last executing test programs: 10.982464741s ago: executing program 2 (id=431): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xffffffffffffffff, 0x100000000000062) mmap$auto(0x9, 0x3, 0xdf, 0xeb1, 0x403, 0x200008000) r0 = socket(0x1d, 0x3, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, r1, 0x8003) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) ioctl$auto(r1, 0x4, r0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cb5b"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x4, 0x0, 0x0, 0x1007}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r3, &(0x7f0000000240)='!', 0x1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x400, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c05, 0xfffffffffffffffd) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x101200, 0x0) signalfd4$auto(r0, &(0x7f0000000100)={0x9}, 0x1, 0x66b) r5 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7fffffff) 9.26232415s ago: executing program 2 (id=439): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x14) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socket(0x2, 0x2, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x15, 0x5, 0x0) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x100) socket(0x2, 0x80002, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) socket(0x10, 0x800, 0x4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r1, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x40050000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x2008986}, 0x4001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x7fff, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 7.081651924s ago: executing program 2 (id=447): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000340)={{0x0, 0x0, 0xffffffffffffffff, 0x2, 0xffffffc0, 0x10, 0x8}, 0x81, 0x6, 0x1, 0x5, @raw=0x1, @raw=0x3, 0x6, 0x0, &(0x7f0000000140)="2b1fe00c025f489f47386a4f86834cb7b58f0e9a237dc8c8f49e3fc0e8db05d4025f50d78eacac4a5a42", &(0x7f0000000180)="64926552581bb2d1be624b13b9d394b03d56a76d2ebcd1f1342549b9fdd546d806950f2ec2eceff25aade622eed1e1ce2cf5bffc2f0cef53b987a0f56c2761b87825568f4ec15769bd87af6c4137dc9f54f9d830c77a17d7044e5b153f692821bebabf7378c50ad619071e25f3a2c313011a0a39a254ba4aabc5be0000b452b7e7825833b49edd79a280298bcedf9c5f26d2c9d43ab09415c1b140de12e4716e0459cb61704020d6e9a7889e000000000000"}) lstat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={0x100000001, 0x80000001, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x6e7, 0x1, 0x4431, 0xa4b0, 0x7, 0x4, 0x7f, 0x80}) fstat$auto(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0xfff, 0x5, 0x0, r0, r1, 0x0, 0x3, 0x9, 0x7ff, 0xd, 0x6, 0x9, 0x8, 0x0, 0x9}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) get_mempolicy$auto(0x0, 0x0, 0x2000000000000002, 0x82, 0x10001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x801, 0x100) setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x4, 0x6, 0xdb, 0xebb, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxb\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) 5.521015258s ago: executing program 1 (id=450): syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r0, &(0x7f00000004c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\x04\x00\x00\x00\x00\x00\x00\x00d\x03\rF\xec\xb8\xa8\xb3\xea\x18\xc2\xcdy\x00\x00wxa\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfa\x02\xd8>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\x06\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xf3K\xc9/\xc8Z}\x11=\x17\xd0:\x16\xd0\xd4\xcasY\xc3\xbb/G\x82\b\xa6\x92]\xe7\x89\r\xfa\xcf\x8f\xf2\xd6+&\xe5\xa5N\xfa\\\x14gD3\xa8oI>\x8f\x93m\xc2\x8d\x87[\xc3s\x92\xec\\-2\r_w\xe4\f\xbe\x84\x12\xc4v\xcf\v!=\xf1\x15\x87\xabDT@\x90f', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0x9, 0xb, 0x6}, 0x0) socket(0x1f, 0x5, 0x70) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xcafed516128cba14, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x88, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) 5.36297373s ago: executing program 3 (id=452): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x28003, 0x0) read$auto_mISDN_fops_timerdev(r0, &(0x7f00000000c0)=""/245, 0xf5) mmap$auto(0x3, 0x4cc, 0x40df, 0x13, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x6) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x488401, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x11, r3, 0x100040000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x459, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d0, 0x1000f1) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2183, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x541b, 0x38) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_enable\x00', 0x20000, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, &(0x7f0000000040)=""/222, 0xde) 4.886139233s ago: executing program 2 (id=453): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000000)={'vlan1\x00'}) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0xcb00, 0x0) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) getsockopt$auto_SO_MEMINFO(r2, 0x2007, 0x37, &(0x7f0000000180)='-', &(0x7f00000001c0)=0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x76040, 0x0) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r5, 0x0, 0x81, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/023/001\x00', 0x122202, 0x0) mmap$auto(0x8000000000000001, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x4, 0x9, 0x4, &(0x7f0000000200)=0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f00000002c0)}) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 4.703822469s ago: executing program 0 (id=454): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/bonding/bond0\x00', 0x109040, 0x0) ioctl$auto_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)="4b3feaa07a8c4052a8b32781658204290501abb706c027574da2aef1d978b082ba64441bfc35448109c8e4999ce43f26fd19ca00c0f2397e2ecd1b780780432ef4a7244bb0fa5d12030cb6ed6df513b6d18c5233c5bb9797292211376a4e530e5de08abe939b326365f05844809329251383000391e856acaa4f035d4ab72c697c3ddceaba9c7c43d7a8b7ffc91573d76e3fc2f8fe0799c9470814e8caea8f74add1bcf62dda0ee1b4e3eb8d07abe5c19608b70c849b4d5ab374a1264b821569469c35b3f77a43995a7a728c3c20df896507b18345125a428dcfd357abbfb851217cc05a8aa803771f759f093f84d1773cbe74e9ff43cc1235de3feb3fa9f6f46aa8dcdd5a924e3963add9300783dda42a92bd6a21e800256ec3a30b83550ff1ced1cd11b4d005e6cdc59dc181e492612748f64c5acf40ecdd9bce8fa293e40747d0e27f32cdf1412be2d5eb834f46fa3c9845a2ca3777e924805d854af9ef55dc63253faa77bd1821340716923fc422eb3af378052b010e8fb4c2adfcbbc458fb09cc4e8c56a95bb3dd95feac59ea10ffe6f171615bd2321aa2d0e0cfd1279d750de74b73609e9c830348b047b76155b2ef26656df9472d28fba1a314a0ef3cd3dbe5872feda7b51a4be2febdb5d6dc041d99abf09450a994787599a0ad68cd63e40e88720d7865f166e46b6f97623663d42e2f9348ef34ac3077250691bdf5702043c63b970961093f234d632228abe32a7e783e3d86f2bab85406f9c2ab5e2c2c97f9a57fe7aa57b7f523ee6c37e271499c351e48a2ab7358fd2c49903b21d7054c336898ee0fdc9c798a87a68c5cd544b609f3bb2e96fe39988f01a88092392739c02e0b8a209d4b01c3084e22f456881a2c00d1cf0bbad026e08f42c27e872f55f0ad49ad0bd6744e5e923ce2c171c6098d41c5d4d728ce569c7ef088dfb72431a26bbe6dd53fd08f3dd6e387f82ac840ac060bf7c7be943bb3ff9bc5be353daeba009f5dad1d803f21363dc602bfd4df776f869952041ea82cb6e91f5219e10753476cd728524b783fae1384d70d26dc0d8f0bd6c06d064eae55fe0c100720cb5c09a129a31798bd7ed1eb5254fe272dc86289f2bcd5ab656ed0798c6f4818dd76f282d6e16c2c459127d94c1065deafdd0cffc2747a2b0ea1e2a7be585e32a326de21c0c12013613cb11b0878df4cee4b7735aa24ee1c88b8337e9bf704b221119b41f49243d869a012df4daa24f6915aa92f30f8e4405785181740f0c52499cffd05b89cd05892a8c521a3eac77d7bafbfee368ba6a503f0f176442a9253463b5a3206ffbafeb9d9ecc5eac478fdc6fcdae3a891569c56da37c538645c4f08ea23c42318fcc6abcdf2c3bdb0f929b5b3e602aeec61df2e3cddfb95c20b8c226bcd18e24d30991c5586a1f91f380b5268ae1a9ff2ca232c4710d5b1fae4f471506d2da859c3b6b69665b753be002e85395550cf519eb83bd21fc0272630e4af5cb5093e0c08b7a92324a655918ce1c4ce0a432b6b59e2c5e53e90a7aff5746621ea8464b3da5e967d3945dd212d8d61376fcd566cf2973968cd6f11789823122ae38096b463116aecdb5b2a7e21832b604e2233ae4b98df6362bd3e79d6bbef37da90da87b0da6446f250fab13a6259b7189fb12cf4cd84dc3800437aef14b0e448aefd13281f2f8b967dd31a6e485d39f689c80539528ebb816c5723ecb1bdf407640446dd585f5e285ab98fec777c08bcf3cfdde922a63a10b54144e04e1962fd930d8561b03dc078c0bd078815196431a2f00b1b86369a450e80b1436aaebe271cf0dec35a61022b98cedbc225a0785c64f566eefe69b5312b7589fbaee886d9b2feecd2deda7210e5c3e7fa105b1fe34f5c432ab1e4600c43f96f7294340c3ae26b7eb7d12273f8c367b4d6d281f62cc144d1b9290dec7c4555e442f9e96ad999716d04af160a5420c30fa0c5eb75b4d53c6c5fc87f3a6567ca7297fef91de22503a0da9029063daecea4578599fb369c0554b2be7b47edb0a959e3dd8937d8d861d13f560936f7407922c7de60271af2d2ec2fb0d762093175d7cc905af87aeb1c0cdea2f2a09ace177c1a7e0b6724375de88735dd7875684b7eb38646790e748fa0357bca6b5cb39f09c15cfed951331fb42a64a02f37bcea4f5bce51749637a1ab0ad55f226030d3f9af096788a2d0ae477b193498c763fd2a2acb0fc43c7f7df12c99cb5c78eedc6eb2b062cf88889f60cb011ab86da5a7cf741d7b2938c69c8cdc46066b010662317bc4fde327dad535a1e3193249aabd4ca84822ee23d41a078770c073a3d0035512c7323ebba8ea1026408235ca7c46f4f34f22a17ef3e1452409eca3e1bbf857535ccd04610e905c82a0756896e45ec318bea783809a4fe0b3493bb58ccad2d6e64415f8052e44536978bfd7a509b91146da0843a7b0a735fd999cb2be33b0965af7f1a91bad9968a4bd06555ed848ed380ab5e5f7febf0dc2eb7bcfc9701a85e00c3d5f19bfa1836eba57036c9f2e8e1d724046884e4647d35aef37ad0ad65998b80847fe5e3ddafe9890e18fb853bfaa6dfe6eeca6168c9fdb775df380f2eaa1a7d3ccb70c5d6614d3d4dc11ba33bcbdcc135f63960d001009c293782aad30e48d81accb29d1b81313e14c7982b8a59c2a8325ff17b9989002e544cb1785807149c07e53193b0905f126f29f1959fe03fb4d0cf1b994bdee01b2921b8d6440044f6f05f1db360bf60969f8e7da2b6aeb886807e7cc8d482ea4146e2bfe99349599b4d444c46c090ac136b7fae1ae14d0cfafee91769c49037f8213f7681859d7324fbd19e41d06fe7cd4021a88a648955315d4cf1e4d74f8cec443042c7ca073d106eb82fc5372cb3e32698072c9fd62694416377a91e0da78f04f44e6c2f56c7e9a5a395a3b76f8abbcf96922e2a3eaf2b182331a6a1b7df1382bb0a6356d3eb6d422a64a8e9dc17d54edc53efea670e820e14046ac93e2df3f318fb0c4f418bca56493824a3865b038f950637908ff350217e46dd4db8e7235427c4c7b67af03b225f5ae5e34b1c59baca8c842b04b810dfdfed00a68a3d14d9fe17b880baf66cad694911960be09b91f38c35cd85d7f79a7cc8d671352fc746aff4a0ca72fe96b8fe1bc022e2b47d75d18e84a417db888d7a95fcbf47aca34da87fe37c1db030e6b967c86c38985b54d903d5c0ca8f9d3ceb0fa294110ea20b6bd13e0f9a4625776e2607bd0156e365a2862f0955e1a558686d2dd06bb07f3bf345249b042776249457bcdfa59994f9658fdf808cf75c1420be0903810945e7a2d19b83d9adb9ccc30cd820fd884469704f9936d77f39ccb21655750893d4d1d5de0c3dfb3ae4739a0e1ca1b4e3ae3acd0be3fe26759032db3daca1e9255e7e50427bd11c1077d00752148d3741f54c4fad00c25d4ad729fcb0b3afe1028228e2c9ab2e4571e4dc40a5b371f3c78ae5e59143746d7c2c52d6ca1912a69809c324ae5f34065de2c45d09d467a263349ededb7f0a8d1b20e6ba79b549231118ca3759d69bc8b3d37dcf1e469d1e5a0bcd3f3e1fc3bbc290f00252b3974c43c18d1daf47d615c18ffc4a9e6061f4a79e30790e97dcc820c6a3e426fa8aa7529dc6259c197862f12ee994af3dbe7c8f2beeda1e2661980f266f3bfe2c5d07adcad47fe7156cf3b1f32da2628e78fb5e4967903d3614d91b0af6beb7e417bdd9dc74bc38199073f7ddf1ec874d7228ebca6cd9027dd2649f7c47fb332c2a4933e89279293b4ac6001b43c88ee50c2c94f4e5007e7caa804728ab01be03cc6c4ad4a056b303d4adba8cf18e959a9fb7b6516e8cc2b4023cd77008e0ab7ee1afe7ba93e0f1e0950027d2659b0b6daf6daa27aec96c3eef27667f511b3a579d4ed5b75c539681f9fac84d7031906cf0658cdbd346cb84eb43e983b35adfb4d0ca3323f9d4e7cecaca187ffa4913f8cf87d7e5b509437ccdbe1d6bfcb5210fa581cbee4e3519d90adb5ed9c4cfb449ed4f24d87f54aa303143fb8ea98f916e756b1fdcc46ecd8a4421c8f5efd6f46a54f56302a3e845b7effc90eede3d55069f77ad59b548ce3cd05b0e92692cb674e57e914f7efadb416f821940466f0a57b9329817bda1fd9d7209eab410afb812c1c3ee3d5e2258a9c84212143bf1c1926605728ca7c6ac0246583a13fba7e9eef154a0b444ffffe9eb53e7773f17e41a93239c88273c8900bf3d115b1a170d5d23c54e12779fc4e0070a905abda337bd46c4cc2877f1454d5aff9f4686b32fc78edf342207095468df34c1e24a20f5404e02f7b5beacf1e9da5d28b5c4591e41b8984519199b286c2c46e66b46b462369f5781ab1a636877832b90d1c9069988b208c65abd19b4145625fc35944e74fd7d0e57ef0fd93b35f8e527794db7d62e7ccf76ed0c028e813606b2c8f8329a9ba6a8b6e01053202bddb17c9d396c9dc70b4715edd2b3e0aaf4f121a2769027411c380c67650b1453b460b102e4e59cc8c4386e86f1dbd86f25813049f00ecc052a6f9ec2ad3537b59d7a354fc6ae803a9db45eda1cd4fcc0eb515330c2b38bf19cdb2125608d09906dd331e953c66556437eee095129ba6b754eb959465d3337a657bde09b90cb1fb60715d4234c8833d9ebb9a138f66defcda2283a5834b6fc23c9b3e488ca0d390699c1c360efbb94f80454563281510416a1dd21a67fc80ff19052d8fa0b7bbd6c54295c06522201a4498f30748692479ee9aaf1ecf35e36d797c012be53abae1f2e737c7734ab756309da2b35cb5e1689d268eac41d7ca6f8bfe370c1f3c1595b4e76ad021c2b5a138e9e7bf953cffdd9eb1d79525a7c3358d7255412fc8cfb7653daf6623aea148031108bcc1f4b45a7afef5a8276440223e40522f5bf562c80fe771010f469110a8d7232aae2fd17b23e59037d2bb51fb24b1e0422eb11dd2be9e3cc6d892871703e1aa0204bce7912771378485e1e2e98db96abbb5ec73c655002c9f8fe6ff50b94850c02e43a8351d82b51c5e4eeee494c785177e4f8a44807b623e23213b840d47df8d478a3e89cfe1100eb44fa5eb8949c8b92cb921041280ce748b3dcebd53fb2ca78cefb82b7fcaed6ff3e0f68c66061f721b9c3fd473e3021b51cbadd161bb9d71c02bc7ad2e100bd9d7c74e9785abf98d827b52873b2983d33e26f254f3dd90d0bea6ffd9031b9cd516442bab1a539a8df51db43297abcd67febe32e4c1f21e27dc700e31172896f34d7285712d82010550755442adf192d1268a4c0d19ad1112574409c2333c77f42bb801fc9b17d8285db1ecad93ecb82601ae2b066c828e0c8138616ce4d8c6a6c84ca34b97ca58fbb349f82e9c389f86de516e266f762987783bdfcbd95a9f2d8b5039a64aa5722413aa9d7fd9717e1f0462f7ca2a826953664a5e4059b3888d76e33b08371f9de75ee0911bbded774c740ab3ddda69dfdb54d27075efa8143447beb734393105e6b43dea189cdd0c2237771e9548011aafd8f9981af7f7888567c08eea6c9f04291294bc314a4a4719d59017cfddcb0e21a293bdbda40e44ead0be250c59216d3088797cc51c99db02f7375f6f430d5ae3f71a97a3cc47ca9d9ce12bac60c21d0361975201184ef00a3d04c9b60ed0355dba32def2693b9ed4a8f0f9d80c51ba314f6cd9beaa9d0d99b6e0593ae582d66d655c8e8a5e6a81decec4e3b878c2c4bdd550f0c7aa943ee9546a95a65c9f861aef68a4732c92e1c7ea1f74ad67c2a6847ddb04efb34b5caf741d60e17d6ecf2154e526c065") mmap$auto(0x0, 0x2020009, 0xcbe, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7ffffffffffffeff, 0xa) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages$auto(r0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x3) socket(0xa, 0x3, 0x5) semctl$auto(0x9, 0x20000001, 0x13, 0x4) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x4908c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) 4.091506151s ago: executing program 3 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8b8, 0x7, 0x2, 0x403) mmap$auto(0x0, 0x8000000000000001, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) pipe2$auto(0x0, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x43403d05, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af13, r3) msgctl$auto_MSG_STAT(0x5665, 0xb, &(0x7f0000000100)={{0x93e, 0xee01, 0xee00, 0x7f, 0x9, 0x2, 0xd}, &(0x7f0000000040)=0x8, &(0x7f00000000c0)=0x14, 0x2, 0x3, 0x6, 0x400, 0x4, 0x800, 0x7, 0x6, @raw=0x400}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8, 0xf88, 0x5, 0x7) write$auto(r5, &(0x7f0000000040)='P\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001040)={0x1658, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1482, 0x1, 0x0, 0x1, [@nested={0xcb, 0x53, 0x0, 0x1, [@nested={0x4, 0x65}, @generic="b3e446b5dc85b8996c5f1067033f7c7ce8d0ed9a92779bd98c578af49e7f2880637f19b316f606f461a71a95c3cfab8e340044737f09c3b1c4db84adaa0350e86e399bb68ae4a24e8d226a09c6f0af43fd75c8da2cea09a01dd3f91e8106a0627a8363e2b349dda7cef9165dd0afb137d37b910dfe08f7c9168157af179492bc6c9247fb79359e4299d3ed37230014a7af3f90445b90632629b3dcc326b66f4379a4275a73bff4ad0e2d9b296b98a7cb70308de1ce0740", @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x4c}]}, @nested={0x1080, 0xf2, 0x0, 0x1, [@generic="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", @nested={0x4, 0x35}, @generic="e4f04b7c76733ebcba530d19de57fb13247bd4cc4d67b91677403e9233663e84c86d474dd27d2830b88f40e70d3c381d77471f290d5f32923767314bad2a570a94a9a7fce7bfdb49c74a913b7fcbc91efd48134f80278eda00767c0b94ea52c3f115e4b1368f072b9ff4a280", @typed={0x8, 0xc1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @nested={0x4, 0x8a}]}, @generic="ac07f59ead0aba586aef1ee49be4709bfc27881c741b6e70e106018a56a4490c6fec968f62f3d6c8eb7edf7b5900de6345c688173ed01045c213edb652a4bc42c1d282d0b06e21028c48560726b42c7cf93d2437c8ff79661e0d56186f48c17cc5b19d757d815ae08e9e0b0a7c808efee1bda6bb0fefd2239ad4d4b3c786d47b88940c024ac48dd95b6ff74ead19d33dc0bc00a49ed14567c8201c92c896c701d511c68cddf4cbbea055ba1bc4fec96bfe06636f6a97c0cfc4595fc98fab765125dbac6d590636a049cdf526a8a2fad383576bf8c03c79b08ca879e20238028ed95694ff3cde83092001172cfcd9b436205ba7e57dda33", @nested={0x18, 0x91, 0x0, 0x1, [@typed={0x11, 0x47, 0x0, 0x0, @str='ovs_ct_limit\x00'}]}, @nested={0x16b, 0x14a, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x40}, @generic="5d54e36267b192edf1e0c2c554d1fe76b9e48a4e3c9d4183a4d97d621353fec433f148881950981af712d3a90a97089866a18ca2a7363e97f89e5e5fe54bddb2ad7ee88494c21434b625c24fc7c488329bea3dfbd5f0c8609b1bcab993f759a4322c723f7f672cb9cd7fea86ccf54cc1787b6ff696d3ec478533a47fde6d06d07ccc2b254f56aac2803d75360b3de724ac0cc080ec7f", @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x121}, @typed={0x4, 0x11e}, @typed={0x68, 0xf6, 0x0, 0x0, @binary="b0a5ad56caf0deb9e96db5d670a4da511f0c5fcfbfec94286bfa3e575b3ae7244f548a78020ccaed0151f7cf890a1296d148499925d066c10c756a3570de880181e45b9d18cbcac118c2ebc376ab20860a1c501eaa5f9b868457b100097e8c5b38a7feeb"}, @generic="260b2307d68293a4328ce2e1040e4af574add188766a6763101b1412196a89d8de035942e0ad51e88c436d1ddedd9d3c64", @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x8, 0x28, 0x0, 0x0, @uid=r4}, @typed={0x11, 0x3e, 0x0, 0x0, @str='ovs_ct_limit\x00'}, @generic="a444955134ae0d133298e8754672d906861cb35be710a443818480a4b8d22ab850b712e9c853368fad1a11bc3e6bbf7b169d4cd8eb71b0c14cfb5ee61aa085dbae76c38f91291859808cce634b64b017509b626d0b0b256cd9d219f5fd0cf4d5debf5ad754bc3ecd2fe9ef2a0fe7479a41f1f03a28dbb80ebdd20b2da086f3b9f383bfb49b24edc88141b28b473ad36761dea0f906980614e1ef8b"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c0, 0x1, 0x0, 0x1, [@typed={0x1c, 0x59, 0x0, 0x0, @str='&$&--}\xf7#)\x97-!