last executing test programs: 10.209540699s ago: executing program 0 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, 0x0, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/kernel/tainted\x00', 0x183102, 0x0) read$auto(r2, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) getxattrat$auto(0xffffffffffffffff, 0x0, 0xeb, 0x0, 0x0, 0xffffffff) write$auto(0x3, 0x0, 0xffd8) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg1\x00', 0x0, 0x0) ioctl$auto_SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f0000000180)="1a4e6dc1e6bfb3474a4170f01401c6876a24d3e6295670c3eed697b16102ba8302a24020121ffa3b23ca92783b20d36a2d8a7d06cb70ede192187435b1df12d9f0998501c5363f011f62cab84b4f5435c23f88e3a083fa10312e26733e70d12e9ad37a46d7ee7cf9a76b4c34000f62fffd7cf2e7de10a5c7806dd72596c6c840f96c24e74f24406ac606fd811cb4ee2e39e3abdf50883023ac7a402166da1e966a3195113521a5b2c64b8bcfdc1246c2f92cf5ce028c9cae04455a178c49154501dfd0822da95c7ae5b8cc7a8c2c1b666961b6b61edfb7b08efeb3f165") r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r8 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000300), 0x4400, 0x0) listen$auto(r8, 0xffff) ioctl$auto(r5, 0x4b6a, r7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="01002abd7000ffdbdf2530f700001800018014000200776c616e3100000000000000885d95f5080006"], 0x34}, 0x1, 0x0, 0x0, 0x20008090}, 0x80000) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x101) 9.881080916s ago: executing program 0 (id=231): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab83, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x8) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4138ae84, 0x0) mmap$auto(0x2, 0x400005, 0x8000000000df, 0x9b72, 0x2, 0x5) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x2000004, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x7, 0x29f, 0x100, 0x2, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x9, 0x3, 0x1, 0xc189, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r2, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20000084) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x2100000, 0x7fffffff, 0x1, 0x0, 0x0, 0x2000000000000e8, 0x8000000000, 0x4, 0xf7ffffffffffffb9, 0x8}) r3 = socket(0xa, 0x5, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x9, 0x0) setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x9c) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000040)) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) readahead$auto(r6, 0x2, 0x10001) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS2(r6, 0xc0884113, &(0x7f0000000180)={0x7, 0x4, 0xb0, 0x400, 0x6, 0x5, 0x69, 0x6, 0x4, 0xce, 0x7d7a, 0xd6, "369827dacef5ec759221386965c32f7af492ce81acff8de47100762d0137cea02c1dc633a786da2f7bb7c5fc9e392ea7b79e43d1ffe3c90b"}) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, r1, 0x8001) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-touch9\x00', 0x280, 0x0) ioctl$auto(r7, 0xc008561c, r7) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 9.044970221s ago: executing program 2 (id=232): r0 = socket(0xa, 0x801, 0x106) unshare$auto(0x40000080) listen$auto(0x3, 0xfffffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x1) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x80002, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbf6, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0xe, 0xdf, 0xeb1, r0, 0x3) fanotify_init$auto(0x5, 0x2000000000002) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) 9.02550769s ago: executing program 0 (id=233): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 8.577783856s ago: executing program 3 (id=235): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, 0x0, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x9b2, 0x400007, 0xdd, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) acct$auto(&(0x7f0000000e40)='/dev/snd/seq\x00') r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd7\x00', 0x109202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c05, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x201000, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x5ffffff, 0xa) setrlimit$auto(0x6, &(0x7f0000000080)={0x8, 0x6f}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sendmmsg$auto(r2, &(0x7f0000000340)={{0x0, 0x539fafba, &(0x7f0000000280)={0x0}, 0x4, &(0x7f00000002c0), 0x2, 0x3}, 0x7}, 0xffff7fff, 0x30) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) 8.033166516s ago: executing program 2 (id=236): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/numa_zonelist_order\x00', 0x202, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22241, 0x154) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000340)='3\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0x127843, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x66) sysfs$auto(0x2, 0x100000000000026, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) sendfile$auto(r3, r3, 0x0, 0x1) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x80000001, 0xd, 0x2, 0x6, 0x0, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x102, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) set_mempolicy_home_node$auto(0x3, 0x80000001, 0xf62, 0x3) 6.77282506s ago: executing program 0 (id=237): read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000003c0)=""/182, 0x2c) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mmap$auto(0xf, 0x4400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x1, 0x42, 0x0, 0x88) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="04040000030000000900000007000000ffffff7f070000000000008003000000ff00000000000000020000000d000000ff0100004000000000000000720000000500000008000000090000000500000001000000080000007f000000008000000700000002000000dc040000070000000a000000000000000200000003000000060600006d00000008000000"]) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xa0666, 0x0) write$auto(r2, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) read$auto(0x3, 0x0, 0x8080) r3 = seccomp$auto(0x2, 0x100000000, 0xfffffffffffffffc) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000200)='+(**\x00', &(0x7f0000000240)="428bed624d5ff2203024d6b1e3781eea6a0b40bd01e2175e6f4144bdb0a8148e70fb0e966276e0f1c18888b9247275c2673516ee0fa9003d12d2ad6ead9f6e41968ce0c9c6a5bdbbb81e9da3f0627297abc2c2918d9131a9d9872abac88e6f455afdecf37328d51c0d6d38c571e725420cfbd78a4b5cc83e34e6a63e2201cab3797943b22f17b69f235d55b265c8c840ff154a75d3de6087e0b59b73b097535ecb82a88747ed516c2d7923eb20b63fe148d968af48dd017057d65912a5b7f0df61548fd9105b65fdbcd7fda2", 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x10101, 0x0) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000040)="804acfe1a2", 0x5) r5 = syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0xffffffffffffffff, 0x8000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_FREESP64(r1, 0x40305825, &(0x7f00000001c0)={0x800, 0x2, 0x8000000000000000, 0x7ff, 0xe, r5}) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000480)={0x2, 0x100000, [{0x2, 0xb, 0xfffffffffffffdc8}, {0x80, 0x4, 0x100}, {0x401, 0x2, 0xae}, {0x4, 0x5, 0x1}]}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x14be02, 0x0) 5.641443323s ago: executing program 2 (id=238): ioctl$auto(0xc8, 0x401054d5, 0xffffffffffffffff) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xd, 0x10003, 0x7, 0x3, 0x7ffffffd, 0xffffffffffffffff, [], {0x6, 0x1ff, 0x8c48, 0x2a2, 0x100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x0, 0x5, 0x3, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0x40d, 0xffffffffffffffff, 0x2b, 0x7ff}, 0x6f4) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r0, r1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r4, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) close_range$auto(0x2, 0x8, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x80000001) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) 5.559474667s ago: executing program 1 (id=239): socket(0x2, 0x80002, 0x73) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0xee01, 0x4, 0xa7, 0x3, 0x8000}, &(0x7f0000000080), &(0x7f0000000180)=0x2, 0xfd0, 0x6, 0x3, 0x4, 0x2, 0x4, 0x0, 0x6, @inferred=r0, @inferred=r0}) keyctl$auto(0x5, 0xfffffffd, 0x101, r4, 0x44f) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x400000000000021, 0xe, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r3, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) close_range$auto(r1, r1, 0x5) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r1) fcntl$getown(r3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={"066d3970917268f77ce910cc79bac67915f7f5439753e9d53263c6412d09fa6a", 0x8, 0x1, 0x80000000, 0xff, 0xffff}) mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) 4.239180888s ago: executing program 2 (id=243): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim5/psample/enable\x00', 0x1e9a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x400c001) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r2, 0x7) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf258c00000006009800010000004b0006009a470bee6393c9306fae7848977ab4058374bcf8b783bd2a2725d5d6b06d49a49acc1df371eda2403a999bf56987d079880cfc3f21aae716a2bb64cebc2bea2e765364c5353de6000c000201b9372ec04b6d68c1070123800800df007f0000012bdad01fb4d905d21e0dcc10fa67abc2f44de83c6cf1d2e67cfb8cc8a04ddc069faad656770dc283f38e3035010000003d444c4e8622cdc0b47b9f35d1bd268acd886a063c677ab758115e4f6902f73fdc69096f5cb062af75ce16d05265c8ec533f3b143194d0f0befbcfe6b5bc18d9c4698936e38bfbc18a1131df304b72ba204362c213f924ec1844ddf8aab3c2f24a3ace0e70753520d9446e11de9c11d38c2e846a1cd6478a32b92e1e417120109b2770a392250886e8f95c7cff61757841923558c0ffd2277fe9f665c37e58dc0fb263fe7ce81a1d1a943046f652e87d976e2ac95ac5f5e4d83376aeb9d7d945aa0400ff0000000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00'/14, 0x2) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) 4.220736881s ago: executing program 1 (id=244): ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x401, 0x38, &(0x7f00000001c0)='-)\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x3b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC0\x00', 0x80, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x8, 0x15f5da06, 0x200006, 0x10, 0x64, 0x80000020, 0x1000, 0xd, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20080000004, 0x80000001, 0x1000000000000bc3, 0x800, 0x4, 0xfc, 0x10001, 0x400000000003, 0x1ae9, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x80000000, 0x1, 0xffffdfffffffff81, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket(0x27, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.401335227s ago: executing program 3 (id=245): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) io_uring_setup$auto(0x5, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr8\x00', 0x80000, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f0000000080)="4235c1") close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000280)='./file1\x00', 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) fstatfs$auto(0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x94) close_range$auto(0x0, 0x5, 0x0) socket(0x1d, 0x2, 0x6) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x61) fcntl$auto(0x8000000000000001, 0x25, 0x8) 2.887526761s ago: executing program 1 (id=246): unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x36200, 0x0) getsockopt$auto_SO_MEMINFO(r0, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x6, 0x8) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0xa5dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20004084) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9850000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400d1}, 0x4000000) ioctl$auto(0x3, 0xae41, r5) ioctl$auto(r0, 0x3, r0) r7 