007ffec6744e58 [ 132.461465][ T6832] [ 132.756098][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 132.980904][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.991231][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160453][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 133.211543][ T6849] sp0: Synchronizing with TNC [ 134.183175][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 134.861288][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 135.846743][ T6896] input: jJǸ-9%vJ86 as /devices/virtual/input/input9 [ 137.823590][ T6927] FAULT_INJECTION: forcing a failure. [ 137.823590][ T6927] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 137.853957][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.3.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.853999][ T6927] Tainted: [L]=SOFTLOCKUP [ 137.854009][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.854031][ T6927] Call Trace: [ 137.854039][ T6927] [ 137.854049][ T6927] dump_stack_lvl+0x100/0x190 [ 137.854092][ T6927] should_fail_ex.cold+0x5/0xa [ 137.854119][ T6927] ? prepare_alloc_pages+0x16d/0x5f0 [ 137.854153][ T6927] should_fail_alloc_page+0xeb/0x140 [ 137.854186][ T6927] prepare_alloc_pages+0x1f0/0x5f0 [ 137.854223][ T6927] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 137.854269][ T6927] ? __lock_acquire+0x4a5/0x2630 [ 137.854304][ T6927] ? css_rstat_updated+0x1ce/0x5a0 [ 137.854337][ T6927] ? __pfx_css_rstat_updated+0x10/0x10 [ 137.854373][ T6927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.854429][ T6927] ? __lock_acquire+0x4a5/0x2630 [ 137.854471][ T6927] ? lock_acquire+0x1cf/0x380 [ 137.854513][ T6927] ? find_held_lock+0x2b/0x80 [ 137.854539][ T6927] ? page_table_check_set+0x49a/0xa10 [ 137.854567][ T6927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.854604][ T6927] ? policy_nodemask+0xed/0x4f0 [ 137.854637][ T6927] alloc_pages_mpol+0x1fb/0x550 [ 137.854669][ T6927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.854697][ T6927] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 137.854729][ T6927] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 137.854764][ T6927] alloc_pages_noprof+0x136/0x390 [ 137.854796][ T6927] pte_alloc_one+0x1c/0x3d0 [ 137.854828][ T6927] __pte_alloc+0x6d/0x3e0 [ 137.854857][ T6927] ? __pfx___pte_alloc+0x10/0x10 [ 137.854886][ T6927] ? find_held_lock+0x2b/0x80 [ 137.854912][ T6927] ? find_held_lock+0x2b/0x80 [ 137.854937][ T6927] ? walk_to_pmd+0x302/0x4c0 [ 137.854974][ T6927] get_locked_pte+0xa1/0xc0 [ 137.855010][ T6927] insert_page+0xcc/0x220 [ 137.855044][ T6927] ? __pfx_insert_page+0x10/0x10 [ 137.855075][ T6927] ? __pfx_down_read_trylock+0x10/0x10 [ 137.855125][ T6927] vm_insert_page+0x2c0/0x400 [ 137.855163][ T6927] kcov_mmap+0xca/0x130 [ 137.855191][ T6927] __mmap_region+0x1503/0x2a50 [ 137.855237][ T6927] ? __pfx___mmap_region+0x10/0x10 [ 137.855276][ T6927] ? ima_match_policy+0x8c4/0x2350 [ 137.855344][ T6927] ? find_held_lock+0x2b/0x80 [ 137.855370][ T6927] ? process_measurement+0x4c8/0x2350 [ 137.855393][ T6927] ? process_measurement+0x4c8/0x2350 [ 137.855434][ T6927] ? process_measurement+0x1f4/0x2350 [ 137.855515][ T6927] ? rcu_is_watching+0x12/0xc0 [ 137.855556][ T6927] ? cap_capable+0x107/0x460 [ 137.855589][ T6927] mmap_region+0x30a/0x3e0 [ 137.855638][ T6927] do_mmap+0xc63/0x12f0 [ 137.855676][ T6927] ? __pfx_do_mmap+0x10/0x10 [ 137.855707][ T6927] ? __pfx_down_write_killable+0x10/0x10 [ 137.855744][ T6927] vm_mmap_pgoff+0x29e/0x470 [ 137.855779][ T6927] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 137.855803][ T6927] ? __fget_files+0x215/0x3d0 [ 137.855833][ T6927] ? __fget_files+0x21f/0x3d0 [ 137.855865][ T6927] ksys_mmap_pgoff+0x3c8/0x650 [ 137.855896][ T6927] ? __x64_sys_futex+0x34f/0x4d0 [ 137.855929][ T6927] ? __x64_sys_futex+0x358/0x4d0 [ 137.855965][ T6927] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 137.855996][ T6927] ? xfd_validate_state+0x129/0x190 [ 137.856038][ T6927] __x64_sys_mmap+0x125/0x190 [ 137.856081][ T6927] do_syscall_64+0x106/0xf80 [ 137.856107][ T6927] ? clear_bhb_loop+0x40/0x90 [ 137.856138][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.856164][ T6927] RIP: 0033:0x7fce3259c819 [ 137.856185][ T6927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.856206][ T6927] RSP: 002b:00007fce3345c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 137.856231][ T6927] RAX: ffffffffffffffda RBX: 00007fce32816180 RCX: 00007fce3259c819 [ 137.856249][ T6927] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 137.856264][ T6927] RBP: 00007fce32632c91 R08: 00000000000000dd R09: 0000000000000000 [ 137.856280][ T6927] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 137.856295][ T6927] R13: 00007fce32816218 R14: 00007fce32816180 R15: 00007fff8bf4c7d8 [ 137.856329][ T6927] [ 137.856351][ T6927] kcov: kcov: vm_insert_page() failed [ 138.417206][ T6126] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 138.417246][ T6126] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 138.432954][ T6126] Bluetooth: hci3: Dropping invalid advertising data [ 138.441127][ T6126] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 139.159092][ T6955] blktrace: Concurrent blktraces are not allowed on loop2 [ 139.532955][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 140.625662][ T7006] futex_wake_op: syz.3.231 tries to shift op by -2048; fix this program [ 141.086697][ T7019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.206867][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.235'. [ 141.337609][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.235'. [ 142.014362][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 142.321584][ T7045] random: crng reseeded on system resumption [ 142.430627][ T7047] hub 1-0:1.0: USB hub found [ 142.454200][ T7047] hub 1-0:1.0: 1 port detected [ 142.973620][ T7064] futex_wake_op: syz.0.247 tries to shift op by -2048; fix this program [ 142.992304][ T7064] futex_wake_op: syz.0.247 tries to shift op by -2048; fix this program [ 143.022702][ T7064] 0x000000000001-0x000000020000 : "" [ 143.037213][ T7064] ftl_cs: FTL header corrupt! [ 143.486563][ T7084] NFSD: Failed to start, no listeners configured. [ 143.499293][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'. [ 144.873445][ T7117] raw_sendmsg: syz.1.259 forgot to set AF_INET. Fix it! [ 147.635460][ T7183] i2c i2c-0: delete_device: Can't parse I2C address [ 147.679580][ T7186] program syz.0.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.953595][ T7194] program syz.0.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.123933][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 148.151376][ T7191] random: crng reseeded on system resumption [ 148.748222][ T7220] openvswitch: netlink: IP tunnel dst address not specified [ 149.136704][ T7233] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 149.313797][ T7232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 152.965548][ T7407] futex_wake_op: syz.2.308 tries to shift op by -2048; fix this program [ 152.974276][ T6126] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 152.980717][ T6131] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 152.989962][ T7295] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 153.000425][ T7293] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 153.008659][ T7294] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 153.016310][ T7296] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 153.051450][ T7299] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 153.058289][ T7298] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 153.066690][ T7300] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 153.131224][ T7297] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 153.138810][ T7303] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 153.145541][ T7306] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 153.152942][ T7304] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 153.159388][ T7301] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 153.166456][ T7305] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 153.181102][ T7307] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 153.271376][ T7313] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 153.279996][ T7312] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 153.287325][ T7308] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 153.295863][ T7314] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 153.341093][ T7318] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 153.353243][ T7323] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 153.359972][ T7311] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 153.366615][ T7319] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 153.374420][ T7322] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 153.381988][ T7320] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 153.391432][ T7326] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 153.398466][ T7325] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 153.405503][ T7324] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 153.413047][ T7327] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 153.461408][ T7328] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 153.468161][ T7329] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 153.474642][ T7330] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 153.481679][ T7331] Bluetooth: hci37: Opcode 0x0c03 failed: -110 [ 153.533754][ T7332] Bluetooth: hci38: Opcode 0x0c03 failed: -110 [ 153.540280][ T7344] Bluetooth: hci49: Opcode 0x0c03 failed: -110 [ 153.546626][ T7346] Bluetooth: hci45: Opcode 0x0c03 failed: -110 [ 153.553589][ T7339] Bluetooth: hci46: Opcode 0x0c03 failed: -110 [ 153.560110][ T7338] Bluetooth: hci42: Opcode 0x0c03 failed: -110 [ 153.567106][ T7340] Bluetooth: hci44: Opcode 0x0c03 failed: -110 [ 153.574115][ T7337] Bluetooth: hci40: Opcode 0x0c03 failed: -110 [ 153.580708][ T7336] Bluetooth: hci39: Opcode 0x0c03 failed: -110 [ 153.587407][ T7333] Bluetooth: hci47: Opcode 0x0c03 failed: -110 [ 153.593997][ T7343] Bluetooth: hci48: Opcode 0x0c03 failed: -110 [ 153.601453][ T7341] Bluetooth: hci41: Opcode 0x0c03 failed: -110 [ 153.607920][ T7342] Bluetooth: hci43: Opcode 0x0c03 failed: -110 [ 153.614320][ T7358] Bluetooth: hci58: Opcode 0x0c03 failed: -110 [ 153.620819][ T7347] Bluetooth: hci50: Opcode 0x0c03 failed: -110 [ 153.627770][ T7354] Bluetooth: hci57: Opcode 0x0c03 failed: -110 [ 153.634809][ T7355] Bluetooth: hci56: Opcode 0x0c03 failed: -110 [ 153.643556][ T7353] Bluetooth: hci53: Opcode 0x0c03 failed: -110 [ 153.650086][ T7348] Bluetooth: hci54: Opcode 0x0c03 failed: -110 [ 153.656447][ T7349] Bluetooth: hci55: Opcode 0x0c03 failed: -110 [ 153.662806][ T7352] Bluetooth: hci52: Opcode 0x0c03 failed: -110 [ 153.669481][ T7350] Bluetooth: hci51: Opcode 0x0c03 failed: -110 [ 153.691394][ T7359] Bluetooth: hci60: Opcode 0x0c03 failed: -110 [ 153.697982][ T7356] Bluetooth: hci59: Opcode 0x0c03 failed: -110 [ 153.705735][ T7361] Bluetooth: hci61: Opcode 0x0c03 failed: -110 [ 153.771254][ T7364] Bluetooth: hci64: Opcode 0x0c03 failed: -110 [ 153.778896][ T7363] Bluetooth: hci63: Opcode 0x0c03 failed: -110 [ 153.786268][ T7360] Bluetooth: hci62: Opcode 0x0c03 failed: -110 [ 153.793518][ T7366] Bluetooth: hci66: Opcode 0x0c03 failed: -110 [ 153.801106][ T7365] Bluetooth: hci65: Opcode 0x0c03 failed: -110 [ 153.852789][ T7367] Bluetooth: hci68: Opcode 0x0c03 failed: -110 [ 153.859300][ T7362] Bluetooth: hci67: Opcode 0x0c03 failed: -110 [ 154.809251][ T7428] netlink: 21516 bytes leftover after parsing attributes in process `syz.0.311'. [ 155.112379][ T7432] syz.2.313 uses obsolete (PF_INET,SOCK_PACKET) [ 