\\/@p-{\xaa#]-:\x00'}, @nested={0xc, 0x98, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @fd=r5}]}, @nested={0x8, 0xde, 0x0, 0x1, [@nested={0x4, 0x47}]}, @nested={0x17f, 0x20, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="6a02dc3243ef8627fac4fd99bfb85f7684d43cf3021a01f5a521939d1881a51bd73450c8663ba9f79f84cd77ef567712206295d3e99726559d9d8290421aa918e02996a04f1ed4f33d7c3288499db9b96ea979fecb7233e3f1b93ac96cc017bf6554bc06d1688a47311a471998d3e3845867f4037af950ac658b050cf6d7317130653ff4404d13184accea0fc6b3028a11d249d8942e17c268f2cf558497d387a45b92cfb1e08e5274cb2971688b571097336b9e4a5cb740bba09ed58c0bedc7dde2e8718969438dec7ec19a4a488cf0aa0c58c0998c94a1c1c978045e0f44e5975b4294130c37", @nested={0x4, 0x115}, @nested={0x4, 0x82}, @nested={0x4, 0x129}, @nested={0x4, 0x4d}, @generic="928bde09cf5f966ec692cb13f574d1261fc3c3f6957ee14bd0675391675f46f0c8660876eac3b13220911b6ae8d858ecc57f48cdf1ffc5826b0c9c51b009dd9f273c4453544ebc72cc72d82370a80a4f5de28d948e127737cec921b3e316da348eaa3c90040bdb37055ee2c3ccb2371761023ddfcc98c081e1d2ec957e0dfcdd"]}, @nested={0xc, 0x29, 0x0, 0x1, [@nested={0x4, 0x134}, @nested={0x4, 0x64}]}]}]}, 0x1658}, 0x1, 0x0, 0x0, 0x2000800}, 0x20008801) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000001000)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040c4}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) (async) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8b8, 0x7, 0x2, 0x403) (async) mmap$auto(0x0, 0x8000000000000001, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x5, 0x0) (async) pipe2$auto(0x0, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) (async) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x43403d05, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) (async) ioctl$auto(r3, 0x4008af13, r3) (async) msgctl$auto_MSG_STAT(0x5665, 0xb, &(0x7f0000000100)={{0x93e, 0xee01, 0xee00, 0x7f, 0x9, 0x2, 0xd}, &(0x7f0000000040)=0x8, &(0x7f00000000c0)=0x14, 0x2, 0x3, 0x6, 0x400, 0x4, 0x800, 0x7, 0x6, @raw=0x400}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) (async) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8, 0xf88, 0x5, 0x7) (async) write$auto(r5, &(0x7f0000000040)='P\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001040)={0x1658, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1482, 0x1, 0x0, 0x1, [@nested={0xcb, 0x53, 0x0, 0x1, [@nested={0x4, 0x65}, @generic="b3e446b5dc85b8996c5f1067033f7c7ce8d0ed9a92779bd98c578af49e7f2880637f19b316f606f461a71a95c3cfab8e340044737f09c3b1c4db84adaa0350e86e399bb68ae4a24e8d226a09c6f0af43fd75c8da2cea09a01dd3f91e8106a0627a8363e2b349dda7cef9165dd0afb137d37b910dfe08f7c9168157af179492bc6c9247fb79359e4299d3ed37230014a7af3f90445b90632629b3dcc326b66f4379a4275a73bff4ad0e2d9b296b98a7cb70308de1ce0740", @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x4c}]}, @nested={0x1080, 0xf2, 0x0, 0x1, [@generic="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", @nested={0x4, 0x35}, @generic="e4f04b7c76733ebcba530d19de57fb13247bd4cc4d67b91677403e9233663e84c86d474dd27d2830b88f40e70d3c381d77471f290d5f32923767314bad2a570a94a9a7fce7bfdb49c74a913b7fcbc91efd48134f80278eda00767c0b94ea52c3f115e4b1368f072b9ff4a280", @typed={0x8, 0xc1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @nested={0x4, 0x8a}]}, @generic="ac07f59ead0aba586aef1ee49be4709bfc27881c741b6e70e106018a56a4490c6fec968f62f3d6c8eb7edf7b5900de6345c688173ed01045c213edb652a4bc42c1d282d0b06e21028c48560726b42c7cf93d2437c8ff79661e0d56186f48c17cc5b19d757d815ae08e9e0b0a7c808efee1bda6bb0fefd2239ad4d4b3c786d47b88940c024ac48dd95b6ff74ead19d33dc0bc00a49ed14567c8201c92c896c701d511c68cddf4cbbea055ba1bc4fec96bfe06636f6a97c0cfc4595fc98fab765125dbac6d590636a049cdf526a8a2fad383576bf8c03c79b08ca879e20238028ed95694ff3cde83092001172cfcd9b436205ba7e57dda33", @nested={0x18, 0x91, 0x0, 0x1, [@typed={0x11, 0x47, 0x0, 0x0, @str='ovs_ct_limit\x00'}]}, @nested={0x16b, 0x14a, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x40}, @generic="5d54e36267b192edf1e0c2c554d1fe76b9e48a4e3c9d4183a4d97d621353fec433f148881950981af712d3a90a97089866a18ca2a7363e97f89e5e5fe54bddb2ad7ee88494c21434b625c24fc7c488329bea3dfbd5f0c8609b1bcab993f759a4322c723f7f672cb9cd7fea86ccf54cc1787b6ff696d3ec478533a47fde6d06d07ccc2b254f56aac2803d75360b3de724ac0cc080ec7f", @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x121}, @typed={0x4, 0x11e}, @typed={0x68, 0xf6, 0x0, 0x0, @binary="b0a5ad56caf0deb9e96db5d670a4da511f0c5fcfbfec94286bfa3e575b3ae7244f548a78020ccaed0151f7cf890a1296d148499925d066c10c756a3570de880181e45b9d18cbcac118c2ebc376ab20860a1c501eaa5f9b868457b100097e8c5b38a7feeb"}, @generic="260b2307d68293a4328ce2e1040e4af574add188766a6763101b1412196a89d8de035942e0ad51e88c436d1ddedd9d3c64", @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x8, 0x28, 0x0, 0x0, @uid=r4}, @typed={0x11, 0x3e, 0x0, 0x0, @str='ovs_ct_limit\x00'}, @generic="a444955134ae0d133298e8754672d906861cb35be710a443818480a4b8d22ab850b712e9c853368fad1a11bc3e6bbf7b169d4cd8eb71b0c14cfb5ee61aa085dbae76c38f91291859808cce634b64b017509b626d0b0b256cd9d219f5fd0cf4d5debf5ad754bc3ecd2fe9ef2a0fe7479a41f1f03a28dbb80ebdd20b2da086f3b9f383bfb49b24edc88141b28b473ad36761dea0f906980614e1ef8b"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c0, 0x1, 0x0, 0x1, [@typed={0x1c, 0x59, 0x0, 0x0, @str='&$&--}\xf7#)\x97-!\\/@p-{\xaa#]-:\x00'}, @nested={0xc, 0x98, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @fd=r5}]}, @nested={0x8, 0xde, 0x0, 0x1, [@nested={0x4, 0x47}]}, @nested={0x17f, 0x20, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="6a02dc3243ef8627fac4fd99bfb85f7684d43cf3021a01f5a521939d1881a51bd73450c8663ba9f79f84cd77ef567712206295d3e99726559d9d8290421aa918e02996a04f1ed4f33d7c3288499db9b96ea979fecb7233e3f1b93ac96cc017bf6554bc06d1688a47311a471998d3e3845867f4037af950ac658b050cf6d7317130653ff4404d13184accea0fc6b3028a11d249d8942e17c268f2cf558497d387a45b92cfb1e08e5274cb2971688b571097336b9e4a5cb740bba09ed58c0bedc7dde2e8718969438dec7ec19a4a488cf0aa0c58c0998c94a1c1c978045e0f44e5975b4294130c37", @nested={0x4, 0x115}, @nested={0x4, 0x82}, @nested={0x4, 0x129}, @nested={0x4, 0x4d}, @generic="928bde09cf5f966ec692cb13f574d1261fc3c3f6957ee14bd0675391675f46f0c8660876eac3b13220911b6ae8d858ecc57f48cdf1ffc5826b0c9c51b009dd9f273c4453544ebc72cc72d82370a80a4f5de28d948e127737cec921b3e316da348eaa3c90040bdb37055ee2c3ccb2371761023ddfcc98c081e1d2ec957e0dfcdd"]}, @nested={0xc, 0x29, 0x0, 0x1, [@nested={0x4, 0x134}, @nested={0x4, 0x64}]}]}]}, 0x1658}, 0x1, 0x0, 0x0, 0x2000800}, 0x20008801) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000001000)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040c4}, 0xc000) (async) 4.089131962s ago: executing program 0 (id=456): mmap$auto(0x0, 0x4, 0x4000000000db, 0x100000000040eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/13/actions\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/73, 0x49) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000004, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) 3.581494622s ago: executing program 3 (id=457): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x40902, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='7\x00\\\xa8\x04zNb/|\x03\xcb\x9c\xd12S\xd5\x16\xba\x1esY\xd5\xd2\xa0\xaf\xff\xff\xc7m\x8f\xd4\x87\x9e\xb3\x8ex\xdeC\xbam\xa3\x02\xd8\xc5\x1f\xd7\xb77G=\xbcy\x03`\x06\x87\x9bk>\x9c\x1a/\xeae\x0e\x8a\xe1\r\xed\xcb\xec\x8ef\x8d\x9d\xc3%\xafc\x898\xed\n\n@\xcf\xe79\xd0\xf1.\x84W\x7f\xf9\xc0\xbe\xc7\xbc\x8c\x97\x8c\xc0\xc1\xf0\xc1\x11\xed\x99\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\r\xa9\n\xa0m\xf9G\x9eE@\xa9\xbe\xf6\xbb\xb5\x17\x12\xa8\xcah*Wq\x8fVC\xe7W\xd9\x93*$\x9a\"\x84\xfa\xdd\xfdO+\\\xf2_\x8fy\x02\xf4\x81\x9cm\xe8\a\xa9J\xdb@\f!p\xa4>\xd0\x16\xcf\xc9\x06\xf4|\x04\x9f\xecB\xb4\xae\xbai\r\x9c\t\x0e\xb5E5g\xad\x96.\x15\x9e%_\xe1\x98]\xd1\x05\xe9\x05\x83*\x80BZHF\xa2\xb7X\xc8\x1es:\x8dq\xa6\x10\xe0z\xa0\x80[\x18\xd6\xe5A\x99\xa1\x92\xbb\xed\x1d\xa4\xb0\xd7\xe8\xddI\xb8\xe3x\x11\xa9\xfa', 0x1ffffffde) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/version\x00', 0x2501, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/active\x00', 0x800, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f00000002c0)=""/243, 0xf3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRES64=r4, @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x1880) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={0xffffffffffffffff, @new_map_fd, 0x0, @old_prog_fd=r0}, 0xf) mprotect$auto(0x200000000000, 0x806121, 0x8) utime$auto(0x0, &(0x7f0000000000)={0x73fe}) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice$auto(r6, 0x0, 0x3ff, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYRES64=r7], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), 0xffffffffffffffff) r9 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 3.178640702s ago: executing program 1 (id=458): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(r3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(r1, 0x0, 0xd00, 0x2) 2.654591615s ago: executing program 0 (id=459): mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7ffd) mmap$auto(0x0, 0x400029, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) io_uring_setup$auto(0x1000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x23a140, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2a, 0x2, 0xb) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) read$auto_lowpan_control_fops_6lowpan(r2, &(0x7f0000000080)=""/12, 0xc) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r1, 0x5, 0x6) r3 = socket(0xa, 0x1, 0x7) setsockopt$auto(r3, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0x10, 0x5, 0x80000000}]}) 2.593599084s ago: executing program 2 (id=460): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="060031f3", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a000006000700008000000800", @ANYRESHEX, @ANYBLOB="0a0005000180c2000e00000a07300000000000000e00000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) mmap$auto(0x0, 0x7, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@query={@target_ifindex, 0x4, 0xa6ad, 0x7, 0xca4b, @count=0x10, 0x0, 0x4, 0x0, 0x100, 0x2}, 0x122) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0x9, @next_key=0x7, 0x6}, 0x6b) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0) 2.471288477s ago: executing program 3 (id=461): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x27c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_PROFILE={0x12c, 0x1d, 0x0, 0x1, [@ETHTOOL_A_PROFILE_IRQ_MODERATION={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x80000001}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x7f}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x800}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xfffffffb}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0xf}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x7ff}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x5}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x3b2c}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x2}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x4}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x7}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x1}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x1ebe}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xfffffff8}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x4}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x8}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x8}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x5976}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x8}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xfffffff7}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1000}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x9}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0xa}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x2}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xbac7}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x3}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xd}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0xcb36}]}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5fba}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_AGGR_TIME_USECS={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_PROFILE={0xfc, 0x1d, 0x0, 0x1, [@ETHTOOL_A_PROFILE_IRQ_MODERATION={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x6}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x2}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xeae}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x4}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x7fff}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xd}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x3ff}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xe}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x3ff}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x626a}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x7}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x91}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x6}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x8001}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x5}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0xffffff01}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1000}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x5b}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x8000}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x6}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x7f}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xfffffee1}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x400000}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x8}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x1}]}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xf}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfffff800}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) pipe$auto(0x0) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) 