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) write$auto(r7, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x20461, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r8, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0x6, 0x0) 2.730681474s ago: executing program 3 (id=247): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = open$dir(0x0, 0x10000, 0x6) r2 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000200), 0x12, 0x0, 0x4, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(r2, 0x0, 0x400000000000001, 0x102, 0x0, 0x0) ioctl$auto(0x3, 0x20008, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001c80), 0x28441, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r4, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0xfffffffc, 0x0, 0x1, 0x0, 0x3) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) r5 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x6, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, r5, 0x0) getresgid$auto(0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="72010000", @ANYRESHEX=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x810}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyba\x00', 0x121000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) 2.510019026s ago: executing program 0 (id=248): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01032abd7000fcdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyb3\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r3, @ANYBLOB="05000700bd000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000000) r4 = prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x1, 0xe7e, 0x0, 0x11, r4, 0x10) ioctl$auto_MEMGETREGIONCOUNT(r4, 0x80044d07, &(0x7f0000000040)=0x8) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0xc4100, 0x0) r6 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendto$auto(r6, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1b) r7 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto_SO_SNDBUF(r5, 0x928, 0x7, &(0x7f0000000080)='/dev/sda\x00', 0x101) ioctl$auto_BLKTRACESTART(r5, 0x1274, 0x0) ptrace$auto(0x10, r7, 0x4, 0x100000000) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY2(r4, 0x400c6615, &(0x7f00000000c0)={0x3, 0x4, 0x3, 0x7, "6567ab0effbb7765"}) 2.403371878s ago: executing program 2 (id=249): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) r0 = socketpair$auto(0x1, 0x5, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, 0xffffffffffffffff, 0xbf) r1 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1c, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [0x0, 0x0, 0x40000], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x10000002, 0x6, 0x1}, {0xe63c, 0x3, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x7}}) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xffffffffc0403d11, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r2, 0x8000) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000240)="d981d87ec99f3f23acba3c083d4a8e144d24001c93ffa9c39039fb64f5318f66c7b3de8b9cd2b0726a8293b03b209e935cf5aeaa113a73560127c8f38f1a2a25af818443e737fca0d6ca3037e2dc95f4951fd06c8970c9eb33821a2cf3072b7d27556d2843e5341a45db35e4c6336a7d69a9999695a04ca94cd8fad6872e7a6a7f42d26cc0371e341af85bda23aa710c406095d3356bc0195b2a4e814085b4f55a1262c494cf5d8ae9b4", 0xaa) sendfile$auto(0x3, r5, 0x0, 0x400000000006) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) 1.799193212s ago: executing program 0 (id=250): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0xe, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r0, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x5, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) mmap$auto(0x0, 0x8000000000000000, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) socket(0x27, 0x800, 0x84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) msync$auto(0x200000, 0x2000000005, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.412111244s ago: executing program 1 (id=251): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) fsopen$auto(0x0, 0xffffffff) madvise$auto(0x100000001, 0xffffffffdffffffa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2a, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media17\x00', 0x22901, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000f4a0246de7dfe4b1d246813d382dbbdb552dae8fdff7477ca374d26a57280b5e19be0444482d3fd6def7e76297db360ae3def777509cb44671813db702dcafeca1f8fd63cf7dcf8b4dc35ac0aee7f63b7264a46779df", @ANYRES16=0x0, @ANYBLOB="01032cb57100fbdbdf250a0000000500020000000000050002000000000008000a000f0000000600010022000000dafd010002000000000002007d00000008000a00faffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) socket(0x11, 0x5, 0x300) ioctl$auto(0x3, 0x80108907, 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x2, 0x3, 0x15f4da0d, 0x45d0, 0x0, 0x7, 0x80000001, 0x7, 0x1, 0x5, 0x1, 0x1]}, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000020c0), 0x800, 0x0) ioctl$auto_RTC_AIE_OFF(r1, 0x7002, 0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) 699.084186ms ago: executing program 3 (id=252): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0x400005, 0x3, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0xfffffc96) epoll_ctl$auto(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000000c0)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x10000, 0x108, 0x2, 0x94, 0x400000001, 0xfffffffffffffffe]}, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xc0a00, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x60000, 0x0) mq_timedreceive$auto(0xffffffffffffffff, &(0x7f0000000180)='/$!\'\x00', 0x9, &(0x7f00000001c0)=0x2, &(0x7f0000000200)={0xff, 0x3ff}) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) pread64$auto(r2, 0x0, 0x6, 0x40008) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_clone(0x1203000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x8) readv$auto(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0x3e}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) 335.191891ms ago: executing program 1 (id=253): mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) setitimer$auto(0x10000, &(0x7f00000010c0)={{0x4, 0x8}, {0xfffffffffffffffe, 0x8}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x112, 0x80006) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/conf/wlan0/igmpv2_unsolicited_report_interval\x00', 0x0, 0x0) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001240)='/dev/ptyp8\x00', 0x30100, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001300)=ANY=[@ANYRES8=r0, @ANYRES8=r4, @ANYRESHEX=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES16=r3, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001140)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x1) sendfile$auto(r0, r0, 0x0, 0x80000000003) mprotect$auto(0x200000000000, 0x806120, 0x0) landlock_create_ruleset$auto(&(0x7f0000001100)={0x100200daa0, 0x4, 0x9}, 0x8007ffd, 0x0) pwrite64$auto(r0, &(0x7f0000001180)='C#\x00', 0x6, 0xe) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x3, 0x2) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0xa10a) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 0s ago: executing program 2 (id=254): mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000000)={0x0, 0x2}, 0x8000000000000003) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd0/sched/read2_fifo_list\x00', 0x143000, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r3, 0x0, 0xffffff7f, 0x8000000000009) process_vm_writev$auto(0x0, 0x0, 0x1, 0x0, 0x8, 0x0) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x44800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="80d033c0", @ANYRES16=r5, @ANYBLOB="00012abd7000fbdbdf251200000005001f00020000000c001880706c604715a63e2308000e009a0900000800"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000602eb0c13f7cb52eb9ccd19d75471d", @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf251f00000004005f0008006900800000000400930004004401"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4001) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r7 = prctl$auto_PR_SET_MM_END_CODE(0x7, 0x2, 0x0, 0xf, 0x2) ioctl$auto_HPET_IE_OFF(r7, 0x6802, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 78.181259][ T5614] cgroup: Unknown subsys name 'net' [ 78.292205][ T5614] cgroup: Unknown subsys name 'cpuset' [ 78.301504][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.795194][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.641476][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.650286][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.669758][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.680261][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.691154][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.699308][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.705558][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.714816][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.723240][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.730393][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.742869][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.754245][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.763593][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.774866][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.782682][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.791957][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.802787][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.816054][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.823491][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.826238][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.327605][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.334917][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.343425][ T5629] bridge_slave_0: entered allmulticast mode [ 83.350715][ T5629] bridge_slave_0: entered promiscuous mode [ 83.377167][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.384401][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.391648][ T5629] bridge_slave_1: entered allmulticast mode [ 83.398938][ T5629] bridge_slave_1: entered promiscuous mode [ 83.512990][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.520255][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.527421][ T5634] bridge_slave_0: entered allmulticast mode [ 83.535058][ T5634] bridge_slave_0: entered promiscuous mode [ 83.545879][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.555186][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.563037][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.570665][ T5635] bridge_slave_0: entered allmulticast mode [ 83.578302][ T5635] bridge_slave_0: entered promiscuous mode [ 83.585748][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.593233][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.600667][ T5625] bridge_slave_0: entered allmulticast mode [ 83.607845][ T5625] bridge_slave_0: entered promiscuous mode [ 83.615905][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.623232][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.630995][ T5634] bridge_slave_1: entered allmulticast mode [ 83.638253][ T5634] bridge_slave_1: entered promiscuous mode [ 83.647380][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.665869][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.673280][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.680716][ T5635] bridge_slave_1: entered allmulticast mode [ 83.688996][ T5635] bridge_slave_1: entered promiscuous mode [ 83.696039][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.703294][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.710631][ T5625] bridge_slave_1: entered allmulticast mode [ 83.717925][ T5625] bridge_slave_1: entered promiscuous mode [ 83.748544][ T5637] Bluetooth: hci0: command tx timeout [ 83.777468][ T5629] team0: Port device team_slave_0 added [ 83.806876][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.818410][ T5629] team0: Port device team_slave_1 added [ 83.826394][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.837705][ T5637] Bluetooth: hci1: command tx timeout [ 83.839065][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.854714][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.885151][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.896988][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.908585][ T5626] Bluetooth: hci3: command tx timeout [ 83.914737][ T5637] Bluetooth: hci2: command tx timeout [ 83.966079][ T5634] team0: Port device team_slave_0 added [ 83.974297][ T5634] team0: Port device team_slave_1 added [ 83.980908][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.988129][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.014445][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.037702][ T5625] team0: Port device team_slave_0 added [ 84.054470][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.061575][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.088303][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.100937][ T5635] team0: Port device team_slave_0 added [ 84.108973][ T5625] team0: Port device team_slave_1 added [ 84.134767][ T5635] team0: Port device team_slave_1 added [ 84.151968][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.159081][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.185072][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.197509][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.204534][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.235386][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.293325][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.300524][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.327343][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.340091][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.347075][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.373459][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.386152][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.393523][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.419447][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.447158][ T5629] hsr_slave_0: entered promiscuous mode [ 84.453716][ T5629] hsr_slave_1: entered promiscuous mode [ 84.470245][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.477248][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.503392][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.556830][ T5634] hsr_slave_0: entered promiscuous mode [ 84.563384][ T5634] hsr_slave_1: entered promiscuous mode [ 84.569955][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 84.575781][ T5634] Cannot create hsr debugfs directory [ 84.649306][ T5625] hsr_slave_0: entered promiscuous mode [ 84.655660][ T5625] hsr_slave_1: entered promiscuous mode [ 84.662272][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 84.668055][ T5625] Cannot create hsr debugfs directory [ 84.706636][ T5635] hsr_slave_0: entered promiscuous mode [ 84.713007][ T5635] hsr_slave_1: entered promiscuous mode [ 84.719469][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 84.725710][ T5635] Cannot create hsr debugfs directory [ 85.156536][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.171061][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.179452][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.189765][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.200214][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.211605][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.229441][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.239227][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.313522][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.326706][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.335678][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.350893][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.360601][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.373144][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.381038][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.392041][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.500027][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.515529][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.523925][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.533735][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.542267][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.552179][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.560114][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.570560][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.682946][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.692212][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.700477][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.710395][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.719295][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.728966][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.738703][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.748523][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.795517][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.828008][ T5637] Bluetooth: hci0: command tx timeout [ 85.863826][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.889793][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.908800][ T5637] Bluetooth: hci1: command tx timeout [ 85.917800][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.925086][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.954959][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.962158][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.988410][ T5626] Bluetooth: hci3: command tx timeout [ 85.994145][ T5637] Bluetooth: hci2: command tx timeout [ 86.002074][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.029182][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.059050][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.066244][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.088100][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.098650][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.105927][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.129416][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.136659][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.161475][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.168633][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.237139][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.360214][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.393992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.401356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.446334][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.453584][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.350461][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.510295][ T5629] veth0_vlan: entered promiscuous mode [ 87.559889][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.579059][ T5629] veth1_vlan: entered promiscuous mode [ 87.645134][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.752696][ T5629] veth0_macvtap: entered promiscuous mode [ 87.767434][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.798470][ T5629] veth1_macvtap: entered promiscuous mode [ 87.812872][ T5634] veth0_vlan: entered promiscuous mode [ 87.839422][ T5634] veth1_vlan: entered promiscuous mode [ 87.885764][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.893411][ T5625] veth0_vlan: entered promiscuous mode [ 87.919068][ T5637] Bluetooth: hci0: command tx timeout [ 87.919559][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.939376][ T5625] veth1_vlan: entered promiscuous mode [ 87.966224][ T5635] veth0_vlan: entered promiscuous mode [ 87.972855][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.982920][ T1109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.998590][ T5637] Bluetooth: hci1: command tx timeout [ 88.006857][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016978][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.042385][ T5635] veth1_vlan: entered promiscuous mode [ 88.057374][ T5634] veth0_macvtap: entered promiscuous mode [ 88.068114][ T5626] Bluetooth: hci3: command tx timeout [ 88.073580][ T5637] Bluetooth: hci2: command tx timeout [ 88.090689][ T5634] veth1_macvtap: entered promiscuous mode [ 88.158878][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.200004][ T5625] veth0_macvtap: entered promiscuous mode [ 88.215412][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.224985][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.243746][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.245104][ T5625] veth1_macvtap: entered promiscuous mode [ 88.261341][ T5635] veth0_macvtap: entered promiscuous mode [ 88.288746][ T5635] veth1_macvtap: entered promiscuous mode [ 88.295664][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.306313][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.328045][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.337521][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.363961][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.372241][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.405640][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.433107][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.453361][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.455430][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.495284][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.512510][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.528395][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.539440][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.561069][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.583892][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.624930][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.645735][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.686060][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.725682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.735304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.764629][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.773892][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.835438][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.859662][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.927715][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.948461][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.958508][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.970161][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.079767][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.109308][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.399846][ T5789] Zero length message leads to an empty skb [ 89.990290][ T5637] Bluetooth: hci0: command tx timeout [ 90.097773][ T5637] Bluetooth: hci1: command tx timeout [ 90.109552][ T5805] PID 5805 killed due to inadequate hugepage pool [ 90.148141][ T5637] Bluetooth: hci2: command tx timeout [ 90.149225][ T5626] Bluetooth: hci3: command tx timeout [ 92.006548][ T9] cfg80211: failed to load regulatory.db [ 92.025296][ T5825] bridge0: port 3(vlan1) entered