last executing test programs: 5.31213636s ago: executing program 2 (id=290): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x44a280, 0x0) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/zeroplus/uevent\x00', 0x121681, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x88000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) ioctl$auto(0x3, 0x3b84, 0x38) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) open(&(0x7f0000000080)='./file0\x00', 0xa4102, 0x100) 5.27570695s ago: executing program 1 (id=291): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x3) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x3) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r3, r0, 0x5) mlockall$auto(0x7) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r4, 0x0, 0x0, 0x2000000000040007) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r3) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x602, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_NAME={0xc, 0x2, 'ethtool\x00'}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x2820) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) msgctl$auto_MSG_STAT_ANY(0xc, 0xd, &(0x7f0000000280)={{0xfffffffa, 0xee00, 0xffffffffffffffff, 0x3, 0x1, 0x377, 0x8}, &(0x7f0000000200)=0x6e, &(0x7f0000000240)=0x2, 0x2, 0x100, 0x9, 0x8001, 0x10, 0x2, 0x4, 0x200, @raw=0x9}) msgctl$auto_MSG_STAT_ANY(0x8001, 0xd, &(0x7f0000000380)={{0x2, 0xffffffffffffffff, 0xee00, 0x40, 0x514, 0x1000, 0x2}, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0xd, 0x10001, 0x9, 0x7, 0x3, 0xad, 0x3, 0x6, 0xf15, @raw=0x8}) r8 = syz_clone3(&(0x7f0000002580)={0x195021100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x16}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/4096, &(0x7f0000002540)=[0x0], 0x1, {r2}}, 0x58) msgctl$auto(0x6, 0x8cf, &(0x7f0000002600)={{0x400, r6, r7, 0x8001, 0x8ec7, 0x6, 0x7ff}, &(0x7f0000000400), &(0x7f0000000440)=0x9, 0x81, 0xffffffffffff7171, 0x7f, 0x5, 0x69d8, 0x3, 0x7036, 0x5ee5, @inferred, @inferred=r8}) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) 4.897544657s ago: executing program 2 (id=292): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400006, 0x9, 0x1009b72, 0xffffffffffffffff, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x2082, 0x0) write$auto(0x3, 0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) r0 = clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) r1 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r1, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) r2 = fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) fcntl$auto(0x8000000000000001, 0xffff, r0) madvise$auto(0x8000000000000, 0x7fffffffffffffff, 0xb0f7) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0xfdef) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="37c7396c8c787ba31c400040000000000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf257400000008005200", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x4c000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyza\x00', 0x101401, 0x0) ioctl$auto(0xc8, 0x400454d4, 0xe) ioctl$auto_TIOCGPTPEER(r2, 0x5441, 0x0) 4.286693807s ago: executing program 1 (id=295): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd10/sched/read1_fifo_list\x00', 0x141100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x80805, 0x0) getsockopt$auto_SO_PASSSEC(r0, 0x200, 0x22, &(0x7f00000000c0)='\x00', &(0x7f0000000140)=0x9) close_range$auto(0x2, 0x8, 0x0) lsetxattr$auto(0x0, &(0x7f0000000000)='-\x00', 0x0, 0x7fffffff, 0x3) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) 4.136526316s ago: executing program 1 (id=296): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd8/hctx0/cpu0/default_rq_list\x00', 0x101200, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio1\x00', 0x101001, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0xfffffffffffffffd, 0x202000a, 0x1000000000000007, 0x16, r1, 0x10000000008000) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)=@batch={0x8, 0x0, 0x5, 0x2, 0x100, r0, 0x4, 0x1}, 0x4d1) r3 = socket(0x2, 0x1, 0x4) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r2, 0xc0884123, &(0x7f00000009c0)={0x7fffffff, 0x0, @reserved="dea1a0f77352962c3039b1a72d30cf20f33f7ca7bbb8182ae0bd8e84760dff686741e15003fbb89460a174993d749b408055fc5852e7aea08bad1f7b67f6cd2b", @reserved="38af8061cb03e2f7f89d7367f4ac48753d160bcfe5fd4b6bfcf9845e32b563eafc0de677278f2e7915edab02927c25f13a89a509de7e1a47f7df6b0eaa9cb9f8"}) setsockopt$auto(r3, 0x6, 0x6, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x802, 0x3a) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r7 = fcntl$auto_F_DUPFD(r6, 0x0, r6) ioctl$auto_vmwgfx_driver_fops_vmwgfx_drv(r7, 0x0, &(0x7f0000000000)="090bdb70d726e558a345cb58a01a9260fe797efced430832e041e5b4448edc94099e69b14ff229aaffe01b8c7cc0a4e4685c3e05699f4688b1ff06722e58877038caeb5a907ed463f4133ad88082cdf0207393724e3701ee9dcb69af2261a670ad24917121a7db34b8152aca9292b1bed9034d4e7baa6b6a23ea437a5995faf65fafa7b0df371cd7322417527efa70e95d3a3d32a69abd7e859e1057223c308821049e83e5e3399c65eddd235c0b2a35b1170f1800ea040a5dffa5c5d23151138887d66d85828b3bc39683280490b449a1029e8c7b7de03345f0d2625869fa1dfbc5ae982dcbc2ceda") read$auto_tun_fops_tun(r7, &(0x7f0000000180)=""/106, 0x6a) r8 = socket(0xa, 0x1, 0x100) read$auto(r7, &(0x7f0000000980)='-$+!{!$!/&-]\x00', 0x7fff) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r8) sendmsg$auto_NL80211_CMD_CONNECT(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000008", @ANYRES16=r9, @ANYBLOB="02002cbd7000ffdbdf252e00000004001601"], 0x18}, 0x1, 0x0, 0x0, 0x854}, 0x4) r10 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r7, 0x8004b709, &(0x7f0000000200)=0x7f) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r11, 0x1, 0x7ff) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r11, 0x62, 0x27dd) ioctl$auto_XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f0000000240)={0x3, @raw=0x6, @raw=0x8, 0xdd2, 0x83, '\x00', {0x5, 0xffff, 0x20, 0xee00, 0x0, 0x3, 0x10001, 0xb, {0x1, 0xffffffff}, {0xb, 0x8}, {0x7f, 0x6}, 0x6, 0xae7c, 0xf6, 0xf, 0x8001, 0x7, 0x2, 0x3, 0x9, 0x9, '\x00', 0x7, 0x8, 0x5, 0x8}}) r13 = ioctl$auto_SIOCSIFHWADDR2(r7, 0x8924, &(0x7f0000000300)="7d219caf0179f82087355033c10c98d9947ed01fa057a50447c708b4166c7e3e9d6253a3f1a7efb8fffc705555ab2adf5553306f19ea58b2aa3c914050c13d5b018ef25266636ede3d7cf27d1d7641356420b597fec23c421b984dc0272168bcb19d7529f71e7e7e0f595aaa4d1fb1fba22e276e37cfb7dd7346ea292a2b2c6834ddea85817ea3be07297b60eeb0bfb8e6f8fae0c6d8f0be06f35fd015e39e0a3f124b558413273e1873c0d5a90f69237659603794cd44f5209523036d2afb7f863ff0b00ed899775c6a2f07ece8a5c73bc675049c2d99bd68c77e8cedd8177fa0") sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x46c, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7fff}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14e, 0x6e, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @pid=r10}, @nested={0x11f, 0xd1, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @pid=r11}, @nested={0x4, 0xa6}, @generic="75a23b06c0e6081c1d680dca9e556b5874042405b5735b9183b2", @typed={0x8, 0x85, 0x0, 0x0, @fd=r7}, @generic="c6fb2490c224ec999c952e5d3c87c9947d39fb81261cd02e407ff4c79c3edda3cb2ead6c26cec83e3a8883e4c02fbfaeb3db6bf4791d52097ef3945afa0df85562d06748ec124a654ea536411a0f964cbfdc25a504ab225dc9823d69e9de24d6e9d098c1f869321dd2ba066be0936c29228ba55ffed3d5c1c243f6607e32b6013850fcbf129eb45ac2a27eeaf7eb96de7853797dd43665e444c6624da106033767ea4d0e1e3e132895941656ed6eb4f05c7cc292f358acc0a2fa9deea531da8d18de64add4d2a928fb13a12f9105e3a5578fd261ee8f0a075716a13bf84aa70069", @typed={0x8, 0x25, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x116}]}, @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="a0112d6478a5", @typed={0x8, 0x16, 0x0, 0x0, @fd=r13}]}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x380000}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x2f4, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x2ed, 0x2, "8fd85e234e666d285457969fb86f432298b38d9ccf1ff71999abf5eb80919b30a720e91b0edf87604bbc698af973139d3f8ad20ecf203e827415a6ecc38a9cffb46ad692cbad38c5e9f4158a03e36adc61a883baa769dd256ccab9bc242036454eaa42db8534e6d36ce72cdedfc5823ab65275bebe3fa2fae11410285112df9d4b997f586906a73deed7bf8ee2294a34c000bb40720c1068520851b99965ae285b22768a59360395082f5186dbefe3f2bf073e5a92cde919229f872c6a19445cc3d9f047c5ac49662d12d5288390ae1eb52734a9cfd78c04a84a7d77f34ead0cf18408e3079330e96859ebcf096348f63ebf89e8ac23e1c3e6b1a9e6fb277b289b1693be976664f8af097374f7465e837b35c9c78cd9940158616bd14b8a99d3c487c11194c2881566a3348054acf47e0adc7eefd09ff0698e152f320713d240981154db62ec262cfc4ec9f145c92bad2d19e37c5397701ed4f7b7dc980a097ce3c2b064737e4b5b460879bb361c40be7a9ede04e81d0e7a523c06cd3684caca02be068c2a3c7d3f5c34b802cf40cade99bbeed50393e6fd911f46d9783bdcf47151410b02af6712f7455ab71c0844eba54d9f94009a6b67b6bdc64f481732fe8a0cc8657bfb8a9bb698c97e4ae99754b51e843d6777a8ec9554800cf73b6d2165a0505fd5fc40c1e292d0fef5970db5356de4f694c74b16e1633ab2a8f9214eea9d8f9fcc4a2e21d631062ef92366939c5ceb3dcd0089db520f4007413b3c7f199f3937f287591b41481279aae501f63ef38faefa3a8ac4dbdca7d1aded6a5c4589686bc8e71e9055c337ba9bc0267b15944db60815658da0ba57089ee712ba858c3c31e2c0c0c4756b97704bdc2ca22f715e80836b97e4063bf3fa4cd14de8de64b9ede36f7e5936bcc600404a210955d5cdd5ad69bff25503207c8d6b3f7e49704eba823c58d0f1a6a949bce2173d9df50ce874e0d4d3dcb1027fd8534e9296e82824c9e66ed74ee29ca615cb52e850ffca86a41ef56bb0c7c11a902987e3ed3576ed440eb497c3"}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x4801) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000009a53f5bb99bf0cdd259394a594d5052f02e22239a3006debb578c66ea02a407b1de72abe7c4cdc01c5923d8c8a97133e9c42c3f238cf17e8c9fe44a9e2f63571432f4450547b8369d6f34aed0856ef", @ANYRES16=r9, @ANYBLOB="080025bd7000fbdbdf251f0000000800a5000200000005001c0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040041) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_PMK={0x31, 0xfe, "1801a93f431fdb713f1d6bb9b695b11160bcd2533218b674b7ff7a032a6f268aad2a145d011f5747ac7dc5d7ab"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x805) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0x6, 0x10000}) 3.903587329s ago: executing program 2 (id=297): mmap$auto(0x0, 0x400008, 0xde, 0x9b74, 0x2, 0xd6d) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x2, 0x80802, 0x0) (async) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000080)="65c807e7bf7d67d7adb4d1463d7b4c07df37f4245bd6e162522fab8c0171c9266712a6f6935cf83233f1d8bc48c30e886582373000d6ed791d7a8afdc0f82194303833aaf8f0b90487241b813df3a5fc29f434b08bc05ca136c4cfbacf36a06ba5b1be2676", 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x5, 0x20000000) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r0, 0x0, 0xfffffd70) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x8803, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x9, 0x10, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x5c, 0xffffffffffffffff, 0xeb1, r0, 0x8000) (async) madvise$auto(0x100000000, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) (async) timer_create$auto(0xdffffefd, 0x0, 0x0) (async, rerun: 32) socket(0xf, 0x3, 0x8) (rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 32) close_range$auto(0xffffffffffffffff, r3, 0x0) (async, rerun: 32) r4 = io_uring_setup$auto(0x40, 0x0) (rerun: 32) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x7, 0x7, 0xb) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) (async) write$auto(r2, 0x0, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.433321128s ago: executing program 0 (id=302): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) r1 = epoll_create$auto(0x8) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) r2 = open_tree_attr$auto(r1, &(0x7f00000014c0)='./file0\x00', 0x6, &(0x7f0000001500)={0x7, 0x89, 0x2, @raw=0x7}, 0x5) ioctl$auto_VHOST_SET_VRING_ERR2(r2, 0x4008af22, &(0x7f0000000140)={0x8, r0}) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r4 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) mmap$auto(0x0, 0x8, 0x8004000080000df, 0x40eb2, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r6 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r6, 0x0, 0xc3) fcntl$auto(r5, 0x9, r4) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, 0x0, 0x40800) unshare$auto(0x40000080) keyctl$auto(0x7, 0xfffffffb, 0x0, 0x3e, 0x8) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r7) capset$auto(&(0x7f0000000280)={0x7, r4}, &(0x7f00000002c0)={0xdcfa, 0x3, 0x8}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000000300)={0x1118, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1101, 0x4, 0x0, 0x1, [@generic="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", @generic="5891", @generic="d85a51a1e044cf47729b936eb474057ddfa5d3acb1b2e4375b34", @typed={0x8, 0x42, 0x0, 0x0, @pid=r9}, @generic="51e8d4a4b43dffd641af70777a62b7b8b3013cfa374906e682aef675ba712a7d50b7213e0dd22f50c862f6acc148c510576d5d41b14f187cd4bbbb034bdfdeb65af05781db104e28cbdff559764da1bf46ad10ab5119f8350df9088696ffe476a464956cf213dbb3bf0eabfead9a592be4dad3fb3b772f6f2ccd061c9dcd03ca5d2281d4c551683d7b896f4e1fa92e1a57c765490d904d4c9e231ff154453c630ec68d702620909d01785f771e0f57f05a447bd97816018ce43f99d554", @nested={0x14, 0x77, 0x0, 0x1, [@nested={0x4, 0x86}, @nested={0x4, 0x9b}, @typed={0x8, 0x144, 0x0, 0x0, @fd=r7}]}, @typed={0x8, 0x150, 0x0, 0x0, @fd}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 3.046333195s ago: executing program 2 (id=304): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4014}, 0x4000800) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x15, 0x2, 0x0) close_range$auto(r0, 0x8, 0xa) r1 = socket(0x1d, 0x800, 0x73) r2 = socket(0x1f, 0x800, 0x84) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0x7fff}, 0x0, 0x0, 0x3, 0x4}, 0xfffffff8}, 0x400, 0x4) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="2f27df00", @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES16=r0], 0x1ac}}, 0x4052010) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200004, 0x13}, 0x802}, 0xdffffff9, 0x10, 0x0) ioctl$auto(r0, 0x7, 0x24) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x1000, 