2.303642774s ago: executing program 2 (id=462): r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x8000, 0x0) mmap$auto(0x80000, 0x401, 0x2, 0xeb1, r0, 0x8000000080) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto(r1, 0xc0945662, r1) socket(0x2, 0x5, 0x9) madvise$auto(0x1, 0x9, 0xa) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8000, 0x5, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x9, 0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) 2.284567529s ago: executing program 3 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x123042, 0x0) ioctl$auto(r1, 0x921064b1, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) pipe$auto(&(0x7f0000000080)=r2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001c40), 0xffffffffffffffff) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000040)=@iter_create={r0, 0x4}, 0x7c7) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000100)={0x4, 0x2, 0xffffff81, 0x4, 0xa30}) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x7fff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040004) 2.021977321s ago: executing program 1 (id=464): mmap$auto(0x0, 0x40006, 0x22, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10007, 0x0, 0x81, 0x409e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x1, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x6, 0x5}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/ip6gre0/keep_addr_on_down\x00', 0x8fbc0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x40103d0b, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x3, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x5, 0x62, 0x80000001, 0x7, 0x2000000006d3f, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = open(0x0, 0x161340, 0x130) statx$auto(r1, 0x0, 0x1003, 0xb8d, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/numa/demotion_enabled\x00', 0x103802, 0x0) 1.188321633s ago: executing program 1 (id=465): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x525501, 0x0) prctl$auto(0x400, 0x1, 0x0, 0x1, 0x4) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x80, 0x202000a, 0xffffffffffffffff, 0x400000000000eb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x2002, 0x0) mlockall$auto(0x7) r2 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) fcntl$auto(r2, 0x5, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) write$auto(r3, 0x0, 0xa) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4605, 0x0) fcntl$getown(r0, 0x9) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) 1.043660956s ago: executing program 3 (id=466): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000040)="6524b5aac083b05c1173a1174a", 0xd) (async) setsockopt$auto(0x3, 0x5, 0x46, 0x0, 0x2) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) shmdt$auto(0x0) (async) socket(0x7, 0x3, 0x2) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x23, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r6) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00'}) sendmsg$auto_OVS_VPORT_CMD_DEL(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032dbd7000fddbdf2502000000130003002f6465762f736e642f74696d6572000008000800", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="08000f00000008000c0003006970766c616e310008000900ff030000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x810) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) msync$auto(0x0, 0x2000000005, 0x6) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) (async) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram6\x00', 0x2c2003, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x103800, 0x0) (async) ioctl$auto(0x3, 0x80000541b, r6) (async) ioctl$auto_BLKDISCARD(r8, 0x1277, 0x0) close_range$auto(0xffffffffffffffff, r5, 0x3f6a0000) 797.655468ms ago: executing program 0 (id=467): r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x4000, 0x0) mmap$auto(0x20000000003, 0x20006, 0x4000000000de, 0x653d2a1e, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000b4d3df802f2c05a573a188b2ad1ed0b1b961f5733deecb32fe3cea43b249ee42c50df2d3d277668654920201f4e3558df6cd223e942adb036704dfcefe20d07b22", @ANYRES16=r2, @ANYBLOB="010727bd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) setresuid$auto(0x0, 0x7, 0x8080) (async) setfsuid$auto(0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) (async) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async, rerun: 64) ioctl$auto_KVM_CREATE_VM(r4, 0x4080aebf, 0x0) (rerun: 64) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) (async) ioctl$auto_KVM_GET_API_VERSION(r6, 0xae00, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="9f00880012edb926e209aa0a8c61ae065880af010a03b92457224d42fc6a01c2e9657da0a05ff4685e74dce7fb7cdeae194ad9a35660000000001d09eef5584276bb7e2342ff9a43c22ea3a861dbbcb259c8423f2447a67b775c391312fa43d07b2159ae612c970743136c0161900593ccab4d9747bc62c2674a757bdc4975eef99540e705e2ef38cd9268c62b829d274ef5d450fa5335cddbd16edda26efb00c85c4480232c1d85e61fb9049a5e80b07d37c0efb5957ce4d763c9ac0d1f3f372d133a15c16da35a7ebd08001b000a0101000000000400548004000a000800d800", @ANYRES32=r3, @ANYBLOB], 0x24c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44000) 306.959936ms ago: executing program 1 (id=468): r0 = fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) newfstatat$auto(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0xd9b2, 0x9, 0x8, 0xc, 0xffffffffffffffff, 0xee00, 0x0, 0x7f, 0x2000, 0xb, 0x6, 0x0, 0xfffffffffffff287, 0xffffffffaab2abdf, 0x1, 0x1, 0x2}, 0x5) r3 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@token_create={0xffffffff}, 0x19) r4 = setfsgid$auto(0xee01) setresgid$auto(r4, 0x0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000140)={0x6, r4, 0x3, 0x1}) getpgid(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.1/usb2/idProduct\x00', 0x100000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/95, 0x5f) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r1, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = socket(0xa, 0x3, 0x3a) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) ioctl$auto(r6, 0x8916, 0x1) dup2$auto(0x0, 0x3) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_size_kb\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 249.662988ms ago: executing program 0 (id=469): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x4, 0x21, 0x0, 0x10009) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) msgctl$auto_IPC_STAT(0xa, 0x2, &(0x7f0000000180)={{0xc, 0xee01, 0xffffffffffffffff, 0x9, 0xfffff21d, 0x1, 0xfff3}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x8, 0x8, 0x3, 0x1, 0x3, 0x0, 0x6, 0x6, 0x92, @inferred=0xffffffffffffffff, @raw=0x3800}) fsconfig$auto(r0, 0x101, &(0x7f0000000000)='\\{\x00', &(0x7f00000000c0)="307a2cff6a84470f66015dba6393106f410fa479e5ed6baf91f16bdb978a1b", r1) 39.570764ms ago: executing program 1 (id=470): r0 = socket(0x3, 0x4, 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) rseq$auto(&(0x7f0000000580)={0x0, 0x85, 0x9416, 0x1, 0x7, 0x2006, "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"}, 0x6, 0x3, 0xff) (async, rerun: 32) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (rerun: 32) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) (async) getuid() (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000b80), 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) mmap$auto(0x1, 0x9, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) mmap$auto(0xffffffffe, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) socket(0x29, 0x800, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) r5 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) (async) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x7) (async) ioctl$auto(0x3, 0x400454cc, r4) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) (async, rerun: 64) write$auto(r6, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0xfffffffffffff8a9, r5, 0x4, 0x2) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 0s ago: executing program 0 (id=471): madvise$auto(0x0, 0x80000001, 0x8) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x3) (async) setsockopt$auto(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x6) r0 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim6/ports/2/bpf_xdpdrv_accept\x00', 0x2802, 0x0) read$auto_dfs_sched_itmt_fops_itmt(r0, &(0x7f0000000200), 0x0) mmap$auto(0x1000, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = getpid() (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) socket(0x22, 0x2, 0x2) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto(0xffffffffffffffff, 0x0, 0x8002, 0x7ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x123a42, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) (async, rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001080)=""/4076, 0xfec) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) (async) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) (async, rerun: 32) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) pread64$auto(r5, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0x93) (async) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 90.193614][ T5817] cgroup: Unknown subsys name 'net' [ 90.344652][ T5817] cgroup: Unknown subsys name 'cpuset' [ 90.353836][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.252359][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.187711][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.196244][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.197249][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.205370][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.211477][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.219170][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.232443][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.233905][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.240107][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.248227][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.254221][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.262691][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.268501][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.281026][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.283050][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.295947][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.297133][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.304382][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.311514][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.318691][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.849354][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 95.011509][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 95.056971][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 95.084656][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 95.115739][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.123046][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.130424][ T5829] bridge_slave_0: entered allmulticast mode [ 95.138642][ T5829] bridge_slave_0: entered promiscuous mode [ 95.174471][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.181721][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.188858][ T5829] bridge_slave_1: entered allmulticast mode [ 95.196630][ T5829] bridge_slave_1: entered promiscuous mode [ 95.318300][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.356585][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.414935][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.422238][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.429505][ T5831] bridge_slave_0: entered allmulticast mode [ 95.436993][ T5831] bridge_slave_0: entered promiscuous mode [ 95.444241][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.451532][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.458836][ T5830] bridge_slave_0: entered allmulticast mode [ 95.466157][ T5830] bridge_slave_0: entered promiscuous mode [ 95.494286][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.501661][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.508878][ T5831] bridge_slave_1: entered allmulticast mode [ 95.516220][ T5831] bridge_slave_1: entered promiscuous mode [ 95.523371][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.530501][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.537835][ T5830] bridge_slave_1: entered allmulticast mode [ 95.545051][ T5830] bridge_slave_1: entered promiscuous mode [ 95.554072][ T5829] team0: Port device team_slave_0 added [ 95.559827][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.567307][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.574587][ T5828] bridge_slave_0: entered allmulticast mode [ 95.582478][ T5828] bridge_slave_0: entered promiscuous mode [ 95.612733][ T5829] team0: Port device team_slave_1 added [ 95.618531][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.625854][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.633211][ T5828] bridge_slave_1: entered allmulticast mode [ 95.640404][ T5828] bridge_slave_1: entered promiscuous mode [ 95.690092][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.702989][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.736419][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.747657][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.757888][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.765401][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.791709][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.806706][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.843692][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.851415][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.878261][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.892224][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.943541][ T5831] team0: Port device team_slave_0 added [ 95.951835][ T5830] team0: Port device team_slave_0 added [ 95.971831][ T5831] team0: Port device team_slave_1 added [ 95.979232][ T5830] team0: Port device team_slave_1 added [ 95.987429][ T5828] team0: Port device team_slave_0 added [ 96.027368][ T5828] team0: Port device team_slave_1 added [ 96.078946][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.086063][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.112289][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.130596][ T5829] hsr_slave_0: entered promiscuous mode [ 96.137404][ T5829] hsr_slave_1: entered promiscuous mode [ 96.145379][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.152514][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.178970][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.201719][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.208715][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.234831][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.247535][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.254587][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.280631][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.292283][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.299219][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.325251][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.353178][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.360149][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.386922][ T5843] Bluetooth: hci0: command tx timeout [ 96.387049][ T5842] Bluetooth: hci2: command tx timeout [ 96.392837][ T5843] Bluetooth: hci1: command tx timeout [ 96.398281][ T5841] Bluetooth: hci3: command tx timeout [ 96.404634][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.549486][ T5831] hsr_slave_0: entered promiscuous mode [ 96.555935][ T5831] hsr_slave_1: entered promiscuous mode [ 96.562848][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 96.568631][ T5831] Cannot create hsr debugfs directory [ 96.578981][ T5830] hsr_slave_0: entered promiscuous mode [ 96.585364][ T5830] hsr_slave_1: entered promiscuous mode [ 96.591689][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 96.597423][ T5830] Cannot create hsr debugfs directory [ 96.634430][ T5828] hsr_slave_0: entered promiscuous mode [ 96.640882][ T5828] hsr_slave_1: entered promiscuous mode [ 96.647023][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 96.653207][ T5828] Cannot create hsr debugfs directory [ 97.084313][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.097161][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.116600][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.127419][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.165452][ T9] cfg80211: failed to load regulatory.db [ 97.197687][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.216766][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.238376][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.257511][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.331855][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.346842][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.363278][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.378180][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.499409][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.514754][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.527896][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.541229][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.553789][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.616068][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.675623][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.683027][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.712843][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.723241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.730368][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.799277][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.833639][ T1533] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.840975][ T1533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.866927][ T1533] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.874135][ T1533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.887237][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.936828][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.000571][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.007818][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.071312][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.078443][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.119590][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.244354][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.297271][ T1533] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.304552][ T1533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.335761][ T1533] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.343011][ T1533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.358644][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.443446][ T5842] Bluetooth: hci2: command tx timeout [ 98.447242][ T5843] Bluetooth: hci0: command tx timeout [ 98.449207][ T5835] Bluetooth: hci1: command tx timeout [ 98.460068][ T5841] Bluetooth: hci3: command tx timeout [ 98.750379][ T5829] veth0_vlan: entered promiscuous mode [ 98.796273][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.815588][ T5829] veth1_vlan: entered promiscuous mode [ 98.886012][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.958060][ T5829] veth0_macvtap: entered promiscuous mode [ 98.968462][ T5829] veth1_macvtap: entered promiscuous mode [ 98.981098][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.020908][ T5830] veth0_vlan: entered promiscuous mode [ 99.040583][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.069440][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.087557][ T5830] veth1_vlan: entered promiscuous mode [ 99.109885][ T5828] veth0_vlan: entered promiscuous mode [ 99.117581][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.127912][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.144514][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.154442][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.189656][ T5828] veth1_vlan: entered promiscuous mode [ 99.236263][ T5831] veth0_vlan: entered promiscuous mode [ 99.296375][ T5830] veth0_macvtap: entered promiscuous mode [ 99.310544][ T5831] veth1_vlan: entered promiscuous mode [ 99.342463][ T5830] veth1_macvtap: entered promiscuous mode [ 99.377408][ T5828] veth0_macvtap: entered promiscuous mode [ 99.387971][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.409796][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.428835][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.438600][ T5828] veth1_macvtap: entered promiscuous mode [ 99.475540][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.494775][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.504858][ T5831] veth0_macvtap: entered promiscuous mode [ 99.510673][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.523657][ T1094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.550351][ T1094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.568007][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.587213][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.591045][ T5831] veth1_macvtap: entered promiscuous mode [ 99.609543][ T1094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.622505][ T1094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.655471][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.709987][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.733993][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.759532][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.782346][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.795325][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.820332][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.853673][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.863902][ T5921] Zero length message leads to an empty skb [ 99.891862][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.899730][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.919483][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.929748][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.940608][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.970594][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.038798][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.053133][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.061886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.071845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.167674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.257978][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.285330][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.438582][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.459042][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.520843][ T5841] Bluetooth: hci0: command tx timeout [ 100.533100][ T5842] Bluetooth: hci2: command tx timeout [ 100.538872][ T5835] Bluetooth: hci1: command tx timeout [ 100.544467][ T5841] Bluetooth: hci3: command tx timeout [ 100.570938][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.602585][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.686067][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.751070][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.019298][ T5928] FAULT_INJECTION: forcing a failure. [ 101.019298][ T5928] name failslab, interval 1, probability 0, space 0, times 1 [ 101.062561][ T5928] CPU: 1 UID: 0 PID: 5928 Comm: syz.3.5 Not tainted syzkaller #0 PREEMPT(full) [ 101.062603][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.062621][ T5928] Call Trace: [ 101.062632][ T5928] [ 101.062643][ T5928] dump_stack_lvl+0x16c/0x1f0 [ 101.062696][ T5928] should_fail_ex+0x512/0x640 [ 101.062730][ T5928] ? kmem_cache_alloc_noprof+0x62/0x770 [ 101.062773][ T5928] should_failslab+0xc2/0x120 [ 101.062821][ T5928] kmem_cache_alloc_noprof+0x83/0x770 [ 101.062859][ T5928] ? security_file_alloc+0x34/0x2b0 [ 101.062907][ T5928] ? security_file_alloc+0x34/0x2b0 [ 101.062944][ T5928] security_file_alloc+0x34/0x2b0 [ 101.062993][ T5928] init_file+0x93/0x4c0 [ 101.063025][ T5928] alloc_empty_file+0x73/0x1e0 [ 101.063061][ T5928] path_openat+0xde/0x3140 [ 101.063105][ T5928] ? do_syscall_64+0xcd/0xf80 [ 101.063150][ T5928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.063192][ T5928] ? __pfx_path_openat+0x10/0x10 [ 101.063245][ T5928] ? __lock_acquire+0x436/0x2890 [ 101.063279][ T5928] do_filp_open+0x20b/0x470 [ 101.063327][ T5928] ? __pfx_do_filp_open+0x10/0x10 [ 101.063400][ T5928] ? _raw_spin_unlock+0x28/0x50 [ 101.063437][ T5928] ? alloc_fd+0x471/0x7d0 [ 101.063489][ T5928] do_sys_openat2+0x121/0x290 [ 101.063523][ T5928] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.063559][ T5928] ? find_held_lock+0x2b/0x80 [ 101.063604][ T5928] __x64_sys_open+0x153/0x1e0 [ 101.063638][ T5928] ? __pfx___x64_sys_open+0x10/0x10 [ 101.063678][ T5928] ? rcu_is_watching+0x12/0xc0 [ 101.063720][ T5928] do_syscall_64+0xcd/0xf80 [ 101.063765][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.063795][ T5928] RIP: 0033:0x7f7a34f8f7c9 [ 101.063820][ T5928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.063848][ T5928] RSP: 002b:00007f7a35ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 101.063878][ T5928] RAX: ffffffffffffffda RBX: 00007f7a351e5fa0 RCX: 00007f7a34f8f7c9 [ 101.063898][ T5928] RDX: 0000000000000000 RSI: 0000000000004242 RDI: 0000000000000000 [ 101.063915][ T5928] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.063932][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.063949][ T5928] R13: 00007f7a351e6038 R14: 00007f7a351e5fa0 R15: 00007fff24876f08 [ 101.063998][ T5928] [ 101.474526][ T5930] FAULT_INJECTION: forcing a failure. [ 101.474526][ T5930] name failslab, interval 1, probability 0, space 0, times 0 [ 101.547511][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 101.547553][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.547572][ T5930] Call Trace: [ 101.547582][ T5930] [ 101.547593][ T5930] dump_stack_lvl+0x16c/0x1f0 [ 101.547647][ T5930] should_fail_ex+0x512/0x640 [ 101.547681][ T5930] ? __kmalloc_cache_noprof+0x5f/0x800 [ 101.547719][ T5930] should_failslab+0xc2/0x120 [ 101.547764][ T5930] __kmalloc_cache_noprof+0x80/0x800 [ 101.547814][ T5930] ? lockdep_init_map_type+0x5c/0x270 [ 101.547845][ T5930] ? rfkill_fop_open+0x1b6/0x750 [ 101.547889][ T5930] ? __pfx_rfkill_fop_open+0x10/0x10 [ 101.547922][ T5930] ? rfkill_fop_open+0x1b6/0x750 [ 101.547963][ T5930] ? __pfx_rfkill_fop_open+0x10/0x10 [ 101.548000][ T5930] rfkill_fop_open+0x1b6/0x750 [ 101.548045][ T5930] ? __pfx_rfkill_fop_open+0x10/0x10 [ 101.548091][ T5930] misc_open+0x26d/0x450 [ 101.548128][ T5930] ? __pfx_misc_open+0x10/0x10 [ 101.548162][ T5930] chrdev_open+0x234/0x6a0 [ 101.548215][ T5930] ? __pfx_apparmor_file_open+0x10/0x10 [ 101.548246][ T5930] ? __pfx_chrdev_open+0x10/0x10 [ 101.548293][ T5930] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 101.548350][ T5930] do_dentry_open+0x748/0x1590 [ 101.548393][ T5930] ? __pfx_chrdev_open+0x10/0x10 [ 101.548451][ T5930] vfs_open+0x82/0x3f0 [ 101.548488][ T5930] path_openat+0x2078/0x3140 [ 101.548555][ T5930] ? __pfx_path_openat+0x10/0x10 [ 101.548616][ T5930] do_filp_open+0x20b/0x470 [ 101.548662][ T5930] ? __pfx_do_filp_open+0x10/0x10 [ 101.548736][ T5930] ? alloc_fd+0x471/0x7d0 [ 101.548791][ T5930] do_sys_openat2+0x121/0x290 [ 101.548824][ T5930] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.548877][ T5930] __x64_sys_openat+0x174/0x210 [ 101.548912][ T5930] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.548973][ T5930] do_syscall_64+0xcd/0xf80 [ 101.549020][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.549051][ T5930] RIP: 0033:0x7fc359d8f7c9 [ 101.549076][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.549104][ T5930] RSP: 002b:00007fc35aba4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.549132][ T5930] RAX: ffffffffffffffda RBX: 00007fc359fe5fa0 RCX: 00007fc359d8f7c9 [ 101.549150][ T5930] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 101.549170][ T5930] RBP: 00007fc359e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.549186][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.549204][ T5930] R13: 00007fc359fe6038 R14: 00007fc359fe5fa0 R15: 00007ffc26c35b78 [ 101.549245][ T5930] [ 102.328780][ T5930] sg_write: data in/out 8156/1 bytes for SCSI command 0x0-- guessing data in; [ 102.328780][ T5930] program syz.0.1 not setting count and/or reply_len properly [ 102.431761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.602659][ T5842] Bluetooth: hci2: command tx timeout [ 102.602777][ T5843] Bluetooth: hci0: command tx timeout [ 102.608130][ T5835] Bluetooth: hci1: command tx timeout [ 102.613869][ T5841] Bluetooth: hci3: command tx timeout [ 102.825591][ T5952] input: f¬ as /devices/virtual/input/input5 [ 103.002281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.010952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 103.048476][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 103.691249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.821851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.830313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.839312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.843543][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11'. [ 105.403487][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.120555][ T6023] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.663228][ T6046] FAULT_INJECTION: forcing a failure. [ 111.663228][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 111.680831][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.3.26 Not tainted syzkaller #0 PREEMPT(full) [ 111.680858][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.680872][ T6046] Call Trace: [ 111.680878][ T6046] [ 111.680885][ T6046] dump_stack_lvl+0x16c/0x1f0 [ 111.680918][ T6046] should_fail_ex+0x512/0x640 [ 111.680938][ T6046] ? kmem_cache_alloc_noprof+0x62/0x770 [ 111.680965][ T6046] should_failslab+0xc2/0x120 [ 111.680993][ T6046] kmem_cache_alloc_noprof+0x83/0x770 [ 111.681015][ T6046] ? __kernfs_new_node+0xd2/0x990 [ 111.681041][ T6046] ? __kernfs_new_node+0xd2/0x990 [ 111.681061][ T6046] __kernfs_new_node+0xd2/0x990 [ 111.681085][ T6046] ? __pfx___kernfs_new_node+0x10/0x10 [ 111.681112][ T6046] ? find_held_lock+0x2b/0x80 [ 111.681137][ T6046] ? kernfs_root+0xee/0x2a0 [ 111.681175][ T6046] kernfs_new_node+0x13c/0x1e0 [ 111.681220][ T6046] __kernfs_create_file+0x53/0x350 [ 111.681268][ T6046] sysfs_add_file_mode_ns+0x207/0x3c0 [ 111.681294][ T6046] internal_create_group+0x597/0xf70 [ 111.681321][ T6046] ? __pfx_internal_create_group+0x10/0x10 [ 111.681347][ T6046] ? kernfs_create_link+0x1bd/0x240 [ 111.681380][ T6046] internal_create_groups+0x9d/0x150 [ 111.681404][ T6046] device_add+0xf56/0x1980 [ 111.681433][ T6046] ? __pfx_device_add+0x10/0x10 [ 111.681458][ T6046] ? lockdep_init_map_type+0x5c/0x270 [ 111.681476][ T6046] ? __init_waitqueue_head+0xca/0x150 [ 111.681503][ T6046] netdev_register_kobject+0x1a9/0x3d0 [ 111.681535][ T6046] register_netdevice+0x13ac/0x21d0 [ 111.681567][ T6046] ? __pfx_register_netdevice+0x10/0x10 [ 111.681600][ T6046] __ip_tunnel_create+0x540/0x6b0 [ 111.681639][ T6046] ? __pfx___ip_tunnel_create+0x10/0x10 [ 111.681675][ T6046] ip_tunnel_init_net+0x22f/0x7d0 [ 111.681696][ T6046] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 111.681720][ T6046] ? ops_init+0x77/0x5f0 [ 111.681746][ T6046] ? __pfx_erspan_init_net+0x10/0x10 [ 111.681773][ T6046] ops_init+0x1e2/0x5f0 [ 111.681799][ T6046] setup_net+0x11d/0x3a0 [ 111.681825][ T6046] ? __pfx_setup_net+0x10/0x10 [ 111.681848][ T6046] ? lockdep_init_map_type+0x5c/0x270 [ 111.681871][ T6046] ? mutex_init_lockep+0x110/0x150 [ 111.681893][ T6046] copy_net_ns+0x351/0x7c0 [ 111.681923][ T6046] create_new_namespaces+0x3ea/0xab0 [ 111.681953][ T6046] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 111.681980][ T6046] ksys_unshare+0x45b/0xa40 [ 111.682010][ T6046] ? __pfx_ksys_unshare+0x10/0x10 [ 111.682040][ T6046] ? xfd_validate_state+0x61/0x180 [ 111.682064][ T6046] __x64_sys_unshare+0x31/0x40 [ 111.682080][ T6046] do_syscall_64+0xcd/0xf80 [ 111.682111][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.682129][ T6046] RIP: 0033:0x7f7a34f8f7c9 [ 111.682145][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.682162][ T6046] RSP: 002b:00007f7a35eac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.682181][ T6046] RAX: ffffffffffffffda RBX: 00007f7a351e6090 RCX: 00007f7a34f8f7c9 [ 111.682192][ T6046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 111.682203][ T6046] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.682213][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.682224][ T6046] R13: 00007f7a351e6128 R14: 00007f7a351e6090 R15: 00007fff24876f08 [ 111.682247][ T6046] [ 113.452303][ T6055] HfR: entered promiscuous mode [ 114.232808][ T6058] hub 1-0:1.0: USB hub found [ 114.255023][ T6058] hub 1-0:1.0: 1 port detected [ 118.376413][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.048475][ T6126] HfR: entered promiscuous mode [ 120.214967][ T6138] __vm_enough_memory: pid: 6138, comm: syz.3.43, bytes: 4398046511104 not enough memory for the allocation [ 120.564668][ T6126] hub 1-0:1.0: USB hub found [ 120.637010][ T6126] hub 1-0:1.0: 1 port detected [ 121.875228][ T6178] usb usb3: usbfs: process 6178 (syz.1.49) did not claim interface 2 before use [ 121.881394][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'. [ 121.881435][ T6179] veth1_macvtap: entered allmulticast mode [ 122.202014][ T6166] process 'syz.0.48' launched ':,' with NULL argv: empty string added [ 122.435158][ T6189] netlink: 'syz.1.52': attribute type 16 has an invalid length. [ 122.488679][ T6189] netlink: 50 bytes leftover after parsing attributes in process `syz.1.52'. [ 122.668046][ T6189] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.858232][ T6201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.904674][ T6194] netlink: 146 bytes leftover after parsing attributes in process `syz.2.54'. [ 123.247376][ T6201] netlink: 146 bytes leftover after parsing attributes in process `syz.2.54'. [ 123.381345][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 124.219797][ T6222] mmap: syz.2.57 (6222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.879560][ T6232] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.532825][ T6240] FAULT_INJECTION: forcing a failure. [ 125.532825][ T6240] name failslab, interval 1, probability 0, space 0, times 0 [ 125.622391][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 125.622430][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.622442][ T6240] Call Trace: [ 125.622449][ T6240] [ 125.622456][ T6240] dump_stack_lvl+0x16c/0x1f0 [ 125.622489][ T6240] should_fail_ex+0x512/0x640 [ 125.622516][ T6240] ? __kmalloc_noprof+0xca/0x910 [ 125.622538][ T6240] should_failslab+0xc2/0x120 [ 125.622567][ T6240] __kmalloc_noprof+0xeb/0x910 [ 125.622587][ T6240] ? __list_lru_init+0xe8/0x4c0 [ 125.622611][ T6240] ? __list_lru_init+0xe8/0x4c0 [ 125.622630][ T6240] __list_lru_init+0xe8/0x4c0 [ 125.622652][ T6240] alloc_super+0x8ce/0xd00 [ 125.622683][ T6240] sget_fc+0x116/0xc20 [ 125.622708][ T6240] ? __pfx_set_anon_super_fc+0x10/0x10 [ 125.622733][ T6240] ? __pfx_mqueue_fill_super+0x10/0x10 [ 125.622761][ T6240] get_tree_nodev+0x28/0x190 [ 125.622796][ T6240] mqueue_get_tree+0xf1/0x130 [ 125.622824][ T6240] vfs_get_tree+0x8e/0x330 [ 125.622845][ T6240] fc_mount_longterm+0x1a/0x270 [ 125.622870][ T6240] mq_init_ns+0x482/0x810 [ 125.622891][ T6240] copy_ipcs+0x3db/0x7d0 [ 125.622913][ T6240] create_new_namespaces+0x20a/0xab0 [ 125.622938][ T6240] ? security_capable+0x7e/0x260 [ 125.622971][ T6240] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 125.622998][ T6240] ksys_unshare+0x45b/0xa40 [ 125.623028][ T6240] ? __pfx_ksys_unshare+0x10/0x10 [ 125.623058][ T6240] ? xfd_validate_state+0x61/0x180 [ 125.623081][ T6240] __x64_sys_unshare+0x31/0x40 [ 125.623097][ T6240] do_syscall_64+0xcd/0xf80 [ 125.623127][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.623145][ T6240] RIP: 0033:0x7f8efe38f7c9 [ 125.623161][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.623178][ T6240] RSP: 002b:00007f8eff181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 125.623197][ T6240] RAX: ffffffffffffffda RBX: 00007f8efe5e5fa0 RCX: 00007f8efe38f7c9 [ 125.623209][ T6240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 125.623219][ T6240] RBP: 00007f8efe413f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.623230][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.623240][ T6240] R13: 00007f8efe5e6038 R14: 00007f8efe5e5fa0 R15: 00007ffc66e51598 [ 125.623264][ T6240] [ 125.882337][ T6246] FAULT_INJECTION: forcing a failure. [ 125.882337][ T6246] name fail_futex, interval 1, probability 0, space 0, times 1 [ 125.911623][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 125.911651][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.911662][ T6246] Call Trace: [ 125.911670][ T6246] [ 125.911679][ T6246] dump_stack_lvl+0x16c/0x1f0 [ 125.911711][ T6246] should_fail_ex+0x512/0x640 [ 125.911747][ T6246] get_futex_key+0x1d0/0x15f0 [ 125.911771][ T6246] ? __pfx_get_futex_key+0x10/0x10 [ 125.911798][ T6246] futex_wake+0xea/0x530 [ 125.911823][ T6246] ? kasan_quarantine_put+0x10a/0x240 [ 125.911849][ T6246] ? __pfx_futex_wake+0x10/0x10 [ 125.911876][ T6246] ? putname+0xf5/0x1a0 [ 125.911898][ T6246] do_futex+0x1e3/0x350 [ 125.911920][ T6246] ? __pfx_do_futex+0x10/0x10 [ 125.911947][ T6246] __x64_sys_futex+0x1e0/0x4c0 [ 125.911970][ T6246] ? __x64_sys_openat+0x174/0x210 [ 125.911991][ T6246] ? __pfx___x64_sys_futex+0x10/0x10 [ 125.912021][ T6246] do_syscall_64+0xcd/0xf80 [ 125.912051][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.912069][ T6246] RIP: 0033:0x7fc359d8f7c9 [ 125.912085][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.912102][ T6246] RSP: 002b:00007fc35ab620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.912120][ T6246] RAX: ffffffffffffffda RBX: 00007fc359fe6188 RCX: 00007fc359d8f7c9 [ 125.912132][ T6246] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc359fe618c [ 125.912143][ T6246] RBP: 00007fc359fe6180 R08: 00007fc35aba5000 R09: 0000000000000000 [ 125.912153][ T6246] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 125.912164][ T6246] R13: 00007fc359fe6218 R14: 00007ffc26c35a90 R15: 00007ffc26c35b78 [ 125.912187][ T6246] [ 126.807190][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 127.056765][ T6269] binder: BINDER_SET_CONTEXT_MGR already set [ 127.070881][ T6269] binder: 6266:6269 ioctl 4018620d 9 returned -16 [ 128.159736][ T6295] FAULT_INJECTION: forcing a failure. [ 128.159736][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 128.199364][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.2.73 Not tainted syzkaller #0 PREEMPT(full) [ 128.199405][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.199423][ T6295] Call Trace: [ 128.199432][ T6295] [ 128.199445][ T6295] dump_stack_lvl+0x16c/0x1f0 [ 128.199497][ T6295] should_fail_ex+0x512/0x640 [ 128.199529][ T6295] ? __kmalloc_noprof+0xca/0x910 [ 128.199566][ T6295] should_failslab+0xc2/0x120 [ 128.199610][ T6295] __kmalloc_noprof+0xeb/0x910 [ 128.199630][ T6295] ? fib_rules_register+0x403/0x500 [ 128.199656][ T6295] ? fib_default_rule_add+0x4f/0x420 [ 128.199686][ T6295] ? fib_default_rule_add+0x4f/0x420 [ 128.199710][ T6295] fib_default_rule_add+0x4f/0x420 [ 128.199738][ T6295] fib4_rules_init+0x52/0x1c0 [ 128.199762][ T6295] fib_net_init+0x1dc/0x3f0 [ 128.199784][ T6295] ? __pfx___register_sysctl_table+0x10/0x10 [ 128.199810][ T6295] ? __pfx_fib_net_init+0x10/0x10 [ 128.199838][ T6295] ? lockdep_init_map_type+0x5c/0x270 [ 128.199858][ T6295] ? do_init_timer+0xc9/0x110 [ 128.199889][ T6295] ? devinet_init_net+0x5c2/0x910 [ 128.199910][ T6295] ? __pfx_fib_net_init+0x10/0x10 [ 128.199938][ T6295] ops_init+0x1e2/0x5f0 [ 128.199965][ T6295] setup_net+0x11d/0x3a0 [ 128.199990][ T6295] ? __pfx_setup_net+0x10/0x10 [ 128.200013][ T6295] ? lockdep_init_map_type+0x5c/0x270 [ 128.200032][ T6295] ? mutex_init_lockep+0x110/0x150 [ 128.200053][ T6295] copy_net_ns+0x351/0x7c0 [ 128.200083][ T6295] create_new_namespaces+0x3ea/0xab0 [ 128.200114][ T6295] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 128.200141][ T6295] ksys_unshare+0x45b/0xa40 [ 128.200170][ T6295] ? __pfx_ksys_unshare+0x10/0x10 [ 128.200200][ T6295] ? xfd_validate_state+0x61/0x180 [ 128.200224][ T6295] __x64_sys_unshare+0x31/0x40 [ 128.200240][ T6295] do_syscall_64+0xcd/0xf80 [ 128.200270][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.200288][ T6295] RIP: 0033:0x7f24bc78f7c9 [ 128.200304][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.200322][ T6295] RSP: 002b:00007f24ba9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 128.200340][ T6295] RAX: ffffffffffffffda RBX: 00007f24bc9e6090 RCX: 00007f24bc78f7c9 [ 128.200352][ T6295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 128.200363][ T6295] RBP: 00007f24bc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.200374][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.200384][ T6295] R13: 00007f24bc9e6128 R14: 00007f24bc9e6090 R15: 00007ffd38c8edc8 [ 128.200407][ T6295] [ 129.080597][ T6305] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.925556][ T6322] random: crng reseeded on system resumption [ 131.218103][ T6363] FAULT_INJECTION: forcing a failure. [ 131.218103][ T6363] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.281887][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(full) [ 131.281915][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.281926][ T6363] Call Trace: [ 131.281933][ T6363] [ 131.281940][ T6363] dump_stack_lvl+0x16c/0x1f0 [ 131.281973][ T6363] should_fail_ex+0x512/0x640 [ 131.281998][ T6363] _copy_to_user+0x32/0xd0 [ 131.282020][ T6363] copy_siginfo_to_user+0x27/0xc0 [ 131.282049][ T6363] x64_setup_rt_frame+0xa1c/0xcf0 [ 131.282080][ T6363] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 131.282106][ T6363] ? do_send_specific+0x15c/0x370 [ 131.282133][ T6363] ? __pfx_do_send_specific+0x10/0x10 [ 131.282158][ T6363] ? __task_pid_nr_ns+0x1f5/0x500 [ 131.282177][ T6363] arch_do_signal_or_restart+0x5c2/0x7a0 [ 131.282205][ T6363] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 131.282236][ T6363] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 131.282273][ T6363] exit_to_user_mode_loop+0x8c/0x540 [ 131.282299][ T6363] do_syscall_64+0x4ee/0xf80 [ 131.282328][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.282346][ T6363] RIP: 0033:0x7f8efe38f7c9 [ 131.282361][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.282379][ T6363] RSP: 002b:00007f8eff160038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 131.282405][ T6363] RAX: 0000000000000000 RBX: 00007f8efe5e6090 RCX: 00007f8efe38f7c9 [ 131.282416][ T6363] RDX: 0000000000000021 RSI: 000000000000006f RDI: 000000000000006d [ 131.282427][ T6363] RBP: 00007f8efe413f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.282437][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.282448][ T6363] R13: 00007f8efe5e6128 R14: 00007f8efe5e6090 R15: 00007ffc66e51598 [ 131.282470][ T6363] [ 131.287200][ T6355] FAULT_INJECTION: forcing a failure. [ 131.287200][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 131.572804][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 131.572830][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.572841][ T6355] Call Trace: [ 131.572848][ T6355] [ 131.572855][ T6355] dump_stack_lvl+0x16c/0x1f0 [ 131.572887][ T6355] should_fail_ex+0x512/0x640 [ 131.572911][ T6355] ? fs_reclaim_acquire+0xae/0x150 [ 131.572943][ T6355] should_failslab+0xc2/0x120 [ 131.572972][ T6355] __kmalloc_noprof+0xeb/0x910 [ 131.572994][ T6355] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.573027][ T6355] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.573052][ T6355] tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.573080][ T6355] ? tomoyo_profile+0x47/0x60 [ 131.573110][ T6355] tomoyo_path_number_perm+0x245/0x580 [ 131.573131][ T6355] ? tomoyo_path_number_perm+0x237/0x580 [ 131.573156][ T6355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.573199][ T6355] ? d_alloc_parallel+0xb4e/0x1510 [ 131.573224][ T6355] ? current_check_access_path+0x33b/0x460 [ 131.573250][ T6355] ? __pfx_current_check_access_path+0x10/0x10 [ 131.573282][ T6355] tomoyo_path_mknod+0x10c/0x190 [ 131.573310][ T6355] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 131.573340][ T6355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.573373][ T6355] security_path_mknod+0x161/0x310 [ 131.573398][ T6355] lookup_open.isra.0+0xc10/0x1780 [ 131.573428][ T6355] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 131.573456][ T6355] ? find_held_lock+0x2b/0x80 [ 131.573488][ T6355] ? __pfx_down_write+0x10/0x10 [ 131.573513][ T6355] path_openat+0xa95/0x3140 [ 131.573548][ T6355] ? __pfx_path_openat+0x10/0x10 [ 131.573584][ T6355] do_filp_open+0x20b/0x470 [ 131.573613][ T6355] ? __pfx_do_filp_open+0x10/0x10 [ 131.573664][ T6355] ? alloc_fd+0x471/0x7d0 [ 131.573698][ T6355] do_sys_openat2+0x121/0x290 [ 131.573719][ T6355] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.573748][ T6355] __x64_sys_openat+0x174/0x210 [ 131.573770][ T6355] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.573801][ T6355] do_syscall_64+0xcd/0xf80 [ 131.573831][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.573856][ T6355] RIP: 0033:0x7f7a34f8f7c9 [ 131.573872][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.573890][ T6355] RSP: 002b:00007f7a35ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.573909][ T6355] RAX: ffffffffffffffda RBX: 00007f7a351e5fa0 RCX: 00007f7a34f8f7c9 [ 131.573921][ T6355] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 131.573933][ T6355] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.573944][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.573955][ T6355] R13: 00007f7a351e6038 R14: 00007f7a351e5fa0 R15: 00007fff24876f08 [ 131.573979][ T6355] [ 131.573987][ T6355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.957327][ T6370] vivid-007: ================= START STATUS ================= [ 132.012221][ T6370] vivid-007: Generate PTS: true [ 132.019179][ T6370] vivid-007: Generate SCR: true [ 132.024215][ T6370] tpg source WxH: 320x240 (Y'CbCr) [ 132.029342][ T6370] tpg field: 1 [ 132.059432][ T6370] tpg crop: (0,0)/320x240 [ 132.071233][ T6370] tpg compose: (0,0)/320x240 [ 132.075881][ T6370] tpg colorspace: 8 [ 132.089987][ T6370] tpg transfer function: 0/0 [ 132.106640][ T6370] tpg Y'CbCr encoding: 0/0 [ 132.130379][ T6370] tpg quantization: 0/0 [ 132.146473][ T6370] tpg RGB range: 0/2 [ 132.150385][ T6370] vivid-007: ================== END STATUS ================== [ 132.413232][ T6376] FAULT_INJECTION: forcing a failure. [ 132.413232][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 132.439305][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(full) [ 132.439346][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.439364][ T6376] Call Trace: [ 132.439374][ T6376] [ 132.439385][ T6376] dump_stack_lvl+0x16c/0x1f0 [ 132.439436][ T6376] should_fail_ex+0x512/0x640 [ 132.439467][ T6376] ? __kmalloc_cache_noprof+0x5f/0x800 [ 132.439504][ T6376] should_failslab+0xc2/0x120 [ 132.439551][ T6376] __kmalloc_cache_noprof+0x80/0x800 [ 132.439588][ T6376] ? o2hb_debug_open+0x140/0x780 [ 132.439629][ T6376] ? o2hb_debug_open+0x140/0x780 [ 132.439663][ T6376] o2hb_debug_open+0x140/0x780 [ 132.439705][ T6376] ? lockdep_init_map_type+0x5c/0x270 [ 132.439739][ T6376] ? mutex_init_lockep+0x110/0x150 [ 132.439771][ T6376] ? __pfx_o2hb_debug_open+0x10/0x10 [ 132.439804][ T6376] ? __debugfs_file_get+0x1fe/0x840 [ 132.439849][ T6376] ? __pfx_apparmor_file_open+0x10/0x10 [ 132.439889][ T6376] ? __pfx_o2hb_debug_open+0x10/0x10 [ 132.439921][ T6376] full_proxy_open_regular+0x1b9/0x350 [ 132.439970][ T6376] do_dentry_open+0x748/0x1590 [ 132.440015][ T6376] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 132.440072][ T6376] vfs_open+0x82/0x3f0 [ 132.440110][ T6376] path_openat+0x2078/0x3140 [ 132.440170][ T6376] ? __pfx_path_openat+0x10/0x10 [ 132.440232][ T6376] do_filp_open+0x20b/0x470 [ 132.440280][ T6376] ? __pfx_do_filp_open+0x10/0x10 [ 132.440358][ T6376] ? alloc_fd+0x471/0x7d0 [ 132.440414][ T6376] do_sys_openat2+0x121/0x290 [ 132.440446][ T6376] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.440497][ T6376] __x64_sys_openat+0x174/0x210 [ 132.440535][ T6376] ? __pfx___x64_sys_openat+0x10/0x10 [ 132.440587][ T6376] do_syscall_64+0xcd/0xf80 [ 132.440638][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.440670][ T6376] RIP: 0033:0x7f7a34f8f7c9 [ 132.440709][ T6376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.440736][ T6376] RSP: 002b:00007f7a35ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.440766][ T6376] RAX: ffffffffffffffda RBX: 00007f7a351e5fa0 RCX: 00007f7a34f8f7c9 [ 132.440785][ T6376] RDX: 0000000000044000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 132.440804][ T6376] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.440821][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.440838][ T6376] R13: 00007f7a351e6038 R14: 00007f7a351e5fa0 R15: 00007fff24876f08 [ 132.440877][ T6376] [ 133.342900][ T6397] netlink: 330 bytes leftover after parsing attributes in process `syz.1.90'. [ 133.369281][ T6396] netlink: 330 bytes leftover after parsing attributes in process `syz.1.90'. [ 134.699992][ T30] audit: type=1800 audit(1766745268.032:2): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.96" name="lu_gp_id" dev="configfs" ino=11570 res=0 errno=0 [ 135.533963][ T6444] mmap: syz.1.101 (6444): VmData 45809664 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 135.620465][ T6441] Invalid ELF header magic: != ELF [ 136.758071][ T6469] FAULT_INJECTION: forcing a failure. [ 136.758071][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 136.805041][ T6469] CPU: 0 UID: 0 PID: 6469 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 136.805084][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.805102][ T6469] Call Trace: [ 136.805112][ T6469] [ 136.805123][ T6469] dump_stack_lvl+0x16c/0x1f0 [ 136.805177][ T6469] should_fail_ex+0x512/0x640 [ 136.805212][ T6469] ? kmem_cache_alloc_noprof+0x62/0x770 [ 136.805254][ T6469] should_failslab+0xc2/0x120 [ 136.805301][ T6469] kmem_cache_alloc_noprof+0x83/0x770 [ 136.805357][ T6469] ? alloc_empty_file+0x55/0x1e0 [ 136.805400][ T6469] ? alloc_empty_file+0x55/0x1e0 [ 136.805431][ T6469] alloc_empty_file+0x55/0x1e0 [ 136.805464][ T6469] dentry_open+0x46/0xd0 [ 136.805499][ T6469] pidfs_alloc_file+0x18f/0x290 [ 136.805543][ T6469] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 136.805593][ T6469] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.805646][ T6469] pidfd_prepare+0x129/0x200 [ 136.805695][ T6469] __x64_sys_pidfd_open+0x105/0x1a0 [ 136.805728][ T6469] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 136.805765][ T6469] ? rcu_is_watching+0x12/0xc0 [ 136.805812][ T6469] do_syscall_64+0xcd/0xf80 [ 136.805862][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.805892][ T6469] RIP: 0033:0x7f8efe38f7c9 [ 136.805918][ T6469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.805947][ T6469] RSP: 002b:00007f8eff181038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 136.805977][ T6469] RAX: ffffffffffffffda RBX: 00007f8efe5e5fa0 RCX: 00007f8efe38f7c9 [ 136.805996][ T6469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 136.806013][ T6469] RBP: 00007f8efe413f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.806032][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.806049][ T6469] R13: 00007f8efe5e6038 R14: 00007f8efe5e5fa0 R15: 00007ffc66e51598 [ 136.806090][ T6469] [ 137.284635][ T6475] netlink: 338 bytes leftover after parsing attributes in process `syz.2.108'. [ 138.126851][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.136206][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.577011][ T6508] FAULT_INJECTION: forcing a failure. [ 138.577011][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 138.683106][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) [ 138.683135][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.683145][ T6508] Call Trace: [ 138.683152][ T6508] [ 138.683159][ T6508] dump_stack_lvl+0x16c/0x1f0 [ 138.683192][ T6508] should_fail_ex+0x512/0x640 [ 138.683213][ T6508] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 138.683239][ T6508] should_failslab+0xc2/0x120 [ 138.683268][ T6508] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 138.683291][ T6508] ? __pfx___might_resched+0x10/0x10 [ 138.683318][ T6508] ? sock_alloc_inode+0x25/0x1c0 [ 138.683349][ T6508] ? __pfx_sock_alloc_inode+0x10/0x10 [ 138.683375][ T6508] ? sock_alloc_inode+0x25/0x1c0 [ 138.683400][ T6508] sock_alloc_inode+0x25/0x1c0 [ 138.683434][ T6508] alloc_inode+0x64/0x240 [ 138.683455][ T6508] sock_alloc+0x40/0x280 [ 138.683480][ T6508] __sock_create+0xc2/0x8a0 [ 138.683500][ T6508] __sys_socket+0x14d/0x260 [ 138.683518][ T6508] ? __pfx___sys_socket+0x10/0x10 [ 138.683537][ T6508] ? do_user_addr_fault+0x843/0x1370 [ 138.683564][ T6508] __x64_sys_socket+0x72/0xb0 [ 138.683581][ T6508] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.683608][ T6508] do_syscall_64+0xcd/0xf80 [ 138.683637][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.683656][ T6508] RIP: 0033:0x7fc359d916e7 [ 138.683671][ T6508] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.683689][ T6508] RSP: 002b:00007fc35aba2fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 138.683707][ T6508] RAX: ffffffffffffffda RBX: 00007fc359fe5fa0 RCX: 00007fc359d916e7 [ 138.683718][ T6508] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 138.683729][ T6508] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 138.683740][ T6508] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 138.683750][ T6508] R13: 00007fc359fe6038 R14: 00007fc359fe5fa0 R15: 00007ffc26c35b78 [ 138.683772][ T6508] [ 138.683899][ T6508] socket: no more sockets [ 139.068845][ T6510] zswap: compressor 000 not available [ 139.465584][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 139.946912][ T6542] hub 1-0:1.0: USB hub found [ 139.952094][ T6542] hub 1-0:1.0: 1 port detected [ 140.151996][ T6522] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.163960][ T6522] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.196184][ T6522] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.244450][ T6522] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.260881][ T6522] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.300346][ T6522] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.323250][ T6522] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.349117][ T6522] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.372245][ T6522] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.400578][ T6522] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.418444][ T6522] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.454582][ T6522] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.442413][ T6572] zswap: compressor not available [ 141.561765][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.070078][ T6594] zswap: compressor not available [ 142.284198][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.360899][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.441183][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.651569][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.743251][ T6634] GUP no longer grows the stack in syz.3.137 (6634): 14000-18000 (4000) [ 143.755435][ T6634] CPU: 1 UID: 0 PID: 6634 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) [ 143.755475][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.755492][ T6634] Call Trace: [ 143.755502][ T6634] [ 143.755513][ T6634] dump_stack_lvl+0x16c/0x1f0 [ 143.755564][ T6634] gup_vma_lookup+0x1d2/0x220 [ 143.755610][ T6634] __get_user_pages+0x241/0x3590 [ 143.755668][ T6634] ? find_held_lock+0x2b/0x80 [ 143.755708][ T6634] ? __pfx___get_user_pages+0x10/0x10 [ 143.755766][ T6634] get_user_pages_remote+0x243/0xab0 [ 143.755821][ T6634] ? __pfx_get_user_pages_remote+0x10/0x10 [ 143.755870][ T6634] ? __pfx___might_resched+0x10/0x10 [ 143.755914][ T6634] ? noop_dirty_folio+0x5e/0xb0 [ 143.755960][ T6634] __access_remote_vm+0x24d/0x850 [ 143.756012][ T6634] ? __pfx___access_remote_vm+0x10/0x10 [ 143.756066][ T6634] mem_rw+0x20e/0x640 [ 143.756116][ T6634] ? __pfx_mem_write+0x10/0x10 [ 143.756158][ T6634] vfs_write+0x2a0/0x11d0 [ 143.756204][ T6634] ? __pfx___mutex_lock+0x10/0x10 [ 143.756256][ T6634] ? __pfx_vfs_write+0x10/0x10 [ 143.756311][ T6634] ? __fget_files+0x20e/0x3c0 [ 143.756366][ T6634] ksys_write+0x12a/0x250 [ 143.756416][ T6634] ? __pfx_ksys_write+0x10/0x10 [ 143.756472][ T6634] do_syscall_64+0xcd/0xf80 [ 143.756521][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.756552][ T6634] RIP: 0033:0x7f7a34f8f7c9 [ 143.756576][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.756604][ T6634] RSP: 002b:00007f7a35e49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.756632][ T6634] RAX: ffffffffffffffda RBX: 00007f7a351e6360 RCX: 00007f7a34f8f7c9 [ 143.756651][ T6634] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 143.756668][ T6634] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 143.756685][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.756703][ T6634] R13: 00007f7a351e63f8 R14: 00007f7a351e6360 R15: 00007fff24876f08 [ 143.756744][ T6634] [ 144.364345][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.446109][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.523817][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.537260][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 145.629894][ T6677] openvswitch: HfR: Dropping previously announced user features [ 145.676059][ T6672] netlink: set zone limit has 8 unknown bytes [ 145.722485][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.443607][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.520816][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.600826][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.773332][ T6726] futex_wake_op: syz.0.160 tries to shift op by -2048; fix this program [ 146.804668][ T6726] futex_wake_op: syz.0.160 tries to shift op by -2048; fix this program [ 146.834704][ T6726] 0x000000000001-0x000000020000 : "" [ 146.892428][ T6726] ftl_cs: FTL header corrupt! [ 147.403535][ T6728] FAULT_INJECTION: forcing a failure. [ 147.403535][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 147.488385][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz.3.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.488417][ T6728] Tainted: [L]=SOFTLOCKUP [ 147.488423][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.488434][ T6728] Call Trace: [ 147.488440][ T6728] [ 147.488447][ T6728] dump_stack_lvl+0x16c/0x1f0 [ 147.488481][ T6728] should_fail_ex+0x512/0x640 [ 147.488501][ T6728] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 147.488532][ T6728] should_failslab+0xc2/0x120 [ 147.488567][ T6728] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 147.488595][ T6728] ? cache_create_net+0x2b/0x220 [ 147.488625][ T6728] ? kmemdup_noprof+0x29/0x60 [ 147.488646][ T6728] kmemdup_noprof+0x29/0x60 [ 147.488669][ T6728] cache_create_net+0x2b/0x220 [ 147.488697][ T6728] ip_map_cache_create+0x60/0x130 [ 147.488727][ T6728] ? __pfx_sunrpc_init_net+0x10/0x10 [ 147.488751][ T6728] sunrpc_init_net+0x55/0x190 [ 147.488776][ T6728] ops_init+0x1e2/0x5f0 [ 147.488803][ T6728] setup_net+0x11d/0x3a0 [ 147.488828][ T6728] ? __pfx_setup_net+0x10/0x10 [ 147.488851][ T6728] ? lockdep_init_map_type+0x5c/0x270 [ 147.488871][ T6728] ? mutex_init_lockep+0x110/0x150 [ 147.488893][ T6728] copy_net_ns+0x351/0x7c0 [ 147.488922][ T6728] create_new_namespaces+0x3ea/0xab0 [ 147.488952][ T6728] copy_namespaces+0x468/0x570 [ 147.488979][ T6728] copy_process+0x2a70/0x7430 [ 147.489016][ T6728] ? __pfx_copy_process+0x10/0x10 [ 147.489043][ T6728] ? find_held_lock+0x2b/0x80 [ 147.489070][ T6728] ? futex_private_hash_put+0x160/0x1b0 [ 147.489094][ T6728] kernel_clone+0xfc/0x910 [ 147.489123][ T6728] ? __pfx_kernel_clone+0x10/0x10 [ 147.489162][ T6728] __do_sys_clone+0xce/0x120 [ 147.489190][ T6728] ? __pfx___do_sys_clone+0x10/0x10 [ 147.489227][ T6728] ? xfd_validate_state+0x61/0x180 [ 147.489243][ T6728] ? __pfx_do_writev+0x10/0x10 [ 147.489274][ T6728] do_syscall_64+0xcd/0xf80 [ 147.489303][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.489326][ T6728] RIP: 0033:0x7f7a34f8f7c9 [ 147.489341][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.489359][ T6728] RSP: 002b:00007f7a35eabfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 147.489377][ T6728] RAX: ffffffffffffffda RBX: 00007f7a351e6090 RCX: 00007f7a34f8f7c9 [ 147.489393][ T6728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 147.489404][ T6728] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.489415][ T6728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.489425][ T6728] R13: 00007f7a351e6128 R14: 00007f7a351e6090 R15: 00007fff24876f08 [ 147.489448][ T6728] [ 148.660124][ T6754] zswap: compressor not available [ 149.073640][ T30] audit: type=1800 audit(1766745282.412:3): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.168" name="lu_gp_id" dev="configfs" ino=12738 res=0 errno=0 [ 149.095621][ T6770] syz.3.168 uses obsolete (PF_INET,SOCK_PACKET) [ 149.144008][ T30] audit: type=1800 audit(1766745282.482:4): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.168" name="version" dev="configfs" ino=12744 res=0 errno=0 [ 149.659734][ T6768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.681200][ T6768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.690445][ T6768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.719757][ T6768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.105791][ T6802] FAULT_INJECTION: forcing a failure. [ 150.105791][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 150.220754][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.0.174 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.220804][ T6802] Tainted: [L]=SOFTLOCKUP [ 150.220814][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.220831][ T6802] Call Trace: [ 150.220841][ T6802] [ 150.220853][ T6802] dump_stack_lvl+0x16c/0x1f0 [ 150.220904][ T6802] should_fail_ex+0x512/0x640 [ 150.220939][ T6802] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 150.220982][ T6802] should_failslab+0xc2/0x120 [ 150.221027][ T6802] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 150.221061][ T6802] ? __d_lookup+0x25c/0x4a0 [ 150.221085][ T6802] ? __d_alloc+0x35/0xa80 [ 150.221109][ T6802] ? __d_alloc+0x35/0xa80 [ 150.221123][ T6802] __d_alloc+0x35/0xa80 [ 150.221143][ T6802] d_alloc+0x4a/0x1e0 [ 150.221160][ T6802] lookup_one_qstr_excl+0x175/0x250 [ 150.221184][ T6802] start_dirop+0x59/0xb0 [ 150.221211][ T6802] simple_start_creating+0xf4/0x100 [ 150.221237][ T6802] ? __pfx_simple_start_creating+0x10/0x10 [ 150.221261][ T6802] ? do_raw_spin_unlock+0x172/0x230 [ 150.221292][ T6802] ? simple_pin_fs+0xa3/0x190 [ 150.221316][ T6802] debugfs_start_creating.part.0+0x86/0x1c0 [ 150.221349][ T6802] __debugfs_create_file+0xb3/0x530 [ 150.221383][ T6802] debugfs_create_file_full+0x41/0x60 [ 150.221404][ T6802] kvm_dev_ioctl+0x14ca/0x1a80 [ 150.221444][ T6802] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 150.221496][ T6802] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 150.221535][ T6802] __x64_sys_ioctl+0x18e/0x210 [ 150.221573][ T6802] do_syscall_64+0xcd/0xf80 [ 150.221616][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.221635][ T6802] RIP: 0033:0x7fc359d8f7c9 [ 150.221651][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.221668][ T6802] RSP: 002b:00007fc35ab83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.221687][ T6802] RAX: ffffffffffffffda RBX: 00007fc359fe6090 RCX: 00007fc359d8f7c9 [ 150.221699][ T6802] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 150.221710][ T6802] RBP: 00007fc359e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 150.221720][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.221731][ T6802] R13: 00007fc359fe6128 R14: 00007fc359fe6090 R15: 00007ffc26c35b78 [ 150.221754][ T6802] [ 151.088504][ T6823] netlink: 342 bytes leftover after parsing attributes in process `syz.2.178'. [ 151.167348][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.176722][ T6828] nfs: Unknown parameter 'nl802154' [ 151.721740][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.728186][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.734308][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.201298][ T6913] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 156.222655][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 156.287874][ T6914] lo: entered allmulticast mode [ 156.322072][ T6910] lo: left allmulticast mode [ 157.193422][ T6929] ovs_: entered promiscuous mode [ 157.699326][ T6941] random: crng reseeded on system resumption [ 158.152040][ T6951] __vm_enough_memory: pid: 6951, comm: syz.2.211, bytes: 4398046511104 not enough memory for the allocation [ 158.450078][ T6958] FAULT_INJECTION: forcing a failure. [ 158.450078][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 158.472250][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.0.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.472303][ T6958] Tainted: [L]=SOFTLOCKUP [ 158.472314][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.472332][ T6958] Call Trace: [ 158.472342][ T6958] [ 158.472354][ T6958] dump_stack_lvl+0x16c/0x1f0 [ 158.472407][ T6958] should_fail_ex+0x512/0x640 [ 158.472440][ T6958] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 158.472483][ T6958] should_failslab+0xc2/0x120 [ 158.472530][ T6958] kmem_cache_alloc_node_noprof+0x86/0x800 [ 158.472568][ T6958] ? __alloc_skb+0x156/0x410 [ 158.472609][ T6958] ? __alloc_skb+0x156/0x410 [ 158.472641][ T6958] __alloc_skb+0x156/0x410 [ 158.472671][ T6958] ? __alloc_skb+0x35d/0x410 [ 158.472704][ T6958] ? __pfx___alloc_skb+0x10/0x10 [ 158.472740][ T6958] ? genl_rcv_msg+0x4bb/0x800 [ 158.472782][ T6958] netlink_ack+0x15d/0xb80 [ 158.472839][ T6958] netlink_rcv_skb+0x332/0x420 [ 158.472885][ T6958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.472917][ T6958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.472979][ T6958] ? netlink_deliver_tap+0x1ae/0xd30 [ 158.473028][ T6958] genl_rcv+0x28/0x40 [ 158.473072][ T6958] netlink_unicast+0x5aa/0x870 [ 158.473122][ T6958] ? __pfx_netlink_unicast+0x10/0x10 [ 158.473195][ T6958] netlink_sendmsg+0x8c8/0xdd0 [ 158.473248][ T6958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.473300][ T6958] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 158.473361][ T6958] __sys_sendto+0x4a3/0x520 [ 158.473399][ T6958] ? __pfx___sys_sendto+0x10/0x10 [ 158.473449][ T6958] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 158.473492][ T6958] ? count_memcg_events+0x122/0x290 [ 158.473563][ T6958] __x64_sys_sendto+0xe0/0x1c0 [ 158.473597][ T6958] ? do_syscall_64+0x91/0xf80 [ 158.473641][ T6958] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.473686][ T6958] do_syscall_64+0xcd/0xf80 [ 158.473735][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.473767][ T6958] RIP: 0033:0x7fc359d9165c [ 158.473792][ T6958] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 158.473821][ T6958] RSP: 002b:00007fc35aba2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 158.473851][ T6958] RAX: ffffffffffffffda RBX: 00007fc35aba2fc0 RCX: 00007fc359d9165c [ 158.473871][ T6958] RDX: 0000000000000028 RSI: 00007fc35aba3010 RDI: 0000000000000009 [ 158.473890][ T6958] RBP: 0000000000000000 R08: 00007fc35aba2f14 R09: 000000000000000c [ 158.473909][ T6958] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 158.473926][ T6958] R13: 00007fc35aba2f68 R14: 00007fc35aba3010 R15: 0000000000000000 [ 158.473968][ T6958] [ 159.381990][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 162.112707][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 163.275400][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 163.387521][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.441003][ T7018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.713525][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.738164][ T7018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.559641][ T7040] netlink: 334 bytes leftover after parsing attributes in process `syz.2.230'. [ 164.692699][ T5843] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 166.126148][ T7062] __vm_enough_memory: pid: 7062, comm: syz.3.235, bytes: 4398046511104 not enough memory for the allocation [ 166.852764][ T7082] netlink: 672 bytes leftover after parsing attributes in process `syz.2.237'. [ 167.599966][ T7088] FAULT_INJECTION: forcing a failure. [ 167.599966][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 167.637803][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.1.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.637849][ T7088] Tainted: [L]=SOFTLOCKUP [ 167.637859][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.637875][ T7088] Call Trace: [ 167.637884][ T7088] [ 167.637895][ T7088] dump_stack_lvl+0x16c/0x1f0 [ 167.637946][ T7088] should_fail_ex+0x512/0x640 [ 167.637978][ T7088] ? fs_reclaim_acquire+0xae/0x150 [ 167.638028][ T7088] should_failslab+0xc2/0x120 [ 167.638074][ T7088] kmem_cache_alloc_noprof+0x83/0x770 [ 167.638116][ T7088] ? __pfx_map_id_range_down+0x10/0x10 [ 167.638166][ T7088] ? security_inode_alloc+0x3b/0x2b0 [ 167.638206][ T7088] ? security_inode_alloc+0x3b/0x2b0 [ 167.638234][ T7088] security_inode_alloc+0x3b/0x2b0 [ 167.638268][ T7088] inode_init_always_gfp+0xced/0x1040 [ 167.638319][ T7088] alloc_inode+0x86/0x240 [ 167.638353][ T7088] new_inode+0x22/0x1c0 [ 167.638383][ T7088] ? proc_lookup_de+0x201/0x360 [ 167.638427][ T7088] proc_get_inode+0x1d/0x780 [ 167.638466][ T7088] proc_lookup_de+0x236/0x360 [ 167.638512][ T7088] proc_lookup+0xcf/0x110 [ 167.638551][ T7088] proc_root_lookup+0x3b/0x70 [ 167.638591][ T7088] __lookup_slow+0x251/0x460 [ 167.638626][ T7088] ? __pfx___lookup_slow+0x10/0x10 [ 167.638696][ T7088] lookup_slow+0x50/0x70 [ 167.638730][ T7088] link_path_walk+0x12d8/0x1c70 [ 167.638784][ T7088] path_openat+0x1bd/0x3140 [ 167.638825][ T7088] ? do_syscall_64+0xcd/0xf80 [ 167.638866][ T7088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.638908][ T7088] ? __pfx_path_openat+0x10/0x10 [ 167.638968][ T7088] do_filp_open+0x20b/0x470 [ 167.639013][ T7088] ? __pfx_do_filp_open+0x10/0x10 [ 167.639088][ T7088] ? alloc_fd+0x471/0x7d0 [ 167.639151][ T7088] do_sys_openat2+0x121/0x290 [ 167.639186][ T7088] ? __pfx_do_sys_openat2+0x10/0x10 [ 167.639236][ T7088] __x64_sys_openat+0x174/0x210 [ 167.639271][ T7088] ? __pfx___x64_sys_openat+0x10/0x10 [ 167.639323][ T7088] do_syscall_64+0xcd/0xf80 [ 167.639371][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.639398][ T7088] RIP: 0033:0x7f8efe38f7c9 [ 167.639423][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.639450][ T7088] RSP: 002b:00007f8eff181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.639479][ T7088] RAX: ffffffffffffffda RBX: 00007f8efe5e5fa0 RCX: 00007f8efe38f7c9 [ 167.639498][ T7088] RDX: 0000000000080081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 167.639516][ T7088] RBP: 00007f8efe413f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.639534][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.639551][ T7088] R13: 00007f8efe5e6038 R14: 00007f8efe5e5fa0 R15: 00007ffc66e51598 [ 167.639593][ T7088] [ 168.001394][ T5843] Bluetooth: hci1: unexpected event 0x10 length: 438 > 1 [ 168.002679][ T5841] Bluetooth: hci1: hardware error 0x00 [ 169.130063][ T7128] FAULT_INJECTION: forcing a failure. [ 169.130063][ T7128] name failslab, interval 1, probability 0, space 0, times 0 [ 169.179595][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.1.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.179645][ T7128] Tainted: [L]=SOFTLOCKUP [ 169.179656][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.179673][ T7128] Call Trace: [ 169.179682][ T7128] [ 169.179694][ T7128] dump_stack_lvl+0x16c/0x1f0 [ 169.179747][ T7128] should_fail_ex+0x512/0x640 [ 169.179792][ T7128] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 169.179836][ T7128] should_failslab+0xc2/0x120 [ 169.179885][ T7128] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 169.179923][ T7128] ? unwind_get_return_address+0x59/0xa0 [ 169.179964][ T7128] ? __d_alloc+0x35/0xa80 [ 169.179998][ T7128] ? __d_alloc+0x35/0xa80 [ 169.180021][ T7128] __d_alloc+0x35/0xa80 [ 169.180054][ T7128] d_alloc_parallel+0x111/0x1510 [ 169.180106][ T7128] ? save_trace+0x4e/0x380 [ 169.180149][ T7128] ? __pfx_d_alloc_parallel+0x10/0x10 [ 169.180185][ T7128] ? lockdep_init_map_type+0x5c/0x270 [ 169.180210][ T7128] ? lockdep_init_map_type+0x5c/0x270 [ 169.180249][ T7128] __lookup_slow+0x193/0x460 [ 169.180286][ T7128] ? __pfx___lookup_slow+0x10/0x10 [ 169.180360][ T7128] lookup_slow+0x50/0x70 [ 169.180405][ T7128] link_path_walk+0x12d8/0x1c70 [ 169.180463][ T7128] path_openat+0x1bd/0x3140 [ 169.180518][ T7128] ? rcu_is_watching+0x12/0xc0 [ 169.180563][ T7128] ? trace_kmem_cache_alloc+0x28/0xb0 [ 169.180611][ T7128] ? __pfx_path_openat+0x10/0x10 [ 169.180655][ T7128] ? getname_kernel+0x52/0x370 [ 169.180690][ T7128] ? __asan_memcpy+0x3c/0x60 [ 169.180733][ T7128] do_file_open_root+0x322/0x610 [ 169.180786][ T7128] ? __pfx_do_file_open_root+0x10/0x10 [ 169.180832][ T7128] ? __bfs+0x148/0x290 [ 169.180924][ T7128] file_open_root+0x2a7/0x450 [ 169.180975][ T7128] ? __pfx_file_open_root+0x10/0x10 [ 169.181019][ T7128] ? find_held_lock+0x2b/0x80 [ 169.181062][ T7128] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 169.181114][ T7128] kernel_read_file_from_path_initns+0x189/0x260 [ 169.181161][ T7128] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 169.181202][ T7128] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 169.181240][ T7128] ? _request_firmware+0x4f6/0x14e0 [ 169.181280][ T7128] _request_firmware+0x737/0x14e0 [ 169.181326][ T7128] ? __pfx__request_firmware+0x10/0x10 [ 169.181356][ T7128] ? __pfx_netdev_run_todo+0x10/0x10 [ 169.181422][ T7128] request_firmware+0x35/0x50 [ 169.181455][ T7128] reg_reload_regdb+0x85/0x460 [ 169.181488][ T7128] ? __pfx_reg_reload_regdb+0x10/0x10 [ 169.181523][ T7128] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 169.181561][ T7128] ? nl80211_pre_doit+0x1b0/0xb10 [ 169.181607][ T7128] genl_family_rcv_msg_doit+0x209/0x2f0 [ 169.181662][ T7128] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.181712][ T7128] ? genl_get_cmd+0x194/0x580 [ 169.181779][ T7128] ? bpf_lsm_capable+0x9/0x10 [ 169.181820][ T7128] ? security_capable+0x7e/0x260 [ 169.181880][ T7128] genl_rcv_msg+0x55c/0x800 [ 169.181916][ T7128] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.181946][ T7128] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 169.181982][ T7128] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 169.182010][ T7128] ? __pfx_nl80211_post_doit+0x10/0x10 [ 169.182066][ T7128] netlink_rcv_skb+0x158/0x420 [ 169.182108][ T7128] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.182138][ T7128] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.182199][ T7128] ? netlink_deliver_tap+0x1ae/0xd30 [ 169.182249][ T7128] genl_rcv+0x28/0x40 [ 169.182294][ T7128] netlink_unicast+0x5aa/0x870 [ 169.182346][ T7128] ? __pfx_netlink_unicast+0x10/0x10 [ 169.182428][ T7128] netlink_sendmsg+0x8c8/0xdd0 [ 169.182482][ T7128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.182534][ T7128] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 169.182594][ T7128] ____sys_sendmsg+0xa5d/0xc30 [ 169.182644][ T7128] ? copy_msghdr_from_user+0x10a/0x160 [ 169.182685][ T7128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.182730][ T7128] ? preempt_schedule_thunk+0x16/0x30 [ 169.182770][ T7128] ? try_to_wake_up+0xa67/0x1860 [ 169.182821][ T7128] ___sys_sendmsg+0x134/0x1d0 [ 169.182865][ T7128] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.182905][ T7128] ? futex_private_hash_put+0x160/0x1b0 [ 169.182989][ T7128] __sys_sendmsg+0x16d/0x220 [ 169.183030][ T7128] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.183071][ T7128] ? __x64_sys_futex+0x1e0/0x4c0 [ 169.183135][ T7128] do_syscall_64+0xcd/0xf80 [ 169.183184][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.183215][ T7128] RIP: 0033:0x7f8efe38f7c9 [ 169.183241][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.183270][ T7128] RSP: 002b:00007f8eff181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.183300][ T7128] RAX: ffffffffffffffda RBX: 00007f8efe5e5fa0 RCX: 00007f8efe38f7c9 [ 169.183320][ T7128] RDX: 00000000000000d0 RSI: 0000200000000580 RDI: 0000000000000008 [ 169.183338][ T7128] RBP: 00007f8efe413f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.183356][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.183374][ T7128] R13: 00007f8efe5e6038 R14: 00007f8efe5e5fa0 R15: 00007ffc66e51598 [ 169.183429][ T7128] [ 169.185271][ T7128] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -12 [ 169.945299][ T7128] syz.1.246 (7128) used greatest stack depth: 19688 bytes left [ 170.025519][ T5841] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 170.049887][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 170.069193][ T7136] HfR: entered promiscuous mode [ 170.997419][ T7171] zswap: compressor not available [ 172.278662][ T7203] binder: 7200:7203 ioctl c018620c 0 returned -1 [ 172.610089][ T7215] Invalid ELF header magic: != ELF [ 172.744898][ T7218] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 173.755382][ T30] audit: type=1800 audit(1766747355.110:5): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.270" name="features" dev="configfs" ino=16189 res=0 errno=0 [ 173.970089][ T7241] random: crng reseeded on system resumption [ 174.998334][ T7249] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 176.988720][ T7294] netlink: 330 bytes leftover after parsing attributes in process `syz.1.283'. [ 176.988927][ T7297] netlink: 330 bytes leftover after parsing attributes in process `syz.1.283'. [ 177.039788][ T7297] mac80211_hwsim hwsim2 ›in: renamed from wlan0 (while UP) [ 177.481483][ T7278] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 177.880439][ T7302] can: request_module (can-proto-3) failed. [ 179.461149][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 180.634862][ T5841] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 181.384743][ T7382] FAULT_INJECTION: forcing a failure. [ 181.384743][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 181.394884][ T7385] netlink: 'syz.1.304': attribute type 2 has an invalid length. [ 181.408162][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.3.