blocking state [ 92.057301][ T5825] bridge0: port 3(vlan1) entered disabled state [ 92.099047][ T5826] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.148575][ T5825] vlan1: entered allmulticast mode [ 92.196274][ T5825] veth0_vlan: entered allmulticast mode [ 92.241159][ T5825] vlan1: entered promiscuous mode [ 92.268957][ T5825] bridge0: port 3(vlan1) entered blocking state [ 92.276121][ T5825] bridge0: port 3(vlan1) entered forwarding state [ 92.786082][ T5787] kexec: Could not allocate control_code_buffer [ 94.574902][ T5847] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 95.470314][ T29] audit: type=1804 audit(1783898829.157:2): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.11" name="/newroot/3/file0" dev="tmpfs" ino=34 res=1 errno=0 [ 96.052760][ T5871] FAULT_INJECTION: forcing a failure. [ 96.052760][ T5871] name fail_futex, interval 1, probability 0, space 0, times 1 [ 96.153471][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT(full) [ 96.153507][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.153531][ T5871] Call Trace: [ 96.153541][ T5871] [ 96.153551][ T5871] dump_stack_lvl+0x100/0x190 [ 96.153576][ T5871] should_fail_ex.cold+0x5/0xa [ 96.153595][ T5871] get_futex_key+0x1d2/0x14f0 [ 96.153621][ T5871] ? __pfx_get_futex_key+0x10/0x10 [ 96.153641][ T5871] ? __pfx___resched_curr+0x10/0x10 [ 96.153671][ T5871] futex_wait_setup+0x91/0x540 [ 96.153694][ T5871] __futex_wait+0x19f/0x300 [ 96.153712][ T5871] ? __pfx___futex_wait+0x10/0x10 [ 96.153728][ T5871] ? __pfx_try_to_wake_up+0x10/0x10 [ 96.153742][ T5871] ? futex_hash+0x311/0x400 [ 96.153764][ T5871] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.153785][ T5871] ? find_held_lock+0x2b/0x80 [ 96.153801][ T5871] ? futex_wake+0x4ea/0x5e0 [ 96.153822][ T5871] futex_wait+0xe6/0x370 [ 96.153846][ T5871] ? __pfx_futex_wait+0x10/0x10 [ 96.153875][ T5871] do_futex+0x265/0x440 [ 96.153890][ T5871] ? __pfx_do_futex+0x10/0x10 [ 96.153905][ T5871] ? kasan_quarantine_put+0x104/0x240 [ 96.153922][ T5871] ? lockdep_hardirqs_on+0x78/0x100 [ 96.153948][ T5871] __x64_sys_futex+0x34f/0x4d0 [ 96.153965][ T5871] ? __pfx___x64_sys_futex+0x10/0x10 [ 96.153981][ T5871] ? __pfx___x64_sys_mount+0x10/0x10 [ 96.154004][ T5871] do_syscall_64+0x115/0x840 [ 96.154017][ T5871] ? clear_bhb_loop+0x40/0x90 [ 96.154035][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.154050][ T5871] RIP: 0033:0x7fb82979de59 [ 96.154068][ T5871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.154086][ T5871] RSP: 002b:00007fb82a6aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.154102][ T5871] RAX: ffffffffffffffda RBX: 00007fb829a25fa8 RCX: 00007fb82979de59 [ 96.154112][ T5871] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb829a25fa8 [ 96.154121][ T5871] RBP: 00007fb829a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 96.154130][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.154139][ T5871] R13: 00007fb829a26038 R14: 00007ffca28055e0 R15: 00007ffca28056c8 [ 96.154159][ T5871] [ 96.634108][ T5881] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.373736][ T5929] netlink: 330 bytes leftover after parsing attributes in process `syz.2.24'. [ 99.404791][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.571444][ T5968] process 'syz.0.31' launched ':,' with NULL argv: empty string added [ 103.931165][ T5982] FAULT_INJECTION: forcing a failure. [ 103.931165][ T5982] name failslab, interval 1, probability 0, space 0, times 1 [ 103.958210][ T5626] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 103.993315][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(full) [ 103.993355][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.993372][ T5982] Call Trace: [ 103.993381][ T5982] [ 103.993388][ T5982] dump_stack_lvl+0x100/0x190 [ 103.993411][ T5982] should_fail_ex.cold+0x5/0xa [ 103.993429][ T5982] should_failslab+0xc2/0x120 [ 103.993448][ T5982] __kmalloc_cache_noprof+0x91/0x6c0 [ 103.993472][ T5982] ? drm_atomic_commit_alloc+0xb8/0x120 [ 103.993494][ T5982] drm_atomic_commit_alloc+0xb8/0x120 [ 103.993511][ T5982] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 103.993535][ T5982] ? trace_contention_end+0x126/0x160 [ 103.993559][ T5982] ? __mutex_lock+0x26d/0x1bd0 [ 103.993574][ T5982] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 103.993595][ T5982] ? drm_master_internal_acquire+0x21/0x80 [ 103.993634][ T5982] drm_client_modeset_commit_locked+0x14d/0x580 [ 103.993658][ T5982] drm_client_modeset_commit+0x4f/0x80 [ 103.993679][ T5982] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 103.993700][ T5982] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 103.993721][ T5982] drm_fbdev_client_restore+0x1b/0x30 [ 103.993737][ T5982] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 103.993751][ T5982] drm_client_dev_restore+0x205/0x2a0 [ 103.993775][ T5982] drm_release+0x2c6/0x360 [ 103.993793][ T5982] ? __pfx_drm_release+0x10/0x10 [ 103.993810][ T5982] __fput+0x3ff/0xb50 [ 103.993831][ T5982] task_work_run+0x150/0x240 [ 103.993852][ T5982] ? __pfx_task_work_run+0x10/0x10 [ 103.993881][ T5982] exit_to_user_mode_loop+0x1d8/0x6f0 [ 103.993919][ T5982] ? rcu_is_watching+0x12/0xc0 [ 103.993950][ T5982] do_syscall_64+0x652/0x840 [ 103.993974][ T5982] ? clear_bhb_loop+0x40/0x90 [ 103.994007][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.994035][ T5982] RIP: 0033:0x7f7837d9de59 [ 103.994058][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.994085][ T5982] RSP: 002b:00007f7838cdf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 103.994106][ T5982] RAX: 0000000000000000 RBX: 00007f7838025fa0 RCX: 00007f7837d9de59 [ 103.994116][ T5982] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 103.994125][ T5982] RBP: 00007f7837e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 103.994150][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.994159][ T5982] R13: 00007f7838026038 R14: 00007f7838025fa0 R15: 00007ffff41714d8 [ 103.994181][ T5982] [ 104.435371][ T5626] Bluetooth: hci2: unexpected event 0x05 length: 6 > 4 [ 104.678423][ T5994] FAULT_INJECTION: forcing a failure. [ 104.678423][ T5994] name failslab, interval 1, probability 0, space 0, times 0 [ 104.699646][ T5994] CPU: 0 UID: 0 PID: 5994 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(full) [ 104.699682][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.699698][ T5994] Call Trace: [ 104.699707][ T5994] [ 104.699717][ T5994] dump_stack_lvl+0x100/0x190 [ 104.699753][ T5994] should_fail_ex.cold+0x5/0xa [ 104.699784][ T5994] should_failslab+0xc2/0x120 [ 104.699820][ T5994] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 104.699854][ T5994] ? __d_alloc+0x35/0xa50 [ 104.699888][ T5994] __d_alloc+0x35/0xa50 [ 104.699923][ T5994] d_alloc+0x4a/0x1e0 [ 104.699950][ T5994] lookup_one_qstr_excl+0x171/0x250 [ 104.699986][ T5994] start_dirop+0x59/0xb0 [ 104.700024][ T5994] simple_start_creating+0xf9/0x110 [ 104.700068][ T5994] ? __pfx_simple_start_creating+0x10/0x10 [ 104.700119][ T5994] ? mntput+0x70/0xa0 [ 104.700158][ T5994] ? simple_pin_fs+0xa3/0x190 [ 104.700196][ T5994] debugfs_start_creating.part.0+0x82/0x170 [ 104.700235][ T5994] debugfs_create_symlink+0x7f/0x220 [ 104.700274][ T5994] ref_tracker_dir_symlink+0x257/0x3b0 [ 104.700318][ T5994] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 104.700413][ T5994] ? __pfx_net_ns_net_init+0x10/0x10 [ 104.700444][ T5994] net_ns_net_init+0x7e/0x120 [ 104.700476][ T5994] ops_init+0x1e2/0x5f0 [ 104.700509][ T5994] setup_net+0x118/0x3a0 [ 104.700544][ T5994] ? __pfx_setup_net+0x10/0x10 [ 104.700579][ T5994] ? mutex_init_lockdep+0xf1/0x120 [ 104.700629][ T5994] copy_net_ns+0x46f/0x7c0 [ 104.700671][ T5994] create_new_namespaces+0x3ea/0xac0 [ 104.700726][ T5994] unshare_nsproxy_namespaces+0xf2/0x220 [ 104.700771][ T5994] ksys_unshare+0x438/0xab0 [ 104.700801][ T5994] ? __pfx_ksys_unshare+0x10/0x10 [ 104.700843][ T5994] __x64_sys_unshare+0x31/0x40 [ 104.700875][ T5994] do_syscall_64+0x115/0x840 [ 104.700897][ T5994] ? clear_bhb_loop+0x40/0x90 [ 104.700933][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.700962][ T5994] RIP: 0033:0x7f9b7c59de59 [ 104.700988][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.701014][ T5994] RSP: 002b:00007f9b7d402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 104.701044][ T5994] RAX: ffffffffffffffda RBX: 00007f9b7c825fa0 RCX: 00007f9b7c59de59 [ 104.701061][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 104.701076][ T5994] RBP: 00007f9b7c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 104.701092][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.701116][ T5994] R13: 00007f9b7c826038 R14: 00007f9b7c825fa0 R15: 00007ffe43eb5028 [ 104.701149][ T5994] [ 105.110061][ T6000] vivid-007: ================= START STATUS ================= [ 105.213602][ T6000] vivid-007: Enable Output Cropping: true grabbed [ 105.305583][ T6000] vivid-007: Enable Output Composing: true grabbed [ 105.342446][ T6000] vivid-007: Enable Output Scaler: true grabbed [ 105.390432][ T6000] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 105.464424][ T6000] vivid-007: Transmit Mode: HDMI grabbed [ 105.485433][ T6000] vivid-007: Hotplug Present: 0x00000000 [ 105.523138][ T6000] vivid-007: RxSense Present: 0x00000000 [ 105.581431][ T6000] vivid-007: EDID Present: 0x00000000 [ 105.624317][ T6000] vivid-007: ================== END STATUS ================== [ 105.989938][ T5637] Bluetooth: hci2: command 0x2016 tx timeout [ 106.282150][ T6013] hub 1-0:1.0: USB hub found [ 106.289084][ T6013] hub 1-0:1.0: 1 port detected [ 109.415008][ T6042] Process accounting resumed [ 110.255760][ T6058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.983173][ T6058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.207269][ T6058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.471186][ T6058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.256561][ T6115] capability: warning: `syz.1.55' uses 32-bit capabilities (legacy support in use) [ 112.875958][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 112.904955][ T6132] netlink: 'syz.2.58': attribute type 2 has an invalid length. [ 112.934968][ T6132] netlink: 'syz.2.58': attribute type 3 has an invalid length. [ 112.965188][ T6132] netlink: 51425 bytes leftover after parsing attributes in process `syz.2.58'. [ 113.011840][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 114.220862][ T6138] Process accounting resumed [ 114.674923][ T6158] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6158] [ 114.801323][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'. [ 114.834806][ T6158] veth0_macvtap: left promiscuous mode [ 114.852028][ T6158] macvtap0: entered promiscuous mode [ 114.866359][ T6158] macvtap0: entered allmulticast mode [ 115.381435][ T6167] FAULT_INJECTION: forcing a failure. [ 115.381435][ T6167] name failslab, interval 1, probability 0, space 0, times 0 [ 115.432046][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 115.432086][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.432101][ T6167] Call Trace: [ 115.432110][ T6167] [ 115.432120][ T6167] dump_stack_lvl+0x100/0x190 [ 115.432178][ T6167] should_fail_ex.cold+0x5/0xa [ 115.432212][ T6167] should_failslab+0xc2/0x120 [ 115.432247][ T6167] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 115.432280][ T6167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.432318][ T6167] ? alloc_unbound_pwq+0x3ff/0xdd0 [ 115.432369][ T6167] alloc_unbound_pwq+0x3ff/0xdd0 [ 115.432422][ T6167] apply_wqattrs_prepare+0x3aa/0xbb0 [ 115.432479][ T6167] apply_workqueue_attrs_locked+0x64/0xe0 [ 115.432525][ T6167] __alloc_workqueue+0xf55/0x1940 [ 115.432567][ T6167] alloc_workqueue_noprof+0xc7/0x130 [ 115.432600][ T6167] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 115.432640][ T6167] ? __pfx___debug_object_init+0x10/0x10 [ 115.432689][ T6167] nci_register_device+0x511/0xb80 [ 115.432733][ T6167] ? __pfx_nci_register_device+0x10/0x10 [ 115.432777][ T6167] ? lockdep_init_map_type+0x5c/0x250 [ 115.432827][ T6167] virtual_ncidev_open+0x141/0x220 [ 115.432868][ T6167] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 115.432908][ T6167] misc_open+0x26d/0x450 [ 115.432953][ T6167] ? __pfx_misc_open+0x10/0x10 [ 115.432993][ T6167] chrdev_open+0x234/0x6a0 [ 115.433036][ T6167] ? __pfx_chrdev_open+0x10/0x10 [ 115.433081][ T6167] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 115.433113][ T6167] do_dentry_open+0x6ab/0x14d0 [ 115.433151][ T6167] ? __pfx_chrdev_open+0x10/0x10 [ 115.433215][ T6167] vfs_open+0x82/0x3f0 [ 115.433253][ T6167] path_openat+0x2873/0x4280 [ 115.433314][ T6167] ? __pfx_path_openat+0x10/0x10 [ 115.433368][ T6167] do_file_open+0x20e/0x430 [ 115.433415][ T6167] ? __pfx_do_file_open+0x10/0x10 [ 115.433499][ T6167] ? alloc_fd+0x471/0x7a0 [ 115.433547][ T6167] ? do_getname+0x191/0x390 [ 115.433584][ T6167] do_sys_openat2+0x10f/0x1e0 [ 115.433619][ T6167] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.433653][ T6167] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.433694][ T6167] __x64_sys_openat+0x12d/0x210 [ 115.433724][ T6167] ? __pfx___x64_sys_openat+0x10/0x10 [ 115.433765][ T6167] do_syscall_64+0x115/0x840 [ 115.433785][ T6167] ? clear_bhb_loop+0x40/0x90 [ 115.433814][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.433838][ T6167] RIP: 0033:0x7f6efef9de59 [ 115.433866][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.433888][ T6167] RSP: 002b:00007f6effee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.433912][ T6167] RAX: ffffffffffffffda RBX: 00007f6eff225fa0 RCX: 00007f6efef9de59 [ 115.433928][ T6167] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 115.433943][ T6167] RBP: 00007f6eff033e6f R08: 0000000000000000 R09: 0000000000000000 [ 115.433958][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.433972][ T6167] R13: 00007f6eff226038 R14: 00007f6eff225fa0 R15: 00007ffebfadb1d8 [ 115.434004][ T6167] [ 116.280773][ T29] audit: type=1800 audit(1783898849.957:3): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.66" name="dbroot" dev="configfs" ino=9696 res=0 errno=0 [ 116.433791][ T6180] mmap: syz.1.66 (6180) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.458542][ T6182] random: crng reseeded on system resumption [ 117.790547][ T6202] smpboot: CPU 1 is now offline [ 119.800238][ T6215] syz.2.70 (6215) used greatest stack depth: 19768 bytes left [ 120.481897][ T6242] netlink: zone id is out of range [ 120.509686][ T6242] netlink: zone id is out of range [ 120.576708][ T6242] netlink: zone id is out of range [ 120.630749][ T6242] netlink: zone id is out of range [ 120.681346][ T6242] netlink: zone id is out of range [ 120.730534][ T6242] netlink: zone id is out of range [ 120.784278][ T6242] netlink: zone id is out of range [ 120.831641][ T6242] netlink: zone id is out of range [ 120.880706][ T6242] netlink: zone id is out of range [ 120.921195][ T6242] netlink: zone id is out of range [ 121.756305][ T6261] zram: Added device: zram1 [ 122.219163][ T6272] FAULT_INJECTION: forcing a failure. [ 122.219163][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 122.307243][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(full) [ 122.307266][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.307276][ T6272] Call Trace: [ 122.307281][ T6272] [ 122.307288][ T6272] dump_stack_lvl+0x100/0x190 [ 122.307311][ T6272] should_fail_ex.cold+0x5/0xa [ 122.307330][ T6272] should_failslab+0xc2/0x120 [ 122.307350][ T6272] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 122.307373][ T6272] ? mem_cgroup_css_alloc+0xafa/0x1cc0 [ 122.307397][ T6272] mem_cgroup_css_alloc+0xafa/0x1cc0 [ 122.307421][ T6272] cgroup_apply_control_enable+0x602/0xdd0 [ 122.307448][ T6272] cgroup_mkdir+0x57f/0x1330 [ 122.307470][ T6272] ? __pfx_cgroup_mkdir+0x10/0x10 [ 122.307490][ T6272] kernfs_iop_mkdir+0x111/0x190 [ 122.307512][ T6272] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 122.307532][ T6272] vfs_mkdir+0x361/0x850 [ 122.307553][ T6272] filename_mkdirat+0x48b/0x5e0 [ 122.307570][ T6272] ? __pfx_filename_mkdirat+0x10/0x10 [ 122.307584][ T6272] ? strncpy_from_user+0x19d/0x2d0 [ 122.307605][ T6272] ? do_getname+0x191/0x390 [ 122.307623][ T6272] __x64_sys_mkdir+0x6b/0x90 [ 122.307638][ T6272] do_syscall_64+0x115/0x840 [ 122.307651][ T6272] ? clear_bhb_loop+0x40/0x90 [ 122.307669][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.307685][ T6272] RIP: 0033:0x7f9b7c59de59 [ 122.307698][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.307712][ T6272] RSP: 002b:00007f9b7d402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 122.307727][ T6272] RAX: ffffffffffffffda RBX: 00007f9b7c825fa0 RCX: 00007f9b7c59de59 [ 122.307737][ T6272] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 122.307746][ T6272] RBP: 00007f9b7c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 122.307754][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.307762][ T6272] R13: 00007f9b7c826038 R14: 00007f9b7c825fa0 R15: 00007ffe43eb5028 [ 122.307782][ T6272] [ 122.510287][ T29] audit: type=1800 audit(1783898856.201:4): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.84" name="lu_gp_id" dev="configfs" ino=10146 res=0 errno=0 [ 124.731565][ T6298] vivid-007: ================= START STATUS ================= [ 124.768920][ T6298] vivid-007: Generate PTS: true [ 124.814086][ T6298] vivid-007: Generate SCR: true [ 124.866055][ T6298] tpg source WxH: 320x240 (Y'CbCr) [ 124.912668][ T6298] tpg field: 1 [ 124.932268][ T6298] tpg crop: (0,0)/320x240 [ 124.958526][ T6298] tpg compose: (0,0)/320x240 [ 124.975450][ T6298] tpg colorspace: 8 [ 125.003572][ T6298] tpg transfer function: 0/0 [ 125.062684][ T6298] tpg Y'CbCr encoding: 0/0 [ 125.096790][ T6298] tpg quantization: 0/0 [ 125.120766][ T6298] tpg RGB range: 0/2 [ 125.142047][ T6298] vivid-007: ================== END STATUS ================== [ 127.524410][ T6351] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.536855][ T29] audit: type=1800 audit(4294967330.791:5): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.102" name="dbroot" dev="configfs" ino=11454 res=0 errno=0 [ 127.665273][ T6341] zswap: compressor 000 not available [ 131.821607][ T6407] random: crng reseeded on system resumption [ 132.136915][ T6410] hub 1-0:1.0: USB hub found [ 132.244177][ T6410] hub 1-0:1.0: 1 port detected [ 132.940150][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952303][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.430389][ T6442] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 137.250335][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.323648][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.762888][ T6478] FAULT_INJECTION: forcing a failure. [ 138.762888][ T6478] name failslab, interval 1, probability 0, space 0, times 0 [ 139.072253][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.2.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.072281][ T6478] Tainted: [L]=SOFTLOCKUP [ 139.072287][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.072296][ T6478] Call Trace: [ 139.072301][ T6478] [ 139.072308][ T6478] dump_stack_lvl+0x100/0x190 [ 139.072331][ T6478] should_fail_ex.cold+0x5/0xa [ 139.072350][ T6478] should_failslab+0xc2/0x120 [ 139.072369][ T6478] __kmalloc_noprof+0xfc/0x820 [ 139.072386][ T6478] ? trace_kmem_cache_alloc+0xdd/0x100 [ 139.072406][ T6478] ? lsm_blob_alloc+0x68/0x90 [ 139.072430][ T6478] lsm_blob_alloc+0x68/0x90 [ 139.072449][ T6478] security_prepare_creds+0x2d/0x290 [ 139.072469][ T6478] prepare_creds+0x5d6/0x950 [ 139.072500][ T6478] prepare_exec_creds+0x10/0x240 [ 139.072521][ T6478] bprm_execve+0xcc/0x1730 [ 139.072545][ T6478] ? alloc_bprm+0x548/0x9d0 [ 139.072564][ T6478] ? alloc_bprm+0x548/0x9d0 [ 139.072585][ T6478] ? __pfx_bprm_execve+0x10/0x10 [ 139.072604][ T6478] ? copy_string_kernel+0x339/0x3f0 [ 139.072627][ T6478] do_execveat_common.isra.0+0x4a5/0x580 [ 139.072652][ T6478] __x64_sys_execveat+0xdf/0x130 [ 139.072674][ T6478] do_syscall_64+0x115/0x840 [ 139.072688][ T6478] ? clear_bhb_loop+0x40/0x90 [ 139.072706][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.072724][ T6478] RIP: 0033:0x7f7837d9de59 [ 139.072738][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.072751][ T6478] RSP: 002b:00007f7838cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 139.072766][ T6478] RAX: ffffffffffffffda RBX: 00007f7838025fa0 RCX: 00007f7837d9de59 [ 139.072776][ T6478] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 139.072785][ T6478] RBP: 00007f7837e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 139.072793][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.072802][ T6478] R13: 00007f7838026038 R14: 00007f7838025fa0 R15: 00007ffff41714d8 [ 139.072821][ T6478] [ 139.289615][ T6486] net_ratelimit: 30 callbacks suppressed [ 139.289635][ T6486] openvswitch: netlink: Message has 4 unknown bytes. [ 140.556345][ T6497] Process accounting paused [ 143.489568][ T6549] bonding: unable to delete non-existent ) [ 143.692444][ T29] audit: type=1804 audit(4294967346.949:6): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.137" name="/newroot/29/file0" dev="tmpfs" ino=175 res=1 errno=0 [ 143.858261][ T29] audit: type=1804 audit(4294967346.979:7): pid=6536 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.137" name="/newroot/29/file0" dev="tmpfs" ino=175 res=1 errno=0 [ 144.860961][ T6557] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 145.150749][ T6560] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 145.205758][ T6560] netlink: 33 bytes leftover after parsing attributes in process `syz.0.141'. [ 145.229303][ T6540] Process accounting paused [ 145.727240][ T6570] FAULT_INJECTION: forcing a failure. [ 145.727240][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 145.727278][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.3.142 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.727301][ T6570] Tainted: [L]=SOFTLOCKUP [ 145.727306][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.727316][ T6570] Call Trace: [ 145.727321][ T6570] [ 145.727327][ T6570] dump_stack_lvl+0x100/0x190 [ 145.727352][ T6570] should_fail_ex.cold+0x5/0xa [ 145.727370][ T6570] should_failslab+0xc2/0x120 [ 145.727390][ T6570] __kmalloc_cache_noprof+0x91/0x6c0 [ 145.727415][ T6570] ? device_create_groups_vargs+0x8a/0x270 [ 145.727441][ T6570] device_create_groups_vargs+0x8a/0x270 [ 145.727464][ T6570] device_create+0xed/0x130 [ 145.727486][ T6570] ? __pfx_device_create+0x10/0x10 [ 145.727505][ T6570] ? do_raw_spin_lock+0x128/0x260 [ 145.727521][ T6570] ? is_console_locked+0x9/0x20 [ 145.727540][ T6570] ? con_is_visible+0x65/0x150 [ 145.727561][ T6570] ? csi_J+0x57e/0xad0 [ 145.727581][ T6570] vcs_make_sysfs+0x55/0x80 [ 145.727610][ T6570] vc_allocate+0x539/0x880 [ 145.727628][ T6570] ? __pfx_vc_allocate+0x10/0x10 [ 145.727651][ T6570] con_install+0xa1/0x620 [ 145.727669][ T6570] ? __pfx_con_install+0x10/0x10 [ 145.727690][ T6570] ? __pfx_con_install+0x10/0x10 [ 145.727708][ T6570] tty_init_dev.part.0+0x9e/0x470 [ 145.727729][ T6570] tty_open+0xa63/0xfa0 [ 145.727752][ T6570] ? __pfx_tty_open+0x10/0x10 [ 145.727770][ T6570] ? chrdev_open+0x589/0x6a0 [ 145.727792][ T6570] ? chrdev_open+0x589/0x6a0 [ 145.727817][ T6570] ? __pfx_tty_open+0x10/0x10 [ 145.727834][ T6570] chrdev_open+0x234/0x6a0 [ 145.727857][ T6570] ? __pfx_chrdev_open+0x10/0x10 [ 145.727880][ T6570] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 145.727899][ T6570] do_dentry_open+0x6ab/0x14d0 [ 145.727921][ T6570] ? __pfx_chrdev_open+0x10/0x10 [ 145.727947][ T6570] vfs_open+0x82/0x3f0 [ 145.727966][ T6570] path_openat+0x2873/0x4280 [ 145.727997][ T6570] ? __pfx_path_openat+0x10/0x10 [ 145.728025][ T6570] do_file_open+0x20e/0x430 [ 145.728048][ T6570] ? __pfx_do_file_open+0x10/0x10 [ 145.728084][ T6570] ? alloc_fd+0x471/0x7a0 [ 145.728107][ T6570] ? do_getname+0x191/0x390 [ 145.728125][ T6570] do_sys_openat2+0x10f/0x1e0 [ 145.728143][ T6570] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.728167][ T6570] __x64_sys_openat+0x12d/0x210 [ 145.728185][ T6570] ? __pfx___x64_sys_openat+0x10/0x10 [ 145.728211][ T6570] do_syscall_64+0x115/0x840 [ 145.728224][ T6570] ? clear_bhb_loop+0x40/0x90 [ 145.728243][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.728258][ T6570] RIP: 0033:0x7fb82979de59 [ 145.728272][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.728286][ T6570] RSP: 002b:00007fb82a668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.728300][ T6570] RAX: ffffffffffffffda RBX: 00007fb829a26180 RCX: 00007fb82979de59 [ 145.728309][ T6570] RDX: 0000000000000201 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 145.728319][ T6570] RBP: 00007fb829833e6f R08: 0000000000000000 R09: 0000000000000000 [ 145.728327][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.728336][ T6570] R13: 00007fb829a26218 R14: 00007fb829a26180 R15: 00007ffca28056c8 [ 145.728357][ T6570] [ 146.353105][ T6586] nbd: must specify at least one socket [ 147.944757][ T5637] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 148.189068][ T6606] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by ""[6606] [ 148.451131][ T29] audit: type=1400 audit(4294967351.712:8): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6604 comm="syz.0.148" [ 148.859449][ T6607] hub 1-0:1.0: USB hub found [ 148.956842][ T6607] hub 1-0:1.0: 1 port detected [ 152.743264][ T6657] netlink: 338 bytes leftover after parsing attributes in process `syz.3.156'. [ 153.173618][ T6663] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.220350][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 153.789977][ T6672] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.873570][ T6672] FAULT_INJECTION: forcing a failure. [ 153.873570][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 153.982915][ T6672] CPU: 0 UID: 0 PID: 6672 Comm: syz.0.160 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.982943][ T6672] Tainted: [L]=SOFTLOCKUP [ 153.982948][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.982957][ T6672] Call Trace: [ 153.982963][ T6672] [ 153.982970][ T6672] dump_stack_lvl+0x100/0x190 [ 153.982993][ T6672] should_fail_ex.cold+0x5/0xa [ 153.983011][ T6672] should_failslab+0xc2/0x120 [ 153.983030][ T6672] __kmalloc_noprof+0xfc/0x820 [ 153.983048][ T6672] ? process_preds+0x4a2/0x1d90 [ 153.983071][ T6672] process_preds+0x4a2/0x1d90 [ 153.983097][ T6672] apply_subsystem_event_filter+0x4a0/0x17a0 [ 153.983123][ T6672] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 153.983147][ T6672] ? _copy_from_user+0x59/0xd0 [ 153.983169][ T6672] subsystem_filter_write+0x95/0x120 [ 153.983190][ T6672] vfs_write+0x2aa/0x1050 [ 153.983213][ T6672] ? __pfx_subsystem_filter_write+0x10/0x10 [ 153.983235][ T6672] ? __pfx_vfs_write+0x10/0x10 [ 153.983255][ T6672] ? __fget_files+0x215/0x3d0 [ 153.983280][ T6672] ? __fget_files+0x21f/0x3d0 [ 153.983306][ T6672] ksys_write+0x12a/0x250 [ 153.983326][ T6672] ? __pfx_ksys_write+0x10/0x10 [ 153.983353][ T6672] do_syscall_64+0x115/0x840 [ 153.983367][ T6672] ? clear_bhb_loop+0x40/0x90 [ 153.983385][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.983400][ T6672] RIP: 0033:0x7f6efef9de59 [ 153.983414][ T6672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.983428][ T6672] RSP: 002b:00007f6effee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.983443][ T6672] RAX: ffffffffffffffda RBX: 00007f6eff225fa0 RCX: 00007f6efef9de59 [ 153.983453][ T6672] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000006 [ 153.983463][ T6672] RBP: 00007f6eff033e6f R08: 0000000000000000 R09: 0000000000000000 [ 153.983472][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.983481][ T6672] R13: 00007f6eff226038 R14: 00007f6eff225fa0 R15: 00007ffebfadb1d8 [ 153.983501][ T6672] [ 154.274652][ T6668] FAULT_INJECTION: forcing a failure. [ 154.274652][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 154.287599][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.1.159 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.287624][ T6668] Tainted: [L]=SOFTLOCKUP [ 154.287630][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.287639][ T6668] Call Trace: [ 154.287646][ T6668] [ 154.287652][ T6668] dump_stack_lvl+0x100/0x190 [ 154.287675][ T6668] should_fail_ex.cold+0x5/0xa [ 154.287693][ T6668] should_failslab+0xc2/0x120 [ 154.287712][ T6668] kmem_cache_alloc_noprof+0x91/0x6a0 [ 154.287731][ T6668] ? mas_preallocate+0x1105/0x14a0 [ 154.287752][ T6668] mas_preallocate+0x1105/0x14a0 [ 154.287772][ T6668] ? __lock_acquire+0x49f/0x1a40 [ 154.287795][ T6668] ? __pfx_mas_preallocate+0x10/0x10 [ 154.287819][ T6668] ? __asan_memset+0x23/0x50 [ 154.287832][ T6668] ? init_multi_vma_prep+0x33c/0x650 [ 154.287858][ T6668] commit_merge+0x3e3/0xbd0 [ 154.287889][ T6668] ? __pfx_commit_merge+0x10/0x10 [ 154.287910][ T6668] ? debug_check_no_obj_freed+0x31f/0x630 [ 154.287942][ T6668] vma_expand+0xac5/0xea0 [ 154.287966][ T6668] ? __pfx_vma_expand+0x10/0x10 [ 154.287988][ T6668] ? can_vma_merge_right+0x101/0x720 [ 154.288013][ T6668] ? __pfx_can_vma_merge_right+0x10/0x10 [ 154.288043][ T6668] vma_merge_new_range+0x516/0xc00 [ 154.288069][ T6668] ? __pfx_vma_merge_new_range+0x10/0x10 [ 154.288094][ T6668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.288118][ T6668] __mmap_region+0xa86/0x2db0 [ 154.288144][ T6668] ? __pfx___mmap_region+0x10/0x10 [ 154.288165][ T6668] ? __pfx___might_resched+0x10/0x10 [ 154.288190][ T6668] ? __lock_acquire+0x49f/0x1a40 [ 154.288228][ T6668] ? __lock_acquire+0x49f/0x1a40 [ 154.288257][ T6668] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 154.288282][ T6668] ? rcu_is_watching+0x12/0xc0 [ 154.288298][ T6668] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 154.288321][ T6668] ? lockdep_hardirqs_on+0x78/0x100 [ 154.288374][ T6668] mmap_region+0x35d/0x620 [ 154.288389][ T6668] ? rcu_is_watching+0x12/0xc0 [ 154.288404][ T6668] ? __pfx_mmap_region+0x10/0x10 [ 154.288421][ T6668] ? cap_mmap_addr+0x4b/0x120 [ 154.288442][ T6668] ? bpf_lsm_mmap_addr+0x9/0x30 [ 154.288463][ T6668] ? security_mmap_addr+0x71/0x1e0 [ 154.288480][ T6668] ? __get_unmapped_area+0x255/0x3e0 [ 154.288501][ T6668] do_mmap+0xc63/0x12f0 [ 154.288523][ T6668] ? __pfx_do_mmap+0x10/0x10 [ 154.288541][ T6668] ? __pfx_down_write_killable+0x10/0x10 [ 154.288557][ T6668] ? __pfx_futex_wait+0x10/0x10 [ 154.288577][ T6668] vm_mmap_pgoff+0x29e/0x470 [ 154.288598][ T6668] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 154.288620][ T6668] ? __pfx_do_futex+0x10/0x10 [ 154.288638][ T6668] ksys_mmap_pgoff+0xe4/0x610 [ 154.288656][ T6668] ? __x64_sys_futex+0x358/0x4d0 [ 154.288671][ T6668] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 154.288689][ T6668] ? xfd_validate_state+0x129/0x190 [ 154.288708][ T6668] __x64_sys_mmap+0x125/0x190 [ 154.288726][ T6668] do_syscall_64+0x115/0x840 [ 154.288739][ T6668] ? clear_bhb_loop+0x40/0x90 [ 154.288758][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.288773][ T6668] RIP: 0033:0x7f9b7c59de59 [ 154.288788][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.288801][ T6668] RSP: 002b:00007f9b7d3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 154.288816][ T6668] RAX: ffffffffffffffda RBX: 00007f9b7c826090 RCX: 00007f9b7c59de59 [ 154.288826][ T6668] RDX: 0000000000000007 RSI: 0000000000040009 RDI: 0000000000000000 [ 154.288835][ T6668] RBP: 00007f9b7c633e6f R08: 0000000000000007 R09: 0000000000028000 [ 154.288845][ T6668] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 154.288854][ T6668] R13: 00007f9b7c826128 R14: 00007f9b7c826090 R15: 00007ffe43eb5028 [ 154.288874][ T6668] [ 156.074076][ T6687] netlink: 64 bytes leftover after parsing attributes in process `syz.1.162'. [ 156.851429][ T29] audit: type=1800 audit(4294967360.126:9): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.165" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 158.862053][ T6737] futex_wake_op: syz.1.173 tries to shift op by -2048; fix this program [ 158.914363][ T6737] futex_wake_op: syz.1.173 tries to shift op by -2048; fix this program [ 158.966422][ T6737] 0x000000000001-0x000000020000 : "" [ 159.173064][ T6737] ftl_cs: FTL header corrupt! [ 159.688596][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 159.780689][ T6757] FAULT_INJECTION: forcing a failure. [ 159.780689][ T6757] name failslab, interval 1, probability 0, space 0, times 0 [ 159.821163][ T6758] netlink: zone id is out of range [ 159.861031][ T6757] CPU: 0 UID: 0 PID: 6757 Comm: syz.2.177 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.861057][ T6757] Tainted: [L]=SOFTLOCKUP [ 159.861062][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.861071][ T6757] Call Trace: [ 159.861077][ T6757] [ 159.861083][ T6757] dump_stack_lvl+0x100/0x190 [ 159.861106][ T6757] should_fail_ex.cold+0x5/0xa [ 159.861124][ T6757] should_failslab+0xc2/0x120 [ 159.861144][ T6757] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 159.861162][ T6757] ? __kasan_kmalloc+0xaa/0xb0 [ 159.861180][ T6757] ? apply_subsystem_event_filter+0x44d/0x17a0 [ 159.861205][ T6757] kstrdup+0x51/0xe0 [ 159.861221][ T6757] apply_subsystem_event_filter+0x44d/0x17a0 [ 159.861247][ T6757] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 159.861271][ T6757] ? _copy_from_user+0x59/0xd0 [ 159.861293][ T6757] subsystem_filter_write+0x95/0x120 [ 159.861321][ T6757] vfs_write+0x2aa/0x1050 [ 159.861343][ T6757] ? __pfx_subsystem_filter_write+0x10/0x10 [ 159.861366][ T6757] ? __pfx_vfs_write+0x10/0x10 [ 159.861387][ T6757] ? __fget_files+0x215/0x3d0 [ 159.861413][ T6757] ? __fget_files+0x21f/0x3d0 [ 159.861439][ T6757] ksys_write+0x12a/0x250 [ 159.861460][ T6757] ? __pfx_ksys_write+0x10/0x10 [ 159.861487][ T6757] do_syscall_64+0x115/0x840 [ 159.861500][ T6757] ? clear_bhb_loop+0x40/0x90 [ 159.861557][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.861573][ T6757] RIP: 0033:0x7f7837d9de59 [ 159.861587][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.861602][ T6757] RSP: 002b:00007f7838cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.861616][ T6757] RAX: ffffffffffffffda RBX: 00007f7838025fa0 RCX: 00007f7837d9de59 [ 159.861626][ T6757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 159.861634][ T6757] RBP: 00007f7837e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 159.861643][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.861651][ T6757] R13: 00007f7838026038 R14: 00007f7838025fa0 R15: 00007ffff41714d8 [ 159.861671][ T6757] [ 160.330770][ T5637] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 162.116779][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.148258][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.201636][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.254241][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.307746][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.353956][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.402637][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.455289][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.501013][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.557051][ T5777] hid-generic 0000:0000:BFADBB19.0001: unknown main item tag 0x0 [ 162.608092][ T5777] hid-generic 0000:0000:BFADBB19.0001: reserved main item tag 0xe [ 162.906333][ T5777] hid-generic 0000:0000:BFADBB19.0001: hidraw0: HID v7f.fe Device [] on  [ 163.539035][ T6798] fido_id[6798]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.739928][ T6810] FAULT_INJECTION: forcing a failure. [ 164.739928][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 164.816641][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.185 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.816669][ T6810] Tainted: [L]=SOFTLOCKUP [ 164.816674][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.816683][ T6810] Call Trace: [ 164.816688][ T6810] [ 164.816694][ T6810] dump_stack_lvl+0x100/0x190 [ 164.816717][ T6810] should_fail_ex.cold+0x5/0xa [ 164.816735][ T6810] should_failslab+0xc2/0x120 [ 164.816754][ T6810] kmem_cache_alloc_noprof+0x91/0x6a0 [ 164.816772][ T6810] ? __kernfs_new_node+0xd2/0xa10 [ 164.816798][ T6810] __kernfs_new_node+0xd2/0xa10 [ 164.816823][ T6810] ? __pfx___kernfs_new_node+0x10/0x10 [ 164.816852][ T6810] ? find_held_lock+0x2b/0x80 [ 164.816868][ T6810] ? kernfs_root+0xee/0x2a0 [ 164.816887][ T6810] ? kernfs_root+0xee/0x2a0 [ 164.816910][ T6810] kernfs_new_node+0x117/0x150 [ 164.816935][ T6810] __kernfs_create_file+0x53/0x350 [ 164.816955][ T6810] sysfs_add_file_mode_ns+0x207/0x3c0 [ 164.816980][ T6810] sysfs_merge_group+0x194/0x340 [ 164.817002][ T6810] ? __pfx_sysfs_merge_group+0x10/0x10 [ 164.817021][ T6810] ? bus_add_device+0x2e2/0x6c0 [ 164.817038][ T6810] ? __pfx_bus_add_device+0x10/0x10 [ 164.817052][ T6810] ? __pfx_dev_add_physical_location+0x10/0x10 [ 164.817078][ T6810] dpm_sysfs_add+0x237/0x280 [ 164.817099][ T6810] device_add+0x9f4/0x1970 [ 164.817121][ T6810] ? __pfx_device_add+0x10/0x10 [ 164.817140][ T6810] ? lockdep_init_map_type+0x5c/0x250 [ 164.817162][ T6810] ? __init_waitqueue_head+0xca/0x150 [ 164.817190][ T6810] rfkill_register+0x1ad/0xb30 [ 164.817214][ T6810] nfc_register_device+0x11f/0x3e0 [ 164.817240][ T6810] nci_register_device+0x7f1/0xb80 [ 164.817260][ T6810] ? __pfx_nci_register_device+0x10/0x10 [ 164.817283][ T6810] ? lockdep_init_map_type+0x5c/0x250 [ 164.817308][ T6810] virtual_ncidev_open+0x141/0x220 [ 164.817329][ T6810] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 164.817348][ T6810] misc_open+0x26d/0x450 [ 164.817372][ T6810] ? __pfx_misc_open+0x10/0x10 [ 164.817393][ T6810] chrdev_open+0x234/0x6a0 [ 164.817416][ T6810] ? __pfx_apparmor_file_open+0x10/0x10 [ 164.817440][ T6810] ? __pfx_chrdev_open+0x10/0x10 [ 164.817463][ T6810] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 164.817483][ T6810] do_dentry_open+0x6ab/0x14d0 [ 164.817513][ T6810] ? __pfx_chrdev_open+0x10/0x10 [ 164.817540][ T6810] vfs_open+0x82/0x3f0 [ 164.817560][ T6810] path_openat+0x2873/0x4280 [ 164.817592][ T6810] ? __pfx_path_openat+0x10/0x10 [ 164.817619][ T6810] do_file_open+0x20e/0x430 [ 164.817643][ T6810] ? __pfx_do_file_open+0x10/0x10 [ 164.817679][ T6810] ? alloc_fd+0x471/0x7a0 [ 164.817703][ T6810] ? do_getname+0x191/0x390 [ 164.817721][ T6810] do_sys_openat2+0x10f/0x1e0 [ 164.817739][ T6810] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.817758][ T6810] ? __fget_files+0x21f/0x3d0 [ 164.817783][ T6810] __x64_sys_openat+0x12d/0x210 [ 164.817801][ T6810] ? __pfx___x64_sys_openat+0x10/0x10 [ 164.817826][ T6810] do_syscall_64+0x115/0x840 [ 164.817839][ T6810] ? clear_bhb_loop+0x40/0x90 [ 164.817857][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.817872][ T6810] RIP: 0033:0x7f9b7c59de59 [ 164.817888][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.817901][ T6810] RSP: 002b:00007f9b7d402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.817917][ T6810] RAX: ffffffffffffffda RBX: 00007f9b7c825fa0 RCX: 00007f9b7c59de59 [ 164.817928][ T6810] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 164.817938][ T6810] RBP: 00007f9b7c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 164.817947][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.817956][ T6810] R13: 00007f9b7c826038 R14: 00007f9b7c825fa0 R15: 00007ffe43eb5028 [ 164.817976][ T6810] [ 167.844747][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.929671][ T29] audit: type=1800 audit(4294967371.202:10): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.190" name="dbroot" dev="configfs" ino=14887 res=0 errno=0 [ 167.958046][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.285138][ T6855] FAULT_INJECTION: forcing a failure. [ 168.285138][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 168.413703][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.2.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.413730][ T6855] Tainted: [L]=SOFTLOCKUP [ 168.413735][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.413745][ T6855] Call Trace: [ 168.413750][ T6855] [ 168.413755][ T6855] dump_stack_lvl+0x100/0x190 [ 168.413778][ T6855] should_fail_ex.cold+0x5/0xa [ 168.413796][ T6855] should_failslab+0xc2/0x120 [ 168.413815][ T6855] __kmalloc_noprof+0xfc/0x820 [ 168.413832][ T6855] ? trace_kmem_cache_alloc+0xdd/0x100 [ 168.413852][ T6855] ? lsm_blob_alloc+0x68/0x90 [ 168.413875][ T6855] lsm_blob_alloc+0x68/0x90 [ 168.413895][ T6855] security_prepare_creds+0x2d/0x290 [ 168.413915][ T6855] prepare_creds+0x5d6/0x950 [ 168.413937][ T6855] copy_creds+0xa7/0xa50 [ 168.413959][ T6855] copy_process+0x1420/0x8030 [ 168.413978][ T6855] ? __pfx___futex_wait+0x10/0x10 [ 168.413995][ T6855] ? futex_hash+0x311/0x400 [ 168.414022][ T6855] ? __pfx_copy_process+0x10/0x10 [ 168.414037][ T6855] ? __destroy_inode+0x2cd/0x710 [ 168.414052][ T6855] ? __pfx_sock_free_inode+0x10/0x10 [ 168.414074][ T6855] ? destroy_inode+0x139/0x1c0 [ 168.414094][ T6855] kernel_clone+0x176/0x9d0 [ 168.414111][ T6855] ? __pfx_kernel_clone+0x10/0x10 [ 168.414137][ T6855] __do_sys_clone+0xd9/0x120 [ 168.414153][ T6855] ? __pfx___do_sys_clone+0x10/0x10 [ 168.414186][ T6855] do_syscall_64+0x115/0x840 [ 168.414201][ T6855] ? clear_bhb_loop+0x40/0x90 [ 168.414219][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.414234][ T6855] RIP: 0033:0x7f7837d9de59 [ 168.414248][ T6855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.414261][ T6855] RSP: 002b:00007f7838cdefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 168.414276][ T6855] RAX: ffffffffffffffda RBX: 00007f7838025fa0 RCX: 00007f7837d9de59 [ 168.414285][ T6855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 168.414294][ T6855] RBP: 00007f7837e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 168.414302][ T6855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 168.414310][ T6855] R13: 00007f7838026038 R14: 00007f7838025fa0 R15: 00007ffff41714d8 [ 168.414329][ T6855] [ 170.416218][ T6895] FAULT_INJECTION: forcing a failure. [ 170.416218][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 170.488607][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.0.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.488634][ T6895] Tainted: [L]=SOFTLOCKUP [ 170.488640][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.488649][ T6895] Call Trace: [ 170.488654][ T6895] [ 170.488660][ T6895] dump_stack_lvl+0x100/0x190 [ 170.488683][ T6895] should_fail_ex.cold+0x5/0xa [ 170.488702][ T6895] should_failslab+0xc2/0x120 [ 170.488722][ T6895] __kmalloc_cache_noprof+0x91/0x6c0 [ 170.488746][ T6895] ? resv_map_alloc+0x46/0x400 [ 170.488767][ T6895] resv_map_alloc+0x46/0x400 [ 170.488785][ T6895] hugetlbfs_get_inode+0x385/0x700 [ 170.488805][ T6895] hugetlb_file_setup+0x15b/0x5b0 [ 170.488823][ T6895] ksys_mmap_pgoff+0x242/0x610 [ 170.488844][ T6895] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 170.488863][ T6895] ? xfd_validate_state+0x129/0x190 [ 170.488882][ T6895] __x64_sys_mmap+0x125/0x190 [ 170.488903][ T6895] do_syscall_64+0x115/0x840 [ 170.488918][ T6895] ? clear_bhb_loop+0x40/0x90 [ 170.488936][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.488952][ T6895] RIP: 0033:0x7f6efef9de59 [ 170.488966][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.488981][ T6895] RSP: 002b:00007f6effee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 170.488995][ T6895] RAX: ffffffffffffffda RBX: 00007f6eff225fa0 RCX: 00007f6efef9de59 [ 170.489005][ T6895] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000000 [ 170.489013][ T6895] RBP: 00007f6eff033e6f R08: 0000000000000401 R09: 0000300000000000 [ 170.489022][ T6895] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 170.489031][ T6895] R13: 00007f6eff226038 R14: 00007f6eff225fa0 R15: 00007ffebfadb1d8 [ 170.489050][ T6895] [ 171.456629][ T6894] Process accounting resumed [ 171.980563][ T6911] input: f¬ as /devices/virtual/input/input6 [ 172.992279][ T6921] FAULT_INJECTION: forcing a failure. [ 172.992279][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 173.037794][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.0.202 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.037821][ T6921] Tainted: [L]=SOFTLOCKUP [ 173.037826][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.037835][ T6921] Call Trace: [ 173.037841][ T6921] [ 173.037847][ T6921] dump_stack_lvl+0x100/0x190 [ 173.037870][ T6921] should_fail_ex.cold+0x5/0xa [ 173.037887][ T6921] should_failslab+0xc2/0x120 [ 173.037910][ T6921] kmem_cache_alloc_noprof+0x91/0x6a0 [ 173.037926][ T6921] ? __pfx_map_id_range_down+0x10/0x10 [ 173.037946][ T6921] ? security_inode_alloc+0x3b/0x2c0 [ 173.037964][ T6921] security_inode_alloc+0x3b/0x2c0 [ 173.037979][ T6921] inode_init_always_gfp+0xc77/0xfb0 [ 173.038006][ T6921] alloc_inode+0x8e/0x250 [ 173.038023][ T6921] sock_alloc+0x44/0x280 [ 173.038041][ T6921] ? security_socket_create+0x7f/0x250 [ 173.038064][ T6921] __sock_create+0xc2/0x860 [ 173.038097][ T6921] __sys_socket+0x14d/0x260 [ 173.038120][ T6921] ? __pfx___sys_socket+0x10/0x10 [ 173.038147][ T6921] __x64_sys_socket+0x72/0xb0 [ 173.038168][ T6921] ? lockdep_hardirqs_on+0x78/0x100 [ 173.038191][ T6921] do_syscall_64+0x115/0x840 [ 173.038204][ T6921] ? clear_bhb_loop+0x40/0x90 [ 173.038223][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.038238][ T6921] RIP: 0033:0x7f6efef9de59 [ 173.038252][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.038266][ T6921] RSP: 002b:00007f6effee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 173.038281][ T6921] RAX: ffffffffffffffda RBX: 00007f6eff225fa0 RCX: 00007f6efef9de59 [ 173.038291][ T6921] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 173.038299][ T6921] RBP: 00007f6eff033e6f R08: 0000000000000000 R09: 0000000000000000 [ 173.038308][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.038317][ T6921] R13: 00007f6eff226038 R14: 00007f6eff225fa0 R15: 00007ffebfadb1d8 [ 173.038336][ T6921] [ 173.038385][ T6921] socket: no more sockets [ 173.430830][ T6925] netlink: 25 bytes leftover after parsing attributes in process `syz.3.203'. [ 174.039509][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 174.090790][ T29] audit: type=1800 audit(4294967377.365:11): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.207" name="dbroot" dev="configfs" ino=15270 res=0 errno=0 [ 175.504755][ T6932] Process accounting resumed [ 175.851958][ T6962] input: f¬ as /devices/virtual/input/input7 [ 177.014169][ T6973] hub 1-0:1.0: USB hub found [ 177.028714][ T6979] unsupported nlmsg_type 40 [ 177.076786][ T6973] hub 1-0:1.0: 1 port detected [ 177.831155][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 178.140934][ T6989] bond0: (slave bond_slave_1): Releasing backup interface [ 178.886140][ T7004] hub 1-0:1.0: USB hub found [ 178.937028][ T7004] hub 