0x0, 0x6, &(0x7f0000000180)={{0x2}, {0x8, 0x18000}, 0xfffffffffffffffb, 0xfffffffffffffff9, 0xea, 0x8, 0x0, 0x100, 0x2, 0x5, 0xbee, 0x1, 0x6, 0x1, 0x5, 0xfffffffffffffffd}) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x6, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x201ff, 0x0) sysfs$auto(0x2, 0x100000000000036, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) close_range$auto(r4, 0x8, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 3.040351086s ago: executing program 1 (id=305): mmap$auto(0x0, 0x8004, 0x4000000000df, 0x1ff, 0x401, 0x300000000000) socket(0x7, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x58) r0 = prctl$auto(0x4, 0x7, 0x0, 0x800000001, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) socket(0x11, 0x4, 0x8b) bind$auto(r0, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) mmap$auto(0x8, 0x2000d, 0x3, 0xeb1, 0x404, 0xffffffffffffffff) close_range$auto(0x2, r0, 0xc) mmap$auto(0x8, 0xfb8, 0x80000000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4ac01, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x622c0, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptye9\x00', 0x141e81, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttyx6\x00', 0x319483, 0x0) sendfile$auto(r2, r1, 0x0, 0x10000) 2.874265225s ago: executing program 3 (id=306): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) (async, rerun: 64) r0 = socket(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) (rerun: 32) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0xa505}, 0x9}, 0x7, 0x4008) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x82622, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), r0) sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}, @NFC_ATTR_DEVICE_NAME={0x10, 0x2, '/proc/swaps\x00'}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x78}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000340)={0x100000000, @raw=0x10, @raw=0x8000000000000000, 0x3, 0x0, '\x00', {0x3, 0x8, 0xd9, 0xee01, 0xee00, 0x5, 0x0, 0xdc05, {0xe, 0x6}, {0x7fffffffffffffff, 0x9}, {0xe, 0x8}, 0xc, 0xfb, 0xf, 0xc4bc, 0x401, 0x3, 0x7ff, 0x8001, 0xfffa, 0x7, '\x00', 0x8, 0xfffffff7, 0x4, 0x2}}) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) poll$auto(&(0x7f0000000040)={r2, 0x7ff, 0x200}, 0x100, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x3, 0x81) (rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x2, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x1, 0x6}, 0x4, &(0x7f0000000040)={0x4f9}, &(0x7f0000000080)={0x1}, 0x8) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x6f2d, 0x0) read$auto(0x3, 0x0, 0x20f34) (async) write$auto(0x3, 0x0, 0xfffffdf2) 2.684700995s ago: executing program 1 (id=307): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\"\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb05>ha9\x89|d\x00\x00\x00\x00\x00\x00', 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x10) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x8000000, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x10000]}, 0x0, 0x0) sendfile$auto(r0, r0, 0x0, 0x400000000003) r1 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sysfs$auto(0x2, 0x3, 0x0) r2 = fsopen$auto(0x0, 0x1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv6/conf/netdevsim2/accept_ra_defrtr\x00', 0x8a042, 0x0) pidfd_getfd$auto(r3, r3, 0x0) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x11) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r4, 0x8ae36f82a2442f77, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) open_by_handle_at$auto(r5, &(0x7f0000000140)={0x8d, 0xe29d, "d4c62ed8940cab47c5db7f7d5665ceec03bbdb1fec682199159f27506f90c5dd62e3e602e02edc1d7fc971cd4c3619cee1a76ca66e40c58c7ccb235abf9b4ad91d899baed95e53029f9f4f0a314c62a38ff83487b18421c8d9d243549e95aad2c559f412cc278c77fba481577b0125f1606dcb1ee6ef507a20bad153d7a5a176db7c0c4413d22ec56f3515dc69"}, 0x1ff) write$auto(r5, &(0x7f0000000200)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-IL\xeclM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@{\x8e\xfd\xb2O\x90\x7fd\xa3_\xfcb8\x7fA\x11\xba\xefL\x06L\x8aE}\xa7\x05\b\xd7\xe2\xac\xfek\xbbw\x8c\x88\x1e\x7f0i\x11\x8b\xa0mW-\xf5\x94\xdak\x00\x00\x00\x00S\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xca\a\x15&', 0x7) 2.278216497s ago: executing program 0 (id=308): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fsopen$auto(0x0, 0x1) (async) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) (async) mlockall$auto(0x800000000000005) (async) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x202, 0x0) readv$auto(r2, &(0x7f00000000c0)={&(0x7f0000000000)="7fdf050d89c0575355055578d7ef6ca46bbfa0cd1e1fd71ce052ebde96b8b46168ec83bdcbf584deaef0445cc7830cca8d5793c1219981f7f6c25ecbad916851c9aa52c3d2306d79a36405dc4edaafc3b8ea464d8d6889", 0x6}, 0x2) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) fchdir$auto(0xffffffffffffffff) (async) mremap$auto(0x0, 0x4, 0x4, 0x6, 0x100000000) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) 2.162975526s ago: executing program 1 (id=309): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) poll$auto(&(0x7f0000000180)={r0, 0xa0b, 0x9816}, 0x7f, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r2 = socket(0x2, 0x1, 0x106) connect$auto(r2, 0x0, 0x54) ioprio_set$auto(0x3, 0xffffffffffffffff, 0x4b34) socketpair$auto(0x2, 0x5, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.924782578s ago: executing program 3 (id=310): close_range$auto(0x2, 0x8, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2a902, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/8/spurious\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000040)=""/211, 0xd3) r1 = landlock_create_ruleset$auto(&(0x7f0000000240)={0x4, 0x8, 0x400}, 0x7, 0x6) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000200), r1) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) 1.853640071s ago: executing program 3 (id=311): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) r0 = waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xffff, 0x413, 0x0, @_sigsys={0x0, 0x0, 0x3ff}}}, 0x7fff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x1, 0x0, 0x80000000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0xfffffffffffffffb, 0x66) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = prctl$auto(0x4, 0x3, r0, 0x3ff, 0x5) mq_timedsend$auto(r2, &(0x7f0000000000)='}})!%*\x00', 0x1, 0x8000, &(0x7f0000000180)={0x86, 0x8}) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r3, 0x0, 0x400000, 0xc) 1.148688185s ago: executing program 2 (id=312): socket(0x10, 0x2, 0x9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 32) mmap$auto(0x4, 0x202000a, 0x5, 0x14, 0xffffffffffffffff, 0x8000) (rerun: 32) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) (async, rerun: 64) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) (rerun: 64) sendfile$auto(r0, r0, 0x0, 0x5) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) (async) r1 = socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x519402, 0x0) (async) mmap$auto(0x0, 0xb000, 0xdb, 0x200000000013, 0xffffffffffffffff, 0x1000000000000) (async) write$auto(0xca, 0x0, 0x2d9) (async) sendmsg$auto_NL80211_CMD_ASSOCIATE(r1, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2ec, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_MLO_TTLM_DLINK={0x95, 0x148, "d4314c0fd42b355101e12ddc2ff52ca6fdba50ebf37d6a948beea0ebb8750e638cb29e081457df210250a3414574fa4a6f9d6c8801b1ba0913cdf9b2dd1a9d2a1fb30358b9f59f868e6e36d7187f6743132958555a4b60633ec516e3fd768ef37b91166e6dfbf59171112d5b6de8cf90259ba410c22c3ad6f3332a65f10ede2d10f420c3f1139633db60278b437ea3feea"}, @NL80211_ATTR_REKEY_DATA={0x22c, 0x7a, 0x0, 0x1, [@generic="0ea28135364fd21ce3392c482c8303", @generic="7a30474c53fa8b75dafdbeb10d5b1c9c46018a9574bb7989771268817cff674918d75081aa1890644449f7052544731c56768e5102de26d810e01d6596d9a8ab1cef838478001950e115bfefefe67c34b7b0be1d8484e562259971b5bd0b59f1b92314", @generic="9f4916c3578bedcb498233054af2353169f5f331e712c6d3783c2ad8246970dd1dd5c4590c76236345930c7b3e4f74aa250dd2d39a7c1109a299fec68f31f4981c170ec2301e91db1c9ede57784ef58c7659e470fe236591a4", @typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@mcast2}, @generic="c5313cc5234b0e5076fe8daf2d0a61579f5b644e7a8882953f2ef96bd3e1210a03f5c49aa49b8aec035fdf5ecae130cfc879374a0f171e", @typed={0x8, 0xa0, 0x0, 0x0, @fd}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0xb}, @generic="5d6268e56707db71b71c695dce746edc0e29cef8042c597b8819609bad49999225ebf29621fdc550ef97c8b30e04", @nested={0x8, 0x5d, 0x0, 0x1, [@nested={0x4, 0x8}]}, @typed={0xc6, 0x8c, 0x0, 0x0, @binary="596fa8250d8ab480873ffb53fabc29e8648083eb3ac9c54c568cb367904077912ec48548cbe88cd41140dad70d39f07d08d3a8210625e42cec39f7811f7308f9cdd4831f4bafdd624d61db93af53328f4b3883a0932126f2034e2716150742790ba5371093e97bd977af47b940d85a0a7d760279993c86eef92398f2614f58e21c742cddb7c5e2415dab3fc208a747b3c6f0c53e8aa9359c35b72dfa3d0cb55ea3cb051fd5d31cc340dc6693042d15251153f3d90e9121faae17c222873c25baa1e0"}]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8001}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x800}, 0x6000010) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) prctl$auto(0x1000000003b, 0x2, 0x0, 0x1, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) (async, rerun: 64) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) rt_sigsuspend$auto(0x0, 0x8) (async) sendfile$auto(r1, r0, &(0x7f0000000100)=0x6, 0x3) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x80004509, 0x10000000000402) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) 964.458413ms ago: executing program 0 (id=313): mmap$auto(0x0, 0x4020005, 0xe3, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000000c0)="77cc342323f452aec6da5578c08b3fdefcda327f56977ff5b726f137453121e2df0f1a9e6234d8787772cd1bc5", 0xffffff83) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8040, 0x168) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, r2, 0x8000) mmap$auto(0x0, 0x2020005, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000011, 0x0) r3 = fsopen$auto(0x0, 0x1) r4 = getpid() r5 = gettid() r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="210029bd7000fbdbdf254f0000000000000000000000399e34f15b51623f2a91ac00000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x37d21fe8c665e05d) rt_tgsigqueueinfo$auto(r4, r5, 0x22, &(0x7f0000000400)={@siginfo_0_0={0x3, 0xfffffff5, 0xfffffffa, @_kill={r4}}}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) 806.015307ms ago: executing program 3 (id=314): close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r3, 0x560f, r3) sendfile$auto(0x1, 0x3, 0x0, 0x74c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) sysfs$auto(0x2, 0xd, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto_FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00', &(0x7f0000000180), 0x100d1) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r4}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x1}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4140aecd, 0x0) 671.04606ms ago: executing program 0 (id=315): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) r1 = setfsuid$auto(0xee00) io_submit$auto(0x7, 0x7, &(0x7f0000000040)=&(0x7f0000000000)={0x7, 0x839a, 0x0, 0x2, 0xe7, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, 0x3}) r2 = bpf$auto(0x0, &(0x7f0000000000)=@raw_tracepoint={0x1a, 0xffffffffffffffff, 0x0, 0x4}, 0x7f) r3 = setfsuid$auto(0xee01) setresuid$auto(r1, r3, r1) r4 = socket(0xa, 0x1, 0x0) getsockopt$auto(r4, 0x6, 0x5, 0x0, 0x0) r5 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_SE_IO(r2, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="2b6b4000569d4fd58d6fff3a71e72d7a68fbcb012c16455a346f2aeac7d4d84d85e8b116bcc169dff01c7488af45fb74e2ae098c4977f1428152064cdafe21f9bf45c57d894a3cfb5222555f80e8cf81d17bfd73421dc62f4934f5536b5790901867054d8da2727ed2c1e66cd8e41db1e82537db32ef66b82b0040c9f52954177880eebef37c7d0d0217e786194c9847040678f771274079aa48d5de95c370f37b01b5ecbee0b1c7c8155178f5af1fe5ec3985cbdc17e9dd0a2e81c79fa49734869fd634d94b067fe04f6530b3b6f5d3eb", @ANYRES16=r2, @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x4004}, 0x4) kill$auto(r5, 0x9) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo$auto(r6, r7, 0x6, &(0x7f0000000400)={@siginfo_0_0={0x3, 0xfffffff5, 0xfffffff7, @_kill={r6}}}) rt_tgsigqueueinfo$auto_SIGCONT(r5, r6, 0x12, &(0x7f0000000080)={@_si_pad}) setfsgid$auto(0xee01) setgroups$auto(0x171, 0x0) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) clone3$auto(0x0, 0x2) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) setresgid$auto(0x81, 0x800000a0, 0x8) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r8, &(0x7f0000000240)={0x0, 0x5}, 0xa) setgroups$auto(0xe, 0x0) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c09, 0x0) 492.257194ms ago: executing program 2 (id=316): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/xfs/panic_mask\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, r3, 0x4, 0x302f, r2, @relative_id=0x13, 0xe600}, 0xf) write$auto(0xffffffffffffffff, 0x0, 0x81) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x49, &(0x7f0000000040)='!