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.408213][ T7382] Tainted: [L]=SOFTLOCKUP [ 181.408223][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.408241][ T7382] Call Trace: [ 181.408251][ T7382] [ 181.408263][ T7382] dump_stack_lvl+0x16c/0x1f0 [ 181.408324][ T7382] should_fail_ex+0x512/0x640 [ 181.408360][ T7382] ? fs_reclaim_acquire+0xae/0x150 [ 181.408414][ T7382] should_failslab+0xc2/0x120 [ 181.408463][ T7382] kmem_cache_alloc_noprof+0x83/0x770 [ 181.408499][ T7382] ? __pfx_map_id_range_down+0x10/0x10 [ 181.408544][ T7382] ? security_inode_alloc+0x3b/0x2b0 [ 181.408585][ T7382] ? security_inode_alloc+0x3b/0x2b0 [ 181.408615][ T7382] security_inode_alloc+0x3b/0x2b0 [ 181.408649][ T7382] inode_init_always_gfp+0xced/0x1040 [ 181.408703][ T7382] alloc_inode+0x86/0x240 [ 181.408739][ T7382] path_from_stashed+0x25b/0x750 [ 181.408797][ T7382] open_namespace+0x8c/0x250 [ 181.408845][ T7382] ? __pfx_open_namespace+0x10/0x10 [ 181.408896][ T7382] ns_ioctl+0x1087/0x1190 [ 181.408941][ T7382] ? __pfx_ns_ioctl+0x10/0x10 [ 181.408983][ T7382] ? __fget_files+0x20e/0x3c0 [ 181.409029][ T7382] ? __pfx_ns_ioctl+0x10/0x10 [ 181.409075][ T7382] __x64_sys_ioctl+0x18e/0x210 [ 181.409115][ T7382] do_syscall_64+0xcd/0xf80 [ 181.409164][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.409196][ T7382] RIP: 0033:0x7f7a34f8f7c9 [ 181.409222][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.409252][ T7382] RSP: 002b:00007f7a35e6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.409290][ T7382] RAX: ffffffffffffffda RBX: 00007f7a351e6270 RCX: 00007f7a34f8f7c9 [ 181.409310][ T7382] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000005 [ 181.409328][ T7382] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.409345][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.409363][ T7382] R13: 00007f7a351e6308 R14: 00007f7a351e6270 R15: 00007fff24876f08 [ 181.409404][ T7382] [ 181.426358][ T7385] netlink: 5 bytes leftover after parsing attributes in process `syz.1.304'. [ 183.117335][ T7431] futex_wake_op: syz.3.313 tries to shift op by -2048; fix this program [ 183.125940][ T7431] futex_wake_op: syz.3.313 tries to shift op by -2048; fix this program [ 184.150965][ T7458] netlink: 346 bytes leftover after parsing attributes in process `syz.3.319'. [ 184.168487][ T7455] Invalid ELF header magic: != ELF [ 186.261556][ T7505] netlink: 342 bytes leftover after parsing attributes in process `syz.3.329'. [ 186.679503][ T7518] binder: 7511:7518 ioctl 541b 38 returned -22 [ 187.210892][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 187.424776][ T7536] Invalid ELF header magic: != ELF [ 188.621384][ T7580] netlink: 342 bytes leftover after parsing attributes in process `syz.2.349'. [ 189.069820][ T7594] random: crng reseeded on system resumption [ 193.738270][ T7730] kAFS: unparsable volume name [ 195.209143][ T7746] kfence: disabled [ 197.967118][ T7819] Invalid ELF header magic: != ELF [ 199.397107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.411954][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.046195][ T7865] futex_wake_op: syz.1.405 tries to shift op by -2048; fix this program [ 200.115698][ T7865] futex_wake_op: syz.1.405 tries to shift op by -2048; fix this program [ 202.605998][ T7909] netlink: 342 bytes leftover after parsing attributes in process `syz.0.411'. [ 202.678007][ T7909] netlink: 274 bytes leftover after parsing attributes in process `syz.0.411'. [ 203.501029][ T7930] FAULT_INJECTION: forcing a failure. [ 203.501029][ T7930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.606435][ T7930] CPU: 1 UID: 0 PID: 7930 Comm: syz.3.416 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.606484][ T7930] Tainted: [L]=SOFTLOCKUP [ 203.606494][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.606511][ T7930] Call Trace: [ 203.606520][ T7930] [ 203.606531][ T7930] dump_stack_lvl+0x16c/0x1f0 [ 203.606581][ T7930] should_fail_ex+0x512/0x640 [ 203.606620][ T7930] _copy_from_user+0x2e/0xd0 [ 203.606654][ T7930] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 203.606702][ T7930] snd_rawmidi_write+0x26e/0xc10 [ 203.606747][ T7930] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 203.606779][ T7930] ? common_file_perm+0x1b1/0x500 [ 203.606818][ T7930] ? bpf_lsm_file_permission+0x9/0x10 [ 203.606852][ T7930] ? security_file_permission+0x71/0x210 [ 203.606888][ T7930] ? rw_verify_area+0xcf/0x6c0 [ 203.606924][ T7930] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 203.606954][ T7930] vfs_write+0x2a0/0x11d0 [ 203.606998][ T7930] ? __pfx_vfs_write+0x10/0x10 [ 203.607029][ T7930] ? find_held_lock+0x2b/0x80 [ 203.607061][ T7930] ? __fget_files+0x204/0x3c0 [ 203.607100][ T7930] ? __fget_files+0x20e/0x3c0 [ 203.607144][ T7930] ksys_write+0x1f8/0x250 [ 203.607186][ T7930] ? __pfx_ksys_write+0x10/0x10 [ 203.607230][ T7930] do_syscall_64+0xcd/0xf80 [ 203.607271][ T7930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.607295][ T7930] RIP: 0033:0x7f7a34f8f7c9 [ 203.607316][ T7930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.607338][ T7930] RSP: 002b:00007f7a35ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.607360][ T7930] RAX: ffffffffffffffda RBX: 00007f7a351e5fa0 RCX: 00007f7a34f8f7c9 [ 203.607375][ T7930] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000005 [ 203.607390][ T7930] RBP: 00007f7a35013f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.607403][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.607417][ T7930] R13: 00007f7a351e6038 R14: 00007f7a351e5fa0 R15: 00007fff24876f08 [ 203.607449][ T7930] [ 204.941056][ T7963] Invalid ELF header magic: != ELF [ 206.283200][ T7984] random: crng reseeded on system resumption [ 206.525387][ T7992] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 207.882820][ T8021] zram0: detected capacity change from 0 to 8 [ 209.011788][ T5841] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 211.313149][ T8077] bond0: no command found in slaves file - use +ifname or -ifname [ 213.529547][ T8112] __vm_enough_memory: pid: 8112, comm: syz.1.450, bytes: 4398046511104 not enough memory for the allocation [ 213.702311][ T30] audit: type=1800 audit(1766747395.278:6): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.452" name="lu_gp_id" dev="configfs" ino=21759 res=0 errno=0 [ 215.479227][ T8137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.510240][ T8137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.510509][ T8137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.059495][ T8147] netlink: 246 bytes leftover after parsing attributes in process `syz.2.460'. [ 216.575917][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 216.951968][ T8148] bridge0: port 3(syz_tun) entered blocking state [ 216.996348][ T8148] bridge0: port 3(syz_tun) entered disabled state [ 217.049679][ T8148] syz_tun: entered allmulticast mode [ 217.111343][ T8148] syz_tun: entered promiscuous mode [ 217.229824][ T8148] bridge0: port 3(syz_tun) entered blocking state [ 217.236487][ T8148] bridge0: port 3(syz_tun) entered forwarding state [ 217.244967][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.549586][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.549598][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.576780][ T8198] ================================================================== [ 218.576801][ T8198] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 218.576854][ T8198] Write of size 8 at addr ffffc90003d59420 by task syz.1.470/8198 [ 218.576879][ T8198] [ 218.576897][ T8198] CPU: 1 UID: 0 PID: 8198 Comm: syz.1.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.576940][ T8198] Tainted: [L]=SOFTLOCKUP [ 218.576951][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.576970][ T8198] Call Trace: [ 218.576987][ T8198] [ 218.576998][ T8198] dump_stack_lvl+0x116/0x1f0 [ 218.577044][ T8198] print_report+0xcd/0x630 [ 218.577089][ T8198] ? __virt_addr_valid+0x81/0x610 [ 218.577139][ T8198] ? sys_imageblit+0x1a6f/0x1e60 [ 218.577181][ T8198] kasan_report+0xe0/0x110 [ 218.577226][ T8198] ? sys_imageblit+0x1a6f/0x1e60 [ 218.577273][ T8198] sys_imageblit+0x1a6f/0x1e60 [ 218.577321][ T8198] ? __pfx_sys_imageblit+0x10/0x10 [ 218.577365][ T8198] ? find_held_lock+0x2b/0x80 [ 218.577404][ T8198] ? up+0xcb/0x140 [ 218.577429][ T8198] ? do_raw_spin_unlock+0x172/0x230 [ 218.577464][ T8198] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 218.577509][ T8198] ? prb_read_valid+0x78/0xa0 [ 218.577541][ T8198] ? __pfx_prb_read_valid+0x10/0x10 [ 218.577576][ T8198] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 218.577623][ T8198] soft_cursor+0x524/0xa10 [ 218.577662][ T8198] ? fb_get_color_depth+0x120/0x250 [ 218.577696][ T8198] bit_cursor+0xe8c/0x17e0 [ 218.577733][ T8198] ? __pfx_bit_cursor+0x10/0x10 [ 218.577766][ T8198] ? __lock_acquire+0x436/0x2890 [ 218.577795][ T8198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.577836][ T8198] ? get_color+0x1da/0x450 [ 218.577865][ T8198] ? __pfx_bit_cursor+0x10/0x10 [ 218.577897][ T8198] fbcon_cursor+0x437/0x5d0 [ 218.577926][ T8198] ? add_softcursor+0x11/0x290 [ 218.577964][ T8198] set_cursor+0x1db/0x250 [ 218.578008][ T8198] con_write+0x89/0xb0 [ 218.578050][ T8198] n_tty_write+0x434/0x1280 [ 218.578088][ T8198] ? __pfx_n_tty_write+0x10/0x10 [ 218.578117][ T8198] ? __pfx_woken_wake_function+0x10/0x10 [ 218.578151][ T8198] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 218.578193][ T8198] ? __pfx_n_tty_write+0x10/0x10 [ 218.578223][ T8198] file_tty_write.constprop.0+0x503/0x9b0 [ 218.578269][ T8198] redirected_tty_write+0xd4/0x120 [ 218.578312][ T8198] vfs_write+0x7d3/0x11d0 [ 218.578354][ T8198] ? __pfx_redirected_tty_write+0x10/0x10 [ 218.578397][ T8198] ? __pfx_vfs_write+0x10/0x10 [ 218.578437][ T8198] ? find_held_lock+0x2b/0x80 [ 218.578484][ T8198] ksys_write+0x12a/0x250 [ 218.578525][ T8198] ? __pfx_ksys_write+0x10/0x10 [ 218.578571][ T8198] do_syscall_64+0xcd/0xf80 [ 218.578617][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.578647][ T8198] RIP: 0033:0x7f8efe38f7c9 [ 218.578671][ T8198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.578700][ T8198] RSP: 002b:00007f8eff181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.578728][ T8198] RAX: ffffffffffffffda RBX: 00007f8efe5e5fa0 RCX: 00007f8efe38f7c9 [ 218.578747][ T8198] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000004 [ 218.578765][ T8198] RBP: 00007f8efe413f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.578783][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.578800][ T8198] R13: 00007f8efe5e6038 R14: 00007f8efe5e5fa0 R15: 00007ffc66e51598 [ 218.578828][ T8198] [ 218.578838][ T8198] [ 218.578846][ T8198] The buggy address belongs to a vmalloc virtual mapping [ 218.578868][ T8198] Memory state around the buggy address: [ 218.578884][ T8198] ffffc90003d59300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 218.578906][ T8198] ffffc90003d59380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 218.578927][ T8198] >ffffc90003d59400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 218.578943][ T8198] ^ [ 218.578959][ T8198] ffffc90003d59480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 218.578987][ T8198] ffffc90003d59500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 218.579005][ T8198] ================================================================== [ 218.589218][ T8198] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 218.589246][ T8198] CPU: 1 UID: 0 PID: 8198 Comm: syz.1.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.589289][ T8198] Tainted: [L]=SOFTLOCKUP [ 218.589299][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.589317][ T8198] Call Trace: [ 218.589328][ T8198] [ 218.589339][ T8198] dump_stack_lvl+0x3d/0x1f0 [ 218.589389][ T8198] vpanic+0x640/0x6f0 [ 218.589422][ T8198] panic+0xca/0xd0 [ 218.589450][ T8198] ? __pfx_panic+0x10/0x10 [ 218.589480][ T8198] ? sys_imageblit+0x1a6f/0x1e60 [ 218.589525][ T8198] ? preempt_schedule_common+0x44/0xc0 [ 218.589570][ T8198] ? preempt_schedule_thunk+0x16/0x30 [ 218.589602][ T8198] ? check_panic_on_warn+0x1f/0xb0 [ 218.589635][ T8198] check_panic_on_warn+0xab/0xb0 [ 218.589668][ T8198] end_report+0x107/0x160 [ 218.589713][ T8198] kasan_report+0xee/0x110 [ 218.589757][ T8198] ? sys_imageblit+0x1a6f/0x1e60 [ 218.589805][ T8198] sys_imageblit+0x1a6f/0x1e60 [ 218.589854][ T8198] ? __pfx_sys_imageblit+0x10/0x10 [ 218.589897][ T8198] ? find_held_lock+0x2b/0x80 [ 218.589938][ T8198] ? up+0xcb/0x140 [ 218.589964][ T8198] ? do_raw_spin_unlock+0x172/0x230 [ 218.590009][ T8198] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 218.590057][ T8198] ? prb_read_valid+0x78/0xa0 [ 218.590089][ T8198] ? __pfx_prb_read_valid+0x10/0x10 [ 218.590127][ T8198] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 218.590176][ T8198] soft_cursor+0x524/0xa10 [ 218.590217][ T8198] ? fb_get_color_depth+0x120/0x250 [ 218.590254][ T8198] bit_cursor+0xe8c/0x17e0 [ 218.590296][ T8198] ? __pfx_bit_cursor+0x10/0x10 [ 218.590333][ T8198] ? __lock_acquire+0x436/0x2890 [ 218.590368][ T8198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.590416][ T8198] ? get_color+0x1da/0x450 [ 218.590448][ T8198] ? __pfx_bit_cursor+0x10/0x10 [ 218.590482][ T8198] fbcon_cursor+0x437/0x5d0 [ 218.590513][ T8198] ? add_softcursor+0x11/0x290 [ 218.590553][ T8198] set_cursor+0x1db/0x250 [ 218.590590][ T8198] con_write+0x89/0xb0 [ 218.590633][ T8198] n_tty_write+0x434/0x1280 [ 218.590676][ T8198] ? __pfx_n_tty_write+0x10/0x10 [ 218.590708][ T8198] ? __pfx_woken_wake_function+0x10/0x10 [ 218.590743][ T8198] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 218.590780][ T8198] ? __pfx_n_tty_write+0x10/0x10 [ 218.590805][ T8198] file_tty_write.constprop.0+0x503/0x9b0 [ 218.590855][ T8198] redirected_tty_write+0xd4/0x120 [ 218.590899][ T8198] vfs_write+0x7d3/0x11d0 [ 218.590944][ T8198] ? __pfx_redirected_tty_write+0x10/0x10 [ 218.590996][ T8198] ? __pfx_vfs_write+0x10/0x10 [ 218.591032][ T8198] ? find_held_lock+0x2b/0x80 [ 218.591076][ T8198] ksys_write+0x12a/0x250 [ 218.591118][ T8198] ? __pfx_ksys_write+0x10/0x10 [ 218.591166][ T8198] do_syscall_64+0xcd/0xf80 [ 218.591214][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.591246][ T8198] RIP: 0033:0x7f8efe38f7c9 [ 218.591271][ T8198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.591301][ T8198] RSP: 002b:00007f8eff181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.591332][ T8198] RAX: ffffffffffffffda RBX: 00007f8efe5e5fa0 RCX: 00007f8efe38f7c9 [ 218.591354][ T8198] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000004 [ 218.591373][ T8198] RBP: 00007f8efe413f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.591392][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.591410][ T8198] R13: 00007f8efe5e6038 R14: 00007f8efe5e5fa0 R15: 00007ffc66e51598 [ 218.591439][ T8198] [ 218.591731][ T8198] Kernel Offset: disabled