1-0:1.0: 1 port detected [ 179.349426][ T7024] netlink: zone id is out of range [ 179.379804][ T7024] netlink: zone id is out of range [ 179.419419][ T7024] netlink: zone id is out of range [ 179.460527][ T7024] netlink: zone id is out of range [ 179.460554][ T7024] netlink: zone id is out of range [ 179.460559][ T7024] netlink: zone id is out of range [ 179.460565][ T7024] netlink: zone id is out of range [ 179.460570][ T7024] netlink: zone id is out of range [ 179.460576][ T7024] netlink: zone id is out of range [ 179.460582][ T7024] netlink: zone id is out of range [ 180.670938][ T7031] zswap: compressor û not available [ 180.711728][ T29] audit: type=1804 audit(4294967383.998:12): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.223" name="/newroot/51/file0" dev="tmpfs" ino=295 res=1 errno=0 [ 180.859790][ T29] audit: type=1804 audit(4294967384.038:13): pid=7028 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.223" name="/newroot/51/file0" dev="tmpfs" ino=295 res=1 errno=0 [ 182.932029][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.232'. [ 183.578162][ T7108] Ignoring unsupported numa_zonelist_order value: [ 183.628820][ T7110] random: crng reseeded on system resumption [ 187.654653][ T29] audit: type=1804 audit(4294967390.941:14): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.242" name="/newroot/66/file0" dev="tmpfs" ino=366 res=1 errno=0 [ 187.764399][ T29] audit: type=1804 audit(4294967390.971:15): pid=7143 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.242" name="/newroot/66/file0" dev="tmpfs" ino=366 res=1 errno=0 [ 189.105401][ T7179] random: crng reseeded on system resumption [ 189.223940][ T7178] netlink: 'syz.0.248': attribute type 7 has an invalid length. [ 190.890977][ T7199] random: crng reseeded on system resumption [ 191.434791][ T7180] Process accounting resumed [ 191.623831][ T7207] ================================================================== [ 191.623853][ T7207] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 191.623879][ T7207] Write of size 8 at addr ffffc900048e9560 by task syz.1.253/7207 [ 191.623892][ T7207] [ 191.623902][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.1.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.623924][ T7207] Tainted: [L]=SOFTLOCKUP [ 191.623930][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.623939][ T7207] Call Trace: [ 191.623944][ T7207] [ 191.623951][ T7207] dump_stack_lvl+0x100/0x190 [ 191.623967][ T7207] print_report+0x13d/0x4b0 [ 191.623989][ T7207] ? _raw_spin_lock_irqsave+0x52/0x60 [ 191.624018][ T7207] ? sys_imageblit+0x19fb/0x1d60 [ 191.624034][ T7207] kasan_report+0xdf/0x1c0 [ 191.624054][ T7207] ? sys_imageblit+0x19fb/0x1d60 [ 191.624072][ T7207] sys_imageblit+0x19fb/0x1d60 [ 191.624090][ T7207] ? __pfx_sys_imageblit+0x10/0x10 [ 191.624107][ T7207] ? prb_read_valid+0x78/0xa0 [ 191.624130][ T7207] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 191.624153][ T7207] soft_cursor+0x524/0xa10 [ 191.624177][ T7207] ? atomic_notifier_call_chain+0x60/0x1c0 [ 191.624196][ T7207] ? fb_get_color_depth+0x120/0x250 [ 191.624217][ T7207] bit_cursor+0xca1/0x1490 [ 191.624241][ T7207] ? __pfx_bit_cursor+0x10/0x10 [ 191.624267][ T7207] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.624287][ T7207] ? get_color+0x1da/0x450 [ 191.624305][ T7207] ? __pfx_bit_cursor+0x10/0x10 [ 191.624326][ T7207] fbcon_cursor+0x43c/0x5e0 [ 191.624345][ T7207] ? add_softcursor+0x1a0/0x290 [ 191.624360][ T7207] set_cursor+0x1db/0x250 [ 191.624373][ T7207] con_write+0x89/0xb0 [ 191.624390][ T7207] n_tty_write+0x431/0x1160 [ 191.624413][ T7207] ? __pfx_n_tty_write+0x10/0x10 [ 191.624433][ T7207] ? __pfx_woken_wake_function+0x10/0x10 [ 191.624457][ T7207] ? __pfx___might_resched+0x10/0x10 [ 191.624477][ T7207] ? kfree+0x1e5/0x6c0 [ 191.624497][ T7207] ? __pfx_n_tty_write+0x10/0x10 [ 191.624517][ T7207] file_tty_write.isra.0+0x4d2/0x890 [ 191.624537][ T7207] redirected_tty_write+0xd4/0x120 [ 191.624554][ T7207] vfs_write+0x6ac/0x1050 [ 191.624574][ T7207] ? __pfx_redirected_tty_write+0x10/0x10 [ 191.624593][ T7207] ? __pfx_vfs_write+0x10/0x10 [ 191.624612][ T7207] ? find_held_lock+0x2b/0x80 [ 191.624633][ T7207] ksys_write+0x12a/0x250 [ 191.624657][ T7207] ? __pfx_ksys_write+0x10/0x10 [ 191.624680][ T7207] do_syscall_64+0x115/0x840 [ 191.624693][ T7207] ? clear_bhb_loop+0x40/0x90 [ 191.624709][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.624724][ T7207] RIP: 0033:0x7f9b7c59de59 [ 191.624737][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.624751][ T7207] RSP: 002b:00007f9b7d3c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.624766][ T7207] RAX: ffffffffffffffda RBX: 00007f9b7c826180 RCX: 00007f9b7c59de59 [ 191.624776][ T7207] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 191.624786][ T7207] RBP: 00007f9b7c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 191.624795][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.624804][ T7207] R13: 00007f9b7c826218 R14: 00007f9b7c826180 R15: 00007ffe43eb5028 [ 191.624819][ T7207] [ 191.624825][ T7207] [ 191.624829][ T7207] The buggy address belongs to a vmalloc virtual mapping [ 191.624840][ T7207] Memory state around the buggy address: [ 191.624848][ T7207] ffffc900048e9400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 191.624866][ T7207] ffffc900048e9480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 191.624877][ T7207] >ffffc900048e9500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 191.624884][ T7207] ^ [ 191.624893][ T7207] ffffc900048e9580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 191.624903][ T7207] ffffc900048e9600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 191.624911][ T7207] ================================================================== [ 191.635675][ T7209] FAULT_INJECTION: forcing a failure. [ 191.635675][ T7209] name failslab, interval 1, probability 0, space 0, times 0 [ 191.635704][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.2.254 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.635726][ T7209] Tainted: [L]=SOFTLOCKUP [ 191.635731][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.635741][ T7209] Call Trace: [ 191.635746][ T7209] [ 191.635752][ T7209] dump_stack_lvl+0x100/0x190 [ 191.635772][ T7209] should_fail_ex.cold+0x5/0xa [ 191.635790][ T7209] should_failslab+0xc2/0x120 [ 191.635810][ T7209] kmem_cache_alloc_noprof+0x91/0x6a0 [ 191.635827][ T7209] ? mutex_init_lockdep+0xf1/0x120 [ 191.635849][ T7209] ? seq_open+0x55/0x170 [ 191.635870][ T7209] seq_open+0x55/0x170 [ 191.635888][ T7209] blk_mq_debugfs_open+0x106/0x1b0 [ 191.635912][ T7209] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 191.635933][ T7209] full_proxy_open_regular+0x1b6/0x370 [ 191.635953][ T7209] do_dentry_open+0x6ab/0x14d0 [ 191.635975][ T7209] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 191.636006][ T7209] vfs_open+0x82/0x3f0 [ 191.636025][ T7209] path_openat+0x2873/0x4280 [ 191.636057][ T7209] ? __pfx_path_openat+0x10/0x10 [ 191.636085][ T7209] do_file_open+0x20e/0x430 [ 191.636109][ T7209] ? __pfx_do_file_open+0x10/0x10 [ 191.636146][ T7209] ? alloc_fd+0x471/0x7a0 [ 191.636170][ T7209] ? do_getname+0x191/0x390 [ 191.636188][ T7209] do_sys_openat2+0x10f/0x1e0 [ 191.636206][ T7209] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.636225][ T7209] ? __fget_files+0x21f/0x3d0 [ 191.636249][ T7209] __x64_sys_openat+0x12d/0x210 [ 191.636269][ T7209] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.636294][ T7209] do_syscall_64+0x115/0x840 [ 191.636307][ T7209] ? clear_bhb_loop+0x40/0x90 [ 191.636325][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.636340][ T7209] RIP: 0033:0x7f7837d9de59 [ 191.636353][ T7209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.636367][ T7209] RSP: 002b:00007f7838cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.636382][ T7209] RAX: ffffffffffffffda RBX: 00007f7838025fa0 RCX: 00007f7837d9de59 [ 191.636391][ T7209] RDX: 0000000000143000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 191.636400][ T7209] RBP: 00007f7837e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 191.636409][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.636417][ T7209] R13: 00007f7838026038 R14: 00007f7838025fa0 R15: 00007ffff41714d8 [ 191.636437][ T7209] [ 191.670215][ T7207] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.670234][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.1.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.670258][ T7207] Tainted: [L]=SOFTLOCKUP [ 191.670264][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.670273][ T7207] Call Trace: [ 191.670279][ T7207] [ 191.670285][ T7207] dump_stack_lvl+0x100/0x190 [ 191.670306][ T7207] vpanic+0x552/0x970 [ 191.670320][ T7207] ? __pfx_vpanic+0x10/0x10 [ 191.670335][ T7207] ? mark_held_locks+0x40/0x70 [ 191.670357][ T7207] ? sys_imageblit+0x19fb/0x1d60 [ 191.670373][ T7207] panic+0xd1/0xe0 [ 191.670386][ T7207] ? __pfx_panic+0x10/0x10 [ 191.670400][ T7207] ? sys_imageblit+0x19fb/0x1d60 [ 191.670416][ T7207] ? preempt_schedule_common+0x42/0xc0 [ 191.670452][ T7207] check_panic_on_warn.cold+0x19/0x34 [ 191.670472][ T7207] end_report.part.0+0x3a/0x90 [ 191.670494][ T7207] kasan_report.cold+0xe/0x18 [ 191.670515][ T7207] ? sys_imageblit+0x19fb/0x1d60 [ 191.670538][ T7207] sys_imageblit+0x19fb/0x1d60 [ 191.670569][ T7207] ? __pfx_sys_imageblit+0x10/0x10 [ 191.670587][ T7207] ? prb_read_valid+0x78/0xa0 [ 191.670611][ T7207] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 191.670635][ T7207] soft_cursor+0x524/0xa10 [ 191.670658][ T7207] ? atomic_notifier_call_chain+0x60/0x1c0 [ 191.670678][ T7207] ? fb_get_color_depth+0x120/0x250 [ 191.670699][ T7207] bit_cursor+0xca1/0x1490 [ 191.670728][ T7207] ? __pfx_bit_cursor+0x10/0x10 [ 191.670755][ T7207] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.670777][ T7207] ? get_color+0x1da/0x450 [ 191.670797][ T7207] ? __pfx_bit_cursor+0x10/0x10 [ 191.670819][ T7207] fbcon_cursor+0x43c/0x5e0 [ 191.670839][ T7207] ? add_softcursor+0x1a0/0x290 [ 191.670854][ T7207] set_cursor+0x1db/0x250 [ 191.670868][ T7207] con_write+0x89/0xb0 [ 191.670887][ T7207] n_tty_write+0x431/0x1160 [ 191.670911][ T7207] ? __pfx_n_tty_write+0x10/0x10 [ 191.670932][ T7207] ? __pfx_woken_wake_function+0x10/0x10 [ 191.670956][ T7207] ? __pfx___might_resched+0x10/0x10 [ 191.670976][ T7207] ? kfree+0x1e5/0x6c0 [ 191.671005][ T7207] ? __pfx_n_tty_write+0x10/0x10 [ 191.671025][ T7207] file_tty_write.isra.0+0x4d2/0x890 [ 191.671045][ T7207] redirected_tty_write+0xd4/0x120 [ 191.671063][ T7207] vfs_write+0x6ac/0x1050 [ 191.671084][ T7207] ? __pfx_redirected_tty_write+0x10/0x10 [ 191.671103][ T7207] ? __pfx_vfs_write+0x10/0x10 [ 191.671123][ T7207] ? find_held_lock+0x2b/0x80 [ 191.671144][ T7207] ksys_write+0x12a/0x250 [ 191.671165][ T7207] ? __pfx_ksys_write+0x10/0x10 [ 191.671188][ T7207] do_syscall_64+0x115/0x840 [ 191.671201][ T7207] ? clear_bhb_loop+0x40/0x90 [ 191.671219][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.671234][ T7207] RIP: 0033:0x7f9b7c59de59 [ 191.671247][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.671261][ T7207] RSP: 002b:00007f9b7d3c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.671276][ T7207] RAX: ffffffffffffffda RBX: 00007f9b7c826180 RCX: 00007f9b7c59de59 [ 191.671287][ T7207] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 191.671296][ T7207] RBP: 00007f9b7c633e6f R08: 0000000000000000 R09: 0000000000000000 [ 191.671306][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.671314][ T7207] R13: 00007f9b7c826218 R14: 00007f9b7c826180 R15: 00007ffe43eb5028 [ 191.671329][ T7207] [ 191.671396][ T7207] Kernel Offset: disabled