\x00', 0x1ff) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r1, 0x80044100, &(0x7f0000000000)=0x5) ftruncate$auto(0x3, 0x400180200000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/smaps\x00', 0x10083, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 449.861875ms ago: executing program 0 (id=317): socketcall$auto_SYS_GETPEERNAME(0x7, &(0x7f0000000000)=0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6, 0x240000100103}) r0 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r0, &(0x7f0000000080)='<&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) 246.008102ms ago: executing program 0 (id=318): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000100)='/dev/media13\x00', 0x804480, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r2, 0x40, &(0x7f00000002c0)="1ce9016ab117363fb2e6115b5d4660f3100be7966499e023920ea3be46dfc82a226159cc720a34f6dcc20de1d4eec98687c4edb2951f38923e9505f4807955b05ad1473da3d4d838530c31b2c62daeec8026486db5533247c88fe755e296e64903e4bdb8f1498dc02bffd382b2df12ac6b9e87100ed5bad54f1f6dbdedc615ed484cd7d38e9c75851771bf954868eaed856a6bb2d7b4d9045b8225c916222b8a9a3fdd840048c9") writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x9000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) madvise$auto(0x3, 0x9, 0x77) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='3\xc7\xfe\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, &(0x7f00000001c0)=""/200, 0xc8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 235.601274ms ago: executing program 3 (id=319): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008019}, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, "feaca70ca0946dbee8120f55a8d981006d500d8a997e49d3cb8b7278e8d1355e6debee15cd1535e62b4a1b6862b45bb3397ced8052b21a9ad2abb1b4653914011b5a1a01bcfb0ab7a080aaff375bb084cd2095f018ba46d487aae6d489575ec7343f5c91908741acfb1d42fef110132304561dba401bd99a672663c4a391952fa605ebc5e842d153912cbc809c66cb36d11596657a2dfef402b9becf17b1c73408ff9446c77bffd3be18a2"}, 0xc0}, 0x1, 0x0, 0x0, 0x8001}, 0x20040004) close_range$auto(0x2, 0x8000, 0x0) 0s ago: executing program 3 (id=320): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8002, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000380)="19de4ac3630d3c75e5554f2385c2ca1a039b4acdeff971fa4ea820f513e2d7d03ecb9fe5260272459d2662e40366743d99dfc4933dfae530260beb6cfe30374d77dab9cd92a80af04d41a91b59dd4e891925232a93ecb0aa196920dd3ba90bb4441d01c05adac8d317a8d512a8f0e5cb64298ac78d48c86f47292b8d2f722b81e24a33d73f2bcbe27157de6b9dee5fb98721edcf2cbaef29e78a8f02aa5f39e4841d17cee3f07f9a0b523d6a70c681a0d9de2e0421e11ad0513f9356215c1d77616d55abe675c42090392dd4baa5b4942434df5d3fe208cb6d47cbccb04aa94e200d9893500b560162") close_range$auto(0x2, r1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x20200, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x400000, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7}) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf25010000006d50a45d227f753db6e458fb5ebb25a104e973fa7faf7f994f6708cf980f3fd540bf7a27a96b5722c12979223bb61712c120a9efdf5830170de9cf35d84e865457ab6756d467f8eaf28e3441347735695f083e2a69ad45f93a6488b6852d30fcbad4137cea2e7f7e41a89b38054ce79d062758e03fa0730d5fa861eeff99e17e713446ce57000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) read$auto(0x3, 0x0, 0x7fffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 79.247225][ T5811] cgroup: Unknown subsys name 'net' [ 79.346855][ T5811] cgroup: Unknown subsys name 'cpuset' [ 79.357157][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.087139][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.056306][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.065194][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.074228][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.082841][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.083646][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.090769][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.105479][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.107151][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.121024][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.121864][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.128979][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.144017][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.144717][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.152087][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.159410][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.166672][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.173629][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.180643][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.188472][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.195308][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.773421][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 83.885923][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 83.901832][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 83.968650][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 84.060037][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.067316][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.075077][ T5825] bridge_slave_0: entered allmulticast mode [ 84.082892][ T5825] bridge_slave_0: entered promiscuous mode [ 84.124801][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.131965][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.139459][ T5825] bridge_slave_1: entered allmulticast mode [ 84.147142][ T5825] bridge_slave_1: entered promiscuous mode [ 84.206039][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.213322][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.220465][ T5824] bridge_slave_0: entered allmulticast mode [ 84.227974][ T5824] bridge_slave_0: entered promiscuous mode [ 84.252259][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.259991][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.267298][ T5822] bridge_slave_0: entered allmulticast mode [ 84.274518][ T5822] bridge_slave_0: entered promiscuous mode [ 84.282103][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.289435][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.296907][ T5824] bridge_slave_1: entered allmulticast mode [ 84.304170][ T5824] bridge_slave_1: entered promiscuous mode [ 84.315237][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.336875][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.346930][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.354515][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.361831][ T5822] bridge_slave_1: entered allmulticast mode [ 84.369754][ T5822] bridge_slave_1: entered promiscuous mode [ 84.436427][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.456719][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.464031][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.471286][ T5823] bridge_slave_0: entered allmulticast mode [ 84.479033][ T5823] bridge_slave_0: entered promiscuous mode [ 84.500378][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.513156][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.523633][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.531136][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.538652][ T5823] bridge_slave_1: entered allmulticast mode [ 84.545842][ T5823] bridge_slave_1: entered promiscuous mode [ 84.555125][ T5825] team0: Port device team_slave_0 added [ 84.583991][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.613457][ T5825] team0: Port device team_slave_1 added [ 84.641571][ T5824] team0: Port device team_slave_0 added [ 84.660809][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.672237][ T5822] team0: Port device team_slave_0 added [ 84.680247][ T5824] team0: Port device team_slave_1 added [ 84.708767][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.719886][ T5822] team0: Port device team_slave_1 added [ 84.738562][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.745666][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.771853][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.824576][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.831579][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.858298][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.870811][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.878293][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.904490][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.928001][ T5823] team0: Port device team_slave_0 added [ 84.934570][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.941809][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.968032][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.992878][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.999869][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.026158][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.039628][ T5823] team0: Port device team_slave_1 added [ 85.069598][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.076656][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.102925][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.114972][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.122121][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.148764][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.179427][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.186620][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.212897][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.273221][ T5831] Bluetooth: hci3: command tx timeout [ 85.273454][ T51] Bluetooth: hci2: command tx timeout [ 85.279041][ T5829] Bluetooth: hci0: command tx timeout [ 85.284621][ T5144] Bluetooth: hci1: command tx timeout [ 85.315169][ T5824] hsr_slave_0: entered promiscuous mode [ 85.321715][ T5824] hsr_slave_1: entered promiscuous mode [ 85.356911][ T5825] hsr_slave_0: entered promiscuous mode [ 85.363574][ T5825] hsr_slave_1: entered promiscuous mode [ 85.369667][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 85.376072][ T5825] Cannot create hsr debugfs directory [ 85.402264][ T5822] hsr_slave_0: entered promiscuous mode [ 85.409108][ T5822] hsr_slave_1: entered promiscuous mode [ 85.415682][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 85.421529][ T5822] Cannot create hsr debugfs directory [ 85.433841][ T5823] hsr_slave_0: entered promiscuous mode [ 85.440196][ T5823] hsr_slave_1: entered promiscuous mode [ 85.446929][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 85.452824][ T5823] Cannot create hsr debugfs directory [ 85.930692][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.944780][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.965598][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.984541][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.041228][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.054402][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.065634][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.076015][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.180723][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.193783][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.205326][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.245005][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.310173][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.328390][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.355546][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.366802][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.431848][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.479264][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.525817][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.541866][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.561970][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.569327][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.594919][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.602137][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.622208][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.629424][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.664356][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.671671][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.716076][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.775911][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.787301][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.827349][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.834590][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.880921][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.888154][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.945313][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.979162][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.986585][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.039913][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.072428][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.124365][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.131592][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.299944][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.353614][ T5829] Bluetooth: hci1: command tx timeout [ 87.359089][ T5829] Bluetooth: hci3: command tx timeout [ 87.364499][ T51] Bluetooth: hci2: command tx timeout [ 87.365483][ T5144] Bluetooth: hci0: command tx timeout [ 87.411421][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.498873][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.571696][ T5824] veth0_vlan: entered promiscuous mode [ 87.599012][ T5825] veth0_vlan: entered promiscuous mode [ 87.665472][ T5825] veth1_vlan: entered promiscuous mode [ 87.677299][ T5824] veth1_vlan: entered promiscuous mode [ 87.775399][ T5825] veth0_macvtap: entered promiscuous mode [ 87.789097][ T5825] veth1_macvtap: entered promiscuous mode [ 87.811715][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.867850][ T5824] veth0_macvtap: entered promiscuous mode [ 87.890497][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.918477][ T5824] veth1_macvtap: entered promiscuous mode [ 87.958910][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.999160][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016093][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.025578][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.041991][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.063270][ T5823] veth0_vlan: entered promiscuous mode [ 88.073098][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.108004][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.120467][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.129214][ T5823] veth1_vlan: entered promiscuous mode [ 88.160341][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.169982][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.181477][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.203587][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.291838][ T5823] veth0_macvtap: entered promiscuous mode [ 88.322273][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.341530][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.356595][ T5823] veth1_macvtap: entered promiscuous mode [ 88.428272][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.437477][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.449516][ T5822] veth0_vlan: entered promiscuous mode [ 88.495318][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.510199][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.520353][ T5822] veth1_vlan: entered promiscuous mode [ 88.526991][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.538754][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.564142][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.649341][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.669255][ T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.691441][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.710937][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.737522][ T143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.765688][ T5822] veth0_macvtap: entered promiscuous mode [ 88.776530][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.796144][ T5822] veth1_macvtap: entered promiscuous mode [ 88.895811][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.915757][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.963429][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.984769][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.005113][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.027163][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.086836][ T5923] [U] ^@ [ 89.091822][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.101753][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.225743][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.236353][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.403020][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.433942][ T5144] Bluetooth: hci2: command tx timeout [ 89.439897][ T5829] Bluetooth: hci1: command tx timeout [ 89.439920][ T5831] Bluetooth: hci0: command tx timeout [ 89.449943][ T5144] Bluetooth: hci3: command tx timeout [ 89.464833][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.492577][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.657608][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.688623][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.967346][ T5970] Zero length message leads to an empty skb [ 91.433682][ T5981] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 91.524538][ T5144] Bluetooth: hci0: command tx timeout [ 91.530030][ T5829] Bluetooth: hci2: command tx timeout [ 91.530089][ T51] Bluetooth: hci1: command tx timeout [ 91.540997][ T5831] Bluetooth: hci3: command tx timeout [ 92.155351][ T42] cfg80211: failed to load regulatory.db [ 97.719525][ T6053] netlink: 9 bytes leftover after parsing attributes in process `syz.2.30'. [ 98.177449][ T5831] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 98.193382][ T6057] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.369466][ T6057] FAULT_INJECTION: forcing a failure. [ 98.369466][ T6057] name failslab, interval 1, probability 0, space 0, times 1 [ 98.370665][ T6064] futex_wake_op: syz.3.31 tries to shift op by -2048; fix this program [ 98.383644][ T6057] CPU: 1 UID: 0 PID: 6057 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT(full) [ 98.383687][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.383704][ T6057] Call Trace: [ 98.383713][ T6057] [ 98.383724][ T6057] dump_stack_lvl+0x100/0x190 [ 98.383774][ T6057] should_fail_ex.cold+0x5/0xa [ 98.383806][ T6057] should_failslab+0xc2/0x120 [ 98.383837][ T6057] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 98.383876][ T6057] ? __kernfs_new_node+0xd2/0x960 [ 98.383922][ T6057] __kernfs_new_node+0xd2/0x960 [ 98.383964][ T6057] ? __pfx___kernfs_new_node+0x10/0x10 [ 98.384011][ T6057] ? find_held_lock+0x2b/0x80 [ 98.384036][ T6057] ? kernfs_root+0xee/0x2a0 [ 98.384070][ T6057] ? kernfs_root+0xee/0x2a0 [ 98.384115][ T6057] kernfs_new_node+0x11b/0x1a0 [ 98.384147][ T6057] __kernfs_create_file+0x53/0x350 [ 98.384183][ T6057] sysfs_add_file_mode_ns+0x207/0x3c0 [ 98.384228][ T6057] internal_create_group+0x593/0xf40 [ 98.384287][ T6057] ? __pfx_internal_create_group+0x10/0x10 [ 98.384333][ T6057] ? kernfs_create_link+0x1bd/0x240 [ 98.384372][ T6057] internal_create_groups+0x9d/0x150 [ 98.384416][ T6057] device_add+0x71a/0x1950 [ 98.384455][ T6057] ? __pfx_device_add+0x10/0x10 [ 98.384490][ T6057] ? lockdep_init_map_type+0x5c/0x250 [ 98.384526][ T6057] ? __init_waitqueue_head+0xca/0x150 [ 98.384574][ T6057] rfkill_register+0x1ad/0xb30 [ 98.384623][ T6057] nfc_register_device+0x11f/0x3e0 [ 98.384655][ T6057] nci_register_device+0x7f1/0xb80 [ 98.384693][ T6057] ? __pfx_nci_register_device+0x10/0x10 [ 98.384735][ T6057] ? lockdep_init_map_type+0x5c/0x250 [ 98.384777][ T6057] virtual_ncidev_open+0x141/0x220 [ 98.384818][ T6057] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 98.384856][ T6057] misc_open+0x26d/0x450 [ 98.384891][ T6057] ? __pfx_misc_open+0x10/0x10 [ 98.384925][ T6057] chrdev_open+0x234/0x6a0 [ 98.384955][ T6057] ? __pfx_chrdev_open+0x10/0x10 [ 98.384987][ T6057] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 98.385024][ T6057] do_dentry_open+0x6d8/0x1660 [ 98.385051][ T6057] ? __pfx_chrdev_open+0x10/0x10 [ 98.385089][ T6057] vfs_open+0x82/0x3f0 [ 98.385127][ T6057] path_openat+0x208c/0x31a0 [ 98.385169][ T6057] ? __pfx_path_openat+0x10/0x10 [ 98.385212][ T6057] do_file_open+0x20e/0x430 [ 98.385252][ T6057] ? __pfx_do_file_open+0x10/0x10 [ 98.385308][ T6057] ? alloc_fd+0x476/0x790 [ 98.385340][ T6057] ? do_getname+0x191/0x390 [ 98.385377][ T6057] do_sys_openat2+0x10d/0x1e0 [ 98.385412][ T6057] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.385449][ T6057] ? __fget_files+0x21f/0x3d0 [ 98.385484][ T6057] __x64_sys_openat+0x12d/0x210 [ 98.385520][ T6057] ? __pfx___x64_sys_openat+0x10/0x10 [ 98.385570][ T6057] do_syscall_64+0x106/0xf80 [ 98.385597][ T6057] ? clear_bhb_loop+0x40/0x90 [ 98.385630][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.385656][ T6057] RIP: 0033:0x7fb7a779c819 [ 98.385680][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.385704][ T6057] RSP: 002b:00007fb7a864e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.385730][ T6057] RAX: ffffffffffffffda RBX: 00007fb7a7a15fa0 RCX: 00007fb7a779c819 [ 98.385747][ T6057] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 98.385763][ T6057] RBP: 00007fb7a7832c91 R08: 0000000000000000 R09: 0000000000000000 [ 98.385778][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.385793][ T6057] R13: 00007fb7a7a16038 R14: 00007fb7a7a15fa0 R15: 00007ffc877eb348 [ 98.385829][ T6057] [ 98.798596][ T6064] futex_wake_op: syz.3.31 tries to shift op by -2048; fix this program [ 100.105226][ T6113] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 100.105226][ T6113] program syz.2.43 not setting count and/or reply_len properly [ 100.239070][ T6117] FAULT_INJECTION: forcing a failure. [ 100.239070][ T6117] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.252244][ T6117] CPU: 1 UID: 0 PID: 6117 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT(full) [ 100.252285][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.252301][ T6117] Call Trace: [ 100.252310][ T6117] [ 100.252319][ T6117] dump_stack_lvl+0x100/0x190 [ 100.252369][ T6117] should_fail_ex.cold+0x5/0xa [ 100.252403][ T6117] _copy_from_user+0x2e/0xd0 [ 100.252440][ T6117] io_uring_setup+0xc0/0x160 [ 100.252478][ T6117] ? ksys_write+0x190/0x250 [ 100.252503][ T6117] ? ksys_write+0x190/0x250 [ 100.252541][ T6117] ? __pfx_io_uring_setup+0x10/0x10 [ 100.252582][ T6117] ? __mutex_unlock_slowpath+0x15c/0x790 [ 100.252615][ T6117] ? __fget_files+0x215/0x3d0 [ 100.252642][ T6117] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.252682][ T6117] ? fput+0x79/0x100 [ 100.252712][ T6117] ? ksys_write+0x1ac/0x250 [ 100.252736][ T6117] ? __pfx_ksys_write+0x10/0x10 [ 100.252768][ T6117] __x64_sys_io_uring_setup+0xc2/0x170 [ 100.252807][ T6117] do_syscall_64+0x106/0xf80 [ 100.252833][ T6117] ? clear_bhb_loop+0x40/0x90 [ 100.252864][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.252890][ T6117] RIP: 0033:0x7f733839c819 [ 100.252913][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.252936][ T6117] RSP: 002b:00007f7339315028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 100.252960][ T6117] RAX: ffffffffffffffda RBX: 00007f7338615fa0 RCX: 00007f733839c819 [ 100.252977][ T6117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 100.252990][ T6117] RBP: 00007f7339315090 R08: 0000000000000000 R09: 0000000000000000 [ 100.253005][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.253019][ T6117] R13: 00007f7338616038 R14: 00007f7338615fa0 R15: 00007fffafced998 [ 100.253052][ T6117] [ 100.640465][ T29] audit: type=1800 audit(1775451511.912:2): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.47" name="dbroot" dev="configfs" ino=8935 res=0 errno=0 [ 100.645513][ T6124] db_root: cannot open: /dev/audio1 [ 100.645563][ T6124] db_root: not a directory: /dev/audio1 [ 101.144143][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 103.277722][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 103.408173][ T6174] can: request_module (can-proto-4) failed. [ 103.785161][ T6184] random: crng reseeded on system resumption [ 103.790946][ T6184] FAULT_INJECTION: forcing a failure. [ 103.790946][ T6184] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 103.791033][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(full) [ 103.791069][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.791086][ T6184] Call Trace: [ 103.791097][ T6184] [ 103.791109][ T6184] dump_stack_lvl+0x100/0x190 [ 103.791162][ T6184] should_fail_ex.cold+0x5/0xa [ 103.791202][ T6184] ? prepare_alloc_pages+0x16d/0x5f0 [ 103.791244][ T6184] should_fail_alloc_page+0xeb/0x140 [ 103.791281][ T6184] prepare_alloc_pages+0x1f0/0x5f0 [ 103.791325][ T6184] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 103.791386][ T6184] ? mark_held_locks+0x40/0x70 [ 103.791435][ T6184] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.791484][ T6184] ? lockdep_hardirqs_on+0x78/0x100 [ 103.791516][ T6184] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.791565][ T6184] ? stack_depot_save_flags+0x479/0x9d0 [ 103.791609][ T6184] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 103.791664][ T6184] ? kasan_save_stack+0x3f/0x50 [ 103.791691][ T6184] ? kasan_save_stack+0x30/0x50 [ 103.791717][ T6184] ? kasan_save_track+0x14/0x30 [ 103.791742][ T6184] ? __kasan_kmalloc+0xaa/0xb0 [ 103.791767][ T6184] ? memory_bm_create+0x14d/0xba0 [ 103.791792][ T6184] ? create_basic_memory_bitmaps+0x10b/0x350 [ 103.791821][ T6184] ? snapshot_open+0x230/0x2a0 [ 103.791854][ T6184] ? misc_open+0x26d/0x450 [ 103.791895][ T6184] ? do_sys_openat2+0x10d/0x1e0 [ 103.791933][ T6184] ? __x64_sys_openat+0x12d/0x210 [ 103.791972][ T6184] ? do_syscall_64+0x106/0xf80 [ 103.792002][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.792042][ T6184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.792077][ T6184] ? policy_nodemask+0xed/0x4f0 [ 103.792115][ T6184] alloc_pages_mpol+0x1fb/0x550 [ 103.792152][ T6184] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.792205][ T6184] alloc_pages_noprof+0x136/0x390 [ 103.792243][ T6184] get_zeroed_page_noprof+0x18/0xb0 [ 103.792282][ T6184] get_image_page+0x18/0x1a0 [ 103.792326][ T6184] memory_bm_create+0x9bd/0xba0 [ 103.792371][ T6184] create_basic_memory_bitmaps+0x10b/0x350 [ 103.792406][ T6184] snapshot_open+0x230/0x2a0 [ 103.792429][ T6184] ? __pfx_snapshot_open+0x10/0x10 [ 103.792452][ T6184] misc_open+0x26d/0x450 [ 103.792475][ T6184] ? __pfx_misc_open+0x10/0x10 [ 103.792499][ T6184] chrdev_open+0x234/0x6a0 [ 103.792520][ T6184] ? __pfx_chrdev_open+0x10/0x10 [ 103.792541][ T6184] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 103.792567][ T6184] do_dentry_open+0x6d8/0x1660 [ 103.792585][ T6184] ? __pfx_chrdev_open+0x10/0x10 [ 103.792610][ T6184] vfs_open+0x82/0x3f0 [ 103.792637][ T6184] path_openat+0x208c/0x31a0 [ 103.792665][ T6184] ? __pfx_path_openat+0x10/0x10 [ 103.792693][ T6184] do_file_open+0x20e/0x430 [ 103.792715][ T6184] ? __pfx_do_file_open+0x10/0x10 [ 103.792751][ T6184] ? alloc_fd+0x476/0x790 [ 103.792772][ T6184] ? do_getname+0x191/0x390 [ 103.792798][ T6184] do_sys_openat2+0x10d/0x1e0 [ 103.792831][ T6184] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.792865][ T6184] __x64_sys_openat+0x12d/0x210 [ 103.792891][ T6184] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.792927][ T6184] do_syscall_64+0x106/0xf80 [ 103.792945][ T6184] ? clear_bhb_loop+0x40/0x90 [ 103.792969][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.792987][ T6184] RIP: 0033:0x7f22c799c819 [ 103.793004][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.793021][ T6184] RSP: 002b:00007f22c5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.793038][ T6184] RAX: ffffffffffffffda RBX: 00007f22c7c15fa0 RCX: 00007f22c799c819 [ 103.793050][ T6184] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 103.793060][ T6184] RBP: 00007f22c7a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 103.793071][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.793080][ T6184] R13: 00007f22c7c16038 R14: 00007f22c7c15fa0 R15: 00007ffcb7550b88 [ 103.793103][ T6184] [ 104.797279][ T6201] FAULT_INJECTION: forcing a failure. [ 104.797279][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 104.797327][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 104.797360][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.797376][ T6201] Call Trace: [ 104.797386][ T6201] [ 104.797396][ T6201] dump_stack_lvl+0x100/0x190 [ 104.797444][ T6201] should_fail_ex.cold+0x5/0xa [ 104.797479][ T6201] should_failslab+0xc2/0x120 [ 104.797513][ T6201] __kvmalloc_node_noprof+0xfa/0xa00 [ 104.797540][ T6201] ? io_uring_setup.cold+0x171/0x1d79 [ 104.797586][ T6201] ? lockdep_init_map_type+0x5c/0x250 [ 104.797635][ T6201] io_uring_setup.cold+0x171/0x1d79 [ 104.797686][ T6201] ? __pfx_io_uring_setup+0x10/0x10 [ 104.797733][ T6201] ? do_futex+0x192/0x350 [ 104.797774][ T6201] ? __pfx_do_futex+0x10/0x10 [ 104.797833][ T6201] ? xfd_validate_state+0x129/0x190 [ 104.797888][ T6201] __x64_sys_io_uring_setup+0xc2/0x170 [ 104.797935][ T6201] do_syscall_64+0x106/0xf80 [ 104.797965][ T6201] ? clear_bhb_loop+0x40/0x90 [ 104.798003][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.798044][ T6201] RIP: 0033:0x7f22c799c819 [ 104.798068][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.798096][ T6201] RSP: 002b:00007f22c5bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 104.798124][ T6201] RAX: ffffffffffffffda RBX: 00007f22c7c15fa0 RCX: 00007f22c799c819 [ 104.798144][ T6201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 104.798161][ T6201] RBP: 00007f22c7a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 104.798242][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.798259][ T6201] R13: 00007f22c7c16038 R14: 00007f22c7c15fa0 R15: 00007ffcb7550b88 [ 104.798299][ T6201] [ 105.369531][ T6211] FAULT_INJECTION: forcing a failure. [ 105.369531][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 105.369581][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 105.369603][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.369612][ T6211] Call Trace: [ 105.369619][ T6211] [ 105.369626][ T6211] dump_stack_lvl+0x100/0x190 [ 105.369659][ T6211] should_fail_ex.cold+0x5/0xa [ 105.369681][ T6211] should_failslab+0xc2/0x120 [ 105.369703][ T6211] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 105.369734][ T6211] ? __d_alloc+0x34/0xa80 [ 105.369759][ T6211] __d_alloc+0x34/0xa80 [ 105.369789][ T6211] d_alloc+0x4a/0x1e0 [ 105.369812][ T6211] lookup_one_qstr_excl+0x175/0x250 [ 105.369839][ T6211] start_dirop+0x59/0xb0 [ 105.369857][ T6211] simple_start_creating+0xf9/0x110 [ 105.369874][ T6211] ? __pfx_simple_start_creating+0x10/0x10 [ 105.369898][ T6211] nfsd_mkdir+0xf6/0x460 [ 105.369918][ T6211] ? dput.part.0+0xdd/0x570 [ 105.369944][ T6211] nfsd_fill_super+0x3f9/0x560 [ 105.369967][ T6211] ? __pfx_nfsd_fill_super+0x10/0x10 [ 105.369989][ T6211] get_tree_keyed+0x10e/0x1d0 [ 105.370019][ T6211] vfs_get_tree+0x92/0x320 [ 105.370045][ T6211] path_mount+0x7d0/0x23d0 [ 105.370071][ T6211] ? __pfx_path_mount+0x10/0x10 [ 105.370091][ T6211] ? lockdep_hardirqs_on+0x78/0x100 [ 105.370113][ T6211] ? putname+0xb1/0x110 [ 105.370132][ T6211] ? kmem_cache_free+0x124/0x6a0 [ 105.370176][ T6211] ? __x64_sys_mount+0x293/0x310 [ 105.370197][ T6211] __x64_sys_mount+0x293/0x310 [ 105.370220][ T6211] ? __pfx___x64_sys_mount+0x10/0x10 [ 105.370249][ T6211] do_syscall_64+0x106/0xf80 [ 105.370268][ T6211] ? clear_bhb_loop+0x40/0x90 [ 105.370291][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.370309][ T6211] RIP: 0033:0x7f1a86d9c819 [ 105.370325][ T6211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.370342][ T6211] RSP: 002b:00007f1a87cde028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.370359][ T6211] RAX: ffffffffffffffda RBX: 00007f1a87015fa0 RCX: 00007f1a86d9c819 [ 105.370370][ T6211] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 105.370380][ T6211] RBP: 00007f1a86e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 105.370390][ T6211] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 105.370400][ T6211] R13: 00007f1a87016038 R14: 00007f1a87015fa0 R15: 00007ffc19295938 [ 105.370426][ T6211] [ 105.728422][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 106.493739][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 107.828101][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 107.877503][ T6257] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 108.040391][ T6254] team0 (unregistering): Port device team_slave_0 removed [ 108.057497][ T6254] team0 (unregistering): Port device team_slave_1 removed [ 110.668398][ T6306] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 110.668398][ T6306] program syz.3.91 not setting count and/or reply_len properly [ 111.344604][ T6312] vhci_hcd vhci_hcd.2: invalid port number 18 [ 111.381559][ T6312] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 111.817215][ T6288] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.901542][ T6336] veth1_to_batadv: entered promiscuous mode [ 114.059197][ T6338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3456254174 (3456254174 ns) > initial count (2671155079 ns). Using initial count to start timer. [ 114.308418][ T6336] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.417008][ T6339] veth1_to_batadv: left promiscuous mode [ 114.427111][ T6342] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.770838][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'. [ 116.254642][ T6370] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 116.451891][ T6365] can: request_module (can-proto-3) failed. [ 116.683849][ T6377] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 117.718873][ T6393] netlink: 21 bytes leftover after parsing attributes in process `syz.2.115'. [ 118.022193][ T6402] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 118.022193][ T6402] program syz.3.116 not setting count and/or reply_len properly [ 119.941454][ T6441] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 120.337001][ T6445] can: request_module (can-proto-5) failed. [ 120.653121][ T6471] FAULT_INJECTION: forcing a failure. [ 120.653121][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 120.736106][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.1.136 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.736151][ T6471] Tainted: [L]=SOFTLOCKUP [ 120.736161][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.736177][ T6471] Call Trace: [ 120.736186][ T6471] [ 120.736197][ T6471] dump_stack_lvl+0x100/0x190 [ 120.736246][ T6471] should_fail_ex.cold+0x5/0xa [ 120.736282][ T6471] should_failslab+0xc2/0x120 [ 120.736313][ T6471] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 120.736343][ T6471] ? ethnl_default_set_doit+0x2f0/0x9b0 [ 120.736381][ T6471] kmemdup_noprof+0x29/0x60 [ 120.736417][ T6471] ethnl_default_set_doit+0x2f0/0x9b0 [ 120.736452][ T6471] genl_family_rcv_msg_doit+0x214/0x300 [ 120.736493][ T6471] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 120.736528][ T6471] ? genl_get_cmd+0x3ef/0x720 [ 120.736570][ T6471] ? bpf_lsm_capable+0x9/0x10 [ 120.736601][ T6471] ? security_capable+0x80/0x260 [ 120.736631][ T6471] ? ns_capable+0xd2/0xf0 [ 120.736664][ T6471] genl_rcv_msg+0x560/0x800 [ 120.736703][ T6471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.736740][ T6471] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 120.736783][ T6471] netlink_rcv_skb+0x159/0x420 [ 120.736814][ T6471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.736850][ T6471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.736878][ T6471] ? rcu_is_watching+0x12/0xc0 [ 120.736934][ T6471] ? __rcu_read_unlock+0x26a/0x5e0 [ 120.736969][ T6471] ? rcu_is_watching+0x12/0xc0 [ 120.737022][ T6471] genl_rcv+0x28/0x40 [ 120.737051][ T6471] netlink_unicast+0x5aa/0x870 [ 120.737097][ T6471] ? __pfx_netlink_unicast+0x10/0x10 [ 120.737143][ T6471] netlink_sendmsg+0x8b0/0xda0 [ 120.737180][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.737208][ T6471] ? __import_iovec+0x1d2/0x640 [ 120.737252][ T6471] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 120.737289][ T6471] ____sys_sendmsg+0x9e1/0xb70 [ 120.737321][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.737355][ T6471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.737400][ T6471] ? __pfx_futex_wake_mark+0x10/0x10 [ 120.737452][ T6471] ___sys_sendmsg+0x190/0x1e0 [ 120.737492][ T6471] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.737579][ T6471] __sys_sendmsg+0x170/0x220 [ 120.737608][ T6471] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.737636][ T6471] ? __x64_sys_futex+0x34f/0x4d0 [ 120.737698][ T6471] do_syscall_64+0x106/0xf80 [ 120.737727][ T6471] ? clear_bhb_loop+0x40/0x90 [ 120.737765][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.737795][ T6471] RIP: 0033:0x7f733839c819 [ 120.737821][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.737846][ T6471] RSP: 002b:00007f7339315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.737873][ T6471] RAX: ffffffffffffffda RBX: 00007f7338615fa0 RCX: 00007f733839c819 [ 120.737891][ T6471] RDX: 0000000004000080 RSI: 0000200000002e40 RDI: 0000000000000004 [ 120.737907][ T6471] RBP: 00007f7338432c91 R08: 0000000000000000 R09: 0000000000000000 [ 120.737922][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.737938][ T6471] R13: 00007f7338616038 R14: 00007f7338615fa0 R15: 00007fffafced998 [ 120.737977][ T6471] [ 121.606808][ T6487] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.642594][ T6486] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.155505][ T6510] device-mapper: ioctl: device name cannot contain '/' [ 123.137711][ T5831] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 123.178348][ T6531] FAULT_INJECTION: forcing a failure. [ 123.178348][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 123.291335][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz.2.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.291385][ T6531] Tainted: [L]=SOFTLOCKUP [ 123.291396][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.291412][ T6531] Call Trace: [ 123.291422][ T6531] [ 123.291433][ T6531] dump_stack_lvl+0x100/0x190 [ 123.291487][ T6531] should_fail_ex.cold+0x5/0xa [ 123.291526][ T6531] should_failslab+0xc2/0x120 [ 123.291561][ T6531] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 123.291607][ T6531] ? __kernfs_new_node+0xd2/0x960 [ 123.291662][ T6531] __kernfs_new_node+0xd2/0x960 [ 123.291713][ T6531] ? __pfx___kernfs_new_node+0x10/0x10 [ 123.291770][ T6531] ? find_held_lock+0x2b/0x80 [ 123.291801][ T6531] ? kernfs_root+0xee/0x2a0 [ 123.291844][ T6531] ? kernfs_root+0xee/0x2a0 [ 123.291900][ T6531] kernfs_new_node+0x11b/0x1a0 [ 123.291937][ T6531] __kernfs_create_file+0x53/0x350 [ 123.291980][ T6531] sysfs_add_file_mode_ns+0x207/0x3c0 [ 123.292046][ T6531] sysfs_merge_group+0x194/0x340 [ 123.292097][ T6531] ? __pfx_sysfs_merge_group+0x10/0x10 [ 123.292143][ T6531] ? bus_add_device+0x368/0x6b0 [ 123.292178][ T6531] ? __pfx_bus_add_device+0x10/0x10 [ 123.292205][ T6531] ? __pfx_dev_add_physical_location+0x10/0x10 [ 123.292255][ T6531] dpm_sysfs_add+0x237/0x280 [ 123.292297][ T6531] device_add+0x9ef/0x1950 [ 123.292338][ T6531] ? __pfx_device_add+0x10/0x10 [ 123.292376][ T6531] ? lockdep_init_map_type+0x5c/0x250 [ 123.292420][ T6531] ? __init_waitqueue_head+0xca/0x150 [ 123.292479][ T6531] rfkill_register+0x1ad/0xb30 [ 123.292527][ T6531] nfc_register_device+0x11f/0x3e0 [ 123.292562][ T6531] nci_register_device+0x7f1/0xb80 [ 123.292604][ T6531] ? __pfx_nci_register_device+0x10/0x10 [ 123.292654][ T6531] ? lockdep_init_map_type+0x5c/0x250 [ 123.292700][ T6531] virtual_ncidev_open+0x141/0x220 [ 123.292737][ T6531] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 123.292765][ T6531] misc_open+0x26d/0x450 [ 123.292789][ T6531] ? __pfx_misc_open+0x10/0x10 [ 123.292812][ T6531] chrdev_open+0x234/0x6a0 [ 123.292832][ T6531] ? __pfx_apparmor_file_open+0x10/0x10 [ 123.292853][ T6531] ? __pfx_chrdev_open+0x10/0x10 [ 123.292874][ T6531] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 123.292900][ T6531] do_dentry_open+0x6d8/0x1660 [ 123.292918][ T6531] ? __pfx_chrdev_open+0x10/0x10 [ 123.292944][ T6531] vfs_open+0x82/0x3f0 [ 123.292971][ T6531] path_openat+0x208c/0x31a0 [ 123.292999][ T6531] ? __pfx_path_openat+0x10/0x10 [ 123.293035][ T6531] do_file_open+0x20e/0x430 [ 123.293057][ T6531] ? __pfx_do_file_open+0x10/0x10 [ 123.293094][ T6531] ? alloc_fd+0x476/0x790 [ 123.293115][ T6531] ? do_getname+0x191/0x390 [ 123.293141][ T6531] do_sys_openat2+0x10d/0x1e0 [ 123.293166][ T6531] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.293193][ T6531] ? __fget_files+0x21f/0x3d0 [ 123.293217][ T6531] __x64_sys_openat+0x12d/0x210 [ 123.293243][ T6531] ? __pfx___x64_sys_openat+0x10/0x10 [ 123.293279][ T6531] do_syscall_64+0x106/0xf80 [ 123.293298][ T6531] ? clear_bhb_loop+0x40/0x90 [ 123.293320][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.293339][ T6531] RIP: 0033:0x7f22c799c819 [ 123.293356][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.293373][ T6531] RSP: 002b:00007f22c5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.293391][ T6531] RAX: ffffffffffffffda RBX: 00007f22c7c15fa0 RCX: 00007f22c799c819 [ 123.293402][ T6531] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 123.293412][ T6531] RBP: 00007f22c7a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 123.293423][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.293433][ T6531] R13: 00007f22c7c16038 R14: 00007f22c7c15fa0 R15: 00007ffcb7550b88 [ 123.293456][ T6531] [ 123.698991][ T6540] futex_wake_op: syz.2.146 tries to shift op by -2048; fix this program [ 123.737929][ T6540] futex_wake_op: syz.2.146 tries to shift op by -2048; fix this program [ 123.892692][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'. [ 124.133811][ T6562] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 124.319696][ T6547] team0 (unregistering): Port device team_slave_0 removed [ 124.446391][ T6547] team0 (unregistering): Port device team_slave_1 removed [ 125.145529][ T6587] FAULT_INJECTION: forcing a failure. [ 125.145529][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 125.158767][ T6587] CPU: 0 UID: 0 PID: 6587 Comm: syz.1.