155.209636][ T7440] block nbd0: Unsupported socket: should be TCP or UNIX. [ 155.783942][ T7449] block2mtd: illegal erase size [ 156.731828][ T7472] zswap: compressor not available [ 158.581955][ T7513] blktrace: Concurrent blktraces are not allowed on loop2 [ 159.560297][ T7553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 159.945359][ T7564] ================================================================== [ 159.945382][ T7564] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 159.945413][ T7564] Write of size 8 at addr ffffc900047d9000 by task syz.0.339/7564 [ 159.945425][ T7564] [ 159.945435][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.0.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.945457][ T7564] Tainted: [L]=SOFTLOCKUP [ 159.945465][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.945474][ T7564] Call Trace: [ 159.945479][ T7564] [ 159.945485][ T7564] dump_stack_lvl+0x100/0x190 [ 159.945508][ T7564] print_report+0x156/0x4c9 [ 159.945528][ T7564] ? _raw_spin_lock_irqsave+0x52/0x60 [ 159.945554][ T7564] ? sys_imageblit+0x19fb/0x1d60 [ 159.945576][ T7564] kasan_report+0xdf/0x1e0 [ 159.945592][ T7564] ? sys_imageblit+0x19fb/0x1d60 [ 159.945622][ T7564] sys_imageblit+0x19fb/0x1d60 [ 159.945647][ T7564] ? __pfx_sys_imageblit+0x10/0x10 [ 159.945672][ T7564] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 159.945691][ T7564] soft_cursor+0x524/0xa10 [ 159.945712][ T7564] ? fb_get_color_depth+0x120/0x250 [ 159.945730][ T7564] bit_cursor+0xe58/0x16f0 [ 159.945750][ T7564] ? __pfx_bit_cursor+0x10/0x10 [ 159.945768][ T7564] ? trace_sched_exit_tp+0x13a/0x180 [ 159.945789][ T7564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.945805][ T7564] ? get_color+0x1da/0x450 [ 159.945820][ T7564] ? __pfx_bit_cursor+0x10/0x10 [ 159.945837][ T7564] fbcon_cursor+0x43c/0x5e0 [ 159.945854][ T7564] ? gcd+0x9a/0x270 [ 159.945868][ T7564] fbcon_scroll+0x21f/0x650 [ 159.945885][ T7564] con_scroll+0x464/0x690 [ 159.945908][ T7564] lf+0x26e/0x2c0 [ 159.945927][ T7564] ? __pfx_lf+0x10/0x10 [ 159.945949][ T7564] do_con_write+0xce0/0x8540 [ 159.945968][ T7564] ? __pfx_do_con_write+0x10/0x10 [ 159.945983][ T7564] ? n_tty_write+0x64b/0x12d0 [ 159.946001][ T7564] con_write+0x23/0xb0 [ 159.946014][ T7564] n_tty_write+0x44f/0x12d0 [ 159.946034][ T7564] ? __pfx_n_tty_write+0x10/0x10 [ 159.946058][ T7564] ? __pfx_woken_wake_function+0x10/0x10 [ 159.946082][ T7564] ? __pfx___might_resched+0x10/0x10 [ 159.946105][ T7564] ? __pfx_n_tty_write+0x10/0x10 [ 159.946121][ T7564] file_tty_write.isra.0+0x4d2/0x890 [ 159.946147][ T7564] redirected_tty_write+0xd4/0x120 [ 159.946170][ T7564] vfs_write+0x6ac/0x1070 [ 159.946184][ T7564] ? __pfx_redirected_tty_write+0x10/0x10 [ 159.946208][ T7564] ? __pfx_vfs_write+0x10/0x10 [ 159.946221][ T7564] ? find_held_lock+0x2b/0x80 [ 159.946241][ T7564] ksys_write+0x12a/0x250 [ 159.946254][ T7564] ? __pfx_ksys_write+0x10/0x10 [ 159.946271][ T7564] do_syscall_64+0x106/0xf80 [ 159.946286][ T7564] ? clear_bhb_loop+0x40/0x90 [ 159.946302][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.946317][ T7564] RIP: 0033:0x7f31ae99c819 [ 159.946330][ T7564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.946344][ T7564] RSP: 002b:00007f31af89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.946358][ T7564] RAX: ffffffffffffffda RBX: 00007f31aec15fa0 RCX: 00007f31ae99c819 [ 159.946368][ T7564] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 159.946377][ T7564] RBP: 00007f31aea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 159.946386][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.946394][ T7564] R13: 00007f31aec16038 R14: 00007f31aec15fa0 R15: 00007ffeb830c098 [ 159.946408][ T7564] [ 159.946413][ T7564] [ 159.946417][ T7564] The buggy address belongs to a vmalloc virtual mapping [ 159.946427][ T7564] Memory state around the buggy address: [ 159.946435][ T7564] ffffc900047d8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.946449][ T7564] ffffc900047d8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.946460][ T7564] >ffffc900047d9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.946467][ T7564] ^ [ 159.946475][ T7564] ffffc900047d9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.946485][ T7564] ffffc900047d9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 159.946492][ T7564] ================================================================== [ 159.946518][ T7564] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.946529][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.0.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.946549][ T7564] Tainted: [L]=SOFTLOCKUP [ 159.946555][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.946563][ T7564] Call Trace: [ 159.946567][ T7564] [ 159.946573][ T7564] dump_stack_lvl+0x100/0x190 [ 159.946594][ T7564] vpanic+0x552/0x970 [ 159.946615][ T7564] ? __pfx_vpanic+0x10/0x10 [ 159.946630][ T7564] ? mark_held_locks+0x40/0x70 [ 159.946649][ T7564] ? sys_imageblit+0x19fb/0x1d60 [ 159.946671][ T7564] panic+0xd1/0xe0 [ 159.946684][ T7564] ? __pfx_panic+0x10/0x10 [ 159.946701][ T7564] check_panic_on_warn.cold+0x19/0x34 [ 159.946717][ T7564] end_report.part.0+0x3a/0x90 [ 159.946736][ T7564] kasan_report.cold+0xe/0x18 [ 159.946769][ T7564] ? sys_imageblit+0x19fb/0x1d60 [ 159.946810][ T7564] sys_imageblit+0x19fb/0x1d60 [ 159.946855][ T7564] ? __pfx_sys_imageblit+0x10/0x10 [ 159.946904][ T7564] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 159.946936][ T7564] soft_cursor+0x524/0xa10 [ 159.946973][ T7564] ? fb_get_color_depth+0x120/0x250 [ 159.947007][ T7564] bit_cursor+0xe58/0x16f0 [ 159.947045][ T7564] ? __pfx_bit_cursor+0x10/0x10 [ 159.947079][ T7564] ? trace_sched_exit_tp+0x13a/0x180 [ 159.947112][ T7564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.947140][ T7564] ? get_color+0x1da/0x450 [ 159.947159][ T7564] ? __pfx_bit_cursor+0x10/0x10 [ 159.947177][ T7564] fbcon_cursor+0x43c/0x5e0 [ 159.947193][ T7564] ? gcd+0x9a/0x270 [ 159.947207][ T7564] fbcon_scroll+0x21f/0x650 [ 159.947225][ T7564] con_scroll+0x464/0x690 [ 159.947248][ T7564] lf+0x26e/0x2c0 [ 159.947267][ T7564] ? __pfx_lf+0x10/0x10 [ 159.947290][ T7564] do_con_write+0xce0/0x8540 [ 159.947309][ T7564] ? __pfx_do_con_write+0x10/0x10 [ 159.947325][ T7564] ? n_tty_write+0x64b/0x12d0 [ 159.947343][ T7564] con_write+0x23/0xb0 [ 159.947359][ T7564] n_tty_write+0x44f/0x12d0 [ 159.947379][ T7564] ? __pfx_n_tty_write+0x10/0x10 [ 159.947397][ T7564] ? __pfx_woken_wake_function+0x10/0x10 [ 159.947421][ T7564] ? __pfx___might_resched+0x10/0x10 [ 159.947443][ T7564] ? __pfx_n_tty_write+0x10/0x10 [ 159.947460][ T7564] file_tty_write.isra.0+0x4d2/0x890 [ 159.947486][ T7564] redirected_tty_write+0xd4/0x120 [ 159.947510][ T7564] vfs_write+0x6ac/0x1070 [ 159.947524][ T7564] ? __pfx_redirected_tty_write+0x10/0x10 [ 159.947549][ T7564] ? __pfx_vfs_write+0x10/0x10 [ 159.947562][ T7564] ? find_held_lock+0x2b/0x80 [ 159.947582][ T7564] ksys_write+0x12a/0x250 [ 159.947595][ T7564] ? __pfx_ksys_write+0x10/0x10 [ 159.947618][ T7564] do_syscall_64+0x106/0xf80 [ 159.947633][ T7564] ? clear_bhb_loop+0x40/0x90 [ 159.947650][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.947665][ T7564] RIP: 0033:0x7f31ae99c819 [ 159.947677][ T7564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.947691][ T7564] RSP: 002b:00007f31af89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.947706][ T7564] RAX: ffffffffffffffda RBX: 00007f31aec15fa0 RCX: 00007f31ae99c819 [ 159.947716][ T7564] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 159.947725][ T7564] RBP: 00007f31aea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 159.947734][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.947742][ T7564] R13: 00007f31aec16038 R14: 00007f31aec15fa0 R15: 00007ffeb830c098 [ 159.947757][ T7564] [ 159.948487][ T7564] Kernel Offset: disabled