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.158818][ T6587] Tainted: [L]=SOFTLOCKUP [ 125.158829][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.158845][ T6587] Call Trace: [ 125.158854][ T6587] [ 125.158865][ T6587] dump_stack_lvl+0x100/0x190 [ 125.158918][ T6587] should_fail_ex.cold+0x5/0xa [ 125.158955][ T6587] should_failslab+0xc2/0x120 [ 125.159001][ T6587] __kmalloc_cache_noprof+0x7a/0x6f0 [ 125.159042][ T6587] ? sctp_add_bind_addr+0xae/0x3e0 [ 125.159097][ T6587] sctp_add_bind_addr+0xae/0x3e0 [ 125.159147][ T6587] sctp_copy_local_addr_list+0x349/0x550 [ 125.159185][ T6587] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 125.159221][ T6587] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 125.159256][ T6587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.159293][ T6587] sctp_bind_addr_copy+0xe0/0x530 [ 125.159351][ T6587] sctp_connect_new_asoc+0x1c9/0x770 [ 125.159394][ T6587] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 125.159438][ T6587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.159479][ T6587] __sctp_connect+0x3e7/0xc70 [ 125.159529][ T6587] ? __pfx___sctp_connect+0x10/0x10 [ 125.159572][ T6587] ? __pfx_sctp_inet_connect+0x10/0x10 [ 125.159614][ T6587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.159660][ T6587] ? __pfx_sctp_inet_connect+0x10/0x10 [ 125.159704][ T6587] sctp_inet_connect+0x15f/0x220 [ 125.159745][ T6587] __sys_connect_file+0x141/0x1a0 [ 125.159792][ T6587] __sys_connect+0x141/0x170 [ 125.159834][ T6587] ? __pfx___sys_connect+0x10/0x10 [ 125.159902][ T6587] __x64_sys_connect+0x72/0xb0 [ 125.159943][ T6587] ? lockdep_hardirqs_on+0x78/0x100 [ 125.159973][ T6587] do_syscall_64+0x106/0xf80 [ 125.160011][ T6587] ? clear_bhb_loop+0x40/0x90 [ 125.160050][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.160090][ T6587] RIP: 0033:0x7f733839c819 [ 125.160116][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.160144][ T6587] RSP: 002b:00007f7339315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 125.160176][ T6587] RAX: ffffffffffffffda RBX: 00007f7338615fa0 RCX: 00007f733839c819 [ 125.160197][ T6587] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 125.160214][ T6587] RBP: 00007f7338432c91 R08: 0000000000000000 R09: 0000000000000000 [ 125.160232][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.160248][ T6587] R13: 00007f7338616038 R14: 00007f7338615fa0 R15: 00007fffafced998 [ 125.160288][ T6587] [ 126.375205][ T5831] Bluetooth: Frame is too long (len 503, expected len 4) [ 128.109297][ T6657] FAULT_INJECTION: forcing a failure. [ 128.109297][ T6657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.123952][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.0.168 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.123982][ T6657] Tainted: [L]=SOFTLOCKUP [ 128.123988][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.123999][ T6657] Call Trace: [ 128.124007][ T6657] [ 128.124014][ T6657] dump_stack_lvl+0x100/0x190 [ 128.124048][ T6657] should_fail_ex.cold+0x5/0xa [ 128.124070][ T6657] _copy_to_user+0x32/0xd0 [ 128.124095][ T6657] simple_read_from_buffer+0xcb/0x170 [ 128.124127][ T6657] proc_fail_nth_read+0x1af/0x230 [ 128.124153][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.124181][ T6657] ? rw_verify_area+0xce/0x6d0 [ 128.124208][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.124232][ T6657] vfs_read+0x1e4/0xb30 [ 128.124260][ T6657] ? __pfx_vfs_read+0x10/0x10 [ 128.124277][ T6657] ? __fget_files+0x215/0x3d0 [ 128.124300][ T6657] ? __fget_files+0x21f/0x3d0 [ 128.124324][ T6657] ksys_read+0x12a/0x250 [ 128.124341][ T6657] ? __pfx_ksys_read+0x10/0x10 [ 128.124365][ T6657] do_syscall_64+0x106/0xf80 [ 128.124384][ T6657] ? clear_bhb_loop+0x40/0x90 [ 128.124407][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.124426][ T6657] RIP: 0033:0x7f1a86d5d04e [ 128.124441][ T6657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.124458][ T6657] RSP: 002b:00007f1a87cbcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.124476][ T6657] RAX: ffffffffffffffda RBX: 00007f1a87cbd6c0 RCX: 00007f1a86d5d04e [ 128.124487][ T6657] RDX: 000000000000000f RSI: 00007f1a87cbd0a0 RDI: 0000000000000004 [ 128.124497][ T6657] RBP: 00007f1a87cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 128.124508][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.124518][ T6657] R13: 00007f1a87016128 R14: 00007f1a87016090 R15: 00007ffc19295938 [ 128.124540][ T6657] [ 128.738286][ T6664] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.260967][ T6682] FAULT_INJECTION: forcing a failure. [ 129.260967][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 129.305052][ T6682] CPU: 1 UID: 0 PID: 6682 Comm: syz.1.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.305100][ T6682] Tainted: [L]=SOFTLOCKUP [ 129.305110][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.305125][ T6682] Call Trace: [ 129.305134][ T6682] [ 129.305145][ T6682] dump_stack_lvl+0x100/0x190 [ 129.305193][ T6682] should_fail_ex.cold+0x5/0xa [ 129.305231][ T6682] should_failslab+0xc2/0x120 [ 129.305282][ T6682] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 129.305324][ T6682] ? skb_clone+0x190/0x400 [ 129.305364][ T6682] skb_clone+0x190/0x400 [ 129.305393][ T6682] netlink_deliver_tap+0xaed/0xcc0 [ 129.305433][ T6682] netlink_unicast+0x650/0x870 [ 129.305470][ T6682] ? __pfx_netlink_unicast+0x10/0x10 [ 129.305500][ T6682] ? __pfx___might_resched+0x10/0x10 [ 129.305544][ T6682] ? __lock_acquire+0x4a5/0x2630 [ 129.305591][ T6682] netlink_sendmsg+0x8b0/0xda0 [ 129.305629][ T6682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.305655][ T6682] ? __import_iovec+0x1d2/0x640 [ 129.305689][ T6682] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 129.305720][ T6682] ____sys_sendmsg+0x9e1/0xb70 [ 129.305747][ T6682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.305775][ T6682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.305808][ T6682] ? try_to_wake_up+0x644/0x1a80 [ 129.305839][ T6682] ___sys_sendmsg+0x190/0x1e0 [ 129.305872][ T6682] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.305902][ T6682] ? futex_private_hash_put+0x107/0x1c0 [ 129.305970][ T6682] __sys_sendmsg+0x170/0x220 [ 129.305994][ T6682] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.306016][ T6682] ? __x64_sys_futex+0x34f/0x4d0 [ 129.306067][ T6682] do_syscall_64+0x106/0xf80 [ 129.306091][ T6682] ? clear_bhb_loop+0x40/0x90 [ 129.306119][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.306143][ T6682] RIP: 0033:0x7f733839c819 [ 129.306163][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.306185][ T6682] RSP: 002b:00007f7339315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.306208][ T6682] RAX: ffffffffffffffda RBX: 00007f7338615fa0 RCX: 00007f733839c819 [ 129.306224][ T6682] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 129.306238][ T6682] RBP: 00007f7338432c91 R08: 0000000000000000 R09: 0000000000000000 [ 129.306253][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.306275][ T6682] R13: 00007f7338616038 R14: 00007f7338615fa0 R15: 00007fffafced998 [ 129.306306][ T6682] [ 129.854229][ T6690] mmap: syz.3.178 (6690) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.869524][ T5831] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 129.877673][ T5831] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 129.944894][ T6695] can0: slcan on pty238. [ 130.043867][ T6691] can0 (unregistered): slcan off pty238. [ 130.169223][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 130.177736][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 130.253685][ T6710] futex_wake_op: syz.3.183 tries to shift op by -2048; fix this program [ 130.286297][ T6710] futex_wake_op: syz.3.183 tries to shift op by -2048; fix this program [ 130.363882][ T6705] FAULT_INJECTION: forcing a failure. [ 130.363882][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 130.465445][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.3.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.465494][ T6705] Tainted: [L]=SOFTLOCKUP [ 130.465504][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.465521][ T6705] Call Trace: [ 130.465531][ T6705] [ 130.465543][ T6705] dump_stack_lvl+0x100/0x190 [ 130.465596][ T6705] should_fail_ex.cold+0x5/0xa [ 130.465636][ T6705] should_failslab+0xc2/0x120 [ 130.465672][ T6705] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 130.465719][ T6705] ? __kernfs_new_node+0xd2/0x960 [ 130.465774][ T6705] __kernfs_new_node+0xd2/0x960 [ 130.465817][ T6705] ? kernfs_add_one+0x583/0x850 [ 130.465853][ T6705] ? __pfx___kernfs_new_node+0x10/0x10 [ 130.465910][ T6705] ? find_held_lock+0x2b/0x80 [ 130.465940][ T6705] ? kernfs_root+0xee/0x2a0 [ 130.465990][ T6705] ? kernfs_root+0xee/0x2a0 [ 130.466041][ T6705] kernfs_new_node+0x11b/0x1a0 [ 130.466075][ T6705] kernfs_create_dir_ns+0x4c/0x1a0 [ 130.466110][ T6705] internal_create_group+0x36f/0xf40 [ 130.466163][ T6705] ? bus_to_subsys+0x114/0x150 [ 130.466207][ T6705] ? __pfx_internal_create_group+0x10/0x10 [ 130.466248][ T6705] ? bus_add_device+0x368/0x6b0 [ 130.466276][ T6705] ? __pfx_bus_add_device+0x10/0x10 [ 130.466301][ T6705] ? __pfx_dev_add_physical_location+0x10/0x10 [ 130.466346][ T6705] dpm_sysfs_add+0x80/0x280 [ 130.466384][ T6705] device_add+0x9ef/0x1950 [ 130.466424][ T6705] ? __pfx_device_add+0x10/0x10 [ 130.466461][ T6705] ? lockdep_init_map_type+0x5c/0x250 [ 130.466503][ T6705] ? __init_waitqueue_head+0xca/0x150 [ 130.466560][ T6705] rfkill_register+0x1ad/0xb30 [ 130.466606][ T6705] nfc_register_device+0x11f/0x3e0 [ 130.466642][ T6705] nci_register_device+0x7f1/0xb80 [ 130.466688][ T6705] ? __pfx_nci_register_device+0x10/0x10 [ 130.466737][ T6705] ? lockdep_init_map_type+0x5c/0x250 [ 130.466786][ T6705] virtual_ncidev_open+0x141/0x220 [ 130.466832][ T6705] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 130.466876][ T6705] misc_open+0x26d/0x450 [ 130.466915][ T6705] ? __pfx_misc_open+0x10/0x10 [ 130.467064][ T6705] chrdev_open+0x234/0x6a0 [ 130.467100][ T6705] ? __pfx_apparmor_file_open+0x10/0x10 [ 130.467133][ T6705] ? __pfx_chrdev_open+0x10/0x10 [ 130.467168][ T6705] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 130.467210][ T6705] do_dentry_open+0x6d8/0x1660 [ 130.467242][ T6705] ? __pfx_chrdev_open+0x10/0x10 [ 130.467285][ T6705] vfs_open+0x82/0x3f0 [ 130.467329][ T6705] path_openat+0x208c/0x31a0 [ 130.467378][ T6705] ? __pfx_path_openat+0x10/0x10 [ 130.467426][ T6705] do_file_open+0x20e/0x430 [ 130.467461][ T6705] ? __pfx_do_file_open+0x10/0x10 [ 130.467520][ T6705] ? alloc_fd+0x476/0x790 [ 130.467556][ T6705] ? do_getname+0x191/0x390 [ 130.467600][ T6705] do_sys_openat2+0x10d/0x1e0 [ 130.467639][ T6705] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.467681][ T6705] ? __fget_files+0x21f/0x3d0 [ 130.467722][ T6705] __x64_sys_openat+0x12d/0x210 [ 130.467768][ T6705] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.467829][ T6705] do_syscall_64+0x106/0xf80 [ 130.467862][ T6705] ? clear_bhb_loop+0x40/0x90 [ 130.467902][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.467934][ T6705] RIP: 0033:0x7fb7a779c819 [ 130.467968][ T6705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.467994][ T6705] RSP: 002b:00007fb7a864e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.468024][ T6705] RAX: ffffffffffffffda RBX: 00007fb7a7a15fa0 RCX: 00007fb7a779c819 [ 130.468044][ T6705] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 130.468061][ T6705] RBP: 00007fb7a7832c91 R08: 0000000000000000 R09: 0000000000000000 [ 130.468078][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.468094][ T6705] R13: 00007fb7a7a16038 R14: 00007fb7a7a15fa0 R15: 00007ffc877eb348 [ 130.468135][ T6705] [ 131.709859][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 132.030295][ T6747] netlink: 504 bytes leftover after parsing attributes in process `syz.1.192'. [ 132.285689][ T6752] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 132.350446][ T6755] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 132.350446][ T6755] program syz.2.194 not setting count and/or reply_len properly [ 133.117239][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.124084][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.698902][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 134.913392][ T6801] futex_wake_op: syz.1.207 tries to shift op by -2048; fix this program [ 138.193686][ T6845] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-1) [ 138.431581][ T6852] ima: policy update failed [ 138.532499][ T29] audit: type=1802 audit(1775459349.805:3): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.217" res=0 errno=0 [ 139.610341][ T6855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.629284][ T6855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.699341][ T6855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.762155][ T6855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.785645][ T6865] cougar: G6 mapped to space [ 139.811950][ T6868] cougar: G6 mapped to space [ 139.959393][ T6855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.991397][ T6855] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.096971][ T6855] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.197826][ T6855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.241250][ T6855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.307358][ T6855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.448495][ T6855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.523744][ T6855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.547346][ T6855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.609737][ T6855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.638236][ T6855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.920090][ T6881] FAULT_INJECTION: forcing a failure. [ 140.920090][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 140.944261][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: syz.0.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.944311][ T6881] Tainted: [L]=SOFTLOCKUP [ 140.944321][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.944338][ T6881] Call Trace: [ 140.944348][ T6881] [ 140.944359][ T6881] dump_stack_lvl+0x100/0x190 [ 140.944411][ T6881] should_fail_ex.cold+0x5/0xa [ 140.944446][ T6881] should_failslab+0xc2/0x120 [ 140.944479][ T6881] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 140.944524][ T6881] ? shmem_alloc_inode+0x25/0x50 [ 140.944558][ T6881] ? __lock_acquire+0x4a5/0x2630 [ 140.944604][ T6881] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 140.944640][ T6881] shmem_alloc_inode+0x25/0x50 [ 140.944673][ T6881] alloc_inode+0x68/0x250 [ 140.944714][ T6881] new_inode+0x22/0x1c0 [ 140.944755][ T6881] shmem_get_inode+0x212/0x1040 [ 140.944802][ T6881] ? __pfx_shmem_get_inode+0x10/0x10 [ 140.944840][ T6881] ? rcu_is_watching+0x12/0xc0 [ 140.944891][ T6881] ? percpu_counter_add_batch+0xb9/0x230 [ 140.944944][ T6881] __shmem_file_setup+0x3ac/0x490 [ 140.944990][ T6881] ? __pfx___shmem_file_setup+0x10/0x10 [ 140.945041][ T6881] ? vm_area_alloc+0x1f/0x160 [ 140.945090][ T6881] shmem_zero_setup+0x96/0x1b0 [ 140.945123][ T6881] __mmap_region+0x2198/0x29e0 [ 140.945176][ T6881] ? __pfx___mmap_region+0x10/0x10 [ 140.945232][ T6881] ? set_next_entity+0x11e/0x9c0 [ 140.945285][ T6881] ? __lock_acquire+0x4a5/0x2630 [ 140.945325][ T6881] ? update_cfs_rq_load_avg+0x51/0x550 [ 140.945378][ T6881] ? find_held_lock+0x2b/0x80 [ 140.945407][ T6881] ? finish_task_switch.isra.0+0x200/0xb80 [ 140.945441][ T6881] ? finish_task_switch.isra.0+0x200/0xb80 [ 140.945492][ T6881] ? trace_sched_exit_tp+0x13a/0x180 [ 140.945531][ T6881] ? __schedule+0x1000/0x6120 [ 140.945634][ T6881] ? rcu_is_watching+0x12/0xc0 [ 140.945681][ T6881] ? cap_capable+0x107/0x460 [ 140.945721][ T6881] mmap_region+0x180/0x3e0 [ 140.945776][ T6881] do_mmap+0xc63/0x12f0 [ 140.945822][ T6881] ? __pfx_do_mmap+0x10/0x10 [ 140.945858][ T6881] ? __pfx_down_write_killable+0x10/0x10 [ 140.945912][ T6881] vm_mmap_pgoff+0x29e/0x470 [ 140.945957][ T6881] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 140.945997][ T6881] ? do_futex+0x192/0x350 [ 140.946038][ T6881] ? __pfx_do_futex+0x10/0x10 [ 140.946088][ T6881] ksys_mmap_pgoff+0xe1/0x650 [ 140.946123][ T6881] ? __x64_sys_futex+0x34f/0x4d0 [ 140.946163][ T6881] ? __x64_sys_futex+0x358/0x4d0 [ 140.946206][ T6881] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 140.946241][ T6881] ? xfd_validate_state+0x129/0x190 [ 140.946295][ T6881] __x64_sys_mmap+0x125/0x190 [ 140.946346][ T6881] do_syscall_64+0x106/0xf80 [ 140.946377][ T6881] ? clear_bhb_loop+0x40/0x90 [ 140.946415][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.946447][ T6881] RIP: 0033:0x7f1a86d9c819 [ 140.946473][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.946501][ T6881] RSP: 002b:00007f1a87cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.946530][ T6881] RAX: ffffffffffffffda RBX: 00007f1a87015fa0 RCX: 00007f1a86d9c819 [ 140.946550][ T6881] RDX: 0000000000000003 RSI: 000000000202000b RDI: 0000000000000000 [ 140.946567][ T6881] RBP: 00007f1a86e32c91 R08: fffffffffffffffa R09: 0000000000008000 [ 140.946585][ T6881] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 140.946602][ T6881] R13: 00007f1a87016038 R14: 00007f1a87015fa0 R15: 00007ffc19295938 [ 140.946644][ T6881] [ 141.295423][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.764784][ T6892] syz.0.228 (6892) used greatest stack depth: 19672 bytes left [ 141.999332][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.023098][ T6896] random: crng reseeded on system resumption [ 142.232416][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.232601][ T6906] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 142.562419][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.355590][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.072408][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.312360][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.418032][ T6942] Invalid ELF header magic: != ELF [ 144.633349][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.807585][ T6946] random: crng reseeded on system resumption [ 144.934709][ T6946] FAULT_INJECTION: forcing a failure. [ 144.934709][ T6946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.119674][ T6946] CPU: 1 UID: 0 PID: 6946 Comm: syz.1.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.119723][ T6946] Tainted: [L]=SOFTLOCKUP [ 145.119734][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.119750][ T6946] Call Trace: [ 145.119761][ T6946] [ 145.119772][ T6946] dump_stack_lvl+0x100/0x190 [ 145.119827][ T6946] should_fail_ex.cold+0x5/0xa [ 145.119871][ T6946] ? prepare_alloc_pages+0x16d/0x5f0 [ 145.119914][ T6946] should_fail_alloc_page+0xeb/0x140 [ 145.119953][ T6946] prepare_alloc_pages+0x1f0/0x5f0 [ 145.120000][ T6946] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 145.120054][ T6946] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 145.120117][ T6946] ? stack_trace_save+0x8e/0xc0 [ 145.120153][ T6946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.120202][ T6946] ? stack_depot_save_flags+0x27/0x9d0 [ 145.120246][ T6946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.120302][ T6946] ? kasan_save_stack+0x3f/0x50 [ 145.120330][ T6946] ? kasan_save_stack+0x30/0x50 [ 145.120357][ T6946] ? kasan_save_track+0x14/0x30 [ 145.120395][ T6946] ? do_sys_openat2+0x10d/0x1e0 [ 145.120435][ T6946] ? __x64_sys_openat+0x12d/0x210 [ 145.120475][ T6946] ? do_syscall_64+0x106/0xf80 [ 145.120507][ T6946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.120544][ T6946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.120580][ T6946] ? policy_nodemask+0xed/0x4f0 [ 145.120618][ T6946] alloc_pages_mpol+0x1fb/0x550 [ 145.120656][ T6946] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 145.120691][ T6946] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 145.120734][ T6946] alloc_pages_noprof+0x136/0x390 [ 145.120772][ T6946] get_zeroed_page_noprof+0x18/0xb0 [ 145.120805][ T6946] get_image_page+0x18/0x1a0 [ 145.120862][ T6946] alloc_rtree_node+0x3c/0xb0 [ 145.120894][ T6946] memory_bm_create+0x65e/0xba0 [ 145.120944][ T6946] create_basic_memory_bitmaps+0x10b/0x350 [ 145.120987][ T6946] snapshot_open+0x230/0x2a0 [ 145.121030][ T6946] ? __pfx_snapshot_open+0x10/0x10 [ 145.121081][ T6946] misc_open+0x26d/0x450 [ 145.121121][ T6946] ? __pfx_misc_open+0x10/0x10 [ 145.121161][ T6946] chrdev_open+0x234/0x6a0 [ 145.121195][ T6946] ? __pfx_apparmor_file_open+0x10/0x10 [ 145.121231][ T6946] ? __pfx_chrdev_open+0x10/0x10 [ 145.121269][ T6946] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 145.121315][ T6946] do_dentry_open+0x6d8/0x1660 [ 145.121349][ T6946] ? __pfx_chrdev_open+0x10/0x10 [ 145.121395][ T6946] vfs_open+0x82/0x3f0 [ 145.121441][ T6946] path_openat+0x208c/0x31a0 [ 145.121491][ T6946] ? __pfx_path_openat+0x10/0x10 [ 145.121542][ T6946] do_file_open+0x20e/0x430 [ 145.121580][ T6946] ? __pfx_do_file_open+0x10/0x10 [ 145.121646][ T6946] ? alloc_fd+0x476/0x790 [ 145.121685][ T6946] ? do_getname+0x191/0x390 [ 145.121730][ T6946] do_sys_openat2+0x10d/0x1e0 [ 145.121785][ T6946] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.121942][ T6946] __x64_sys_openat+0x12d/0x210 [ 145.121990][ T6946] ? __pfx___x64_sys_openat+0x10/0x10 [ 145.122052][ T6946] do_syscall_64+0x106/0xf80 [ 145.122083][ T6946] ? clear_bhb_loop+0x40/0x90 [ 145.122120][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.122152][ T6946] RIP: 0033:0x7f733839c819 [ 145.122178][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.122207][ T6946] RSP: 002b:00007f7339315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.122237][ T6946] RAX: ffffffffffffffda RBX: 00007f7338615fa0 RCX: 00007f733839c819 [ 145.122256][ T6946] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 145.122273][ T6946] RBP: 00007f7338432c91 R08: 0000000000000000 R09: 0000000000000000 [ 145.122290][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.122307][ T6946] R13: 00007f7338616038 R14: 00007f7338615fa0 R15: 00007fffafced998 [ 145.122347][ T6946] [ 145.552227][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.162368][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.392487][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.495147][ T6963] process 'syz.3.244' launched '/dev/fd/1' with NULL argv: empty string added [ 146.712386][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.879220][ T6967] futex_wake_op: syz.0.246 tries to shift op by -2048; fix this program [ 146.887973][ T6967] futex_wake_op: syz.0.246 tries to shift op by -2048; fix this program [ 147.595318][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.476855][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.792449][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.769469][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 152.561059][ T7087] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 152.561059][ T7087] program syz.3.268 not setting count and/or reply_len properly [ 153.630179][ T7101] zswap: compressor not available [ 153.794911][ T7118] netlink: 334 bytes leftover after parsing attributes in process `syz.3.276'. [ 154.416765][ T7138] FAULT_INJECTION: forcing a failure. [ 154.416765][ T7138] name failslab, interval 1, probability 0, space 0, times 0 [ 154.459177][ T7138] CPU: 0 UID: 0 PID: 7138 Comm: syz.2.281 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.459227][ T7138] Tainted: [L]=SOFTLOCKUP [ 154.459239][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.459255][ T7138] Call Trace: [ 154.459264][ T7138] [ 154.459275][ T7138] dump_stack_lvl+0x100/0x190 [ 154.459324][ T7138] should_fail_ex.cold+0x5/0xa [ 154.459361][ T7138] should_failslab+0xc2/0x120 [ 154.459393][ T7138] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 154.459439][ T7138] ? security_file_alloc+0x34/0x2c0 [ 154.459479][ T7138] ? trace_kmem_cache_alloc+0xf3/0x120 [ 154.459519][ T7138] security_file_alloc+0x34/0x2c0 [ 154.459557][ T7138] init_file+0x95/0x480 [ 154.459594][ T7138] alloc_empty_file+0x73/0x1c0 [ 154.459631][ T7138] alloc_file_pseudo+0x13a/0x230 [ 154.459671][ T7138] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 154.459711][ T7138] ? _raw_spin_unlock+0x28/0x50 [ 154.459756][ T7138] ? alloc_fd+0x476/0x790 [ 154.459859][ T7138] __anon_inode_getfile+0xe8/0x280 [ 154.459904][ T7138] __anon_inode_getfd+0x5c/0xe0 [ 154.459950][ T7138] __x64_sys_fsopen+0x190/0x220 [ 154.459996][ T7138] do_syscall_64+0x106/0xf80 [ 154.460025][ T7138] ? clear_bhb_loop+0x40/0x90 [ 154.460063][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.460094][ T7138] RIP: 0033:0x7f22c799c819 [ 154.460120][ T7138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.460148][ T7138] RSP: 002b:00007f22c5bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 154.460178][ T7138] RAX: ffffffffffffffda RBX: 00007f22c7c15fa0 RCX: 00007f22c799c819 [ 154.460198][ T7138] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 154.460214][ T7138] RBP: 00007f22c7a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 154.460230][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.460246][ T7138] R13: 00007f22c7c16038 R14: 00007f22c7c15fa0 R15: 00007ffcb7550b88 [ 154.460284][ T7138] [ 155.607637][ T51] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 155.607681][ T51] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 155.629055][ T51] Bluetooth: hci1: Dropping invalid advertising data [ 155.636633][ T51] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 155.636675][ T51] Bluetooth: hci1: Dropping invalid advertising data [ 155.650787][ T51] Bluetooth: hci1: Malformed LE Event: 0x02 [ 157.444385][ T7189] serio: Serial port pty222 [ 157.965823][ T7217] FAULT_INJECTION: forcing a failure. [ 157.965823][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 157.988066][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.3.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.988114][ T7217] Tainted: [L]=SOFTLOCKUP [ 157.988125][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.988141][ T7217] Call Trace: [ 157.988150][ T7217] [ 157.988161][ T7217] dump_stack_lvl+0x100/0x190 [ 157.988210][ T7217] should_fail_ex.cold+0x5/0xa [ 157.988246][ T7217] should_failslab+0xc2/0x120 [ 157.988279][ T7217] __kmalloc_cache_noprof+0x7a/0x6f0 [ 157.988321][ T7217] ? alloc_fs_context+0x57/0xf40 [ 157.988357][ T7217] ? lockdep_hardirqs_on+0x78/0x100 [ 157.988395][ T7217] alloc_fs_context+0x57/0xf40 [ 157.988437][ T7217] __x64_sys_fsopen+0xed/0x220 [ 157.988480][ T7217] do_syscall_64+0x106/0xf80 [ 157.988509][ T7217] ? clear_bhb_loop+0x40/0x90 [ 157.988547][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.988596][ T7217] RIP: 0033:0x7fb7a779c819 [ 157.988623][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.988650][ T7217] RSP: 002b:00007fb7a864e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 157.988680][ T7217] RAX: ffffffffffffffda RBX: 00007fb7a7a15fa0 RCX: 00007fb7a779c819 [ 157.988709][ T7217] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 157.988726][ T7217] RBP: 00007fb7a7832c91 R08: 0000000000000000 R09: 0000000000000000 [ 157.988744][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.988761][ T7217] R13: 00007fb7a7a16038 R14: 00007fb7a7a15fa0 R15: 00007ffc877eb348 [ 157.988801][ T7217] [ 158.539795][ T7229] syz.1.305 (7229): /proc/7226/oom_adj is deprecated, please use /proc/7226/oom_score_adj instead. [ 159.294829][ T7246] overlayfs: missing 'lowerdir' [ 161.359929][ T7296] FAULT_INJECTION: forcing a failure. [ 161.359929][ T7296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.359991][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.360037][ T7296] Tainted: [L]=SOFTLOCKUP [ 161.360053][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.360070][ T7296] Call Trace: [ 161.360081][ T7296] [ 161.360093][ T7296] dump_stack_lvl+0x100/0x190 [ 161.360143][ T7296] should_fail_ex.cold+0x5/0xa [ 161.360176][ T7296] ? prepare_alloc_pages+0x16d/0x5f0 [ 161.360217][ T7296] should_fail_alloc_page+0xeb/0x140 [ 161.360253][ T7296] prepare_alloc_pages+0x1f0/0x5f0 [ 161.360299][ T7296] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 161.360356][ T7296] ? rcu_is_watching+0x12/0xc0 [ 161.360403][ T7296] ? trace_mm_page_alloc+0x17a/0x1d0 [ 161.360443][ T7296] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 161.360499][ T7296] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 161.360546][ T7296] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 161.360599][ T7296] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 161.360646][ T7296] ? stack_depot_save_flags+0x479/0x9d0 [ 161.360694][ T7296] ? kasan_save_stack+0x3f/0x50 [ 161.360729][ T7296] ? check_irq_usage+0xe5/0x810 [ 161.360763][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.360805][ T7296] ? fbcon_modechanged+0x342/0x700 [ 161.360854][ T7296] alloc_pages_bulk_noprof+0x782/0x1490 [ 161.360898][ T7296] ? check_noncircular+0x97/0x160 [ 161.360959][ T7296] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 161.361028][ T7296] ? alloc_pages_noprof+0x238/0x390 [ 161.361069][ T7296] __kasan_populate_vmalloc+0xf0/0x210 [ 161.361131][ T7296] alloc_vmap_area+0x95d/0x2bd0 [ 161.361186][ T7296] ? __pfx_alloc_vmap_area+0x10/0x10 [ 161.361235][ T7296] __get_vm_area_node+0x1ca/0x330 [ 161.361282][ T7296] __vmalloc_node_range_noprof+0x213/0x1530 [ 161.361325][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.361381][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.361428][ T7296] ? rcu_read_unlock+0x17/0x60 [ 161.361472][ T7296] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.361513][ T7296] ? lruvec_stat_mod_folio+0x239/0x390 [ 161.361562][ T7296] ? rcu_is_watching+0x12/0xc0 [ 161.361614][ T7296] ? rcu_is_watching+0x12/0xc0 [ 161.361660][ T7296] ? trace_kmalloc+0x101/0x130 [ 161.361697][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.361739][ T7296] __vmalloc_node_noprof+0xad/0xf0 [ 161.361780][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.361829][ T7296] vc_do_resize+0x249/0xeb0 [ 161.361880][ T7296] ? __pfx_fb_match_mode+0x10/0x10 [ 161.361938][ T7296] ? __pfx_vc_do_resize+0x10/0x10 [ 161.362000][ T7296] fbcon_modechanged+0x342/0x700 [ 161.362044][ T7296] fbcon_set_all_vcs+0x1d6/0x460 [ 161.362087][ T7296] rotate_all_store+0x315/0x400 [ 161.362127][ T7296] ? __pfx_rotate_all_store+0x10/0x10 [ 161.362162][ T7296] dev_attr_store+0x58/0x80 [ 161.362203][ T7296] ? __pfx_dev_attr_store+0x10/0x10 [ 161.362242][ T7296] sysfs_kf_write+0xf2/0x150 [ 161.362280][ T7296] kernfs_fop_write_iter+0x3e0/0x5f0 [ 161.362310][ T7296] ? __pfx_sysfs_kf_write+0x10/0x10 [ 161.362350][ T7296] vfs_write+0x6ac/0x1070 [ 161.362379][ T7296] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 161.362417][ T7296] ? __pfx_vfs_write+0x10/0x10 [ 161.362473][ T7296] ksys_write+0x12a/0x250 [ 161.362504][ T7296] ? __pfx_ksys_write+0x10/0x10 [ 161.362549][ T7296] do_syscall_64+0x106/0xf80 [ 161.362581][ T7296] ? clear_bhb_loop+0x40/0x90 [ 161.362620][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.362652][ T7296] RIP: 0033:0x7f1a86d9c819 [ 161.362678][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.362705][ T7296] RSP: 002b:00007f1a87cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.362733][ T7296] RAX: ffffffffffffffda RBX: 00007f1a87016090 RCX: 00007f1a86d9c819 [ 161.362753][ T7296] RDX: 0000000000000009 RSI: 0000200000000000 RDI: 0000000000000007 [ 161.362770][ T7296] RBP: 00007f1a86e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 161.362788][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.362804][ T7296] R13: 00007f1a87016128 R14: 00007f1a87016090 R15: 00007ffc19295938 [ 161.362847][ T7296] [ 161.382713][ T7296] syz.0.318: vmalloc error: size 25088, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.382988][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.383031][ T7296] Tainted: [L]=SOFTLOCKUP [ 161.383042][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.383057][ T7296] Call Trace: [ 161.383067][ T7296] [ 161.383078][ T7296] dump_stack_lvl+0x100/0x190 [ 161.383125][ T7296] warn_alloc.cold+0x95/0x1c1 [ 161.383181][ T7296] ? __pfx_warn_alloc+0x10/0x10 [ 161.383223][ T7296] ? lockdep_hardirqs_on+0x78/0x100 [ 161.383261][ T7296] ? __get_vm_area_node+0x2c5/0x330 [ 161.383308][ T7296] ? __get_vm_area_node+0x208/0x330 [ 161.383353][ T7296] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 161.383397][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.383433][ T7296] ? rcu_read_unlock+0x17/0x60 [ 161.383467][ T7296] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.383498][ T7296] ? lruvec_stat_mod_folio+0x239/0x390 [ 161.383535][ T7296] ? rcu_is_watching+0x12/0xc0 [ 161.383573][ T7296] ? rcu_is_watching+0x12/0xc0 [ 161.383609][ T7296] ? trace_kmalloc+0x101/0x130 [ 161.383636][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.383667][ T7296] __vmalloc_node_noprof+0xad/0xf0 [ 161.383697][ T7296] ? vc_do_resize+0x249/0xeb0 [ 161.383732][ T7296] vc_do_resize+0x249/0xeb0 [ 161.383770][ T7296] ? __pfx_fb_match_mode+0x10/0x10 [ 161.383808][ T7296] ? __pfx_vc_do_resize+0x10/0x10 [ 161.383854][ T7296] fbcon_modechanged+0x342/0x700 [ 161.383887][ T7296] fbcon_set_all_vcs+0x1d6/0x460 [ 161.383942][ T7296] rotate_all_store+0x315/0x400 [ 161.383973][ T7296] ? __pfx_rotate_all_store+0x10/0x10 [ 161.383999][ T7296] dev_attr_store+0x58/0x80 [ 161.384030][ T7296] ? __pfx_dev_attr_store+0x10/0x10 [ 161.384061][ T7296] sysfs_kf_write+0xf2/0x150 [ 161.384097][ T7296] kernfs_fop_write_iter+0x3e0/0x5f0 [ 161.384123][ T7296] ? __pfx_sysfs_kf_write+0x10/0x10 [ 161.384159][ T7296] vfs_write+0x6ac/0x1070 [ 161.384184][ T7296] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 161.384213][ T7296] ? __pfx_vfs_write+0x10/0x10 [ 161.384258][ T7296] ksys_write+0x12a/0x250 [ 161.384281][ T7296] ? __pfx_ksys_write+0x10/0x10 [ 161.384314][ T7296] do_syscall_64+0x106/0xf80 [ 161.384337][ T7296] ? clear_bhb_loop+0x40/0x90 [ 161.384367][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.384390][ T7296] RIP: 0033:0x7f1a86d9c819 [ 161.384412][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.384434][ T7296] RSP: 002b:00007f1a87cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.384456][ T7296] RAX: ffffffffffffffda RBX: 00007f1a87016090 RCX: 00007f1a86d9c819 [ 161.384471][ T7296] RDX: 0000000000000009 RSI: 0000200000000000 RDI: 0000000000000007 [ 161.384485][ T7296] RBP: 00007f1a86e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 161.384498][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.384512][ T7296] R13: 00007f1a87016128 R14: 00007f1a87016090 R15: 00007ffc19295938 [ 161.384544][ T7296] [ 161.392506][ T7296] Mem-Info: [ 161.392527][ T7296] active_anon:37988 inactive_anon:0 isolated_anon:16 [ 161.392527][ T7296] active_file:13131 inactive_file:41411 isolated_file:0 [ 161.392527][ T7296] unevictable:768 dirty:581 writeback:0 [ 161.392527][ T7296] slab_reclaimable:11362 slab_unreclaimable:91806 [ 161.392527][ T7296] mapped:37533 shmem:29688 pagetables:1335 [ 161.392527][ T7296] sec_pagetables:0 bounce:0 [ 161.392527][ T7296] kernel_misc_reclaimable:0 [ 161.392527][ T7296] free:1296926 free_pcp:13023 free_cma:0 [ 161.392606][ T7296] Node 0 active_anon:151952kB inactive_anon:0kB active_file:52524kB inactive_file:165448kB unevictable:1536kB isolated(anon):64kB isolated(file):0kB mapped:150132kB dirty:2320kB writeback:0kB shmem:117216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11664kB pagetables:5212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.392681][ T7296] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.392754][ T7296] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.392840][ T7296] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 161.392915][ T7296] Node 0 DMA32 free:1242392kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:151952kB inactive_anon:0kB active_file:52524kB inactive_file:165448kB unevictable:1536kB writepending:2320kB zspages:0kB present:3129332kB managed:2537260kB mlocked:0kB bounce:0kB free_pcp:46816kB local_pcp:19472kB free_cma:0kB [ 161.393000][ T7296] lowmem_reserve[]: 0 0 1 1 1 [ 161.393063][ T7296] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 161.393147][ T7296] lowmem_reserve[]: 0 0 0 0 0 [ 161.393209][ T7296] Node 1 Normal free:3929952kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5280kB local_pcp:5280kB free_cma:0kB [ 161.393297][ T7296] lowmem_reserve[]: 0 0 0 0 0 [ 161.393360][ T7296] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.393621][ T7296] Node 0 DMA32: 2182*4kB (UM) 1482*8kB (UE) 659*16kB (UE) 0*32kB 52*64kB (UME) 181*128kB (UME) 190*256kB (UME) 61*512kB (UME) 27*1024kB (UME) 4*2048kB (UM) 261*4096kB (UM) = 1242392kB [ 161.393895][ T7296] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 161.394074][ T7296] Node 1 Normal: 5*4kB (UM) 6*8kB (UM) 9*16kB (UM) 14*32kB (UM) 4*64kB (UM) 2*128kB (UM) 5*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 956*4096kB (M) = 3930004kB [ 161.394351][ T7296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.394375][ T7296] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 161.394398][ T7296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.394420][ T7296] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.394443][ T7296] 84226 total pagecache pages [ 161.394455][ T7296] 0 pages in swap cache [ 161.394466][ T7296] Free swap = 124996kB [ 161.394477][ T7296] Total swap = 124996kB [ 161.394489][ T7296] 2097051 pages RAM [ 161.394500][ T7296] 0 pages HighMem/MovableOnly [ 161.394512][ T7296] 430858 pages reserved [ 161.394522][ T7296] 0 pages cma reserved [ 161.429249][ T7296] BUG: unable to handle page fault for address: fffff52004893200 [ 161.429278][ T7296] #PF: supervisor read access in kernel mode [ 161.429297][ T7296] #PF: error_code(0x0000) - not-present page [ 161.429314][ T7296] PGD 23fff5067 P4D 23fff5067 PUD 1c6bd067 PMD 0 [ 161.429361][ T7296] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 161.429393][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.429435][ T7296] Tainted: [L]=SOFTLOCKUP [ 161.429453][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.429470][ T7296] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 161.429521][ T7296] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 161.429550][ T7296] RSP: 0018:ffffc900044776f0 EFLAGS: 00010a06 [ 161.429574][ T7296] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 161.429594][ T7296] RDX: 0000000000000000 RSI: 1ffff92004893200 RDI: ffffc90004477778 [ 161.429613][ T7296] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 161.429632][ T7296] R10: 0000000000000008 R11: 0000000000000001 R12: ffff888026ef4351 [ 161.429651][ T7296] R13: ffffc90004477778 R14: ffffc90024499000 R15: ffffc90024499000 [ 161.429671][ T7296] FS: 00007f1a87cbd6c0(0000) GS:ffff888124440000(0000) knlGS:0000000000000000 [ 161.429712][ T7296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.429732][ T7296] CR2: fffff52004893200 CR3: 000000007d5bc000 CR4: 00000000003526f0 [ 161.429751][ T7296] Call Trace: [ 161.429760][ T7296] [ 161.429778][ T7296] ? __pfx_sys_imageblit+0x10/0x10 [ 161.429826][ T7296] ? queue_work_on+0x11b/0x1e0 [ 161.429869][ T7296] ? lockdep_hardirqs_on+0x78/0x100 [ 161.429900][ T7296] ? queue_work_on+0x141/0x1e0 [ 161.429941][ T7296] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 161.429978][ T7296] ccw_putcs+0x92f/0xbb0 [ 161.430030][ T7296] ? __pfx_ccw_putcs+0x10/0x10 [ 161.430075][ T7296] ? fb_get_color_depth+0x120/0x250 [ 161.430107][ T7296] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.430138][ T7296] fbcon_putcs+0x3b2/0x480 [ 161.430170][ T7296] ? __pfx_ccw_putcs+0x10/0x10 [ 161.430214][ T7296] do_update_region+0x2cf/0x3f0 [ 161.430252][ T7296] redraw_screen+0x63f/0x760 [ 161.430293][ T7296] ? __pfx_redraw_screen+0x10/0x10 [ 161.430336][ T7296] ? fbcon_set_palette+0x156/0x5f0 [ 161.430371][ T7296] fbcon_modechanged+0x467/0x700 [ 161.430406][ T7296] fbcon_set_all_vcs+0x1d6/0x460 [ 161.430438][ T7296] rotate_all_store+0x315/0x400 [ 161.430473][ T7296] ? __pfx_rotate_all_store+0x10/0x10 [ 161.430504][ T7296] dev_attr_store+0x58/0x80 [ 161.430540][ T7296] ? __pfx_dev_attr_store+0x10/0x10 [ 161.430577][ T7296] sysfs_kf_write+0xf2/0x150 [ 161.430616][ T7296] kernfs_fop_write_iter+0x3e0/0x5f0 [ 161.430648][ T7296] ? __pfx_sysfs_kf_write+0x10/0x10 [ 161.430686][ T7296] vfs_write+0x6ac/0x1070 [ 161.430726][ T7296] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 161.430761][ T7296] ? __pfx_vfs_write+0x10/0x10 [ 161.430798][ T7296] ksys_write+0x12a/0x250 [ 161.430825][ T7296] ? __pfx_ksys_write+0x10/0x10 [ 161.430858][ T7296] do_syscall_64+0x106/0xf80 [ 161.430887][ T7296] ? clear_bhb_loop+0x40/0x90 [ 161.430921][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.430951][ T7296] RIP: 0033:0x7f1a86d9c819 [ 161.430974][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.431000][ T7296] RSP: 002b:00007f1a87cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.431029][ T7296] RAX: ffffffffffffffda RBX: 00007f1a87016090 RCX: 00007f1a86d9c819 [ 161.431050][ T7296] RDX: 0000000000000009 RSI: 0000200000000000 RDI: 0000000000000007 [ 161.431068][ T7296] RBP: 00007f1a86e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 161.431086][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.431103][ T7296] R13: 00007f1a87016128 R14: 00007f1a87016090 R15: 00007ffc19295938 [ 161.431131][ T7296] [ 161.431141][ T7296] Modules linked in: [ 161.431159][ T7296] CR2: fffff52004893200 [ 161.431173][ T7296] ---[ end trace 0000000000000000 ]--- [ 161.431187][ T7296] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 161.431234][ T7296] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 161.431259][ T7296] RSP: 0018:ffffc900044776f0 EFLAGS: 00010a06 [ 161.431281][ T7296] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 161.431298][ T7296] RDX: 0000000000000000 RSI: 1ffff92004893200 RDI: ffffc90004477778 [ 161.431314][ T7296] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 161.431330][ T7296] R10: 0000000000000008 R11: 0000000000000001 R12: ffff888026ef4351 [ 161.431348][ T7296] R13: ffffc90004477778 R14: ffffc90024499000 R15: ffffc90024499000 [ 161.431366][ T7296] FS: 00007f1a87cbd6c0(0000) GS:ffff888124440000(0000) knlGS:0000000000000000 [ 161.431394][ T7296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.431413][ T7296] CR2: fffff52004893200 CR3: 000000007d5bc000 CR4: 00000000003526f0 [ 161.431434][ T7296] Kernel panic - not syncing: Fatal exception [ 161.431595][ T7296] Kernel Offset: disabled